evmctl-1.4-150400.1.5 >  A bvDp9|z59,bdL^ҮǬ8/Gm+Ƕ^)8ܨj1#g.>+eܔN&'/9i6ۉ?NiKMmkf骻b흒={sG=` rE{HʣP2z%RnAfm::fE >90Y|`ajItWr)f{5ꏿqxᙼgE54ոvξf&"~pN`( V+جةBP?['M ~"!c'7zB r17)s't?Uf >pA,?,d    0 %FX n|    N PXbl (C8L9:B)F)G)4H)<I)DX)HY)TZ)x[)|\)])^)b)c*cd*e*f*l*u*v*w,$x,,y,4z,p,,,,Cevmctl1.4150400.1.5IMA/EVM signing utilityThe evmctl utility can be used for producing and verifying digital signatures, which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also used to import keys into the kernel keyring.bvsheep65 OSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Kernelhttp://sourceforge.net/projects/linux-ima/linuxx86_64p߁큤bv bv 47d8f02cb47bd09385dcae539542a184bf1c579b1231e9efc38f1708ae1eca2a3a89b5a3c22e2ae5040f76148f9d4861c93a0d4364b87aacbf7eff9e794a3910rootrootrootrootima-evm-utils-1.4-150400.1.5.src.rpmevmctlevmctl(x86-64)ima-evm-utils@@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libimaevm.so.3()(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libtss2-esys.so.0()(64bit)libtss2-rc.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.4 * Elliptic curve support and tests * PKCS11 support and tests * Ability to manually specify the keyid included in the IMA xattr * Improve IMA measurement list per TPM bank verification * Linking with IBM TSS * Set default hash algorithm in package configuration * (Minimal) support and test EVM portable signatures * CI testing: * Refresh and include new distros * Podman support * GitHub Actions * Limit "sudo" usage * Misc bug fixes and code cleanup * Fix static analysis bug reports, memory leaks * Remove experimental code that was never upstreamed in the kernel * Use unsigned variable, remove unused variables, etc - Upstream bumped soname to 3.0.0- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xslima-evm-utilssheep65 16519618761.4-150400.1.51.4-150400.1.51.41.4evmctlevmctl.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utilscpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=f63f2147c413a68ecbe71ea626659ad39ca26599, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)R RRRRRRRR R R RRR R IT#9`Lm utf-81d0f75c03ae74cf5acd29f1560e988d1470d5e700f47443e609bb30371b06db0?7zXZ !t/ k] crv9w (ᅯokdp6P>ſ7׷ZvɘxHu y!2-@V|Fg/#SNw@y ?}Z00Ut݂9K< _'~.%X|#0sط_T¸'f~6nʒգrd"5*SC y"=Bָg܏藳`B]Qi3Z9}!SH|å) Z~cfʋC`=Bqnkʆ-PB|5FKM[Dƒ.+K{Xf)H̜+gvzPfr5-W)(dz)Ea4"w;]R덗ɝx.B[x$0yEerĊdPFy@Pk 3,H3udQ}y.IxHs~,f."5-̺$d#@.P#$=șaUZݾTYHT~r3܆oJ,Dž(ժBF|`#hUa|s[g ;RH(g ȋL@k) 'W+Swm,tPz1Wqs"A(iIA<wW//P9Ot猯Y Cw$'QPU+s\ny.LEaٝNՐa765Ukr(l{:g+#9mW+gItG:TUOElh '#1:Qn}U+X Mq{d!\}{j8j>+[bg~>ѵ=<|oR 6-ݞ/.&Dt{WKjFѷX,/اǙ}>!AD@`KфMgXuPV3[ {& ҂.粢:Tm8u`ږl tNØ`omdDQ܂ c?=Łu!/.٩=ݬ+3P:j!s߸TSMaѼD W<pFԻsUi$ ϻfn:#Z8\ cVq~wc-TӉx }TK*>+!w"! p=_NJ)%Ge Dv dIۓp9_r3GLΫ|)حLH)X-1pM]f557lʇA[IyHhHabIF*S˹N3Y~Bik|ww43ֽU*7mPtOWbY䍈o=?:2RVREr* O hn311 \vW#;=:^'$ݏY7_<}l# )ROv j f)%zgGTHQ(rk UHzd,z\Jk기SZ;reˤIHЀCZ2TŭBP.,>V]1޵I[p#FeqjOP1V E% NW2kYdQc3e U=|Ob*C6)O|77V&x߉X9h[Qg*}u^86-y՘BЄ?g ~>cD՗P2A3R\%>P<h3_%AABw*ŴE}p w4QR3? pg=ΨcL{Pz셐5j=eNLld>IɌڜ:)oc)5--6ˤTXg=zU0wcК56 ;#0AIw%huہ9e h"p10aP͟f"%ԺfmuH p trƹl^URz=fE|$lM.cͼ쮲䜹@)}T榶#m}z j#*}~hW8d8UAMwjGӫD[y,0kpqLybE!dG*u'$WUFA_u/xF}%X"غ4aCn :ʎ[,\WxnAf߫Rm7p}SD\ـK~-q=#$~M񌆧At=V>,]! FBęl:H)I`+p:2-9ȹ4~ag8} `}捨֔BFp|dg5Yb|X 4\U# u[{ /ꆻ@'*AK&jN\2?Tay_a@#P{&J3l ^zct8|\ 'CnH_]AjuSJe7:S&gEj1uŻass[+g aߑ˼Muxly7[`&sU(ZaK6=K<$&_1 u6Wj`HJ.5-hѤye'l%_qEClr,=Sxw2RI "7FOT=iؐ̅wEpelS'Oe߭ZC"#֦N"fjWz8(IV*)Ӳ=-jyܘhAR3N< M@17bcvIˇC@UB L/s/0 WX3G^:~uBS:PNl䰘 YvDXDVL-S&>sj$Fqo1U%] '݇:|%jS.PU;Wv& #֡T2"pR5~c{'c>$)oqeX9I [$Xo C9"'62U]J,fXK9r Hۖ{yW t)_ocs,z:ywç\ڝDk/4A)6i q6k&Z\;D\Ff/tw @"fZCXAdy%F2pv8t[7t/4~+\> QӔJ)sϣB h_[cҀl7y'pJm"u07l4͉hсWVXS.Nsc<[ĹmzWADV" ׭YawS#6xK?eʨG 6XA[n*Y˩ȪNJ݊g_*KD66m}*חXsQ S)d97UPXq%=Ӌ*& 1]3XRs2ol :+';6?!"- 3j$. L/\lF(_ @;4P DwcHp!nbO;Ҋ?rIM(N@ڣr|tAv]R[s\!=f |#˱jn]x`=sՀ* >WTpJrJ,^'̈^m:n1'^pEy' 8vm1rvA2}WO#:k=~jf1-Ml .AfGeV1Ʒ[xIC˜J2|le$ , )c $/rlo`$|Wd)pӎ狼U# e!%>TTdnV ܠ-K^Bթ_dJ>ISLfE}?KϼGgHs}<<6& _}? 7E~vP"R'Va"flʺ?!YұI?=SDjj62nŔ ĕ\v&0x=[_Ļ|gucyV\,5}?= 5 -_ׁ `r,߽}S'R>vVK 8gL>nx =$@^nQlb}S@r/$sUHsĵotgt-npe;%q`.;A8t7K/Gfcpu xrѕYpIz!{|Ǻ|):Z^D:bZ;+PM8VX@gOr;oq`%Q)tmbOſ?ijCemͰ*^Dl#d, CI "W=*p߿aEKA Ӛ|DƵ>IxnW=nhn*2&s,!>qgŸSzHD6S$zo*J[tD2*ι% q\=&֕{˼ֹ`[@YάGQ%SۏoZZ(M#խn_ԦI+92ָucx-<a{J=(0{!@%i5;S۶,V A t d.Hr_i(ruW(ɐ4,{|f4uLWO6&\ hɧm3'NLGyTs &0ܼƴ *`eyOHgB]7*yvC2Yg++E֌@=Z~nӆtdr)-hi[/_/// W{2fS|Z \fv0_bY ԋ6 \Hp9{@n ?[,!{"a?QktXƓEfT\3RBdj[ل 9D̈́9Os{{CEe4\OD;+ЍԴ!;"1Bs]C X?cǂ9S/g#fy5¹4ȑD#bS2l̀)/wFy~IPȈEG+UwH.ergbNfN·6`u*Tx/ z:ص5R)f0jvςJ"75 D eefexPiQX$-~ئ07\ԛg~P2otɄtZC ƿ>5SBcggxqV^vI{LoVߍ7+c}zIQ{x٦Y؄\(4XF'epx6B\ S֯G6ۺEi=6<+uV6*Q2{;LeG5/ ۈqS-qnϷoKZ-}c==uFbq*'6kDcz9U?3xn3j@'=1{ fݻP-n{sN`[Tr˘,ãg n`N QDh ۶ GsP#@ ODCu t7M#8?iQki<x qҞ4yty`Lf?c #  LAA}xH Ïu ā..\b"c5/]P +Mx 6G.F4QbzM $tIvM[M&|<`rj] 2h *trl[8!zFo!@(̩@IǶ\i5\C@#9㊸Z+gypcFD u7ehJUeZ|j'@=sjyErI͌EOf )o_@Oq!1xdHQ)d򃤸cΧYxYA0b kϢ~C87mZ?kq\ԟT3Fs Vx :|UپJH\XXE7:+> N̳)_ob`w?\@ s:($,dTpԂi,mG 8>>,q-qD` ,s 1qymʌo=hu0R`"Μ%cك^}`5 d\!jnՊϙ_V03iLЌGs0GXu&/|SXdGV/=~m燅a(*5f U!J >晱 *xSK4CH%bo~(f\iw{J/fbcVc>?<+q%E|]w0Ô> :OsEF"($obw^:VBE]܇ٞve}ˁnje:~fV׏{zXf&e}XA+IkHw\KP<$2 Tz;&UE?q7;[}N"JiC\Q 9)oQEY7IKE~})ৄ@BwJN! =;8E-YI$؞o m6%btYCj75naT/sYb\A rɗlF@W@_R$żX^A]gr1o>"[hPŪEp} 2JѦlgm18g3Z[RX8ςxL/z74{<3-'2d]8-R_EU]-/q 'z,a)&_֦;784;L~pd[W*>:a3է.n nGﴑ˜Vq#4CQ$!`Sv-7zuL m;jhDrfưmG~*t_*}dUlKk}v[z-< verI:rp7]k#qO踗!'^@[_V)& vAX"P>(x. ZoZ^S3MW_Kw *hNUKYV׼tV"WЌ¡ [FlK*'WQ}֗+L#\Ъ-lX:44^$ _#ʙ#Gp̐2xtΝt-퉉cDߨLجcwж2-( v |SI*λc ڭF"FKr_bEj7\si̓w%mQst}[tS?!2ù1V#@-9R@?W}~4e:tvFj<dScB,.run3ꅿz}x |tj|z4·jӍý2,ϮW<~1ȯ5;R1"y~4HrN%)h#İΪOlbLeV/JcG{&'OO^TGݚ"e.MmHpL#(+!LKpD*5+0fdL0m.h2 UskAr[}z {4U)YW!z('p3&ק4}BPDCmϚߥ}QdSg7W8ŏrz{m# W??؋P9$ePdXqYB/" ri4 `yKGc0 E-/+mVhJI7 iL#|J3lgBz`rHɐfofGRS;nn?LS8nDgLUΨݕh"f\̖n6z1qqߡÝ8ni$oog#c(=ba'!cϪ"=YY~,}شtA)>=/{ <N30;=;lKM\\j m3H~bRӒ>=E-6q] X(75D&UYvG'*3zN=3>xuR,idՔle?&BWҖ%bIF Y0=~%j}<Oܒ+?3'YKBG+? G+7Dn<ͮʷgu0dj"(Q[`EJ-߻%G;TK8Njo*u\m_+'z)A?W0<]|#q*gm7Z9US/f0cF/ytաW*A~m<+tx/.Oʿi}+?Û([h1>k$ĈUjNZcA v߇yxzV~/34'С12q{|OSXwZ,]G?7nJ']l5 gzKD\9]@;V,&b")HuTDB ar BJ5${YozjS̺烄^ 3rΈz0 6.y`2۰l_V xۦp#һ%rea \oP Oso0ՔM zP%u7kW88qPư :GIL&/Id='_c45>Q܆ # tI^MܩuxT{T^IJfn>^{E.0?a,M+m{0\T*@a"B+ث6'ʺ4uN'YeJ$,{G?vV^er!)G} Mg Ф+2U*N1cqe #Dn23ЙMɜL}l''7 14v@q9ME1wh5pzj5 ):b g#3*o['O{E-Ulw޾TNSh I}33\^i 3\>p=Y/81GF@Xy E43 /d#N MUJ"ٟM#.J U6!XO4++ܼqF#^9,)+I=0l*C4uHDc6&O V!9SS1m&MYJ፝c`@lCi|uS@!i+:S (Ͻ~.VNdggw~UQ9aQ[0Wa܊C]TYPi_;ōe/ֲîv9B^c) 5pa YX[l]Ə7rK0#3}7G yjQ%fUsSҞ7ͩd骬=7@E]P:ޤWu}y7 P56{1jsQ@LiF`YEY=gQTUQ rW2/g0:+piJJ tyFF\Imx"4wEͩIAٖ)90b&(5)e%ʏ1BK̈rd\Dꜱa6_{aFWSPcd85^x\O4R%\Y qE2 Kxxyd% t[2~T. ;}?ܸȳ"獡R (Yc+4wyGU ltz>֢8Qe1(늚ŭʟ'Ւ>vr, C:! #NE P̄NJaT҄<% ”t2q2t?zk]}$ N7>i"T~lw3{t(GfJR}0 `r˄jacR0Jbt>Pϵ/l_zH|X$^i[fܿ;r`엽aJҩf3J+(U{dd(pWWk$2}ӊnÕ͌𖇼h\ٷ\SRK|=i"}3;/&#C=!mLG?#D+Rf,ZZՌ: _f罹PgǾg5`(jv'ЂT#H,W貹QmBf7`$&$_aUv-m<bJԚ<2~aD 1|*Uma.$8k_RE"(͊?ݢ fx'$f?"bi*o%6܉GQ22K; 1YzjΣOhc(AI3VD隵R׻Va=3. IWFQ%J(53?QD;\7pd7qSFqp3/f*s繣 Kf9ׇzWEbʊ:<&f>GM$/J7hUIs;oEECT))\o|#O*?fݦO7|LU"4H;?}*R9Szmg!?/H']zw{]f_Z?^`cJJ מ+ѡ1Tx&5g> j 22 _ 1'8Q4 *=\KANTDcO 웆å~LȢ-sPފLHI]l]͍kiY׉7A,LӪ8%/%+N(;Jz&0eBYx$h%>G0=13[>|r4;PU 05"/K'c[@#Uve #o+a EQ':af~] ~8\v4Rub F{?Uz =}Lg6٬$Qziͱ}=,nbdpِƈoJ۾Лe~Ir33)pZdj`"j(@o]Sm% aj5eXEW]>"ͬnms= cmS%z1=O*dO5ra;Ў;tI+f` Z1+`f@ldk ڨa\ 4SY*i zD]p>7Jc}X'RU,`lc+舄GI F^9f$H3qE{TԻ ׮OQCk|Md(f<1mO|(Y+٭ ]Q3W0' 0lgUsh<v_&/GhHNj7>s(c[&GGXFd0t1wH[zq9دU#,^0 F^,v%nhyx16t})U @4OFWx>[+/Owjg l@lȓM2Z%9VVa o5/аku y=Ples!u5INQT5[oEI}pKZH2v+E_#l/3uNc}BfD]d[`9>*x. 8z7,1_e=RimFo ;Yd/_s""] },9>z/^z1l/U*e\t\L4r"iI+j@ZYM V Y`yv3ʷybf~O$))嵉eJ+: 4Y[f7 3`>,kջ@3=  Fiܻ}Fg܁v80~߉,!w-t Ÿad~G(J'3JY-BY_)(`Rb=XmݝT`k8Ũ;gqu` 9(M4f-:S?;jr"GmP'6m e~^S->IwLkdܠ- 0=K^)ʁuG5jwc'ij%W;^x{P#B>Q7Ql\a"L-`mNw^} >˓Enyk0G/CZǃ .c[i놣Ζfs!cv7ŷ6aؓ(4a` ~<қt:BhC璄u ]76 o۱'Pׇ04`N_~6֢&~nԴ,% k?\*̗Z_Ֆ0p2@D 0Z{d/e~%SQB]3 EX}{'-j s*!.DxW38DZcI|&;9gK5I(O!V|J tk"sBu* .g$k2ʎ8xjQfU ǃ(#L!TjZC jµĦNu=#tk25w^j,<}(7OfSط%d3\gFI)99t=WV^_jFb(kc{]8<ڈ5Ɗ3GS/-}d:\@zȏ"Σu?,δ3͠bRŖԾyUAeuil/(!"+>+w+mNGnߛխ iMSL}ʂ%LdZPzEQM.n*1H64k`=; (TwQ̕Gq4{O')j`zV[FI]?Zj^=" /bM>66BMxBxع_zSE +,]Ȥ܀r֕  Wnz,}Y:$?¡$OӰ%a$79I'Le T1"ludQpin( ;Eo{krK e6I}5)VaS^`vƊ2B] -XiѮ<~WH w (lM*-mr0 @EsaV>;ex#HKlOdWnՄI@2^平l%iW)v|D`+~Y f _Έ<ö~Yx^3.fKU"}kR7kQĺz` x]t*$@j#Ky nVMy{$ ݝM |qׂ !e8++9o 0GL"/2f@VpˁfU5I06M4W}=9LJ?.&0%XΪYv0\TfM&Yֺ k8.2zdx_bhVp4' ]T{YǭÍzx=pԯlN J. ;,d+&Փ8:a Pjk}}^l s;BgZ1PLmpG5Z$2%[$Cqs-Yh|Y%^W,7_o@ZmbL54TQҎ$ݖ%/R4bbwa^>4`tMe,N gi:jolÅ7hC;KV-8O˷ǩg {523sKT&`b*8.g̨XϳN|2?zv:h^Q xG9|qϸfCvHTԑX| m;kn#!?0 ) #V} }wy}JHr~EBiB( ί8C泺M`퓔ɯ Ad5ȋ~Qao/Oq>{C3Ǻ*,[zu󇱥OgGRkQ5!o;NrTi w"FR:{ߣ [nP |Q?3\DeQa̔ĕ_(U]~PIty!hQf=(kt'J!_\ 5lZ۩ԏ_b%UsU<L g1XUgcy _P Hha9~ RƸ)=5NHCDxAn}/NROO W׷ 9vI|P2}g3G@PI8`7V^HfBFN,XS{UPً+sų7ibPL)^FbZķ:5(CV_k@xy\W_d0+e7̄=sJU}ABWw+zAL'ѮGCOZ,~)L5A0z+j  N#`$ySMWXe9ha쀷bCnR3Tܪ'ͫ&].S_dlhNjG{]߂W$gkCme%l̫"P3G~ ]UƙuY̭h[LP NJIKGfTؕkvWL4}̘Ƀ"qk/Qt/&\mRLtkfWd}̮\}·s:R0H)#4LYtJ `/{$0lW bcu*6V(m;K'E`H#^>xP]J:gzk؏Fc>Yӈ 9ݐw+3q>3HAo*g:3V=ѠRjRLjb[ X3`IjdoJQixlGmM(M%KFڲcӋE6&$ɾ0)< =$=ym3jWjJtY&ԃވ{c0MJ l>8暿yyC2C,LqU٬<+ j̵7p[61>tM wQ3GsΩ1m ;Zt e*l}m8-e !.Ikr MsQAqQžl30V[ȢDnLh:8ϷE0 [tB8¡'U/m̧{?dA֊4tց+A= y1s0K6Gf[զk˜uT[( cUSz9.X$w9Ɏd(o *:R硍Tcy ]{c̲`cϔk9K&S5vތ T:C{0 Y+ۄ˹Km2+*""6atT,ZZ)>94snnQ@dOݾc/m?:FޛQMe>l"({Lb \~f*=SVptqX(&޿fO ƌ$}$t%2_hw yAIDrٮ۵ j?KN BFBi\Q{, }R}H+$ hՑIS\Uؘ@jEǸ ϓڴ+&vPCiakj?Ϛ;0L;' EP$&1!oi^)y'd_3)i} ^״?)ez qP}qދS4ްpSFL69ts9m.ρ#CVHGrN8 8RWQ8y +9Lho4c)ً(γbhБ [*0zSRthXu-+GЂ-@ ^n ai,6|n*\I50m%N,OVH[Z *lt~ }#-p1R|"V(w4L_|ºv`Cd#ųR2Ў3=s1=&dB!(`n[)k`&w91 wTAˀ҃ڕ0B2îd,\l91:&pWS9M=m6,򭯢V8@2WyH6'Fy:2,4P5hw+u'^X`_@Y!3m?q(U䜳 TI5 -ٲ;NX,Y1̘0IAl:~dq¿Mq/K4 >izA@E;w$bGձaۄx ) NZt0/{ֆ|;ut{ǎD6qح8vN$I#> @. Q  \b0U X~MD%Pp"jtK~>2b3t3М`- RAL] 9xk];0\ GܢFNW^ҽR,\$ :n߮܂!:UH='>UV@f]FvqFs!%n/j;[; \&Xb\zC.|wtӒ8hӊPI (H"&?X9_6=&A#ʐl1xwʭls´@VE0oJgJe`Dh?#>zn1k,㼾8@ fL>\+^*)͐Π ,Ykև7{l(+d @(cf{D_*xޏFD]i$}򳭫iJ~]Sy3JAN))RH6)+c2 E<:x^BuvwѨ q1B`E( %*2(Q/t9|ʭ/A:CdyFw Lhz9ubtr#rh^]`P nμb#i^q]`ɓ`[ũ$@9#p;[ӓDYOCYi~?;j4܊aQy1t)+{aǢ9Qi%bmdZH附#Avb6 5L#n͒͝L)⟓|>!VZ %**}N10O $oa͚?Apdz;d2[#䓃 \"MIh[xTKN6/mh@U[̟ D$|ʈp쯭b^Ë߱V͵1Ntt.Ah7(Vêfl.Tb'$LˆYœ%-6 ׯetmbr9&#{/$HH'\Xû C. ވ{msEy;Ķ)iMmay ^HՕilRR y Sv"~/k.Jp|xad~j X ƤO X6moUVGpV/&hEs_X,:˃2'"95ijFh7 8Y6Z.g["pg^Y!Ѕu姢ͩg޾{m*uxIcĹI־:ÀN:hvsÇL_Ď4w8TR7Z F]~:,E@&\" .nG9yvPs&҂5TrNk.A0l)l~ 3Z pz_ 20j]qJr2R,uT8Np~@Wy[ҘgC'lOu6/%"|O>$Uzrd'H ߘs|x#~+#*6l/gBVS`˱ )p/2;#?r۞>r3;S6q~gSd虥EZ(02,f1򹢅ӛѼs>r,BEI*`#_q9r%$tވ T{&A⯮./aRjmb_G@J0ssJ\=M\M !HfyqTFxߎizFCLϵ G(ߏZ^=+8Y^IVK58M-1/4r SY^"Rgo01?iZđ~avZ|?$G=pu^`1nO9rap]tprW56`LqݸF;sZ2Էj\+Y'=rzgL;S9Rz"o&%4%>HL>*S,!U!'WQ)$Sl2gt?֦cC<Pa(9hGf>A\m%.uE3Lxdz&%Rg6wn 'UG4㖡' Hā~W;t<p һTs5ZkoӖoĊ g^q:(fOЦ:80F_^teq~#j Z8piܗK%˶ YZ