From 699f9f16788e8e2ab37955afe94e9c623d783f58 Mon Sep 17 00:00:00 2001 From: jianli-97 Date: Tue, 9 Apr 2024 14:38:01 +0800 Subject: [PATCH] Update container-selinux to v2.230.0 --- container-selinux-99b40c5.tar.gz | Bin 24220 -> 0 bytes container-selinux.spec | 52 +++++++++++++++++-------------- container-selinux.yaml | 4 +++ fix.patch | 12 ------- v2.230.0.tar.gz | Bin 0 -> 31219 bytes 5 files changed, 33 insertions(+), 35 deletions(-) delete mode 100644 container-selinux-99b40c5.tar.gz create mode 100644 container-selinux.yaml delete mode 100644 fix.patch create mode 100644 v2.230.0.tar.gz diff --git a/container-selinux-99b40c5.tar.gz b/container-selinux-99b40c5.tar.gz deleted file mode 100644 index 9c5168a9adc505d9e3a10217ef1b632d237ebea3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 24220 zcmV(tKP_KF|_n^H!o1l8WQH zy4nJXA&D3SxEMe(@7Lec-7~;|FLw5_o2$DGYd5lp!A!sR(><+q^yROMG@nN4Uza9| zP4V47{&RxQ%aNCh6UcGv8*#GhGw*Q}< zzC1no?!`Zm@A~sE?*G3*|J_AWCW|aD%s0-E_q zORV~j3%|@B-ta$#T2JlSW2Q}gWE6xGVJRb)$3>@mUP?jHf` z@A>=&|Gyqw^oQgAx6k;x|DQiUJ=yX9vzMnY|M36c;q#|IX?)%f@Adosus`Zu>%04R z(5!aaRk8q|pWuT@p6RoW{`V>~`t;44Q>Ea%>rIg?mZd(rIL4Q+-*otqzAB8-<9uE| zMupK=d6mUci48h>kj=UsrC-pRDEkbv)8i7W%Z|QE=H*gfrFmX-^t;@awEm{2Q4yS; zJUxAWa;opgJ*E2(rr6}5BC&dHid9mUCe~$+c(mT=D2sKR*s@5bRcSQVPI2^#9wx>r ziaF&HZ>Gu2WY*|7pH)->cQn@P*)qx&Nw&~QN!w?6sUr$yChjVTgXM8om}oUk4FtgP z)9qvt^$NWL-P(H2>Ho2@K*~a48GXi=kI_bN@~TjCFdpYCdSaKn9>g;VV6Nbq)+qt&%z1mq@JX|h<3T2v7PTtW|Yl>XXL^h|l0pFYKs713!c zETcnfc5no(Wkw+u&}emKVH;hNL}FE&H0?=?*6S3)r^8u3tOL`w64hAA_coAV#@s~N zM(22^pcJzxqLqGJ=CpHFE^{On$`4RknXAf*`asgrIA0m}+98W7cT$)TjLau8QeI{YBP(2|X zdPD>jW^RgtxPbti{yJomYF*%bFnC)XqRj4?UZ~QjB%@Hv=s^@57)Rhb;xRk)=_6-4 z#eywCu{%LX4>(#UbJ|)zCU$w;sgD9LGm|{fCRH(`tttB#EU<-vtCh;X2%E*P!K<{! z8EVTI@j7fzgT|RqNtAm-}0>A-~<{EPt%`jdR-5($0{xW$jFIdbK1N!}{X@ zXIU$m31nFqlGKch$jbH*#x#i)Y?Y!D3Dack>FyBOi3lf)wx8uuPFg9*ZwqEnR&@zs z+3i!{(Kd}r-h5^X%HFhMjfcrJNl}x#Fho0xMAcr6hLY?MMNa&yJWl3hzATC>JTPCP z)jGu@w_@*hwwf(<(r(em=~U^!1Az94<=F5VV5uotXX+uKvJO)#Jh^Y;9p6h zylTjY%|0uE-6MsSkI-pp0B7~l=`p7z$&ziU!z|U&*)ik?KX+ylB&Nq@0-=(OEI&-m z0&dO;&vG($8Lty+7<)eBEW~OI&ts~4sfC0{7bYT&ar8vEb*#{? zU05e=fY6+h>PZX1UdpAT@3CNAm7HM2T(0PGy6NyCVR#~v$|Vp5GB?gbwkKJZNFmI< z%Z+P#TvD2a-BE1i2=b68F`pk(bS#8p}fzKUYPGJ2Mp$WaIpIEKXi zrZt3$#WbC1eeci)MR|Npa~Z+NMx1RYEUx5Kf%x*g%yyHA7R`;NXGj3=YPyL)=X3vX^O z2UmlO9(_TypL7{F?E^~A8d=t0Kv2wMUVL_e!4+>-MI;$Yz3Vh`=2~)b?xW5!Pbs(9 zXybtG3iuO3Z^A~bsyh9M2t7*Pk1o0*^(S{i-xFYG1G#k+LzbF+&I$n!L_LQ+nB)^? zWg3Yy^T~cUwK7O^+9b?!@PziDeL-sS0ENN4co!kQVK|K*e-M{Wm=LYK|#%5dW+(mBKZvXh9-7`hdWQI53BZJM{~6 zAVc?AS`l=oBl3z&9e~z7&Xm`TeiEMkgn(zCBDr%6j&M;N7lxx`Wc3rIjwdka9-{k$ z;Dg-Bm2lM|w`eiRSdwsOgO9~JoH@Le2+N?XDs93Zj|7U{y{SYLEa$4IvK`U8nCyX$ zi8~Ik@oosChywX4d_@INJnUZh_A|6d!lhN5MC`HnO53v`u?iI>o1*n#njfk_b+_f?=Y~uPIkORCC*WZ$lVE z>J70qq2?rG4_P4zRKQ_yK16xbz+Xk8Stqk9uWTx(Bj#`@hwb8Q(kNL$Dj?b?{7)OvH%C}l)Pqr!Xo%X#c?YVO5I1yM^kIE8Fveb zw|Z+uYZyZ|)nR}G+M#vs%#Hx|y3I=dEU z_SKr4B=~OQc8MHJ%-1f$5YII_3g8#z+%LW^_n4V2=d7_D2k&@C;i}kgFg{|s$fhK+ zVMWDhaV6v)48-{v)&yz% z2ah?M#mMuoPF>r+taZ@|Kt*JNO6`Q?ca? zPgZq>j_D2^Y?~y2dfPx=5RUUKSJ@(_(>9Mt&is_|S5ek!oxih^>WHtc5a<-kd+>XV zy7M{JKrKLp7!kQsB9el)XG&4*jY$#LyO04LLIOVZ3;VNUkKAj~`$V6?t{7GV)W*`8 z;o^XrQ$<8+2yw%oSM5tGajL>;CgMy4$& zT5w$m>Jkd_1t|qUi40ooDa-N-(S=%oE(x> z&I^Q&`i0}BU%|aK_V@tRi^Y3sv$}YPZHIAb)TF7;U$mX(S~u4ZiFw?LiM&gL@Q(Ul zW`@Jn50qeADZ8{Lo%@cX*8ynbEhyJZm!c{mD1he?ia>3RYrC*~sF>te1PdMX%nqj| z>O4$|j>zU2cH=%SA)|r;Vgoy9u{Cf$GBY~BI=Hujh##m5E6EW;7Zk-3;9(E#P#23E z)eWCHGFwePd(u`s;%-M|w~nTcb5+(as4bhb(JGJ%-sZ@|6{bWOsZ0{v$|-6)r*K>i z@utgJvWG7T-CI5gskQ{9``a`_q{;6e|9DA1QkIt1*aRGDO61m1%QJ{+!3zCxG)|EWM2T5h$Mrs>saeU-2zXC*#>Gw!Kl&4SEV+0fLfh+U&4`o$_YbEnh`N0{gFgTc~Lf zQqB=D_7)=S)PQW4v#9nbM%*3!5T%K12braa&Lwx>gs+W>3cjXkstU$O91u1ghsPa& z%IGdj+RvHX<}ogE*IT|opyX!?54D}(LVN9S5*FF>4%-qBQuMZRT6$pIC;9i+>EN*Z zg_Hk*4rYg}E6GR%5-Ea`mEoyN%&Z_u{ad$C2UsSE!p*ZN1udDxGlyc_ovm~S=G;8Y zc+?q@5>?wyx5IZ4DCyDrHGLt}`nK~jzcoIMYOABF9C9h7yQ9a|)MtmONZ%os*7exD z2`bVM6I%FEP}H%iGbb>2o!EZ5L*cCtrtNam^4CEe*Na_2qQMr^}K4HfDz|e2+sa zDwUF^XhC6@R+bBs$l83C_rPLNX~Wl! zsA`vPq1zcUnsNc6NKeO&C#<4h7y+zc(Tq-yghQhEGtAhe0!=K1@ngrKLXIk=X0;nz z0=jXJi2`q%e=3w9)hc7$!Zg=MDTmr4=b_wZZc7hIe!hbig53#X1s*_mHLgv@h7S4^ zcITtrGzO#N$X!IUHE@^Op<4fzCb*8!OjK@duw#85ZZjC=&G4XNoNv`WSlNn_bVWh< zxLPcO*q*ria_Mod)~K0+iIQNGt!_~u42BHn4P+oAk~WYuYf$}h3tixA2wGZDLW!Z0 z@tQAdYU6VG^#iMHOX%(&aKr zA_?iSb?Lc>ELFRqmoFh`z7eWpt8}bb82*l(wMz-Y1GJzcSYN*Rv4x~)MsI4u*mGD* zRNYW0_5`3Dq+2fhZ(gMmSkfdy>By>kA*%D$U07?9MXt-O63iyllJqyzY&mY$f@5vX zK4D_EaJs-;P=PN^+x9)KYv>_@A5aW+gG#%7^C5FLRPaW=C@c7eZkbGzQX2JX^jKfr zyE<`~AK3@FC8vw&=|*nFxLeV}*ITXoBiCL$*kV7H)(+h^&T6ZX^CQ>NZRxmV{7QG! z)Nk}7Mt{$(o={wqueOA^RpGcfhnHQsMJbb&aroqGNdFrgm*GUimIFECrwZA7qmO9H z-y*vwGA1HU-0ma>xBH$hcsGZllJ2t2ftyf2KjFetg2dqZmh-CM+p5;Ii7UaHmiqU) zt~Fh3bpe3w8lqV81y@(KJ;{xy2uMOC@jHP`gGS$yM_zadU<4vKsDM8GGDO zffX_qW;wDUknJ3~;TK{`r~>d~K!R%7AKXOhW1psJ%nxo-I-p-4vE?Hjxoi_(rgTBA zPdc~GjECQqc?&oEM6ZV({oH|ZOCvilFPp5Y6mDwdsz|OckV6&@RyI*zg_kzLq@IB; zx%nQv<}&||5(#;G!#v=7?#_RAEGhEZtw(3_Dis_j^P#%PH>eUePkEjoaP9ym_)`%4 z1oh@TgOk_SYwm(2Mp~HBd)%jCGN=F_!Xif=t}EQQCm92%^5UIBNQ9lG4;AJ) zUN)s*NcZUlC9S#}#7h1O`2yjBE1#Wy6#lt1DFJDzg=vf~6Q?u`@+9^07UYbxDvc0n zlVVn_EJtmLaMLJlLbwUH52jF+^d$XlieD65N^DK7y6MSGOh|>t(*5b6)p1)_1xK(w zEw_aJs=)XGJMZKWHDk0OSNFphIEyEe!`q$i$CxK~w!+JD1 z);IGwYC%&SaBGP=?wGm~f20fif^Q&cv~Pzb6Dx1+9J*Xd!lQ^Tp68kLyDbM!o@$u| zC0hir#4o*dJ=AJlU-t3@)w4LyL;*3fPt0SbJZGitl5K{-AgA|Mub`&Y)7JzeN2Cm& z)YB3!47yAxfq0oGj0q=OUK5%r&%+U+bP6^1dAjM*)reDw!90iqOwDe#lB{aWo$yRq z?seDStZjEGp1FzFt$>x-V0MBo5By*#mqi7|ELWS7sWiqv-89!)VU;c+x4L;^JP$~Oo5Lu5d(quJPV;zY z#DKN>rpse62dB_UQhxNJFb@e|-HOU-p!q@m{=zD!`vc?X0s#obk~iTe*c%gX;U4Te zWS2vG zTTeT?KhdBZ#&YKt20RZYA2+nnxcDNEQuc24z2d=}ouC4QoJvM{@qW_-;II52_q6_G zMs~_qd0n#8AN|N+LyQ39(n$TvLgGofY5vM-c&k75Mx)+v@`?3-+STv+7rpy&Ur#>t z_1)<9{it`N2V*}Hd#SHR{l31v(ib0kqxby|tsC`eMYtCY$Oao=)h++t|9R3MPV`-W zbTgPtu-m&&x_5Vn&3o^z`}(@~5z_4ce9^y~=#L-zLv>5re;k0G@uWvD42JsSXfPQJ z-}8nvg*zI&|1i-XZm%!Q=_8#1T;yxY@h8NfOmpldh4m%8QCy*031D%sw z7L8x)cLy=pU)}Uakl%39dpEcq;7A%9z8Xx1ID&_ZdqVle{dEsa+>h>V$9-zwkO;8} z1U?#!|Dtp9Z8yBiiM5D6!?N zOUi?l^nW57xF22AmldJE}GUKH5!^cl7wK ze=(qc;5keWy1o{vz>9voCoSR&w~6jSox~d1p;H<8Alcf`+X&9y_RFK@>@E8vySTm` zld<8D$$z)^t?O;$N`mKa^b}kt`C?}*$&&3{oW7iN;y#_(+%`^n=gjFd3Pn;9#}cU~ zDLX!y%(w5bZ@5pgRfP*d5+FfIPG@(_uRFF$Q~@XyfT}`O;i*F{hMzy3V(E9MuYq1P zot{2>_Te2&Ei8c$(3-OkFxg(bra|doe`z+qc=ue)C!(|S^V1hEKfJ5(7}Wd*NQfwj z*W`c*COg~PCmwKK{0vn+`-P95Q<$}Xb$)@N_~{giJ$?S`3tV|vJsp?}XD>KS-f#?@ zj?$+eW(g~=@!p3rSmGDvBK4GXQD$F#PuoAd{41`vuR+$~n_P+v%r{0K_SJd3guR&y zL%9#7657T+^!Q#mrO=Nw>wpHrjAW}+Za+-1aP(E$^F;Rh^uEGWZ7S?~$-7XBDmrQRv^2lTuRFwjmdupQ4x-GMrIU}>%>t% ziSRp88rT7GKH^3zXBm?MM1DBr#YY`ou_FfxY{YFHh{PQrze9Qwyl@v#2yhQ%H9VeT zsK=msOdQzpUFJ#T5*Lt1_z#4u7)Jdax*_}kH4qBi^hxIVfz?Y|sS-O>81E-Cu(2@8 zO!&>?!kG7Drg!z!#Te&a*=a#+l%9HKIVlgKU;*T!l9%~W7-88hdPwh8#pj-$0O~m` z*TQD#(vxvI3z-Y16%6M-^A!PoM(pjl28sRsiHyGB=Y(Y3os+wuaOVU$8&QY(4Fe_al^}^(kc$6$L+6m_z}0r}|3-GWG=%?gfiKc)VYl z(Kw-<;%u%!d!S74@X@C~oxOPp!pF{*eM#FYop8iBVn=^4*8F zgJ6#JAYDrf1YzKDRMLDTG_ogZb>2O-AwA}|GP_!$o=2x#xyQF?AGJY3a}E|kw}r@( zf*NUzJ$o~ugB5-jlGjHE$0^!4uh71MCvJ2e3~Cw~7?i*#ZPR!h6SLFP3NQ{jix^OL zJ!ru>*)$ukclk*P=kYf5|tV7nsdUHT$( z=tYq1IV_Aj>7=N^&)G>w#Jt(@s2PLka@$-UezTKDsR#)qoOB|Ll22K%<}ch!-9;yg z&%p(*>KkPdLkk*oL zPB}g!LvdBr&ln2QO<6xqapv>;Ak+Yb=3h^~?=6?T@jr%NI%mH;MdQf3AHVOf(xgv$ zggSUye&Xngckc3EPaOQMbL-Cm>|~e&jvU)?HM{d~PWQJToI8K++#3HQTn?S?V|d3P z5eh_tTO_x2Cs2i`|4X0qYo9c3$&84ngGX`EN#|CwK%o2o={Wa$nFs$Ym-G)dh<#09 zF}X+k;>Hm|V(a=f8}yPN#_A z1h+}V!rWz@Zm1L&%@HssSV`v=|I6t9_1l~M9J$sMD(9vZHJ0`R>%~R;f zo>!6QWx`1VUPf>39NXtPf7Dt)(x|Ip#1Zu#87hMQsZ+H+*;$@8wK{ERaoWt<)Xvhhv6ZQqQ=y%OsZ+5qwX!ZL z=B0gRU;3lx*th&_u>QY0efs>>sX6Vld>YpOql4qB{D1J^;m!L06`tG9+38D`@R^CY zxEjc8&Ca`3#M~P?w{JT?&EqM#gcm_No%{Fy_B=-W44KmS*F2r`<>h6MXN7jNcoBNN zFz)-Ym*PJF)deWQe*L}s_Z_G6LfBd{J}$^EF&&SnmCNE-6|0pR@Pa(E*^0v(^DBi4 zr!5*ah935D6YL*6=u;NaE{iu#yNI~U+Y9?zm$FoJg|`#?Ec)O$tQQ}civ4;Je>(uX;h&uKhY*tTCGiKD$70)pzC`)WdRJtq;&2~oj_-0o-ZQg z?C~**yHRinQz5(n1spWaj~HLf%KlvBsy6*m(59UFyeFrhmUGIF^Re62R8E|{NN9}R{N9`|P1VqUH?*EX|{&PD2YALWY+ zHyO>tF??WzDHa6+ukbwNB22Q;{F66|f($-bH0I&s!Q+9_m}hf00pYpQ7()$?I}hD7 zNY%-_50k?OC7YcMy$r_yoLSLjaCE3NMO|4~whVOw!gzXQv1XO!tj4`m-T66BZHz5| zR&Fr+JtwPA>g>M1 zS_bK!73CftR~isWhj>9UhL{f9P!LxuWgFS6muEKJefa3`KxLWgH4SX-N>@va62T?_ zW@q=+YMzD8OSJLGS-b~&#ElUB|L3!T{C{@(?87_IL>o1L2KgTpfQtR+@bKY{{Qor` z5bNb;O%gR8?Z%W;TV2}~QHqBb>aUA2T?+G7cPWg0#cNy*qj2Y*Y`3zO@)qGD`$vz# zANg!B|8tA~#H+2Ne*O=K4?)*2-~Tii4sYiFS9to^ul{d6CSc#129Y=t*=6B!qtyvZ zaWP6xa&dDOFM?6FpC0UWI&=^SaxW$c;Yw(~cmGzmYmF^oa@+_paI6ez464yJp)Mk2 zKd!OW+pHk{aU4cD#_gdzUxD}=WLw2K14%YP#9PA3sC#WBkmdYqXz$jMGqj-UbrIn< zG5TA_=xw=y+e9~6g?>5EY>c3cx5Xi6 z=(aw?q0ly0BSN>W(UztD_HX^a-(SvG(=gf=?qn9syUSHN>uwKkdTof6-J?6F*qbd5 znm8n&8=bBJaTGJ_)EWdq$8#gAh4HqQ{Njw*9$tnq_CkMaEe*#-32p1tRchGsw3Bk? z_VMRUXMjHcxt_#@x4n+gIj>BY5^~twt_kznf>*hMPCv+mOuq{|@!pTOtZ~6_lW;0p zn&aUs(B|m!UTy&wOxq2yd_u!=+7^jCMB(&?ziC91V2b`WR~+AZ=p;4}&9;Te-wvVz zPi+Mkpz59xI@b~Wj)|Vmq&e2gTC*X`=J?n))=wjMna*OlfNV&GDt;J%918kMn?}9`uM;*^MWuFAb`*UVW{r8-C^bU^Bad*I&Dre@wOAaDg87 zU%j(mw_1J{&gTsXP_`A;FC1+rUem&nZg<(N;@xcNtU+94-tD*hn(-Ie@fwiv>{@FjY1~mSD3bLT$%aW4t&bgT-kX`)!-3 z-KYWOJZP=h)M}(_S~_fSUW>9TaO-v6ja6Pf`Ymg|=1R7u0E-&7t_KUm*PsrUP;Wyk z#+9P7NVMYde1*snu3?5VpjyvpX=>Ld>VGZ1vU)E5o-JDQ7Po6>i{&KMQ{%VZGW1&+ zglmcWTQ7y5fG^z+K1?|iL~E^=Mx1?iK+u{&8CYc}OOuNYxV}6=wb<6*#h}BArMJa` z?VXnpP1nOyT=)q~Yumhn1r780PH%@OFRv0v`hUrKHu3)pC$&Ci_5OdygTbNB|8H>P z|MwN1+qa$X($!+&CRabar`*>;)D<^fDLMP)U^_ts>p;-^t}nnaHqh?rsI|c#w@&F^ zF~wn61XAZOSbmKjf%X+x=R1r-T2Qj8?{`?KogXSS@OTPw86d_R<2~&mOKM$3+9#~= zdq*b2-~CwKQ=mS=b8r7+hbADuENU12yhWMPH2cuL<|R9HeNqF(b}uM#50;}_UYrEp z!XKr9n|QO)7_^5wgT2lz(V)>1?*U8jt+_hgmkf{)m2}^nJA;!+IAKzclLi@7l04~P zi?%rSyt*n6h!1R(?OEYgD^|E=Vuex#NjwiU=-<)(>Kr+{!LA7_V)EQ&zmeVGXDd$2 zxy8h|jBBs~&Yd9(H!>h%OmSzR`+VY$R~X(H`J+WTWejm0s{v;5`&O3%oKkHDN6z@# z`Rut7m8_k|dz;O`cbLwN=jo#h7ct2^MJ!jQ-j?Q^#k4RG8=5+z=B+gkmas0eJ~ph6 zo09a5hEbs(sGR(|s2Fb_X~DeLLrBhN&@3B5O3RBNq-HUYWlo@<4#y9_jxcLs3V?LY ztEiZlCMMtV_VKNen&#-&B(!18kZ{{rE{f!)q5Z=NO^XBekeag=xs5z}i;%O=`lTbc zPF_FF>5TSUqB=Fmp6=3a)=c+#m}bb`#uZzd;B+r-2F?z{JUZV9%QlB!$ibu&d@F1q zL{uaeQ&#NRL9gR%z!W8upZSv&gS5uh$Sf@|Zp1jR+z9hjew!=Df*SWNuN}OF8?7E3 z#~-?W7}x+w^KEefwrI;t!0~Uu2KJ<{5dJBNZ*;{8zp>8e>MQDx)l)u)M<{90_=dc5GcK4Gq6i`cHIIa+cvc$O& z-s==&-Xf1(mXsea;3dgW&Q+wrCEef}P|2@2pe4+_6(ekg20xw%Q&)JxXGRpdlZ&X- zrYi1{;LY7MHB?34s&(N#PE?)Wrat_4hbQ!Q=il#S$;#A4aW9ur?Kq$`o)*>Wr-<0k ztxt)y6Qu4)SD6HNhVcI({C~7vd(+z&&%cpZI9#1-;@ArF;F~qo2#3mA~ss+V+vKxW3)Zj>Ev|se?5eG_2A8yeGH$d#IEXiWgE z=$#8gSie8wtwi!$&|j6UOq^e1w=8`khurFGRp2OnV%ZYKd!6yF@nEb}pb%6fKKpLw z%DPle<1?9yPs0DpAmm_?eY{qbe?u4foxQd3@Qg8QB0+!pQKd!rb{%Y>w5fQwd;R*D zSl_nLlC@~VaA0)a7Fv*6<0!_naXh6ExgE}UFjc0YN70lq;bZ>o9MAldS7?Zsxpf`l zN>FWwn(&DIjMJ3D@-}NoWn5Zg&~Vq9IC!*E1(gYnaxi8ZUi&s#Ad}cE^Act@%*BPbl4JNHdZpgYr9xQ)|jngMXhtI z2zl7yb>QSdfyB@y+&FLb7IsWS0u8H`Jp8)o4&V2X)*pSQPz)pTV&VJ zXS;E3%S0^o2yZ9ok_qTjBiCPq5o;QH^_uom(RPNZCqHbJ%gr19`V?)0v%&mY@uTCb z|7_79#%g>Gc;n=UolVb=;wTb_BvPwJZgN~_6@{OiGy|P`L8?uV{o$4()*4i(vDItG zv)K$&gC)M$lC`Yyroc8U)b`Gq_3?9h<0OMT5l8h-!C!PM=1PU}&fY%D+mL?C+_&_s zIS|XDNdSJ>9`48iA=ncnfT)fUz~QxK@#eN-ae|nvpe+t>J{`5t%8uDfK@FpG;9@-O zMVQ3VqLtC@nykjy&P`8rjED1L!0L~Hs@66P#@BwBYTtXgvt09ufrxzj>?~n)JYceL z8o6^eADu5x+MV4%WweLayVuowKh$ARTpY|S-vG}~Elco7WeWssFc4Z;b|n1N3Y>Re zSpbUXdv(wXpEMuji6c2ERy~gsP5~o!2_A8{I6veEh9E~qnQ&CyQ@%HxFW%esfv}oY zymBf`AHT7;+tQJa_H;j8%Q?gg8+{nXQKTw-SEML>QE~sEV92*5GD;Tap zmS%MRc10TMeS4|8It$7fceWuuSF-q6errErG^3fzJmUNjNHC69k)P6pL658LtYyq; zOrqZ)x<7B?2JQ-)0+>;Q%N0W>ik72%&E1OEf*W0Fs^!}VBM(TSu*W4=%NQuYgx4_L zZjOyDr@_dZyKcgTI%$xVV=h2>O>8ujX0aocVsv+oOuUu>?o~)_;H=V|(&rjX+JKx= zTkJ4tqY!dT<@G4u^8M|rd757vT94_c=x05cDU=n`P(Df~SkT>V%*vxc=39!VIW<$a( zcrg-1wDiTKQsKBLR2Sjv@?_PSB6M(ygAdDt#B=8*`}i9uqN79%GlAY2=na3eWd$UB z+z?3lL|BWT1YzLaF2356uhP}{-$$?{c{4Yf()P3)>cGcyOS}|N8JI z|La$Hm<4>ah<(`pcIA-nJHy`K!C?4Abu-$1Aua*u^#q96#HQAyS zB0B^jFtno;X<$!vykI#acL=^0wx9}%WC%V<^Tyc7=#A3B#isVfi#S^nK%9_04Xa*fJyrGFKv;l=r{ zU#eIu*oxIitZ6v)W^;e-W(}cTMN_5|#pw!Em}2{UgkSk#wpP!h*v- zjb_+%`~k>2s;@wG$W#H8tLZvHk&8cNK4WI^B7d=W6_!+w?W*MkQ&K#m?*&VPHfRP41O)-=soN?3tn`DERcp*V+h~B03StBK+fM zX3yH(gKR(1?t#3}p~7{9AEA$bB2i z;S;+hpeioK-Ker^;ww2a@J9(_0kjq~IxiR<7Wx(bX-MzTIDJ|bL$-& zN?6OMT1Dj5Gd5!#<)YQ96#s)_Ed>u3;Yc7~?rJeq(Tm`~BJMo4ki`jRSG!dZj;yl3 z#>M7-R=%-wgG^K-{`?{+w1{Cm>4aoggHSULAd^+7Pw!A*NCMmz@$cO-2$`~LR!NKW z`XGaa6F->jehf&)87(|geQ)!4anSBDkVd!)kWTEdY&ZF3OkRQk!h<+P~kqr2!7m0g`_Yh0~CGOoL3{#;?D>U+t zt|=hx3Kzi7JP4Nm&3(U;VD65CImq>v7;$;`u}d_ICZP{IROnJ?(GD|B@Hb0bLfZLH z=psluFgr3!z@l1a12XYZPp~VCiKl7e$IZekLyn4vgs=ortVQ2f0Otj-;lH$r{c24&_gw}oouS5URakuNwy zXH4=}x=Jy*K?@y+?LunL&`?V&lKmWDi?ai>GxkF0i|uTt4sS|@P2pj!4YxL|uz1hI z=p5BxAWVj$#fHrj7|(fzsa0@+zMI=Z3j^>+X6`gVGFp_%W7)N z%|IoHx~g~r95qF8=eoea+yPU>Hu?|q1rqWd2E=`OvbLCdhj_2D&+twg<9$X38 z1AY~=TBL^(wt=tSI_?`Uq6=9rKA3(W19NeAlEe!|^hG6O5&O+jt4$q?g}W?>V(ar& zHQG=ZfON?tw}Np!PBo)#jQVVYUK0x{@bl)^8P81fy)_ZN+62;Tk9Iv;h7a_lmbA;U zmNJLzY(N2ib!g?y2E8|QmLU zz^D*Y26=vIu{aYN?b__<7iVsYD~7+=G*}y<$9sVo3ptYhJ&hy0?tG`QE1z{$XswN3 zs!rBxb6vq~ZTzqS7q+Zm&E36aE$i{VZ6(_njK=$IwlN^Km26Bd``&QV)3w(mG6Y_G zMeE7ZZ7Q-}B1@2Dj#Sph+B5#fCc=KIo?O|l|CO$)+v*0rlQ|%B`{~;Avf-wi&3MWV z`I>xWhy2(Eb|?u}S`F|kCv-uh~Ze7*J668V}^ttIyL7TG4`){AW6 zV%?V7moEQh%f=fN$Bno=skyLVBQCc>yp{}XiG2f3w7|YTC)Ob^`V_Te5{_5LB$5=! zE=9kt>#3uK9lVmryflw4!HTbsbno4JV3%>@rTyd6bdgY*3bS2H zgcogW2vF4MGpi|gTPUw@F&;H!V6fG{JIWtAnBN#4-5N}HV&ug9dn^p zL7RcrYU{c!obq{Q*FxnOVJR1vS^!OMrD=rc4v0aVD(5L9oA4PkXz(RRNj^#DfST?4 zUNx2__s?hOSfQpW*%{wPeo6ud_r2aI!AsCbgCvSLQI5<$T=qZNI%kS#n{HggDB*Hy-*GA?G(;>&kU7CKi4q`-K}&A*Kh`F2!Tv@vbU zdZ2dI@0Af=`#mBd1;x|Z-# z@zMfQ?Q%thiWh6Ma5HoQY!p`tDJB?A7U{GWWD%yG!p!6cAO6ENh@=86hsvqXV)#L@ z4M55Ag4%BC;DydKfj5B01w>8DL#gouXN!z|tqnd;9$7cqX|T#duBZ9I#9hrZW}^I5OE?vbab;~KS1GynaU>$v6bb zb>XDB28~$mC2=Hj!jQzKQ>f~KYVPUrrs*utX=QGb0XkVO>Q65ASQ$oHWO=KS{gS_k7db5>|?y@ux{1JfjaJL&?HEicAxe^SLJG!tq4@dYe%zT7Bh_hjmDo4!-K8 z(CX}2jS1%pRYAV7G+j=aMf4(E!gd%T()2u}u*Kc)(@{E;j0n||^9Z8t42|*k9f>doskE%$GaE*d!J#>TQTLES% z^l%RVb_{009AO=2m~$T!G)?<)|rZxl0bj-h^nC|9lwPJvlRqb14cx# z3M`(B9UL+z3gfV+?qckg2Hp$XjU|=0=M*Zw#@G{_<>1o**!82y$`Wcw+DI)+Dz&9f z3#!;r!$^g?-fLWUSb8zaPCCjOSk7vtv0PzVt}ON|O4It#ye?R+2Tk<1ozFR7o+g%v z+~8g;O@Msp^56C(Y@HXb4ZOi+x)ziOwpOJkM&>0nw9I*70>o>vHdO$vwJl!WLY*iA z*l84u8ySe5#%fcR4T)XDBh?(7x=ZrEph0f-2@}P|#Vi)ujOoC3nd`dnd%dyTfP)l1?g~J<-#n~u z3x^2O6ff(r17TS_g=*PYl4-BGD-Wu^bb-L)QjBN*8YW zyIt3fSSBF%Tmn=3)_4qKjTUWxZC3;RWg(nkjJEl`A%6LC)^b6!cZs8our@YpB`xr^ zjvkhsqKx3H$V0Ch7B)KQOhM5TBAFTto5v+7N}X%Rg7kui6rJvj6zAJ z2V|I5eAz#1yxGOV*QB^8$kj_?`012{*SDeSwk4ey6gm{s-ha{I#Orow#inNHGjY}2 z%US4zXo7kd+Uas9d#2Gskw-~n!gBh%peD*>)Ae#Vs<6dq z1h+{?D_7epn4$GOI(UhuHWN3yd2FNQsP1Bn%GPe`lOZ7hzk6dXG)nArdo+A~&0!ne zvgpn;<6X@xf1ea^*u5jVJ2cc`F;%8ZU9Al)tB!6yl4TVKhL)!vW@-t!JXyH-sr`nk zjJ|@JOHj?^=R~)vn=b?!#SE4MRYm(!Bun%DZz^4>QJlHiBtKQt7!Sxib7IfRaF3qVp7C&jO_IiCWaRjLQCs0(>{~WrctVHJYq75 z6==`AFNt;(zBej4k{k8yXi82=$>KI;P|>;w;Gt%81w|NM`IX}vaw@>!Dxx9G!WXJpjEuJ z=$RwIpu(p6VEEN(Yh3Z6LbklJLU+@gicSe3k@w9!Q4^&b^;w3cF-uSN3b*n#Qgz=N zbMph0uKV~6@03d}xlA&XWUO8Ni|Qh&w8tp%D%xOW_7L~UMVk83XIa$a1N#gCS<@d19tZwPeeAZN%4v=Iq^Tfh>YL z@VB{;S=M#HVT~3zhrg;HG0E6J=wf$T;-F9D)|PqI!_GT4>%~ z)-fM%yR_YjO@`ulCO4#MY`sST=IC|tGpv3|#+?%BS#=>C9%czu*Rml?G~Id!L& zjp;79GO`DsLRQP3CMnwvY${{drbEjg$uX$s!>?>T|LLll3##YUQHcH(@oHl?X;ipH>$>1PKa z)@zE`p*>d`_?#iCyQamUvgp< zDX=DOhQIT~=;wco|B3&*1Cpq<4(O2zCw*yxKPOPbeF_6Kwl2_B5n7W60hQZFjCNsTm_3y)J^l^bf7PUY6Y zVKcS++kTAp>h~*IA;7wP&R_xL7KiL=5>>|9IZJYzPaY40Nn)!`JkFI`q1IS*HrqQ~yK!_$L9|TF(Gq1a(gTIsYJ8qw!xAHK|T$ z_Y`xeV@5_tX(2DoJJZ`LJ+(^X$Kqi^4OIAzv=_?yC%29;Kz~I zFOAPkQOlHLH(WNI?_VfI=%dV;NS?%!< z3K{(|HA8i6-AUfXa3*Z$bokP0KVmr5Co7#|T&vC;hxsg$(xSS*|2~^I;+AD;g7~Xw z7Q1dqf&Bi*6KIrB!x2!iTpAAtGoAHmP)`{_fh zXow)VO7bgm*k4Z$zi^EbpubBuUW8SL)(>{;>0tHA?YWDL3yIf^PZ`wS_kd37q4Ve1yA&PbZS;!AzH*)9u5A@9>J3zSuQ3>M&C0uy+9?|3GT_gok2YEx|f zN#D<7Wj@fa=H?a_iD>C%pFmo<%BVyqJ9#c*OZM#s3m`v0o!87w*Nv$d6GZ=+++0(r zbxd%L%S*PkZn^olakVR1<&r>)oeJEK=f~CLrPk4yN|fC=|4aVUQXFGIuljs7tgu!x z^pKmUPpSw$o1GATDQjlGmD{xumj`kv)#~4NvbbPNr^=&02Z7rpf7pf05u=)xb}27J zNb6_ieIK1KpDPVnC|c7b))HGWrL78ctw}%BT&ZCawGVnNjq=2BZ!xt#vkvcTxVh7a zEQP8t6w3{$Fz98gC>33J8Awk7+#v>U(>he?M$d8Jtg&y_)#@$zLfZNxZ?y}0$)8n~ zNEzk6AS>S);47H&DnG4HB}yevZm)e_<2iQ8dM>YR{^0i|-;=0Ckj;igrcKG}!(u>Z zQ8N4wVAIcxw3exlmGOj`!1vLJhOrnu?4Uto;oj1SIlJ#oTvqxADw@(_1(!QxeThGc zwvSxpS#Ia6hROI0H<9{sfQr|Tt7UixIz!AnFCj0lZ&iyjIAc>P;=%kJX9|#B9c>TX zsBb1;w9#Q30%=wb2&xVPm3n&&R_Ps&2m>JpUaT5$(d-KbCDU&XI)sJme!lKJU61Df z`1cDcy=x+ulxm_2i>EJ_hAN!ndjt(_bas7c)tq*IYMB3uY~u|W7AWDa7u_Q@?XO7u z=OCvQpUM3+c%q~DXV0T3p8vR{6F&ZLG?~D7gd{pwK5?_~qVC9~iRwTH0X3a5{aPq` zXupyK?raMU+7@Rp0ESO+wR|%1Z4munpK-I~SVGf*6ZBWL0tDp941^rJB{yNI>A$hdT+NN;m4 zwzCg4L66fXAkGqO@^)$p-fjQ1KSdi5P7NRAXNBP(96HxD5Zl33rdsicYqV^9rU{e!*5U*;jp zH2vu3*6}HsvDM9kwVIF!R7k?!ewDQK+Oc03MBGswom3XU zVg`309zJi>l&e#)`iq-&*tW1(deLfFX3|B$mh}B*gP8cL7CPkIu7bNUYxd$wBX50$ z8wx$Cs8{zBC9H+InH+Fj=zmZ?sQ5LND6WZsk)_EGwT+)WzIY@p#k{?qZ?-!(?FoTx zPoLzeE1I8VG?YE$8!>uUf)ZwZn65W2=#<)tYI27{nxJLx-}KV-Eo)rCENZVpfNqIHZjD6;8>UlNWceWAJ9V3OpV-(Yep z%0LzrtS17$EWH}M+&oX@#ia5m6)s950wOfH4pAY%iuvbpqjGhj2ZIAikOLmaVwnAbY&_Vma|v4xsIm?b@)=nApSgo?OF(TcERU6lxzGM3(v;*-2s@B3MI zIGO{ll4sb^<`BN77t#Zpp6FEfaGDBpf(T&5?F02e25UaIf^*h&BfWrW5j(x_l&k;0 z@iW$)iH0y+l*6B%BQzm!f939@>CwN<8d~~T6z^f^{?&$t%r?s>PxFW)+LKhUZvWG| z{!z!&*l$`|pNj;#lF%~LkB|*`;uZ#B9eh}f9Nl&{3#p*k$VlvqA|_o3RIUrfs_y@= zRDhyt;Wax;CNugKY|;)F5%ICSL}{a_RN=sRa}i90Q_WDF50VPSyoue$JOqr7fB2o| zh|%)bPim{oaTdEX_u7M?%gfx*BAbD%f>dEW`59pUD>P|3GS6TJI-8ts`=M=Wqo@%t z>suY_QW!SuU_#g@rFfr4L$u6nJ5PwDA-|_Dn`|t{Dxg0RQSm(%fY~8 zhHs%`x_y>s<_8}+$wX>uwX+_s*%cgii7h3pYmfy?bCG|L+o;LYF@u8!h_e&0twV{;{QxleNxWMjFVljEs@zCL9wf)HjTN6P8cM9f7hJ;ZrxJFRC*g)-OX!t5v@AG04Cf%}3;4 zw={)MAm^J$U}$CB0y+^ZkXyechJgWivZmxGoK|-Q>pcMhPd7f`?E{P=R8OrQxRHLJ zWKyRvto^WDTT8ktE04Yd`%G=a^;C1f)Z#6Hf~~>{eQopEDk&m4GFROO*E!bd_ZD-x zEzhVs&NgSBmRLBY(go)3Y}y2*fRiiacG-kwjJ8YDZELs}XZbJ~@*XP&xrw=~m>~k= z2>bgYpbk;SxmG+L14$ zW0p)z{*o4T1nA~9UtsMsg!<{0)D$%;RFw4`Rs67-obFiqhniDuWLWaKwXR!Q^Y0-d z?H_ZRj<_rgnKYF3E@A{5g4|ae1D7FLxv#e4>H9lILeDq+2jrlC|v&fYEuAKmD zUd9m5biR-xJHyH$!EZO&X)e-+a{JWG^5Hz6j4Hfp3YdsHKQOJG-k+VnD($)5a<7(3 z;*7ouf3QHD4^@UXgAeo}91Z)K`&E+DVAJ%$<-UL}RvHX4Zj)^fFL&N3J z)G$+{VVzOW=ECSkr3h>RR)-pU=|w$rim}U*R_y->wlPu`F*nL`r8!DfDUJM^&gX;* z;9}|hPB_IM&TV2C92QF`oKqysn`h@{+9&y%dH;AkDL;}nBMG_Z8sUprINn)EImlor z+j4}ImuG1|A$OW<7B(d=MLyatMFy9DA)n-WMFa&tNlNrQ+#XHNFVCpw9dNJbNd&?6 z*D!v=9|e_#2#XbAQ}>EHkTTSH0I7^+Jm@{q5t_?_k*$U?eR5cnpeA84C<2DBksv_* zz63|Xft*-%dR?I*FQxCnEzmuDNK4^EB!{x)GC?#?c5RwJTGq)x9_o)6!QMT*%36Ln zB+9mh_zBr{mon~#r*ucVQ=)x|!DuKe_a`C1&~cZ#fkyG140{GC35GLeuzS}z=uEy9 zL~`Ur0i+HgP07{b|3=4*lZg4;8+s#`UC-l5llUaGV@o1LhnZzkbaNS^ShK}mkMZZ@myNH$n#J=IYlCKmdS+UK92cdr_+#Lh z{tCzu6F4@Npqednfe>>@E|)33A`nYxVx3*u7S{xe*`uPf!zW)54zC{8%mEOyIt$okd7 z=T~2iL4x)t#C05}y5`;PF_)~Lopg!Qv^<)?srp3u2P*Fndn;>X<5;U&wP5#ertXaP zLTLkmwZ+Uxm`|?4+U^4W$mh0fiMvzE9J1P#VO47Z;<_@Is#^KnN!+?zSJ^D|SmOi- z%5A7Tr`#spSh;q?jcXGiQtRww?I4^R{57%iQ{Wb{+2%IASt%idLzya<`=r4Hh*_kP zJm;@s~7l zjU7+|EhyBAk)IWQsT&96{g?5m<0!RsyI<6Dtp|Qv`VLl(2??@k^ttHq8(Q0*2YpHEU%-Zq3!|C zQ1nQ3EC1&wac+fq8s&YqE2NO_ywK6ZFOVA$%S76Io?@R()aXwAAGzEBs~#0igM8N{ zzXpJ5Q98-(fScMhnY(4jv}5ZtTH}D9z6Wr7R6#nUk(Q3j|7q)$+il$^_O=kf?srxw zgx(;!X=>wPAX@RC9g6dmIvJX0Cm>@Tz~SQ?cq|?gaA#XFnA`DeuW@-;-iP$@FbSk% z1O)kYBeD(eT#%yOce58;5jnc3`4sSU6`p2_Yg+W4%Qzbyu;YLlULF)tz3MK<)@zAj znf*k64N*r1KL-0de}fHgs9b(|=N%D}lwYFWUQyDQZ{)LjBd{&r ztI2l`^yTuhZ<>LcsE~|ZOK|&6X!E5tULdWri-<%m z_tieT_q|mhdm;P^&561+d@4lR4SL8JfH?4d{b)50y2EQ;JoXJ>DjwZkwzK+55p~T? zY4V8y(_F&c)~HQY<0<69s*UVk>ggonYXt2Pm+NoS^mH*l=?2M;=f_dtX2jT&{I={k zKnn#GCpx0&{vizJ&g1XTpHJ~FYUPWgC;u2#Ov3)&i;6?_k%Y?cEc}Mp8G$OykZo(8 zG*%2@e9h$ixx3)e%q(9xOei5wte`hFA~nYBuEiT3*+w8+xO)Fuu(NC@}=F|X(w>XMwlM7Hx0f^qz@NZtj2 zOSV1vafGjU;{5w<*Z&R5K`?sQ4%YKD?m+}y*i9Y-AZ@E}XcM-pab8V1lWkXR|IS2I zxqZ*D!5b?9GS;t=J)!r_b95wZ{XTvd8XFsw5=8}KP;77lf-=<&J2@KYyG(Kq(h-kR zhnG{fNFFuVFM5z~I6#|`MDL(M=qs#ia7#LlGEp9f8UuRL6U|g`XlqynfL&7GRG_jM zgF=r$Tvl$r+nC5y>#Y9sKoj7 z&4iUs?C}Ba-p?*9` z>L|UC2ESEGifYCV2RRPU07%K%h1P)!o>?TgoC1%%Kkj00_sk9qrW?IvBvLr#`WgUK zdOO;4SN%zXA5w*+_WJ zTH8b#_&FNB5DDOnDdso4uzer%ZL@4%?OG%zh!LCCQ$Y7Fy#06H3}bil0qq$+%fME4 z?g_vT-sEk6l~j0b)6Z`6<@G}+?i@1DETj0vriu3UX;;0`7$q{k`rJ9{{@0mv)I6Z! zUb?8`t(O8@+gIiS)Vn%wN~J2*uq_;H`Byo1^Gzb*U@&>+nhAr0cuFSg{w2IPSre1xqOnw;kdzuCFmF**|2PI+mL zMRyi0<5G5z(>#5dEfBm-Ie8~AH{Mi9v~YdIcnW`;A%|4{y7(_tcb> zm?$_n)Dphb)Rf&xy@N%P5?3gLkgZ=OMM1&=51W_2$*Cl~sVOBqaj2+psKm*znNY)E xn~=t!mj_`Ib!_H{@tx7pBx-6Tp@i{iuj^HDp_%_PXuQ3cjmG?-hT}ni`yZqNRX+d# diff --git a/container-selinux.spec b/container-selinux.spec index 86150ff..4837570 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -1,9 +1,4 @@ -%global debug_package %{nil} - -# container-selinux -%global git0 https://github.com/containers/container-selinux -%global commit0 99b40c5013ec2720a04b1d3579ef888281714c35 -%global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) +%global debug_package %{nil} # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -18,15 +13,14 @@ Name: container-selinux Epoch: 2 -Version: 2.163 +Version: 2.230.0 Release: 1 -License: GPLv2 -URL: %{git0} +License: GPL-2.0-only +URL: https://github.com/containers/%{name} Summary: SELinux policies for container runtimes -Source0: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz -#fix ERROR 'unknown class lockdown' at token ';' -Patch0: fix.patch +Source0: %{url}/archive/v%{version}.tar.gz BuildArch: noarch +BuildRequires: make BuildRequires: git-core BuildRequires: pkgconfig(systemd) BuildRequires: selinux-policy >= %_selinux_policy_version @@ -38,7 +32,7 @@ Requires(post): selinux-policy-targeted >= %_selinux_policy_version Requires(post): policycoreutils Requires(post): libselinux-utils Requires(post): sed -Obsoletes: %{name} <= 2:1.12.5-14 +Obsoletes: %{name} <= 2:1.12.5-13 Obsoletes: docker-selinux <= 2:1.12.4-28 Provides: docker-selinux = %{?epoch:%{epoch}:}%{version}-%{release} @@ -46,7 +40,10 @@ Provides: docker-selinux = %{?epoch:%{epoch}:}%{version}-%{release} SELinux policy modules for use with container runtimes. %prep -%autosetup -n %{name}-%{commit0} -p1 +%autosetup -Sgit %{name}-%{version} + +sed -i 's/^man: install-policy/man:/' Makefile +sed -i 's/^install: man/install:/' Makefile %build make @@ -54,14 +51,10 @@ make %install # install policy modules %_format MODULES $x.pp.bz2 -install -d %{buildroot}%{_datadir}/selinux/packages -install -d -p %{buildroot}%{_datadir}/selinux/devel/include/services -install -p -m 644 container.if %{buildroot}%{_datadir}/selinux/devel/include/services -install -m 0644 $MODULES %{buildroot}%{_datadir}/selinux/packages -install -d %{buildroot}/%{_datadir}/containers/selinux -install -m 644 container_contexts %{buildroot}/%{_datadir}/containers/selinux/contexts +%{__make} DATADIR=%{buildroot}%{_datadir} SYSCONFDIR=%{buildroot}%{_sysconfdir} install install.udica-templates install.selinux-user -%check +# Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 +rm %{buildroot}%{_mandir}/man8/container_selinux.8 %pre %selinux_relabel_pre -s %{selinuxtype} @@ -77,7 +70,7 @@ fi %{_sbindir}/semodule -n -s %{selinuxtype} -d gear 2> /dev/null %selinux_modules_install -s %{selinuxtype} $MODULES . %{_sysconfdir}/selinux/config -sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types +sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types matchpathcon -qV %{_sharedstatedir}/containers || restorecon -R %{_sharedstatedir}/containers &> /dev/null || : %postun @@ -96,7 +89,12 @@ fi %{_datadir}/selinux/* %dir %{_datadir}/containers/selinux %{_datadir}/containers/selinux/contexts - +%dir %{_datadir}/udica/templates/ +%{_datadir}/udica/templates/* +# Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 +#%%{_mandir}/man8/container_selinux.8.gz +%{_sysconfdir}/selinux/targeted/contexts/users/* +%ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulenames} %triggerpostun -- container-selinux < 2:2.162.1-3 if %{_sbindir}/selinuxenabled ; then @@ -105,6 +103,14 @@ if %{_sbindir}/selinuxenabled ; then fi %changelog +* Tue Apr 09 2024 lijian - 2:2.230.0-1 +- Update container-selinux to v2.230.0 +- Allow containers to unmount file systems +- Add buildah as a container_runtime_exec_t label +- Additional rules for container_user_t +- Add some MLS rules to policy +- Add container_file_t and container_ro_file_t as user_home_type + * Mon May 23 2022 duyiwei - 2.163-1 - Update container-selinux to v2.163.0 diff --git a/container-selinux.yaml b/container-selinux.yaml new file mode 100644 index 0000000..689d5ad --- /dev/null +++ b/container-selinux.yaml @@ -0,0 +1,4 @@ +version_control: github +src_repo: containers/container-selinux +tag_prefix: ^v +seperator: . diff --git a/fix.patch b/fix.patch deleted file mode 100644 index 90293df..0000000 --- a/fix.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up container-selinux-2.161.1/container.te.orig container-selinux-2.161.1/container.te ---- container-selinux-2.161.1/container.te.orig 2021-05-06 14:55:57.952216763 +0200 -+++ container-selinux-2.161.1/container.te 2021-05-06 14:56:02.027287991 +0200 -@@ -114,7 +114,7 @@ mls_trusted_object(container_runtime_t) - # - allow container_runtime_domain self:capability { chown kill fowner fsetid mknod net_admin net_bind_service net_raw setfcap sys_resource }; - allow container_runtime_domain self:tun_socket { create_socket_perms relabelto }; --allow container_runtime_domain self:lockdown { confidentiality integrity }; -+#allow container_runtime_domain self:lockdown { confidentiality integrity }; - allow container_runtime_domain self:process ~setcurrent; - allow container_runtime_domain self:passwd rootok; - allow container_runtime_domain self:fd use; diff --git a/v2.230.0.tar.gz b/v2.230.0.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..ec5b90aa227e4f0aad1b927681f73e46e1b6a114 GIT binary patch literal 31219 zcmV(-K-|9{iwFP!000001MFOTZyYz0&%eu0K`6jQI*dkd$(C`zIf|5Mk=Tai++wj< zXgS@S8Cu=VUb0*A+~L0a)r0J2&qGRLuW#?-L3V9Tv&nkbuc|25>cj1&b7+5 z`|8tw_Th7SdP;x7XZcTfc>LAD@yXf#>Dj^I*#UeHKOG)_HTwt9vhrztqZ}ORtZg1! z_tf)c=Kha-P7Y;e%Tia(znx?{dv|Lhi6(JPESv={gcCk z1AQv~w`u1cDr5|rfNUz9*z%>_Q(5spY9CwhqJSj&HfL6U-JKxqocF0 zPCgw8n?JvE|KF_t@wA+N8YB1(`aeB5J^7;l&+vId|M%K?W2=ulgY*CKBlM|_@prEOgD=_qcl~+9|7WH#v&uUCv1dH#|HrHTe{^{C#s5FUXK&R2^#1AL!C^KA zxr}H3`6WL5zy3Vp|Fz2QOfz1nviP_&p78&ZT)&OjB$}@Yu`An%G*ZGZW~?Jg=+Mw_x+3vwDNF6WngLZ?m-Sqi+NnZbyngdm(oyuD&d2iKI~IKq&@L~i3$47C*<5FL z<1N}&S84*{sdRG=WVV{V{93LENg5BtDwoZrxAH+tTNMjgX`Rc)$_Ds>Z{R;IaSd~= z+)OteSG#hmbL-TuDvIT=bWwF*=~@@N&xb!g69TDv+u{+_Eiw(BTLO)8;#5UPel5Qx zHp9X2v;t}6U^}D`>2=eXYUZET6QA%=8mes$=kHefL-VmZVg}ENTl&I2R7jS4S7;8W?K6X@`QSYq~9RnXsYsGz#ed$+wjd}w!7X?@duLwu_#R! z6>$sn(Z+mS+1#RZf&3ulrBz!Z6}Mk_2uS~I5+73aF+%^>bwXbwLq72rh%s3>l;qHG z-~Mp<-DXv8tp1o+&0rBWPW1v#W08DeIhfyb#omJm(6zf!?V-d)8n3`+(7=b z@a|vm+}-Enqw)UkD>Iun#bOk`I_|&vYr5OBr*?Zbe!jfhv+=?H@^+8-O(*tG;z0jI znqT8aAF2Fhcj}e@xKI5;5idJe5F%ur+JcaBNKQURqeP-k6Ui*hItOrd8@@URwu|rt z?dBG${#(v@dOdpRPrbA6%@Yay*KRqn`P|$xi660Pc#wk?I`uFI(Fe9YASBQnNT`9Q zs%+ddiUtjHBynglF&lm5;W&T^wc&h({y`JUz@9b>hd5GhU+ln_&z_Iyk-TzR%Nsjw9x&xz*|y3Frj6uvm5oP2 zp5Pi)-GSLr38kBnyfV{fF0Tq}-AI0GeS_P(ClY|UW-R5m3ktFhBHoCCDJe@=)PQ=^PT*+qV_*cxMI2e>eAKK} zAm9e{fJe#4j>2am(!9G%?H!=g1CFLcJ9gj*TuY3CSb#>4_}uw1O2T+CBuz%rR9zP! zd}!HT$1)k0c$$6<<@IaSJsxy7B^W^N&|be$>DdR8Bhw0&bs z9bVgHkpt#33+4jin=C{W_K#3D!0Q_rGl00Y%EvoW{@J!NgR%m7T}Y;dBp(R&pg?QK zXf%JC>k2!0zSimvg+W4%gpBYJ66Ew$JBQqW0D}HTXp*9Ka6T~jy4^&XUopK@rK&-r z5Oa0U3Qmk8aUJ%U75e0MFda7|OAzEvAf$UZTAC?tEgy`Z?~J;mfR{|0d)%aT8E%c) z-;uzeQUY;__#)UW{FuCoYl5K;j1gW3+mk?J##G`am8|pw(;Maff^8^ncURemZr|ME zo*s9`{v>JVoyAuhgfXN)3UHpZ61%P>OQ%s%8C9RWJqTlBasjrA(FujAEAsSk2=9c1 zqec5Weq>QA4*k{@0v_$LJxJuaU!Y)eORxv60mznVa)^Rw824z+&Qg&L#i z3E?)dg1e%#07Go>>f>%2Z6__$b%=#Vr# zAxX`gdJ-6@A={%Y8%QC z#7mVUmXTSZRiF?=5Ex?jn{*H=XVVO(^-Vw<80Fz>lzX>M5iT1?2v(#1JI|&31a+n1 zsEK=`qW}k^K70jR7i?`=oO&YIBdGTTG=`_|F5muiBVWGyPGSjq{qFkps~dUs`YleK z{(SxF`;q+a`sUr+>u-O?N3`&#*WX=VU0=M!FOc^AG2y0lKq*)w$r>176!T!+T?h=J zc=JM0BNRegU8rEL4Hf4x>db9{xy7qR0JbIIPY`+^HgeH+>4!xaQSy3pF=nZ6y(>By(7knn)iQ`iHO+#*&cik+EGj=PCcLzEu{d8qNbsQ zC|3+k#FMun3hEk>S4A}m1S}+Oq5+;$+yXw=P`oo1e`0(iJ0o)~qHWyE<0&!ibWG+} zb0RnxGlo%%UsA3{s1~;Q#-}g_)th2#M9rom4=EuDw1C6F`5?;c9{vgxO>MH)w!Yxg zA?8ph2it{jYIJnSFTeyrgg|7vO7xx1Vx$Z;e)x_&6qi!Mc)@?0t4PnT>I!tiDP;_7j#7Yco;T)j~3)*Ga)~^Ot zbz0&=hp=maF%W9!3y+h7VAt%-v0CGk7~d_zE-Ju8TZagPJa_0QfnS(&Kg7B`VrH_O z!`^ZNyrUhNE4SWYV#ExQO>ks`6)mO3lF8i|ibo-pvYn_Ar)p{-?Aujwt45AX^eF@QCgmOpf;O z7+1-sV~I)f=9t4f#0Z3QqiA@%YRq&@R_GwxL;-Z$Ch`K|1kVbUZMabK0Lhu268>^c zm)7Y!aiS_*+dv3&Ie-y_s*r&t3G02Rat6;4qog=o*1qR1PK%e!6BfHon4nEILh zY$qc3PV_O+S9o0vVI_dtoI5jA9MF(cVH$!s6PSlU3jsDM30ahAqx2B_vzSt26h@Cg z)8nCPzae47aDRq7OfH8^>o8hST?o_}4Dt?@0ze53n(e8oYzxr^TYw=6lT!>Lo?IL8 zR5yjr`YLp_^w~y83+2lwBCyUrf)_9y-3vQ?zk+&esn)gf-sp#=m`Jr0mA)Vj4S+Q3pU9k7yy+QA+PDfrZaa zf@&c05eKnB1d80OB80!U#&HLRcU;T3QCh;z!vyJ2-r@x?>f<6Zas&{2*nx|^2IoUF!vlPPdnJhY z9;>hh9U*l=RxAP@^3V}>v8Ykq^JyWob>x#LEyW}1b|}AeGBpA{BU> zA`exV9AUUJF@BI!#BxrdxSHb4kh6G?SQ3V}Vh|ET32^tfZ-#J{#~2`DVJIO!U_U&l zUZ84SI3{AumXZZGL*NT4J((@1XUgS}3rPR)l6=4{&8@L_@Zu<$5g?`1d~dpV8RSH{ z2ys!;{Ue;}8<94SU>O&84#yb)0*F{{1Hif$60|g@x}iUcsvDs{Xvf8GY@2as2pbs1 zT45*klXZaR3hZUXYRa!g0>JZig_VWjF;0nrPR(X0rMPVNskWO=FR=Hpv}5j?|Y~Sf(B; zNY14Z{T%LKin0@$kjD-!LoH|A@h zm7_6DUsVu3qJXd%1w0-ARAu>oJk`-O%_CeC##^yKz~rZ0gxW!HslARU3A5~Jhh>Q; zDSBBs13eJ#>#j)s0v&9YKXdXMbdYVbuH=^p(vp?nX-LeZAWr>DQ>YCrBSfL*nJVb^ z97V8zV#3Upy8}~d9#(WC5F#a1Z7bc5*hRpkhwpdvrBLf>=OunSe5yLD!>SzQ;<&pb zZ`w)B4ilDsKrVyv*t8ES+z?}0Xeh|)D7(ywi*OVd`n1Es4CG1U&?~ALQlhyb*SS8Q zF6eYVGEQSw=z{OzkQPfN(-$pJ*cGj(!bEv*GZXt^-~tK_Ur$YCxYLSdR#?w**qNHg z$(XQ3%wI^H32ichJ=h;F3Y7wfo+IG$2T=Sy3LUW>{Td2tTt_TBTHz;k7aH(k)(Gu5 zoaNDIu@Ei7KWWcMiVMP1nOz0_k>ctCj?M}MH4#RW)6|!J1}EiFf{QP z#&-gT0&7r5+Oo-XZ^3D1lVlif{|j+#MwXYFEKSsn0x=9whnc3R*~ZM~Ibp z0M2Scn~V${=o7Fz9UX3C5IR<25KY!VUFv{p<69EpI)rAVa%qDV>x*!kz$k474_d$3a}8OdbHgZKM9?%5>S8N*tVkGf#!lMB1Q7vR(h=;2Z}HlKasAbs zjxh2Z(h^oT7>XkSP!8gh3;vt71qYVGC@39CbtkO4Sly+yCR$|OER|s1U`sMirpa=` zT?>k}9s7uh$-;4fIl}^;^S{dGf*cZm{50u_$vip_`kDX}D2e zsE2NJAL_(aes~|qEfxpUlLb%3s9Q0>*GsMY?a*G_*ka$|)(%b^v(9Sxd=*-{106Sn zUvWl_{l<93=+{j3nBtCnu_VN$3MbriI34p8r7@)r_~bF9{{+WPdZS^Q#F-A#>Qyw@A0HT<1bX+tI`i#>9Y}d$b9yOOH+$#*jYH-(9 z`<;1GAuVKhKZBa~-A_>_R9A%So@fj}RTS?8goN0c z`%r0~qh%8ehB!}mn6$cX5GnZ)@)^PM;lZla1lgzI$s;MzJnyomi z`er3OW0re1j+3?JF2!EB@wybSj8E=P;P4<`45hNjVay7(DVj=e{F6mL)=H~%4$(at zS-D7rL6HhCKcHi^3ZQ_l@|?R4Xak__na1VyoW|z^7Lyw_trfP<- z4t^7Wn>iI>fD$SJ(F=kjN9)4@_>0r>y5h-HrZ~AKp%^f}1qa3fiKlp;kO*!LMj6|S zVfHw&`N|ao((3auU4z+p3mqjDuUOAm2f|gamIewgc_HHje*chtOp5=(phw{>=!a5MU?XTYwjG4JKAlgy-8vbVPT1 zl7}2%h;;ptuyxoBRfXME>^7nbLB}mHjbSmasM>O(U4J(;md5d4O2FhXT)R?7aHLFb z(}hI4g|QoNX}P$=*8jBk_5E$zNW%AT^eK2wda?6ZlI^5P>oo1TiQD=%v2(W5-QM+9 zr6tPZS`t-~vg2lRpZ%E`ypsS4O0tu^wSH|Zk(j|?FaQRFnZc&o#L76lx3pzEEG&&&0Ar_g-LyP;*qxP;g z(p)o?i-0_h)Tg-`&KIh4jo0TCzL88K9AsIGmIG;G%%rz757EFijQCC_3>bMJ@&iQ+ zx{IGD;h07@jlJ|zh#k`kV9J>@S6+ZuHUN4gf_sdR8HOpDBy!7+K|jo~VE_{hUq&Rz zIh#+$*DA{C@F@86-tqC?;ps2b|J$A5`~8=D?@soE)1UT(x5r069`C&g4o-wi?5p61 zsR~77C;P`gAG}09w2t@R z?i~R8(Lwt77_l53vbklagPjLbvi~#6z`MiO*xKX$|9l7Su}A{q*!vNr4VkI+d+W~! zP&xKcvGX?x1YW4l{{_V8D0s8?3-ikUg^LG}Dc!bBsQ{r+(z*Bj5%S=Bpyz z*hR1Q-t7Ijf3n$Px8&+||q; zWFR>B0jhfW6Yssi7`49yKS5V~zYoRsUj2N4GY_k$1!Ljlfb-;tW8i$0KK(FCSb2;0 zK9s={KQR}nJ=%*h`|2qz|M2h^oNo_7*Wrs?h62nN#sRFW<75VFGgpR`52Y5`#y#}- zT6s>PA6edl9SAd$%`>_Du#FwxZ{vmmO$lU?9^nRq={(HGotB_DZ<$L0TLNXQ4tgaS zrcEsfRGt(Io$+wRVm_o{J zMh7f-EGWZ7S?~$-7XpmR-n6QTuW1q#^k?)s0c?kA~OogU>RQNTi4XlAW zKjlWNV3yDZi2QKKi;o&QXGabc*oezIFo`=reuMlZc;POfG2kKSYIr=wP@lopV~8nW zLgq;nk`$0f__u`145R)A-4MQo8VCh0`lR!G%j%_FsTMnA^!IZa*l6@JQ+`!k81tUY z?XI4-7-Qv?of&GQ^we|fNh*kf1(1tMUaO-p!m@69NN<$Y=Z>8L`Z+A$g^kdqC+B_Ypxm8k>a4wSWa#qP`rVt6G{&p-n6r5Y&H6&o^dOlk@q8%qxmUg5fz4?D-5EDyHou*1s(g6DfdFepMJer7|}SO19LQ&p!=|y z;Nhct-=7@42Ib@RFS_FVoTP#aM37&Di2p``t5**@YG4#+1hx9mauAKN9^`9bf?(O9 zSR9o!ABi2=bG^F$L!FQg^II8R&v2hdr(DY8ThK=|NN6s>BIwqLEHSo`&e*e~Aswvn zvk+Au9UNz9PVO}{P`c0Gbhj=_j4udcnGZxL81>8*q zy5-8my8=NEeKZT8<2-=sXi5jcto2fctVYn%~=W{ z(niw~&fyfDi4#9tt?2NPQ37)-xpwI_YIgNZI;FHYa$!Salfsqo5fu^L15oKi^h`O= zMa!P&qHNmy)G2K4K1+Pu`Jdjv=tMPo`8sOyzwJEUF5Un2^x3n!{NK0nIYl$w=}GY2 z3zf>P_2%f+yVv{l@WBUOV)sR7HtU@IvGcKYpKJxM4vvE?irAL;OvK=&Y%Qkq7xLr0 z3{wiFX<2B*@ zIzgaE{~H94I(Z-dna$`Qq=~&vVcwnKLw+wqYl8Vfxi4&cmcU$n-MW`W>>K9ao?&c6 zyN%h`gARNdB;@@j+yAkbw^}BGU0l%-3-jy^+Obw#kRxC)DfYB=kN*nVuY&e$50pe<_HMc1sySK;{e&Msc&vpB*%wh7fV_j4P-@K8hBdU z=BnyBI`p+gw*E}7eJ~3itn;ci9;}NtZFC8yD`7McPHh2c_fe-0DxDv)Pd%6ZBYxcL z|KZW;!OK;of2>>ow;w+#um3xD`5$lPqgg5X8^O-j_LrOR@6Og{jn#+mp%%45wq%mA z<`&3S!2;RP`q(O4AN?$k%UT_mv^XwjZER*~T-wTL=G16rVQiHwjE$^|nt5@P*%v?c z82g+*?)m?CfA7_s{Uy?V%TL|>|8)CVY5sqDcmLb1eC`J)`>$ETZ?WU=~Xz+Mx8OtA%BBub{dW;x%XGw zJ5RsvjPl8N^?I~HL%32;Lydf{xG^vN#BFWivia$mr3e8CgQatc_7h0N*dI2!W~3x1~1dTvH6 z%YY9LpTf|!btpT=rNuo}6<+EU{V6vVEy!Z7G)b=oO||ViGZneI~FWs zi0McJmpi>u=HU0{^@&e&pM3>Wr6w}vWcX}QW%C*O;v)%wIaq%)ALnuK8aJmHi#!^qnuNO!~awF!KeJV$G@_X4g1U0Q9b@2 zZ|`h9Esg)DkMH*XxAEy>ySl%21__?8-aC(`!YsMY@0yzLvJm%Px~mkSQ8I~o`DV7Y z(Q1(?9yBsc63}IMx}8V&+HG%aDbp}|h=F5eNRxgzz9G~mQugNtsa|CT*>`90RAF2l z%8NNDW>M~ilb3b0es%a5rV(grDHd57ZL7hk+Bwax(r`BO>=9q?=~!1nBnAwwnnZzf zB`8-vP-MBmiUx~Lu7P}IB-5pO;b?_Jn=oF)`AzUZ$GseConqKpw^us5jo%Mejj(@j zwe+nL-EbZcvQa$DSJU5oIfFKLS0zFcXZ-5$0h#1dRC#6-tG3g+qsx`tQGX z|L4(cJU@@8tHOH(vJr#qclD(FXm%Ul-Sfr;--hwIpi|-D6WsFX6cd-nCHS=h zs$hOu63cr$V9J^zk%y_g=ioP!4D_rOEb<nrSdclPBQApH~s4prve?$rU~A*c!tWhpwcjVdHH4 zFC&MhoF(t0rpO)ri~;RgN#$kJu4PxfxgoL!ZafaqK`V3R#Ck$O^M2|S>J6eC@9vJDWNpmr!`A!6*bCi(!+hP`@L5O$6Z|M zXfuaejS*MDE)Xe9+Y1iG#?|fIa($pgU&G_uZsn(`wjEC}qUhEed%M;0d7jUvuyI>z zs#g`PX0q1^Ua4YK#=D$yRDswO-qq86!}v{cyaDoW2!EI-lUQu@zWHXFOrvkVwU%7v zNT|YpQv&Q*6K<@6n-aLn>G$T?bxX}zt)QdvcQrFCVp`F*gdy#R{ZX{ig@9qClc0ss zI{3Isqzo%)yh~!exSS9d0F$}C;zCZb*loJY1%t|(+edXSB(r?=ST)h2|~T3>dX3ZDC}p&1L$QXfPpM;AF{xYOxbN7hR&jB8pHYzM`#G{2omj zk57K4oKI%MtXSa^W>F_^f9=fTL8G(R8gy*!YGkRtTQ853! zAK9@L@n7+9xjL%jzn(sRvb|G||9Wzl|LrzD_wNVaWb?@+Os~H^rMpj}XTn zr6Gu>F!4s6Z@K~ua|8H&T6%5p=1A2(+ug2H(s=OvHk_g%@kA z)Y`YD8hE6)xC|Qejili;i`k_nWu#rg3g27uGNkq2$|?cWM|d7?{??)yk6#wL4nOZv zrd*2}v1xh8{MDXUKr!V5N<4)5|6V^yqyA*j%c3ytk9udYLw~Tn(YhxH>do*T*c6|- ztFyhy0SR%*_AYp^y*rGDOz{u0D2GbY=PjgYg?-PfE6ad*!Ft(W6z(+=g?lbhC{&Op zy|LWDJjN`) zJbg3W!;NnDtOqZ;UHPhy@EIpxa)c7}!&!j^{ z9AyoJ_huN$^d1(^z6|X9v8>?xI z-X^0RbB2Ul#dKk^o4WRsGnys`Y$1`e5WAf+dXJE^*Y>GH88vU7=j0ypIdPo`^5?s> zDA)6S9A`O7w{ymp#%bF_pN{jxFrHp4g=Ll9FVth&DtsTdlA(z_^s)ya}h66a4d>IVMEh=R9|C3YVHaIF3&`e>lVdS@U^G0aCPL zA>jCz5CebKml(fC>KomB$1gG-@a-$^JEM~B%EGYN_(b?6H@-Kh&@MY_T^rk*lK4Kk zOMG54AEU{iiM+hB9+nPQyoW>8R3xggJ*yZ{<&&QBqbdUY;8!aZpU>t+EE6}heevk_ zx($r)N_L|gp;8ZiR=wxlbLMFE=$!Hb)l|W7V_0p6d`_kpZK_(hS1J^T+hXbGX3^5- zDqq$%pQ}R znie=q<4dduOWtCK7BF)vdPs!@KOPWMQ~3Q4j45@AnADFV^yO?rNgArd6x{WvPRk`DI*KQ$;oD465$i4Vx`wL83EG_bFo`CxWPSS4d<8t3EOdff z>4gAD1BP4hekpEN8*ea6?{t9W#Es>j(SC#xNAlTR@zsEDRP!w|JO~Q%YtDeP{JN>O z6cq3~*&8%;`j}@hyz^^XiSQQn0)Gqa9YmM2oDMdyEOH3{T0~hC-0hDTM^T*dmb3-r zxy)VsFqu|T%rqR+PL@a0ya|u-Q?99k*96dr-%1(6`UgEuC9>ax|GIAFlKcvLW#JV$ zM3*1y3P<4;OP(*D+l+R#2V#W+M$n;nJqYtq)}>1tAIV&O5`JF}B?pUa;w|(19fl~Z zZ7ht3=iXZo3C1(@N)+MKMX{m62Z=)(3REI~bh@7VsOS>E)rG9CQ z!6Kgv;@}a4B~&gn+L4;8d;MuzDKd9|FUf4{Ky2JJrl_xJ6St=gz$J-2Top8$8l%%l zR1@(qKF7f0)#9Zv-PNNcL(odG>RH5AgP3=|2w~({KWWN6M!>pw@WPfQFHSn@S4Yr^ zmxEkxcX+h%FjGn2x{tfVY?Gsw6s!jI6CE|CI9nlRM7Kmo7kXKC=PG3fEh8&M$T@Kn zIC*ZB8$r#|!`uYwof|=VgS^;L%;4kVlO;}EUE3saRgF^P`$lpmvU+bdZz8MmCEnVt z%~;tA8LRP3PJ%0yO05FCp!IT9i*gD3S)Se;>3>U@|?+x^?=k|C_zx6m)wgZYgi z=hUAKZmI$d>^=WO)16{?I1AJK`W8AUgY84agP4w6YP98BUVBMn1)T>D2sJHw>(+LaD5_jY@6jyAz*wLUqG zrD`WVF}C7S-Y>Ax;&8}`lP}hmbtXxsQ{gco2o6x1V5>Es#_xkHPor=`cFrjO)eFbE`*c&yvAjviLPztC16DuO{t+6kYN}2u8RV{T*$a%Ik(HcXYJzw2_NAgB z`<$h3*7ue`EQ{v@@W8!3WMed=^hI;@Z7hl0FUhVK)`wl zp~dNqgg^HJ=grq<2Ga|u3R)AOdUqe;xC6z?UOQE_hzeTwgo9ykmW<>6H4PBqi^QFe z=srXd?6RS~uklrSxN7Gz{jRr?hZ(*6%yMfGy-iZ@5P&h+XiZ)+rH+14Ua88ZqQvYS zwQSat8(J0w7reV;sYE9lh8s}D8J|C2jfh&`Tq!S)f@1c>RcPO(jEtV|nhzLDZz`2Z z_%ZixLt5R@QSu$*JnzJy=rO5Lj zrml@OKk9V4hr*8(j{4BLoF z4l*@lW64CS_GAfxsOA5%+*#TB`A8p|?NXd*naRl%qe(wQtqBha0DK@GyH|yp$=52D z;#`@9WW&Um2Ooko8i!}mc$g*=@f~(}lW>M+ZfB+n7KAKMQRP>lnKlj$%2#BwsD~=# z45$YXaaNvCRzAvDtq%c+=S(}p3$8*~f!M#)GwiT{*L^l#q>0j8+zd4tMa)*lD$W;$%sW3bldy&FXsmcToc;e|O!p0gW7b`fi{)f97fZrGA zaXukR=9}{C5+@QS3iW$cxd=@Bq8DT>|9naLMbj&j@=N}dbM6-fW!;ipBLMT?EKVlM^s;faPqrRK8m9K-Y6FP}ixPvaRo)vk=mKBcro zWU-f38U81TVVM|h5f6_avkQa5$EJ3(l^SS#E{ls0X8hnA1!maYHAvq7eCM_yev{Hc z`!8XK{M0w`e43BsS;hTNd9+*|mG?hwKik@R_PBii)6>Uy_dngjhq29eE9?*m`h_XIU(=p=-IwH(=0R#nC zqX^UveJ1ROq;v=`J@Ta+kAu^fZ-ZHq<}#1RjL%jKJ2obtPcaTswN|bI;q-bl7>464 z+HjG?&p@H3q9U3h2`Qz_iqf1LS8y|+P1gq!Qm(_}si_+5&F4Zikz5F(5kgrK<)m4_NKtsl)s zOhsV?HDnBe4;PSVJ26o|y`JSuki!t@1o@m4)t*7Emr883NL?Anq4h$ofW6_Tsc6Bg z^f)k!i_N3-nX*){=|Z((ZLw&n?HyUXs|rln=EnJ+vbI$f(9}1VmkW3EDN?NY<_@l> zdd5xl^xp5kbso>(`EZd8j|P$*o_C{?w^{6Y>EeKAZgJ*7XV0En zi`pgz!{3sPx-dfO8ENaq+MJ%2s$JUlnwyWgXUn?rR)AQNTQRV{%5}ePN$Xy0qC8A7 z8>pSJXxlssSQ#S=N;A=kWLYBWj%GS~h;VrIbrHUdmp80{xi13`%FQpsma#G)dK0IJ zeqb2K!lJ)kgtB2P5y&GZiusk+3qWODS`brd8N)}iXC|{EMgz1GGurb@xLMek#Llh# zcKqz_9Gg^;xR#~LF5?!^GS;HAtBJhqdh4vCShQS~7QA5AV#Lje_yYNG-HM@%UgRG% zajW!&EEQpXy`H{_cR=rGOv*-?+ff~L{mnd0&ESNUD z2ESIk)cdgaEcH1(L%lJLP&vZi>qQXqtE-rzJ+2Xky@7Sbyw4Nm;`%mNrh-ja=z?~D z=g~~4M)COwY9*&Y>zcaaipOTfP%l1$4OWIHP%K%u4RbTUiPn8>zX6kII1ZSd1YXrB zG+8tr?)Jl3covW2{2B#(lw3`Ni+DT^hVTuos#%oBgJ5zoO$GtV1BDjRx3hREGa1u^ zG`zz5mWO~66^9;*YekfTPBK;rKL6u&otwT0tyBJ_t%Q0D#Fs!+`bB~*=Zs7YccI3rChn`fA5xxwy| ztsHvG@BoNrky=Lp zfH660FiVmrFkbMxGUm}GMvkruElABE4$lkt#M{O3R?#O_AQV|z?9Sn58uxp!7TR=o zR>6jZ!;!ZL9C`>Z0!Kp&24x!cFPS49o-KG1x-cM7+5||lvnfztoP0EZ%ldgmZOZyr zfT*g<286lJaoZEla92@5mu8Q(L`YTvTKyMY<;wxzw9BwO+-N!77FUS8>@c_rG#f)nWTC8VyLNJ&_sY!0t0!MK)|R6-iovetz;FQQIoiCH67wx$py*m$Dr% zJUUe#RLjFD!E6ZvAJ&J+1!qs|lgg7RC3{idh6f6U3^A8>MB(pN$?wQz_=m0V|+u}JLL z48*sZmY&3E8s&KD98a<5?)+lnC#bZakE_H*KwOa*hIe@wAX$GDRUP3d%#A4Fb~Tl^ z$_+8hdgpwgV(DS!uwY-%OW2zG(Aoza#+fj&3do*5u?hmmIweyG`*Z#bxG5C@XM zVye^Go2*t?MC({sn+{qJv=FU}QmA)wJ%z?mzF5^N0bl`#w}TL$uw4q&kV9=%K$g26 z&Zp=zfYpivVRZvm9TCoq-h4IF?$RPVdxgsSupG9p;wKn7R;aE@=Hs)J+q1yIUAbE# zxe+<`pIHL|1V@ab*(j>)4x=#2i3($^b815{poAp>FUF9$0EiwxkfpsI4KG9i8xI$S zT&C7S>`E2vQVxluJfAhGOu+S%$z(Q;-uGzU@I+uZYc}Gq6|#XZ>vArli#pHxRK_<2 zG-Jz!8MA~`0ckLO72;SAq1G^CrpGkyi-G!8%YFSCK=3?L)hmO>g?WYv+$ZQ5?Tx(7 zhp5q;>ubVHp>XjZp+k=qUH4MMN2>g_C==P}m7Ao!A9b>JTd%}^&C5T~-Vy@+p(08(=!@%$eR@s3FpfpNBj|1LWyi=y z4r#il5#Mkc`k$w@`J5TC$ZikUF$jMNhtT%eDy)~s!T@V1`Q zLg8P>%^ws%c_zxf0D7;}9#Wh*5P~M~#;(JUALT6v!qqD3)zCFNgAy=1A;L8P#4#F0 zV;JGJo6*)Fx|G#U=V(8%hRxz}Lv*R{yQ}Q)T1ntPx?)$F`Jp&T6s+r2V^x-$`xYEu zk|vXb&RAFcicwl$Y@8%Bf20j4K!QO@PJPcP{K5^{?o{+foMGBPP!IjgWZZ19ER>&> ztOVw50xLmEXR79)(pAbA6oVt1utfw@`WYG-Wu64_nIA#C3r}&Ai+La83aIqHBRYWU}IrMe+Ns5CcCRyInk;@-9v3BW{lkpu-&Wyc5gE))uk z$wa-fQ3>hePvHctnW?qhi`tCApeZ4ESh;`D!3n5l0E+T*=ghmYfkB>chv{S{=Lx9{ zw_@Ca%<>>kVC%we2jC+a6ANC5i^9mxh;Ncv&T=%fbmh_-cNv51(?zC3mRM1(QShXW zuZ7aJo+xHzFy0afQ>me%d-~Uv6fgU9|&n~47@M}k%nJKogw3b_*Tx!al23+yu zhLa0bt*;a)ui3$KR%kdI_|F1$V_JVN)Gv1l=V-6vu4}Xwjy+g@U%IwJT*p>qze269 zxS(#RiI$KyP>x-FtGfBL8N4F`q!QF}NvkKMOOSa94^h^p0(k)rE z7sYKKe*Gv)H|a@LgZ{l)Z`R?c=}{-RSFbvu9X+ecSo&7Y1VdnGgLS6_=)J?|<^6Z~ z9Kdf^&E_HoQeBcU+m9G|i~SWr)Z1UIu2rH;VF0l->aMv_J>fpKRfX$sO_6yEOj%GR zToH6!{L}*xQ7S`-bXqMg7v%=weH6}JnPjNt*gKq&cM&n9-s4de7m2Mr_HnM`_LT*XH+Vzg(YFao%lx2AHiysI}Q!h5vwI$iUT{)`ZroT$Y?^)V)Z-KqM z4QK*=6;CU-^z7D98x4bLHVL!e{hIE?GK3ZB3Wn0a8;_%}@jPO%GG82a!wY8^9%Nvz+C{ z#oO8|24g=I(#xe7G-*5Uu5@j4t?VTNm@ks@XZm3AXcAYj*X`>xwBLvphXf&x`#T_cuC&W9Txu3f0d>-L(g1K3`) z`7mxWyWlPr#_M}|)A>ExxB5Abva)sVl2pjs7HccskV5;jx= zisrs5(ED_mGw@ne%}x9|mJ0a$3<`uLL`Omngz30ry61Tbi%xOuYB!V^j?27rc-5Me zFJ8AMfOhXHbRDSmtg7BQ_SIFg;`ZxB^R4T!W}Hx1w}C2F+bGPa@nycSX4$XFp~cLY z>G+i9JM~%S9F~R8GACADu2-7>T&;H`w&C~pErdqP)X^LbpX3#+B_$%g*(@=6;S9Kh zuj!SQdWRP&VS0mM!e#ltr8>!4V7my=j@P8vcB_sxNVP1F?kmJ#+2xm;uuUMj2YR@} z>dY%$L+bRhovBm@^+Lf#!HW{hk(3G*)&qzOeORv=xk{I6wB7__RbY6-WGJtEQwr$i zC0m8PsCaCP)o^bHIh1>o$qPJGNd#1%k{L$S>y9I@piEV#cJ7iU?WNkJtGA^ssYa@8 zFH}wzFs)Pv`Hu{BN59b!YSOxck-CQ?aBoDdVI4Y&Hzg zFMh_eu+UdJTE#EyL=^_pIgMEM4TgrcEnyeY@d1LYBhPG%hI7VMkTRlmdZue9V*V0~ z&xTuh5ll4R*Y4uwkhjy(p#I`4=T%fs9as?+LWtxBSJ(Mb-*3EgHqlj;VilOCKP|XN zL$pyUcGa83fTvK%z3b!kRc-iOV8z|41yn0mT97QeKm|0gtY8)Z>oJB_sZEQph>Yzd zVqq-hGm++~ScIn!lDgcO43#%cwW&7m$ry;rR$)nJ=M3!XU4xEkjKR(Te>9E`DVhqG z=!}M_3LRl>2|DpL-ux&e7;s*9T`0fSdx6^|b;yRdBigQ$*U@R=bMiXU=lZo;PKye| zQk!qEe7$(_ZsV$VwOI#OguXI6;EL*~Isjg_3Xa#2DbNRdZ4$p$!C2O0AKaudnIE2C2`%k<&tuTdBJ)^xeJF5UKVk6d7}Q*IBqH~ zCfZ9gO!!=!z&K8Y{7)?^I8blPYo7O_$x>Q&TyU9_s?NB)vF4TlVHOH(F(=j0<}#Nz zZlmAT+GS2V;B;ZK*qm(P(8x#b9_?l)AykV|jd(Kc2!$Ibx@;EqBVIKbfy-);4yUO> z?27j4YQ&w#%&y0}v#Pu;i$fhrEYBZz5+4kxRdvi#!=QEqn9P+ryAPBaBfM*UM_mE> zDulJLzCrc(OzRL;21`4HJ%NE|P5>LCB`$5Yp|fN`@JF)1b=xL5s4RmZO_Dshs3{sn zcmY)ZvZk0ckJE_&bS(bOa-b8>EiYt@1kYJ<&XZJ}3-dXCVdhXRpM}U{k&fd@oEx@w zOmB*RFXHi-+urHVoc+Y)TzW=~VaAwLGtx33TyQg*_^>h?DTt9D#Dbk>x$WK`R;@Ai zncJRtl%E#=K9A+z2;vvTZ@RSb!NdUmLJ9@F7%k;hcwBYm?j!*^xGjxB z>3voG*8B=a0X-~tkjCy}7nc*~%lExMqBL>5W{E5+XyBPH93@;shZ0e+gf(1$s2ZZq zjR(K3Fmx+=)u2^*ZY-u^6NBX(zFvj#Y9-gy5d-rScW*PwDWdq|DHdSkoLXOg#d^%w zUcS=0*5X=~wRC>(r$JVCNgN3;&gGZN=MA(MTKIAUq}HGXUBrE83WEn^L&t8P5JH( zJ;zjrDw!I{GU?UiaViw6$lp{bSxhhF%Bp0mz;*jXv8*dKRJoiZC6trqnp99uxT+LT z6_r(_e)5BI#9S_x>dDq6ar%2b|0n)Rqdi5*o~y|^xRfY30TFqt_s|>ptg+jM|F^9w$4nQ z59=xXMvbpfs`}7TJ7J_u@KP=2a%V_`@JF$tWMh}duxrP_&RaTUYl{lAIGN)Z9a=j{ zqr z^4>WMgS0Yb3*+|3=jsX|<-%By9+%Up%)~D^5F35Ve0`N(oub9fL;v>E)5%6v&TyMA zv^yv&y_MQEdJu?*!6EF`UeOEhtCZAO_P;mB29t(YjbUmdZd}AI1mwKY$35UZ_eq1QMbH|G*O2x4ZynXUZpxT{qevvx$u{QS?vl}=xhyoPTBq~hH#q!L> zfGBt_z02%jyw0h?vG9Hf`Xe-&4fIT>rb#ME_ktC-Xh=}m$n$M^)KZtJ-Uu&8lWZF9fiB4&w0KYew`!*kHKKQVV0AdwakwquSBMer&NbsMrtQ--8EUgx)#CX zx=W~@!jLT_ zUprZ}p6ew`2O1?1YO3hMPeJFgwA$KVjHEj zk@fnewvollXZXUvU__Bu-VO&+PNSb-e*@r<9(A| z3DR#Z_2vLy@4N}-<-N5$GDgDcM1L>P`lYRdT%lr%7ke zCLkw*X@1hx%nhWIX1b@VWpSpAAzAZE?FzP zDHtrjY}CX|`vF(Q6W3r6E#;UTy{Q`8WWx+Yk7mm}91igdyTU_e0pTT5Q6l9fXj`J` zo$Sau6j#eig;73tYs|X3ti}E-(8`>cCG!=tJSk{f8Rj`p#w?$LWt8^zO_C`m%#zTf z+y?l&uJr)tw8*m}ewVV7NO?p5-jtQGpVgUAEsd_<$7^(`JTC^*DFe?B_-%*0v#m;=EAtE zGu70gt<6$%!|00>P;rDC_;x?Yp`!N7wI~XyBg~o8o~76?VG~tku{^m6(41xT0N>}W zatz_+D9J39@p6~LI4Q(a3TmXYmEi!4>;omx3L;a4vXIrtxC+Hq<}5Brt||d9b+3&w zfho0g?qEqS6 zVBIEtfT1jYs8mK3?gcs)aVb4v5kCwp9)zc{K|G&c>>>PK-U`*Gc|O#d80HHgp5FMn zXc&%0+*gRHA=5F2d*iXdH`3PiB`kdmlr3DJmR!b$1F2=PsJExBWz~~(jP;)nXF5Io4I35 zqPN}~rd7_)Y4s)ucdl?Y18OLlop#RxGccKDH*DEXG&@hRG-I?RqVT?aq|u6pu)?qZ z7O^F3(r0TNEe$E!$)RDCzrWPJV%?iTwgoyeVBjNa6rYb66AE>Vm#$-6sskV8={&=& zEOV1J#DFbzewAz#?@K9^EZ&*Y^q{VEE?1GRUq1>FWVnu;Y`4=@G_u-9&n&Gu=CSkr zlN{8UFx7TE!PO}4kAi6w4Pd*T;Pn(Fi?Az#UoZ^@;q;p8W?m~lD{8F#C54agM(m1X zNpF0gcb?w5Dq)m>ojf>+ZIVh2@o-?RnBG96iGsJh#< zmq%TB(e@JPo6N1SCms~N#N=a}t(B)16P>3_p@!3c{nop1KclrHGfU=eKWmn?^Oi$2EB0zE9t1GY=NZh*u@sh8;*~~3xWC3{ES`1 zrJqX{)q|32K0{8IOilUuao__2Sl#wL00F=Wl@eGZ8 zNh(USE7j#M7W-kP#}%}amt@!KIoBL~rx2UrxO>2U)>xg!zaCS`Bw;QDuJCaep7P$b zHshcRvOZN|V!)QpvoI2MsdKGb3gmST-qaT(XSuHqzm;!^2E@|~)d~@ht6Gyrln0-? zD`5~10#GJc_AhN9GA;9>$BmNOUV@#safQvY76)t(DqWyfclcOQC$WL5u*hX`*&jsH zYkr3#to5~Fh+^n72<1XZw=P;sz)Jitcb|X!kCX=yL(tyo>^$D;Y;~2S;J4^~o-JC( z7JQyQeL{cXQ~bO2;(UNWKXtFI?&CB5`J2vH3)WFR{+~R>v0fbi+gN_3Ep>eU z$;W@^^rs+LEA{mnJp2m(+1Y7t!+($0v_kOxWdAi56aGi)RjYIIQ?Pcp_hx^sRl*wl z+73=I$O63w_NTCa>%#`vz=Wsv`AFMR27G)*8AJVQ|K#QI!Q0b=qrOICg$R#gjcer^93zWRM0 zj^kk*r9kx$z{Kc%IGK&3-BzpfeK5;{cJyDt--Gisn(4H*TEx}2$44*sPfmiG-o9-KCS*}0*##;^kPL%R zg3mLp!Ms__+=|9`#)PxCgpW(hIR+I^SvRY`BO8InSH|pw9Y1$u^R#|t*kX{22&6y? z25G@a6K)XcJOI;9&9J&SwaNv0lw@4`pkd(Y^nB|!`iE+Ow zSCIn;_KAasNe;3NyvQQ9$q#UE9|M!2uiK#kgMxQPVOeyFGYK!45bAt42Czcak%M`V zK;KLgJZhQBi2|@`)f)Y{8Jx{?ss??8*VUMs#^D$SkMJ6%{?2l={E=4%?3@Q3HY(TN zygWgd&kXilC=P2RHv*HBdJto1Fv70CnUC{0cnLVqae5Q8(u|aqRt}VKde1B#c)LeJacHa#n269Sf*m0nzKL87 z>Gx}51h6&R>I8eG*<3C*1RGt7vaF3L9XKqsV^TX25`(IZwU!C{_eV#s_xBFf>Z2y* zKImx41Ox-;WaickVla-vEEfZjpJNO83m6|4uX*`?bAp)B=7+ORCEYi=8MKg00kw{UeCjS;qUI$DGxWd5z_}PpC{|nC3 zwIXC`q17}E=qUW0JQ<;wAxS--=BI??#8uXJMf^D<&BiH zws$iKY87oDL`!r8_oU@Y8QsO~-3kG_fEYP(EzuO|L|kahP@A#ITI$V%uRM=!2 zQN=zwK6UBWNt*Lj6j}%xI_z9<+B|*vmS&lEuijFbtYg)s`T8sJwGYIcPiW7sHMLr) zoO~m}b_Ys@LWuUbwYZAS7bZsR=ci~ZM%QZDr*DHVO?ZArlMkf}vPkxgbdBAcr`voIfJEKl@+TEgagl2ZPX@1wKG zghsVl*L|VlcL%Sy{)t{s$b0I{S9>p|ZVSpH3jbM342ki`r=@-uOn6CXD*I8k z-t9cv_>Rio>t2RwcO0K}lN6IHSYM?VdAA?h!2sW&pO3r${nzgQJnCL1<2g*p){b6zx?!U`}-@^WDhV&&^WEjBF9eZji3WZ*8q9E;p#6iHp4+Ez4|)6jXuA<%V! zp8db>ubpuMvtgHV7Boe{tu#0W7epjv!juqkOxWVB1Ffk`mHhWs`)eTj{BoFSjhC;V zY;8SOF9kMr0T3aCEn^oS&2U-fSmqgH;T&J`K$$`zferVVX&+s$bc!b!OoiCt%Q|bK z>>tacbQE3Mo)x(~i3V|4!smPloiGZ=Z3!-zV}%GM4?(U3mN@Hc^$SOa>lb`$ z$I~n~Us@iy9$&`4cG9SidJv}+R()LTgO^8#r~7|7RT>@NhGu+C7i(#V9s{rw9^i5< z|{msT|0g>l*Ya zv2#i0;{hmS7sNTLlj&qwEkzls+9WtZVjtt4hV11+4;N;Bc}puv5Qx@gIF2wA;3S;Q zfX5mEuyta}o2WeIjn-NMicX<+Mz=W3aBLAc-z9ZJ!K!u`v~3I`jY|9y;~M=k(Fq5{ zvwa-2FN>u_58q%9DlP7=4;_7|vB=bm2i5(km%GiL%>+y(h}tLeGhSr@OARcb(u5^^1tctL!{k=oWg9+fnX%&(V8=Kh!b& zM|JPXLbuR+Nk6{RVO(8D%%Lv9Z`GZ~O5AXdq0Qz__pI!<0*gLZ-4n^Y(^x8daaoN8 z3Z9(q9lqK-eq|V0TBTz%X*DsstmHwsDV**kds>V=%t#{+T%;#Up{M9Pg`Fgd0}`E8 zw(iPiQ6FQ%!!d?)V$ad(4m-aeAQ(w;c1p(trr`RJ=nA1qOhygFyF`l zhKI|V<*u)1IH2ieQ+j@pL=E)mCd&KTTxnwql<4-;IAP+sNg%xC#v@@XG9IeQ-vZu7 zpPfutx9wcxhn7A(!-Wbg}hH2^2#TGj|qd zXh(2kpxFsBaua*eWk6JsXZqS>u62e}n+(uj4(4&8EO^k1VUnJNvZ4zNPYT6k^H_QQ zA~~c2f>t-FzLPJNtRs~4wgR2!wbLyl_q=Ax<)ymg_kDA~(X&D6S$Sl_!-~m)FJIcY z>EIy2QFUG_#%F1JX$P;lhj=qdE&}-rGlN`(JWDmri(;kJHJ9o%sa$soD~78Jp(ogS z|7$0jUY6gZ|Afcdz|L|lOA$wdCzIpwy1e|s{=61i2#}Ljx!yq^_1jR4>2V3^7vF6- z$=NBdR_28S#(Q>xUsa;8p1B%rw#v$3>j1;d5t&aRjGnI~soZeMLe;mxNC*D}>3$7# z)>)>jt-B3WmxTY_Gn0MFvGdPeww{gt^zOI_w&)%%wz`W}^0rXcgXSVcW72&XQvxZ} z(nRGea%=(Eon?TF&0Pe=^35-CeIXn+IvT0Y*3MW2!_M+3tQ=Vg(W=;D@1(^r=`^|Y z5##1NKc&O~S=MZ#G75QFPC#SjW)ksxVEpa_KH~u{`Gpd3LYqDVX}k1jP<({CNZ}D% zAqo$N^LUVr;$dz)CA|Q8XKFqc>uM3RT4oC`1VFpgFk`v0z3I=>RMpRgsK_<_u~vmy zTH~PpqQDOQRjK*<%Q6#;>dLIJ0qYFWv>#GHi}p1XNbL2l!YCgO)I+0oHzKJj8`OEx zVA%P}2&&OnU_i=Y(>4jsZY@2gULHl`_H3SwOfzI=dsj1yFz3xClL$fh89g{ifEoQ@ zqC=-c-3)@hnsNgclWn<{SaNr6NG`%OBbZ^usW2dTX5wbCOHL~182sE|tEiP+h04gcwl*o*=JiSqeAe5 zexS+|Cx{6*9$&L;*RdX_)*s;sB0v2!&!RHon$QVMQi}mq%~j>>a*3 zS#!_@j0(qDVy2mpQR5;s&uBD1z2`xl_DmLah_6Nw#e#zvQw+WtZwMUHGFg{J zt6=vcbO$U5wu?a#;dtCl*=6+HrGmj{g#&7w@9M~AQS@of4tHsrkeOI`9Ig){5x6hi z2iU67W~M-q)~bbBF@hi89ZQqJnbU`;jzgkI(9s5t*Po2Psphga++xoJQ|8M)* zm(Of?i5&n?mlR~ zGn%x?Z*7sf`)M+5Qh87=1Q`C7oE7lCA55AwX_<7S?(si^%}dr@g^bY{fA*zw{Nwk+ z_<#E3%P0Txp8=!@Vyh{c#y9|kCJ8a!&8?rFNH2l|;UhOQx?Diq; zQUTyHnxc_{Y}f47xVjfM)_oXpAp`grI;`<+HD2!X$Pa^YB!*3;^{#UWc@Ur<-5V(`R^b& z{%QYp?|A?9{@%&{iwEoJY!bBF(Iss1zWDGR+QC0=$g+FKFMonEbGnA0Jy9>>VesF< z107Y+j(!im3jXIgxqZum_=)g{YA=_YgI-NBGY%m=LZL$3h_#V9o zEFp%mNnCr#9cQ5%lB}IZm`5+FpznZf{*l0F7L5gji!5#{Fv`kuFvVCH1pQydpalsK z!ZR3mh9EX+2=a~D$2&=S-kr_Qx`?c+W8`Mawn1KJnuKY8)B$<0&_)T}1Z9}IE3uNr zZ4pe^Q;;jzrMDxV3=TmJh<=!}KDwSyI*2pt42V$rVe47mbQnP?x7`HkNJ_+6lJira z_7tsE)s$iS2O=<;O&UCp-3b0VYZPE%F~4E`4>{GK`6JTzi5C1&D!!ndh`V<;0U~;_ zz4ap<*%`$(kycgw5b@lljPM}C22zSllz00y(B{)34wx5@a3Y_|p9r-}psc0wbeM+y zaWWs^)KDSsuuNW2nj{<_$vo{xHeT|H;XS6#%yqIE1QCu+u=U$ce--OJ{9-MDy& zM?B(2E&fame{qv^vl)P=jQppa1b7!2Git50=u9hBg|m6l>wvoukcSd`!sLjb=swxr z5(IT_|F`g|?*G!;4o;^{>!{xUZ^LH)Npb(b z^W@7f@Am(<@cH6=oSeZPmokj^_;La}-f2Ak*rI#Iiwj7W&xgZc9X8m*_&sw27-T() z&*e*0SE!D#)O9xSo^6axJBxG7=AEXLCZ5zFv=-p?chCj>3$;QqB3gnp{+y1qp|8%P zJQ~QCY!}S#s^!;U7T)0=U2}E9M!mxv-n&5$Xr925dGCWmb7wO z);9v?G8BBV{bFtHIkELUy10GuL8Iv7bHw$<_WyhF#m;m3yB4hBvuQ+E%HswW_S9(B znLZTR?AiT@*f?=lt zq^B;Mu|)c!X@~G^w>-LVuux7Vk$qr)mh^c#XWHFk_gy4^iwnJl@7UQY;QiPlsNGSEgNDf;?1=jB2Y-s9S@1JwKgid7mZ68>gcN3SQ~`P3>I4TlbDKGf$j1R>H14z5 z!-x!i!k;@u=P4K?<9UQh$KS#rj`K3z0r@^<9RNM}@$l$)pCzfl%>Xu+`Efmj;WADV zQh&{ zMxbEcBmSL;orK{K5=WVthCq0DW~~$2+-(6JALi-!V;41!EyvCcHY!CqrG&GUGimEOY^S5#v!kijf`bOw_qhQp&Qku>6@va`G0+1}}V+1`Gv zm*Ad%V&zl?pR{+rYQ1F!{c^b%Xwr^oO8DXf{r$N6QAuk1iw}GxeQdo1>4H|}fMh;^ zkso{mlfq8tX?t6Lb@4dUiP(brw_7+5vaK^RtKeG2oySNX(B;p(3r7yD4q!o3ev8I8 z%Ou-AfzcqC(^h2T<=cax9S0Ay?q6ZYDGialQ@i-A`!IL|;|nJ^y*Mw4gKsL_-Hft@ z`BtocA2lSU`-i)LKsKoZv#xj9ToH#`X1Zf}5T^{FJ8%_M*Js-cip8hY7VEOD+SdK6 zwSYfkzO6lY7_>9MrYYDTu`o%< zy22dRH9B0QfFGK*r{$IhZGC0m`8J@d1*UTlv<5f^e6C#r!Fd!G!9~~ce&`9QE5kqF z>}hoZQ&J_5n7+V>D^(s3vug~4qCk{HeCYr3m^ptI7LFV@E0g- zd#~Q?cP0p29!`&-5Ue`-D?QwlZ&|8e%bqUdqPemw=gMxY>gA(lCe8a_c+8WioIA#h zPzRORQqmn{&^cxTu!)?2H9NG6GbU^dxFEq!b*pO%40KSQ#^>iz%A_)Aw=GtfZ$Q)A z>1;oR|J#pSwBG7d3>6Xw%-R7SKT(U{t#&$2Vm&k zOW0i=odjP6Cv2C?wxNLFh+I>m=_N}yM|agB$S?qO1D3PTsQFQF3R~R&fR5RI9PDiE zJPwY3!dp7|!tp%}%x}yy#D6dOAAH+t2XDuq@r;r&#v>`x=?*g_hFwFLMr@?(6trp7 zcK`*|3cGH(cjsYHBE$ucJJTE^u*oi>Vs@zY9id)*Y8&L;=hJ%`%*Rn1O+szH z&FW;MrghZ#|7|_pF8Y7(>^y$9b!Y#-h0pzel_$3_?U3&tZck`JWt(?4n=(nD$wL?o zhjBC>i0Eq+k>F|+!>*Pt4<;ACt>Ek$kcs;fgLh=}ra6ul3=u_zht+IC4!Escs|F`C zN-BC5ahoGIHjXh+^W^RR%O2*5eeqy@b~V^=99gwq@15?Soc2!leuRQ(KR`VS-8j;S#p+8`1``22X^Yvh%1b zO_mQ#tlhQXfo#I3n26ouzp#^C;w-rN`R~rwlbx-*^WR(e`1e1WRC~%g(~rl#b=1uN z+uKieiv9m&>*?dW`TrI^>t~eQQXP-3(^)EyBi`UYF-knj;a8f7!&V-vQYb0i#c>5- z34QRWm<1(o*a~R@oIb@f!%XA_GU;b1x8lBgGBVVFFk1$dV@;=G>=;!5@)uNq8C}>ER@_b5v;sh_7psomK06y3#SBQT(QLH*q1=WZ6 zEkOO*yq91dm>0wYt{mi_^dzv^FR0B zTwn#Lng4gTo|e}CCr`HT;(u=Aqvn63b6fY;*10fFHZ)iSw|UKxy_ckvW9CM-vi!Hf+H zr*!xQnZ*_gqoHhFSde8);#2%L4Vy#8-* zZQrf`xA5VUv)Q@&oNT_Sn2O~tfsRn(ah$_uVG#Cvc=(fIU@=Z2WjJyHp;};4#Z3y$ z<7$qQiUOO-h+LZ4tTQ1Y!oFG>lcK93CXXhX`!H?uXKcx;N%F)&OK?l?<|_5Z?Cp(` zAb6@a_CBrK7t^A{nOnUMHx`0htGX;TH&wNlco>yymGaeINli^-47qKFRM!Csmqi0C z%b+f3Wif1^A=*WeYeHPx;ffAZ>pUf@DTcCO)L`)HUyj3KQEJkmHCXQSzW=))fBg?H zEm}zZtJnXYmF)kIpFO^_|J=rhPs~Q=>eH?9qGFoGguE4cl65u$+$%5@Ni6ktBFwpJ z#SwzA=L3E(*K*{Ts61^~hLVP$RXUo{CAdzQz2&K*IhpTaDiB)A;$7oykEqAJsBLN$ z68u@njV3mAs#Q@w%F@$7vsyxeZpiSq0(om|Nxyl8JeCSQG zb7~xZxm(Wvxj+8vKi<@JBkTXx(=SW@|Bs(Ny*vNAjSpXtjn36qVdF)`(u?UI)n?Fl z|16;v*zY1`Rb~={a&x0w1odgxDohL}lbXBI+(7>~82|b84UPXVw=DMGyZE15`G~=! zcdjv1^cNN5gx|i?)PPn1Thw@_(6~MQtWelIfa;IZh5g$;bq_B0@gM)>cz+ZAKU>ds zo|gT8o;gLDhRdKjR)nW4&uCoBFg^HMyOJQEI zV;azga~i+zv1o6(spC6Az9VinC;5;6_Y1E6_3>X%w;z|*|0g?l_P^Ws@bUlNKKS2P zj{NtSaT6~g(hN