evmctl-1.4-150400.1.5 >  A bvp9||G"IU@_dyGYS/1Py3TSZ @3;Qm.W6 -jڴTq SZ[p6 gvك@ugu4MS{CЗ%*r z4J% 1HwƋʸ=9 XڐbRm5iT-u# k3r >-$/*>pA,?,d    0-N` v    Z \dnx  ` (89::B(QF(_G(xH(I(X(Y(Z([(\(](^(b(c)d*e* f*l*u*$v*,w+tx+|y+ z++++,Cevmctl1.4150400.1.5IMA/EVM signing utilityThe evmctl utility can be used for producing and verifying digital signatures, which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also used to import keys into the kernel keyring.bvvibs-power9-13)SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Kernelhttp://sourceforge.net/projects/linux-ima/linuxppc64le@߁큤bvjbvj80065397d1b171102d27c48d7f372fcf17bbcae01cfa11c3089020ee528efa933a89b5a3c22e2ae5040f76148f9d4861c93a0d4364b87aacbf7eff9e794a3910rootrootrootrootima-evm-utils-1.4-150400.1.5.src.rpmevmctlevmctl(ppc-64)ima-evm-utils@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libimaevm.so.3()(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libtss2-esys.so.0()(64bit)libtss2-rc.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.4 * Elliptic curve support and tests * PKCS11 support and tests * Ability to manually specify the keyid included in the IMA xattr * Improve IMA measurement list per TPM bank verification * Linking with IBM TSS * Set default hash algorithm in package configuration * (Minimal) support and test EVM portable signatures * CI testing: * Refresh and include new distros * Podman support * GitHub Actions * Limit "sudo" usage * Misc bug fixes and code cleanup * Fix static analysis bug reports, memory leaks * Remove experimental code that was never upstreamed in the kernel * Use unsigned variable, remove unused variables, etc - Upstream bumped soname to 3.0.0- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xslima-evm-utilsibs-power9-13 16519635101.4-150400.1.51.4-150400.1.51.41.4evmctlevmctl.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utilscpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=a4dc4cf68ab7059414206c5c0cbe1c9e0fe8fafe, for GNU/Linux 3.10.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRRRRRRRR]x5w-x@&utf-8386bdea3c770a077748df2c311688874dfd240656e19336b5b8f96f33480dd47?7zXZ !t/*t] crv9w ( U CRN;K[SGz?ϱi™h'>%-dNΊ%3Qca*8#Cگ/LPS)8m8bCzUӕV*ϕmS,yQuF t>Q٥q0<?<(3x׆T< A0hKwIuWK8/8ӿ󧿦yLH;k >fX HwL4*$BF;b<JMJ NZs4Bl,OKagq y3k4ilhfIS~p暄~lxDb(-0j"`zR0 j䇔:n?q/la+8xbvY=t > DuP&m"|"St(;FȹUy/l?>p!=9zk6?e{G_|B-fK,T?0>&TT& r D&syZ85O/W>fNw$v92C; &󓈭`{<+S 2{%J&aip:5,H8R[ٻ ԩ!AO]6c1^e>#Tp=nO,u b&9qYK?8l6MI4cUyC̋`!u^qI;RQgIkH q7OeX[~}FKEX%נw2uҐ ؞"8).Q>|W{?TH?Q& ̘ j9vPxTS>fh5Ͷl3[QzC떻B.@=-BX)!&o˗h-w>i~%6{~y/HB H)?'@4ezyhN9tyV25 ~oI=$ V8/=ԉ'*!L5L`q{?'_Hzx_ȧ]cq%h] pk$EZx'@󉣷%)/3 1je"v kaWN4}~veA!"VIGeG۠\M0Ee%c^%I[eqA')a4fߦeK˂]@5f 7_ECk6-PLʴx]2K4 Kql)WnS7ViwYi\2&+$Ĝf3sӥ?R2@!}/kE ".C ]Nu >$HȈ|aU%ѹ`TLIf%bWH2푐"G(Ao9x܁e1 e;=L F)uYyr@Rbr^F W\ލo:" p XPΜFzUG!0Q8a?HB/* < 4eN-bڧ"y5U2b6U)oZ{ϴp!{7s͸p[Vlq=a5ϾwÀڏ1twV|EB %m쮖 2[};dǼ~޺q+dT:Zbcv! in??OJJ ߿ Wwamv [KVvoӰFi)z3ECtsa7A*km[#׿o>.Bk/c4t}1MPk8O?nM˪Ey!B~r61̑"`4JB@.5SĆ֦۰z2@՝(p*i@P;Qپ;g u T.I2v"F瘃G~dxss0W o3rR~`8Fia`o=eQ{xZ RHޔQe_EФ! +6gX~;]eBx0q[ ޹MpYoo ;Rk8?>!mn7'7PhfRF#cG`kK'әGƲL.cViƎf>{s=rZ^ݰ^?笝7s˲̲ҜO$  fshslaio\i8 9D_= (WŬV$+ J$f2!.7,N6bz,x\7_Yy `>qJe杯sn"P/CS}<[G_>6g5v$Q$<so{#;u(%P05эhxRoAמ/uᖥ ( -dÍ˿>J`aYѣFf ]w9(:H%#^#dN@5N56텊X _O؝\ٱ,,DwzJ,AeI,&qm7r/[aZMux ɢD?:TۃGWfwo^Ŭ{=!**1eօ厑Ua@ [fsyu"5O;1X 3LxL4?k *r=x\ZO~,E pѦ&Faêd1%&V%IvxsÛCG*2@'VۉAi[C~&VS[&&+Dҏ0ZT*5ia=L%"_ǐZ;#ݧғfXSi}][o(\jnM98* U W KH \X pFɯc(@Z(O{UtC2ĕE9?ӓZF-f fKopSv8WfxgU2yufbUfye0oŤ\>ymH b8x(_htA lQ:ڕKH2ɔc4˹lS^gWH9T:lS-6.>Ik r7 zХ[cU677 sQd LjGaϓ?d1쇒CJ~2e1PͿ59Wϱ#Q*x{Nv',׆z' lWҝͧF큊.(xާT$EV)`CVDuǞ;37jTêр_}S[ۆ̢8IXzPB衰`Et9_Ƃo6U7n U۳XZ< JAAo,i=`?_ Ott(F/CqˑwW`K;)tm17&s-gD稌zk뿻;-;It6;3 HҤNÝ% dpCMQ?cF(zqgl [C@ZkKBNhz(`\zF\PoUg~ZRY@ jNtӷ:ݹI 7λl}3FJda i_=yɎ[[\tE#}L<\ Af_~ (L:a_Sbx^Cg,Q^t썊# IhMg.'F1kAiԫD’9H2c Q} \0_`sܞ]K:˟}k/l" Ơ¶hC=k%CR C9 tD윲U;rn C(GMaEV (H&]V\Ů^kO7QFoV1f[GMqO4WgL  )eM)NߚH*ތ_J=Br(ED11E),k:"vawrۼ;(pm]k:S2 ʕ]?{ 9jỎvBmP5QDEeZ.4*>z3O qK1cͨ,#s1/~{!e|Z'g*y&Rcgɼ̞kٟJh,uUD 5Dbfkm~`ύ{tN~Dp?VGS!Ɍ@Q<#_:q+4#y - HkjcpQQ3Kc,l貝R3=H9qd9ɦ9l\pAXQ|񘸧Xdݸ?]և<Q,B,YѷNp'h׶T/V(vN}}t">+I;ϱm:t}3n8r& 5G^iC@eo|(2foEEwvn,NHp7. DŽ6o_ cH,V9g.5a~gE5ރq-7K_W)m݊rhC\W;Xu3Q%V K}D+PPfXŵWn~<6q!au)%p=>{bG^< ʂu~ LESM+zFSlWY($&Nb$GV?@''5J.E9Gz H:I^~E 0tɚ (OuWp)`#+SM1$Z؜+Y^v}R7j$JmQ}36reD /]u8 =AP_ŻLg0?(ÜiC% u!0SI;UAvDM% D_^t؎oe6DVPץh ' S4Bq~hvAojRB?,oQC$6 p„@Eय8ᖨAewc0@7`2"7FCp,s Q T(!J' L`~ӆ-hOmfɑhvB}(ci˒a KyJyͦ6DD}yp$+C1ȕͶjw Rt\%^ـt( R,vp7@yol$ Ydp 0٩-υ*o: Q_m[RTΰDkL guBZ%\js =vmY1e"p@Ăf۞}n%XLľ*l(y]9kv~-6bV08"H=} l;D;㓌Sp.ʮC\zAEZK0by5XGˌwH0,a^7*KVe%*_r^sJFZ>| $pz|/?DBFFaX2Ie%: 6 ƯR&#Zytc!3zZuSs移[n1<`9êcv 5ь( V"fcj\Ё j&ZbjJo-!CyiS"1LT~?r ^ i6K0e%,oDw132{}bxg,X{π$|ksЉIYDXO֚MU%- BF{ߜ皭Fqnh}ty1P3wYy.qWGU + ~er1h@@^G^< Ô6"\BTO/| [qr҆xiEvЭv4xW[S/ކ*J5b䓴#L1 m}Oݸ+"5؊*3[v:`=wk^w5Rd-x<öÖ́CxʅHRT.2`?[=i6:: +1v^+v*s U ƗPWXPŘaU) mx-2[&U垏BHP/4쾻ĸኋC}vVh1>q Tu ,:pz3VcRu&7`XLu60[-l ޯM/ LEt#HbxWjJmwx%G@6f]M4Yy d9RkؕZM6jyFi+32/;)̍"q#G`>9UVyiU r50tr3OF@Vɦ:\|Mo_h4BrY,4YF[谔c˚w=^]޽__NV״t@vC!״ vO[ff}tx4@.nTɽR'$@@_rOI ʵqP{ KlJ#Pr#`hkwa?8&;n1s=wc%aԐp^3ZP7wͽ^<1 ɸn%ަpɠNPPs6T0vW޸3s fec Scg?ybePM/1!lk)osr_+=c-g&_;gUyw0H~x\m\tL!q]eۛL֏ lln HxJyJw&QS/Rb.j Wfۈ%!|9[ đ*"FFʋBz %+rtyg#_ky!ePQ*i"<#;l)1hF{p]Nd_{4~Al:\ j@zL<=+c+NZDG3`"$[0FswE :Fe\]N|`4^ԁR`°1|NۦbE6Av!jL 4jѻiyWk/z"'|DFbL>g1'1HqLW/en@"ZTз+[p&]q3-nn AVT$K ~ok/7뷱p~ݹLTtC)^e߃:Ǎ:;(Gߊ`yXڕŕj-s`{V s7K:v1d}ɕw/ [x2BwW0 HW0Qrr 5͂qQke=fHQt\z*)D]7]No1ksXVR! zhJփއ+9RYHghlQp>HO_5Vk+pqX<Z$9 RW^S/&bQ` k"!rH˩0hYa~>Oa>I"q6t{^Lk̾` +ˬzEЂ+ 䯍 8|!9lC, 'ս@ 'In*dm|.(A k}D94Iy@K;*{qsg+t/kŕF ,AsG29C|C babnT`uɨ9"=ZP/qK-WfrS{p91բ+{pEP0bͷxn m_﹨J& R\Ғݐ8_Pe*ÄyB2?eJԽԇw-i( tZ弈Lw`o)lT{ 3Iqo`!e- SϸfW\tItâtG>&@](ǗtTYUqv+{o-UBp5zʀ- -@6 8{9I^>zac 3Y)[xkZ3Ujus< fm(kd$D(~J;l ¿TRwMv0#LE6 z7]CqǺtE3(?Yvޒ+@Dvp`jHnϵ*VB; ,ƩHbNڭOACFI;N^]2+[MJ0^ǶRH-\R~e&AVDgz+̰F?f`li0O!,REGqgMI9 jnasOWlx-TTruy?!F]9x!c׬ 69G`tǖY}S~jA(Ӥ1ۇQe>|i~Rv{ǻEI3~ug ?}ZJAR 8fU>lV $@K&*. mClrkcmԟI'd6|g Qܬ4 S2FCmD:n^DϨk['7GRb7ωhbŜjW|eOߞN.$)h2L_^ڡhfce 䪔.݋ʨJ-YeV2kP5;`#O aqheu°iLmtU ;-qӫZ%f2n'3駾c\  wf_-)Vv {0cBd! \N icj5arAxhVs o6W+:ylB8372?/ W)&2'{3x.񃒂:-iYtA} ; J斳͑Cߺ55+w-ȅuu|"WUx$$8u#*^€qDuv,R4[L$,1yMQI5̔}/^y L^VJWPT::(3$ؐ`bm."%;+=Df-ʸ~8a(>냠ʐZ*S]j\ nR~ҼuC5${xzef7[MͲWڔ,A10(V"6q_YD=@r}l !/c:u:`IW = 2U wHֳȩCe&K -*-I%AeUWL`Țwn:;S<]c %4UU6¬ `\gKuJ:[%SNJvFHNVf}[vae|)T4cN4+h7쾁s:Kp z.m}gƤ.#?nnbN7+r|pz-SDȮ@ B.f-z!{*+`RE~1݊lQqQBL֌,@;eͭY9UABWJ ;Nǁ,' sX42/Z\fVDOs.YDB_o )\\[6 E 7?X`yb pڇG@~@gXÐ@g4>T&,{I/MrrbH:TZUȉ5rf>h$b o[SX>LU9KL=v(cRTY6s[v\hVnk·td|nnHTC{!<-"v- Ǧ*ؽ䱂7 c`7+8Osh2s5ک6$a"%g. ӕT*kLY JPnMsyuuC:{86I,%zpN˷ m$u :cl Wl4n u ۃR 3Ŭ@P{q,><>zT1$t_S7Oͫ_t[}^^С5KwXu24xj- 4c$^Y*ՀmdD{RH.)Yck_pMy[ze\.OK[/BWYg"\2vCqX $6a))2Ӕ.G\,(nԁw'UX}񯚬iiO~C5TJaxdlbԿQ ͞99R(pj?4n0& x{x]bW(X5O1U]W:Xݭ{ӳ(2D*72HW:-O.F'*Ą jdgѲ Qg𸈰z+uea̝8[abbEPC~8\"EնEֽPsnc%-A8롚[IF5aD`F__-2\ADh1O${.=ߨca[Zs0+V*'$a J Z_αBRJ&Ki ƙ\9!niݐ:>=.(CHU0TȔhN1j[<h߾ Fc|V#ڃ (+%2QFv}}BuJْW45bdqÅ0n1Z] " kf{ Z_4L!q#z`qk46hW)ek@ 2t-A֊gl*E0@[yw܇\1"ԁK~){0b%؈~R 0!Vٌ%%|ɀxɴ#B,ɧ"#ejي٠yGw!/ H>'t~d0񎫛smyfSIZoXl; b^UJ";&2훢5iV2=!sn5OT3)qqn]1,\ER)L<79Vtu2Q%XY7MpiV%r-ի{x:fm;'k,Û.܄2j %<ӑnVb/aLjY~kR Ji6l:p@ p +ۘMJHm*v=k4Z3U{2i#/RR :M)@]eSS-4@02mefx'234yn7*N/FGJW I,“LNb* MzF7+vȣRTSOU ^>q#\OS8yT-&Hnq F(@I0^f02}tݥOb>r+[/qGȰD+ClxW>eè\yX qͲ<7" rے\l$z?mꀡ8A›eaV֪@XBВ.ɻDlu+N!eAF[_vHsh}֊{2I`z ^Btnw^ FDf|f􄆁*@zmG 9ҌNd)d`d5!i$r6OOT,͹Õ<;iCrPІRtuV2n$g;d3!w>y"e43)Gv{/_3# ޸o!(xj|T=]Dv9_@rɌ;%]5ieeSE s2:C?u%E{PUAw:SiSnSm' G<-^H]tnr5 NG'4W)=j ,.N#AFS>r|k$qty΅S+ ^L4vSXmiuJͷ[9}'#\%}lݜ@u X(WlPxR) twd bwX]Mok*Ab;dj(]Ѽ>w˴a~M)> /pu\m|[$gTT\Qc{9 2Ŧy boo $7lPQ 7xdlHISx՟.`Өq?A"**B1-zZSbF8_zfN-$F:sEX?DmJL'2Jv0]"zJ?IDyrXv@lp"xTA "d,ׂ?)6әa ݻ2Pi8OJ l](wh@o"syS'*OFb[gY{بذGg&VNqU%ߙ&AjT-gө8sҼpLG(Ы3r(̷KLo/c~CT@w_r〛S<$\^zl!'_VR2γ$6|. EIAl]i?= ׮<;ςFFҌ^miX-ûdoݘ̏O^(|uXӹR 3o%p1f5LTKWWˎH;{I(JR) ڜ> V&Zɝ N=apY0+*&7{))sYwL@hH='yqi˖W{ rq 9$,GKwK#|`?1!L˫ {WyٷC0)ixLv(Jzʲ1?jH!CT+eP.> *<QY&1 !i3g_*U*j\e9OΔ =#I5:&jB« i;jf{N#"VJ[^V7Vɕ Ar./ecc5 BR!1b(^Őϕ)'$ZY3Xa|3.Qk(d&^F]Ymz&NhFt~pgh=`0aFRyy˽w R$S!aP~ety~L/|C@C,$Z]'gǁϺބYEsc*Y+Ol01>F(RMg^~`r!peV 94Wk>؟)& :?OHmatDiGEL[QFɨ/dx&k(+5/8h|P''rr@4kx;OEh$tDNow0쐾3@?teOų2w'~,1 es: \q) jP{?@<0=[HD͠=o3$*ә bS{z յ^3whlX}c<fiX$HQ;IGLЁNYUfD/joʌRrֶ+gC9fuEmL} l\iѐw]g٤? < S0ʪKÇle̖[%muѸ:YPK;HCD5KKE?c![YjaS6o/G4ńbIjP4kuY.lY"C Ma `k,Lď} 25%w[蛮kzԚGMk&@mN ޒjpIĸZt%r&#'v)ЙQ}>W o6生*H 'Ug0Y6-0R6l';5}'0[W5kIaġ%041O7wC^Bg0 obYg<%}~J|g`G4}y{]p1h~#0khʭm1NJ&tuD x9UxrEY9]Önlm-RW ܋)[@[׻!&t =[M txs$r3id>6i@c8s. PM=mLS"4~Ečxk 0VQ\^1%Pڬb75v}m7cT}s2s)+&A%GtD%sKxa!ʍ[Yy^OrVj.3:hZL!m;Av<+TPP!4}iv8GIэWDħ ;:?s'h> Q{gx/l3fXggƒfnR"-l^_L֒L|u,[x_$@- `DnMNzZ !r!cOc<.BT@)npE;p~_VR6M,&Ҁ^+h_S/ YQq/jMO%P@r+~VyF>{}}@9V ҅"uRYjIÑ1½[@U!C̜/kU {d=Kև oJe`>hFJ¥BU{9:WG} _4>ԗPmXy齎K瞠n]/7RRF)uK"dx@q"pߠU͸v} X@DH92?%`n\I^׵d/J'BBn+ڌ (Py_N.Sh1L##uc/0.=6{kʎR5(KH]ASƱ }1_ Ue2">{.M Bl8l=Jˬ{)/)2;P =8e|eer(9!/ "JE@+9>/kNp sqXX.}7h@iyqHL=KG<1S㭷]IaV.`Vɓ+ a< qT) PZIP@2K$VOGbgK ߙsэ0idc1nlv#]DW3gdY[F:ҧ\Ÿ#<}vz]=tꔬ5XZ YP޼kե}.F$s]`;ClZ礃8X`ٷdzyC f\f[DRBpi4q7;gJ 81a:<1mY04}.E"\_o\}蚍V{y邾r{?Ƌ+z*Fus9/I@;{E/;>)GU'|zkC<@~K^@0-sUwv+S ^r^yOҘA B:odB,-!@LOY^A®#Tû.ОNݵ0RTVW,?9}t >,5 ;tt@ 繐` hzV?zN)0.-BJk !.H )~x%p0379<'$gzedry<:-^2 uqU,,ʳ3{(1`mroP$x+i {{lC3=5E UB>eErMOi} ikL4T=dxa&l[)=[SOm4pN s?ؠ5Aix_0o Yԙ޶̩Gƻm)|}&,5ȵe55qOlȬ i9<eĀD0IAFq SY]Eq6-Pe@f:vSir&qȄwHE8i oˎgct:!ypߵf!MF)c~MR4یM@-[#x THg)Ck2 GO[1M6E-&fR-"+P0~xs#֐Cg&oPsHv- wgOOPG +";Ȅq75ؗTDC#& ?X`s+J/%dBn`85D!SژwXA7(cIld"> g|s<$Ua3\VRʹ6b`t]Q{Le1 D,=͋}gby.>lI[T7^s-Aœ ΅1ЕouCV+23H mdCh:Z^Kv!k&HZhسg j ~ 7 EHl//6~ :9fR .rUsJ`3Yn 5*>OEMs9T{UJPa y]~|&2N/*spY XhTf08du4󹐣u XDD)H "K;M= Pw.!}(V< դ๾F[dvC))oEQՊK_rPv=0! ]+9ܝ,U.9x%YubC-0q곁t'=0uns0E}u^8alw~Գ+`4#F4! B6żnjsDkfT$#ױkX0YWs5Prߜ\ZcZK}BlgȐJ[;) ik@[̤ Q{>%锨Pcx :c[4A"m 'оW Ikc@r<[5%͚4΁O(9b &uObDZ{62 Bvy3^#|Zl7?7[. AY)u΂N|ÜΈXV%5{%#RpV׮:6UD1_Y ([=W*YqI %uTqʩX2w`+B|b$%HyBBiҏ dE!g l8y|Cw}z}fN8K@=MԲAIo%\L6 Xo=+?r֫$H @tNhl?k+˞"$sK:B+c <vIBQ3[ߌ}RCsWjzl%(x~,xt_PXsp0i`3RPBbkd^ *dQdeW&nwݾ8mwB6LbVȇ <^NWNN0J~Zv%Qَ+p.)ы\a9)O_J/%qS"}^d4urL˼VQp1nJ!- A")U859mp޺ڒɦE )/Nbj=ʵfe$Q %H#0j +Cg9ab-; `"jY\uw:n< U|cYQOy0rZ2ކ$XԍČpi C,_$aސB3}p䡰nYx/ųd\yj'cDK~|v)c1g<\%$l|J#ZavLpoY6|Dz;)`E:F7ۼ hX٢؛Q5^,!c2ڑq;ldwFv`=d5eMjhx%u~\[gkm4 Ǯ6'&YPmP)/Y-Iqbkt1S j,fDJYW0|o/.Grz7]:` [.qdzSvJ G0`Gc$?4: L6~A-loٰd `bEn~蘋*E@]ԩEIRGO]#3bdE#߰pql8N%&wu'c6uXyzs)d+C.=ӯ8*CEVv]yJмCcVnBD 97?R-wK|MU<^b~F'j#%;Ǘp 9 t ľ@r:hʹAgbI N#땶 >ddfJ)aol@a1R!F;.~8}WͮڤV[re ݖP"W2 prW"4Y 㙊[? ٛp5 qb`cOx~MՆy$2tiAY}=N]"c ,fED>ͨ<6[^I]Y6AK7y˂k ] C%W8T/ L%MNIσ vE5x,!- Lt`W7]u=ȠA|/1FZ8E:siU11–yxN[#>x?vϿ xZC6 ˆDfr2 Y83m!,:\! +bAՊ`06so7C1gl ^~i+g, v?#S=˩p.EiB@h9W^5Q_B4o:=jA n/TtN\Rs%?!$MAgd0<R;۰ZItu'վ065)^6á1׶rD f{\2S84#4ױfxX+ΛK= R?$vjqNp/NV0o1z|OH,-Sr 5? $$2M{D-Z<܇}5DKP/Y-j?wZ1q"8ۉ[&-g1Zqb 1N?FBi,]M>s L0: }dZv A/`\,:H\UV6L \bIMH VcjIg1]c.@Gp ~T7t)`K8lfpA!IRAUT4{0$uD *WkJc4:N_wyjےu)Α&܊_k4~s*''RxV6tgէԕQhٲjYϐ`-byL)s'}{ȕx`È~W~V>#$V.y=krcFĄ/oӷm_ DݮCc~:&d]< BlwĖIkOf<ߟ)TLEbۂ_bȾo%oicoD q{1AΜUEh9@C+&j3ԬWMa>dȕ*\lpF2:2M-'`w .ة7Qhh~#5f SlЌa5Y$2L|mhJvz K. pB*ՙƭ22(R>ɺ땏¥b[N2{/$nJ߆uT=!)l4}P =WYE{cz3bF]s.zk){rq&%Hq9@S{BqIf\GaQwG͵6k_k9L=Q\Nw/:ΞPHfzʡ5/ΕRda'N5r^W}v [04ٳmP{C۴[u׽q[Tqae])Ѕ lW~yt<蒮/v3p!{s96WK0m&1oN\4fg7-^[ɒђx./ޔD ݷiiAf_r͂y_PWv?dĬh#{2:P)(6/6@ bMb$y ۯg^]weRKQ]pC=93X8 n?0 Gت%D)`3q\dE:'7fUM9)##Yܮ)՚-3QR3XetDkUh&c<%'u6Y Zmmy8)iyNa @~H|bbDRXLNQ뀞 fEoϤ:ct(LK-8W(z&A~ˢ24u8{RuЫʲ(,]&! k!l= 3x >SmkQY}bW)#5%h]I,o3gVPO:d.4Rf66qlan uW,{FLEb NG:_/hHT]*LHvx%WHϽxrL[Z` Y(Vh<&|! 9hղaхD  KW&zЀq E5*Xխ*+sY\#I>"< ;2`荇DĞP od(۬wٛ]ɾ_puF^p`$>*{s)5q7[8cQ`]f;$b6dg^gZHZ9P:PpD<jB'UM70#i=Ü/M3UI)̘|;| 3J:Rv"EJ4} I;EEjsaIxmt2Pu*C7t YZ