libimaevm3-1.4-150400.1.5 >
A bvEp9| 3>|!$b#6U^(*)R{l7f ȕ_4^c7
zϾR88t)
9[ʓ:O1'SdUe75 <7>c+*Vh!CϸX([ϐl 4# {q S +H"XW&NСQCv^
֛ߤ.+ odJG^j>
#\Onx^n7db7c0ebdb3ddfa39ef14aac77b9d99066a0842c bd556b002cf45c2c7620e3b259a4532e379f910578dd5df21513118edb0890d6 bvEp9|cWG;\v/I
;yÓ;e] ZT[3Ȋ)#YSnL2 y ؆Y;BgU]>I.zfk`xmE <'ER.c(P'Q*W*F `h.
>f/jpOPP+bR`! ON~EA7qTtHlB ė/f OE+{VvQ6)%̿ "%
> p @ . ? . d
; & 7 b h p
4 T | $ \ ( 8 9 L : > ) @ ) F ) G ) H * I *4 X *< Y *H \ *h ] * ^ * b +Z c , d ,b e ,g f ,j l ,l u , v , w -D x -d y - z - - - - . C libimaevm3 1.4 150400.1.5 IMA/EVM control utility libary This package provides the shared library for IMA/EVM (Integrity
Measurement Architecture/Extended Verification Module). bvsheep65 dSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://sourceforge.net/projects/linux-ima/ linux x86_64 kX 99 FA큤A큤 bv bv
bvaaabva 20c8f801f2b51d21e8542a2361d215a2b6238732c33ee34a247dc3ef67c087b9 44bdbb321292e8c0e2984d17c9564adfb497800e41851b9d2ae20b14c01f6b8c 4979bbf94c12bba64c293a759390e909c9bfa63103c4a1e9acce085efb6e30a7 2688f38076022649f68b81ce52ce35abe486091f869e8aa342d2f5cb355a050a 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 libimaevm.so.3.0.0 root root root root root root root root root root root root root root root root ima-evm-utils-1.4-150400.1.5.src.rpm libimaevm.so.3()(64bit) libimaevm3 libimaevm3(x86-64) @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libcrypto.so.1.1(OPENSSL_1_1_1)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 a __u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz meissner@suse.com pvorel@suse.cz mpluskal@suse.com meissner@suse.com matthias.gerstner@suse.com jengelh@inai.de matthias.gerstner@suse.com meissner@suse.com meissner@suse.com p.drouand@gmail.com p.drouand@gmail.com - Update to version 1.4
* Elliptic curve support and tests
* PKCS11 support and tests
* Ability to manually specify the keyid included in the IMA xattr
* Improve IMA measurement list per TPM bank verification
* Linking with IBM TSS
* Set default hash algorithm in package configuration
* (Minimal) support and test EVM portable signatures
* CI testing:
* Refresh and include new distros
* Podman support
* GitHub Actions
* Limit "sudo" usage
* Misc bug fixes and code cleanup
* Fix static analysis bug reports, memory leaks
* Remove experimental code that was never upstreamed in the kernel
* Use unsigned variable, remove unused variables, etc
- Upstream bumped soname to 3.0.0 - Update to version 1.3.2
* Bugfixes: importing keys
* NEW: Docker based travis distro testing
* Travis bugfixes, code cleanup, software version update,
and script removal
* Initial travis testing
- Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch
(patch from this release)
- Add make check + dependencies (getfattr => attr, xxd => vim) - Fix missing new line in help
(0001-help-Add-missing-new-line-for-ignore-violations.patch) - Update to version 1.3.1
* "--pcrs" support for per crypto algorithm
* Drop/rename "ima_measurement" options
* Moved this summary from "Changelog" to "NEWS", removing
requirement for GNU empty files
* Distro build fixes
* Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this
release) - Use %autosetup -p1 - Remove suse_version check for tpm2-0-tss-devel as the package is available
for back as far as SLE 12 SP2 and respective openSUSE versions (also check
was wrong, should have been 1500). - Fixes from previous SR (reported by fvogt):
* Move ibmtss runtime dependency to evmctl package
* Remove dependencies to devel package (should not be needed) - Update to version 1.3
version 1.3 new features:
* NEW ima-evm-utils regression test infrastructure with two initial
tests:
- ima_hash.test: calculate/verify different crypto hash algorithms
- sign_verify.test: EVM and IMA sign/verify signature tests
* TPM 2.0 support
- Calculate the new per TPM 2.0 bank template data digest
- Support original padding the SHA1 template data digest
- Compare ALL the re-calculated TPM 2.0 bank PCRs against the
TPM 2.0 bank PCR values
- Calculate the per TPM bank "boot_aggregate" values, including
PCRs 8 & 9 in calculation
- Support reading the per TPM 2.0 Bank PCRs using Intel's TSS
- boot_aggregate.test: compare the calculated "boot_aggregate"
values with the "boot_aggregate" value included in the IMA
measurement.
* TPM 1.2 support
- Additionally support reading the TPM 1.2 PCRs from a supplied file
("--pcrs" option)
* Based on original IMA LTP and standalone version support
- Calculate the TPM 1.2 "boot_aggregate" based on the exported
TPM 1.2 BIOS event log.
- In addition to verifying the IMA measurement list against the
the TPM PCRs, verify the IMA template data digest against the
template data. (Based on LTP "--verify" option.)
- Ignore file measurement violations while verifying the IMA
measurment list. (Based on LTP "--validate" option.)
- Verify the file data signature included in the measurement list
based on the file hash also included in the measurement list
(--verify-sig)
- Support original "ima" template (mixed templates not supported)
* Support "sm3" crypto name
Bug fixes and code cleanup:
* Don't exit with -1 on failure, exit with 125
* On signature verification failure, include pathname.
* Provide minimal hash_info.h file in case one doesn't exist, needed
by the ima-evm-utils regression tests.
* On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs
* Fix hash_algo type comparison mismatch
* Simplify/clean up code
* Address compiler complaints and failures
* Fix memory allocations and leaks
* Sanity check provided input files are regular files
* Revert making "tsspcrread" a compile build time decision.
* Limit additional messages based on log level (-v)
- Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch
- Upstream bumped soname to 2.0.0
- Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss
as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd;
better to use libtss2-esys and libtss2-rc than require tsspcrread binary in
runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same
logic as runtime dependency for devel package
- Mark COPYING as %license - Update to version 1.2.1 (included changes of unreleased v1.2)
version 1.2 new features:
* Generate EVM signatures based on the specified hash algorithm
* include "security.apparmor" in EVM signature
* Add support for writing & verifying "user.xxxx" xattrs for testing
* Support Strebog/Gost hash functions
* Add OpenSSL engine support
* Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures
* Support verifying multiple signatures at once
* Support new template "buf" field and warn about other unknown fields
* Improve OpenSSL error reporting
* Support reading TPM 2.0 PCRs using tsspcrread
Bug fixes and code cleanup:
* Update manpage stylesheet detection
* Fix xattr.h include file
* On error when reading TPM PCRs, don't log gargabe
* Properly return keyid string to calc_keyid_v1/v2 callers, caused by
limiting keyid output to verbose mode
* Fix hash buffer overflow caused by EVM support for larger hashes,
defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts".
* Linked with libcrypto instead of OpenSSL
* Updated Autotools, replacing INCLUDES with AM_CPPFLAGS
* Include new "hash-info.gen" in tar
* Log the hash algorithm, not just the hash value
* Fixed memory leaks in: EV_MD_CTX, init_public_keys
* Fixed other warnings/bugs discovered by clang, coverity
* Remove indirect calls in verify_hash() to improve code readability
* Don't fallback to using sha1
* Namespace some too generic object names
* Make functions/arrays static if possible
- Upstream bumped soname to 1.0.0 in v1.2
- Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2) - ima-evm-utils-xattr.patch: xattr.h is now libattr.h - Update to version 1.1
* Support the new openssl 1.1 api
* Support for validating multiple pcrs
* Verify the measurement list signature based on the list digest
* Verify the "ima-sig" measurement list using multiple keys
* Fixed parsing the measurement template data field length
* Portable & immutable EVM signatures (new format)
* Multiple fixes that have been lingering in the next branch. Some
are for experimental features that are not yet supported in the
kernel.
- Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got
backward compatible support for openssl 1.1). - Small spec file cleanup with spec-cleaner - ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947) - added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima
header can't be included if the openssl headers are missing - No need to remove .a files which don't exist.
- Drop extraneous ldconfig call on preun.
- Update RPM groups and descriptions. - ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the
"current" version of stylesheet to make the build work again
- adjusted spec file to apply stylesheet patch to SLE12 as well - Add ima-evm-utils to SLES. (FATE#321603) - ima-evm-utils-fix-docbook-xsl-directory.patch:
fixed the nwalsh docbook directory again - Update to version 1.0
* Recursive hashing
* Immutable EVM signatures (experimental)
* Command 'ima_clear' to remove xattrs
* Support for passing password to the library
* Support for asking password safely from the user - Update to version 0.9
* Updated README
* man page generated and added to the package
* Use additional SMACK xattrs for EVM signature generation
* Signing functions moved to libimaevm for external use (RPM)
* Fixed setting of correct hash header
- Add additional requirements; asciidoc, docbook-xsl-stylesheets,
libattr-devel and libxslt-tools
- Remove COPYING from sources; upstream provides one now
- Remove automake.patch; "test" directory isn't provided by upstream
anymore
- Remove ima-evm-utils-xattr.patch; libimaevm0 does link against
libattr now
- Split package in three subpackage
* libimaevm0: contains shared library
* -devel: contains header and examples files
* evmctl: the kernel signing tool
- Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path
where Make is looking for docbook.xsl /sbin/ldconfig /sbin/ldconfig sheep65 1651961876 1.4-150400.1.5 1.4-150400.1.5 libimaevm.so.3 libimaevm.so.3.0.0 libimaevm3 AUTHORS NEWS README libimaevm3 COPYING /usr/lib64/ /usr/share/doc/packages/ /usr/share/doc/packages/libimaevm3/ /usr/share/licenses/ /usr/share/licenses/libimaevm3/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utils cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a2342935cb8ad1a75205ec8e8f2ab8a9a13fcde, stripped directory ASCII text P R R R R R R R R
IT#9`Lm utf-8 e1e8cec8eef1b920a401e08f6293f901cf122587b03a73bb353a9ea743414848 ? 7zXZ
! t/X]
cr$x#F 3$dGH`FI^~8?J?aO~ ?pwm
ji!G$/8s3
4O
_u}+~-~~
Ӑ)AT9[i]KIxu/2̩dXUT*:3ds=Eؤ.>>e|>^{wY`_C^qL-7oJt* %Cl@ \&ŌDj咁5\Y=q81i`})!w WK dgYRdMŷS̬vNZBϹw1Y.q8ޜ˿jϰ7qwh)Ep%o!˛Qn)z\zz 5kP0H ?w-ʐգ[Dc?& _k:7ې w(~E(Unc0p +E; 5Sʜ/I;gƀc
.35l{LJuLJ-wNncQwHK@XB=TuFrhFnWUY'.Yb&ËdR+0(8Լ VUfa> >eqmnȃ *"z%ݬ5hW1dw ^!&#Izjgc[ Wš +7[8X(6e҄>{|(ɲvNMcw"h3ϾP,F bx iN a)s 3 ASUt;6W(u5eq̯$9CI k=Ut<ͶO8l|֥ EAJޟv&!OWC4V>57لŒ*syL m5"jAPA5- {:Ѱ~d!6\ԩ&y|M9
ź\W}M2 t]W/ZX+\>@n-(bYJy,ͭ{i@c#q`/_{!|,68mJFUNL6 fe!
9S,=v@}Se7L{L9T'T xH!ne`}@{#}(Cfo [`e>d{yl= %Fz ';aK.U߭QO`J^/Kg4r a"VC~nӀ\!Mi/~"Q svFS6Q_hHc֖,gJ -:& #>8{'mC HsSʔ'up! m5bF}c}iRƭ:7H.'x,rZdf-iꂊE+b, '\ P :7پ(NX(']|u;oiX6z\Kˁ(0hGa#ivRL}:!Smɻ_?ȤT7C6H!IHCf"%Z~Z) R }`60Z58KP];쒥<ѕlpH4ڈфg\,CAv\Yx| 4ʯă""#z5Ax^HfjMW &6 BhoBϣXT{c{s 9s<5zNcݜ)ԥ=ڵ?2!ì{BelvL{[d,b8ˏ 1CU_AxTT|Mc4 /mӪ
/ O2LЀfJɍ0.,3vw2M\H(:(bvW
Tf5km! URc5Xu8adCHb_ j'|3Okak HbV7K䞏% F2̤-N*h#b YFF
>߾-Y]7^v
Rdm⎝"A$ޏn- e2*7Rac+ HUE̫
Vt+wB4]\Jno[w盍n2ˇf;5u!INѨfԱ*E5q SZ\5?S ]UG іP}9&f2o,5.p6 0jU3N﹛ X.afYꙩ43 q`_!J >$%\Q ]#{i!RM? 5 :Vd6'dJ$5b<53 2B0C?"cO ! t6~*ݡT?4:* ^*8vrpZWd~rzJ2ৄw LD M.
eMKwQssp}'D LNm.<56K#CjR+dM 0> خUk^@y*kL0grb6Tpg+Bߕ}f 7=\ `n0x>*Z={`qa{>
uAD 9 X1xв* 1=7e0 8:%x1E<*Y3K k_B@>bZpȗ, ` pHfjzj%qMNaSwB٥E[5aP^. lX`Wߕ4
39b,]VA9 ܰyTU=cQd ݱ=⤴ԞDc 4
uLotMϿYnu3f|z@O^1> m2W[: "=uC lmʼn8s a;؉1\Ě9
HS:ʧ_1; ij&^99qh ܔ_J& 1ROgVNV( U"Y+C1crD A'ʒH ~ڼB Q> 8@cf=^+Ot^WC*Q@?4v4{ë^"a<(c˹[Ck.T s';|;oi˦G@pgDb@sTY-#P_YƸQJwuZ կEH~c }X?
}W]W $or
\as&·tJ;03"a]bWC 1
-GO$zqeZr"HY?Ъ:^T0EM.lbMC,JDL鞻 å31"Uk6=WL!k xŵ
7o EfgdVdžEpE7,mC-IhЅ5[%4xL 5N%R.f?{-NJk4*.pgأdwfFdD3ˇq+i۫"sD*&dᠠ1oRLu3鍕WM]mv<3ɐr$JP*x<տbiCh:^P@ >k֧^MV#qln;ߜ"-Q6ZpMiݤ$t)KC}`4V9&êt`xn
&ߟ ՜gl%Q|na}\nQW*mWl FhDzc靤>ᥓ'yu4 )K `Œ
(?ՠy l5;M}~҆=-MJ/r ncg|b ayL#r V ㋧ў\wWa`&E /#1F,XT~]EG}v{%rgrk/* f?];[4ao2*7C+J*0`@7
9r]cU-X2 Ș w@/A!'a}t^CL,j5 J ?Ewqz
1G_B-NrpEaD
!{jrV:lm;D$boQ{Pd3Y>Q =RՑYl4a"dէ
c J?ive`rO=Xk9Vpm*q=G8s:H6b])/!X &Y}?Fn<TŎy^g6C,*#R]AXFu|=mw 12 . BK3Wuk8a]lv!m`ߑdmGCe{Axz)ٹV7;K]Bv[lUSč3}x
vh_l*^B=e-#nbrnAa`쿜)O#n(dW+=܊wkW| TGJ \G m y]1 J-![|ihGJIq5?YhqV0&tˏYemJ, ^9I|0G0zvB05QXOS,7DFأ<ǪhjߩU6|[8 dBP:k^nnG]uA7A8Lӹ<=JHuqUcN :>`Q
f1 UbU,\.p,KP2݈,ިU|E'm(dJ ^W@Kuy$ daeK9jE/&*#?=Tڴc*ng)!~}r9b_Ɣ諁!*O {ZݲX ڗ/q3q˓n \<@
V50ʧ$K?!VO+`fXG>78F~)NݼzZD#Cp}" w64cFg+x@ވsgH}mfwo r%+%_tP1cI
y Ck`N;dֆ2 +txiEaosa=) v̲:,dǒ`3"nּ1y FmY!c1zzЧȁLk݆#f$~.53>LQ(:x6H3b
GM1D/D9& !Dz7Ԓpo>4Jġ#&&]B ]0;
$b.N!_!pwޑ!`` v23Y5U ,(
0 }l 46S&3]6wS8l_ЇSӽ!BkMzQq;eйhV.84Y_z5ӭ(JZ2Jo!} gǴuAI^B lq:xh $S֭p k*q[ҝ:0}` tbF_/qS1"oxwKp6c !/9>4 w.wx]6QM !
A4exaQ>kxsDGhʏ"}93j@N (:+a_o7l>}?0S&1&t7gf;]ܲnb#㰹l5a5͇^`L2 aի-A8 lr~_1ak='KVjQgY@÷# Ć \XiU< 7ti*cfjֶ z4We/lCl۩\VΞ/mF9Wj,\iNg%5KY A\5BLpA)" ZAA۩x17:[Ntd J.p#Iƞ
AךU;aD=m?+HF|x/Os8f| m],yPU
D#^74ѩo{⺍!Q?PUy4gS
=e-) TvN!?ЭtWQSGZe`m3Rhv^ 8- ҵŦQaQ.b7L8pLݟ!OOMguB `u7cO2: fj
aԻ̾UQTcGMeKiOt[Bg8C]6.k &@kf ;>~ qt5݅7TJZ+LIUz|fB.hH ݞog
[`ehZW# YסWA_H Ŭ^:?}uA_rM,Њ49r0-HNi u;-V2\)S۵q L7FԨ _6DLQSJӶจz lPT;4gW8O{'4@kPL8jH* &><5J Ш~s5͑g-=1Y)?-}Ŋ*{[G~G,?4tz.^7bvK]e od@!xic
ޱn*Yބx}Pl=I@n@~==9r;dDeC=6̡^
S&AXQy!3AHC/Ǝ0\eӣwSi;KTdn
ۭtc9qIlM5Uof@ BmViw*{ZpJ g:O\98^q|% bt,R2H4tNQpH] +^sg u5.OQv= u?"A AN/T"CV ZA ;JU%M2}KX[ mԓvHuҐyg$upt'Fv=bkP3DݬU fي @nk2"ܰ;ozVjD- d@Lr4q gLfR"OzdgdI['Z58Rك6듉W]9EKde4?WsѼ, =ͳL/-1~A cج(\^tvΡB'鷤@jdTGe- 4|TW\TeX)-Ӱ */t/0[L@/| SK T+-P,[&'%/o}Q K8Ig ǀ R0 $ dy/HvZu~M`aV)ybg#E5pue~
Lzфr)P *r۸
AiB( 1rE,.2`1v4 70@x5\zkC~6[urls)ϔ
g̺2%|I}sj.U1kNkzb.ۃO
vv{h> ˋ(~̗c^v@[6nl[Ҡr &@ Y,8q<#IzJa_ qҫMѧ(rk1ߚN}el^F!xpqCܻbAfwRU
ߠ}Tkr 5r} b ɕy xV%0QYEUfп]!H!9b݈'ŁFjdqZ<@^kX[
C䪓~ X" 9j$h ǃ$#PࢦL 0eV)|jPX$?}" dUTe ]®Y4̐AE$JL`(.1m*|hHz հRe[x5F> j"ej
rph-,@ ꋦ()ybf /z qŪcFmjTɯtvmoe5Q0k@ lF.ܴ56)c)W6H"^qB~H}T CQnTF/?Ex)KJ|6![y0\[+ Fَ6e,Q/J;6U):wC(p럎2-JUfO=E,/,FN8JhSF:Y; \5w$YT3Q8[DÙ{GG,={r] Afn\襕(y249T N K&3ho$OpsXz`@;;U.ݰI1Hװ) ar0wk
Bh 9).B,i]+Rb2&e^*'$2O ly .wt [3=ڞS5#pw$VUJGjz+-;O[ X)@$)}F^ы T =fȇ/ C!lRP2뉗d(q-@m|>_w
Cz(ħBg
} ,Vb?" b}eΫ\CWim!,lֲns7 &H2mᜡy iR< Wu:
2|v%PJQQ s_ X[Ѿy'> 6tJI 1tqup 3{fVuإrM4J s+UO3d_f'.z
P*"z cJ#17e(=vt3lwyK͔œѐ!X"OvPJY}|tX8Yݿ" vEJ,N w]./ :7~f و,Tp ɇƭYG]Ir >
DžY#}+M㚺5䶆I==3 #f
&!+303p30;b'ryH%B==v0Le%WG}7GH,;)m7i/h?櫑ZC/tGUsD+RS9wt[c
m? kbKbY}0<2"ْ djܙӑ])+96iqi2B5h*ߤnF*T#LG-`Q
:Ƌ ՅzaYPHt
^
V) h,\JKQC|N u{KWG L(t)wZ^ ꒈ7 ).+E/ ْ#TS 8 .'uYvEg*RÎtk
=+.). Kbv<# )TGIr5N\ d=S?es Obv5U
^Q?m`^jgZsDkwm).\Wŵ
9R:y&)lw9z8_}d'@% .fkv'奕4% 2ytV]+@ / h*)JH&])$i
&Oݰk-GUfkwnh;vK.I/śDQ x;>kT b86\S)U@˧k> Nj\^g`E[[G[+8ctp 뫹i|aREȩUcH>{
!$z=4H^xsOP) C'e0rPW5 ̊`'{ɐ&Tˁq%E(is k0w@Bo]xS
n" mdѾCF2%IKӸ"GǧKZY(f%y_pd Q`3%5IR*B ~ Pa
E&
d[FhBhH1
ncj~Uwaj=O7G~ȚRn/3ݻj0dC0/:lsk4wrI+l;SdQ[`>3f(ƒ3,Y$BGs{AW˱Q/ vfO7NM~/% sQf6I(:c fvB+<
sv?J:UU]K-%i&co81 1B y
5G U; (G%*1A'[[h4J-A ~E> ʜf1c8#!zAk]ʫ= %-TlٖqXX4.l
>-G~ät$WBB,g/"r
ܻLB=,4# [xǻO[@R^>d20K(G ៨(>Ge
!* nyV M}S &b(A6m9]y? "'nuqPe6iwz?-HI2k߂ H rR7FlԢ*Hmp%.ţl2wer@#<_L %P5ld6 r7\{eHT 3lE>A~/d-uz><)R
Ϊu6Aܾ'<=uSocOVnpD'ݱX ]u}ejy~a^oVkT
9 2 e'g1cIhrlԜ/ T#~4u>TM
) @+O^B j_S =)FWT!ylM4PK_ Q8jG,nvi 3z(d)nf5E^ 4so@ADp ֬V) (4 ewH=Ъd '#Z?#x#_fl;Bأҧ:cs7$/|'kN"cJR`
'\{_iXLD)(}g riIm"уs{r .<+cٚRI!.%<ÕX7wNKx2f_8!֠ນ@6x]ˍJ9Cp)ԀoVLr ~P[`Vb#t-e}c>pbO+dZal R(`X%#;MNX*lڥT͡,㻂e1ˉ^_8xQ"pxeU3T RD?U$Q ZF>ԩi lUDly#>?bh˷] D@{;`!ك
`ø:BA [=ɽc 6+фh$Ni^og(&mն1bԴW:(uV \>F#0[-: EDKzC8ĨSVz1v
7 kFN#1?k1_%N$FFdr z0y=$i,9ͬ0]~ Ki @ \ժN>؉ܖKMp5/E軄,7+C^c *k91@!q)xl:&@6 aj٩AD
dcD:۵/5Q6 B: m, %asz.(6^:&'z, 5l[f|2?A1eL؊,?@=-vkv,nċ!^t}lm{h Mb4dcW4)ZξHVRvE31e 1b3^ 1˺ďB!~_/5=' , O-<9ĝ|QQrq|7pw~t?>xuC<,c{>[V.Ѓ/#Rx%nr4X~ >x1ny@l0Y!VsO7t^ bÖ~f+zzq@_9\1kjz
FUv/eȇ,O:r9VG+zaE7-&(yn (_hGk
Yލ|l=FZ̸#oį' A,Nl]%! >@86AuqyBtFB(Xj\
]$s{vSnMs{8pWc908Y5])P!}]ۿ- "ӏP_H,jj}K=
=_
-f͘M|Z-h(җͦ ZoE"Wl$/6rI8=0pl_J?$ [0U#MހdRIwPuQ)䫟{Y <751bhǣa(+l$ ubvyBV pU p n_G n3!+wg x-mHXbwq[2j|5һ,C&{ 25|vw{ 4M@yoAkrScod)l!X&\$u~T7C 5pV~`7]TsCa+qVl S R^F0j.p9@q' |vHY ݈w3LjmrWsq-6m\$ MVB*B W5xTaI
ñH+f'n .1ECj']c\)M|g+h0:w6 ٿdAK1(
:=,S%XB2),?t%Is Et>]i?:AkanCUbz; `{UkGޯ>h0q*2':4sMsSZ}_[9|C:߃mvq+6>u#EP`e%u|`E'G8}zsyvՇ$MtcP'пr P>Aj k,Z 5֝\Ay ?!s>#8h2A.6+1 TzI_hRj ݧo0&<-[M6*p QQ7V2Pj\\B*N_P& Tc!>:R {`fMQ<9D/4ܙvbpC-H7qc0A un+ κf s6 Cx+7 ¢x2n㮽QP +I z%̄1h\G$:$5Z<k^ q m9mcfB`A1w{x5Z{0{L[{6lAh ԥ 1a;'@
q:wdل]~+?2RT%cXP,S_G4f ϡ(qBT|̜Hi˽z93g[=Q'3R]-Dcl(h (ܞ1 h+;4خwZ\*C+O.,1B/xmB i[%4W
ԉe Mj$saaJp($!mF)H"Z
Cnd $ 0{6%#2kRO4
?-ڢM¥t[9:6f rވC/YyyXQX5_X+IW \UؐxwЂ~L G4E+~>y 'kFcF/ӯ}8Md}* #ZQɟz"C/
0Xg AxQ3H̍H$xޭ1 -uuDjs49 Ō:2Z@:Y! zs .s>BѧE6h3E!E]gg
]*+#H `o(t6
G,bK
(EG'_) MM>Ua,Y]?+w{;'.$-
t߷1s.{xheU/ [}"$ܪv (}$DO
Fp$$6)M6'm calo 1OxE!jț'qsh;|=#| *dWp<;(ϫNP`z>AVZUK*V *qUΥ2$q e?-\}ԗxN
(z93 Ƒy.Li~D6l@vĤ lT~e>k*"Xݩc:RP%8CA=]F:x#p
ƧXi' ƄXJ浚0D[4g'ћǖA9:H
Gr9?ag2iYW\Z+}g!S>Oճ>6Ar;6 Ǯ.I!ԟ=zXBk9p6
d?5kd#*¸ҰZ 78w|2K ;?Q(kuHM]Y|u ړ><%'xZt`}> (o } [V
9 ܓ9ľyb ⯡ RD˝tg@A{a^K0 ԟH0+}3W\Zj<a&нD9I&Fisf_[(A\wgF>oLUMJ, S׃I[:R|˼`B|=ix:fBw*n
EHYpu]X#Z] /9YX$;KSxn v]bȉqWtӗZ3'zFwI_Z-nY .W\ق|n"\ QƩWgi駽V>hT4 wGn%,ZB2W
%ӯNIg%AJo9 jED87Q'v$S|Xf\⥙Kkc99YlQiIRlk *
]#q?s .r#ؖw~"'HėdmRAQ-Pcƪt 5!{R=25/N$UcI&ۏo[&-"mS8 ]!t5 OR*zb5z'ɬΚ^lK;J
3dB )DUuTz~٬Ҳ|14cD R0_fEn,Hs:s(Gy\9"8Rmݤv G:Cy\Z xc
34\zi{5z'$aTg>wX6AyX!Z8BU2Jɲ
=ާ% d䋿D=~<*uwm۟@kZ3d15vyOU}ӗ#p ?hz՜lZ~ZRm6VL}o43ϫ=|OW|^iÑzJet3 d5rJ$"$e+C!^7 YA+s Ɛd08`iPwooSU")ZCLN:B<<5^uѷ~.P3rK魕*"5 g}-MSIhFAڸC%7gi1oK]1] >țBpZ6edʐ=9\% <
qBE #Vu$̓~&_
G-Yf=\NP^k0F1Kc\ 5nH2'֟xfn#?{96KS$ ;/s6y"x (;ٌ`{TDsu+3z? s7HNgnF2pD4e{FW0j+kZ̜x1bрsi {VLNN0Qgi}"slULk*^QANc"A03_Aw=MWOCG8O6:/j*k ._^mD?TctOa% %ס5>|@G6qqҳii+.m
-<Eqz%T4WTiW[-1 * ^S(E
ep9h-e&odžĠrT5¢ |\cRowyjryW^iwcؙ 8oFs ʹF|IۦO{]d_ro5rѧq.}h6xF? {\:P܈kM5Ɨ6p+Ji٬W"[w-H\&<5Rva[ad[sWH ;,섷kh)Q@nĵ>fIvd q۳VP:
e T-P[h86Q5/?I |)kk$$a?զw!#C[3F&w