evmctl-1.4-150400.1.5 >  A bwgp9|qh(\ <.*MrbrbGAYP0^ A`¯wgz^۷_y9\d"?\N|Uop‘/7Z!i< +`#fր[w.6Pl#(7yu)qG¿ߪcʆQij&҆~MůS"w ` ǵሩ\KZEs"%Dtɝ_y\T'OT Ha183a811adc9f728aaf946fd37ecba314a3afff5d80791dd6c99b22c3e9fe0a6f2d82a377b6d240d3e084027d5e41220723dfdc17\bwgp9|{Lҝă2SKYVņ%\h^$ucSQذocpxh2%@:m=ؑ{W:\^}'4]?TFXČh8MʡtaԌd)џWBa{ Ysl6m.gbo E݃&x3ӖQ)@k`8 Q_:rF0(ASmawOZ}J 覞Is+rTLӏ`*>pA,h?,Xd    0 )J\ r    V X`jt(890:B(F(G(H(I(X(Y(Z) [)\)])^)/b)Nc)d*Ve*[f*^l*`u*tv*|w+x+y+ z+,, ,,TCevmctl1.4150400.1.5IMA/EVM signing utilityThe evmctl utility can be used for producing and verifying digital signatures, which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also used to import keys into the kernel keyring.bwibs-arm-2)_SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Kernelhttp://sourceforge.net/projects/linux-ima/linuxaarch64߁큤bwbw59468de09e8ba013bbf102dbabb84748ae2ca9acc3e24b9d5359a5e09b2219de3a89b5a3c22e2ae5040f76148f9d4861c93a0d4364b87aacbf7eff9e794a3910rootrootrootrootima-evm-utils-1.4-150400.1.5.src.rpmevmctlevmctl(aarch-64)ima-evm-utils@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libimaevm.so.3()(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libtss2-esys.so.0()(64bit)libtss2-rc.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.4 * Elliptic curve support and tests * PKCS11 support and tests * Ability to manually specify the keyid included in the IMA xattr * Improve IMA measurement list per TPM bank verification * Linking with IBM TSS * Set default hash algorithm in package configuration * (Minimal) support and test EVM portable signatures * CI testing: * Refresh and include new distros * Podman support * GitHub Actions * Limit "sudo" usage * Misc bug fixes and code cleanup * Fix static analysis bug reports, memory leaks * Remove experimental code that was never upstreamed in the kernel * Use unsigned variable, remove unused variables, etc - Upstream bumped soname to 3.0.0- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xslima-evm-utilsibs-arm-2 16519680241.4-150400.1.51.4-150400.1.51.41.4evmctlevmctl.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utilscpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=73a4c918454e69441edd5a6bfa6bf887f7910777, for GNU/Linux 3.7.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRRRRRRR R RR&tYN(Tutf-8f97cf5bc3bcf89aecc402855ec5b3adbf2e6cfb300215f54e8badf049e1355c3?7zXZ !t/*hy] crv9w!K/жJ"QƵx˛JU5ߒ I69'VN˰eqk!gb 뗟rvklPjtS'l,&ِ1xаMa62qyvfQ>^nLOT"l1"G{~ cR+ *QZlCŅJ"]U{a14ͦ$23%_綸06)u~Teh"+fQn?d <+ An<-nTw+3X7$8m pnqE%BysqI=D-O 1Z÷05Rma~zWOe)ʥMV"Ԅ崬76,% A9V `s{X/'Q6zƼW8Y7R?{CO8v}{Ni'r=NIdEԲ_#`=.Ȧo^9a<7<Ĩ3f uNRɯ޵#:*)0-z|@kr?-vX9J:< nnC@{RՑM5OII}LOer0ZvZ\{jOdH\BUL;}vlsX7 ep'UJR_eS~dqfzz--=M#/{N.d}@g/w`h=-uU9l^ٝ-/!-@)ZJ}O*d-+~7fIJG`6VZtAd\%}BsޜŒo-HEɈAK}> v#{>--MK70~݌XAT>FBzy3+vk8nLT{o-_f̀~Ag<,L?WORL3'Q]f.P;LMIg(QK|){JOY9]Wi023F) '\ av>-V6UqHwBv:P"M~{ ԭ9ߚ'(I 毢P007$}<`ǘ&"Y߆82y0ŗ G<0+8Dm?WcW<3^w5ڌ?<_F`Gۂ< * ~|6#niXxĚI?|$?ys33>˙m'Vzf{+z0{WW7ܨT kݧn3+E'z1nohRN© bp.diK㛄ػ#_ ZNӔfB(Jb1_ڰXMpoj*|A^.$˸ubx(>ePfYvB]1R ̱"IɒGZ1 K4}輎Q`f\A%yWۻ:tEdoSm*0˘>"#P%ڿ(8@Zf/2'?wv*3Sȱ_}\#w%yM PYW|=9ay[m>`kAC~f/[cnUF>: HVei2Mlǿ($Xݽ4Q^lcHgE8bEd@ҩ *g?Ä4Z@`6"c֊ZqC__3Z(LXY3*oWq_:5wZaGWuk~| ,'c\DM(,F;Á* =.Ml Ԟ/Xѫm9 .9Y\.Zݵfj45`BH??P}XKZ*Ň~Uɳ۠݉>@L=5>N*Be!v9LR8UnmdJRY3'g| 7[vkx,(v-I] ҴVՐBK*ȓ)X3Ql`ηh8D Sc9Kԉ 96(WyD)%P^k携_[Q>k[ :=2M#\WdL14AY X)~Q$#g7Ď>&C$(S Ń"e ka:YntEXC6ϣW,ޓKW3Wߘ-˭/P\'3LG4Eζ*! @d+[J-`vnSyS{v;-\RZq%ןK | z'R_K//O_SaQ$~F)w,^Uc-jP (W۷DdRUqʔ:(py XυHv]K0+=<;e> (|j8$', \X|zkCD=Ra("X8taj^5P8@&.\۴ټg \k0d Du |?dJӖX /SĂo0[5kfb!1PF)fwWA)!#1O#*_e9puzN[7 {Vl y-YT0Q>vO]AYP_)$IaCO,>I)9k}<_Iwrp18DŽ鴃v@bSQ g3=ۂfBqPU8 j= -t5'ڎh2X0M.xF v NeE蛤@ xٔJ*J%?3azFhLBTءOGl`w$;ٙ'7A(zK䁔ٷsڐ,:(jeNAkLĢ#V֗3qZI8/^mBET*#u_Rī[*#[tƒj!rxC?Vf \%^PGe,_~œOBO%W): OĀ?.Q5BΌǗM>bz))dHiqoM^CAa9ڣzuSW]T)NG>rXe|z-^AeQ"䣶ݡo-bjvn9i7)&sTjUE*pe.0VV`|k4 hMqgĪHY(]BLGLN|C}?E졂ғkIN5T(o8K$yp (R{^A\K/nm-Q6bbJ;r-mb+6P* LzDyTnXhT esA/(N3f^,.^eBgBFŇqrnGQo؜P`'M/0mSxr)8 sݪG_u!Y,&wP[ڧxZt7`j=vvbgue>N˃ 2:_,tTovpoF>fݢ[He/~Ӡ 9 %]-uO O<@#.Y, \ߥ8wd#%ĥO[M Kq}j,`EG9!r,ga[ՇM|؋LӒ^0m `E}>5˄vv~y.'X?ØWETMN/_qq#Ậ8Tu&T`]{K߽F ɣ5H^zӐRWu=`Ew XNlUy>m%E&-4t5F;a"@#)T08U!V'a 4m:5\ Z[}N aX~}䡪h Z7`Qi{(\Hϱ ͭھhU`z/ KIj ^d~9=8o[aGN 4c $B D퟽[ݩ!æBz$LjqWSM8KiOߍhJ3lKxIBߧuދ]xSOZ&}tD,H :Z3췅J&* $6 WOޤsb)?rު4XaXÙwT8Oaj&AU>N/Y&D= r\-˚_vf[+قvW'g Qk2˺phDnm'f-P:х1hڹ~˴ 1/cÙa };QB 9Z qh$wevnm"oZ=DG&}/T>TF_ņI)֣Th{SJRZ)cN5QNj $5nkQUSZ$tx?m~OOߍfr+ tA\֬, jc< ( c^ &9@|T( pypzңm;h$l D r{ի,Iy=kg#7&{*{W7Rb2̰L Ŧ{u봺 >r9.8:π<-C×v$"noz {=)W\V;?mJ^Mk'!0R\5.E.zwd7- tGH~\'$z wź[`dX*>~8dOJSԢќ,V U`zU]dXY.TE"y+wdTr.CWRa@ֆv\+;cx&Sw-ws 1npkP$t%zhz#<_(2lׁfjnpLϫݪCId`-XÞGpVGd4& ğ2BnaB+{◚„iĥ܄Vp^P[l}1VSwŻ 1 { 1̀BKʵIޞʂjk FD(u-kstϵ ()j<܀RӚ3#ѬgbsUBA8 )ш…,Ql <3ZBMTe,yV K)竍+R!H__jqf1N=3Bm&N-1}ە[hZ)JI7EY&&Lc]X_㼎KV$aIum'lO)l(,PwE:#X֨nv+*Sw$m˽`yP5><7J!i˽SM:/LDJs#3Ta9|oM(9`aX4xRN%P{ 9}}ncd-[uoʝXҗDY#*#4xFC,thR&-YBrXW 1hDڿlf0FҺF!Qܢ;Qm%"6$ј_ڬ܀ E7 ͕CD"9UJaH)wEn_tk„KOXo4"k̴aĕO_o[d A݇<6i_5*lQz{c4'l[l[@XJJ'"vdEnv)>Gu:ҸZ5 ljW FƝIٞg%F:N M,LvajT$C%><"0n^v^ʋ#q$o>Lj8¸:Be3fW2\Ic@CqbB;i&H* r:(h 'mzU:+7q>}:~i0<|k U ;pB-cׅB+(9Чr}hxU[k6^*o%r YZ*gY |HC;7ձ5NhsS^ɯJ4̼Y777!ی[nD9E?",︘x&)ӚHn*Ύp6WA2; .HE)Y|-f=;rn,js E>-ڛt{o]N"dk^c =|6FFsb?J,?u8]bB/m۳ҧ"&.jt%cCH΍+4ƟI"N`Zbj'YcMv |!K7-mL{`#S/\{Q,x@*~pF;UVY{DLrP `f9#њF`/1=| J%UDmo9}\yksqϐt_vكXGRKhqxp aU]=nnzi\fS%ձȻ= }eeR fH (R@>ENw[j#br Q˚lWv&%B}Uoz'tŕQTH#+=&4D`ivkZ 1NDH6i+1f%WKL6c{m< );m3bgq[a-9GCPI>˒3՚Ǭn\g:G *w*+=,h<)u~O2!5I=N6>Eޗz\zpֺ,2R־E1TEiW^|q=K`qD܍H29QT"2_BGT&ǚR E-HhJR O>aXwͻ0l}AXHn0`Г t (FFa.&u,a-Pc维[-2v7ͨNy\Zfx[%ưO~FnN|k :OJ G<e[t#N\6}nN٤ׇϭ?h2කJbD5mov{."tY]Z~wYJiH[2߹bS"?ZttDŶ<"4Xrx_T vv[0|O8&fĠW~Cagnc'Q_Q!^=݁^$)ç/-R%?g\ HXn8|~1Sx,yUF-SxD'APb&<FBқD,Iiyu==yznֈ\*ǽG $LrS!$҈-]wXXq5cfJ`yeap/xa KS I >~tȤA_}ZazQq cH7T \_Y慛 tC%1- y:q4v@c-Jw>O/\f^Gi.$'AH)r]i2rOPAE_H2@w^ &Jy\mE.bb]|KAtT$EwiuO5Gi~7m\2;-gA_pa3žV5ɁM *(K aF85HXզ.5wڻ*Wd$m0sHr[&ǢXEI Y^Pq$˞~$?,,4ptNzb*[(KA Ps.4gi=Ϟnmh2жьVۣ^*6.4b1_1k|z{YEu$>5">rRZoG- JYf~)Ynธ+޽FVЦQ|a.w~(vdAoF״EvtFTݠ8-z2jlK3L1d}M ڡ ;h2gX=Aw}PLC*Ɉy>A 41P0 ))^ip6".w~ hŭx-duGd]sVVVQ޷DzU $Ω 03z[5L6.͔c˔S[;V֣УwQE Y(4Ul"󉹫\ ~芯V&!6N66[jW tsA?ݲJ?15yL `S+Z",ag^ƅxnap~!*?o{ 0:[&<#}=s>*o$֌;.3`l|E Ϩ[pnW;bp-CR0J$|PߓJ-J#g l9ȀW$gsP&Ib9Ͷ2Wڵȩz+tfO`/.Դ,xHh^,pSQze[wѵyPTD۬hH@ZFa(1~+ %ǭ3šs\QT'Xv%$k_8;afzx UӲ1JБKvf;.=E-!J/U\c iSw77w1p1 2wdѮȡNb*BhH[_.SU4餕QdWJ:Q]_dhPKVⲾA;um$s ?v.iitB | -}*F/Q@^x8ѹ+r8wKFq6ƞ.wI/w!42`U;i&0r)q86`pTD|T"0bXϘ}n'. &TW Pg ^@"5CITlFG{\? d4, s,FTOjm+T\_odħnA9Ko\gIC:Tw!$= =+<)P|BsC%nnι+ ;D[c]n$FʛQ ]W'DZ݀0bc*\$jLji_K|n9q4ţϰ%9DG054,Hg:ld榛#;] gcpPSF@%b z EVԖgq-}DezcE&*5I-oS(?tyoϼVŴK賹iX0/V5q-.OfHpFm 4N]dw6⋪vny=*N i]ZNQK̕|ᱏߪq)EUkK6j`̻ldd* G5$i|\DIܟP<3l} ')&RSqRUUDbɩmnq⇨-zA'e<_;0n5jG$g<>MLffÝ!Ho*qd 颠3?+ސ^7SSo4UW*s$ۭ! `(ڌ,1[=pY>@#0C) й>92|1Zf)Dc.]Kw*/n~Uvx ]SU0td+H+*9r6h"*E ≱)Ї=[z,JgXV#@eIpif!5T9!DƇӌ'USΨĦ\9s gޢ*TW2Q>tp059rٮSS,;4(/vk xp-]ePKWW ;@4\]=`|C[ENʨ)*l5%/ 1MV}[kjS!u)E NVV+m8dkKe" lF$  BtW*3XDKh:@]w0{ܛoƈ0"K+*{Bæn[ב{_+ &3WԦZZu1'>%A7S" $yJղuxBYz(.PZSd=|E],Jhfn"ww-"M[}:GqK:A[V8HYXQ6p&?TVdM1Lu3ѻc\{jT`󫩸Ff6A-E3LMKTM,EN~O,$2Mq+A"` K<$qc+t.Y?@^p^.:oz췢a)x N|rs?}jn@Phw]ϓ!kQ]ye5l•BV;o"ljJN-;.GID8F+WC:9d??%4p2T ڶp7X 7wsbZ*3٣MU / RfFlAJR;-&WR2ٛamc?&'WԔ D]jNjpRF Go:BqjIYR4xy3yJy j*g|| R1fu_ {,.rXA}@D7{2`ir_ rZ?dƼ"?Кijݦ@Ci4~Wʬ מoMTY$t:F"rDgu*}9fd#(#{W~INZ=KZyy Gqmr"ּhL.wE`:yfXN3SMǓWN?X['|.GJ}cvdqkఏ+\HRs6Hˆ<,qic$1 ݓK`? e wHVC0ta6fzu2ٰUj,`.t>y$GiƲc r雂ڶ/M,F߀\t0T%BjԐ4~Ky éE!F҇8m{ǀkGX1)xqP)EWz_4`>D.iҏ@3'd=SVHBhuw^x_[-k KS*q֥3ZGԆ'b*$!J|M~W̟k닑 lÏS)T5p" ~uԷ-yP_^D=C=ϴn{OMO}|)Ac^nZr~7ctWK ZښBȆpNU- Őy]m(1OVh9/ v7 }DxLg^$#;&LISNQk[z^CڮPSsvXlNIjd)C537&&ۮ#AoZuywH2*o;D>9&WTav.7"U.Q ˭-@%66ԏbɨ kGutՖ#49dYpj6)O_n.?[-~DsRv–<2 li?l=(2""T(V,uR(qLړMUàޢV/Ad`$OBUF7ަTabGHdR`JX&,}Tc'LׄE g"@J]n/w@[w\T7D(oo-G,qћ7LHA:H3.oQ2J6 wm}FB&^,氟j%Sz1e><~Ed.RfuA`WR۽^ecʳ׸&u_e}\g$$FKԵ(l"k_-rom@ުb:VBXZ?{\ 0pΟTkh/J^O*+MJ+!Jg%7c{Ivqd ԍ1kzaD:oҏ(m#T+R=dNLt8 `}mK $C;Ml]gDCmr_fzS/rY$bf &/6GlJ?!AZ*Y C@Z4ꨯ*_><n[SfxSc< dovYlNܼC|Чv{OUɨ7?ez?DB{֒ȯRJBW: ;޸}@q<9t,OX^"heKrwqIq\itTww|p`PbעY\ ::҂#l@tG&h]+a|XK>`M(O wIV-X&`+L嚂uַ$Ԭ>Z&R": a nJ/n-:aD|A@}!EEtTd,Ժ0-XDأ ODCLH!i&9M&# {`>f,^y:|' qƦ1x.T+TE/G-x:b`vAhV""{xN]ԇ9C}Ķ~;c_\я6SA [O+1h IBgGJcÍ+ | ka{((ߙc7b3z;30MQNmf G߯PN%ߟ[Q0땼,$q$_=?,,'8`1QըAV-Tcqo:jdvhv@ fF]JʼnAE s-nka/:ԧ+}OX4ؠ,}G/S=Ftim2ɣւ=`VgX[ȂlsOޟW ")zX62K_ߨxQ@g}s솄Hi4NL%,h {ow*25 }GkǶ½3T׫[)17Epܟ7iMkb](V@7ҙ/@owzC'p@1+Bq3 :wtV ixD( DzHšLМ?O7NB; [6-IA_ %VՋj6NJwU'pSk=\!D96'c"Kfo`Qo Oif "}{WϗI:ϯ9n|ۇ%+\(~{B;%t7JӦa2GFW\'3z."[#:9 Qjp>Numx7H[D4WM BnHHmRMėdT7n{j Oj(oFIRGE,$uVpyx%*5Թߣg̫4[LbLk"wUBT{Z$h;5cNEWrQjח(vÇ|%X+k,4]9z~ft9 Ki/e~.Kmrkۚ8S6G4V׉io*s:0l Aoń`X:DN7* C1o`I5FI }mgE{ X6`Wv ^~,X˥v(&\-hɿ ? y04-Bm ,83@B m{Amqcnbsz91s)Ŕ~ 7#.ikź<_A Ot2J*OZxqGWl(?6<@?ARA~5X5W.zY% }1!b#gX֬0'+} |9(U\u/yǐV\UeeZ)Q=(TEe{ئ uG _K'/ˈ ɒ}n~.}=XH΍ɠSoҊdUi׆=m#@nfa//ك>͜N^yP;v6z eEN %m J+?-_qc:^*F}PqavRR>nT}k^(zg𹴣C2_Pw*ަ5w[ɑ> ؼJ'>Bm9c2plwy  )2'n8+5J?./@ 6q==E߸`A{_ә,ː>xxN!HuUsˋBeS~۵#HWaA*{n8iA;5d"~>F9¬2D5Jߺ1>"SBUDg{ũxlu En;^EMe`QC@gpZԔr$NIEKUa:wӧ{.~d'=,KU.CdDFK$x(!n ZJ3m3rsfzDK1|hF`ցEL1BOa yWϱ?绘(sa@"Xqt+9.cP|;<ܢa;p/~y\5GIu2.x18JΨpW,gjJƒ}PIxoØt{t( ! ?V֏yߺAPrnz󏳰5/ rGf*A$<`[js^\gv<-`E#ya'B%@że?‘:zOr3Iظo=q\5KzR &G^4qC^U#D0:X~jȓSw#5pٳV`;]/n75(}_ 󈧶,uw0kl}>XbNK54W/.>UgO^d GOs0Euv2`'OF.bGht@k8_: P%cbOo,42ZpzaxŖ0O 3:F3~Y) Cd&dc6wLQ׶ - >W#8mX*Ӄk6/F^[Kn^eZJj|tQ?bkJ5FvK!!?GKLn 5 V{ѓ"8òGҹ`'Rν ws5I1B3ہB/egcZNmpb-!?l~N;CU?yE`H-t}fxB}4[jv6 B:Н1]€$(@~{j^|#tQj9l/HpLAF mK)mu^a9䦧2BZknLle/xX]L?8j|8 s^D/X3(-X^\qSh|+/pYVVH`F#i*2Z;UrmzYm̝ ȭ#dhVzN3HZ8h{r8~l7W>DsiZ:rNJzRv "uI""ꗏbomC%]ob-!-(f:(99ڢ}9#%b D7zSCY٪_Cv3iw[8#wTpn$7tqM+ $If3߶Sx_%,&3rt˼;!_];+|5kE ƶ^tҼN7Wʂ]rӴԂ4\: ~R+Ä3 pgest<:{@Qٖ5bpX*'wLg=@PBӄ,9y!DCaA=kJb\B\d=hV;h)72GRXpǭJI&射 ^hfqX@WX?:ƝV rlېerl_ᡪE1b}9oʜo69 o0R1G/T7FA恒OtP AJb@xwf2╭XVK_UDbJU YjqSZPM o"0qp$i1F!9'lH+?Fha7̻>*t~i$ !JUUG_y7`=ׄ2QUA,