tpm2.0-abrmd-2.4.0-150400.3.3.1<>,\gp9| 45cMql2 YV+wŎ(oEf^, kԘ*xȮ>ך-Pk>H*+̪e_$*S#,%tY@{ؘÝBh;Ө_R1eV6G)ߐJ%ZܰE-=QI%U;DQyӛΩ W;*l}9βY8#U X1]Ic;5\{+q>F_ [Yv ۓj)d׋wibM"E>FG?Gd " p(,<@Yz   , H d  j Dl$ (;8D9:=@>@?@@@F@G@HA(IA`XApYAx\A]A^B bCcDWdDeDfDlDuDvE4wFxFyG zG<GLGPGVGCtpm2.0-abrmd2.4.0150400.3.3.1Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chipsThe tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager. This is a daemon service that coordinates requests to the TPM2 chip via Intel's TPM 2.0 software stack.gibs-power9-212SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/Productivity/Securityhttps://github.com/tpm2-software/tpm2-abrmdlinuxppc64le if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi [ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tpm2-abrmd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tpm2-abrmd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in tpm2-abrmd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tpm2-abrmd.service ) || : fi fi8]"*U D) 큤A큤A큤gggggg`!Z7``gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d305295662f34de02fcf72163548c7035102a15b8238f7495addab0c4625a140a78efd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec057e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd75a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e5833611718c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpmtpm2.0-abrmdtpm2.0-abrmd(ppc-64) @@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libtss2-mu.so.0()(64bit)libtss2-rc.so.0()(64bit)libtss2-sys.so.1()(64bit)libtss2-tcti-device0libtss2-tcti-tabrmd0libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)tpm2-0-tssuser(tss)3.0.4-14.6.0-14.0-15.2-14.14.3gd a@aaz`@``@_t@]@]c\\@[Ѱ@[ @[t[[m~@[;e@[:[6@ZZ ,@YKYYp@thomas.blume@suse.comaplanas@suse.comaplanas@suse.comjsegitz@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgaplanas@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.com- make sure that udev workers have finished before daemon-reload (bsc#1231071)- Version 2.4.0 + remover syslog deprecation warning (bsc#1185154) + cover update to 2.3.3 (jsc#SLE-17366) + contains reload fix (bsc#1166936~ + fix tcti loading using short / long names (bsc#1159176)- Warp selinux into a bcond- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_tpm2-abrmd.service.patch- Move selinux devel file to devel subpackage- Update to version 2.4.0: - Service start depends on systemd device unit: dev-tpm0.device. - Numerous memory leaks. - udev settle service deprecation warnings. - StandardOutput=syslog deprecation warnings. - Add selinux module files - Move dbus files out of /etc- Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077). In MicroOS systems the recommendations are not installed, making the service fail to initialize: Failed to instantiate TCTI- update to version 2.3.3: - changes in version 2.3.1: - Fixed handle resource leak exhausting TPM resources. - changes in version 2.3.2: - Added cirrus CI specific config files to enable FreeBSD builds. - Changed test scripts to be more portable. - Changed include header paths specific to FreeBSD. - changes in version 2.3.1: - Provide meaningful exit codes on initialization failures. - Prevent systemd from starting the daemon before udev changes ownership of the TPM device node. - Prevent systemd from starting the daemon if there is no TPM device node. - Prevent systemd from restarting the daemon if it fails. - Add SELinux policy to allow daemon to resolve names. - Add SELinux policy boolean (disabled by default) to allow daemon to connect to all unreserved ports.- update to version 2.3.0: - changes in version 2.3.0: - Add '--enable-debug' flag to configure script to simplify debug builds. This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro. - Replaced custom dynamic TCTI loading code with libtss2-tctildr from upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0) - Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required. - changes in version 2.2.0: - New configuration option `--disable-defaultflags/ added. This is for use for packaging for targets that do not support the default compilation / linking flags. - Use private dependencies properly in pkg-config metadata for TCTI. - Refactor daemon main module to enable better handling of error conditions and enable more thorough unit testing. - Updated dependencies to ensure compatibility with pkg-config fixes in tpm2-tss. - Fixed bug causing TCTI to block when used by libtss2-sys built with partial reads enabled. - Removed unnecessary libs / flags for pthreads in the TCTI pkg-config. - Output from configure script now accurately describes the state of the flags that govern the integration tests. - drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr shared library. This one hopefully now does the right thing.- update to version 2.1.1: - changes in version 2.1.1: - Unit tests accessing dbus have been fixed to use mock functions. Unit tests no longer depend on dbus. - Race condition between client connections and dbus proxy object creation by registering bus name after instantiation of the proxy object.- bsc#1130588: Require shadow instead of old pwdutils- update to version 2.1.0: - changes in version 2.1.0: - `-Wstrict-overflow=5` now used in default CFLAGS. - Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users. - Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to `UINT32_MAX` - travis-ci now uses 'xenial' builder - Significant refactoring of TCTI handling code. - `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros instead of using the default symlinks - Launch `dbus-run-session` in the automake test environment to automagically set up a dbus session bus instance when one isn't present. - Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib does not support reloading a second time. - Bug causing `-fstack-protector-all` to be used on systems with core libraries (i.e. libc) that do not support it. This caused failures at link-time. - Unnecessary symbols from libtest utility library no longer included in TCTI library. - changes in version 2.0.3: - Update build to account for upstream change to glib '.pc' files described in: https://gitlab.gnome.org/GNOME/glib/issues/1521 - added _service file for syncing with upstream tags- add a Requires towards tpm2-0-tss, because that main package holds the udev rules and logic for setting up the tss user. Without this the daemon can't start up correctly.- fix broken build due to newer glib dependency that reports a full path for gdbus-codegen, breaking the configure check.- update to version 2.0.2 (FATE#326270): - --enable-integration option to configure script now works as documented. - Format specifier with wrong size in util module. - Initialize TCTI context to 0 before setting values. This will cause all members that aren't explicitly initialized by be 0.- add recommends to the tcti-device and tcti-abrmd. Otherwise they're not installed right away, rendering the abrmd quite unusable.- Update to version 2.0.1: * SessionList: Fix Connection object reference leak. * source/sink: Organize ControlMessage processing. * CommandSource: Replace 'connection-removed' signal with ControlMessage. * SessionList: Remove all locking. * ConnectionManager: Remove 'connection-removed' signal. * ci: Build 'check' target when CC is gcc. * build: Fix bad URLs in configure script. * CHANGELOG.md: Add version number and date for 2.0.1 release. * Replace references to drand48_r family of functions for portability * Fix for type-punned pointer reported in newer compilers that enforce strict aliasing- Trying to fix build on older distros that fail because of a missing or broken autoconf valgrind detection macro. Removing autoreconf to hopefully fix this.- add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device library from tpm2-0-tss. See https://github.com/tpm2-software/tpm2-abrmd/issues/486.- update to major version 2.0.0: - support_dbus_activation.diff: removed, is not contained upstream - the tpm2 stack introduces an incompatible ABI to the previous version with this update. There is no compatibility layer, libraries have new names etc. - upstream changelog: [#]# 2.0.0 - 2018-06-22 [#]## Added - Integration test script and build support to execute integration tests against a physical TPM2 device on the build platform. - Implementation of dynamic TCTI initialization mechanism. - configure option `--enable-integration` to enable integration tests. The simulator executable must be on PATH. - Support for version 2.0 of tpm2-tss libraries. [#]## Changed - 'max-transient-objects' command line option renamted to 'max-transients'. - Added -Wextra for more strict checks at compile time. - Install location of headers to $(includedir)/tss2. [#]## Fixed - Added missing checks for NULL parameters identified by the check-build. - Bug in session continuation logic. - Off by one error in HandleMap. - Memory leak and uninitialized variable issues in unit tests. [#]## Removed - Command line option --fail-on-loaded-trans. - udev rules for TPM device node. This now lives in the tpm2-tss repo. - Remove legacy TCTI initialization functions. - configure option `--with-simulatorbin`. [#]# 1.3.1 - 2018-03-18 [#]## Fixed - Distribute systemd preset template instead of the generated file. [#]# 1.3.0 - 2018-03-02 [#]## Added - New configure option (--test-hwtpm) to run integration tests against a physical TPM2 device on the build platform. - Install systemd service file to allow on-demand systemd unit activation. [#]## Changed - Converted some inappropriate uses of g_error to critical / warning instead. - Removed use of gen_require from SELinux policy, use dbus_stub instead. - udev rules now give tss group read / write access to the TPM device node. - udev rules now give tss user and group read / write access to kernel RM node. [#]## Fixed - Memory leak on an error path in the AccessBroker.- update to upstream version 1.2.0: - Limit maximum number of active sessions per connection with '--max-sessions'. - Flush all transient objects and sessions on daemon start with '--flush-all'. - Allow passing of sessions across connections with ContextSave / Load. - Unref the GUnixFDList returned by GIO / dbus in the TCTI init function. This fixes a memory leak in the TCTI library. - correctly trigger udev to update /dev/tpm* permissions after package installation. (bnc#1078687) - prepared support_dbus_activation.diff patch which adds D-Bus activation, but can't use it yet due to rpmlint- fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the service unit file in the upstream distribution tarball is already configured and looks for binaries and configuration files in the /usr/local prefix which is wrong.- package version symlink correctly, belongs into the lib package itself, not the -devel.- update to upstream version 1.1.1 which fixes some local denial-of-service security issues among other things: - Replace use of sigaction with g_unix_signal_* stuff from glib. - Rewrite of INSTALL.md including info on custom configure script options. - Default value for --with-simulatorbin configure option has been removed. New default behavior is to disable integration tests. - CommandSource will no longer reject commands without parameters. - Unit tests updated to use cmocka v1.0.0 API. - Integration tests now run daemon under valgrind memcheck and fail when errors are found. - CommandSource now tracks max FD in set of client FDs to prevent unnecessary iterations over FD_SETSIZE fds. - no longer call bootstrap and switch to the release upstream tarball which has now been fixed to contain all necessary files- first version of the new arbmd resource manager from Intel's tpm2 stack. This will replace the old resourcemgr previously shipped with the tpm2-0-tss package./bin/sh/bin/sh/bin/sh/bin/shibs-power9-21 1736769015 2.4.0-150400.3.3.12.4.0-150400.3.3.1 tpm2-abrmd.servicerctpm2-abrmdtpm2-abrmdcom.intel.tss2.Tabrmd.servicetpm2-abrmd.conftpm2.0-abrmdCHANGELOG.mdCONTRIBUTING.mdINSTALL.mdREADME.mdtpm2.0-abrmdLICENSEtss2-tcti-tabrmd.7.gztpm2-abrmd.8.gz/usr/lib/systemd/system//usr/sbin//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/tpm2.0-abrmd//usr/share/licenses//usr/share/licenses/tpm2.0-abrmd//usr/share/man/man7//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linuxASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=969a4cd61062ef9245bc1b1151be9be6a8897080, for GNU/Linux 3.10.0, strippedexported SGML document, ASCII textdirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R RRRRR R RR R Rx]͙[@AML7utf-8c001d4acbca9fa71d12840ec1a082135e6bb3ab38d132c9eb9581dc54cd0591c?7zXZ !t/bB]"k%j|r>6"0{XP-zAfr=U INqhu&^}3X`{Թt%D[ (4~?CmH:Fw0ӍÛ3;r*&&<,A2X;JK9j^KGB3 :Qi2ݡK"Xh&~-n> |j}Whrٕ( Cj(+yԯdC;_ϏgLxF8La"?"?o P xmQlC~Jxub'TpMϧi2yūmikt׫lK~qFÎx2NhʝtT٦3a#OW.xv|f6]᎚M+Z"dz #6\Zw[Vee.9t1s!3IuOhSҳ0ϬUOZڧMCqO~0'ݖ4)w~O/ԩE0'qT,| Wsș,_8JjkRv^[3)(< +,#7O l xpBM>XlOCKPeHl03 ͂oz*1TZ}2ưh3CZ5;R 4nk6HYOb Gx^ԏHtn)夌&ԃ]8G`,Еxɚ6~|2(v癤[-0=Vɮ<*_c‰:-Bd:GO(p-i(%fzWBQV A^Ss64S[z8oُ˼.Lz//Ľu@M7$*Sc̋3lEyFg;[χIQPM q &)zlDl_:O}jqImq, m,RU,9ǖ@Pl]!Y]N:&~,-Z4HnndTo;l g $0mpuJ z/oNwFvU9l#K ;@B0ǰ 7C# (bY;P6z)pBUɿZcy9!N:  ])ۓ!{Pl%OZmv42H;q9B2!+h\KU OZqp L-96W"!Uo8-w֔3|06#GCW O;F1( uȋSbMgDw|֍X'fK89}H!ʳA<@pyAcꕇv/L+M?g'nF̤z+#2w-TXޢ'LwG-'enn!<4 '%)L7PQ޵"[ :2؆4!Q Hh&zU{##7SeV{MF@rt|$V V{hHy"@٪~qNb%OJoAڒے[^5CHGfvw|7o |p{DJ4x8ryb!,_uI~0j=}C -](k]O1J-F^Zj(FUvX zH}gTW@Krr"uff5f|/ϵ,^"Mn $:>%U\_ wt38Kã`Idf铋mAr<$0Rej4 HpVݼW3p[[R徴L2J 6^ ~i/%%^`΢*,vX<޼u2[eOp^;DsiatpZ*=~[mKT(MK!ˌ7iq VZL-V]Qf`zvm.ui"BA^WTۅT,`7P'y,eqa!ĵ!Ԕ&xrЏ<\$C[ϮHn'2}Gqp%\B‰K5cӃbI3-qF-T:ns MEStZƷ.:,hF\0^>7?ujDDVネ`k/>/`jaP/2g1hPLxnDqqX]b<חB=\ j#Bϧ\l]RU5%w"*K"S怘Ejvh2tsvISvxdkjӲږ>*ԖPX&xmA۴eX:S% Z8=*> tn P.. K3FLa{๼.dr/k&=tOѻmBq$ `Nb7뼶@NoCҤTPLp1 y_ : ^3ǔayp{@cd_~ɔM&GlѸo:o?YZ`ThzJc#\np'Ѕ.׸l02FCpA堄)IImZ-zPJ-fB=0efvw(_b:UFt4$g z?0 7k`q\wjheӇWMtDk@.2A1IJ".d_ϧ?4!PUFgb:J ĺߴ QvcG7zS^ש>QPޟD>7#1Ӡb2bh-k>Ԗ3[MC+zڐ ge!ޘ 8(AD梐xeؗQ^E/"csUhģ;آCnm'yEy:<&Z j%mom2Gy}zПe8"9rvO0|J㔊.XsmnwOXy0 L~"#}_]U)hIZ*fB 7\P7Mu(<~Z(7ÉD^͝Ht˜|Qw:N`:(+/gg- 1an~_C3 Q>kdFdԮk4B_ȍO6Έbbe/ԺCR  =aZiXII~JRq@dm߳gJuHPOcþĚ'VޥDųt7o>HDNk KJLeFr+H"%l6%OwW(/s.Gso^aD@NS0t({0K(!=PUkU l ncs=;~V7O:_[n蜹$N['&+To֟arK C-Ǿ=HwU "C\xtjləԣ>]W&$ϋZ" ۴&+(bf'FW8 k&6N׮(B!̊vQ_/&ЅI?t[CI*U)>2q7|VIsnK;uGN>qܷMY#0@j`In#VCְ ˵Wvnlb43ixhfεER,Bri|01ۼۂl%-w*`~]+M5A0Gv:C 5$180jK>;5] 5{C/)DBA]@2$ETz)͛`~u3=ݥCh*| tG{^"Yc3Fk9mf٢: v*4;b/z%#w&sܳ.؊{^N%tKOuԹ]< bc\ؒ[u$Mvk]%T ށMHuR[ݞڍV~&qy<*U[9sG)8NpЎ띙&:xK׸ū]jGDHZ6pr)j.uȘsQ$-^Q&owIٙVUjiGE׬2a.hX (/5:zUlI DDQӯ V\;Cl̂]{:5 qawk4.LVY (D;* )7g֩ or adoX1!lBRxl|W]e8p~~_*rn-fS4iݠ>?]gJzB%9m|SBO~FYAC?eQ=8VwwyȌ"9UBoC5QEgWׅ`]AHWۭ\ m)ml_<+`5Ɩ$s8m// FS[3{KKoHy޾p<{& l_2PE>egߡMY4^:3OoJw_h60uF%k r&yp訶Q` D F5s>GZ'6)Б ClS3OJ,%.ޒ%!#!hIMn&>d Э6[f:4 dzxϸTȸm(G̞b{ɖF8Zu#2jvl=ADhF2`X:Y»vAF%+ 蹑W'7ArKqe故sžЙ].@*vIkWl-)e7[KYp$=R^^pIVr'7DL/%$X}p&TLk@ =?Zʟ>{ α62Ƴl^ + 8Q87 u}\BE4:iGiXK|hCppHgk% 4A4( FD^+ң4Hz9yŷ)Q8c2plp yLUt1M `-NXWlz ?|=Y[#GԃA S8Eq&A?b4#श}/9oF{][pӷ՞8ַa/tn`r~'f}Oz5 ҍ90c|ϽzVU8Q]~L~]bze0~1 ⤵| Qw( qa֎IX<(?KVv >qۚVMQT$qj.t"b0E:{YD 8qooo]^֢*ھJqԋ@O56-=P`q\x:4auy$(\ )Ꮟ'`9FЛm]E1s;{eUH&n d%KD0ӛLL\jpgK8} 5[&Fb#MQ3!z@Qvg(pTuDfDW6uA⚤inD#jX /i#toF6 óW.*}^$*#RzPTԃJI*jLO|9SRf F_jߺ ZqeɌJM` *HH%ڣ=,.!oG"gQl|m~K1M'V9?w:9$.ع1 q>ٵɲ`1Nw!\ajqm6Yuw2$KQAqvZ0拔OZ\0poXsW&)Cn9 TL/df񓛛F u-)JiI2AR.s.Ͱ Ĺj⮐Ji,w,Y;-?hnVyz4LĐm>>PN4 RhڃJIsv|-]!FUDoly+a`@YؘaB#¶2J|}{aaE 9@S}qoݔ5^ g gW}&$ #a#eU{24[PzXk]2ɩS=b̅`.{%ogB7=,=/-T\Ňnj[Ww-z~#BA>f |>"7T'V,gA )n }P5pɅs6<>j ղ[o8K먫Ɇ%01-CbT\@k%wf THJFܟXzD5YL?2.+YsXMGm v"JT!݈[-hbOL5#RXB &:w=erOM &ٿoGWRw;3K<rHcl!fAQ:3Ģ4}RPslq#gF22 f*ȨcHXtG Ԓc3:`6Jf"u: MGu Lao-l0ʴ;B:#KWuM bo)Gv% S}_1߲q%CG{/E> ,J\-24!` i  ]'eQqQdM^.{=?Jw-&H"!$9Â+73/]&O:>1V\#<k0& ~wD;9vS++j%;G>JsDneFe"+A:n Y ov8K[h g43Un%jN@SzE^!ƴzS[{dEk*IS'M+:Mfr θ^Fbb?t <ҏ=]f)^}z$ad]cm}Q~4!/\"a˳FR48Q:Q B):ˍGwKo R%WO\[yOZz ^DJ/s5mt/oAPB<rI\5θ&U&OC{\!xyISa#r5YեZb-7_uD4@P`3 `+Ufet-6ȷ_~|0B&%rJ4xoWN>aPT0-駖}mwy0;XDF}%z7rKV,DB< ^blEj=X@3p\K5K(t+ϻ ^r|J=:g { hit*Ա󮂇v+Nd΢a_wo%㑒$UƷϷvg=W%a]D5R7hddBŢIpz`A0w,[*H I1]뺌Dh;BՊ0B8,0.\)l FSb0Y ©>QQbSGRg*{cJòVl+ʸ Qf4 E߯0~7^vi{U p:"H nDo|Qo#ze34S*ag,֎MʕV<&bz뷮i+w1Te͵; }%^.+u)oY$: 3/8/E]G}05T;vABOM Z׸ƚW{%<\&kk7f'mIs1k <ڲ&FtDiH7mՕ(JiN +jЎZTn{,$_ūjOT3^o,YL:rt[e8n|IUƒ ir{ϼeEN&_%}UHHU1_f8|nY}"~BQ{y*Wd+_}1q3<.&qgC;2}J@܃ZA}V"̭s`,9:JI{Q'lt6`m'@֮\Yf6?fxH}Hy>ʎkJBv8l^v/(F-nnwfI$W:ϐ^{ngdk|2ޤr$2AkZX/'Flg$K 6R~Ӳ$`1Taw^ YoQV;2r8T\G0!FLSZGKHhj~@YMZW/yя]sȌ`D=tr3=f=H엎l|S7w#H/Po੹JzQ$DaT<ZզLL3=RAƻ{`l0p,;!Gֳԭͣlf띃3hTj.o|:ByO[:Ř/"S.*Ta9£0#iphVVu قPfEsupvw}VF1{|TΠO 8vv5 DXIrN Q "3>瀘PۿJȌ~# cAF CF< AēޚUtMF:P/XqP;:4h9WvTxߡsWNXVriydV [iP9)3i 괌# Ո,.WQ|jwrM}jWoFPYZ@\ ?|dS%󣋆=/Nt]g^]ܻ^X"R*|KRFZWuΑRN؞<3&I-ќwdDH꯬U) Wa9C\g#c|pYkkVd4z" h:.A@Y^Zr/rE"5ӳ#E{GH ۓ2"NJiY}e:8i8wXZ z(E(}#"_{:b6#+/7=<_::ː!]R;xQͨ' N0W;e_JJ3f UaqeȩDv8Gtd|a=+%JnA2{ ]vŵ !t\*F._<罌.k}f,^LebI1原aXsĔ}SV7VW>/*~xedeU*ocCQ'=)!Ni΀Tjmn>6 /;-xaXS1C s"Hn,Maɿ[0 a<Z2طvu!].cZTKWizV}S&NIL/\Ns~ x^M(3Hiܞ,,mIX*F= @Tli#َR3/5b(KdDzu[ x+/"kk Z $waAe>h<U͹n#h/zފ|s} wk!̻>gssZ2O4cWsBtie6u?VIGoiyD64 xFoɭG]# V}}=ו$ ޲̅y#A N=H1U< l,4aV,Ŧ5cFJVWO'2-ԛ+#AlɇUNeh{\ 'IY)˳ԩQxO=ъ'릨-MG1('ᮩ/wވ=Hy|Vڿ7z>WUUBeY[သjwk@[bo CsP#\$5Q( #4xӥ .V>Z CrJI"1?cOF j{h7pPQSB7P 8ӄPpey$ BaaeK`*BpgN w9=䳨\4bxʰ^cYl;C[&]נST3"*V{koa\ EZfC홈V8h!C'ҩmeWCV K%~Ky!)> {UCrM3߰$O%s?FSMtyE fOb|c8rYI!u^\$lgsOٻ:Zbf$"j"nK'95J#%Oګ|serxB2]-!qL06'Gnj u)R & 񕱀CH ,4g_z5ib}P{wd/GLpJsG t 6v'QepxA1~|ݱ;N.42&? .?< 7ds'8S^c}_ƊneWb@pLA<XO@:$ wZٸ/LU+ĕvs$O\ϝ4)zoHgxYOm2z臥 GmŒ^p { WĵQ|*`I6=kAx%IKj+8c_f ٻ[|:77}>0J*sx/Ѹj{&jOXqv`y'(0;'P h \z AߙKV*pwD/Z7 Юi&vY)% c 0y*(utr/MN K2SSCQE6}FQV=Wk)Bo;l2@.-ةՎW[N5p +5SG]ƺ2}æ%[&/znl߉VtO7WB]p&v=+U^ 7kQ[i-SמPJ A :Lʊwݟ1)X<־FbA[ ajjm 0y`&N5wdٮcÍ H^j14f:>ݒ4Irrx~qK3USjEةCOƑ80;Cc/MxUSyj=>BK'D`eaR'Ĥr={,Wľ'\dp]n~$Dsx7O$@Göqc|ҥB֯:ԙ3jP3@L0ހ_>Sҝj܋wIcwd7XZکI䴟_;- fua {qMٜ2^bi9^jEM2K=λ~? +#t2.e=Vz{ g+'-$?'( %J 8oEA%]thK>;$:kg)8ZLgE-jH6_);mM~7[9#hERnЀ ygIV:wG4`]TK $P$ Kb38n}wGa -kԉf7˧qUHO>e`({?>fHTưЇ T6wp *Ww2ӣy(\&=cHP?#\9.Y<ZM̌\D0MMWbz90% r,(ѝP?2UFޏJ1O/ uP-3VBPuS![, (ҏS60' /!tw>(릾\r5Z-s1g}<۲,Gb8?2q*@E~mT|b'Ʉ1PfuX (X s햧U7A|=P'iѩ#uq}4 iwpASOġ.3k_dNwhcӰ9 rdVC̒~n[EgPWs_ABZ~?5C|SaFWp#%\Х_0_[3u, EB>n)#ω\G3Hu:'5>v `y7-J0gjӐ^qx$+"ӦG v V?6k&3(!Sm ".uF*>{9r5/ `DN!xi{u߄H7Qxh&RqirF2xn+L3Lh"@L(K #[%$6!!`N`+ <$;Mi5HAUC Y YZ