evmctl-1.4-150400.1.5 >
A bvip9|W ;$Ӫ*MŽ9k6V.ecMwC۸. E]S(5y{Fܿ`&ucLϷhVgӨ 4~ l8n ْb.ح Abmٖd5G:e" 6ɸ 0 NTɹX9kV` ghV4$' / 赓p o #/Ϭqq휜S}U D܋.v~;YQHJ"z&%.;#+@MC E6Тf5f336c84eccebb59f95d165450d5704173306d62 0304ecd877e6528986d322bcf49737b8924b8680e4c234cd48f32ca148b33a1c bvip9|2fG"! Z6`98HjQ%l
iJc?EL<. 9]!dE_slI3i:
x5hD?4gnڿRW
if}X1[@9yaw_c7հ%tsq nzL?쪯@ౝ:T'WH=E')G%,Hfc/}@6*DUcӾmUpR+; 'E9_^ԁ( x\ * > p A , ? , d
0 ) J \ r
R
T \ f p ( ' 8 0 9 : B ( F ) G ) H ) I )( X ), Y )8 Z )\ [ )` \ )d ] )l ^ ) b ) c *G d * e * f * l * u * v * w , x , y , z ,H ,X ,\ ,b , C evmctl 1.4 150400.1.5 IMA/EVM signing utility The evmctl utility can be used for producing and verifying digital signatures,
which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also
used to import keys into the kernel keyring. bvMs390zl33 )/SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Kernel http://sourceforge.net/projects/linux-ima/ linux s390x P ߁큤 bv>bv>0b1d81eaa50f1b2b73bbe4da20da0c92fbcf55273099a0efa371ba730b597cc0 3a89b5a3c22e2ae5040f76148f9d4861c93a0d4364b87aacbf7eff9e794a3910 root root root root ima-evm-utils-1.4-150400.1.5.src.rpm evmctl evmctl(s390-64) ima-evm-utils @ @ @ @ @ @ @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libimaevm.so.3()(64bit) libkeyutils.so.1()(64bit) libkeyutils.so.1(KEYUTILS_0.3)(64bit) libtss2-esys.so.0()(64bit) libtss2-rc.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 a __u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz meissner@suse.com pvorel@suse.cz mpluskal@suse.com meissner@suse.com matthias.gerstner@suse.com jengelh@inai.de matthias.gerstner@suse.com meissner@suse.com meissner@suse.com p.drouand@gmail.com p.drouand@gmail.com - Update to version 1.4
* Elliptic curve support and tests
* PKCS11 support and tests
* Ability to manually specify the keyid included in the IMA xattr
* Improve IMA measurement list per TPM bank verification
* Linking with IBM TSS
* Set default hash algorithm in package configuration
* (Minimal) support and test EVM portable signatures
* CI testing:
* Refresh and include new distros
* Podman support
* GitHub Actions
* Limit "sudo" usage
* Misc bug fixes and code cleanup
* Fix static analysis bug reports, memory leaks
* Remove experimental code that was never upstreamed in the kernel
* Use unsigned variable, remove unused variables, etc
- Upstream bumped soname to 3.0.0 - Update to version 1.3.2
* Bugfixes: importing keys
* NEW: Docker based travis distro testing
* Travis bugfixes, code cleanup, software version update,
and script removal
* Initial travis testing
- Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch
(patch from this release)
- Add make check + dependencies (getfattr => attr, xxd => vim) - Fix missing new line in help
(0001-help-Add-missing-new-line-for-ignore-violations.patch) - Update to version 1.3.1
* "--pcrs" support for per crypto algorithm
* Drop/rename "ima_measurement" options
* Moved this summary from "Changelog" to "NEWS", removing
requirement for GNU empty files
* Distro build fixes
* Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this
release) - Use %autosetup -p1 - Remove suse_version check for tpm2-0-tss-devel as the package is available
for back as far as SLE 12 SP2 and respective openSUSE versions (also check
was wrong, should have been 1500). - Fixes from previous SR (reported by fvogt):
* Move ibmtss runtime dependency to evmctl package
* Remove dependencies to devel package (should not be needed) - Update to version 1.3
version 1.3 new features:
* NEW ima-evm-utils regression test infrastructure with two initial
tests:
- ima_hash.test: calculate/verify different crypto hash algorithms
- sign_verify.test: EVM and IMA sign/verify signature tests
* TPM 2.0 support
- Calculate the new per TPM 2.0 bank template data digest
- Support original padding the SHA1 template data digest
- Compare ALL the re-calculated TPM 2.0 bank PCRs against the
TPM 2.0 bank PCR values
- Calculate the per TPM bank "boot_aggregate" values, including
PCRs 8 & 9 in calculation
- Support reading the per TPM 2.0 Bank PCRs using Intel's TSS
- boot_aggregate.test: compare the calculated "boot_aggregate"
values with the "boot_aggregate" value included in the IMA
measurement.
* TPM 1.2 support
- Additionally support reading the TPM 1.2 PCRs from a supplied file
("--pcrs" option)
* Based on original IMA LTP and standalone version support
- Calculate the TPM 1.2 "boot_aggregate" based on the exported
TPM 1.2 BIOS event log.
- In addition to verifying the IMA measurement list against the
the TPM PCRs, verify the IMA template data digest against the
template data. (Based on LTP "--verify" option.)
- Ignore file measurement violations while verifying the IMA
measurment list. (Based on LTP "--validate" option.)
- Verify the file data signature included in the measurement list
based on the file hash also included in the measurement list
(--verify-sig)
- Support original "ima" template (mixed templates not supported)
* Support "sm3" crypto name
Bug fixes and code cleanup:
* Don't exit with -1 on failure, exit with 125
* On signature verification failure, include pathname.
* Provide minimal hash_info.h file in case one doesn't exist, needed
by the ima-evm-utils regression tests.
* On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs
* Fix hash_algo type comparison mismatch
* Simplify/clean up code
* Address compiler complaints and failures
* Fix memory allocations and leaks
* Sanity check provided input files are regular files
* Revert making "tsspcrread" a compile build time decision.
* Limit additional messages based on log level (-v)
- Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch
- Upstream bumped soname to 2.0.0
- Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss
as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd;
better to use libtss2-esys and libtss2-rc than require tsspcrread binary in
runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same
logic as runtime dependency for devel package
- Mark COPYING as %license - Update to version 1.2.1 (included changes of unreleased v1.2)
version 1.2 new features:
* Generate EVM signatures based on the specified hash algorithm
* include "security.apparmor" in EVM signature
* Add support for writing & verifying "user.xxxx" xattrs for testing
* Support Strebog/Gost hash functions
* Add OpenSSL engine support
* Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures
* Support verifying multiple signatures at once
* Support new template "buf" field and warn about other unknown fields
* Improve OpenSSL error reporting
* Support reading TPM 2.0 PCRs using tsspcrread
Bug fixes and code cleanup:
* Update manpage stylesheet detection
* Fix xattr.h include file
* On error when reading TPM PCRs, don't log gargabe
* Properly return keyid string to calc_keyid_v1/v2 callers, caused by
limiting keyid output to verbose mode
* Fix hash buffer overflow caused by EVM support for larger hashes,
defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts".
* Linked with libcrypto instead of OpenSSL
* Updated Autotools, replacing INCLUDES with AM_CPPFLAGS
* Include new "hash-info.gen" in tar
* Log the hash algorithm, not just the hash value
* Fixed memory leaks in: EV_MD_CTX, init_public_keys
* Fixed other warnings/bugs discovered by clang, coverity
* Remove indirect calls in verify_hash() to improve code readability
* Don't fallback to using sha1
* Namespace some too generic object names
* Make functions/arrays static if possible
- Upstream bumped soname to 1.0.0 in v1.2
- Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2) - ima-evm-utils-xattr.patch: xattr.h is now libattr.h - Update to version 1.1
* Support the new openssl 1.1 api
* Support for validating multiple pcrs
* Verify the measurement list signature based on the list digest
* Verify the "ima-sig" measurement list using multiple keys
* Fixed parsing the measurement template data field length
* Portable & immutable EVM signatures (new format)
* Multiple fixes that have been lingering in the next branch. Some
are for experimental features that are not yet supported in the
kernel.
- Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got
backward compatible support for openssl 1.1). - Small spec file cleanup with spec-cleaner - ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947) - added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima
header can't be included if the openssl headers are missing - No need to remove .a files which don't exist.
- Drop extraneous ldconfig call on preun.
- Update RPM groups and descriptions. - ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the
"current" version of stylesheet to make the build work again
- adjusted spec file to apply stylesheet patch to SLE12 as well - Add ima-evm-utils to SLES. (FATE#321603) - ima-evm-utils-fix-docbook-xsl-directory.patch:
fixed the nwalsh docbook directory again - Update to version 1.0
* Recursive hashing
* Immutable EVM signatures (experimental)
* Command 'ima_clear' to remove xattrs
* Support for passing password to the library
* Support for asking password safely from the user - Update to version 0.9
* Updated README
* man page generated and added to the package
* Use additional SMACK xattrs for EVM signature generation
* Signing functions moved to libimaevm for external use (RPM)
* Fixed setting of correct hash header
- Add additional requirements; asciidoc, docbook-xsl-stylesheets,
libattr-devel and libxslt-tools
- Remove COPYING from sources; upstream provides one now
- Remove automake.patch; "test" directory isn't provided by upstream
anymore
- Remove ima-evm-utils-xattr.patch; libimaevm0 does link against
libattr now
- Split package in three subpackage
* libimaevm0: contains shared library
* -devel: contains header and examples files
* evmctl: the kernel signing tool
- Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path
where Make is looking for docbook.xsl ima-evm-utils s390zl33 1651963213 1.4-150400.1.5 1.4-150400.1.5 1.4 1.4 evmctl evmctl.1.gz /usr/bin/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utils cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=68f51f6d2126bbd8aabdd3cd9bf3075fd9a286ef, for GNU/Linux 3.2.0, stripped troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R R R R R R R R R
R R R
R R U*Ԅhv utf-8 e03656cc5a661b84f5c4519e1313c81ec0bdf532c1dc99628556e60dd20dbd1d ? 7zXZ
! t/*g]
crv9w (-?nH>*ICQu=QBg
tEM'_|
=V3 (B4äB?:?jr \C r6x; 24 p?Ki+pwRAp`x8bqf\Iru슝ر))+
Ep
>r>NvQG=Ń͆
7I
"W. I$8r& Cp #%>}rwBK)d2~/1pwfeu|R 1MiB,W-hnݧrLjc;hd-讥K˷2K8fjWIKHdFlٺ=!=r8oi?!m]H;oU[KdD,N 윅B@0֘~J}\0=3vsy\FRZhO/ bѢvMA
BEf@Tfy'/nNM^A. %`&{7ZCޗ)Rz %³M|{ _RM)98 ՍUV}yC; 2q'M-Vъ0km" ι48>4btT9B86H Hv?wv^,uee} I 4b㩂} Si+~6da 9^bOp>zY@c*%`r;۸]vܴ#mJ o^m, hWF%ef\YjUYP0Jڮ*6YIqMVyn(e#W[LEj5,U /o߶ h\!Ħlw mKQd$@%]` 9B_.]V'T٧q ξ6X?.m
" M>Rؿ[Ue @J ?f-Q~cu?o(ͿB|DIN[ L' F:`xͽtSH1)k+b S@S%kS>:C@r[FCUvXkaB|`> #ϕ
TLa~'٤5Ċw8%3ZlʦǗɡh8 ^O77r ɆZ3^3 S&П`L(7 h[L ¢"%#q
Qї Q ɠ; 9" į V` /0 Ӯ؈k/' ?wTAC!D\°ك-sri ~* ELǫDnQT z 2y}O|ͬ&p zDBț"|4y9 IX&|Sܫb R~0QQ̆v BG_fv@SKp P;n4Go5.jפګϭK,TK AՓ[
%ĸ|d^{m߅aDI@ԛ
ߍZ6ą#6mbòhΠBES=Bka[̇#nG Ple
;kl9kʆH!v{#gLqTj)"U"| UjqH͎!HWy7X$do'e$_ƬKSmZ Μ BX,<{FW+Y1R cf%^ 籷SsW~}dgn*{er} ewf~% z{rOg#Ro5*KV 5 bx
WFxA4] N_ű߉UrR>gx!ѰXk6%JƉe5\ƐʒO,Ĺd Ax wҌ!g\13'cfI*ۼ@QCK|)ɻAG| X?i xDF& l
"7
q?]T_r*˦feri#xK.i[>!A[Ga68Ҍz~]ڂMjuw^mm EsI *46Pd[GKʓ# Д,Ƙ8pnR' >}!{h|R6X3-{I/\^'B2햬"T&y#U~;
W.(
c h(C=at6'
C9SC_28g Q 5 -!ߕm3~sD _0.3ĠP!C4. 3Ĩ ˥1f
|e*w
7i{LphUB-(t 2o֜"Ѹ+Z4+dlR$@w bn0&v.s}# @\4r$WL S ;ܓA15 ܮ !PGjmveERy ڿr:Mg Irid Z
#to,NGk$(VEɮF !EԹߵSZc
~SYTM77$|MO1 c!ceC$|,i1Sdz":41#>HB/UUFA3~֗ (zm](-
h }9a |{8:NXX
lV~Y$
(iAƍ%ǂ,q-zG;o{;T= M;>( X,Ҝ.gwWy^ߞەQ,Xݩ >TGVD u}!qSޙԊ\݇ٷ1~S=evEc#dHޞ9
E-yhOIE A8v'3\\MQ5 ̱tuG՛K; # (!x,Age_'+ _" *qs Y7C Qm@T zFf˼
7J+E2heGUҤ8
amoOr^` nj̻bihm}A4 Hoϫ= =]PNPGǟSW.cvF̔}%#G%w_Z; e(f"b @t܂o
v]Il3^I25,dgؠ8
foM tijHSb .]#-K+pa 8&hoFVv?gt4=cq"Wy.Hg}w6c>RYHZ$E 9l eGe
8q+brT4fu QCH rMxS!,;Knjvdv &l2Up_'&eo鯣'5+7, PHM7fS-_UD UM&! rߋv NIl5Q%˭h2nA<"^/BxƓօ xO}|hgˢ&q 6+Y{2mr-Ө-<7mxOL9Q6~ZM̽;+~yKJPFb~ 7
v`S7غd]9lyq ims@xSKuLXx qVn{
T{Ǭ~ǶOfݎކF:|R+ Ti _'C\h7}z ݻ{RcD`8~ꃬ)[.3ީߡۘyXt)/r"م$Hj68E
}\s]&C2$6~_|4KlpՍS/utJ4fݮ~݅nIm8TYֹrp
~.T+Gbv FenE`=IWWӗeJA+$)xf7`7 X֮^|!C&/_]-s^ٴ+w0~+_*`U p:{pY:x&7ZY[=nU"vӘY\'ݫZa5܋$`9ު}=~z,X!:LK1bYd
&Ѝ5ܽ>۫稀KNVI M%kkug :;Q 7J1l 4S=i
g9!7JO%< =0)cg}=' Kn@X?ƂZFcayN 096/cj]hV#U
& |ÎD/;4w7Y v-.~'KLWwli PN lRbhi;g'-o7?60i䩯)e_92.30T %|jA Z@+|3M`(n͊\4w1pRXm/QP-%;K3zH^*/ ߉ӊ-~"Yaxd)r#<"" E{j×v Y Hbnm
Gjš%M>̹
DK ۆ«h^՛u3_t`>:2oW1 ܽbfT#mE[ y7 7vܬ5&4IP=M؊noJr"9f1DSuf#Ҏ4IQʠ6cION뤡]=
oQ~B|-[xD^0LR
],Cㅓf
$-
ȏwYn$LP_[!Yi' 8'f| :v>c,,&k|#DA*˸m:}
Xxݠ@XLP#.:qM6*
13}i$
k=#1J8 yqޅ3u
P'A`5Hn |lHx~o2 ˅
i5r(
kkpQ`N!k'B.g^B,C=[/?'@fTEsͶ;{ѯ8t \
(Y;~: yCfјWyKy29k}ZmU2H V"(n4*NE88x{T a}ZPǺfI5qHL & xլpi|D&
/S6)&&xuEUT,^03BPT1bvK"09]1aQlN` 0ci`c)Dht(̶- 1Bn)w9NA$$Q嬌&Q| ¥0}=ZS;Z=ŶGd9#{R|3KftXRE
~KZK d2 LG:z;ߖD#*{cCR>Ft5Boˢ$ՖS< Ԉ\ } [$tn¾}aWDb@HU#oy" 2y$iT JA [Ƥ%2kx\({(B#G[`k>a~we B+L풔i|'.Pwo I/
}dݧ1U/.aԫ09b m+4DX.5bqG+I?8dbWnL+APto
%OT ޘ ! ƼrlXΚ,\phu҈ WTU}/gV &@ f5AjP$z_v7
$ݫU@듊y%}7;'UsɣhLȼ6E7 Vl5;ܩ^R&uG-#{D7E7Q2%̭{naV|TTAnX*\v0C<ظ
F5:耵D `5.J2eLkM3i9ͣ]EEҰ MɛA=BG Wy_ܡlK)9[$DYS1^GFfN7
[(Bwni*]>@rxv?0gm-4/BSrҥdzStf9TӆGrEZjg2h/4X]'6/j 除;8fttqhEPņdp a tن<*!H xV$v1R:Dr圣XwFQ{qBŕAH<ۣ~s"Sت~T]Eؚ\ÍB=G9[߃0e{;FS۬` h焭JSg
Z' ;Y?M*>l5mn η$K T KOٴ6؈p|{H3ê:K&eŮl!Cx3] mOI<[s5A8|` 6?cq#J~bN y`zs 90semD]V*sdC ]Q:b䴲ai$Fm̾LER<-HLH Kћ 5a]*2fxM]qEE\H.p
h/_^w; .4L&[V4)2*&:= *VBJOSŹ#ʱ ɨ&&Sp0w_N
VGj=y'<ЌR2 s/\9]_z >Q%8POlkʽA7О7XR!*zWǶ9 Ow͜on7iI6랉/{ |F $]
D 3#Hc[^:`ɠ!5_ GE}( TMT/kCo@-M\٣
QA}]s
pmb)?8ny%*M?*c ފ̿9@~!>+2K6C C ?c ^_Ƙ'@JY驖q'sSS9ub%Zekkf0),: p)'I"7xݘc1!I[LC{;CC;.J-Knai!nsG=SEJwv4w b@h!Wy)-\xw7!~R"OGQ
ڰnG :a0KKAdE( O
f[SJEL1S z a l8 Iޡ~! W]g;Wb# OKRɔ,@6dfb `pFHEB6:B-s')~dGA,&Cnⱟ8p鲅J5/lu;6OkJ/HV[lH װłuZ{|h^ Ğtm1L ^M<
e
'UL 4Phb}Qcc -np'[;} ({z`^~6+۴g 0ɩ8"f:^ ?EҌ"H$ SrT M X 9Wc.Iz *>F6`c;X+@D+y`@1ݱqVy٬'w~P䑏AQJVhB^sѥ5[xZTՑ2 D41I}睺VJ]s7˓It !5?vdIĄ,wp8= [lD1 GVfxlA[t
LN) ?sd [3N p4: ~+ad =Ab-3
@Y U+0p;vbO 0Lwk5 G:5LCm$Zp|Z/iͺ=P𩿻 -7f/M/ϬB ++5*~Qؒ%kIL3 I?x/aG>W2cNj>;ԪXm2$`Z~ !M)b칚>cK_S ze )g7,^6D4U4_BY/C0-ˎߨsȌIqͿ/U>^շ'ypTO8iX~/ܭӊJsQ:,C 4uEJ䛯#$礛M(υi>BygkOE^ VK$jÿ Rz.B V<P)ޝmr6]XD Ry
8]*qi2` *Hۋԥa㤷9}$} (*TF
@<¿Zո+IR$LL ϊ'F+&S_틸 a3Oa ap >1um+l N2RGtrRxA: $-,}\OL兔܊ui6)I-٥A<ꁖf7K0W:> ?S/"vH 4*h<zy 7 *1xޘU`"TG # 4[@'wέt "_Pl6EX
eN6.Y{>P
g={cNaUB5=P5cXo< >76,$ Q;.S'e2 ٗ=K.. 42p"v")=$yjdK(8Ưqwy " p6HG) F8?Il!Ją.Ec&`G,h\_~L
>ՀӮ_lDk/F0ENٶs#ݙ#4#fTӸ.jLf_k NrL5YfkS> ͷȰ ߯':2n@
eR6oj̄ U"Ouj$_;>)ټl ħL.F^劸 Ʀ{˶dgӁK&)UN;̀| +4[Z,.afyzm5Tڙe&YzҐŵLq6ǎ&gYt;FЉмF V9u!i8DC+8t+'+J0~U* 9=,b5=5BnyM\؍]&|7Rϼ丹>J?/I7Ef HR= .~*@:)p 6YhԳ#!h%7~m ",y~D*ȵc?;މhe8uk2j@ Co99˵EFSu#;E/ivhW냛\Jv;4ɍA):Pe7+@B}[{s 3~o[|lpM Ԛ.AֺnOg
#W -R-TYAxۀ
.#|KQ/&\ݷ#!%
PFKkU^P!N&,ӟsW0ɩ-6|"$wn;$9[ hg'8ShH7"-gsGFYbz, >Ic̣ϔ9K[s9LY# Z 7x }'`&R?nQ=]]AQߍ :Y-ȇJ@W|)O|o<Έ/TN Lz!ƀQKEgQg$7mpth7(TjHJ̎z/fwzvb*s̆,ތ91* E>{d K
07 /~}ԌAq *b`bCkkSK0?U$;79$JI;GbKڿmk(~BZ_%6bbɄO "EgtoH╘%08Up#dfNEΣ
`` 0nzC2sJ WCq"'eV!@Uf. .1x7dDT^66džDr.𦿒/Zfd^lq@q{ZoqAq Zm
;(Hy&hpC3/Cl啷,
A-
ˉp*# e*{`GAǧ# YZ6 c &F1 LWDPi&aN} cx?mu䖩}1@ 2ŇT^QQ(tkS~?d6jBs珥;} O2 7Фr瘁>
)^暢"#nh+QHCÙGԷ ƸjŸ 6gg%]Z'5d8{ 1a<&]P
Ajz##>8>`T W 鱅*S Vï"T] {Nf¹;-kca-ЁP3 O؟)x J ~ FZ D- ^{pfև:rb Թˊ8ul?{,vVɂ)@, }K;ïdi ᱎFJC AI{3I 6-#E>`sZPeph<D@ZWޝx+.e V| DK~q|Yr Ҏg aya@-Ѐ)Y^p@$QՒ 5Su: bvu<^
vHR PzlS f"*,B]3\w Gլ p'
dfCXd?JM3C]'YV Uo4v3# X*F⺘!;˧rXL`e DR+/6vܷw
_]g~u0S"L /Nr[X 8L.o(ix~ GPIMRY RR{`25vǵ
xÙ y'7B\3魼kұz`` HO/zǕh!VAKwL9
TDu~*r-m
~uV}MEڈN ?PkrP)%)mRe0 ))_7ܖ>,8!n{ CB?ߺo_FzLhXYM7±vP= Dr
VUxUx{'( `Ohv4b0N/a*VY6Yؿj2vdqRٴ_J]I! ( HSX!:|X$[;
ғō ?|[vTs,),߸QJ>
憹l@%<-`{\t(2}I[ڢşLY9
qZ.qߐt6|^=fenԒߦ{_qapgO4ldcEm)Y>ȏF:ޛ8gW%TGA1
@f?ILA'DN(*ԗ/t[ըⶱD,iGWۅuGqo|:y~c$lj<fu#po^XN:ڱE4r.F % @G ÎCp3/QBC5S(@N+T("}3?lGbhE@\WWƫXC ݹpH2!eGcRaD9P 4$[ f[:xDNٛRonYU O(;|./tj-vl5gxn'E$iڇ Uz놬2MCy'`:r=m6w\r 0'1756=ɠsE'o,澋V /#ɱ/ #m{129SglY Bĥ4
dx
x+[X%u6WLY `cCܯų3Z"G ; oXnȥl|EC߸ \Z(;ѝzk+|iN\O9{#Fgq,3p!?-{/͝xrn0أ5ge5O /ygXT =" Mn7Z+<m\I/W!NPc
yF-R[g7)"CK*~TzB ] } |N4#w18/T
xwU3"?UҖ&Y]%qίm`) j2tUI6ЊkDUBľ>M@q~0%}^\}HMm:U_n. .SXcֱ Mv\t Mp?jֽߛ\rwc܇@ >w
a^sX"$l6 =)y`qT0JKUmvJï;|R;[}8yމ- q|w͍"2ji$A iE%Gbz|7Peo !;
KXrFDS inۙ 9#k|^Q5_qZ) ggUht-цGj(FE7wffrV{i_/9}2%;ԩ(D"c7N,s/o<"p ϲIB^̛(۽e06.@]|SV7Z=l.ѶO& ]h7>DWGuepd|rqK izE *o A.=pFW ԙ=ъPÄ1\PNlj Q~vb# HcrWd+^1*~ {`ۅ$_j ())'I E&6+d *Q=0^vYoU흥s:}(@Kx+g6X뽖Y˭"Z-Ht}| FL
7S႖
AOtSA5JTGib~L
L7 lɃJ˦'`ptB?M"0Պ[U Kg.4u6r_?A[Q>zxѥBh
qPlTqy" |Ru=MX4 òuw⧸)8i W`VP&q-c
&p0E¼E%ŔN? h#-ADJ]"W:zKێWȇe, b6-==[|<0]%?x1k]̏|= /K-P6vʾR7(%o?x:%d>`5GY6w.j b?vݿP<0jb Ue_R4-u\&6别3D 0zPӇ?RX kwt)??+
;_ K |}㵨VDSюNk],r :dII HbmYTjc&W E(g6ߦAz(H7B.;@a=]
h)ʅO
/L:Wy:=|' cY#rMbw/|ʧr
PێИ .(eI \*Q 8fϳqM*0 CY:yB4M-|B
du9e7bL x|W%x y}|1^W31xuU"ؼxs*$
-Qt$<ȍ&pvjca{j$/ 3 1_5U'|SX`Aa}k=TN%R\;:\4CfM)]EEtτa>?ץw̰-AS*z
ѥ*tS/P1' Ĵ#>ܦEkMcKC6۶悴"9{F 9 ]Y:^kcJ)5zkRy)ЯsbXRMNUr̕SyGH=hRmԐ/Ч&W̷E%Izٶڔ16 sP' N
zt۹2RN)AϺs'tmCVF6+d2eN&y8gD W\uvI;-c"yiw%=ꖪ 5ӯSG{|OШ2$ -!Ni8n2= ઠ+>+éMdoX8xGzjane81@4 V'PJz45l.N[.5IօuD }'ME%8 `u V1WHJ*n6Cis3
Dԧ`^I˻_6r^Բnk@)S?CD-wkh5x^U*&e=;hW&^^7[}7>kY;ceCQ" 0 ޘQtl0{H<ƞ2~&oA
-8֗II#ʼnŞ@-`uzED?k f:Pu*ﱧ\P{w٠/B{VlUs7Խ%ѷů}@eSNNɑ~p_zigA'.̰ S 8:U}hwcrHJZ]? k
'^!Lb@#s^d'R'OB!nV%!F HwըEqs'w0oKYg@ѿ T ?V%W'ҭCУXNpX2Zw[T|_2y# uZA*,Cn!l퓊;ݫ57A":Z@pє*v@ VA\8 <S2Q`vqgH}R++X"?)B>+mg +$·zS5]l6Ϧ
1.vGʢZdΌML6ᭃ
&p\88χ(aJ%O@FOΧQ/x;PbzIp|OĖ?/N>18cN'eFU- K12wަgC_'ǥ8gS m SitDYnD[Q篦5 jxXO'S|oKA3 ЫlT'ЁD(y|t $(J8:H%p/4\ 7QY 5iѺ-D9"X)r<rt_ۄsQ Twٟ"q߰ڀ+- 9ۉ#`/[{)덹c H#K^ch
.-L[NEL*|沼~Ѥ] M uΙ
Jmлa8ɍ{Fix.z" [%uIn"SRcؓpMT%9r҆LXz+l͵=79^6+Ë$%M$j8EP?ٯ #A /5ǥJӝu T}1; 0I|Qnq#"iXrXkqfD"k6cj:I浇K#xdk0=9 D^Rt}Yu#bi/6RW v}V2dc %IMcb sDNrٌdw& f==oh;P6 isWЙ3JVن{+R&
u $r\jZwc Y@[=8K؟7cJ %n^~rhPcz5Mu?*ɿ9]Sngrz_&`Q`ԮD*xhRW>! ۗ)"[ǚ^-n& +RپglsS`%zhl%#7e_UmL^Z(ZlH?dwsI>>kz.Վ b7|ɪ2Ϋ ϒ874CfzHM5jYLakd_S'|dO -4d#i8Qk2ph҆˽^uHMDex9}Ѹj;Dj]qd|`6F;88 m oMINPN
/͢bxCN][ [7a&ě >*aR{ ]{0m3F5k܌3De"m-KM }l8TiXsVd㗸2/kh.{FA #.H XzWGۅDb7ȈۘIG ,m#ZyZ.8ǍPPK ["sFό͝J <}
ahA 8tL^q8AԯO% 6P- 35r~!vy/˹|" tPv7ɐ%4 yEq1MDBS2ySt6|%6G=脶Ǡԥ%ߕl)Y_[:j P$htcl [H)4g8:HZzIDHov!vyZy &*ؒ A/ JzA<](|ֺHj0є){J"b^k
ٚfݡ-R 7#6~:W]CjGjնqt/,a;
t_xi#:=Tgv KA$Q +!..R-i;n;M6y*ġwFWW\2 YhΪnokC˰;)t:|X F
:`<;- ewjoMK}XI$
T#rt/'6ڙ,]Gx*ƞNh0<+J=HXق6=86Ғ)s|J߈?ܝheZ<⋵O#W|^CBl0y.t|~Eʵ&utVD(YE>\ "-|d\ 86/GSEE;Y\\qU^]m*L ̀ug\,?jffUJo: u.r| Nybd: D+H+t Z
7|ӆ+g^1z]07r:`XbV'Cl"8I,3鴍O6jr C߰c4Q9dhB{&CbPD'i)G;%HY4پGS1 @ pS&%vzό=8!D1Ob9WMt]kC[C|/Co /i9cX VeҐ F뷮)x2>eg Q"qN5ڊ &P{*;VK%h3,
7 Q:!d"y&43˕_P֚u,X՜tKPㆶnqeLEYS" s
Mьe}Q1Wwö=Qp҉ѶjnAtC)CcQȦ[n0Rv8b,%B S:'3vt`R솵;p K0؝w$".c[CER7/ U 1 mTJ)'eG]K ,`CEOՂJ_XaȆg]X/^*Y."#؋W n~Im{vʱ-%}:iIR1M+uI7"5r{5l+pz=,@
^- @dɓu$ ꄚ
qA@xe4-DFEiÜ9K3X@U5 z-V7O<#_[S=yȧW[9- S :v ǣ }#79R9ĩ9xkPURD7[&u@&/bb!WR
^,'s<9Ko?|خ@SiʯA(Tl cD9r Ibb#뇚cw}"fZȳ;x4B r;ަ,ExfkjE\If\ub
Ce&6_ Ipc aod#b%!<0^0֯$K< k3MK`¡ + DZV&%5S Gט&Ԧ5UZ',^?(l En6h
:U*YChVX {<'V OCdܡetȫ ΥA$2MWΔa;ej_ yI W*JR?z9I3uM<n%ֳ:2t \ө8O.^, `p0lou-yI;Lv
~]l\МY @iME.(h\IJR7z6OUUksʺ)&Z
ʬNqK/C0L8Fҳ֪p@y87SYFf"UMeݤ|ӓJMzZh{<>gG}q)Z<1(ܕ``Js*S(WѾ[C&!t G+Lgj }Qһ2Vf@*<V!= 9Tg
YZ