tpm2.0-abrmd-2.4.0-150400.3.3.1 < > , gp9|nLe:䑅&W dY; Ɉqn00UYˮ ilc Bo
̥I 72npּԷbTӇ" 2Ca` QGc
n6Oxr al4
c>$T۾Ug$Yv\ Cbf9.XP{#6^!
A 5F !>2R+TEͳ]{KDhmv e
\(+Rr\)ur)/a > F G ? G d " p ( , 8 < U v
$ @
\ b
x < d " ( R 8 \ 9 : = @ > @ ? @ @ @ F @ G A H A< I At X A Y A \ A ] A ^ B
b C c Dk d D e D f D l D u E v EH w F x F y G z G@ GP GT GZ G C tpm2.0-abrmd 2.4.0 150400.3.3.1 Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chips The tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager.
This is a daemon service that coordinates requests to the TPM2 chip via
Intel's TPM 2.0 software stack. gs390zl37 2SUSE Linux Enterprise 15 SUSE LLC BSD-2-Clause https://www.suse.com/ Productivity/Security https://github.com/tpm2-software/tpm2-abrmd linux s390x
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
[ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || :
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable tpm2-abrmd.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop tpm2-abrmd.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in tpm2-abrmd.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart tpm2-abrmd.service
) || :
fi
fi X8 ] " *U D ) 큤A큤A큤 gggggg`!Z7` ` gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d30 64bcd9dbe446ab1f34d3215744a31d5048cbac312522cb793706d0ee165967cc efd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e 61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22 127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec0 57e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd7 5a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f 07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e58336117 18c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448 741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e 54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258 service root root root root root root root root root root root root root root root root root root root root root root root root root root root root tpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpm tpm2.0-abrmd tpm2.0-abrmd(s390-64) @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libtss2-mu.so.0()(64bit) libtss2-rc.so.0()(64bit) libtss2-sys.so.1()(64bit) libtss2-tcti-device0 libtss2-tcti-tabrmd0 libtss2-tctildr.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) tpm2-0-tss user(tss) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 gd
a@aaz`@``@_t@]@]c\\@[Ѱ@[
@[t[[m~@[;e@[:[6 @ZZ ,@YKYYp@thomas.blume@suse.com aplanas@suse.com aplanas@suse.com jsegitz@suse.com gmbr3@opensuse.org gmbr3@opensuse.org aplanas@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mvetter@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com - make sure that udev workers have finished before daemon-reload
(bsc#1231071) - Version 2.4.0
+ remover syslog deprecation warning (bsc#1185154)
+ cover update to 2.3.3 (jsc#SLE-17366)
+ contains reload fix (bsc#1166936~
+ fix tcti loading using short / long names (bsc#1159176) - Warp selinux into a bcond - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_tpm2-abrmd.service.patch - Move selinux devel file to devel subpackage - Update to version 2.4.0:
- Service start depends on systemd device unit: dev-tpm0.device.
- Numerous memory leaks.
- udev settle service deprecation warnings.
- StandardOutput=syslog deprecation warnings.
- Add selinux module files
- Move dbus files out of /etc - Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077).
In MicroOS systems the recommendations are not installed, making the
service fail to initialize: Failed to instantiate TCTI - update to version 2.3.3:
- changes in version 2.3.1:
- Fixed handle resource leak exhausting TPM resources.
- changes in version 2.3.2:
- Added cirrus CI specific config files to enable FreeBSD builds.
- Changed test scripts to be more portable.
- Changed include header paths specific to FreeBSD.
- changes in version 2.3.1:
- Provide meaningful exit codes on initialization failures.
- Prevent systemd from starting the daemon before udev changes ownership
of the TPM device node.
- Prevent systemd from starting the daemon if there is no TPM device node.
- Prevent systemd from restarting the daemon if it fails.
- Add SELinux policy to allow daemon to resolve names.
- Add SELinux policy boolean (disabled by default) to allow daemon to
connect to all unreserved ports. - update to version 2.3.0:
- changes in version 2.3.0:
- Add '--enable-debug' flag to configure script to simplify debug builds.
This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro.
- Replaced custom dynamic TCTI loading code with libtss2-tctildr from
upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0)
- Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required.
- changes in version 2.2.0:
- New configuration option `--disable-defaultflags/ added. This is
for use for packaging for targets that do not support the default
compilation / linking flags.
- Use private dependencies properly in pkg-config metadata for TCTI.
- Refactor daemon main module to enable better handling of error
conditions and enable more thorough unit testing.
- Updated dependencies to ensure compatibility with pkg-config fixes
in tpm2-tss.
- Fixed bug causing TCTI to block when used by libtss2-sys built with
partial reads enabled.
- Removed unnecessary libs / flags for pthreads in the TCTI pkg-config.
- Output from configure script now accurately describes the state of the
flags that govern the integration tests.
- drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr
shared library. This one hopefully now does the right thing. - update to version 2.1.1:
- changes in version 2.1.1:
- Unit tests accessing dbus have been fixed to use mock functions. Unit
tests no longer depend on dbus.
- Race condition between client connections and dbus proxy object
creation by registering bus name after instantiation of the proxy object. - bsc#1130588: Require shadow instead of old pwdutils - update to version 2.1.0:
- changes in version 2.1.0:
- `-Wstrict-overflow=5` now used in default CFLAGS.
- Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users.
- Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to
`UINT32_MAX`
- travis-ci now uses 'xenial' builder
- Significant refactoring of TCTI handling code.
- `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros
instead of using the default symlinks
- Launch `dbus-run-session` in the automake test environment to
automagically set up a dbus session bus instance when one isn't present.
- Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib
does not support reloading a second time.
- Bug causing `-fstack-protector-all` to be used on systems with core
libraries (i.e. libc) that do not support it. This caused failures at
link-time.
- Unnecessary symbols from libtest utility library no longer included in
TCTI library.
- changes in version 2.0.3:
- Update build to account for upstream change to glib '.pc' files
described in: https://gitlab.gnome.org/GNOME/glib/issues/1521
- added _service file for syncing with upstream tags - add a Requires towards tpm2-0-tss, because that main package holds the udev
rules and logic for setting up the tss user. Without this the daemon can't
start up correctly. - fix broken build due to newer glib dependency that reports a full path for
gdbus-codegen, breaking the configure check. - update to version 2.0.2 (FATE#326270):
- --enable-integration option to configure script now works as documented.
- Format specifier with wrong size in util module.
- Initialize TCTI context to 0 before setting values. This will cause all
members that aren't explicitly initialized by be 0. - add recommends to the tcti-device and tcti-abrmd. Otherwise they're not
installed right away, rendering the abrmd quite unusable. - Update to version 2.0.1:
* SessionList: Fix Connection object reference leak.
* source/sink: Organize ControlMessage processing.
* CommandSource: Replace 'connection-removed' signal with ControlMessage.
* SessionList: Remove all locking.
* ConnectionManager: Remove 'connection-removed' signal.
* ci: Build 'check' target when CC is gcc.
* build: Fix bad URLs in configure script.
* CHANGELOG.md: Add version number and date for 2.0.1 release.
* Replace references to drand48_r family of functions for portability
* Fix for type-punned pointer reported in newer compilers that enforce strict aliasing - Trying to fix build on older distros that fail because of a missing or
broken autoconf valgrind detection macro. Removing autoreconf to hopefully
fix this. - add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device
library from tpm2-0-tss. See
https://github.com/tpm2-software/tpm2-abrmd/issues/486. - update to major version 2.0.0:
- support_dbus_activation.diff: removed, is not contained upstream
- the tpm2 stack introduces an incompatible ABI to the previous version with
this update. There is no compatibility layer, libraries have new names
etc.
- upstream changelog:
[#]# 2.0.0 - 2018-06-22
[#]## Added
- Integration test script and build support to execute integration tests
against a physical TPM2 device on the build platform.
- Implementation of dynamic TCTI initialization mechanism.
- configure option `--enable-integration` to enable integration tests.
The simulator executable must be on PATH.
- Support for version 2.0 of tpm2-tss libraries.
[#]## Changed
- 'max-transient-objects' command line option renamted to 'max-transients'.
- Added -Wextra for more strict checks at compile time.
- Install location of headers to $(includedir)/tss2.
[#]## Fixed
- Added missing checks for NULL parameters identified by the check-build.
- Bug in session continuation logic.
- Off by one error in HandleMap.
- Memory leak and uninitialized variable issues in unit tests.
[#]## Removed
- Command line option --fail-on-loaded-trans.
- udev rules for TPM device node. This now lives in the tpm2-tss repo.
- Remove legacy TCTI initialization functions.
- configure option `--with-simulatorbin`.
[#]# 1.3.1 - 2018-03-18
[#]## Fixed
- Distribute systemd preset template instead of the generated file.
[#]# 1.3.0 - 2018-03-02
[#]## Added
- New configure option (--test-hwtpm) to run integration tests against a
physical TPM2 device on the build platform.
- Install systemd service file to allow on-demand systemd unit activation.
[#]## Changed
- Converted some inappropriate uses of g_error to critical / warning instead.
- Removed use of gen_require from SELinux policy, use dbus_stub instead.
- udev rules now give tss group read / write access to the TPM device node.
- udev rules now give tss user and group read / write access to kernel RM
node.
[#]## Fixed
- Memory leak on an error path in the AccessBroker. - update to upstream version 1.2.0:
- Limit maximum number of active sessions per connection with '--max-sessions'.
- Flush all transient objects and sessions on daemon start with '--flush-all'.
- Allow passing of sessions across connections with ContextSave / Load.
- Unref the GUnixFDList returned by GIO / dbus in the TCTI init function.
This fixes a memory leak in the TCTI library.
- correctly trigger udev to update /dev/tpm* permissions after package
installation. (bnc#1078687)
- prepared support_dbus_activation.diff patch which adds D-Bus activation, but
can't use it yet due to rpmlint - fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the
service unit file in the upstream distribution tarball is already configured
and looks for binaries and configuration files in the /usr/local prefix
which is wrong. - package version symlink correctly, belongs into the lib package itself, not
the -devel. - update to upstream version 1.1.1 which fixes some local denial-of-service
security issues among other things:
- Replace use of sigaction with g_unix_signal_* stuff from glib.
- Rewrite of INSTALL.md including info on custom configure script options.
- Default value for --with-simulatorbin configure option has been removed.
New default behavior is to disable integration tests.
- CommandSource will no longer reject commands without parameters.
- Unit tests updated to use cmocka v1.0.0 API.
- Integration tests now run daemon under valgrind memcheck and fail when
errors are found.
- CommandSource now tracks max FD in set of client FDs to prevent unnecessary
iterations over FD_SETSIZE fds.
- no longer call bootstrap and switch to the release upstream tarball which
has now been fixed to contain all necessary files - first version of the new arbmd resource manager from Intel's tpm2 stack.
This will replace the old resourcemgr previously shipped with the
tpm2-0-tss package. /bin/sh /bin/sh /bin/sh /bin/sh s390zl37 1736769003
2.4.0-150400.3.3.1 2.4.0-150400.3.3.1 tpm2-abrmd.service rctpm2-abrmd tpm2-abrmd com.intel.tss2.Tabrmd.service tpm2-abrmd.conf tpm2.0-abrmd CHANGELOG.md CONTRIBUTING.md INSTALL.md README.md tpm2.0-abrmd LICENSE tss2-tcti-tabrmd.7.gz tpm2-abrmd.8.gz /usr/lib/systemd/system/ /usr/sbin/ /usr/share/dbus-1/system-services/ /usr/share/dbus-1/system.d/ /usr/share/doc/packages/ /usr/share/doc/packages/tpm2.0-abrmd/ /usr/share/licenses/ /usr/share/licenses/tpm2.0-abrmd/ /usr/share/man/man7/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Update drpm xz 5 s390x-suse-linux ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=b84a9f28002c50a1c3aaad7170722a9d323ae77b, stripped exported SGML document, ASCII text directory troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R R R R R
R
R ijD/* utf-8 3ff80911aed3c724a4d6476ca063661d225fb46c419c526907a44a829c2fc4af ? 7zXZ
! t/cD] "k%j|r>6"0{XP-zAfr=#e+$: UؘGO2f@7*K=D6!ЯvJ9p1ߺ z VIU@.ʽ_&8Bf!
'Kjjd f?zrHV&Iju<)%R)DD +LJplI7 =SOlvDP.4ϤSdr1pZ$NJZ$M'r y=L u] ÚYL4d4WcocbYv_y/{P 7c7Zy4E!S8SVZY\m%AtdH}.$LCe] vI z FϹ&b\BrI33᪔86vx =0vcԳ2;A'.=Kd Y ̽L7^{C}y:ų>W۪=AQ { e9?P.d*5+E#MbS !,ߟ]Sܐ$w+1sx3 <\=a8+Ӭ*Z-{:zĽ+2A {Á85nCqU!xCȶ6U0pajoՍ#(gOɡ:^V
,5<e2*ߋS` hp o;}E`*uÝ3 /C0: s/ ;fn ANdtJ'lw\cea:0$bs0۲"/8n[D'(%nmlY5U<ə-X#g{+beͺ+{hޗ/X_֩,a4M_ Gմ$BNڢ'_Vus-&0H2>`V,QBq/߉+)Sc);Ai>1sX+ .E,>-Л
hr jp(s& AԜA4yxpJشO8ᾗ^Uj9`N y=:
y J !%Zp 8Lw*'4ޯ$ŋcK Rw g`pÕow%
! S[A~'TtXUX|7VZpnbsy=B]5tONVo jΨa. sxB0]b\m{/IdzѧV(
>$N~ɕd&z
\xTj'`Q.F#>_jbtTlO7/
nN<
:?
Nar̦l4M8"e!A `֭dv* [j#(H:/ |>x}:ÂeB+`A4RN\.UD (g_uCN`%!#:\
8m :Y%j3xBDg"QݎQ VI-r(`=pvd36?"V#XZd #)1j7Ltei<lv2o$,oˇد ;`&EU 5kBY@y7] SgCp ͑{$7Qm`srh;q(coAnF*) ;[Јw\>}?;.9]^cZ@91Ɵً( B h"FBHf B zU7c+_ĊWC
:ou37#Ig| 67>39B0Y?~Rm\ @/T߸PDl8J}DRf3%xJYR %,mH-ʍ6TwܷI(4YFDA.!ݵ봤j 7"KU
}
Y'N* 4L,}nRkVB 99 |UīnS $4N:TL Ik=&H-RJwԾxDl' f339 ehW@٪:DAkc$?5_(#Z6]Р =VH[3&F ]A@M[8;D9E;ZdV$lҰAL j 2Q(cetb4 yXJ0
mtx.]S$3c8st_PA&]6]e9;qxw Gߜgb衱lXm5N WI'~Q>PQK,pr&gLu \bR|粐GY3VWEtzlp8 ]:ȧ+.jOIFV *yS[ZE6w3~hMQ[`g92MySsېt7K
PN&3q,"0YRKK"Yn\Ԕ k_JvF1(ҡtNuZ\_Vb%p N@,$}(( @ IN0(KV@Ѐ*^E+fb
EJm L`0f mbBSA SDH"<˳&@^&F3PV_#6@VAz+SҺUrNI >HVk$OqmE"(OyF)]X V /78z xסoF䮱|Jd>ƕHմ\BExWJ%!`eYX\[y|Lvq:X*f(Ok ֪NV 1\ܼdb e.P̿ZrIDzKe!P:hLZTdۈJ tH[]ldA<$.*&X֪gFCIw-U~"'2l4& ,6+:M GwhBȬw]bh,mIRn.t[@8Ǔ)G JY cWaR#"(} PN:O 8Vr KOr oAi͘g
DӚQCDC3^|?߭Vٟؗ2GR~ĒDx3(!O3J+ܮjuq@3ܝ{[
b
#8)D[` ܭY4K
<ݘ̌Jc!slW7eR*Y cw w\HH$21:FΖo+nϖHĒ
0\foWFhdsCfr
9ql=Vz5~#ȯn Mk/a>(Z$ˈTJu3} o}Ņ0V=ܒ]6
?+4- n>p
! 943ЍV(ylD) _Bx9-kIxI;#U fgw7\w~g#
%ӂ |ԛa/!_ 2E^̋Oc
6x!eyySOƔ>
͡ Sbȧ\Z#FVB2h 7 K6; mR=.PΧ(?yX汸ߔWӛG=f&uT[`J+tW>29GΞ m
#!21@yja-N!w?sr|&F;7C=xh(B~Yܵ ) Y\|gM
tnۺ3?#DJ kz(e<x5tC5O[ k CwuԅHť /!7][{z"&}+:v5ř"$xmv&Ajv1#]>h
*` Y|^A0xP0\]""Blb SP4 ۋ6 D mmsr=C bsuB֛.[+ [=seL\l
] Ӛ ).tQ&iCe,9N&s2jfωH:Y_ T强Tp1TI^]W U$=#5%p@ rji IJݐt$)z2R]V vwIwZ '7+R#('0 z,nwjQN*U CfEbDJu3Rh}#5dqLL{~"DE$#sڗz8'<16 PZ 90ΈG@$=
*wH@;l~s 1˝!+|.-+ :ƺhm*> tw{;`̕=_pEJBCru7UؑlY[)u|gۢn|t 4I$L1W[ C*,O3"qRxﰷ(Be7qlA91~bاJm=VЕSP3kdZ4)-r}l.uA$y@XY[
Y=mc>uD
' 熃g4"z)>@=`+̠ Ւ_/HG'ihO2A &APW@? }y7{B*Z*CR> LRsԢO?)lDmZTipr;̉UF'vhFD5N/n4A)x)=EL h`=P7d[_ѕX <ŒԻD>"=>q ̚P u=)57GQ9?+ vv*fE!^ '%i~XD_Y3Z 't~I#Yu4qv1vʑ+lۑX谹(RYz0 \+Iшˋi bW!mS ?>)Hjŏ()nIZo%::Wr@#1B%vSZ*}u]6i?8^Bhń+3p-c$V#~Щ)J#|Cόl=;Ct0lpC
aD?{M9i}wX➠.ۏ_ -l!u|㽰#̚ʢ5 ^vҺ9d z -bm1k>w$')y
)e94ϸ 9}.7=CZ % 84L|A/~ڙ:6]
>;ޗ#})æ
gv&|-:ʄ_6y7i*TAKgO,\֩+w zB!q;@Vaw4YO!%IJꗒHG-כ!j \5m3?L *m I&Iz6ҷ8Fi)
UsD5*ܻ%+<ːX+bo0~CHN| 8yY 5:=Ni]ob7\Hg55CEEy5[YT 4ꝧ JΚڢr$ ĸƥ}lO(K
`$W_ E BDŽF i)OI/6\(W㳺S,]gwfm t<};5]$!Ez(E7SIu( 'XL HSg 8j;fCJlV\ +abIN=uFthٷKd4)Ywh4k0d.4
~tmh (7ȩiW/*
S곎 q&! o}mַv!̈I!LmX,(A3͘_`{RQ}G2D[a>텊<
`llԀ-kHEҨY*ׅ"Kk%C AQt=ȏ TWC=J+0>\:]VCFW 0l DmtsƉN5 K
z);\E?͍NK`aYx03Eo
? L3M)) $7#h0[WUÞ^_XH*K=+^X{ۺr@Éc((&l %5UnMQB~yVf RpqƐ!^ ux=2H157ff#`dsY~E<$,Y6E*4z hx277a(GY Ge$` !k %P+
.jYSR>.] d2=
Bl V Ud|
4 Ac.n9zT
Y<B~?Z{!gxmoI+xUo5I$'KÄOT7ͭY{UZ>cP:,ZnbcѺj `8Gv1n Bi7zj7
KnưmVp(Yd Xv jq mMX Bk=om;be)|do>B|DVk ,HH$8/Seٔi<D[*X}Ua M"|\E;_چm(;P=a3pHE:|~-X[ )97/$XvtQQ8@CS߿@leȠ>XE8'9Ї,0uMsӪ&Zq;jr֬,A)2iaHR{Oq)
O,o)PW]M ɻvCz: O~@^!2W4
}1T3J p
"܄0دԀͺLLHwilxNͦ4aWn8`Yv<q,zh+159m~=FMCh !\9b@WK] _2LjPN.-("İ$BIbt8- * \jؾ
$,~ClC8y,^uƀeˍE.Q8e|ձGDWDXf:|;R Q
L ؘJ@q59 7qީ.{NlOW4п
|"c#[r&q})*d6aflU>
ݼ? ok1 :6\`Uӭ
_^=(U#89zJ_fO[Q x1rt{Sӯ ,)fD >xWv®"\S:[7mWj, r91j@_Bo,55 l0Kt{+f#`X #&Upy˖ ٨<6OF]cahr~KDwD ȥ[0Q
ޝɎ~
8FG> DIGG Mq?r,exMv0/ t7 FN?;:wnE]L.1暩I/ зeMC``%uU p@+AN~%)%n3aV|O(Se.9.rFPڛ>ѠE%v ͺ7[wIyWE9 AP0I]tȬZ3Dt FoIkiáC !JI_GԑK/ 3K NʭZ,&4p f
# EjSX" >=o^ȟjlWhQi#/\{=$*vf?e=k z "C=m,̲>6S|uu-2W
ە B?g1W
Dz͖냮Ki1;
!vÃs9$2)Z9DzР\U պJAv[wցt":BRfWEx ! Pb}v=.w?x۪LETDI[:3xPw9#{Eu ]maҎEHnOZ2qAϑV-R"hY` [fK٥HZ2
1jS0hU^sG#J3LLyhA11{b dtꅪ-i" %Hՙ!~nr 2m:E%/9M`.e1;s٤e?ד qDJ|KA;}gH4 [Bx<::xoٗ RqX<&kmlG\#(n6%`h"dXZkކ#wq3nd@B-5D>y;Jf2^u@SSp H[vMk{p0Ի :, e8t9 `-azh
ʔQ>\HQdRuC@W5(\[Hld]^YH
?lo(S ȅ|a5[V)һVGG.D,í
t1@A0N萉wSWʉ?sSL>D#DPgV $7rdbS=X%煟{O=1,xU+\3vɯC䔈闅"(A c&7_]4|VތzuW8LG4apR J + p7X ůu(;;.uxòTЎQˏ+綌
#ɟ?fuձߟZKޔ+Mװhձ9jVǷhDs%#ci4_>p]9@ʁ>{Oovp}W,gxȏj$>3Hi@pvb7xcGW;}:ʅ|kW |oEx`RB~cZ^& 2uk2^c
(|[@`r8D;n"νYO퓝ʏdjlbh|GJb{6 -B6}0&>Kd8}]044O#6(j+RE2X.gK{{ Pql Z
93E|-f2 7 y o0uW75}%ź4 [ {^-Hx?ful)UڛF Mcu4~
4\ [= F7>3.CyfšCŜШXq^-s&zSY.zcEPښE#";wqQx$0hAEZ W흠t-nlFXRZ 3 F I {5zf$ ^j551}12 $Jp"/KDrȗ `5ښ4oPMdXuߏ \|R>[ō6Xpdwٜg(ykWodJ;^ILyk73pb'B$":☹,;;tq^1A
JH?(i9+
#gv4I%oʈn^Jjs;BH
B 0ғ{\aޘ@W]5&F (
N`j&_u+y?ᙰث {R:1E{@zLp`vMee Jh$ؕ.EOW?Ձדe lvAʭ uDYꍛIb2Ώ#
ô;dP5?
gA1Y;Q«GHQO%Ijxu _~o[\Κ DG-)2ނ拉g療Ki%
|8T
EZ6H}Z(k%DHO{ z5p.ӶEe:lZd:ix@e
9v
b=q ' )
=Jt59SyQ+1cfM-|@\!g MOҷ*mt'OD{I:Z W Һp ]2~FRi64\q,Qw?im2wG
$]J)tÏZ ʫvIhhѡ7V֒߿-wJ:+&⻬$0 H^::?ՆB<13/!r<٥G0 B
GjS x>e89I{W ӟF9@c ʈP-
YZ