From b7ad9e1f68e1f29e9c32c178b414dc9ea35b14d8 Mon Sep 17 00:00:00 2001 From: Donal Hurley Date: Tue, 18 Jul 2023 15:42:45 +0100 Subject: [PATCH] Fix selinux policy on RHEL 8 (#409) --- scripts/selinux/nginx_agent.pp | Bin 166388 -> 166473 bytes scripts/selinux/nginx_agent.te | 24 +++++++++++++++++++++--- 2 files changed, 21 insertions(+), 3 deletions(-) diff --git a/scripts/selinux/nginx_agent.pp b/scripts/selinux/nginx_agent.pp index 52d59797e3d514f8c1e824dbe03f182a5cf85211..cc3c4bd1badd56f726ea28b0bd25b5e1ab12789d 100644 GIT binary patch literal 166473 zcmeHQ2Y4%4bv9;`z=njHgpTNM;qC6Tx;BLiES+5-ODAAtNw&q4C9fpEl924A_dt5@ zz4x9F(tGc{_ufN7@^b!j=A5}>A8EDL*!x&?Ki`@A-+Skt|G#}kvgS=!-uSkAt*x!C zlYa>L&$)el?UO0){uI9LS)~{DhXS2|rw zzP-QS8+Nau(EZ47^@rVeqw{-^?~I1SUT2DoNbZb#?P(8mP|C$|f7(M)pgryl+FQNB z_IR|1bg1c%I@7^@DF8ad_FiujMWZZK$%IT!N4WI8$d7xS3!8hB9pLv)Q-MJQvqUXW-qHRPd{MVVnQcCh!gLv>z{Z1sb`PfA(ZwM!S^ylt zA6LTAfa(kM;Zu3j5lp@(68n>BZwMi9Payxu)B_KD(?NfDezSeh?N5(ZJSy$s$TlE} zn<)D-%3ZcCP!(Vy#ZIS}#r|DxBItXBm4gc0ANMbyn1@*`H$F(;W7-n6|4`Eh)rf)9 zdPUvBO*{KX+q8%VbXp1=&{d?1qkEz|f@eB5r=$7f4cWOdM_n0!=-S+ly^AQ~wAv6; z3wKUT1S$7Z8KW=)he|+gYOB)FyB(E-`e;vRa_rOGhT6c~mCbaB;m(e{m?{p2{Yx}v z+dN5PhUxYu)A8ss%E7c4O;s?RPE`n^q4Ywq=nZc_=pFPBMB!YpO{x^J_I&d3Ts|I6 zdZ*U&=69>p>Ncm+MIZ*QOdbZ|;jmuy#u$~np6%`T#*@*Ix(WILGEK+r;bglvR+gRi zV1U^I{eT)C{e0THG~L|W86ye~-2?*~9G zEcGt+ItO>YCgVaZ=vb9d5Juy{5GdEoh{oI?>lWsm$pp+W$&Y(`qYJ%FEaWhb>!PlX zLes9U>uI~&<=nus#_zYsw4Ko!0QJ2Q?>pj!8mkXwBQq#dHUsT(XBQH1skgzbB0fjC}zr0q&*b z;}JRS?{`)sviOY^`V1WE9eoELZfkIUbGtw2VKk*f2EF9;M+rtmJW9~ZW)BIZLc*PP z`McW5v2VT8POg=ST8cYwXLo#cR3=Epl?kG#V45t(m-k0~nKMqhdNC`YKGP|6b2!@M z`Q4dYFe}|@wd;)kD9ViW9UhLR3FzsFt@(`xV&I-dKJFR){Y$G^?c`=PG(tS9 z4d_;JHLGPy_d>H8)_1rX`MB@uy?1(#F&eLWa`8PGlNTH|ZjVVl@cwv&JtNj+?Bi&I z*pcT<*sIe1kPt4#R6gnNOz3e8Aa9rZJDuG@7efOD(v{;uf3MFEzj(j4OPfcmWVngM z6usMP?_>VLeibDjjIp`IrU2cCVzwu;RmP?kb1+4n?_HKS5X1;168+&WcE;#V-OIG# z(2l-8?T>~i8}hOkEY8>vZjZ+2kqTSHb3%gC{8+Sxqc%km9o{D68ZvUeKNvtM>=GOv z4EV{I>~2$~NXJGs-Bm*?Y6BKXEZ=VOW2+wBQuI1V1_@GS$xuq!_jmgC1doydVHa2I zlbTKs#o~4tJR$U%Vl&BMECYbgNyC+y@P%9AhaR%sLpxb zTG6u%8i(T^IuCmHUc0kNH+ti7zsns3V*qjO?p~h<1^SZg*6=U`h{x~c$zZgDUVy>9 zg}b!P$-x9qmcat!01P(UgZ6k2Wx|0QY{J8BcTp73!GxcSAo8{3;~q8KUUjDv=uT)z zxTlau4}pi$9($P4KO|d zqFwNIpFc)J3hj+I$L)(Kjkg|@$)>&=7M$c3aE^YSr_70})tpP7$*cF0~Y`#zs zcDQmao)C{m12iK_K)qqI(gWJhfD8@%a~9RHyll9ijk*_e6NYQ8AE$G+>c@*5N?Y+sskQw zYkwO=p@vG{p$VhSa*&@sL)zr|NcAHElP!3{1hCxBAqR@&GR6l(OeJtHARiBcZm)xh zZ?*ZNm7&5gw_)zypd>X`1~ZXq96{J1+=Rd?~#tuy&EsJi2CcT76d)BCO%7IQ4|{ueK? zWx$ORHdv?nO-#L);je(EpUPnGf}M~)L0o+DK~1BE^`ldI@{Yo=QFFf;f*l*SSMr5T z9TpvmiHF4{>M@|3-D#&!+i)?o+#)?gLR6DTiI3}da%+TOna-32Dvhe-DF{&fqM!0xbpj3 zs}WZG!lN6k%AwlUuHK(?CjC{#7hmysehOD2k0*8Ta9Z*7+@afVUoCrEteRjb{~Exv zEM`)EGHH)8@Ej43GTs6I5d-TwZ*J26sAzZbTnP?SP`o4KZ&}k9wtMZpQyUgw$9t9z z{!ir?U*gBg$IW-T-`PLB!Y;l`!<8Vtz?KY~Gq`i)u_c6uJ5L{l^alEv9}mZoBHIOi z!cCuDOc0H&0)22o$Ue8$SrO0Zy}>!Ak1Ma154Ya=h9+(Z;9f*N-XZMo?~hjBJ3N6c z8OAN#tI5X|-tYB#&2#0ATJ_YX!uj{8_oy{VSD^Q!TE`p(57(zpWQYB&HhqRkOYi<@ z%pZ6nb+0|7fB2-Y&1}&w0v}w#waCYfrW=fLcW?EO_yh)vJ|uqj(R!zkcvb_Y_^q@) zCBO&s*edBmn#nHzvm^Eq`n2bC{y`7B7m&d21!vsSX8)b1^j=J{@xUAmR^LlIf$^v} zT8}?e-8v6Wdh(Tv)#JOuKQGgsj`2`RJ)NR&m||>}$dl>SSCv*@RdTGwZzZ>l!w=3RJLrj7D)YLs{`?H|x%+tm)J@Es897!F_9jR%2l zKDYbh-bMP+hpVLS-}$Cf{j?F!6yxtfV=Sz`2Ypw+2dxhZ@li@Vz3|O%cV~QxpP9T9 zJt)-Mtj$BUe!jDM+;jr_WBgkO+!^w5C)YXs{AlY9^rLs12fYjQ55-r>%zlr0GOiy0 zz3xy8T;N%IwT&r!8>2G}CRKzL#Tf05~&&dU<=%2xml;z97ikRjG}^m+RiQT;gNaTMw8#4c@* zua?>Joo^SW1Ns%zIPsJ^zBFF_J{HxSMPPsCxYv{JDp!o_^0|fAxDVR4Ike>H2K%=EF69sa#u4 z>c!VLzHR{5Bp+{DbW+DRr+I6Oujs5Ap!f#B9RS?>lgC~k9xnZ52i!>D1_8ekh9uk_ z(63cZ5BLW%5Yz2X@EZ#V;?{zGG&V)JlR0LZY+Pgr1H zLpi-2`d$T3dUz_*A2P)A8O)CJe%}HUZ0`3haFPAKh3@e1u}R!r-`?b>&B%epi+`q(f1VGW2>I+kBe_@64|-rZL&IQqdx`q_^uJ?2K2LhK%X803R{;}Hsi!#}K`e0Vr|UxJp5Uq8tn-*tNZ z3qAcWj@MJpxHH{Ozi2d`uKv;T1gHBAs&af_2M;$rc*k5_@emOj=zn|Lo!w1-HwJnc zI(+&-84#VF?!E9IzzE_$fbO>U|LE|-kCVksz&|qd&ixe`%oUhA?)rcD<4QF20{=UP zdWXA?d_3#W8#4yfMd)P#s}GY3e@=n@0^CjH<4V{2<_`U4|8%sf`QrBvmJ`?APUlXZGuID29H^d9OX~?5c^^P+U9?JMI4VYV;L9`gDtn?^nn5t@GY$sVRJ^ z!R8L`eaXiYUi2@N`{{4VAX#2mr8hA6mH_T<;Nd3nEeC8ZbQGS>zms8?2ol-9kYS+1 zfhshrPWdhd1~~?|KKR77^57F)5Q~8PA}{@}BW;r9M=5bcxBI9 zp_iYxA{trKD`}RSjN~VAdES%qh>C8bKZx?iBda~QT7EwRb#{;Wu?$@}o=KwO-9f*z zceVTq7P>sBo%)ZJp}U^=<^VGjT$Oy>-*qL~rr$~$j7H}Vu9oJwM|FQpm2jBjFj4Ar zP=09(y)^@~7UrkUXm1}s6GG3*wt8dCp_uYC7C+UFoaihXCqGVt*$g&lHB5gx7#7g6 z_#b-orI46&d6uW`A6~{mlQ|yAp-kkz&>r-=^r}huJz!);BdDeHYjGgNt3z)}Q~v

h)lA&&ziIm`-cmN*?{p-ed0SZs1xfw0=pbi}C(8i>wu-0c((kFJGY zjj}La-~u1zKyNU`*Qn{YF8Bv7@GmsTs-}bF;v)@#P5K4uDg9pm<`jJ$<>@nIpLbE3Om~&^B?nl-8F^DUNGkpe!;@#?g(80{|Sl3a#ry%7ZHHZKJm5k zSy!Y3p}TbuHworH@WNGbR}N_$oop!aODVagupz|5uvxZZcC`1U_i#vW-JNp{mK70C z!)J4f*2BMr%p-<0IQ_va{yz66ZWwyJS?`S@51YMNM0X|=euT8i@AN6n$w|*-+vt%P z7jKx8uhZYA_m5zCYR<{k-R;ml2EXDBztlC09%cuAyU^iZ(g}2tI<@y4ikMXpeTqP@ zL}7c+os(^FVNWvk=VThfAgbZ<^D^PLb~)D#b8=DLr?qf?POkAju|kcO=VYSptrdaZ zIjbV*JABCYK+5vkG+W&5DT>_|z58TyEbkNH9*^hkPa{98Tp3+m+Pul$nC6}` zC%;S&IyNwNv8bT*m`+IJ=)`F_cj%2}v|Zk$msq#AdV?Mrqqz$uVELF=f=;c&5q(UC z_w>=0kN;DUOTbWhSy}>0feU<;1KlFi%A=LHPm#0g0@^k^^hs8a_Fb4;A?-tdrdy{m&`hytm0;Y8uSTJK3f8a8p%rb7Olrzji1CxoGjGU#X(k@M2kLke?-Y zpPs2)?4}h7sjr`tIh*CCxXZ)0*k_fiT}sZKX)L=n=QlO4eA?ia? z`&gjydc;|jcSVqZeq=zJmMJ z%?sq;?|1O}L)y|p*J zNN;Ang?~hk#A5S^Ye0V1auP2F?StuVwh-X%>FMd!C;=|;Q4V+`(}b!B`8LSUsv>@K z6R}6Wm(I!8*`e-0YV$H3V0g2|!=Ld6x=h_cw|7A- zK9-_pSv;7~AOJ0V(S24XOu4*Gd)}N(I*r`Ew?nyc%Y#QkvxtIlX1r_DDutxrs^no&F0zVV(6d2gJPH(KoY8;W60Uc9h!c$tO` z`qzhP;9O*6h? zPDYFye!7JcUvwuKd8>uZCED$9n}sxvPUNs2;^qktBhaHU;o{19S7}>H-@pnFKdUa{ z(a-&q^0LFuOFbemS>k8AC+)qhwmtHgAW1F44zl20oA+_Fp|%Xjg!14f=YRr&>hNTe zJaTApopYE>FvQ?G8|RP*Gdmo?bC@juI-PKUIpSZlhz*YT-z=icMPR26*V&LFFAF3r z=^tsh!udbhaFy|A8?G__Qp0t|UvId<_&W_Z8UK*s7AwRA4c8I#KP?E5v;V4Lq5J!W zCI4R<7P|jzSm^$bVWImjY5jJ}LihfLh3>-)3*E;X7P@#a4A&8J*K2Y`=r#-s-KQHC zx-T#+*T2lL(A_jFbo+*d?!>Ur{ZPX~_hStU-Rp$yT1SfiR86i5-Oo2HbidND(EVn^ zLic+OOL;$PSm^$|VWIn*hK24Q8y32MYgp)3l&%!_@0wf_x>pPf-TS6Ps#6oX4>l}x zA7xnRKH0F8zhPMDzOP}S`z*sk_eF+wj$xszZ<6oSh3-X57rGyA zSm=JDVWIn(hQ;0&8y31>Ygp)hyJ4aG9AUfGk?cRH$qk|VlZJ)vFB=xRziU|N{<&eH z`;Uf&?%NCt-Fxd))DZjcVOZ$Ck71$v5~VB2kJaR+(0!_5p<6R7bf0Ee=swS|(7nyD z(0#38p}S*P=-zHv_-*3*9Fe7P>bm zt_aE51p?i(aObxO3o`!|)Lk$bv$0=?KT|7gC>qz#qmMnDZ zhJ|i0EOei5Sm?ggu+V*-VWGQgSm=%oi~Tnm7P=p!xFvM)$QrIA$#1q~q5FA;h3;1v z7P{YLSm=I_VWImYhK26W85X*~VOZ$?k>M7v6Mw6iR+ciBnt#tCHp*BjcEFw-Ej66s zN|vF_8E%(!tSn`u;no?BZdq{shcIBs_@fP17{AGImGS2qt}*^{!*#~rXt=@nyA3xP z|FGc}5A2jKEgfLR9q9f_tL4VCUk2`SIoV;B@5m6GAwi-V_4{3XIQSU7#6zkZ&>I)$FR_SiD9Ap z8pU;?+cPY5@o737-N2x$k1Sc}UN$UrKhm(!{ba*J_p=R4d0%Q+=zhInq5GYNh3*e2 zZV26F)Vc7Mdzu8lz)H2Lib^Yh3?}O z(_5@ieb*Zny0K)l(480-dmn08=zgr?meBoF z!$SA9N>{Rfz9kFYuQV)lzuBEnYSLPBE=B6|6J= zkwt891b_dJ60pux&;YxtVB;L)vEdEIZ!}!4pfG$v1g;~=A0r5mv%lGJmGS2pt}*@! z!*#~rWVpfjdki-j|A^rh63e&)$Y$ls*7D?Uy)9YjmJAEsrx=#}Rl`E} z0}Kn@=NcBeA81(Uevsn2(A_pHboUJl-Jo>E+y`5-(ETXGLibY)3*FB#EZ2XTVWImC zhK25T85X*4RooD|KVw+v{+eN-`+TJ<#s7gN3*EmmEOh_Hu+V+GVWIo3I*~P`yayN- zx(_!jbf2KODRgfzEOeWOh3-q0t`zqSOBT8>G%R#qZdmBP-muVpgJGdNH7wy& zaf(|)_tOju-7hdKbYG`*lhK26;85X)fW?1O{f?=WiTZV=1pBQfOD)RS= zX`QKJo%zo!Vxx*ludf6*&M}@Cmh=xbT;}wTHC(Bptos}0x{qI zaD(yp8g4TFQNu09Kd-nfbbr&Z(EVe>LicYC3*Cnq=HmW6gN&~j7P|M!ubl=yo(0!I+q5C4kLih2?r^57JWyw{>9m7I*&#=(FXjtfexM89D ziH2J|OQMIsb-47;)YPhw|6;>J{%Z{j`ENHYyP_rS1}cZXr2`|*lfLif`R z3*9d?EOfuxu+ZI9x>DS?TC&jne#1id#|;bJUob@?T;uFtWw_4xTMRcC zf1lwd;~z8JV*Cq=%R=|J42!)#F)Vcd&alw^55q$D;fA?*{hmapEOf8csj4h=A7WVO zKH9L*J!4qtmK9fo?)w=Qy3aN&bYE;(=)T&p(0zi^mE^7^3*Dh%p?k@&(ESL*Lidvl z3*FCBTot-sVp!;YonfK-9fpO^TMP@`8b5Vx^FZrbU((h(0zu|6*_OWWTE?ch9&(g3=7?FGAwkz$FR`- z5ycIm`*Vhc?r#_tx_@L?=>Cmiq5DFmE9U>rl7;U785X+t(Rr&O`5$Ch=swc0(0!8P zrqJat1)-}nh3-w3E_81;EOc)*EOcM4bj92&Em`Pp85X(&!$S9hVYxmrEOb9XaZBia zhGC)mMTUj$*BBPM-)30ozFz4{@jqb6LiZ;O3*BEbEOdXzu+aT8!!2G#{!uY4D|IX@ zZ_6S!>R49JD}jx3j1LS;`W=SLoc{5KD~vzgaFy{F8m`r0>w$(j`KvR?_*)G(7=ORv zCgUGB++zHTipxUxw+##3KQ%0L|K70B{ZGR}_g*>|m4)sjES=50yCv5dzn5X5`xwJQ z_d3Hux1zWrbl=~w(0z_!q5BfULiaU>g>KKV(0!uPmFy!+7P^-W3*C=2EObBFu+aT% z#Z{sErG|y>*BchP-)UIv|Bzv!`_qPn?u|-Ul7H2bh3@Yg7P^0FSm^$4t^w3k(b0ml&YgovCs$n7jOtZ%3KHrjs{8t(l^51M&$bYY4sp}tA+z`4y zZ&>L5reUG`$A*RO-x?OW|87|5-lBAc&J{}*y7$$2t0CzRHY{`>WmxDwS#eY7@^^m7 z1T8CE9q()DLibsQh3<47P_xcx?;X#$wGI}u+Y6|Sn_|kVWInpid#bWGYt#f zFE%W6zt*tO{dU7b_XiCN-L}#db3bXxLid*q3*Fx}EOh_eaEn)we^N}#N(0Nve`gUJ z4J<1IHMnt(@dd+@o)|83`X?B!F#Zg~RmNXrxW@Qv4A&d5{UF1f{B0Rz`~!xYjDNy# zi}5chE(_h?F)Vcd%&^e?2g5@5zYGiAb)A{YLic`#h3+FQKbwDVOKvbO85X)vF)Vbe ziYr3*0}Kn@=NcBeA81(Uevo0IyKPwL?i&`mPg1&a`3GCF(ETXGLibY)3*FCATot-s zW?1NcgJGfjU53TpTMY}{pD`?Sf6cJaJ*RXf`yW`c(ETgJLib+`3*EOXt_j_D)w!r9 zbRS??=sw)A(0zhov44YMq1!YpbZ=6+lKc!y7P>DqEOcLPSm?f9ab4)X!LZPs8Wy@A zW?1NcoMEB+X@-T*7Z?`0H!Iyb_tmemWTE>lhK26;8E)|cdLO-DyhI-9@Nl7;+33=8>38Kid(0!%S6*@yp7P^-VOZrC`7P_CLxFvKy%dpV>62n6G z>kJFs?=UQM-(pzk{*+;%yQOr+{I6KD(EUBbLiaBWw|Eu#XT`LvG_kDwPZqJ!#Imxd z1~$$yzGzs|KiqJc(?8L0h4E(^t}^~&!!^cVYq-w%+YL9G;PPO@ocx0sWc-tcTa15M zaarj8u3@43=Z1yuKN=RgZ!;`(@2xXaS?IopVWImzhK25c(EWA8LiZ013*8N+E0_PZB@5kuH7s=hS8+|~zMD=}HKF@J z!$S8FhK24E4U4@S4GZ0tVWIm>!$S9cm9AvJ#gc{YD+~+Ww&J?bJ#Sd(9vBw7cNiAB zA8%Obe!5|?|AmHy?pGTYy3bO&lKicfEOfu$u+aT+#SNkRi-v{nZyOf6e`;9h{=H$L z`=5q|?!9y>Y6zcqH!O5tq;wlRwBE~-h3;bvw|M!#uV&}m*J)}~$n)2YCZ5q<@6rGN*r%;R@r=GF)Z+C5CH^zs_)-@pl+*Fn){SW((XNVwjVEDuaxFMR8f^ z{+?l>`xl0V?mrn8y8mrh=w72UQ(5S~r(vP{P{Ts^afXHNqpduqch-_yjO&UkLN^!| zy3aQ(bYE&%=)TUd(A_mGbjOB;?i&pY-H$OWbk8VVDgMotEOb9laaHJkg<+xlO@@W; z_ZXJ)e#EfQ{W-%z_csg+-9IucbpOV%&@C%nDem7aS?K)Ff4RG z!?4)hK26$7#6yJW?1O{gJGfjUxtP5 zx=uw6v420qLifE53*8qhT}dukve12s;-=8$FBH)ww2<&n`~XWAy3aK%bU)Cr(ET98 zLU-G+(A_sId_LH)(0#SiZL;}~vg8);R<6}#PW=>3Z3+3$F)ZZ2%&?IE2E#)By9^8Y zw;C4mKVw+P|C(VT{|APJeAn19y}z>LRtsZJJ#wY3YH`5u>DXKg6oyx5f{5aAR&KOY*2P{xK2G$Gkbx;@M>4jh>Kky zkdQ}uAkU6KNP~JpdZ8Nc#D?0%BLmom3#nJEXT--Y5P;Y8bqd1;K4u4`zbnK0Sl&Pw zUa!?N;$jyFz-#)Q*|_cIl6}eJ@U>b9;$s&Gz%OD0_K{EX;yQT68bVy`0s;6e-!+6J zjsxid>Da9$o;5D6sJlGHyJEWsuJ>ZyYR-kJm8$4+sE_P}I zZT^5XA@y^)gc{qRZx4BP;S5>a%!WXF!F;^HGKXvHa1&+Z4#ReQAr#1>29|?*MI7Ciu6x1FGiViqL4mJuL9|?*M zI7IHWbQIXH63`DgL{94pyD@~}Lh2Rk8S$|T1QPN{59ygst_|tCr4zM*Hh<9C@oWUT zR&`R4QQ&iSK>9K|P~IXoiq)}}z;5h{*Wue(Mn^(~!84FAk%tR>%nrrtNL(As=m2N% zjNE-f1Q0|zp2g^%7jYr=daa%jAG<&xA&>NsdO8)ZBcU?Y2H$+lu(8beSky+L?Xm9H z6?8m^YBsL-KyixojJVhZ0`QtnL2e(!#SZDvfg2#r8z>B~SkH)yT_6Cj=@jI<>A->P zfb>G^YOTa}GYi6DnKlnpSWd?b8^!8ay9Rb+w`^S{R2a$#C4nrLf0>1 zqu9C%t`68(Un^PL1;X&)2dC%2C_4ZrK@p}d@p((JlIb7@{&2d`Mqh>Kky z0I%s3Tw5#oHkN7gK*i>4B)*Mh#>b*IVjbXw>*8ybC*ookA`piWjcf3&mWSRaF`a=h zyq2eD#KkTUfY)>i@*)~IkR6a-X#G%uo(;$jyFB;=7E$j8sq37SKC zp*q&qT^+d3Tqhs%4H1sxDcW415WJ>S5bgniPuT(KabH48NWEUGXT--Y5P;Wo3i4(- za3DJ%z0kU%3D>hxs1Dlodo~KyF~df&I@ZF;>+o$9tK$J~dlYM9t>o2Ju{N%8brjpL zd>e)8po;S9s#qOK;Wm=BY;ITndZr|Hh0j+sg$FJ=M%Ycuz_szW&i;(#!mo&%%o5aT$E z9JuBh1Zb|0uMZTXSkH)yT_6Cj=@f)>*YIN7*`I5Rwc*dTMcTl9SwM|N4t0tCx)$U+ zN*n|vul1~F#KkTUNXR2SkS~#k3w+EDNH21(Em3)aeC%N3{t|H?gyBN!73&%Cu?qy? zHJySy_5ug81JaAsv9|8(z#g}#=WPj<70Aaz zGlXSqplszpLAHaq*dZNr#@brR@&-cidaa%j7rQ_JUehT!(*|@L_qlVRYhxQI330JQ zI&`d)*Svwk@QU?}xYz{(@S09Ra=wis+hdlEBG)?zqraSk&LVXLDi1z(upx6_uzC#? z2e0+4XT-%W5J<=)J&-SvhYNhn4oELfhm1nc2KrSo->sQ#13HTNF5qk%=vT-6o?b%N zYJ2E}6(}xtNMC0Ek>Mttl7 z0eDTPAh|Gee4s~Y-oQCC9LH0Vxj>e zLl{oafl+pdaU4btT!Z?@A-+CPlwv(2E_Q(cyryf-ATD-DNBtD@{}zFZmLmuGpf-y6 zzY!^YmW`9vfp#wD|3>a!9hhs2`M;67SI7NW$MK$pfO$4PWF{0fl#n{@yT|=rX+q_o zj6hx|Kn??^PHi0b|6dX+=gw@bQyz?S{2vX4q^yDt6wXgw`7XyNG@Hc(f%Yd{!2q#j{7 zJqJeFA;xhSIdDyCa~)y$ka{go&xns*h(H`hG_Jwt-;Yi||1Ppz@D1cqW|8Hh4IfQE z=1_FGSU1sjC>JiIUa_7LAG<&xA&>Mxo?L=Mz#(!-NBJjx&sd-hmK-7t2qJQsag?NG z1Uk!RWp-T^_H1$8w}Cn58hWKM3#D*Ky<$BhK6Zfsyrxrd=DddXxF0?2(!7B%ykb2g zE_Q(cyrxr->nm^|J0N|Xd?2rR5sq;jPf6wih2S+^8w7E&L%P&e5$h&Kn%Lz)dVmeC zD>^HmKw)^rdPZFA0s(kUryxIGL|p8U4jskpE9cud?)o2y-y%9tSFbqc|2`(EjX-Ca zt^D>tT^;v1K|T2ft zvCJ5}D>jbXcNev>%otqM#%Z)ifn#v)8dXqx@M4Sli`}w)H=)8%Mj)@fSi&5^2enbi z`jL*5SvHPaR|zp)M8`6HcTpS5^xZ{moJQYW#zsy@SYwx-1ke%fwTumvhcZ%kB4aS2 z!mVEgv6P+!&=Ki{wK=QM@n|Ma&Bik0BcyeqtRV$)v0JvT0u>guId9w%7dxaE*so^V zSf$=V{e6UG#^9nh zmg&18)j=mXZuG#x>;Rp`>5$Upcv3b>T<|O#$DP{~Dm80!AYHFG$Oo;fh z@o~0|BG!+2Hj3(3^K29~U(K_D&neNhwO#`uc*S}~T zdWphtfsfe%>C$%-%Zohldaa%j7rQ_JUeikyh6{Ym4r=4L-=9KxYJ-BS@sU<7>Lqr8 zKtdjM707Eta2PmsNH1=DNYex@{BE#O#5zc{SN$q&yO5ss1e}n6XX;nW>`QWWl|IY} zRDZEUU9yd1epZyw_0}GzvPR7wADByy`+df|j@dR)SI7N6b6 zxGDd=j6?j^DT^*a2(k-wgh$_n({o^y9T1NKO621_Ns0rV$t`W;pltye3k2Xby+mQSz{l)>^m_xAvb=#Hyk4tk#KkTU zNXR2SkWZ`8wNczWxXzXWAF~5Eyg&J;k&pR?2*>dhZ7xsuQ#bW%kj5xW{ci&qh&w zcb1Lf_9F6MP0$uQ=v>A|pzEW$f{eoZRg&5Wbk@=(%n^K8w(llX3d#uN$(3*jI7IHW zY%DWhCB*k?(NW+yFQFL%4v|~7Jpz@5GSsb8ASg)BNMEKsP+n#uA>`XwX1+qHuo1}1 z4no5m!3U%-Vltye z3k2Xboq{v>aLcs$qBfRk^F?i(hK^-yB-93I59r~6Oviv=aycnjy+C{D+G z8^x?2^KBG$kAu-1qP9Q~?XgTwikq)aMn_27 zoKC4LzF!3@8T~4A#oI`z@T~8yzJH_j9kNR25O6|1t1HC#>&G(lRYGNEHcEtM+c@sr zo=};Y4WQy}1S(VOvP5CHz{l)>^kwP_Q_=V3DpPcB9JG?O%phn9S~XEygS>*GW(K*I7T|I0sDYMZ^G$0Fv<>yUngH8ALmI@9Oz6AS&odYkjCkCdPaQg5Pvm( z|0W?`;1Kw-GR$LxS~%;(2l!xOr85gSF-RUmtC zfsfe%9E#c}XxVyJE3mQ7;CSDSN$6UwD-?rCDj*O!q%X6+2D%<)q;BRsxQva23eR)| zHYG<6@}XcIr%_ikZ7kETP%lw?%(Ssgdz^-iB-H_1tIvnBHkJC|O5p=AeAebX1W$UL zlf~knf9G|Oi4(AqP^sBmax!(bsEwl5sPxfW;cdRCj^gI4lWC8TwmF?rcTecMtIvmY z&I{VC=@~d7pN(_G6uAfoRE*|YUZ4X_E`OY_F{E~@p00h*RB3Pn<_bVK?CU-{h0^-JIw!Q zudS7cb08l(=qPX=oN1$|&!E5^Pe}p-k%JD5iR11Q61o;;1oCjRY!q2nvuqT$7n!4D zomCd|85GJ2TwZq2_ILpG2!!E6>J{r5@v#d867on7y(56T8utR(CT(bHsCHK1yt%_NSMzMFKIb~Jr#|^{ zj!s4{@G(0SJC`I}aL9`1&}rFNea^LbzglLTC)BEF(?DK36o-LRhxBD^1iBt&r0yOv zK15PbRq46d@iE`Vao1XKUZg#iY4aqt0b8qnmDM-b2kInsfzAnev_~LMj+-WMFgu)9 zzglKrk`UcU2S3aRnFJ0Yooy8IEFTYe1)#qH< zI15>jLl}2F=;?MEVYrZb#d=13>;i#=JkkSsIFuC-h#b-joTFyiDC#q)kaE{^3R!1S zpFwHadX8-rRaaWJo?{zD?Gv7P@eW}3eKIQiusP9D3Bvr zOdU8Zqa&f~<1rWr!^iG4Z5(%xn-JlvMMqI%5N!}rkFYxEgbhq)2*ZWcE7mjOV;2Y{ zz`L)I*Sy9f9GsE-5&3oEJ4GYNNnz?7(3e8-cE0L`PwB2@H}8e9R8uP?!xW z>m>SaLgj*IAP+ao#xl>W5-K;gG3)ytMZG&~o{nYOBcwV|KHRLjDzNX)v~e0bma&mg z{bX&9-EP*$7|;RfynYmNzs%E>_2bw^aXRMPIPQ8L(z+1N^KBe=f0efZOZSBT6Fix^ zN~m_SzB}7SaeJTHHcq4O7B^p=jE<1D2c1%PPw2a|KbJ4A&1c(Krtb!71&oi>aia%C z=^5$8>5$Upm>Qr{u{KIvaNuKhP#edc+Y>4ZWd!naH=<#V;KQ;u0+oU?;7WX)ZKH_w zW1fwo`qexeMa@_9Y^*-}mp-KZin`UwkMlrQ$OS%T2OS^B?YjvTg)##9I~#*1ZDX1H zDDccC+c8-cE0L`PxkAPkZVe9R8uP?(KW(%os}xN9vqFVY^%w0V-+fGuqZ4g;rd z)vu~>f>MIcX(ndWphtfsfe%>BYT+cx|mj#VYv?-wLgR^aloL(%OKw~bm+8^zq8 z<=a2DQDl3d-h&pNo}mN%3TX(#h14t7GvZ?x2qff@9>~L?oPa>&kPaJ|1>&*-#VFP@ z;$jyFB;=7E$irb_3J63F>C5cf0$r~hC^&cRE2hn1v3MN`l^NGnxSMShH7DMkI*Ock zXX)VaL5sTfLCvRF&xns*AONrF6r9<23!6(|kX+znb^wQEY@obFbSyK@lhg)msQ?ZG zrw$wnvq5E@#C(-dx!@Vd!_Bg>%=5j3%8hNz+A}QkeDAOg;6Ofh+8#yCC9x*8qc)0} z+w=7n+gN6NBveq$eVuS1A3LNMxz^6Jf&Kt{a3S@I^^Ew~1p*0qqzCeFCt)K{xynIy z)R{flghM*&il$x58z>B~*XkK@u?qwe@<KM zhK@jfo(;_Hx2=^-b07?_b)aX&#V!y?$S-1Jnf6%JMsf4is_!n|=GYZzALAe&aD8!Y zKHJ7JeK!zC)k#5abi~E3SRH|jmSbk6SR19eHjX>DCsZnU2J$lMHOvuwP#wp$5vUZD z0axPVY#T+aAM7w8DD*XbE?u|xdT_#W^; zyp(f^!f=6)*#YTAeg_T)=r8ABqriEP4TPKp(OKko;MPjM4$M)<-6te;E$SkWXIF~C zX;k5LHN(a-`_F{9E}~mzN#Dp};jGLCFD!$f=Dxns2wU6et}YX>fWD zjIsl8LLTXXJX{=>7>O%zA3f7Xp>2LmrYY8ealW=zVh#v})N38-8S$|T1QPPO`k{zG zaj`@C{W&6VUdwo~5B zKxJxslqd`r_?R73M-l5sDJ?c+#d8QYit1OTwCs?c^#mJ5%~z$g(2$<>1RJZ*0i_S2 zE>g#ndr*{~kzUvsObbs>sRilVh1uZMz4-Bw5L?tmATK)z4RZt^kiPmHaPfY%%s5Y| zuB|-+0dj$l*#YUx*g$zGBX#$X@gb6es!Gq$S=<<$Z=;BHkm$~Ak7e3Cp@LWaD(m;! z{{z)a>;i#=ywz2D3F2dSTK#I7eMv%uBOUyhD#Rkvbhfej95Ak{nPU)jwR#Umu3ycp zE6lqm{kiPww=l8+9kL*YF!p)S)9p0Ea3S@I^^Ew~1p@GzUZOBu;A3_``s#DQBWuRm zTFI{~jEUp!6B4=>^&QBwD@EZn3h4!|88dYhwif~KlCNVOX`~pM;6myZ>lyK}3j`AK zNDt)6B?%n@`Pd=7z&R>G*#U>hsf~B`&jAC~iMAI7OXO$P)p5s1pfVS=QN;5kGFKw+ z>cAL$#d^v3gfyS>(=*~@7YM*>It5GQT^q~X*90na5gWygb6A|Mg)L&Excx3HYK?J_ z52|C;{!%A_PViCNM17hPQm6HH+<7daa!^JfpFeU0ABwesBJVYG9y@M7PPkN6FyBT| zYw+Evqqy-nzpjeuSF>#_v#tax_G%g*#q?dMiu*A`)~RhSG1)O>K^|8L;q^4`O6me( z1o7P`gyFUBG%w;3@{0fW%3J;q*B~C}D_8R47V+>}4&VQ!adEt+BW{guMCDUmEi*3v z%9Vt&h^;GE-Wr8rMB_sgPNMKzqcB8R{wSP8;kQO%+`L-;D4ay$w?^SEaSN#@v+S-s zM$Umw@D_jN${hrc=I2-^o`|^l$-Wye#UCyI$`!sM&_(ddN6&}jucQKw#tYG-@sFWW zJ^pt!epdP1T|Heh>|XKXvC$(JQm^`@cAWT`^*M{@ta!iv)9!GTPfF}C&$QW(=AYFc zX2s7apSl~T9JYJc<7d{xjPhsZ=dWlk&c`oDzUR4o`%39Y%b68FtKQP;Khln~;;&GD zg$t?Id^7ulOdCh?7gY~4`)y(4#c#)1cC|hZ*Uzl@r%^q^h16?4Js*yzcH|~F94{=7 zmNTbaIO%XXY4Jz+%+kAxr-mc9s)u*1dU%Y`UAUje<21dLubmYRl%Qky-fJ)6AmY>o z4bXX3ILfkA5c@*xZ?^^qz3FH)-QApwI_G;+kW&8;3J-hJL4SCDvwhI*Pn|s1Ql4pN z-$|hj^xEEJ=XNa(=XWPR9!+{qcHA^<^@rWwIKBY$QMaFqLb?0Bd^VIj?eBM-a`7}` zYjA#ZyFci~B_qDGJ3bN*i&Rpa6&m~dmu3_`pxQZHIQ~mcYpydI4tt&HXzW~%4d4EF z)agwou|a%D*q-i9E_i~VwbR~jZ}kWL>E&{K-8v<0cjFjPA8vcapuYFphnpO+M>_)e zY>oTf9k1bFg7|D6OnT#CP6qCoxBJ_pBh`Z@JX~dn8;-h1+9<7_oKCdS*8X-Z6coF? z4pq8S&8V{exZ8G;aNYjy$iFTg0K@IUXvZl4^2gnYlLD)g&eR(lxad;XOM$fWz00w* zxHAz?s<>&->rANb{+2@|meHSdCVeN*d(*|*V`)5h`)yC`gDBU*uunr_I_|aioO0fi z`HzRa!6x;G3;j;6L1QN4(ZST~Px$8E{{H^R8*dM!w0^JGYo04_)T)ko5bO`P`@{ZL zd)VFV4ZHiJac)w3Fy&C8zUf4VzkxBH+f&Ud_ee^g}p{AlY9G^K7H^e*&<-hf9Ry1)#Ml7k6M zK9kFnX)o7~ao4!CJ@#0j;PIugyV6KA4xRdl3+@ib9^<&D?DU4cao_7t>B6u-b75#- zD%TtWkBll06To!b9!@YaoV-|*oS_SKe&O6-CS6ZBH)rp%W940hQUAy!E^Cr=1$m%EA2tzC`?ed(*i%9dUGg>njXxOa^Ozc*haPY_XoXc zoAwz;JKTFwx(=Go`11aAn9NNX(pMDj}bYHi9|6_(&@6+s6G1`F$R)nM@`#49Z4q zKrAos=hkB+^e*)}ZUWB_hp&L{;ZA>eX|qk!)O2$i*CpmT(M^-4w_Av2OIC&S*?) zENvi$gZ5T$(4ztljSOCoN3;;66Af==j^yH=w%w;u?uh`0%}%?s+uM|`9Mizu!WoVx zVT??6d$hHZu^C^+liXyty9xTa_C&QslNIfKX#~WV@~sXn85g^$m^cx1vR89OwtFnb;hc}xwd z8PiQ-o)PMOe>9=H)JvOtZQ5ZUnm*(7{eA~4d`>J#$k?6HFvuXY*^CURuJJBy1bXAc z0$}{s-t^*VeEyd9km}(OIj&9`^z8$B9wvR}(6oS=8;`;!hiGg3VT*|G>`;{+%8zb= z&OD~+6MOMK_Hdis(O$cs+sfhkbhXJ<6Q)^uT9&UnUOq^5J{Geqy6~aKM6^_Nu3(hG zn~z*9GLLtMwBY8Vk(meCk=O~QC@1!C3D7}HKt3z43kT?8M@l&8_AcaOQNqFGP(vaT z!z_0_mIdvax9{y7O66U8v^B6%8jmJSp*(Bs(-@&Uv|Rb9jc&WQm*0#-3{4Q|P4Rq- z=>2~8aCEl8p=na4i*%nAUyKDp+V1Em=GlVxo_JoBBgmUXnbTzVluL!Sv`ZfChcT~c z+#MPnyl`EnXI_J&YXH)s$s=bP(?30n9StuZYI1NAp|XtTu0o0Z@$FmfL3`LaG`*ul zn)av)4wZ-mx_!r!=6vPY5_EXCt_eq`b}T-!!8qKC+!KzBWz1ah_Lkcx?p>6=28?Yq zt;L&@_TE<8wxPL4t0)Uuuvg=aG%b?34CpQ>YjQ5`IQUizVmrB5+}CwBa#7evQdBMu zg9>q8Wd7@Bdy{{t9a!((khO$iX*M!NUJ!~DvmVAY}Jug zb);1tX;nvB)wAJ9t2)xEj)<`WM!Yl7#XT1(%k#NhT$*vii!A3NWm}Ppk^=MBN?iU@iK{r* zR-L$-6IXZQ8ctl(iEAB=E9Wag_61HhM_SpDR(7P79cg7pTG^3ScBGXZX=O)R#gXRF zt2ojsj@Bdy{{t2)vgDpf~X)sa?pq*cB09BEZYTGf$Ob);1t zX*EZhW47i)Qqq}3d0HAh;_kydx4IVS3kw7Mg$?ntXU(&~=1x@Xss zR(GV;9cc|mnp0fEk=AgeH5_RTM_R*?)^MaXJT8v3h9j-%NOLZ2I?|esw5B7i=}2oj z(wdI6rX#KC@pGiL9BE!QM_S8~)^en^9BC~_TFa5va-_8!X{|hGUGa0@tkTsz7nyDY za&c+KaxOAm-g9xX3&=&KE4~v~apI~@T+NBAJ8=ysuIa?Ja&f#n%Ed6_@;N7NBNr$8 zf?Skb>eN%&5nFb|mL0KWM{L;PV|P(yHFIj)EsFwM_SF1R`bep zq}3d0HAh;_kydx4)g5V$*}5aG?ntXU(&~=1x@W_YR(GV;9cc|mTEmg%m}ofC8jiGv zBdy^`YdF#xo?S;;!;wZ`%Z%?Sd1`4o(wyR&jI?|esw5B7i>2YzSwH#?J zN1Au3Bdz5~YdO+djs8-Inr8re!2&!#LcFA057tfi{u90IOoJ|IC1%FWnbWA zt2l90C$8qi)t$J86W4U&T1Vr`jG zb5v}_5nFM@R`SZY9UWm6FU}ELal}>}u@y&b#SvS{i{*;1I?}3+w5lV`pPV|P(yETMnj@{|NUJ&09C|fJTFsGG^R9KI)f{OxM_SF1R(GV;9cgt(nnR`T zNUJ;2>W;L!SDquS?ntXU(i)Dmh9j-vNOR0K9BBw3Z{SewT*HZLI&rO|apiMPoFlF5NGm(i zyljrNvLmhRNGm(i%8sWHo8m2nq!gjKybM{Ly*TXn=%9kJECSgz!nBdz90t2xqYjx>jI&5>5~ z@;TCKj#FpJJRZow7Mg$?nra!)g5VdM_S#x){$0sq}3g14M$qTk=AgeH5_RU zm4+j&;Ye#Z(i&cQjI?|esw5B7?G23*cH63Y9M_SX7*7R&R(prwRmLsj@ zNNYLLJQI$zmLsj@NNYLLT8^|<-mWh9HE+4kMW)NW6Sv{Sm7TbX6Iac}$rd0NC1z_* zT-}LlIB`uUu5~o7e9nn;q?H|MWk*`sk>*|MNGm(i%8sQ?lIMOPPw5lVm>PV|P(y9*Usv|8Q#T~NhNUJ*1s*bd(Bdwa3#ygp# z-Ld9~tvOW;LABdy^`YdF#xjdgVFNT8^}qBdz5~YdO+djx^7#Bdz5~YdO+dj4fq}B4$cqemo zq}3g#dQC@K(~;Knu63lf9BC~_TFa5va-_8! zX)Q;ZN5zrWa-_8!X{~&Dy4*LsPYi0b);1tX;nvB&5>4fq}3d0HAh;_ z;a78{)f{PFHb+{`kydl0)g5VdM_S#HR(GV;9cgukbKQ}akK$>h?ntXU(&~9>ypuUP zi8LIs4M%Ll5!-OYHXN}HM{FanjOR>8Si_5R#5VF`xuTkmw5B7i=}2oj(wdI6rX#KC zNOLGR9cfK3pChg1NNYLLT8^}qBdz5~YdO+djx>*+Bdz5~Yvr%i<-X}H_qoV)xp(3= zoVcBO~;#+A=GagMaIBdzR6D?8H4jQ?lI5sMdw2C9G;z+AF(khNL&x9kb;z+AH(yETMsw1uH*sVI!s*bd( zBdzL4^NMq%RUK(HM_SF1R&%7)9BDO&OU;p1bEMTAY2Kxdw3;KW?ntXU(&~=1x+AUb zNUJ;i>W;L!BhAa^NUJ;28jiGvBdy^`YdF#xjJKPIMVV_JVQ1dX^p%z-pL%D zADfQYrX#lLh;2Gzn~vC~Bev;?ZRVBna^MJSdU1KNTq!L_TFa5va-_8!X)Q-u%aPV{ zq_rGr9%V;bE1yr7`u23#fhsraWyBd?!+~mxMnU+wg9;(k_{s+(#npsvLmhRNb{&T(khO$iX*M!lvi=2RUBy*M_R>^R&k_N z9BH0eM_Sd9R&}IR9cfj^M%9s4b);1tX;nvB)sg0zaHQ27X*EY$&5>4fq}3d|HAh;_ zkydl0)f{PFagMaQBdzX8t2@%_jX`+gp3{l{dca@z*}SbTj`9 z`DlE(wBMf6uc{6wr8D%Kf7e}$#22^eZ3;b#o!mrdYq* zljxU(tcmG0+(`5y4mU{EK7BBVreW}8N-1$`0c0DFhSz5^ zcAV`7%XcgC$T0FV+&nK4R?>D!31lVT+@7}a`ktd1N@*{-jo%J+G(Amz*>Im;U_tf0 zL$hMuO6g4RQfENF@?09@y(ec&^y}`J%Fj~wz`M$>OKIGt-f_#(UJ+G4Y7FD(#aXW? zO-H4@5xv=ioBUuXVd)|K`^l56HsZ_B?+zyY;ZCXw*|bg$=j+f5Bc{lTmR|ItG+$i3 zch$x+*Yb;=?yAAuMMr8HRpwMh+UyI|qg2VE{5%7UsFC^II1?J3Z5peiZh!l7X@b{v z%xRd#3mk3n3k~kH#0kBIj9VIms=qUA59ahA%S_#Z-aONzfkK^x^x;?Q(@`+za$$cP z_tMhKOV4}pGkHd!k;iVqaYN&QdhV^gi_tvAGb##0(#^JC)Lp1rP(zd{w?{mK;Uf#l zp{xc`aDD@KCf>JMJ`NzWx3{8wac)nQzlzCcm)$0vvvdZtknMN!m%z}GT?tu9`f16>#I6b@Z?ms;nx{T{vhX)vpWUN-5K&fujqJi%O~mnHRR!;d)*{SWOZG}9`` zB3{tDEXmv)@(#Z&mBv*11}?;L7Vy~a(^Rf^9ri+l{F+Xy<7khz4SjiY8?@|wVZf`)% zk?ujXIVQXP?dkB$@L=!kpg)=3aKjC=@K zb~--jZEj&Jes-IBOB$Af_NvrOw38Z+rm{zx()KA^4>$4BMOw0Zo15G{x(9oEmxUvi z)&7v?Oj=iIM!SeyH(I-*Xwlpmjr+Zc-VNN9N&pEw zg6LhEo=MMVVUrd+y!zww=EO zgD5I@$;yPSP$sfcy4auYV#=izfo@cIMA4waZjAS^G)3Swl%>&_UTh|r>GHwo zVsC=+DP`>TcW78nd0b%9T#&Lf7&vo(qr%SKB2^=}v`uecP1#0dvtF3i*O^<6SzXT{ zjr5cVoxOw>PH!4z-$WXD)r2@zc9(?3cN|p99Uj12w1?~UhBUJsjOo5m-u6VbjvIi% zsNF?JO=GcFJ;42_+}DD`eEZx5o=p=8-Qi=hz&x*IV86RZGbJlouo#*ws4LJP?HIP( z^nU8I=$)f|yrziW`FfdB(s_K`yZwMRgC$-q#6*eSU515eo8I?=3#hYDw<1E-(nXpC zO0>j4v)rts+ilZCi^ZTs_u*~q5Bk1o)f)~8!|xhj38LXCih zeo>0gx?r?=MZOL#A)Ow_H?@UMlrP8>g(rZlu>&-AFGax{+TFbUnZC z>Av^9{`&jMd)qb-ZqoOb-W0z+NM8MP)8yQ>*WO6)fsC&{bK?z9x$bHAEs?v^V&n}* Zn^P%>-g`vJ5%ZyOQ{{v<5g6aSO literal 166388 zcmeHw2b?QOasKiQ_JOet7#o~G1j9Rg+&!(NUFmE?14l9(=?JzlELutXR=izlPtv|% z^Ecz1ZJcw?Ip>6P&N=6tvvInAeP4G^_3V^%%W8J-aj1XWGhLy(x~r;tdTM4zpLEx2 z-f*9_wY77SA1e934$iH8g5cgx%6B}y_T1s<@M`V$asO~{0G4-<4E7r&BfYic(Z%8D z>Q?vSU^Kg*fc2X%+-5aYf_pgZpb z#NY~=KzE?esq}g_hIFWIGU#32+Miwo{EmSN7?mOK;$YUD%_acRz|?~%!XCb}fS@|z z9Ush~4JeTv3w?(gU@Xx@AKVX?EKLbFGgd{4}P5h4ez z&BkczZ9yDPXM+(~ksut}j8>J=+=*&vraKjT4#ga(3SFvkfT3}~i*6i_hF7=HV^l=% z`-AChGQI{7mP}Lw(LpsRLUFModNCN?c{n&6poqrVFh!wNB#1+Akdb!!5CG_KI)F5%a35v#fycj2)67d4jA5CVfNm2cz z!2JbMTe78hxnCPhhO0f%Dcl>ytM1c}sJ?r3y|r@n>Rml<`QPV=zE|o#m0SO)?sZW& zwwuUEv%}Gwq<15Rf-y+wrQ6%xV)OuE2kcvuumf%tjuDYLlY8c90@yb-!D0XGVrYxE z^$5M7XL*3^UUjDx?{Zr*LhItXGu+s?UN7djS7{&NPo$ShPPM*|jao zhcv_!lTiQSWePDw#_{uz$-!iJ`OWVxEpAz#Bl<|E)MPwe1-(z<76EersUaCV24o~W zTN+GY4Metw`v-%`bUczrDDY}9G5ozVn8a;Hue-O0$$&=~vOC$5XF#*T)!EkmMY0HX z?H0*s4H@ZR;Hv}1lb;xXhg3{eWTfrAOItg`y#bmAt@Jn!gFrw0V;!tt=*i&fpm%up zkKj-d4_go=Mnl+z9gYAMW-MC7)%HqvCVR6hLs{HKC;Q+=WWldGcrrGf#{PR&gg>W? z*HlpPSPnhjAM@!V9yFjPdW5xMGQg8HXb77b-|}=Dk}yj=ygxqlk3MnBO%%q4#?9ww zAmAY!tBv^}4QuOI9&mz$E!~}m<5_pihlse=O|Nth#(Y>O0GG~m0q*Ti-lWWgr62v5 z=f#t22jk&r_9kLDm;%>|;NV-Mv48BetU<9=PUqd8JT_U)yX$7&#e1z+ikZ?&<7j6U zJUhiJ<9mp@F|&}74!U?X1WN@lJLAcf?xeppKIBUcxMb|?jjsU4;)_cgUcErsFX_F@ zup^fBSamqU#KXlcf5ibUqY9fEa{U#ESGCmgs|RPN_Bsg+lwRE4l-9x3g)Qt^8B znAhOx_d=6EAQOQWuzkd2AB>@k-;T64;L+o<|?icntB31{3G>7YC5?Z!vMj}naa-h`~L z{bBcdu{hRd^wLKX-yGiFLX-drp@;Mak#7^p+p&W)e4Pl_LiFLpZ%o50X}+_4LHelo zpX$Q-$S_8X6Dcm76S*z9Uc#tvzSHQv#UfZQk&%X@o#AM>-5vF}WJ`E3p3Jc20Cm4R zlK*GenjUV81>*}$w+bQM`Q^s#?{`-h#p*AL*rOwDNlx{C8Mogng;%d|Eb&O#M_`pe zM#4S#^qTzB2meV1H&*#Sb^t&%2CU^>2~^?TUGZOSu=eYF`+%@4hj%N`25!#ShJ@i! zpOX+_b@2Ml3&Z6Ad2cw%gYFQ?pgY>YwkMC~LO^4d+%!! zabJs#L%au*&v<6ofsZep@)#O+udUX z!#}h_Yv>)uEB&3!fCg)*DNhNf<2?prFz|qtuAuWskczIyoA9YT)06+DyM}g9qc`3^ zz@BD*u)jT+U{vTt#LE9sO~8r1Mx3`RIs_SVZxUiJkbs``b_cSohsT%D0`)$Sr+$JL z^~%2kaTMUc+}#`Y<)Ns5{sLxbGD->y06Ii_4Q67DJv0ZEKs8$j<#ya z{C{CS;NI;{_>i5?h2?4d?x1@BtK&urEgw$gK|FUC*o_NjXX@7zOy76&C<&H$96E@{ z`qGKvXcy}RuCV=U^1M0z>mb_3@Dzh32(w(`!IwbA+93U$%6kR!uZF-NIyM@2u`V1= z1{fL_)ZxWT!@WI#kSj7rhkN{gVMJG?r+%cM7Z2Y*U0EPnWSmLZpB> z86y?;gNwubU!R2x5OPuDKt|IWV9AS5sb%T+|HzA3<2w>G@(4kob=d@|($Gl^pv&Rl zqRlrW2K!J3(gn%r7c!Dqyt_Tzlk37d%#2QKAM8YqfvmDux|arr2N)Xq#kHJ|{N>su z4l)^FR8aeVx3@LEJebIT*>VIh4shN6{*c6;=MEQ?0|C(^2-uN- zq#jH#c4%2HrCYf6V}`&Cfbn{oT-bJo{6}w4hwxMW^ZX!(iNa^8%koP*I9Snmp z3&HrU0xHp01cR;Y7&?T$`bTt#nT0D7`-h&Q$8c86S7;9vcOOu;SAd? zpfH2c9Y0af5LP2!7aNbscn@Yo3(y<93B%_i1Z5AV<3o8`gf4MIuq&E{(vZ*^hKr1} zGu#=k-r~4^-kyT}k@}L;J;c@P=8bvG0(z({UZ?rV2&@EHF5)_RDiP5*Enaj)-SS@i zYJ)5*TeXi$wtsMW6|g;pt2FNHkvfu7 zjptWs*^V;whKKIg$@+D#y8S{l1?fqWF)(DL5UYu|fbp>wLuq`hg^FNK9$6vW;U8In zfU5F2)$kkGsTe?pi(8qo(Qf*JX8G@@o`MgqS3_&>e4 zRr~3kSH36;|PlW2z&0lvk z9?7$M`A-K-AWVeSzs=sG|2B(gKGJ(h#tMdvl)U|S5ZHwC*belTN7a-u3b} z^u1~_#oYt82k8^%{&14aBCIZ;PWA(G1KU{!th8&Y>0z#!|2={Z#|0g>3z>~qgJk;F6zp_Fu)(Jls5PQFye@;gyv774l`)mL( z9)wK>@>YsG496g`-t!UdlK;GpQTr#t__qM)3vss7`&ag8Z^*=5bi9+6r*0@>XmK}k zHs6khCqc5l7lu~`kTxWzD?q%Y%DxDn9Uo6t`e`AtEb zkv(Y~^B);WUgyBP;O2fJuN=nL6u~bW8~+hyEKRr_00Ju;W)rTZfc=UL4m2sR5Xozc zhog9d@O;6gvuil%uim9U1@p%J%=3=ud(vNp?oUD8(Y>E0>P~MCroGwq@U-qH z^Y}(hHNRL9w^ebwAi)c)RoFq8AK$@F2e)kgM=at+ep4{%G88ZJa+ZI7mTssjC4s}y&K3=E&o~>_VJ+j>j)pK$h&e=pmB+j7xe_nUme7|EJ!bxoEmgE z7!2AM*6Xe2YP(kb<{@s^o_R#;GJWLB2`i0PukpBD!wn&>?eY3P-MxqYu?CASI)OzO z=i<#&>>jvkAmo{jFWDHr5xc;+I=xDal5QF<^;XxeQ`q<6nuTn{gu8? z(Y>RtaYmBIs;lL@`qd=H=J75CR+hNB$OUxBf4&5R|HwuBo+3ge$N#<}rYssAT$Ft{ zA5&seI2;j-!Tv=bU&Mk?`1m3!{QLng=7YjGlBlN9$dw+Ry-SHwpa!`}Xz{i7u4>C`uqaV6UpVd)&1 z?yvrJ;1rf5*b^B$hBzrgKw#no7n6$xIj7}_PH}O|0-F5)zkJASi*11?%79EH$D==_ z<%mvkcM1|2b2QG`7@1G`?C+PJIvdFK1@x5kW70i!QjsX)oaF@Af2=MmDSv^Mv-tQ?!QN0N#b1$A(pbp_8L8 zF*~UgQ|#6=1u?H73Bt&?XejSl3)uE9?|Y`<0;UlJVikGJA|`ne-g6zj6L3;1CNYr= z5L&n-d0yuy2huAjetiLx%z~&0IPtu;CiT{ubCk7%} zNB3;b^YZ8?VPD>pleMJp*W@P%WnMr0DiWs`l(@oaz|Vck5&oMN@%u|nZ!#XedMrB|7zyFzc|AWe z@AEww>fyiO?yg>Np1dCX=cxdtPtS4UnH(@B+L{ zHLpe-cj&+0JNc?uTk)KGZdJS;bSR(Zn(j*HWck8+-B?iJaKv>|zKa@P4)b<@p9OUe z##4EP@9NgRe7Q`vAM`8SO3&+5h9usxY`Quy+x`*=Xihe%Hr380PPYJcr z0+Qp=AMo9@si+8ib;myA_7_S`Vlsf+-5v>0iXN?r{A%>U;z^>;x{ADSi~jEhm0J1miJh|=ADRpDeR}_ z4S@G=Z0vapxF)+J+5fY#(IPf1pyYb`0-_8mOmSJbQ+`%;Ylb@`go5TZnJ%OG zijM8W#RZjkg*uS+a45bFH-Ohb!n~Oa8dAS2|7FIX4#j+5RKrv8lHNtkatOd=TU^Bn zhde15_E81f%lDUzDp9_Za!lssfcM4cg=JnX@BjX)f#vXpcgxGo2OlZze0DsBNU zz7#sTCesE!w!eVUE81_#X_buy%)`l@+w$Gik^DRwd+^>1ctsy#66pand|?5jykLT# zIQEP$Tfm5UlgE^ve>aQ_e_?Y8yB)Qe3phDR!u1e0Pl#E-qcPJ^b5X5mOYa-F!XpD4 zDNf2UrL&)Y8VT5W#S9!4OT526?e1@P^T@~)q}VRxfCcy3+{ej=I%fbA+C!RN0OU}N z2@y%jSUwPOMCvsz0Q;QKe6Qi*-wCbsHX9efUXzT}Yt+I1TxBQxyUJb%`=h`ssn=Ks z`|Zk3`1h2ZUkQFRnZe!w`}35Y@b4=-;pZ#832BeXt2a^o50sto3zWSD_Q&SzEwKNg zvJ-xxvTuML(-*1N*Z}(t@t!$C;ThQPOIWVg4A25)oxRE!oRBQ4GayTPo&;Dt@d{DRAobR1wPz|j;onep8XemMq~1EM_AF&5{F};7qsJE*d+W5?vz49j zZz(&Cj=&yLZ=F_rA7v-}+saO>;sS`&tJA8RIlG5{B4@ADs<@6I_3E@@TiFT!q_Weh zxI!TH>a=1<*$MxYveT-##3J?TwBoJGPWY#lomNHU38`1772i|Y3IB|;)2eh%S?RRf4=A1RElQ`Meo*Ozx%{I$jSIBQ z>y=KpuJvh(A5uEub){4HKdf}Z4W(1rKcaNPO{G)2KdN-XEu~YPKc;lT8%n3Xeq8B< zr#XF-ZvRXwU&gyhb-o4G6iK~J56_gHZvQM#7CNh}7Gl75_`w313onS`~47q}~Rt_}|J-cu(1B zRYzv9(~AG2?1cA~omPEH&Q2@-ud)*!DLbwD)SR7G{6A$UJXUsE^=Uaft$3HR6FyLO zTJ^S^omPzZkiE?f!gne=t@!kuomRY0ZnX`<6J@6rpOLfEiszJ_@K(;=qE#D_y+y13 zL*91}ze?F@Rov1c^;)#zKPo%nuCmjrh$bNQTD0OnDLdh9Wv5kf$Ai>s(Te}9?1X#D zPOBo|kJM|?ivObQg!{@)tF}G2u+xhFs_cXZ%1)~ye2>&?(Te}3?1XoeomR!;Xrx|? zR{VEmCwx)aX;lQnka{gz@jsNE@UF7cs(7}D)N9d-|EcVRUy`#oY1JD&_gb$>tNvNe z?%|gzJFWVJoSjzub7d#|GG(V#5iUdOHEG4aP{z6Mng})2g_wN9r|c#lKN@!XKdQv?^|wk$O#9@o$x# z@GF#^R;_z(VW$=UPT2{+QrT(M^_-nn{Cj05{82f3hh}_OK9@VRGGhNoJx~5veU|V zy8x-zA^GE#oo0JiWv7*2MP{&*{0YiVv%QZ>Q|E>K!>d$(gd#Y!6a)S{2U(ka}&BKSbGSwg)Rat@;wrE$k$JsIt>+4^ehn z^`$vG$seZdG~3%NJFSY46jHBE@`o!s&Gt}br&ZtAa|=7kAEE3t+dC*bt%@gzNWC`6 zAF1p#+dC>dt%^u1Qm;+&UwBAvBz@TCN}S6Z9{x+E(@s~FPWZ2sPQzSNI^n-oIxX>m zN+3W=bdgXG*8O4wX*$&y`MnT~<2bU&-k{6w%A+9{yFOQ(t|h6aF=& zQ(pt66aICjQ(rquC;S^qr@k&Ko$zleo%-5UI^o|^I`uVFI^o||I`#Exr4#-grBh#* zlur0}l}>%_DV^|7<#d0~|9&~$!#}Nb>g)ZLPWWe(PJO*x>4bk)>D1Q;D4p=nDV_Ry zh0+QCywa(!S1O(GFDRY*+EO~g%(WPWS;zr@lT%>4e`}>D1TfDxL5Hl}>$qp3(`wjnb*F z&sRF(w^cgz^#w{N{NK5M`Wx4e%jq8eAEi@YAFp)6|EqNB>l2ht`2UnneSMg$t~PIxWvzrXu@ozkhl`zW3I`edaOKBsi*>r<3Y_$`!9eSNCZ3Ex-g)Yqpeo$x>9 z{r9(sACl8O{Lf0KzCKjxg#Sh9)Ype8o$$XZo%;H4r4#-)rBh!Yp>)Fku5{|_Bb840 zKa@^=eU#D(|EJQaua8zb;WsFq`uZ596aFuyQ(qsebi$9x_3LlOzBQ+N__0c-zP?TA zgx_81)YrEwo$%w7PJMlc(g{Ca>D1SEDxL6orBh$urF6nKDxLcJZlx1`g3_t4?@>D8 z_fR_Z^}R|be3R0tukTYj;djdE{g(&3PWTZ@r@p>H>4YDtbn5FHl}@;(bn5Gylur0jN~gZQS?Poyt#s<^Ta?~G zF_71Kyr=xI=&f~s_wn|TyXE08jW;u$#s!c9Sss`m&ivt8oA5)mHsLSR+Jrws`Pac3 z$Z{`)*4{yD6aI3oP52|Vb_1-agVdv4-cf54{tB&4_@g|t^t{mo>-{23t36C>6aGrA zP57fDcfHX9>sv;cHhs9(Cj3=eoAAd(?z(><{Z7iif#O?5Iz8a4wKn08jnuk-KK;&G zdlSVQBAx#6HCmhS$3<%0Kdyckt=&fP{*g}a`C6?__~RqB?w?-2tJbDBJs{HQYhS0e z315rUy1zHOe_q?epPlo2_yd)n{_+6jC;U0ePxynBpC0no%1`)nm7nlyl%GEFK;npYRtbKjGIZKP~-s%1`(Um7j2?{Iu&4QGQzU!OBngiqWrYqTPZ)`&s2WGSCyakyFvL0 zf0ptS9_0M~-uB;e`+E2za()l*C_nA@@5)d3BbA@y)4NdoSfD z{IkkW`0JIQ_Iq#TC;W5DPxu>@pZ0r_@)Q1fb&iQ?8pq}%4_=j?S4}XdB(|+8f2~M7D68>T3C;X+#Py2CO=J^T#i1HKuGUccJ zxDoUGgnv}|34gir(|+7~d49q_ru>AzLiuSwZmv8(;U8Ci!e6QUv>&%qo}chfC_mw^ zQhwTx8z|3D_$QU0@K-B8?Z+*X=O_GA%1`)fl%MvyRqaLir$J&1Sc;V5PrS#6aIvp-^W(oEpOk$U!U`P_!E_%_Irf#6aEI}C;UmuPy0Pm z`3Zlc@)LfY^3#4bda&hO#ZD?jb`0_7+Chssa*hm@c8d!h0Z{v+il{KLvm`@Kl{3IDP36aEq9r~U3w ze!_pE{Dgm0`DwowD?i~sRer)hru?+uOO&7RpD91#A6I_b@1@F5_|KJ}@J}c|?e{X} zC;S)6PxvR5pZ0rS3@PWYRZPWwDX>4d*U>9ogFl}`9ul}`OXP3eTcP3hG4ZAvHn?MkP9 zpRRPm-=TEs^BGDf{GCdt{+_9H!r!HI>g!ob?;!s6zY(rq@ByGN&ntMi6&c#=7f|8< zA}kfC!LQH?gf}8Xd%cbdcSTq#P^Dj~6$tYM5Mk`K*Vj=YMiu47eg8iYU!@hObG`!N zD-ix_rBmm8=fl$pe~r?q^IKz&+Wx;FzE$JhYMOZ3O=bx_? z2tP40wCl9NzeiXqP{&`O6$sxP8QS#*jP@T9mI_q*7itBye>d-$aG~j<8gq;l5NW z5Nj+B)TJ}@4 z0^vtThV}(o`fnmE6=>N{)e3|k6B*=ZTrh^ejj&XpWj{?T5PocAXkVbE|1QE(ftLMr ztw8wQBSZTFE&cZqmI}1&XJ`e&kBbcL3$*k&nGPEzy(*G1;sX)tqwpJi~V`OMwpr!vg!cu{j{T!`8_z97r?diXf(|z3LVovw) zZz`R3+*LZ^-%>iwHdH#{-&Q)U^lGIO{vD;$D3_E@_;-~~8|*2a@b4*|D&JQ+;ony} zH9S%};XhD16*^Wr;XhP5^>?6j!atYOeO%-fIo-oQuXO6`l}ac43reTHwv4bkq>D1TDl}`9)l}>$qfYJ$ncTV^B_0P`f9{wJsQ(y0+ zbi&`Obn5FlN+k0i{!4&r>?#A5=Q^^?aohe!bGEuNNqt z@DC}S`g)<#3IDLtsjn9)o$%k}bbsIcK{?&Sf2(xr>orOz{C7&HzW$%m3IDy)sjm-K zI^lm%I`#Ehr4#-~rBh#-(h2{Q(y6ZxQ99v&Ryy_dp-LzGFG{DrK1}I^|5fSK*M}>e z@E_%Le_wiMPWSL1E1mk9D4p=1D4qJ6DxL73DxLb8DV^}2DV_Q{R65~5S331|S?PrT zLh01k6{QpYOQlm^SCvlquar)GT~j*Yzg9Z+^?^$7fE2S7<0H--hg(YI(8QXPGIE6D z8Mrh#0W!&;JIPGakPF3l0v+!Y+_82;Ep5vQF2eB)T$-E!nPkwNWTv~35!rA?y_lt1 zF3(9BIm(S^;L_v-$RvaABr^%%LNT5|uXK!eBO}WF7a0^}Be{?x9M8a~$q9fQ>Cyy~ z3+H$OJ-k(NL*xYya)jdWZZGv4dD|S<#EJD&|aFH0LaIY0r}vIyr_p9 z;aCDLO-=x0<-4yy9>+pBfR5XTOmgIPQbvw&ECH7$CjheY`S)jlOVd#qfL+M3Zaf2@ zCYJzd8EDjb8_6#_cLU2+w)=2t_qB58nfA*GF2eB)T$-E!$dMjPz@-Uv%)6JZ-4I{X zd!uyXr0#KLytaM*gCj5MrFB!hkn-fDgdFLy1YDXxKZ|i-KEL+X^XFoJoWRHtj%VP~ zEz@^CvfE?*k!gev z;dllvO-=yhNS9(wGI2P^1UhV9kv(c?*Wr+)D5E03s-bCzLy{l^_KjGBEESB02WQNf|l9@eEv=oB+s?F2$PUx#M^fvbmc#jyExz z&mG5E+5EKUV1?tLA5&p4en{}`3g=*kW*rVmiZUvi9~qicJOiI5CqO0{bQjKYGG%z*U8|*SrFBv~ z+K9#o`f(hKWGpid7i7rEr*pQhFpjF$l1$oilG7CJfg2!{kzB|Tj%VQ0w8=OOq1-Int%LwpO!cEMs#g z%@$;2wv0;cF-Jx^4)n=|9Qzl~z^BP2Kw1VGbsj1C;WuRYIGw=AvAuW(E=^7V<@U5BOK4brO649Ne10XPUGnU<_Yvl$FX+K90%?*&q+@E z>k>G{3p!6uO30BeMWhEgp7a2E>Pw)wkYn9=20l$r0OUxQA~(y91wDXXsjg(fwPaK} z4!MR}GAbR%92wP)W6hoZIBXf!j^jb5J*t(lR)d(s5)`7yWdS*+?t{4ypQatj*oy#&N_xIq3t+Nb&3l=^=&FGB{Aj$4n}D4u~er zYk0MGw%6KfW!P(Nl`?Q&=Af}8!5;8eA>22$rxR3!;~BU#IRP@spgYMm$w-bzJ%C>2 zT3eI$oa8h?M%bG!{Z1X*J!i|PavW=OWMGe5RlF^eww&ZNMSGlcH=M}kP8vfSNjm2e z0L3Vys@NnJ4NFFq^JAWjs_r>zP>dwUqaLc(mAKWZ%fK4$bO zmGq#7GLj29!to4znw$WcWYC@DMKY?hxpY)SImu~4AEFl1{yM=&IG%w^lM^7547!sX zFWf8x4heLO1N(-wEtkM4UeI}RQbLY&DN1tYI3NRKiM)=S3a5A><;h7YlMK3(yjH^@ zlzov$(3jbBW>Wt+GE$pIei!P>sW3jkF}YZfb6N%(?LhxHpp4`~j&M8!pC%^&a-_%B zflCwU&`&l0H{#f|KeEU}lu^z9jri8*$vEwCz|PhD-^e{X4y?7+{NKnuJB|l(9F@eT zcnjl4BaMa>efOmAm1fco+HjKN1ZNp=NKwW~|NkYEcJ5BbIpM)Pf0$(WFwUrhc zJOiI5CjfG!OOYE|$ATU}hb&38$m;|^j&M8!mnJ6wa->T!?;pxBf$pz?YfHzE&V@!@ zY&@JH1G<7Fl#yM?C?mzQBcz8EPRrmxogkC{w^e1kc>eu}@cg^VcF|ua8EsbCE^PRS z*ZKS4D%-_%6ShN}NG{|E$20J0asp(MV_yQu`clpl=xG16?-?tU!6CbR1ik>|GV>^t z`nj&SS@F8|t@~rtRb{b7aYmO4kTPUo&5>h~|be=#Dx;jzZ z&q@8`$e^wgUerU5b>kVhG&uo~BVCFMug%r$D;LW+>Gl7(|D8*b<4@~GT>zIR zCqO0{bSIfWECUV+blCi)ae_?h9#_Umb#+`B(A7y}5yzDQU7hwgmWg*b>0k5-DPrC8 z_6HCW=wWTIV4km?L$eNtBqcJI-iM*tOtO=lCdi=8Z>!|_R}F1D9FhbX%h=pWeYBA$ z(U!{rUx+eJItS6-ab=v;caJM$nK^h|8E0XS3g_U$Yg9${z%-xhS0|N`Nt^I1CpmhU zFB8GTvc8*1E60^_+T&Qpcdw^$oQ3Z$Bcq@zCk`OV@u&y*#4<9_9@+@$ROVnNjpx4W zyrgjQfE+|xCcQtdU!C?is#~w->uTk@{vK0p?(dMD_(7VMor9S)b{rYY z_^t~wYD!*DZj;hwHMKbW+Ot^L&vl9q8!to4Tnw$X0kuJr#^JAHDWI=|LbG(qV z3^*k8VHp`t>K|tu%dG8LkO5hX#!;D!5U8d+$P5YNJPR3kZ{VR7d~2{4`t8Cwo-hvY zyIF2K@E}K9#xrnfasnVndQHkmjz>L28MuN)Uhp7CIG%w^lM?_r(xteXAEE>#$D1=#nx{_^c?C`nf&MvJXiD%%_1Uwq3NltmP06RHLT3W_Cv6&m_c#z{ljxysJ z_%yi$NXtN@&V5mMP*FclP_eyu1};rb0OUxoNg2uUs0YyblOZ+bb%H~Vb>kVhG&un> z$)G#QL5-%2>ej(?l;n8S1N!hJ$xoJ?_SYqFiWhXAoRp9wU5Zq^V?hs~V{TWpPnauX z8C^N)-*LuK;r-d%ad=DlcO9i$)N$Is*iYcn+US-l>^wUX}RKvmHkfgI3M}_mehVDBYlCJg1D7TzKqeV$5GM2IVab=vvIF^x-i49;6jE56hjt<2nfxgT>F_Zc#gWE(? zMs?#@ETfuz`(hbY-A7?IJJDa7pvz@+<)l8^&{VyQOd7vlY`)C?>UtVSb?ep2cccG1 z@zXRp0W!(zyQ_D6j;||d&%S;vvtDJ=rrM(>(0myuUE4EhQ)K|EUWSu4qb_SwMshsr z0rX{bh4zjkW0^JaxH76*uWB+TB*&v3FwWIGK3*@;=AsfV?oQRj(z1S)Nh@f>NsfkK z8E{CI%HS%Ti;5!Hhh^qRCN1UTSRiBdj?eM^YMFUnu!j@lNOC;t0rpx(2HHa#A>B*n zhaZxQqYCG0=ip))C%x99&&RRHGB(eG49JQO#WLWKR(|DGlZif{3ny6;P2*V91CZ6N zyYpo%voFb{kI6Xhi{3jNk_38nv5br@J0A5=v91=bSF3k?3O1jstJOO`elEZ_k>c4A z(gX14B-bRTJXwI9oF##!G`C#9#d`4!e42p29^diFq+jTplZ=D~#G#NR&?{V{=E_*+ z{hLhs7{}qHjO2LK1L#=KPkIf{r0#KKRHZ8?@{k;ldO#nl+9$-e<2g!!jB^A|_Wn&K zb)&A(3>GPeLXtpV=KAWSKH3Or?mD=Pj7%EWaX5H+ks_6)VqtPAIOf{bO>M6`FDaa6Tl)kGeW<53Uj!|M5v z*GsgAsO0qT4VQM(3g>c_RvO1_mcVHhved@!WrYNZVoP%anfro`g|OFEMxO5$bhWqP%Hxu zY2{a5HJRuGx^R*u(KL=lJpg$YeznZLB$GZS<5)c(3g&a+98Z8V$%(G!u8FY6>VLqG zrz^~l(|%sJ`X6vna!4)~!WsU|N&hDEKj3R?HR-dHoFxT-%4(iLp)JSu^bqYKW2~W!cJOiI5 zCqO0{bSD{Uo($Lnw6rakz$sqPd2&)hj&vy!;aJcE=&;90Wn@wpZ8*vPke`5I0v-2& zxG={4I4L7XIG%w^lM?_r(xrHhJ|9}fcdw^$RJZ@+RU(=m=3#=pxRzA%eIRbBOc~XU zW3h~ruDee3puW3U#!2HaMHwP+?cVUL;B<7AiFRNQCwb8`sOqkR_v|>TTdz)M9I%7V z57^}1;JeuQL?2_32aL12^=iJ1Wqj939}|1f=)k3^+Hp8G?T;#@S{b#4GETa-XVNPA z=_D_Te=oCdN88aJH7O%G9`&%SuF&3bWK`u>wa|6QO%wW1)p}J64ZCoTC&*Ym=kh)j zZ7wP~{dw-Z1;WV#azr1hTN5+3>v+_|S;<&E=Q_S$Ei=zEF)eKBB*(>&WxyeUzKjef z_0dL1_mcVHhved@!nxY{u~^1QueIp&aqO{-&9fi_vQ~bj`lddhlaQR8Gs&=rlPrm* zaV+ZLto&-3eMu(WO~%1shSMRi1Uh9@63fWgrsGi$73*r@dUe{*RiLZYbFPA4-J|wc zJ?GMS=CsHX<{c;f37>OiQa@Qg*p?Gqn)3BSw%I5nxsW3q&%me236Mz!-AP75e;o=* z0==qdP%g9^&jDl~mbsVBq@g&D*mgV%i3#+o)^q2ZG<8+gK4FoJbCh4rGbk(|Q5Kt( z19Y{_y%X9)8zC)RqfQ!|&ZO~Z^Ed(*1jf^{_>x+xy(JL!Ue$e6Ei~)GIi8{nTwP*+z=Is&cm^&_P5|Ucm*QN% zT4tVSL57oaR1(X8LqZ>xk>RBNamG>Ebr1q2IUeyRgUV*?+<2b9II5`O)78c7lVgkmA`9(gWa3GU!gSq`5NA!XB$<|K12V zIxVsU8*$Q~@Yz4wi+)g(GLqv_51?1~JI8BlHEGXDP7`EQxDL*hQPuke==;291(*{j z-6v#H7rJngk><&$Qdje2RJIpcFphH^Wi{^?WYU&ndwPH_tF%XIndFa>oTjss zQPrC0WB|x%I;(M1x$Zg{0CJiz4$cp`sH2SJLXL1e1D_@*0CJ>Dajx%Hww6GkB*&v3 z(1&GYpuOXaW0`rL1sRYP2f#AmkkE(9WJp`5v0i1;F8b*tBh8bsOnfhsc2gPi_6*C! z_m0W{>?Eft+M}wqBpp+f6J=Dhwior5%2;N8WYSRD_j3X}$!P+;%4_W+8Sn?lLvkTU zIG%w|lM^7547!tybQ&_8v>W^2cho8mGLb-su4LKGd7YGzW8HWLE=^8=Ofu+BGLtmq zLNT5|_iITt-&?^%zo%qCSLY#o>5AF~q}IqD#uflHGUAd`F?8Ozw?xH76+uU5W$e4Are5PghA z9#FqJo6ncAjPE+>V;rXxX>{PyRP8t%oAyVQQmu^ILK!Dr+cRku{dAK3tdC_Pc!=XT zsSGErpbexNkMm_zas5~%qbk2zB%`YJYLSf9J8<5IqF;$yo&G#`B1MwpQ4eu`oYZ$S zX$oyP$#*vgPg}+^F*5W&+M_0AB*&v3KwlnuUC$vuQdSW%i$$^z}I7IL9$n@(x@EnU3x00ez_OnvtPpheML0jMui$e=y2OF60Qu zGw^A00%Vdwcao9Pvd4H_h5P8aGAgzCeRWLfI55w#1x|J11QX$S1};rbfJ|~hKZ0ej2%8HWqwkW)za2H%ZW(Ksf5 zhP|p=ujb2G#&@0c5&aB_Mt2bk=W55{TR&YHHTHa-jFYbInY5~N5KvrKSmYt<>ZCH9 zv=Z%6V~g`;RB`=SB%><7S|p>Y^=grf)pJ1aL(#9qtxkWQJCP#E@u-J5KThhqnKXqq zoMeA>k7XiwI4c>e=YYret7YbSCRWXD?r37uua=R4W+5Y_d&&IpLvnFc;au(fSS+K8 z>!5Udu058qc_t07{7U^k`o9ysq{#`8NzQc@ssNv+v+}ED_9dBgI2i}SR4yGvpi{=` zIbf=*xpNS@TKx`2!LR1(3ipGj{akkSEexH|PKzvI?sL+=34IF#n;rQpB#fiNb&vvF zL4x<^)pNkowQp^$X4|8(y$I|uN5(nOWL1X!kzB|Tj%VQ0lRN46amIo5>SgCn_B`{rGM0(A z9#=+n^BfYZw|ORQoE|ecB zXOxj+pCT`CndAun?_EFef2a<;Z>HEU;E`iHd2`}6oK!g~c7{hT*mbl=jCji0Aa z_TFk|UVq+L{9SYOGpC(kFc-!a?H9UP9`C&V&%@7YU*-cTN9Dfp_&MX6+x}esd3K-E zPrDs95_E~NMSX^8TGpqZz9qbGz3eCR@bmN*&^fnLwWNN3ZpLzVaPFVW%v!&e50=tmpf^DL_(0s|?PFruQ_Pryl^l&zMc%&C| zY(G!uX{gG&^U6*LaZbI(+6!3(E+!WXa-LUCSe7bczxV*jv);khblkf%n4vo{%cgj3 ze|quG2;+QC@=ia+Ailai8TKy@j3#hna4;G72Gi+!S_wk;_IgH*hYDphnC%Tmm$rrn z8#`AFp0^gB;bHHxL3*%|4oAbQTm6fZ?!LkB_DTC!cP4ko(jQG`Ml0`_v~qDU8cc@P zSkTYz)%BLq02DBvGCLg2sdL!3EQS9OiAviUZg1_4$CnN*M%?6V?;Q?icu7 zN9t!XN&CaDRq-KGkxoCIO$Mgdr{X8$!t81)avlfr_K&Yekr zziW&EZ-HEff(;sM1uajnO=pAsbeO0$>0TLHE(@(pi|jOFsS&u&bkIAT3}*!$!e3{@ z1ItIyqv63-qp!FL3kz4;QMA?T9(1>ddm^Q@qzP&3a5|WbrfDTa$aaQ1W7B!BniCpT zWFD72H8tdL+M5my9%%F6;9zWxD|M*pKvvm9iwnctKiHcZjXz9Cy3|YtSGs$91{(%I zH#j=2FiX0#{e#PvJ>E5G9D|!px}zz)(2xKNiK;ITdxa?qcae)$s(&nc-GhU@!K^DQ zPFbfIZFeg8VRtqhkJ75%-oqWE*4s+0sEBf#@T~4=JlYx_T|;nxlT5RNBQu^A_pDit zk@bg#l@%!Q?6k*ty)SmFHy(`!z1etTbU)Z(YT5zqZXfKV?Lrg7N#C0D=<=j*ISVRH zdoycVr~Q=vikr*^RzIQUOERMd;$>xP<8nV73-AQ1&M>9<$=JHkW0=$3!b*g( z=mbBi0HLfK6CA_r_sl&M+Pl=Vguk0mqM_N`YDL6xW^1 zETg}J?*li1y~(wM+1L<^j!Mf{ON;%mw{LkIIy2q3mK|(rarFpRm;jEQxMBc(FJLSO*tz-$7Y%i@JPgA;$&D`^9wDl?|2bypHU9(T$7KDSfoq2Apbd z-0Q+3sd8Z3-f(AH#NtZV-|fldFEA55o*w1Kw1DRoc(Iv1%82?G2eX-IDeVL5?_J(6 zBS%LYKyPt%E3$h393SZbTAdsmX_c4oYo!qYEjxsx;;`0lcjdlg;&)Odt$l3 zRsGsNonGmO!K6fVM<+v}VO+tZy8XE~o7XjLrR}aAjwS1?km3`jTt^Kat{~cLXQ~JTMhv-FNu;_%J zyK@W!2EUrkVSu_OyRrcoOpXo!!k;&oT^Ua<-QFFE9*%U5>Xb>}J(Qq{_n9Nh0v2?{ zOQuJ<9q~sc0^hqRDm}svw}3NGWckFs&k#2xTmA8VcUZVDLH%$MDyRv|tOQ_+y5m(v zMqR{Wm4yo*F(%Mn(S?T52KOWdESM*|Be@P2&|u~yD`BTtq73ZO7BCLE1Qc0$T{wh` zm0CFL4=xw6XyI^r#E?K@nicBfvJhSK&i#u=sN9MsJBECgrn3o4C|8XGnIjSkEVK`8 z^t*%o;+-W1BMZdQ+hd>)hW(>x-S@~c>6eSJ{Yn>WTp+yd%CnfO1^1k##guzTzoz+3 zRiXPBTX4y;AEy0E=G~Fm!3)!p2C?-DxW?$}++wRmgV-QVu!yVF9b32lJ|do}K_TMSjpxXnfZ=c^V1X`yNvx7jG*eAR{_wT#^Y5k8Mj%)`Ko2lY1GTO%_7cM zEqhL*UdC+}alUHVa~kzBZnKEva1&p(fC^R1xW-1oO?=e?DpW1w8XE;S@l^|`P_>L}Y!uwYS1q7I)iSQJ zQE(GqwSWp$%ecly!A*SC0xDE3;~K59Hx*I7s)1{?3T{HFMO3I-U?Z;4D!7TST0n)W zWn80Ga1&p(fC^R1xJIksCcbI`6{?nTjaI=;eANOfR4wBgt%95Qss&W2TE;b61vl|k z3#d@FjBB(CZsMyJP@!rW*Ju^o#8)k#Le(;^(JXsY5#_5IxJI+!CX`x4g{lQM;u_6@ zoA{~)RH$0UHJSxC@l^|`P_>L}Gz)Ixs}@k9Y8lsP7Tm;FEuccxGOp1qxQVY?K!vJh zT%%cV6JND}3RTOvMzi21zG?v#s+Mt$X2DH-)dDJ1E#n%Uf;V}-B96@!QDkd$%5Jh* z#QCaawnnGyCYwc^uUcknbjohBS;YCOWwu7A>?WH%5Jh*#QCaawnp3VrXr42izx3+?XsI} z7ID66nXS<-yUAt|=c|_48tt;1Y!-38YMHIkF1yKQ5$CIx*&6M#n`{>2nBdlX}wfzPlutzbL82Ai(6a$BW&#*@^N*MSIdlW;0fzPmq5&zpTaO+0=Z^OW?8}Yvl1GjF( z|27QVx)J}|FmUTe{BOg+tsC*b4Fk7s#Q!!7+`19}+c0qJM*MHXz^xnczYPPoZUp-_ z4BUD#0OuU%;4|z| zjBy1%!yd(eR^T)2QH)*%KEocxP*vbF>|q3)HVoXl5pmiuaO=g0lb37Y){Eh#z-QQ_ z7)uI#hCPabqrhj_qZlO$e1<)WA)&x$*rOQ#34Dez6oV>(&#*@^f)e-)dlbVZfzPmq z5%kzFaO=gOhi}iotrsI4fzP;p6vG*T&#*@^b`kgtdlUl|fzPl`}b04}69_iZ}6r&#*`Fjy>=h_9)(-2fl(m@D5n79P6nYcjqkw*D2!ITKRsYZrst$H3K%I8w{NbqrkHh%L1Y zT*tuGjd)Ybz;z5<-H1W83|z;+)r}Zb%fNLET-}IEwG3Rxz}1adRm;G23|!raU$qQe z$H3K%m{!ZcbqrkHh;y|JT*tuGjo4Sqz;z5<-H3;^3|z;+)r}Zg%fNLET-}J9wG3Rx zz}1adTFbz73|!raueA(Z$H3K%m|M%hbqrkHh|RSOT*tuGjd)$lz;z5<-H73}3|z;+ z)s47b%fNLET-}KEwG3Rxz}1cTU(3LC3|!ra3APMe$H3K%IAP1cbqrkHh!eI9T*tuG zjo4w!z;z5<-H0c)3|z;+)s47g%fNLET-}I8whUayz}1cTWXr&H3|!raS+)#Z$H3K% zIA+VhbqrkHh;6nET*tuGjd*9vz;z5<-H3O#3|z;+)r}Zv%fNLET-}I^whUayz}1cT zY0JQM44i!CB>i_Bf7fH+ItH$8#93Pgu4CZpM(nj^;5r7bZp33-2Cie^>PC#VW#Bpn zu5QF_TL!LU;Oa))wq@Wt2CiP8H?W#Bpnu5QGYTL!LU;Oa)KxnPC#aW#Bpnu5QG=TL!LU;Oa&!yk+1z2CiP8H{W#Bpnu5QHT zTL!LU;Oa)KzGdJ#2Ci|$pM*7yC~>=p zi%H?NYO(Ra+F5+V4@}sV%5h!jKaj|mw$yU>d6t|1GP}v9zHw|37 zh>MjC4>MxL?IJE#HayG-7Rx6+(;MAb+3+wUTHG$;Vr9d_jBs(gh>MjC4>RJ$?IJE# zHayG-7`KbKSlRF}BVybx;$mgP!;Fw|yNHXG4G%M7#%%-FG~&Z;1J^WS!EFQAG~&K( z1J^WSyln&5G~&5!1J^WSw`~L0G~%>v1J^WSvTXy`G~%yq1J^WSt!)F>G~%jl1J^WS zsBHt+G~%Ug1J^WSqiqA%G~%Fb1J^WSo^1oyG~%0W1J^WSnQa5tG~$+R1J^WSlx+jo zG~$tM1J^WSk8K0jG~$eH1J^WSifseeG~$PC1J^WSg>3`ZG~$A71J^WSfNcZUG~#`2 z1J^WSdu;>PG~#$|1J^WSc5MUKG~#n@1J^WSacu+FG~#Y;1J^WSY;6PAG~#J(1J^WS zXKe%5G~#4!1J^WSVr>K0G~!=v1J^WSU2Ox`G~!xq1J^WSSZxE>G~!il1J^WSQ*8s+ zG~!Tg1J^WSPHh9%G~!Eb1J^WSNo@nyG~z~W1J^WSL~R4tG~z*R1J^WSKWzioG~zsM z1J^WSI&A~jG~zdH1J^WSHEjdeG~zOC1J^WSFzq5v!T@WpyX!S?c)<0N9`k_5)NbP^ zhR2g@wS(?VKJPl3*3Qev2XA};h%e~MkMRryJH1t)`pq@}CCM7Tt}KZ4n``pH#F>2K zbTDBp`B<^EbYrA9q(a`juXFc9hujwpE*|c6CpCPCG3gh;syfD|kJ~5q8Xddi+Wt1a z>RZDn?vtLypSU^e-l0$DUoyIJBxdT@UNAfuOmBI{v!C(&q-*&vnB22{^FOsQO*#e) zzsh^I9fQiADj#vbRFiMd%8!uL@G119Tk+S8&bC+ZF!bzcyE5f^GUMj-F8;>SS@#Zo zdj@7BrcCmU<6LpLr zpdJiHwdwe9BL3t*`z`vCUt_B6jl2D>e1AJ&Yy0E=p+M6^`JJE145M8vo>HG7;zXg4 zHQOEJZQ$n%_T{tiXyv%g$VX;t!;$=ni|usf_uX!)&BnFy0lrr)zX)_qDDoZfS*=@} z4DLLX#k;nRx#C6CZXb4d>VXfp}tvn39)$}OLC7j;O7TBL~q#@b&CEj9@oOR;aV-f(II--sa+8_ z^Lm2O;W+)lPWNz6{G}#8R7bD8+?5}dt97Tf>A^sLz+xyDk?m{b&AnKBPZ~q@@#Vop zelT!Q^R?6n(tiKAU3~ggSs;3|+V*(7H;|R0CckP{8;hfi;6C!30#k9Uo282{-W8`A z4F>%wJXB0AzgZ<8dY2wf#|f*LyCySnS7x>R2848TI+)hvXLZCQCzo!PiE*5n@#3Hk z`HeW)cJSAvjys-M)$6PFMp#T8kzV&KKeyuKk$%g_rn|$P+35V}aQ~*g;dFNM%{Tjn zpLiMt=$g=L__-SRzOOjkkze!MIS-ZIG@Bd_wm6M%+Uf4eSEgC^4awB)k40mn@l5)D z8GbUHiuyw{TlhIS%;2pp_NRZizkkh7a9AZ@EM!dw*UhyWe1Yqu^j_TMU?NjO)`>AY z+uM`hA1qmF8+%Fo`k*XIeOVMs zD-bAHMFY_fb78YeOa#cd%=X2FCli@3p?T3p)U6C~zk5k$+US}nSbDJ29qyfAfb!El z{2ifCcRBelITW`HkHM8pb|pjqYl3nu z3$x`Zhco#~{7h~SPTIn4*Tkq&pPMNDh(r`E!|*fv`Lf1M#OnNU)|y<7_lI0FIrnwg zi%Ypu#1p3HpXX zi~fcq{0snB23Z_>@-t1c*|>@2r-y2^UOtH@RHg<;>$Ml_Cg zYhfwxGv|#ocGK-%H6E_*$nVjG-X@*Z*%b73{`M29>!~tExwpimtzmYDohEco8h)aM06(HRD=#_%eQrBUHq1DnV}YD@*Vuu*D^hj zUow)*)@9N6Mecdo<8+&Picck|=!7CE= zL$grq3v|K3(y%|4AIhW24@bW2J%lcsY$VcZxO+O}WDY?A>21`>Q9jK38Rk7KecVcc zFI6wP^2W$mrmoyCiT>V5frUyXO+#gdDuUUA3oR1qRdR%%E5KNc%pI@nvv<2PSI7O~ z&b8VUcb5ysaQp_x+x(rdyKPY}3B1LX+fcc$yePM$3;ZW%7PpY?;y@+}E)M?3pu#Lz zP~G?b4!^LzwD#;5JdG;{t`$hfTvcU0h*v#ta3xu%u-^Ggv5;=dqn|OR>f0|I(MBQQ zc^*?JUTzDl34mI~Xyo}c2$^uA2yQD*D8b%BeDFxMBlYg^PFg#Ud7Fpsj?{suQhZJ1 zq;a()Reb-<(3ez9LtbXZr^rHoO%|W2>=O{ngZiYN{*15Js3B)^z+i~PWm(b(PehQEr0HvT`xKE0Fx diff --git a/scripts/selinux/nginx_agent.te b/scripts/selinux/nginx_agent.te index 8b70a1b19..7f30ed463 100644 --- a/scripts/selinux/nginx_agent.te +++ b/scripts/selinux/nginx_agent.te @@ -409,13 +409,31 @@ require { #============= nginx_agent_t ============== files_rw_etc_files(nginx_agent_t) +require { + type nginx_agent_t; +} + +#============= nginx_agent_t ============== +files_read_var_lib_files(nginx_agent_t) require { type nginx_agent_t; - type dosfs_t; } #============= nginx_agent_t ============== +files_manage_usr_files(nginx_agent_t) files_read_var_lib_files(nginx_agent_t) -allow nginx_agent_t var_lib_t:file write; -allow nginx_agent_t dosfs_t:filesystem getattr; + +require { + type nginx_agent_t; +} + +#============= nginx_agent_t ============== +apache_manage_lib(nginx_agent_t) + +require { + type nginx_agent_t; +} + +#============= nginx_agent_t ============== +files_manage_mounttab(nginx_agent_t)