trousers-0.3.15-150600.10.3.1<>,Tgp9||;2/c~PJX=,rMS8s3<9eo yR_=B2_&_%ß&Ƈ.nP哬3x$mHLbxHaIfw gT :#fu0Ngbsfb׽ldVn+WCn:,nM۽)F@03[HE`H1?1 d   V!BO e{ g d ( T  B `%<(D8L 9t :` =$>%?% @%F%G%0H%I%X%Y&\&D]&^' b(}c)&d)e)f)l)u)v* w+x, y,dz,,00001Ctrousers0.3.15150600.10.3.1TSS (TCG Software Stack) access daemon for a TPM chipThe trousers package provides a TSS implementation through the help of a user-space daemon, the tcsd, and a library Trousers aims to be compliant to the 1.1b and 1.2 TSS specifications as available from the Trusted Computing website http://www.trustedcomputinggroup.org/. The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss.gnebbiolo)SUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Productivity/Securityhttp://trousers.sourceforge.net/linuxppc64le/usr/bin/getent group tss >/dev/null || /usr/sbin/groupadd -g 98 tss || : /usr/bin/getent passwd tss >/dev/null || \ /usr/sbin/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ -d /var/lib/tpm tss || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in tcsd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi [ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in tcsd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi /usr/bin/udevadm trigger -s tpm || : # bsc#1164472: adjust potential root ownership to allow tcsd to open the file # as unprivileged user. Be careful not to follow a symlink target. system_data=/var/lib/tpm/system.data if [ -e "${system_data}" ]; then chown --no-dereference tss:tss /var/lib/tpm/system.data fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tcsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tcsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in tcsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tcsd.service ) || : fi fi.\W"#]~^^A큤A큤Agggggg^S_L^S^S^S^S^S^S^S^Sggg^S^Sgeb009b7d1132ac33411e8f838c7e272606c8dd1d8944bc8b82ee28f9114e82fcc56f762ff401646eae0b25769c79234e22cabea3e3b4f4c7bc581a23787b36f44b635e9ae00264cd370fc62921814265679e2a15fa6d6ebbd468e40f00af48f42efd45c76b2d8d1201c09ad47f379c8f555b43e4fd00f37250ff97ab219eba08fa066fc32ac644d28c5ae56f62feae0e3b8639565dccad1cc4345dc71577970ffccf2c7a906ae571849fc1bacd98f3e070e4da85b2ec6e937aa45ca1323b55ef1ad596d12e7471549663c03e280b5b5d084a2e853fb86e4d766109818f9d7dae4a6bf595610b97b05728f4615d54faf290fac3f8bef836a5d919de070f3cecc4842cff0de213dbcbe03bdcc03c3dcfaa48e03bf45eea9d18e970cef4411f4458686e9d62dea2df5433d4a435602c3e0522b3bb68a2e75c39c80552d6bdddd948e10fd3096b3fca327b01803d91959817028371fe8d9e1970256bc56aeb1bdc1138547b7d669844a1d7d5b9075872b6f5117996c0a21d78e383e79ce7eaedb8c07ef598700d70a9cd14ba28950c7b048cf21ec2ac2297013e5789830b58ffe8baf09355ad0bc2e91d802c18654c2b9219ac1a26cab805879a784eb8a030e02c437cef9d8224b158378505c02b77fcdaa05a2f9ecc1552e95ad6d71b5ea96b690219a3b32565147e2a9d085f67d3c83fd4b93dad037fb966cb0cc5499d8fa6a568d7c26f86aeb0e601cd2358475047161b619bb46872f84569448031f3649619e35e3194d734c81d99d6cb679ed5c24ac97652b068ff12eed215e1ce382a4fb7dcservicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottsstssrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottsstrousers-0.3.15-150600.10.3.1.src.rpmconfig(trousers)trouserstrousers(ppc-64) @@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(trousers)coreutilslibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)udev0.3.15-150600.10.3.13.0.4-14.6.0-14.0-15.2-14.14.3g@f4a\>@^˳@][GXh@W,@U@U/@meissner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commailaender@opensuse.orgjengelh@inai.decrrodriguez@opensuse.orgmpluskal@suse.com- make sure that udev workers have finished before daemon-reload (bsc#1231071 bsc#1236457)- fix runtime requirements for stat and udevadm (bsc#1221770). On minimal systems this can cause the %pretrans or %post scriptlets to fail because of missing tools.- update to new upstream version 0.3.15 (jira#SLE-18269): - Corrected mutliple security issues that existed if the tcsd is started by root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331 - Replaced use of _no_optimize with asm memory barrier - Fixed multiple potential instances of use after free memory handling - Removed unused global variables which caused build issue on some distros - drop bsc1164472.patch: now contained in upstream tarball - adjusted %setup macro invocation which seemed to be wrong- fix a potential tss user to root privilege escalation when running tcsd (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent badly designed privilege drop and initialization code to run. - add bsc1164472.patch: additionally harden operation of tcsd when running as root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group. require /etc/tcsd.conf to be owned by root:tss mode 0640.- Fix a local symlink attack problem with the %posttrans scriptlet (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack to gain ownership of arbitrary files in the system during installation/update of the trousers package.- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These files are only sample files that *can* be used to fake that ownership was already taken by trousers, when other TPM stacks did that already. These files should not be there by default. Therefore install them into /usr/share/trousers instead, to allow the user to use them at his own discretion (fixes bsc#1111381). - implement a backup and restore logic for /var/lib/tpm/system.data.* to prevent removal of validly stored trousers state during update.- Update to version 0.3.14 (see ChangeLog) (FATE#321450)- Check for user/group existence before attempting to add them, and remove error suppression from these calls. - Avoid runtime dependency on systemd, the macros can all deal with its absence.- Force GNU inline semantics, fixes build with GCC5- Cleanup spec-file with spec-cleaner - Update prerequires - Use systemd unit file * replace tcsd.init with tcsd.service/bin/sh/bin/sh/bin/sh/bin/shnebbiolo 1738925487 0.3.15-150600.10.3.10.3.15-150600.10.3.10.3.15-150600.10.3.1 tcsd.conftcsd.service91-trousers.rulesrctcsdtcsdtrousersAUTHORSChangeLogLICENSELTC-TSS_LLD_08_r2.pdfLTC-TSS_LLD_08_r2.sxwNICETOHAVESREADMEREADME.selinuxTODOTSS_programming_SNAFUs.txttcsd.conf.5.gztcsd.8.gztrouserssystem.data.authsystem.data.noauthtpm/etc//usr/lib/systemd/system//usr/lib/udev/rules.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/trousers//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/trousers//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37368/SUSE_SLE-15-SP6_Update/acab3358446069a4d3709cf4ea8d3d73-trousers.SUSE_SLE-15-SP6_Updatedrpmxz5ppc64le-suse-linuxASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=9f72808c8a7fa7320e6df7e82a126a35023d1e56, for GNU/Linux 3.10.0, strippeddirectoryASCII text, with no line terminators (OpenOffice.org 1.x Writer document)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R R R R RR RߍjÆn0Ʃg# this scriplet and the counterpart in %posttrans work around a packaging bug # that was present in all trousers packages since around 2008 until 2018. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files # from packaging, during updating they will be deleted. Since users could have # created their own versions of the files already (by taking ownership of a # TPM) we want to keep those files in place. # # to achieve this we use the ownership of /var/lib/tpm as an indicator. # Versions that still wrongly package those files also had the ownership of # the directory wrong. Therefore if the directory is not owned by the tss user # we apply a backup and restore logic. [ ! -d "/var/lib/tpm" ] && exit 0 OWNER=`/usr/bin/stat -c "%U" "/var/lib/tpm"` [ "$OWNER" = "tss" ] && exit 0 for data in system.data.auth system.data.noauth; do file="/var/lib/tpm/${data}" [ ! -e "$file" ] && continue cp -p $file ${file}.rpmsave echo "saving backup of $file" done/bin/shutf-8dfcd7d311ff56891b8720557c819edc0b75c8a47d51aaa1397ec9f12f1496018?7zXZ !t/&UO]"k%]̔60c>ͱ8eC0f녕rlӁ~xu9V<6)b +t9}@ǷL/m R0C 1gS pd N'PP?‰ :Ȓ}GHyy>`I0V%skIL:I kJb#>-*M ?Z]L?V8u`xN=b\?7AfdHa bmۿ`ub<>z n<_I2{cޕ!GIGyxlFLɐS0<=JI 4Xzבi&3[}SrOseDt0hq%tE,HSXg3. BMXhs~OcuZ[^n S Lq$. շT"n+,. NcV\gNqc@*}¦TRZ ?C"䥔y>AkkaR[RMHy VVR+&LNdY)$%CN< <2 ߋ 6OLr E\lI6KuqUAK6;Hb"[c)ܰ ^\jK')H)u5Dc\D5KE䃗r:agChkqϤ_ >$r;tJ5*!,A{V()4obّ68 Dt)J 4 zE6 }3 _۶zgbc6O}d,5~9ǧ]PM> H!ON# E^L̤؄Mƽᯨ[^p'akWO\50m|w8{A7l23rP;Mhgs6vNĵ~N_&5F}_d˶=ݲsSt=nJ*-:^$XVf6k;,I.$ل!-bk<jM`8C'ǰ-ns$ LN8YZ&Ilj(4ZׂΛSÒ A0_.yI̛!VT׊}5lG.P֊ 6R:x.lfkḎMT5ek>(h<v>Eu~?Vey*V jM25NoI]CbQK.T+,GXCԖUs|*}drkXR8& x&&}7ᖆS73b]h$(j4 b;MB!G].;öՊA/mQ4a g ~:]B0=s+@%ؔc. '"}2Y|Ѝࣷz%48Xq LKٽ^EI,&‘e ֑38f -z16w{s\w֪S1-ox:{4% RxDH' \DY+ՍV):.Lb"DQ,2V<^p]S%nÈ:tVm1~dJZqZurDD-6ZobbH 3#xA3?_MEǁ^w+"·!Cx۷CEqA-sCt:OjfA}Jy)BJnNuW(-4JZ>S@)orO\-tvSx1hR 3Z2Š涷zgACt9m |_*"YwIt41φ~ p܅l"8Ly8\g@`UL Tg6U۴ ('S&hv)m'&e!?:2HhnCͽ_ m<*lV~iY~iIK| &ނ ߤŭS;IVfK>mݔbʤnw2eSRSWENE,!zu E }zR龘2S܂rD.gDoNf) UjUQx.wŋމk0'1qY>Y[^lʡA|gW-7t3c,=vv7Θ;{fw3"ߦM3SW/ᧁ}m|5+38gc5?P~-:\Cʣ-(]+ o@=7߄gqJ "~V Flj)x}!YQ 6.U[0rh)uc{!?b] b̝9HMy{8r>Jѯr 8/` _2v+R+4Et׭=qU?0 mOuuO004:+R1@5{\ Lm ij QtQ<5rsEc9QĠf=У+{&wP0y4*ݭS@ޏ"VB.E [" X3:-1`FNZϐ%a^ vJ$QW\m`XmEOu1a5i%r<ӓSSB{Zek01gaXγMX۬T:OG)m[5*A]l7gQ H>9 C(;H{LKi9p9:z-"s1ڞ9-FcĆ5*=RmYcJC}w=>f<5I&*1NNc.g ΅Blb=Q&8rzDJ`ɉ44)sLJTO Z׳KQH(/$NXnuCL r \[P彗ùZ>-BմkF3K( UzR˄8UI ,,N4Uy"B<[Ng*:\r@xp?|wlH  ["ƛbG<`E yƾ)X4i c]N w-nq/!7d1x]_feKa|:~{a!E h~(Fzc<~aAXك@+СAWړLg #1 V?e_|ģ\k P w*RkO: ~w$ǣ1Lh!XHNtg!F}F&<6|?f<)A(mܑwB$sL;@f+ݖF&Emk* Ad?_ c@N/kiքP/5g9;ñeD>V隖Pʕ0HU޵ZT=C#/R*{Mba1 `vD:y*lOٍ:|۽{kNGU*^\ʙ[+u;Pݲ+ I4bwBиxpx2Z ,IL'j< E F.3%(q𹭀 N>),x 6;qRkb48.@&p|o(V- ߪ‘.oiZi9!;3UtuȠ`eB.vBuKVn1P\Tw_!VNm𓽦>XS}ƭi)F) ^Df))z2KBM0“ñ10Éɼ E> $"z!Ӭ%Gb>sO3A0iv}xf)ѕ">ӝeNljM űhšQPAg-p +H)t%yk-h .M$ J!)K!Ons8aGk fݵx55L锱B i L E| ?i(.蓘WA Nڪ_ ;xXhFM>5Τ*RKX )7?Eg :)ې*\K+ŭYzp  s_{K>vv Do*ʢLE~PQ D1WT? !UL7rsE)mP+~$2¤l֫?Ȯ& Z{] CĬ{.; 6Y8^R=S!K\X6.QB"jAvq@{$]9=kϺBЯ;]J({es7,ޑ׳8Y{hPJ\2-gY3Nھ>Z=v$m&R7вΕv1|)4]PK{@}pJ݇Y4\5;vܺȬE.B;phlMDFhU$0D2Sّj9FDZ d >۟x|ABh`,y\ur뺛 Ά §rΦ=* FvڵrV@?߈*; RGhFhcLd}9~²Iݔ% |h)Mۡ)P&;^8_[XWS}䡮/\˭hHe!L,U~D؀$T9Ȇa%6_rQCPW*KnywY"oJ1DYĽ!HihR\w._968%([1L7, QGs1dZEKd>̦mjGUo^;b߉S@/ªQv'ÄiEOUv-bŵ3fKU)`O#*x +#l`e!-g8\n^>NtWlcIO#3^ssPƊIԱa s~p][*=) Nj)I%1.Zh1]z>ײSo w(r;&{gx"YJ2kVDy1tTPD*+$cHiO:TꄇBLυJDZڊk,>+APVx~t1芒ml,DE t}{ ]lS"^+6UKL $@B":Gm2 ~g!LI>hƩr0jA(NEPUs:)BW%.FBdɸTţKyȾk!<$ Ұx0:'\M ,-L^Z@}lNs 9>Z)Aʿi!_x,[ej *A xO_*<++U"Ism~*Dul75y}gة]5!I&‰U~r]6㘵e˓M-d\n2Z3bRgAuMl&[ Uce5ij<(f|'2t,O&i2,5%T3VBfܕ7؏8Ո0aꮨoEUⅴ|ac awE=nRWi!:va#1x"Ch2)1A̡G5k ;;&}<[EDؤRW";\FčjM?MQ 3ӇPFL曧cde (J(u,A:F&~'^"_.7lٮ5"^eP]Y4/tq$TUkz7~N'g%CA(!Ļ+kҟȌ\m(?dW;MҤZXX +5zJ΃`(mvgql7!*7u(<%^ ;͂#hRpsJ>S#2PHQܨKre~Y)P`@Ko/eVcAVVVjٺ%UgqeDYͽoV]ESK/lX C19N~Mы: qH\=Kc^Zo͠NIJmaHfd k-$%BKGoDhȲI5od8) 3#rTIKڻGRȨP ڗqO5|d}8U~~GRËe׭pd]R5>E3uM.uq@,5 xW]DJ=KIM7f3yvʯd\=vy>TFw~(zE :"h*m$Rܒ|pтy C" 9I/~+'o9ΆqD)QKk m5(31Ǿ1DF H[ el\bwmh_loCU)>ꎥG5o9-,׼P*JQ4/5&h@lmJSFGN+O3aމ_$M4孝 ͦS Į"ޏ\^6fTn? i+:?w[hİ LY<]IW<9ʱ7o٩?{ϑ;Pqɟ ,MS\WH2_ go#W?j q5U:YT0HY(Uܦ+{ՌŹ"@laEfUU 9gφ$;tw^t%N"r3sޓ{O̠iFyǔi%9R.m/\=-wNfzvLegӧWjnJ΂`ٝ9AQ? =O3B '4ZL۷ >o+keoyg=KUJs[C ^x#ɀqM N7- zNĆBn:6YnO4Z΀k? VjuŤf2_.k1 +)}D AȻON{㑲T(;>ZӫN{P~қVJ:R-DYRawVOtJs&KMT=) 6zVVzζ Dۖ(ME`c=,(Zw Oљy/&}Mڙ=C1Q=_lԢZa@?b;lY}A4Bcj ȁ lc rx߆R1^o/yK=P0: kNB{!e̥:S50 [6 ؎s1AN %3 EoWX)Vwz ]L9Bc Գ0)\T`ۧ俹B}H BHkJ/M6<|gb d jʳWW7l9b15zථé+0l\-$U \kÎ*2 YX 9PeX-J ׀NN-p_@6cB~D"Byok6PGnۧh>[V 1\̡^#ׇfk2 NU:7ICKG-v󧫟slɂINnSXbEhǤQ(/l΢Ns,9JSa;g hݾEO[~>0²!s2pK då#dtDz!CڝI@V9ŝt(nxk8@ SBWdfFce{[ٮ\*"5n[g -0xk?ͪI-$*roE`n"eduP`bb0iv:JHjϬ\QO8?),#!;Q6Zc9 JF_|U\?(-?![Hs@Oh PNNG2qWF}ЅKQ(8egS$0E4ihHպLZ.' c 5,os-Vb6oop aMZB8'1ϬƼ1A8={QLtef\-Y53˘g[ܥ# dڲ0u]P{!J[y_*{2ߞ l?7JG|xG8 +4m|~GnaQ6Eu T}T:K$߲|`>eDv }TI˧(Ͽ +wY@Y_hq{=E%5!}D`zMS!æh.x%FA GfRHL v_8ogmC|k1Mm[$DPtVfRvRUCt€#RݬFwe Gt_ّ+:39)aݢ#F8Y]>㢑Mv6FLp,2kndeHzFhߏ; EʩBȑ}(V[~Ql3/f *j . vۣ(cS׊('|b.aˆV*kzVb5JN!g{y?S|&IݨX(F_,)G/|e򷨂f&]!$e>8\ f$R}#o>Ȟ=fM|YR>|l8[ow\0BZNms7pdkUYuob2F<|ɗ=.hwRa#EK8Jk,[6=.}nm`kUDIrC05zCPN=7_cfgxe+ [v&wd'04jeMՐG)2O,*aOym]E6Bc M!94ϫH]YN1]}dx|ee⵮3A?ף=_bf}dK({i}U5g@LS1 ޺ BTxZ1Ss.cSТPC5֟V@Va4 8/$) aŃf.!S315 1Rb^FhU*f(@&3|,Q?U,o 8a\B Stz0(I94Uúo,9<gS#RM9=K5`b L2n@c_1 V|qz Ɂ,Wj¾/,U^)> cS]ak못(')0[1YqjKZK`ssŁ.4P]uD$1kpMUr ޺١v,O X*r" Vo^exդvzys8OEa;ZKE`\u#E3_x?T#(iP?X@Ĵ<0}. 2p 5u6ь" wnV$!( j*}ga0yle5Nd__D i}u֓NPZߙ37+n‚^0bTն*¯wlzy?i Cmh3eȊNU`l!^Bj|8v(  \ L bȠNm"HŨrCB EBnOJ]o \'*ECVk妈ò3m0?|p @}*bvԤױ`D'PX6*Ry-oɄS9ϢXdy1 nf-.8ˆz] aȿ*΍dJp! yeO7-2wڿNѱ_7ە]l"񢿥{jVZxk}CnujҐMQ fu8,]ry>7e S;i. L4}] X.Q/>?:}>=~(Aj&_Va24,AG?*&]Raû|3WKa;hōlB|I[Q[%ysd02ReVnشC:I] C0ܤO;#1liy uQdRL6'Vo ` "1I=qox-oߤt~^Dy==RD&<ѫ|܈b$e(c# 2DG Bݨ :Rhd GdOk'PȼD.GfM]W\*AsC9#׹O͐:SB|td%wxu:+ϺD?[K7۝3CAs9:d7')脴ȱEY?D¯+-wL!;!_5"}aH-.|<4G_P]>L4@Ƣ|ɦk+iqYM82;yVPcPgB_`8=YL@|x?tehБWrEƜutRF͖fnGqp AP#,뎟|){!&= S\F47vV~.WLF5ڂ[_cqm7?jU?H4oQJ72{Lt}ڂI6e ,eg D3H4fè_\"rJyŘ&",E!q/ӚChV3Nha6wFԭyT0}~ejL-{R(/q>j +jaAz! uFȀNB騈WV5LttmͲCK+NjGoaNcQc2 E'ð!Y!a@[2avcgpfٙM0y\2܄?<${;yqˊ\ZLV֏.Ad%m*XgK{PNVgd~:MZal*-B,! X>9>KC2K7~294c5f"avZ'`NࡠF-@BEzi[ NCRt^Kv<+5TD%! jK(WuNl~MI >vNoKD"E H܎ G2:*6 1G%Bp-9U#vdsn+t7]`(>Wfҷnrtu>l6Uh/B✕Ci80r>Isf0B*$Ftɵ- N' EfDd@,?2d])SUكրɲٜKqz\Wu{ f_2xRK>05 'dIqٌlEY6jmy_T8g4756$jLhYL{(&' K .ځ|0Y!['L: TT$HKĒӤog9fsyx=f#ہH`(Y9Ϧ_à 35pیbzVq,MIPGr.!qn:;a5 d[oˡ1u|yT4J$['k1@J0(|Hà&kHCάHaWՁye[\҃$o>Z|.Z"+7ؓay-ڱl:3Y;98M찏M~v-KprVg J9u& ۀj!YWabh $2>>O`0c#?8˽~vAuݱ%pJaMjעތo6ť$qNn'YaGu.\yl^Bq!k"*2=Qxe?t.6AG.KN>Eش CK,kg n<Ƅ lR*m'R;}ò~rl6L)˷Y ZF+DBL/r"72偪@Bk)NDn[h?W߬跗U^X;('30( oa<2w$ZX$Pkm| b2J5}pC3x _πVXΥ=/Yz2+:#Pn߶8rWH:$kr(/Cu:Jc8a6{0ը#EC!XtYݓ28nr鸟LciJc; \8:="\=oraKF/L0!yPZ^> ]/db5 XW8kϾ_ >'\ą^w6?=< RQׅbìX;1C#oؖ$)(u*dѦgYk  /34+!&+(pVbSm%ǭ6ϨO(]3i"3GjdWGЎAjVmxtz7lyCa#Jڿ ޔ,N/vZ6+M|M42pl?=~ev9;爋k/#S䖯uE-Ka;~r ͛p؄s7h!OT2BJ䰰s7,Al쁇hOfSFݹi]K}~923Yr^V731VR.%)$ƬQsw#Z|>ԥ2b^@Sn0nx&,;ml j C3H0Q%{e}m.bM wQW1LL%Ssd(6'O/3IFtscuN^>`n saֽ=?f0BNn!E?(qgE1 ={8}'8G[e-Q"d4F c-ybӆ"0|f5V4;% ՋBnn~(} q!FnkJL]< k@6߼&Zp9'"ˉ6_bX8p$9[6ƯjɋLoپz!gDd  arIU3TcQ 6#*޷%c1`|Si)laVx?)^!3>=4T 7U 8)1ڋ,1{-/PIjYIv/Y0JKQp_߶&7MƐ30HНq2qx5& s/yxHSȪ.Ub'tO]z9r 7w1vBאҌu$;=n>0TmZck /Ǫ*WT:rnsTqlEY ;U) 6I?4)EGByߟ{;klae CMKrQzB?PoKgAui[& x?uoiŀj  mO5 G 6 7Ġr#2Jdž@njX  :H1"ϲ<!`YChͦwZro? V~$/P([%* 7l3jyW`Y&#G^v^ WБ0g2!ik5jAR4RABhQbj!3hG'.O'XZԎxpIqysh:fTk_rQ5,,~+J)6BGy3Z׼\٨݅>c PTgjHUyyL}aYY-lnE 3D4ZIR%FG9+cDx͆<~e"} 17Yũ} 5 }@VI3\WPe%믮\mo*XxrP|iM\N9(z#_Q sHװz^{plZitI7FFxWF$Q#'4mܼCj@Рu)ie!fPQ=wf{¨z wj¾C]DK1F7֛rui0.XZ^y Ƙ.NiHb9D]HV:R;wfCV'c4"ZHU.N%*;EفT8o/wB)/{rTlk 9IĊ2PȄX\c-PS1ȁ`p]D]9Œ:R0FSml7\u33\Vٱ"!19 %rCN-|ļI/ҜmZC%4\j5֣1׼h*W( V 4Xf&ɻR#nUէd[GβA,^O#'?rF(ۙ !-:"a^r!BͰMH.P6^,7ߧR[ʼ-1kgU<5QQsgC 9E窀y9컔1/[Ƌ@i\7UߗMMe *BT|Y0!"*LI\;|MdWyjע~7NdcD ~(/9Bohk@_!n OsB<u r-/ ̃=/٢>"q,ͷBϬO.huyn'7nއq@QR[AE7.a$> B~rNb1 hLlHO¨*B]gI]AJWJ1B^kF\>WlP!b qM /ȸs ȂP㾡\&kbs