tpm2.0-abrmd-2.4.0-150400.3.3.1 < > , ؉ gp9|--2VW=- b<,Yo]p ȹBskCs͛_LCU}@*^&{`]L 0{YKv#~g' I .m#ŷύ6j/-Hz;d}Yĥ!(\/;! BNL
hWe {Lx(_:{lqWZծ~/*氖w7o-?3` )F|0q-cDg > F G ? G d " p ( , < @ Y z
, H
d j
D l $ ( ; 8 D 9 : = @ > @ ? @ @ @ F @ G @ H A( I A` X Ap Y Ax \ A ] A ^ B
b C c DW d D e D f D l D u D v E4 w F x F y G z G< GL GP GV G C tpm2.0-abrmd 2.4.0 150400.3.3.1 Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chips The tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager.
This is a daemon service that coordinates requests to the TPM2 chip via
Intel's TPM 2.0 software stack. gibs-power9-21 2SUSE Linux Enterprise 15 SUSE LLC BSD-2-Clause https://www.suse.com/ Productivity/Security https://github.com/tpm2-software/tpm2-abrmd linux ppc64le
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
[ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || :
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable tpm2-abrmd.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop tpm2-abrmd.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in tpm2-abrmd.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart tpm2-abrmd.service
) || :
fi
fi 8 ] " *U D ) 큤A큤A큤 gggggg`!Z7` ` gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d30 5295662f34de02fcf72163548c7035102a15b8238f7495addab0c4625a140a78 efd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e 61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22 127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec0 57e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd7 5a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f 07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e58336117 18c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448 741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e 54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258 service root root root root root root root root root root root root root root root root root root root root root root root root root root root root tpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpm tpm2.0-abrmd tpm2.0-abrmd(ppc-64) @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libtss2-mu.so.0()(64bit) libtss2-rc.so.0()(64bit) libtss2-sys.so.1()(64bit) libtss2-tcti-device0 libtss2-tcti-tabrmd0 libtss2-tctildr.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) tpm2-0-tss user(tss) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 gd
a@aaz`@``@_t@]@]c\\@[Ѱ@[
@[t[[m~@[;e@[:[6 @ZZ ,@YKYYp@thomas.blume@suse.com aplanas@suse.com aplanas@suse.com jsegitz@suse.com gmbr3@opensuse.org gmbr3@opensuse.org aplanas@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mvetter@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com - make sure that udev workers have finished before daemon-reload
(bsc#1231071) - Version 2.4.0
+ remover syslog deprecation warning (bsc#1185154)
+ cover update to 2.3.3 (jsc#SLE-17366)
+ contains reload fix (bsc#1166936~
+ fix tcti loading using short / long names (bsc#1159176) - Warp selinux into a bcond - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_tpm2-abrmd.service.patch - Move selinux devel file to devel subpackage - Update to version 2.4.0:
- Service start depends on systemd device unit: dev-tpm0.device.
- Numerous memory leaks.
- udev settle service deprecation warnings.
- StandardOutput=syslog deprecation warnings.
- Add selinux module files
- Move dbus files out of /etc - Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077).
In MicroOS systems the recommendations are not installed, making the
service fail to initialize: Failed to instantiate TCTI - update to version 2.3.3:
- changes in version 2.3.1:
- Fixed handle resource leak exhausting TPM resources.
- changes in version 2.3.2:
- Added cirrus CI specific config files to enable FreeBSD builds.
- Changed test scripts to be more portable.
- Changed include header paths specific to FreeBSD.
- changes in version 2.3.1:
- Provide meaningful exit codes on initialization failures.
- Prevent systemd from starting the daemon before udev changes ownership
of the TPM device node.
- Prevent systemd from starting the daemon if there is no TPM device node.
- Prevent systemd from restarting the daemon if it fails.
- Add SELinux policy to allow daemon to resolve names.
- Add SELinux policy boolean (disabled by default) to allow daemon to
connect to all unreserved ports. - update to version 2.3.0:
- changes in version 2.3.0:
- Add '--enable-debug' flag to configure script to simplify debug builds.
This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro.
- Replaced custom dynamic TCTI loading code with libtss2-tctildr from
upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0)
- Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required.
- changes in version 2.2.0:
- New configuration option `--disable-defaultflags/ added. This is
for use for packaging for targets that do not support the default
compilation / linking flags.
- Use private dependencies properly in pkg-config metadata for TCTI.
- Refactor daemon main module to enable better handling of error
conditions and enable more thorough unit testing.
- Updated dependencies to ensure compatibility with pkg-config fixes
in tpm2-tss.
- Fixed bug causing TCTI to block when used by libtss2-sys built with
partial reads enabled.
- Removed unnecessary libs / flags for pthreads in the TCTI pkg-config.
- Output from configure script now accurately describes the state of the
flags that govern the integration tests.
- drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr
shared library. This one hopefully now does the right thing. - update to version 2.1.1:
- changes in version 2.1.1:
- Unit tests accessing dbus have been fixed to use mock functions. Unit
tests no longer depend on dbus.
- Race condition between client connections and dbus proxy object
creation by registering bus name after instantiation of the proxy object. - bsc#1130588: Require shadow instead of old pwdutils - update to version 2.1.0:
- changes in version 2.1.0:
- `-Wstrict-overflow=5` now used in default CFLAGS.
- Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users.
- Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to
`UINT32_MAX`
- travis-ci now uses 'xenial' builder
- Significant refactoring of TCTI handling code.
- `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros
instead of using the default symlinks
- Launch `dbus-run-session` in the automake test environment to
automagically set up a dbus session bus instance when one isn't present.
- Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib
does not support reloading a second time.
- Bug causing `-fstack-protector-all` to be used on systems with core
libraries (i.e. libc) that do not support it. This caused failures at
link-time.
- Unnecessary symbols from libtest utility library no longer included in
TCTI library.
- changes in version 2.0.3:
- Update build to account for upstream change to glib '.pc' files
described in: https://gitlab.gnome.org/GNOME/glib/issues/1521
- added _service file for syncing with upstream tags - add a Requires towards tpm2-0-tss, because that main package holds the udev
rules and logic for setting up the tss user. Without this the daemon can't
start up correctly. - fix broken build due to newer glib dependency that reports a full path for
gdbus-codegen, breaking the configure check. - update to version 2.0.2 (FATE#326270):
- --enable-integration option to configure script now works as documented.
- Format specifier with wrong size in util module.
- Initialize TCTI context to 0 before setting values. This will cause all
members that aren't explicitly initialized by be 0. - add recommends to the tcti-device and tcti-abrmd. Otherwise they're not
installed right away, rendering the abrmd quite unusable. - Update to version 2.0.1:
* SessionList: Fix Connection object reference leak.
* source/sink: Organize ControlMessage processing.
* CommandSource: Replace 'connection-removed' signal with ControlMessage.
* SessionList: Remove all locking.
* ConnectionManager: Remove 'connection-removed' signal.
* ci: Build 'check' target when CC is gcc.
* build: Fix bad URLs in configure script.
* CHANGELOG.md: Add version number and date for 2.0.1 release.
* Replace references to drand48_r family of functions for portability
* Fix for type-punned pointer reported in newer compilers that enforce strict aliasing - Trying to fix build on older distros that fail because of a missing or
broken autoconf valgrind detection macro. Removing autoreconf to hopefully
fix this. - add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device
library from tpm2-0-tss. See
https://github.com/tpm2-software/tpm2-abrmd/issues/486. - update to major version 2.0.0:
- support_dbus_activation.diff: removed, is not contained upstream
- the tpm2 stack introduces an incompatible ABI to the previous version with
this update. There is no compatibility layer, libraries have new names
etc.
- upstream changelog:
[#]# 2.0.0 - 2018-06-22
[#]## Added
- Integration test script and build support to execute integration tests
against a physical TPM2 device on the build platform.
- Implementation of dynamic TCTI initialization mechanism.
- configure option `--enable-integration` to enable integration tests.
The simulator executable must be on PATH.
- Support for version 2.0 of tpm2-tss libraries.
[#]## Changed
- 'max-transient-objects' command line option renamted to 'max-transients'.
- Added -Wextra for more strict checks at compile time.
- Install location of headers to $(includedir)/tss2.
[#]## Fixed
- Added missing checks for NULL parameters identified by the check-build.
- Bug in session continuation logic.
- Off by one error in HandleMap.
- Memory leak and uninitialized variable issues in unit tests.
[#]## Removed
- Command line option --fail-on-loaded-trans.
- udev rules for TPM device node. This now lives in the tpm2-tss repo.
- Remove legacy TCTI initialization functions.
- configure option `--with-simulatorbin`.
[#]# 1.3.1 - 2018-03-18
[#]## Fixed
- Distribute systemd preset template instead of the generated file.
[#]# 1.3.0 - 2018-03-02
[#]## Added
- New configure option (--test-hwtpm) to run integration tests against a
physical TPM2 device on the build platform.
- Install systemd service file to allow on-demand systemd unit activation.
[#]## Changed
- Converted some inappropriate uses of g_error to critical / warning instead.
- Removed use of gen_require from SELinux policy, use dbus_stub instead.
- udev rules now give tss group read / write access to the TPM device node.
- udev rules now give tss user and group read / write access to kernel RM
node.
[#]## Fixed
- Memory leak on an error path in the AccessBroker. - update to upstream version 1.2.0:
- Limit maximum number of active sessions per connection with '--max-sessions'.
- Flush all transient objects and sessions on daemon start with '--flush-all'.
- Allow passing of sessions across connections with ContextSave / Load.
- Unref the GUnixFDList returned by GIO / dbus in the TCTI init function.
This fixes a memory leak in the TCTI library.
- correctly trigger udev to update /dev/tpm* permissions after package
installation. (bnc#1078687)
- prepared support_dbus_activation.diff patch which adds D-Bus activation, but
can't use it yet due to rpmlint - fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the
service unit file in the upstream distribution tarball is already configured
and looks for binaries and configuration files in the /usr/local prefix
which is wrong. - package version symlink correctly, belongs into the lib package itself, not
the -devel. - update to upstream version 1.1.1 which fixes some local denial-of-service
security issues among other things:
- Replace use of sigaction with g_unix_signal_* stuff from glib.
- Rewrite of INSTALL.md including info on custom configure script options.
- Default value for --with-simulatorbin configure option has been removed.
New default behavior is to disable integration tests.
- CommandSource will no longer reject commands without parameters.
- Unit tests updated to use cmocka v1.0.0 API.
- Integration tests now run daemon under valgrind memcheck and fail when
errors are found.
- CommandSource now tracks max FD in set of client FDs to prevent unnecessary
iterations over FD_SETSIZE fds.
- no longer call bootstrap and switch to the release upstream tarball which
has now been fixed to contain all necessary files - first version of the new arbmd resource manager from Intel's tpm2 stack.
This will replace the old resourcemgr previously shipped with the
tpm2-0-tss package. /bin/sh /bin/sh /bin/sh /bin/sh ibs-power9-21 1736769015
2.4.0-150400.3.3.1 2.4.0-150400.3.3.1 tpm2-abrmd.service rctpm2-abrmd tpm2-abrmd com.intel.tss2.Tabrmd.service tpm2-abrmd.conf tpm2.0-abrmd CHANGELOG.md CONTRIBUTING.md INSTALL.md README.md tpm2.0-abrmd LICENSE tss2-tcti-tabrmd.7.gz tpm2-abrmd.8.gz /usr/lib/systemd/system/ /usr/sbin/ /usr/share/dbus-1/system-services/ /usr/share/dbus-1/system.d/ /usr/share/doc/packages/ /usr/share/doc/packages/tpm2.0-abrmd/ /usr/share/licenses/ /usr/share/licenses/tpm2.0-abrmd/ /usr/share/man/man7/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Update drpm xz 5 ppc64le-suse-linux ASCII text ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=969a4cd61062ef9245bc1b1151be9be6a8897080, for GNU/Linux 3.10.0, stripped exported SGML document, ASCII text directory troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R
R R R R R
R R R R R x]͙[@AML7 utf-8 c001d4acbca9fa71d12840ec1a082135e6bb3ab38d132c9eb9581dc54cd0591c ? 7zXZ
! t/cCa] "k%n>6"0{XP- 2
@;2=ȏCPT@RgJ0Z1J l S QMm" oEJٜ&6x(um;\m=f[oLMӣ
H*[t|
jZah~2-1h XH?{`% 7@"!-wq+IA7]_1ȸ m\: h}MU
_X q2k.wO ot!dw^olvr&F9=?ϯ^Q{o.H8]ktyxZaX7l-ſ1CNy6SMqu T}r]}^1eI,d3ުtEG"`|vŞv5ΙFn klף97
VĔ)uz
7C9f}دtBC{z?錞kԆ pR fSER42!h坭X* s\LswVj!ffG=HaIϿ!
_# ~S6&7'4.IT8Ik$/3 Q/vo:|J5.Hc1urښvB6{uvTfrViHkw
"LU'r״@msx :@juBP
[Qz1O+o_ܨ.WQ)t e`_/@W0ʜu5,,5lJU Q9UEՕB 0Qsݷvjɿ֓Fp`|mJ,>x)|ASz?REvX)%Ob(y nw ʴ# WrB@93ܬTHuX̫"h*x@
$ }V=f$#
C%R W0L8 sғǚZ)l,ڭxR
ƀrZ̢*g"q}`)9;p7-FX8uI
7l=T32q)ݬN7#U{~*%(^zŖg #Jt(1
^H &'!Iݹ~ icB]bwweo[ ҀA5֣ +Hlr`t?5iSZ4v+}M&tj>uOm m= OS?YklH`Yt$س `=]6Mto~CvhPQ o[LD%{(dt?Z?Gq N [}Dftӓkbp_6e8$t_ L (% Snn)-<9
:&xHr9"no
;Ն{1")J( +?`u 殧 ~ȨO"OElY|u
?r
Lbvqݭ58wR_WڂJ}̺ :\NNwW|&7 [X
(3atϋESGzs;@kL.lz> V߽SXu L|NFh{:m7`[$v\ĉws"AINC@+T.ԣsHG"+uCnÐ& = ^\F[iB
՚DG;tnRHZ>WH7zF}
Bּg6A{U!qc
9eS (s!I`{x4Ad)
]QT?mu9#u/?g8*OݰߡAT\*(IoZ,֣x
;SaUK=J^ؖ Gܱ8Qg#OmwO/z(!"+q"|zl
ڦ k g?%%o@T> :ї)(~@x#/_"oRMRH$c 09 @tݢD0vPeч~ze&(8
Xq*GRt{86Z$
a:y022>b14F SB3=Ô8@Ω2Bz`.ݖGaC\JG|9I4]I/`e X2&kp d \)&UC#Wڈ+fӢؓ22y g,eӍ+IZu<Bj RJ3U-dl2nΦ]OZ3(Pߔ.D{Jbw_j^]+\u2J=mgkMR1o AB,\BwUx>\oR,W :.QXP(шW C-@A
f]\a9 bFCN ͗tH > q4.S
IO~^ ~bDEֿOHo"BZ"{>EzV6ˤ|%pS|*ddgU<>6|$x3+ $.q [X\+k?ul ,j\E (5HA5~C;H
o.52XOFJ3kb-wK yX)8_&&V߇Xu㽂3n_ LЋ3qrL=Z/
jeBupƪkNn/.&(^AϝrB'u &ήT O9a ŒYY
|$r/ݯ i W:y%[o&єZa4Ȍ$4Cw5l`7i<@~=DCf#{UCłNfavkkr4B}́X\!o$79*۬ X2 G;o'S,1i=')}v
FUvV9i[J{Â*mLy{M V{*WdIļ_Kfmo⬔,pJE,U U 02
NGAV&VqSKעIfI[gE3$/Fl;WnQ76`#\S%B]Gf= lx<=Driu0[2 $:Np$W4}CF# "wGd{R|GRciTyuuAۨY =Q?51FH?L2{b#0.ӱIJ'J}\8$"\
>J\C預r 8'pBz$ Bi"Ҵ̗DS
84
G^UJ"o@%{j
aLM7U$ogQ{v oV1 eڧO 8K,/%xAs 7"Ck]`PGy }x=Oj1F X .'.rlvL4^V] nMdJ3ͺZ^ zi;ώUFٍZo / 5pOb"d \?)u2D$k@4BH(5FjM>LN+_f y_BI + :g-$0pS8 btLȆM}
)p&CK =J7B"xU9\\åd@z| ۳
_7}AxhC4pd\@cf",Po7Rl#@ ?9Qn-BNY.U}KvNTciɼ~ *XĜf%YRa#Հ /S2=DӀ%/\:doj|< x53vY=\3 [^tWd' EM XQW!R%{chOd-W|nmO,_@ *fU5FZѶ I_gTܾYZx*dtd|RV 4"%АsXxMn0$t( E<F۔CE
j# ֠ 엊7Dŏ@8b*)qd&\ơ 1xB\2+3\R4? Ǚߪ19:n&E) 1r]BXlZI&k&G#j"(N]2!VBf֣'#d0xБ&2U(|竟P\ CRTG
zUAs8` bm|^HND''6f~^JGDNgNCf/D/~@3V*b2Ayv0ӣHrS; 2G,W)Hz!@C6 ,ӟ6] S5rd)֡qTy2ZgeI癚)\"ט3)▀\
{
LyCQ@&+/e +f۱"TZmQ,# ¯tIt$%a|jA U< @@גD7 (H^hӪ; .D-W(pAv35'G}Cj'@IyfsS#k s KXdI] T=Ort2r ? U/ g릛P~ /Q5s@` TaU Wb B3r'>(q8 ,#U^ - 9/Q߽Wf. @|ǫͺAoMËΓHpLH wmr^jhQ4+а %Ƿk-no{n(y{
GG8ޒ>(bva)lc.C[Zl+}V)[J+r\
8@\n+]Mb"yu7yaU=uO \]j F "
_7.5ɷo (r9
ѷr]e~r*JkRE̪1=䢞]e*h- 47rNlY QaD;r Oo$Hhag<K:Uijo
01 J0h(}ƣ*P;0n'}Vq #ҫwndj #x&Cp} A2H{AOmΦf"?$7-3ApQ|t3]$W'yDkSkG d>B;av7^J!K0-T w$֦|Ҷ !&岞2}*vb"1q1 q+v}2 %$6bPeC%iD989M$8h[abvo [RUҏܯ~U+3%N9l r 7@R,-ИQ)~7a;́w`jXRQ=BG>AO*24TUeJTN`}dKֶ|+ۓ^ -=6<%W(7E3Xkn(Zk
Hna鋴mxZ(~JĜZA ;0w {b7WfKKi D+*AoHƊ/`mgZЮJZL4|";G R~WX VDrD!p'IThu΅gg3`m)J46zfYd
|[qzyR2pVg{qV`wC1updfIoj>rr"=oz
x hp
˚/̾W kNvj8
C mDwBd3HBXIׁޒi㭿$P*A,I%X;JEc@˕ X!@&UX(c6TؖK8(_L}ø,=YE7 ߝEځkc2^ Eo8pܽnxR\=}lmԝ Q*%!10 Zwzh YӦD0 h c~
8gJ,;3BkSvE i\0A,((=%ŀ> Km D|UU Yі$k&i] 6&TQ|i*&\ JV fV`HDd@!o
1JyUE|,JFʌ(.nrH0`>ٰ8'6NRp!Bw
]g?d%XTHѯ@KUּ-_EՄM (.bS P! 7.X/1§}V( wJث zvR.YEG^i,/ܖEώ@I%g9g2dVPAlB7Ya[ 2#7J5 f 4{y$2kW fD'@sGj! c r4yЌT3Åyj|\E{ejĄh5 o86ѳ/a=m⥦1dFt@ }R_}& v "="
1d9of{mU#+ 0 &zl16d-Y{}ǖ3uPC`q"Y&UTJ_,5lIW?K.\JVN0ܜelM̏ pռEddcQa7bt_ rNWA5r y
Nn~N`NȚOO(;;b 92 Änj25Ot,yoCjVἬpUvcm`qgqb2L'y+yx=D:sCɶuCf
(9OZU 5s'h)#'D є=Pɹr*چat]D#\
]"+^M:AQbz}:6M5 ~˭# e\n[Eg
cZ}`HOe4֑VhG#.U'.HaQxTƠ]F4D 0YDb],Ȅx*y!j˕ƙ4
!ԜIo,U vO
9o}ku U?@ ̐^.⽂ 3ÞagـfHG!Ugd
0VҢQJ:/_f6Eʺur!laç$t9Ҙ7#/#aʑr.]0+|tW>:F~="jxtvn-B;qbIgPtwt/ъx~N <_4?G :'_JZfw5@۲P ~q,ݟ L*?A!5h)!69'S? Guv&b9xYy͗@B/ + r{v 53& E_IRwnP8 u\ FF` ÅmVlv8ի?Ϧ *OX'c{v, Z['.TuFbt րmhMs48%\FYDa_>o{uwֈ"n3Ѿ@eepO4
삂;}csnb>az
5l O,dIrK3|
f=T*%5YR X88A*ӹAe[(3!y9?
pwT)}cuwA\'gݡu9:`(7k
8<'Cl认P%H 2v}qdCTxEG>LE-p ({XvN.:6ϕh#5`;)u?t
KP.j nAW
=Z0|sA +]-)!_` LFYL_ SqaPҼ.ja@A<~Dag @iRNXmit.[N ({
KҮ0yD3uvJ8cf~^y;P,.*8[7r6ާזjD Hl%p7 B
C+ vt$/m{dC5hw0| c'@+(ߤ˪@V%f=WeQabpZ\gIP5:zΊٸ 9^LʌQG4 >{t!IB*I̙-ǡmb`!+2%icm% &xl73NǑ8"3O1I]HI< d@-acO⮍tX{w ^@UYxG +WwߪӴ#G&:1&|؞ *+H8;c]k EM{ϥ&l#CߔX N_D==RdkjNC(}ll 'ldV#ʀ.HlR`
Jgη
GԵF*kw!d El0U[bi(Dp\ıMQExN XN#Nqk-QbO;ha;ܥn}>n=yhCI6⚛rqkcVFߒyR^E+u|Vuצt170׀lX'+= HEP9@°{VXa+; +!9LR=h ګ9Q:\ T0
U g ( ;a
]рD*'
d@&@ﯸRg7JQX{!{'>]i ~K
Iͩ;ODi TOi\iHKul$Hf
P״\nr+Æ!g&HjJTቲcpV?[j0ozA xlΥd ?"O^ TQfD+q0"j{CG!G!L[u :fbYG 98p)IL z$a,$drK[ 9ՂNrmݬbiO`Hp>8w#d:끦A`k0td0;xx/ 8TZQ, &oTTw;92Rd[;MJ,0
>:Ci'?gSƀi0xə+ 8
T"ifplda\*Y]aE , &249!". w'E\M\V(aG2`NKCIE^{&-6b,T-|S88_VCz(c+0:D-ïȱk
jҢy4-zRɕb+ШU (/A(]̛^_Z?O/' k_~ =nq_Np*t bĜ)[ yT:.w*@^g=L V5( Z* 7j)=)`eXTG nErɱ-@UuE }g_C6a/d ,aFv_[S+ƏdWa)m4KTW>qy(V5_FM-̔ӳO W[VQ<]_Pt:?42 !g_^'}oɶi
%CpTE9+ja
u3? ?Z/ 2yǏ֓G-SQNWN:eSyl}wC0*v59Y]$z[ jR˯X*) ̞h,uVX]JT@
K|=_ؽDʆ+~{~]Z}e'#,Z{.<ؖl xS,2}^ ] 6qk]ڡt."*#q)VkqJ ".:% &*^9ovxCχd@0Q1'ig_6瞝戳^I<.:(iXkXS() c3g $~JQ4,NxǧME_F&Q
TXƶ
yɴF3|O](& ?d[mvKHj֙r<7UO$p_E^VV' 7+dzpTA =HjB_jE huspt[ | Y9ÈE{gX90{{s:!O'ԉcg 5<=_Dۑ86zT3aQ`T1`QKb ">&?`]Vf <XzI* `sЕ (Fn_:ZN>) ~Tz"CޑpW 8! t- 9 oOs%2J&KRy^/4
Ԙ8Ÿ# 6du-/ym$Dj *1إO;[g yP7/ *d]^w [,Cys.lƃy>aeWx bÆDm 9EY Ed6,X#O8uv-mڼUTcKCV d ge>~f'L2(?o05(JwՀ1 -pJ:PdUZﴃ?iV,ŜL{wjg c)}zp^WfO'$ME&!6F0֔$Gb p@@K6HAڲ&p7>7CG I !_ⓗ@"
%[0ӑ <7yLfWmui)$g5& c CC6w \;է쿦. b
W70`ai%(Vwx$f:Sw9;yAl;'t&ҍP?(F}`PxsYJ)]27m
WD
iF6:~Œd ù6jE (Fz1 [? =c0ɶæ1@UOױ^7{,8Yq 6S>
TŰ]B iITU)4(kStÞMi$M ȏH{:rb'D qE
?5y?Oee:Pz$ifvyCf #٭@ w/'o]k x{J&ph39sq>/@Wo쪅.iu*=l_hvꂸ]
zhBhtŶ
'qZ6H]Fq ʘ)v:Hxw73^|I \O?JWƁ%.?D̙
KE'!|5; ;kgn`*@`U 2tKcrδnT>[l4R)$bχGGbʦL vXc\?MڷۊP{S7^BLO
fH D"BMck6(D+ʯZn=AJWqD<3m{*"m&<Ч|[D
rYM+ekX~%OvZH اs ە<2sapsь _{弍08$Faś,mv:իYkL
mRw
ǹ1j@9 a4 :$Ajt.ó!CŦ(5[n$+xk55% #g䠤 l) G?) jNLVe) =1)FY aw=^xJs3%N& ?+ET.: ~sʢjj%{J)N]p+lL~YH3E2Ў`!TRp~|d&`v\f#[ n&oy!*q~}1 F I>W^`l _Cg);ێf+EP(Hu&:* 1~S)RV}t.Δ#\tYk{?_KG"x<0YHP4a|t A +^1Lwv&1q&Ug̃2~ S8C:U]RPi&k}=\W1ݤ= ˑ_>ea@`L|{J>Bu>`5|(fzNj$Eߕ SoJĎPek|CAq_݈HEeXNE2)IN٠*F~o{/T{Rݿq+ a3SxD^>k70>U A ?] H+
w y`YL?xPmV