%PDF-1.3 % 2 0 obj << /Length 7230 >> stream BT /TT2 1 Tf 10 0 0 10 72 756 Tm 0 g /GS1 gs 0 Tc 0 Tw [(N)20(AME)]TJ /TT4 1 Tf 3 -1.2 TD (ezjail)Tj /TT6 1 Tf 3.8506 0 TD [()-250(Jail administration frame)25(w)10(ork.)]TJ /TT2 1 Tf -6.8506 -2.4 TD (SYNOPSIS)Tj /TT4 1 Tf 3 -1.2 TD (ezjail-admin)Tj /TT8 1 Tf 7.8012 0 TD (command arguments...)Tj /TT2 1 Tf -10.8012 -2.4 TD [(O)50(VER)55(VIEW)]TJ /TT6 1 Tf 3 -1.2 TD 0.0256 Tw [(The ezjail commands pro)15(vide a simple w)10(ay to create multiple jails using FreeBSD)55(s)-275.6(jail system. It simpli)]TJ /TT9 1 Tf 42.4046 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (es)Tj -42.9608 -1.2 TD [(jail administration ef)25(fort and minimizes jail system resource usage.)]TJ 0 -1.8 TD 0.0663 Tw [(If you are not f)10(amiliar with the FreeBSD jail concept, please refer to)]TJ /TT11 1 Tf 28.4531 0 TD 0 Tw (jail)Tj /TT6 1 Tf 2.4004 0 TD 0.0664 Tw [(\(8\) before continuing. F)15(or addi-)]TJ -30.8535 -1.2 TD 0 Tw (tional design information, see the ezjail site at)Tj /TT11 1 Tf 18.6333 0 TD (http://erdgeist.org/arts/software/ezjail)Tj /TT6 1 Tf 24.0039 0 TD (.)Tj /TT2 1 Tf -45.6372 -2.4 TD (DESCRIPTION)Tj /TT6 1 Tf 3 -1.2 TD 0.2093 Tw [(The ezjail system enables the system administrator to create multiple OS-le)25(v)15(e)0(l)-459.3(virtualization containers)]TJ T* 0.0228 Tw [(called jails. Services lik)10(e)-272.8(web serv)15(ers, mail serv)15(ers, FTP serv)15(ers, are typically under frequent attack from the)]TJ T* 0.0564 Tw [(public Internet and are e)15(xposed to possible compromise. The typical usage of jails is to run a single service)]TJ T* 0.0732 Tw (in each jail and if that service becomes compromised the rest of the jails and the host system are protected)Tj T* 0 Tw (from also being compromised.)Tj 0 -1.8 TD 0.0633 Tw [(The major shortcoming of jails is that each jail has its o)25(wn cop)10(y)-313.3(o)0(f)-313.3(the w)10(orld. This eats disk space, inodes,)]TJ 0 -1.2 TD 0.1444 Tw [(and more importantly)65(,)-394.4(pre)25(v)15(ents the sharing of binaries images between jails, thus increasing the memory)]TJ T* 0.0065 Tw (pressure on the host system. In addition, this causes a major administration headache when comes the time to)Tj T* 0 Tw [(update the host system, as each jail needs to be updated independently)65(.)]TJ 0 -1.8 TD 0.1293 Tw (Ezjail addresses these problems by creating a single basejail \(a read-only)Tj /TT11 1 Tf 30.8281 0 TD 0 Tw (nullfs)Tj /TT6 1 Tf 3.6006 0 TD 0.1293 Tw (\(4\) mounted directory\))Tj -34.4286 -1.2 TD 0.0059 Tw (populated with the same binaries as the host system which is then shared across all the other service jails cre-)Tj T* 0 Tw (ated by ezjail. Is is possible to update the base jail \(and thus all the jails\) in a single ezjail command.)Tj 0 -1.8 TD 0.1181 Tw [(T)80(ypical usage of jails include separation of services, creating test en)40(vironments, consolidation of dif)25(ferent)]TJ 0 -1.2 TD -0.0001 Tc 0.0001 Tw (services on a single physical host, and more.)Tj /TT2 1 Tf -3 -2.4 TD 0 Tc 0.1666 Tw [(EZJ)30(AIL SYSTEM)]TJ /TT6 1 Tf 3 -1.2 TD 0.0079 Tw [(The administrati)25(v)15(e)15( )-15(interf)10(ace to the ezjail system is the)]TJ /TT11 1 Tf 21.8746 0 TD 0 Tw (ezjail-admin)Tj /TT6 1 Tf 7.2012 0 TD 0.0078 Tw (\(8\) command. It is used to install the)Tj -29.0758 -1.2 TD 0.0455 Tw [(ezjail en)40(vironment, create ne)25(w)-295.6(jails, archi)25(v)15(e)0(,)-295.6(restore, delete and update jails, open a jail console, and list the)]TJ T* 0 Tw [(status of all the jails. See belo)25(w)-250(for e)15(xample usage, and refer to its man page for complete usage details.)]TJ 0 -1.8 TD 0.0387 Tw (Ezjail reads its con)Tj /TT9 1 Tf 7.6967 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0387 Tw (guration from its)Tj /TT11 1 Tf 7.0873 0 TD 0 Tw (ezjail.conf)Tj /TT6 1 Tf 6.6011 0 TD 0.0387 Tw [(\(5\). )-250(Normally)-288.7(it will not be necessary to edit this )]TJ /TT9 1 Tf 20.3274 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (le,)Tj -42.8248 -1.2 TD 1.3077 Tw [(as some sane def)10(aults are pro)15(vided. A sample con)]TJ /TT9 1 Tf 30.3468 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 1.3077 Tw (guration is installed as)Tj /TT11 1 Tf -30.9029 -1.2 TD 0 Tw (EZJAIL_PREFIX/etc/ezjail.conf.sample)Tj /TT6 1 Tf 21.6035 0 TD (.)Tj -21.6035 -1.8 TD 0.0003 Tw [(A)-250.3(script is also installed as)]TJ /TT11 1 Tf 10.9447 0 TD 0 Tw (ezjail)Tj /TT6 1 Tf 3.8509 0 TD 0.0003 Tw [(in the rc.d system to allo)25(w)-250.3(jails under ezjails control to be started at boot)]TJ -14.7956 -1.2 TD 0 Tw [(time, gi)25(v)15(e)0(n)-250(ezjail is enabled by setting the)]TJ /TT11 1 Tf 17.0386 0 TD (rc.conf)Tj /TT6 1 Tf 4.2007 0 TD [(\(5\) v)25(ariable )]TJ /TT11 1 Tf 5.3051 0 TD ($ezjail_enable)Tj /TT6 1 Tf 8.4014 0 TD 0.25 Tc [(t)250(o)]TJ /TT11 1 Tf 2.1655 0 TD 0 Tc (YES)Tj /TT6 1 Tf 1.8003 0 TD (.)Tj /TT2 1 Tf -41.9116 -2.4 TD 0.1666 Tw [(WHA)95(TS IN A J)30(AIL)]TJ 1.2 -1.2 TD 0.0625 Tw (The life of an ezjail installation)Tj /TT6 1 Tf 1.8 -1.2 TD 0.04 Tw (The base jail is )Tj /TT9 1 Tf 6.4359 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.04 Tw (rst created by running)Tj /TT4 1 Tf 9.1571 0 TD 0 Tw (ezjail-admin )Tj 7.4913 0 TD (update)Tj /TT6 1 Tf 3.8906 0 TD (or)Tj /TT4 1 Tf 1.123 0 TD (ezjail-admin )Tj 7.4913 0 TD (install)Tj /TT6 1 Tf 4.2007 0 TD [(.)-540(Exam-)]TJ -40.3459 -1.2 TD 0.037 Tw (ple usage of this command is section)Tj /TT2 1 Tf 15.2282 0 TD 0 Tw (EXAMPLES)Tj /TT6 1 Tf 5.5562 0 TD 0.0369 Tw [(.)-537(This will create the base jail, setup a template jail used)]TJ -20.7844 -1.2 TD 0 Tw [(to setting up ne)25(w)-250(jails, install an e)15(xample )]TJ /TT9 1 Tf 16.7622 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD [(a)20(v)20(our \(see belo)25(w\) and con)]TJ /TT9 1 Tf 10.4863 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (gure miscellaneous things.)Tj -28.3608 -1.8 TD 0.0385 Tw [(This step is necessary before using the ezjail system. In particular)40(,)-288.5(i)0(t)-288.5(i)0(s)-288.5(not possible to create ne)25(w)-288.6(jails with-)]TJ 0 -1.2 TD 0 Tw [(out initializing the base jail in adv)25(ance.)]TJ 0 -1.8 TD 0.0171 Tw [(Once the base jail has been created, ne)25(w)-267.1(jails may be created with)]TJ /TT4 1 Tf 26.8521 0 TD 0 Tw (ezjail-admin )Tj 7.4684 0 TD (create)Tj /TT6 1 Tf 3.6006 0 TD 0.0171 Tw [(.)-517.1(A)-267.1(ne)25(w)-267.1(jail is)]TJ -37.921 -1.2 TD 0 Tw (de)Tj /TT9 1 Tf 0.9438 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0179 Tw [(ned by its name and can ha)20(v)15(e)15( )-15(one or multiple IP addresses. Creating a ne)25(w)-267.9(jail in)40(v)20(olv)15(es cop)10(ying the tem-)]TJ -1.5 -1.2 TD 0.1211 Tw [(plate jail to the ne)25(w)-371.1(location, con)]TJ /TT9 1 Tf 14.0033 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (guring)Tj /TT11 1 Tf 2.9819 0 TD (nullfs)Tj /TT6 1 Tf 3.6006 0 TD 0.1211 Tw [(\(4\) mounts for gi)25(ving access to the base jail, and little)]TJ -21.1419 -1.2 TD 0 Tw (more. A jail that has just be created occupies about 2MB of disk space ; when running, only a handful of dae-)Tj T* [(mons \(cron, syslog, sendmail mainly\) use memory)65(.)]TJ 0 -1.8 TD [(After their creation, jails may be archi)25(v)15(e)0(d)-250(t)0(o)-250(a)]TJ /TT11 1 Tf 18.6187 0 TD (pax)Tj /TT6 1 Tf 1.8003 0 TD [(\(1\) archi)25(v)15(e)0(,)-250(restored, and e)25(v)15(entually deleted.)]TJ -23.419 -6 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(1)]TJ ET endstream endobj 3 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 4 0 R /TT4 5 0 R /TT6 6 0 R /TT8 7 0 R /TT9 8 0 R /TT11 9 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 13 0 obj << /Length 8093 >> stream BT /TT6 1 Tf 10 0 0 10 72 744 Tm 0 g /GS1 gs 0 Tc -0.0834 Tw [(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ 3 -4.8 TD 0.098 Tw [(When a ne)25(w)-348(v)15(ersion of FreeBSD is released, or when an errata is published, only the base jail need to be)]TJ 0 -1.2 TD 0.2264 Tw (updated. Both source upgrades and binary upgrades \(using)Tj /TT11 1 Tf 25.4998 0 TD 0 Tw (freebsd-update)Tj /TT6 1 Tf 8.4014 0 TD 0.2265 Tw (\(8\)\) are supported. The)Tj /TT11 1 Tf -33.9011 -1.2 TD 0 Tw (ports)Tj /TT6 1 Tf 3.0005 0 TD 0.0251 Tw [(\(7\) collection may also be updated by ezjail, b)20(ut indi)25(vidual ports need to be upgraded indi)25(vidually by)]TJ -3.0005 -1.2 TD 0 Tw [(the administrator)55(.)]TJ /TT2 1 Tf -1.8 -2.4 TD 0.0625 Tw [(Anatomy of a J)15(ail)]TJ /TT6 1 Tf 1.8 -1.2 TD 0.0332 Tw (In the ezjail system, a jail is de)Tj /TT9 1 Tf 12.562 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0332 Tw (ned by a root directory and a couple of con)Tj /TT9 1 Tf 17.4868 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0332 Tw [(guration v)25(alues, mainly a name)]TJ -31.1611 -1.2 TD 0.0885 Tw (and IP addresses. The root directory of the jail contains only the jail-speci)Tj /TT9 1 Tf 30.581 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (c )Tj /TT9 1 Tf 0.7823 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0885 Tw (les: con)Tj /TT9 1 Tf 3.171 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (guration )Tj /TT9 1 Tf 3.671 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0885 Tw (les, data)Tj /TT9 1 Tf -40.43 -1.2 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.3122 Tw [(les, and ports installed by the administrator)55(.)-562.2(The base system is shared amongst all jails, using a)]TJ /TT11 1 Tf -0.5562 -1.2 TD 0 Tw (nullfs)Tj /TT6 1 Tf 3.6006 0 TD 0.0894 Tw [(\(4\) mount. This sa)20(v)15(e)0(s)-339.5(space and inodes \(especially when the ports collection in made a)20(v)25(ailable to)]TJ -3.6006 -1.2 TD 0 Tw [(the jails\), and also memory)65(,)-250(a)0(s)-250(the k)10(ernel is no)25(w)-250(able to share copies of running programs between the jails.)]TJ 0 -1.8 TD 0.0145 Tw [(Unless the v)25(ariable )]TJ /TT11 1 Tf 8.3764 0 TD 0 Tw ($ezjail_jaildir)Tj /TT6 1 Tf 9.0015 0 TD 0.0145 Tw [()-264.5(has been set by the administrator)40(,)-264.5(the root directory of the jail is)]TJ -17.3779 -1.2 TD 0 Tw [(k)10(ept in)]TJ /TT11 1 Tf 2.9895 0 TD (/usr/jails)Tj /TT6 1 Tf 6.001 0 TD [(,)-250(which therefore needs to reside on a partition big enough.)]TJ -8.9905 -1.8 TD 0.2476 Tw (There are also )Tj /TT9 1 Tf 6.6559 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2476 Tw [(le-based jails, in which the storage space for the jail is k)10(ept in a )]TJ /TT9 1 Tf 29.0316 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2476 Tw (le mounted with)Tj /TT11 1 Tf -36.7998 -1.2 TD 0 Tw (mdconfig)Tj /TT6 1 Tf 4.8008 0 TD 0.0972 Tw [(\(8\). )-250(There)-347.2(are tw)10(o)-347.2(adv)25(antages to image jails. The amount of disk space allocated to the jail is)]TJ -4.8008 -1.2 TD 0.0136 Tw [(limited, while normal jails ha)20(v)15(e)15( )-15(no)-263.6(bound on the amount of disk space the)15(y)-263.6(use. On the other hand, the space)]TJ T* 0.079 Tw [(dedicated to the jail is no longer a)20(v)25(ailable to the host, e)25(v)15(en)-329(if)-329(the jail doesn)18(t)-329(use all its allocated space. In)]TJ T* 0.0305 Tw [(addition, image jails contain a full cop)10(y)-280.5(o)0(f)-280.5(the basejail. This mak)10(es them portable between hosts running the)]TJ T* 0.0338 Tw [(same FreeBSD v)15(ersion as the image w)10(as created with.)-533.8(Of course, the jail no)25(w)-283.9(needs to be updated indepen-)]TJ T* 0 Tw [(dently from all other jails, and there is no longer an)15(y)-250(sharing of common )]TJ /TT9 1 Tf 29.2833 0 TD ()Tj /TT6 1 Tf 0.5561 0 TD (les between the jails.)Tj -29.8395 -1.8 TD 0.1359 Tw (Image jails may also be encrypted using)Tj /TT11 1 Tf 17.2521 0 TD 0 Tw (bde)Tj /TT6 1 Tf 1.8003 0 TD 0.1359 Tw (\(4\) or)Tj /TT11 1 Tf 2.7708 0 TD 0 Tw (geli)Tj /TT6 1 Tf 2.4004 0 TD 0.1359 Tw [(\(8\), depending on the options gi)25(v)15(e)0(n)-385.8(a)0(t)-385.8(creation)]TJ -24.2236 -1.2 TD 0 Tw (time.)Tj /TT2 1 Tf -1.8 -2.4 TD 0.0625 Tw (Using ZFS)Tj /TT6 1 Tf 1.8 -1.2 TD 0.0383 Tw [(T)80(o)80( )-80(gi)25(v)25( )278.3(e)-288.3(more precise control o)15(v)15(e)0(r)-288.3(the resources consumed by a jail, ezjail allo)25(ws putting each jail in its o)25(w)0(n)]TJ /TT11 1 Tf T* 0 Tw (zfs)Tj /TT6 1 Tf 1.8003 0 TD (\(8\) )Tj /TT9 1 Tf 1.416 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (lesystem. See)Tj /TT2 1 Tf 5.6934 0 TD [(J)15(ail Cr)18(eation Examples)]TJ /TT6 1 Tf 10.2165 0 TD (for details.)Tj -19.6823 -1.8 TD 0.097 Tw (Also, ezjail can be con)Tj /TT9 1 Tf 9.4676 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.097 Tw [(gured to install its basejail and the accompaning template for all ne)25(w)-347(jails into its)]TJ -10.0237 -1.2 TD -0.025 Tc 0 Tw [(ow)-25(n)]TJ /TT9 1 Tf 2.0123 0 TD 0 Tc ()Tj /TT6 1 Tf 0.5562 0 TD 0.0651 Tw (lesystem. Set the )Tj /TT11 1 Tf 7.6382 0 TD 0 Tw ($ezjail_use_zfs)Tj /TT6 1 Tf 9.0015 0 TD 0.0652 Tw [()-315.2(v)25(ariable in your)]TJ /TT11 1 Tf 7.5107 0 TD 0 Tw (ezjail.conf)Tj /TT6 1 Tf 6.9163 0 TD 0.0652 Tw (to YES before running)Tj /TT4 1 Tf -33.635 -1.2 TD 0 Tw (ezjail-admin )Tj 7.4513 0 TD (update)Tj /TT6 1 Tf 3.8506 0 TD (or)Tj /TT4 1 Tf 1.083 0 TD (ezjail-admin )Tj 7.4513 0 TD (install)Tj /TT6 1 Tf 4.2007 0 TD (.)Tj -24.0368 -1.8 TD 0.2555 Tw [(T)80(o)80( )-80(use an)15(y)-505.5(zfs feature in ezjail, you )]TJ /TT9 1 Tf 16.471 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2555 Tw (rst need to con)Tj /TT9 1 Tf 6.6259 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2555 Tw (gure the destination ZFS )Tj /TT9 1 Tf 11.1319 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2555 Tw (lesystem using the)Tj -35.8972 -1.2 TD 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD ($ezjail_jailzfs)Tj /TT6 1 Tf 9.0015 0 TD [()-250(v)25(ariable.)]TJ -9.4453 -1.8 TD 0.0588 Tw [(Y)110(o)0(u)-308.8(can use ZFS jails without installing the basejail into its o)25(wn ZFS )]TJ /TT9 1 Tf 28.7116 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0589 Tw [(lesystem and vice v)15(ersa. In order to)]TJ -29.2678 -1.2 TD 0 Tw [(create ZFS jails by def)10(ault, set the )]TJ /TT11 1 Tf 14.3186 0 TD ($ezjail_use_zfs_for_jails)Tj /TT6 1 Tf 15.0024 0 TD [()-250(v)25(ariable to YES.)]TJ /TT2 1 Tf -31.1211 -2.4 TD 0.0625 Tw [(P)20(e)0(r)37(-)0(J)15(ail options)]TJ /TT6 1 Tf 1.8 -1.2 TD 0.0048 Tw [(As we sa)15(w)-254.9(earlier)40(,)-254.9(a)-254.8(jail is described by a )]TJ /TT9 1 Tf 16.7927 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0048 Tw (le in)Tj /TT11 1 Tf 2.0091 0 TD 0 Tw (EZJAIL_PREFIX/etc/ezjail/)Tj /TT6 1 Tf 15.0024 0 TD [(.)-504.8(This )]TJ /TT9 1 Tf 2.7874 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0048 Tw (le has the same)Tj -37.704 -1.2 TD 0.0039 Tw (name as the jail it con)Tj /TT9 1 Tf 8.7666 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0039 Tw [(gures. It is a set of v)25(ariables interpreted by)]TJ /TT11 1 Tf 17.2824 0 TD 0 Tw (sh)Tj /TT6 1 Tf 1.2002 0 TD 0.004 Tw [(\(1\), much lik)10(e)]TJ /TT11 1 Tf 5.8892 0 TD 0 Tw (rc.conf)Tj /TT6 1 Tf 4.2007 0 TD 0.004 Tw (\(5\) is. This )Tj /TT9 1 Tf 4.6228 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (le)Tj -43.0742 -1.2 TD [(is created at the same time as the jail, and usually doesn)18(t)-250(require tweaking from the administrator)55(.)]TJ 0 -1.8 TD 0.0229 Tw [(In addition to the v)25(ariables described belo)25(w)65(,)65( )-65(an)15(y)15( )-15(v)25(ariable used by the init script)]TJ /TT11 1 Tf 32.1841 0 TD 0 Tw (/etc/rc.d/jail)Tj /TT6 1 Tf 8.6742 0 TD 0.0228 Tw (may be)Tj -40.8582 -1.2 TD 0.0967 Tw [(added manually by the administrator)55(.)-346.8(The follo)25(wing v)25(ariables are handled by ezjail, replacing J)60(AILN)35(AME)]TJ T* 0 Tw (with the actual name of the jail:)Tj 0 -1.8 TD [(jail_J)60(AILN)35(AME_hostname)]TJ 4.1 -1.2 TD 0.0863 Tw [(The hostname of the jail. Def)10(aults to the name of the jail, unless special characters needed to be)]TJ T* 0 Tw (stripped.)Tj -4.1 -1.8 TD [(jail_J)60(AILN)35(AME_ip)]TJ 4.1 -1.2 TD [(The IP addresses the jail is allo)25(wed to use.)]TJ -7.1 -6 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(2)]TJ ET endstream endobj 14 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 4 0 R /TT4 5 0 R /TT6 6 0 R /TT9 8 0 R /TT11 9 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 16 0 obj << /Length 6219 >> stream BT /TT6 1 Tf 10 0 0 10 72 744 Tm 0 g /GS1 gs 0 Tc -0.0834 Tw [(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ 7.1 -4.8 TD 0 Tw [(Since FreeBSD 7.2, se)25(v)15(eral IP addresses may be gi)25(v)15(en, separated by commas.)]TJ 0 -1.8 TD 0.1325 Tw (Since FreeBSD 9.0 each IP address can be pre)Tj /TT9 1 Tf 19.582 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1325 Tw [(x)15(ed by an interf)10(ace name follo)25(wed by the pipe)]TJ -20.1381 -1.2 TD 0.1847 Tw (symbol. It will then automatically be con)Tj /TT9 1 Tf 17.5213 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1846 Tw [(gured on that interf)10(ace when the jail is started and)]TJ -18.0774 -1.2 TD 0.0071 Tw [(remo)15(v)15(e)0(d)-257.1(from the interf)10(ace when the jail stops. \(Y)110(ou will probably ha)20(v)15(e)15( )-15(to)-257.2(escape the pipe symbol,)]TJ T* 0 Tw (though.\))Tj -4.1 -1.8 TD [(jail_J)60(AILN)35(AME_rootdir)]TJ 4.1 -1.2 TD 0.2247 Tw (The directory holding the jail )Tj /TT9 1 Tf 13.0922 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2247 Tw (les \(the directory used as a mount point for )Tj /TT9 1 Tf 19.4344 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2247 Tw (le-based jails\).)Tj -33.639 -1.2 TD 0 Tw [(Def)10(aults to the jail name inside )]TJ /TT11 1 Tf 13.1526 0 TD ($ezjail_jaildir)Tj /TT6 1 Tf 9.0015 0 TD (.)Tj -26.2541 -1.8 TD [(jail_J)60(AILN)35(AME_e)15(x)15(ec_start)]TJ 4.1 -1.2 TD 0.1001 Tw [(The command to run inside the jail when starting it. Def)10(aults to )]TJ /TT11 1 Tf 27.2685 0 TD 0 Tw ($ezjail_exec_start)Tj /TT6 1 Tf 10.8018 0 TD 0.3502 Tc [(o)350.2(r)]TJ -38.0703 -1.2 TD 0 Tc ()Tj /TT11 1 Tf 0.4438 0 TD (/bin/sh /etc/rc)Tj /TT6 1 Tf 9.0015 0 TD (.)Tj -13.5453 -1.8 TD [(jail_J)60(AILN)35(AME_e)15(x)15(ec_stop)]TJ 4.1 -1.2 TD 0.0862 Tw [(The command to run inside the jail when stopping it. Def)10(aults to the empty string, which means)]TJ T* 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD (/bin/sh /etc/rc.shutdown)Tj /TT6 1 Tf 14.4023 0 TD (.)Tj -18.9462 -1.8 TD [(jail_J)60(AILN)35(AME_mount_enable)]TJ 4.1 -1.2 TD 0.454 Tw [(A)-704(boolean \(YES or NO\), that speci)]TJ /TT9 1 Tf 18.5238 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.454 Tw (es whether the )Tj /TT9 1 Tf 7.3874 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.454 Tw (lesystems in)Tj /TT11 1 Tf 6.0745 0 TD 0 Tw (/etc/fstab.)Tj /TT8 1 Tf -33.098 -1.2 TD (JAILNAME)Tj /TT6 1 Tf 5.0508 0 TD (are carried out. Set by ezjail to )Tj /TT11 1 Tf 12.9385 0 TD (YES)Tj /TT6 1 Tf 1.8003 0 TD [(, set to at your o)25(wn risk.)]TJ -23.8896 -1.8 TD [(jail_J)60(AILN)35(AME_de)25(vfs_enable)]TJ 4.1 -1.2 TD 0.4343 Tw [(A)-684.4(boolean specifying whether to mount a)]TJ /TT11 1 Tf 19.8415 0 TD 0 Tw (/dev)Tj /TT9 1 Tf 3.0847 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.4343 Tw [(lesystem inside the jail. Def)10(aults to)]TJ -23.4823 -1.2 TD 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD ($ezjail_devfs_enable)Tj /TT6 1 Tf 12.002 0 TD (, or )Tj /TT11 1 Tf 2.4707 0 TD (YES)Tj /TT6 1 Tf 1.8003 0 TD (.)Tj -20.8168 -1.8 TD [(jail_J)60(AILN)35(AME_de)25(vfs_ruleset)]TJ 4.1 -1.2 TD 0.6009 Tw (The ruleset to apply when mounting a)Tj /TT11 1 Tf 19.6194 0 TD 0 Tw (/dev)Tj /TT9 1 Tf 3.2513 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.6009 Tw [(lesystem inside a jail. Def)10(aults to)]TJ -23.4268 -1.2 TD 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD ($ezjail_devfs_ruleset)Tj /TT6 1 Tf 12.602 0 TD (, or )Tj /TT11 1 Tf 2.4707 0 TD (devfsrules_jail)Tj /TT6 1 Tf 9.0015 0 TD (.)Tj -28.6181 -1.8 TD [(ezjail_J)60(AILN)35(AME_procfs)]TJ 4.1 -1.2 TD 0.3882 Tw [(A)-638.2(boolean specifying whether to mount a)]TJ /TT11 1 Tf 19.5187 0 TD 0 Tw (/proc)Tj /TT9 1 Tf 3.6386 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.3881 Tw [(lesystem inside the jail. Def)10(aults to)]TJ -23.7134 -1.2 TD 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD ($ezjail_procfs_enable)Tj /TT6 1 Tf 12.602 0 TD (, or )Tj /TT11 1 Tf 2.4707 0 TD (YES)Tj /TT6 1 Tf 1.8003 0 TD (.)Tj -21.4169 -1.8 TD [(ezjail_J)60(AILN)35(AME_fdescfs)]TJ 4.1 -1.2 TD 0.2958 Tw [(A)-545.8(boolean specifying whether to mount a)]TJ /TT11 1 Tf 18.8719 0 TD 0 Tw (/dev/fs)Tj /TT9 1 Tf 4.7466 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.2959 Tw [(lesystem inside the jail. Def)10(aults to)]TJ -24.1746 -1.2 TD 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD ($ezjail_fdescfs_enable)Tj /TT6 1 Tf 13.2022 0 TD (, or )Tj /TT11 1 Tf 2.4707 0 TD (YES)Tj /TT6 1 Tf 1.8003 0 TD (.)Tj -22.017 -1.8 TD [(ezjail_J)60(AILN)35(AME_image)]TJ 4.1 -1.2 TD (The path to the image )Tj /TT9 1 Tf 8.9692 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (le backing the jail, if the jail is )Tj /TT9 1 Tf 12.4131 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (le-based; or the empty string.)Tj -26.5946 -1.8 TD [(ezjail_J)60(AILN)35(AME_imagetype)]TJ 4.1 -1.2 TD (The type of the image, if the jail is )Tj /TT9 1 Tf 14.0513 0 TD ()Tj /TT6 1 Tf 0.5561 0 TD (le-based; the empty string otherwise.)Tj -18.7074 -1.8 TD [(ezjail_J)60(AILN)35(AME_attachparams)]TJ 4.1 -1.2 TD 0.0749 Tw (The parameters to pass to the tool used to decrypt )Tj /TT9 1 Tf 20.8545 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0749 Tw (le-based, encrypted jails. Initialized from the)Tj /TT3 1 Tf -21.244 -1.2 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (C)Tj /TT6 1 Tf 0.9723 0 TD 0.1222 Tw [(option when creating such a jail, or the empty string.)-622.2()]TJ /TT11 1 Tf 23.244 0 TD 0 Tw (YES)Tj /TT6 1 Tf 1.8003 0 TD 0.1223 Tw [()-372.2(i)0(f)-372.2(the jail requires interaction)]TJ -26.7833 -1.2 TD 0.2779 Tw [(with the administrator when starting \(typically)65(,)-527.9(encrypted jails that needs a passw)10(ord to be)]TJ T* 0 Tw (decrypted\).)Tj -4.1 -1.8 TD [(ezjail_J)60(AILN)35(AME_forceblocking)]TJ 4.1 -1.2 TD (If )Tj /TT11 1 Tf 1.3599 0 TD (YES)Tj /TT6 1 Tf 1.8003 0 TD [(, start the jail e)25(v)15(en)-250(when it is mark)10(ed as blocking.)]TJ -7.2602 -1.8 TD [(ezjail_J)60(AILN)35(AME_zfs_datasets)]TJ 4.1 -1.2 TD 0.1288 Tw [(F)15(o)0(r)-378.7(ZFS jails, additional ZFS datasets to attach to the jail when starting it. T)80(a)0(k)10(en from the)]TJ /TT3 1 Tf 38.4948 0 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (z)Tj /TT6 1 Tf -39.0948 -1.2 TD (option when con)Tj /TT9 1 Tf 6.6655 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (guring a jail; the empty string otherwise.)Tj -14.3217 -6.6 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(3)]TJ ET endstream endobj 17 0 obj << /ProcSet [/PDF /Text ] /Font << /TT3 18 0 R /TT4 5 0 R /TT6 6 0 R /TT8 7 0 R /TT9 8 0 R /TT11 9 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 20 0 obj << /Length 9370 >> stream BT /TT6 1 Tf 10 0 0 10 72 744 Tm 0 g /GS1 gs 0 Tc -0.0834 Tw [(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ 3 -4.8 TD 0 Tw [(ezjail_J)60(AILN)35(AME_cpuset)]TJ 4.1 -1.2 TD 0.021 Tw (The processor set to place the jail in when starting it \(see)Tj /TT11 1 Tf 23.2447 0 TD 0 Tw (cpuset)Tj /TT6 1 Tf 3.6006 0 TD 0.021 Tw [(\(1\)\). )-250(T)80(a)0(k)10(en from the)]TJ /TT3 1 Tf 8.8237 0 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (c)Tj /TT6 1 Tf 0.8711 0 TD (option)Tj -37.1401 -1.2 TD (when con)Tj /TT9 1 Tf 3.8599 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (guring a jail; the empty string otherwise.)Tj -8.516 -1.8 TD [(ezjail_J)60(AILN)35(AME_)]TJ /TT9 1 Tf 8.0696 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (b)Tj -4.5257 -1.2 TD 0.0466 Tw [(The netw)10(ork vie)25(w)-296.6(t)0(o)-296.6(g)0(i)25(v)25( )286.6(e)-296.6(to the jail \(see)]TJ /TT11 1 Tf 16.756 0 TD 0 Tw (setfib)Tj /TT6 1 Tf 3.6006 0 TD 0.0466 Tw [(\(1\)\) when starting it. T)80(a)0(k)10(en from the)]TJ /TT3 1 Tf 15.2872 0 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (f)Tj /TT6 1 Tf 0.8968 0 TD (option)Tj -37.1407 -1.2 TD (when con)Tj /TT9 1 Tf 3.8599 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (guring the jail; the empty string otherwise.)Tj -8.516 -1.8 TD [(ezjail_J)60(AILN)35(AME_parameters)]TJ 4.1 -1.2 TD 0.054 Tw (The parameter set to be con)Tj /TT9 1 Tf 11.3481 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.054 Tw (gured to the jail \(see)Tj /TT11 1 Tf 8.6835 0 TD 0 Tw (jail)Tj /TT6 1 Tf 2.4004 0 TD 0.0539 Tw [(\(8\)\) when starting it. Y)110(ou need to con)]TJ /TT9 1 Tf 15.3191 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (g-)Tj -38.8634 -1.2 TD (ure this by hand.)Tj -4.1 -1.8 TD [(ezjail_J)60(AILN)35(AME_post_start_script)]TJ 4.1 -1.2 TD 0.017 Tw [(The path to a script that will be e)15(x)15(ecuted after the jail successfully w)10(as created. The script recei)25(v)15(e)0(s)]TJ T* 0 Tw [(tw)10(o)-250(parameters, the jid and the jail name.)-500(Y)110(o)0(u)-250(need to con)]TJ /TT9 1 Tf 23.4835 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (gure this by hand.)Tj -28.1397 -1.8 TD 0.3903 Tw (In addition to these)Tj /TT11 1 Tf 9.5041 0 TD 0 Tw (sh)Tj /TT6 1 Tf 1.2002 0 TD 0.3902 Tw [(\(1\)-style v)25(ariables, the administrator may add comment lines starting with)]TJ -10.7043 -1.2 TD 0.0658 Tw [(PR)40(O)50(VIDE:, REQ)10(UIRE: and BEFORE:.)-565.8(These comments are used by)]TJ /TT11 1 Tf 31.485 0 TD 0 Tw (rcorder)Tj /TT6 1 Tf 4.2007 0 TD 0.0659 Tw (\(8\) to determine the)Tj -35.6857 -1.2 TD 0.0481 Tw [(order in which the jails are started. The def)10(ault is to k)10(eep REQ)10(UIRE and BEFORE empty)65(,)-298.1(meaning the)]TJ T* 0 Tw [(jails are started in no particular order)55(.)]TJ /TT2 1 Tf -1.8 -2.4 TD [(Fla)25(v)10(ours)]TJ /TT6 1 Tf 1.8 -1.2 TD 0.4115 Tw (When a jail is created, it is not con)Tj /TT9 1 Tf 17.1484 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.4115 Tw [(gured; in particular you lik)10(ely w)10(ant to edit )]TJ /TT9 1 Tf 20.4341 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.4115 Tw (les such as)Tj /TT11 1 Tf -38.6949 -1.2 TD 0 Tw (/etc/resolv.conf)Tj /TT6 1 Tf 9.6016 0 TD (,)Tj /TT11 1 Tf 0.9187 0 TD (/etc/localtime)Tj /TT6 1 Tf 8.7201 0 TD 0.0686 Tw [(and others. Y)110(ou may also w)10(ant to create some system users,)]TJ -19.2403 -1.2 TD 0.1042 Tw (maybe enable)Tj /TT11 1 Tf 5.9833 0 TD 0 Tw (sshd)Tj /TT6 1 Tf 2.4004 0 TD 0.1042 Tw [(\(8\). )-250(Ezjail)-354.2(solv)15(es this problem by using the concept of )]TJ /TT9 1 Tf 23.5773 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.3543 Tw [(a)20(v)20(ours. When)-354.3(a)]TJ /TT9 1 Tf 7.4643 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1043 Tw [(a)20(v)20(our is)]TJ -40.5376 -1.2 TD 0.0804 Tw (selected at jail creation time, the )Tj /TT9 1 Tf 13.6709 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0803 Tw [(a)20(v)20(our directory tree is mer)18(ged into the ne)25(w)-330.4(jail)55(s)-330.4(directory tree. In addi-)]TJ -14.227 -1.2 TD 0 Tw (tion, the jail is con)Tj /TT9 1 Tf 7.4155 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (gured so that on its )Tj /TT9 1 Tf 7.8604 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (rst boot, the )Tj /TT9 1 Tf 4.9995 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (le)Tj /TT11 1 Tf 0.9717 0 TD (ezjail.flavour)Tj /TT6 1 Tf 8.6514 0 TD [(is e)15(x)15(ecuted.)]TJ -31.5669 -1.8 TD 0.1077 Tw (As part of the install sub-command, the )Tj /TT9 1 Tf 16.8061 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1078 Tw [(a)20(v)20(our base directory w)10(as created as)]TJ /TT11 1 Tf 15.0343 0 TD 0 Tw (/usr/jails/flavours)Tj /TT6 1 Tf -32.3966 -1.2 TD 0.0326 Tw (and populated with an single )Tj /TT9 1 Tf 11.9106 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0326 Tw [(a)20(v)20(our named)]TJ /TT4 1 Tf 5.4676 0 TD 0 Tw (example)Tj /TT6 1 Tf 4.2007 0 TD [(.)-532.6(This )]TJ /TT9 1 Tf 2.843 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0326 Tw [(a)20(v)20(our contains 3 )]TJ /TT9 1 Tf 6.9172 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0326 Tw (les customized for running)Tj -33.0075 -1.2 TD 1.0937 Tw (in a jail \()Tj /TT11 1 Tf 6.8631 0 TD 0 Tw (etc/make.conf)Tj /TT6 1 Tf 7.8013 0 TD (,)Tj /TT11 1 Tf 1.9437 0 TD (etc/periodic.conf)Tj /TT6 1 Tf 10.2017 0 TD (,)Tj /TT11 1 Tf 1.9437 0 TD (etc/rc.conf)Tj /TT6 1 Tf 6.6011 0 TD 1.3437 Tw [(\). The)-1343.8(e)15(xample)]TJ /TT11 1 Tf -35.3545 -1.2 TD 0 Tw (ezjail.flavour)Tj /TT6 1 Tf 8.7932 0 TD 0.1417 Tw [(also sho)25(w)-391.7(h)0(o)25(w)25( )-25(to)-391.7(create users, and introduce the con)40(v)15(ention of placing packages in)]TJ /TT11 1 Tf -8.7932 -1.2 TD 0 Tw (/pkg)Tj /TT6 1 Tf 2.7014 0 TD 0.051 Tw (that are installed when the jail is )Tj /TT9 1 Tf 13.5474 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.051 Tw [(rst brought up. Y)110(ou are encouraged to cop)10(y)-301.1(the e)15(xample )]TJ /TT9 1 Tf 23.1184 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0511 Tw [(a)20(v)20(our to)]TJ -40.4795 -1.2 TD 0.0014 Tw [(create your o)25(wn )]TJ /TT9 1 Tf 6.6706 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD [(a)20(v)20(our)55(.)-501.4(T)80(ypical )]TJ /TT9 1 Tf 6.1589 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0013 Tw [(a)20(v)20(our usages include setting up jails with site-speci)]TJ /TT9 1 Tf 20.4925 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0013 Tw (c con)Tj /TT9 1 Tf 2.139 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0013 Tw (guration, creat-)Tj -37.6856 -1.2 TD 0.0295 Tw [(ing classes of jails for de)25(v)15(elopment or testing \(such as a webde)25(v)]TJ /TT9 1 Tf 26.2266 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0296 Tw [(a)20(v)20(our that w)10(ould install Apache with your)]TJ -26.7828 -1.2 TD 0 Tw [(f)10(a)20(v)20(ourite web de)25(v)15(elopment frame)25(w)10(ork\), pre-creating local users, and so on.)]TJ /TT2 1 Tf -1.8 -2.4 TD 0.0625 Tw [(Updating the Base J)15(ail)]TJ /TT6 1 Tf 1.8 -1.2 TD 0.0674 Tw [(W)80(e)80( )-80.1(already mentionned ho)25(w)-317.5(easy it is to update jails, since only one cop)10(y)-317.5(needs to be updated. Ezjail only)]TJ T* 0.6262 Tw [(handles updating the base system; updating the ports is left to the administrator \(b)20(ut see)]TJ T* 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD (ports-mgmt/jailaudit)Tj /TT6 1 Tf 12.002 0 TD 0.0251 Tw [()-275.1(for a w)10(ay to get noti)]TJ /TT9 1 Tf 8.9155 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0251 Tw (ed of ports in need of an update\). Updates are handled)Tj -21.9175 -1.2 TD 0.1373 Tw (with the)Tj /TT4 1 Tf 3.7741 0 TD -0.2127 Tw (ezjail-admin update)Tj /TT6 1 Tf 11.5765 0 TD 0.1374 Tw (command. It is possible to update the base jail from source or from)Tj -15.3506 -1.2 TD 0.0382 Tw [(binary packages. If a base jail already e)15(xists, the)]TJ /TT4 1 Tf 19.9047 0 TD 0 Tw (update)Tj /TT6 1 Tf 3.8888 0 TD 0.0382 Tw [(command installs the w)10(orld in a temporary direc-)]TJ -23.7935 -1.2 TD 0.032 Tw [(tory before mo)15(ving it to the basejail, thus lea)20(ving intact all installed libraries. After making sure all softw)10(are)]TJ T* 0.0752 Tw [(running in the jails is link)10(ed with the ne)25(w)-325.2(librairies, you may w)10(ant to rem)]TJ 30.4189 0 TD -0.015 Tc 0 Tw (ove )Tj 1.739 0 TD 0 Tc 0.0752 Tw [(the old library v)15(ersions. It is)]TJ -32.158 -1.2 TD 0 Tw [(often a good idea to update the jails when a ne)25(w)-250(k)10(ernel is installed in the host, using the same sources.)]TJ /TT2 1 Tf -1.8 -2.4 TD 0.0625 Tw [(Starting J)15(ails)]TJ /TT6 1 Tf 1.8 -1.2 TD 0 Tw [(Lik)10(e)-601.1(all)]TJ /TT11 1 Tf 4.0242 0 TD (rc)Tj /TT6 1 Tf 1.2002 0 TD 0.3511 Tw (\(8\) scripts, the ezjail script)Tj /TT11 1 Tf 12.6408 0 TD 0 Tw (EZJAIL_PREFIX/etc/rc.d/ezjail)Tj /TT6 1 Tf 18.0039 0 TD 0.3512 Tw (accepts parameters)Tj /TT4 1 Tf -35.8691 -1.2 TD 0 Tw (start)Tj /TT6 1 Tf 3.0005 0 TD (,)Tj /TT4 1 Tf 0.852 0 TD (restart)Tj /TT6 1 Tf 4.8027 0 TD (and)Tj /TT4 1 Tf 1.6958 0 TD (stop,)Tj /TT6 1 Tf 3.6025 0 TD 0.002 Tw [(running, restarting and stopping all \(non-blocking\) jails under ezjail)55(s)-252(con-)]TJ -13.9535 -1.2 TD 0 Tw [(trol by def)10(ault. When passed an additional list of jails, only these jails are acted upon.)]TJ 0 -1.8 TD 0.0321 Tw (The order in which jails are started is determined by the)Tj /TT11 1 Tf 22.9288 0 TD 0 Tw (rcorder)Tj /TT6 1 Tf 4.2007 0 TD 0.0321 Tw (\(8\) tool, using cues from the jail con)Tj /TT9 1 Tf 14.7769 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (gu-)Tj -42.4626 -1.2 TD (rations in ezjails)Tj /TT11 1 Tf 6.8037 0 TD (EZJAIL_PREFIX/etc/ezjail)Tj /TT6 1 Tf 14.6523 0 TD [(control directory)65(.)]TJ -24.4561 -5.4 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(4)]TJ ET endstream endobj 21 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 4 0 R /TT3 18 0 R /TT4 5 0 R /TT6 6 0 R /TT9 8 0 R /TT11 9 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 23 0 obj << /Length 7750 >> stream BT /TT6 1 Tf 10 0 0 10 72 744 Tm 0 g /GS1 gs 0 Tc -0.0834 Tw [(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ 3 -4.8 TD 0.044 Tw [(The script e)15(xamines its con)]TJ /TT9 1 Tf 11.1024 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0439 Tw [(g, attaches and mounts images, and sets v)25(ariables for each jail in the list before)]TJ -11.6586 -1.2 TD 0 Tw (passing its command on to the)Tj /TT11 1 Tf 12.3877 0 TD (/etc/rc.d/jail)Tj /TT6 1 Tf 8.6514 0 TD (script.)Tj -21.0391 -1.8 TD 0.0353 Tw [(T)80(o)80( )-80(interacti)25(v)15(ely start all crypto image jails \(or those depending on them\), that were not automatically started)]TJ 0 -1.2 TD 0 Tw (during booting, use the)Tj /TT4 1 Tf 9.4712 0 TD (startcrypto)Tj /TT6 1 Tf 6.8511 0 TD [(parameter)55(.)]TJ -16.3223 -1.8 TD 0.3287 Tw (Note that jails con)Tj /TT9 1 Tf 8.2898 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.3287 Tw (gured to be in the)Tj /TT13 1 Tf 8.8915 0 TD 0 Tw (norun)Tj /TT6 1 Tf 2.9679 0 TD 0.3287 Tw (state \(using)Tj /TT4 1 Tf 5.4898 0 TD -0.0214 Tw (ezjail-admin config)Tj /TT3 1 Tf 12.4757 0 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (r)Tj /TT8 1 Tf 1.5287 0 TD (norun)Tj -40.7996 -1.2 TD (jailname)Tj /TT6 1 Tf 4.8008 0 TD [(\))-250(are ne)25(v)15(e)0(r)-250(started by the ezjail rc script.)]TJ -4.8008 -1.8 TD 0.0403 Tw [(As a con)40(v)15(enient shortcut, the)]TJ /TT4 1 Tf 12.0322 0 TD 0 Tw (ezjail-admin)Tj /TT6 1 Tf 7.4915 0 TD 0.0404 Tw [(command in)40(v)20(o)0(k)10(e)0(s)-290.4(the rc.d script and passes the correspond-)]TJ -19.5237 -1.2 TD 0 Tw [(ing parameters, if the)15(y)-250(look lik)10(e)-250(v)25(alid parameters.)]TJ 0 -1.8 TD 0.0342 Tw [(Ev)15(en if ezjail is not enabled in the)]TJ /TT11 1 Tf 14.1429 0 TD 0 Tw (rc.conf)Tj /TT6 1 Tf 4.2007 0 TD 0.0341 Tw (\(5\), rc.d/ezjail can be used to start and stop jails by prepending)Tj /TT4 1 Tf -18.3436 -1.2 TD 0 Tw (force)Tj /TT6 1 Tf 3.6005 0 TD (or)Tj /TT4 1 Tf 1.083 0 TD (one)Tj /TT6 1 Tf 2.4003 0 TD (to the)Tj /TT4 1 Tf 2.4995 0 TD (start, restart)Tj /TT6 1 Tf 9.0014 0 TD (or)Tj /TT4 1 Tf 1.083 0 TD (stop)Tj /TT6 1 Tf 3.0004 0 TD [(parameter)55(.)-250(Refer to)]TJ /TT11 1 Tf 7.9406 0 TD (rc)Tj /TT6 1 Tf 1.2002 0 TD (\(8\) for details.)Tj /TT2 1 Tf -33.6089 -2.4 TD 0.0625 Tw [(Remarks & T)18(ips)]TJ /TT6 1 Tf 1.8 -1.2 TD 0.0023 Tw [(Jails can be either accessed from the netw)10(ork, for instance by using)]TJ /TT11 1 Tf 27.2032 0 TD 0 Tw (ssh)Tj /TT6 1 Tf 1.8003 0 TD 0.0024 Tw (\(1\), or from the host system by using)Tj -29.0035 -1.2 TD 0 Tw (the)Tj /TT4 1 Tf 1.5745 0 TD (console)Tj /TT6 1 Tf 4.5535 0 TD 0.1027 Tw [(command, which gi)25(v)15(e)0(s)-352.7(you an interacti)25(v)15(e)15( )-15(shell inside the jail. It is also possible to edit the)]TJ /TT9 1 Tf -6.128 -1.2 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0059 Tw (les of a running jail, and the modi)Tj /TT9 1 Tf 13.5384 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0059 Tw [(cations will appear immediately inside the jail en)40(vironment. )-250(When)-255.9(deal-)]TJ -14.6507 -1.2 TD 0.1412 Tw (ing image-based, the)Tj /TT4 1 Tf 8.9763 0 TD (config -i attach)Tj /TT6 1 Tf 10.2751 0 TD 0.1411 Tw [(command allo)25(ws one to access the disk of a )]TJ /TT9 1 Tf 18.99 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1411 Tw (le-based jail)Tj -38.7976 -1.2 TD 0 Tw (without starting it.)Tj 0 -1.8 TD 0.0448 Tw [(Ra)15(w)-294.8(sock)10(ets are disallo)25(wed by def)10(ault for all jails. This is not a ezjail restriction, b)20(ut a design def)10(ault of the)]TJ 0 -1.2 TD 0.0401 Tw (jail command. This means the)Tj /TT11 1 Tf 12.4754 0 TD 0 Tw (ping)Tj /TT6 1 Tf 2.4004 0 TD 0.0401 Tw (\(8\) command will get Operation not permitted. error when used from)Tj -14.8758 -1.2 TD 0.0525 Tw (inside of a jail. There are)Tj /TT11 1 Tf 10.5601 0 TD 0 Tw (sysctl)Tj /TT6 1 Tf 3.6006 0 TD 0.0525 Tw [(\(3\) knobs for allo)25(wing a jail to access ra)15(w)-302.6(sock)10(ets, see the)]TJ /TT11 1 Tf 24.0452 0 TD 0 Tw (jail)Tj /TT6 1 Tf 2.4004 0 TD 0.0526 Tw (\(8\) man)Tj -40.6063 -1.2 TD 0 Tw (page for details.)Tj 0 -1.8 TD 0.0365 Tw [(Once your jail has netw)10(ork access, then all your normal application install functions are a)20(v)25(ailabe, right from)]TJ 0 -1.2 TD 0.0372 Tw [(the jails console. In particular)40(,)-287.2(i)0(f)-287.2(the ports collection w)10(as installed, it can be used as if from the host system.)]TJ T* 0 Tw [(A)-380.7(modi)]TJ /TT9 1 Tf 3.1585 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (ed)Tj /TT11 1 Tf 1.3245 0 TD (make.conf)Tj /TT9 1 Tf 5.7816 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.1307 Tw [(le is installed by the e)15(xample )]TJ /TT9 1 Tf 12.6549 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1307 Tw [(a)20(v)20(our)40(,)-380.7(that enable the ports collection to w)10(ork)]TJ -24.5881 -1.2 TD 0 Tw [(e)25(v)25( )240(en)-250(with a read-only)]TJ /TT11 1 Tf 8.9009 0 TD (/usr/ports)Tj /TT6 1 Tf 6.001 0 TD (.)Tj -14.9019 -1.8 TD 0.7411 Tw (It is possible to change the IP address of a jail by editing its con)Tj /TT9 1 Tf 35.8705 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD (guration )Tj /TT9 1 Tf 4.3236 0 TD ()Tj /TT6 1 Tf 0.5561 0 TD 0.7411 Tw (le in)Tj /TT11 1 Tf -41.3064 -1.2 TD 0 Tw (EZJAIL_PREFIX/etc/ezjail)Tj /TT6 1 Tf 14.6523 0 TD (and restarting the jail.)Tj -14.6523 -1.8 TD 0.0321 Tw [(The jails use the same netw)10(ork stack as the host system. In particular)40(,)-282.1(that means that if a )]TJ /TT9 1 Tf 36.4619 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0321 Tw [(re)25(w)10(all is needed,)]TJ -37.018 -1.2 TD 0 Tw (it must be con)Tj /TT9 1 Tf 5.6382 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (gured in the host system.)Tj -6.1943 -1.8 TD 0.1787 Tw (The ezjail system \(and the jails it controls\) depends on the )Tj /TT11 1 Tf 25.931 0 TD 0 Tw ($ezjail_enable)Tj /TT6 1 Tf 8.4014 0 TD 0.1787 Tw [()-428.7(v)25(ariable being set to)]TJ -34.3324 -1.2 TD 0 Tw ()Tj /TT11 1 Tf 0.4438 0 TD (YES)Tj /TT6 1 Tf 1.8003 0 TD 0.397 Tc [(i)397(n)]TJ /TT11 1 Tf 2.0157 0 TD 0 Tc (rc.conf)Tj /TT6 1 Tf 4.2007 0 TD 0.147 Tw [(.)-647(I)0(t)-397(i)0(s)-397(possible to set this v)25(ariable to )]TJ /TT11 1 Tf 16.3791 0 TD 0 Tw (NO)Tj /TT6 1 Tf 1.2002 0 TD 0.147 Tw [()-397(i)0(f)-397(the administrator w)10(ants to temporarily)]TJ -26.0398 -1.2 TD 0 Tw [(ezjail, or if she doesn)18(t)-250(w)10(ant the jails to be automatically started on boot.)]TJ 0 -1.8 TD [(The ezjail system may be reset to a pristine state by remo)15(ving all its )]TJ /TT9 1 Tf 27.3663 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (les, that is:)Tj /TT11 1 Tf -27.9225 -1.2 TD (/usr/jails/)Tj T* (EZJAIL_PREFIX/etc/ezjail/)Tj T* (EZJAIL_PREFIX/etc/ezjail.conf)Tj T* (/etc/fstab.)Tj /TT14 1 Tf 6.6011 0 TD <009b>Tj /TT6 1 Tf 1.1 0 TD [(\(b)20(ut check the list of )]TJ /TT9 1 Tf 8.4497 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (les this matches\))Tj /TT2 1 Tf -19.707 -2.4 TD (EXAMPLES)Tj /TT6 1 Tf 3 -1.2 TD 0.0276 Tw [(The e)15(xamples belo)25(w)-277.6(are only that, e)15(xamples. The reader is encouraged to read the)]TJ /TT11 1 Tf 33.4294 0 TD 0 Tw (ezjail-admin)Tj /TT6 1 Tf 7.2012 0 TD 0.0277 Tw (\(8\) man)Tj -40.6305 -1.2 TD 0 Tw (page for de)Tj /TT9 1 Tf 4.4976 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD [(niti)25(v)15(e)15( )-15(documentation of all the options.)]TJ /TT2 1 Tf -6.8537 -2.4 TD 0.0625 Tw (Initial Binary Installation)Tj /TT6 1 Tf 1.8 -1.2 TD 0.2348 Tw [(The ezjail system may be bootstrapped either from binary packages, or by b)20(uilding from source. The)]TJ /TT4 1 Tf T* 0 Tw (install)Tj /TT6 1 Tf 4.5725 0 TD 0.1218 Tw [(command allo)25(w)-371.8(t)0(o)-371.8(bootstrap from binary packages, while the)]TJ /TT4 1 Tf 25.8423 0 TD 0 Tw (update)Tj /TT6 1 Tf 3.9725 0 TD 0.1219 Tw (deals with installations)Tj -34.3873 -1.2 TD 0 Tw (\(and updates\) from source.)Tj -3 -5.4 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(5)]TJ ET endstream endobj 24 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 4 0 R /TT3 18 0 R /TT4 5 0 R /TT6 6 0 R /TT8 7 0 R /TT9 8 0 R /TT11 9 0 R /TT13 25 0 R /TT14 26 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 28 0 obj << /Length 4569 >> stream BT /TT6 1 Tf 10 0 0 10 72 744 Tm 0 g /GS1 gs 0 Tc -0.0834 Tw [(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ /TT4 1 Tf 3 -4.8 TD 0 Tw (ezjail-admin )Tj 7.4513 0 TD (install)Tj /TT6 1 Tf 4.8007 0 TD [(\(without an)15(y)-250(options\))]TJ -8.152 -1.2 TD 0.0585 Tw [(Fetch and install binaries for populating the base jail from the FreeBSD FTP serv)15(er)55(.)-308.6(I)0(f)-308.6(the host is)]TJ T* 0.1324 Tw [(not running a -RELEASE v)15(ersion, you will be ask)10(ed for the release to install. Neither the man)]TJ T* 0.0849 Tw [(pages nor the source nor the ports tree are installed. Note that the FreeBSD FTP serv)15(er is some-)]TJ T* 0.0134 Tw [(times so b)20(usy the do)25(wnload times out. Use the)]TJ /TT3 1 Tf 19.0738 0 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (h)Tj /TT8 1 Tf 1.2136 0 TD (host)Tj /TT6 1 Tf 2.6639 0 TD 0.0135 Tw [(option to specify a less loaded serv)15(er)40(,)-263.5(o)0(r)]TJ -23.5514 -1.2 TD 0 Tw (the )Tj /TT11 1 Tf 1.9155 0 TD ($ezjail_ftphost)Tj /TT6 1 Tf 9.0015 0 TD [()-250(option in)]TJ /TT11 1 Tf 4.5273 0 TD (ezjail.conf)Tj /TT6 1 Tf 6.6011 0 TD (\(8\).)Tj /TT4 1 Tf -26.1454 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (install)Tj /TT3 1 Tf 4.9673 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (ms)Tj /TT6 1 Tf -8.9186 -1.2 TD [(Same beha)20(vior as abo)15(v)15(e)0(,)-250(e)15(xcept that man pages and sources are installed in the base jail.)]TJ /TT4 1 Tf -4.1 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (install)Tj /TT3 1 Tf 4.9673 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (p)Tj /TT6 1 Tf -8.9186 -1.2 TD 0.1067 Tw (Same as the )Tj /TT9 1 Tf 5.3465 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1066 Tw [(rst e)15(xample, b)20(ut use)]TJ /TT11 1 Tf 8.6395 0 TD 0 Tw (portsnap)Tj /TT6 1 Tf 4.8008 0 TD 0.1066 Tw [(\(8\) to fetch and e)15(xtract a full FreeBSD ports tree)]TJ -19.3429 -1.2 TD 0 Tw (from)Tj /TT11 1 Tf 2.2498 0 TD (portsnap.FreeBSD.org)Tj /TT6 1 Tf 12.308 0 TD 0.0561 Tw (into the base jail. This is necessary if you plan to install ports)Tj -14.5578 -1.2 TD 0 Tw (at later time into service jails.)Tj /TT4 1 Tf -4.1 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (install)Tj /TT3 1 Tf 4.9673 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (P)Tj /TT6 1 Tf 1.2001 0 TD (\(note uppercase P\))Tj -10.1187 -1.2 TD 0.0451 Tw [(Only fetch the current v)15(ersion of the ports tree, adding it to the base jail.)-545.1(This allo)25(w)-295.1(t)0(o)-295.1(either add)]TJ T* 0 Tw (the ports tree after the initial installation or update the ports tree in the base jail.)Tj -4.1 -1.8 TD (Install from a disk image)Tj 4.1 -1.2 TD [(Mount and use a do)25(wnloaded)]TJ /TT11 1 Tf 12.0004 0 TD (disc1.iso)Tj /TT6 1 Tf 5.6509 0 TD (CDRom image )Tj /TT9 1 Tf 6.2773 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (le.)Tj /TT11 1 Tf -21.4848 -1.8 TD (mdconfig -a -f /usr/8.0-RELEASE-i386-disc1.iso md0)Tj 0 -1.2 TD (mount -v -t cd9660 /dev/md0 /mnt)Tj T* (cd /mnt/8.0-RELEASE)Tj T* (ezjail-admin install -h file:// -sm)Tj /TT6 1 Tf -3 -1.8 TD (When the installation )Tj /TT9 1 Tf 8.8032 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD [(nishes, use the follo)25(wing to release the)]TJ /TT11 1 Tf 15.6933 0 TD (disc1.iso )Tj 5.651 0 TD (md0)Tj /TT9 1 Tf 2.0503 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD (le.)Tj /TT11 1 Tf -30.3101 -1.8 TD (cd /usr)Tj 0 -1.2 TD (umount /mnt)Tj T* (mdconfig -d -u md0)Tj /TT6 1 Tf -7.1 -1.8 TD (Install from a local directory)Tj 4.1 -1.2 TD 0.0174 Tw [(T)80(o)80( )-80(fetch the RELEASE base )]TJ /TT9 1 Tf 11.7536 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0174 Tw [(les manually)65(,)-267.4(create a)]TJ /TT11 1 Tf 8.9167 0 TD 0 Tw (.netrc)Tj /TT9 1 Tf 3.868 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0175 Tw (le in your home directory and pop-)Tj -25.6506 -1.2 TD 0 Tw (ulate it with this.)Tj /TT11 1 Tf 3 -1.8 TD (machine ftp2.jp.FreeBSD.org)Tj 0 -1.2 TD (login anonymous)Tj T* (password FBSD@home.com)Tj T* (macdef init)Tj T* (prompt off)Tj T* (cd /pub/FreeBSD/releases/i386/8.0-RELEASE)Tj T* (epsv4 off)Tj T* [($)-600(getdir base kernels manpages src)]TJ T* (quit)Tj T* (macdef getdir)Tj T* [(!)-600(mkdir $i)]TJ T* (mreget $i/)Tj /TT14 1 Tf 6.001 0 TD <009b>Tj /TT6 1 Tf -9.001 -1.8 TD 0.0818 Tw [(Then issue this command on the command line. If the FTP do)25(wnload times out re-issue the FTP)]TJ 0 -1.2 TD -0.0001 Tc 0.0001 Tw [(command again to resume where it left of)24.9(f.)]TJ /TT11 1 Tf 3 -1.8 TD 0 Tc 0 Tw (mkdir /usr/8.0-RELEASE)Tj 0 -1.2 TD (cd /usr/8.0-RELEASE)Tj T* (ftp -v ftp2.jp.FreeBSD.org)Tj T* (ezjail-admin install -h file:// -sm)Tj /TT6 1 Tf -10.1 -4.8 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(6)]TJ ET endstream endobj 29 0 obj << /ProcSet [/PDF /Text ] /Font << /TT3 18 0 R /TT4 5 0 R /TT6 6 0 R /TT8 7 0 R /TT9 8 0 R /TT11 9 0 R /TT14 26 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 31 0 obj << /Length 8340 >> stream BT /TT6 1 Tf 10 0 0 10 72 744 Tm 0 g /GS1 gs 0 Tc -0.0834 Tw [(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ 7.1 -4.8 TD 0.0468 Tw [(Use this option to tar)18(get the 8.0-RELEASE )]TJ /TT9 1 Tf 17.8628 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0468 Tw (les you FTPed as the source of the running binaries)Tj -18.419 -1.2 TD 0.0222 Tw (used to populate the base jail. In addition the man pages and sources will be installed into the base)Tj T* 0 Tw (jail.)Tj /TT2 1 Tf -5.9 -2.4 TD 0.0625 Tw [(Fr)18(om Sour)18(ce Installation and Update)]TJ /TT6 1 Tf 1.8 -1.2 TD 0 Tw (The)Tj /TT4 1 Tf 1.8663 0 TD (update)Tj /TT6 1 Tf 3.9122 0 TD 0.0617 Tw (is used to both install or update from source the base jail, and for updating the base jail from)Tj -5.7785 -1.2 TD 0 Tw (binary packages.)Tj /TT4 1 Tf 0 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (update)Tj /TT3 1 Tf 4.3672 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (b)Tj /TT6 1 Tf -8.3186 -1.2 TD 0.1178 Tw [(Build and install a w)10(orld from source. The sources are tak)10(en from)]TJ /TT11 1 Tf 27.9692 0 TD 0 Tw (/usr/src)Tj /TT6 1 Tf 5.1686 0 TD 0.1178 Tw [(\(b)20(ut see the)]TJ /TT3 1 Tf 5.3594 0 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (s)Tj /TT9 1 Tf -39.0973 -1.2 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.062 Tw (ag\). This can be used both for creating the initial base jail, and for updating it after the host has)Tj -0.5562 -1.2 TD 0 Tw (been upgraded.)Tj /TT4 1 Tf -4.1 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (update)Tj /TT3 1 Tf 4.3672 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (u)Tj /TT6 1 Tf -8.3186 -1.2 TD 0.0418 Tw [(Update the base jail to the ne)15(xt release using)]TJ /TT11 1 Tf 18.4389 0 TD 0 Tw (freebsd-update)Tj /TT6 1 Tf 8.4014 0 TD 0.0418 Tw (\(8\) \(i.e. using binary packages\).)Tj -26.8403 -1.2 TD 0 Tw [(This may be used only to update an e)15(xisting installation.)]TJ /TT4 1 Tf -4.1 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (update)Tj /TT3 1 Tf 4.3672 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (U )Tj /TT3 1 Tf 1.3668 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (s)Tj /TT8 1 Tf 1.2001 0 TD (8.0-RELEASE)Tj /TT6 1 Tf -11.4855 -1.2 TD 0.0237 Tw [(Upgrade the base jail to the host system)55(s)-273.7(release using)]TJ /TT11 1 Tf 22.5096 0 TD 0 Tw (freebsd-update)Tj /TT6 1 Tf 8.4014 0 TD 0.0237 Tw (\(8\). This may be used)Tj -30.911 -1.2 TD 0.1517 Tw [(only to upgrade an e)15(xisting installation. T)70(ell freebsd-update which OS v)15(ersion to e)15(xpect in the)]TJ T* 0 Tw (basejail via the)Tj /TT3 1 Tf 6.4142 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (s)Tj /TT6 1 Tf 1.2001 0 TD (option.)Tj -8.2144 -1.8 TD 0.0405 Tw (Note: Check)Tj /TT11 1 Tf 5.3574 0 TD 0 Tw (uname)Tj /TT6 1 Tf 3.0005 0 TD 0.0405 Tw (\(1\) and especially the)Tj /TT11 1 Tf 8.9916 0 TD 0 Tw (UNAME_r)Tj /TT6 1 Tf 4.4912 0 TD 0.0405 Tw [(en)40(vironment v)25(ariable to upgrade to dif)25(ferent)]TJ -21.8406 -1.2 TD 0 Tw [(v)15(ersions.)]TJ /TT2 1 Tf -5.9 -2.4 TD 0.0625 Tw [(J)15(ail Cr)18(eation Examples)]TJ /TT4 1 Tf 1.8 -1.2 TD 0 Tw (ezjail-admin )Tj 7.4513 0 TD (create)Tj /TT8 1 Tf 4.2006 0 TD (www.example.com 10.0.10.1)Tj /TT6 1 Tf -7.5519 -1.2 TD 0.1052 Tw [(Create a ne)25(w)-355.2(jail. The jail )]TJ /TT9 1 Tf 11.1848 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1052 Tw (les will reside in directory)Tj /TT11 1 Tf 11.2173 0 TD 0 Tw (www_example_com)Tj /TT6 1 Tf 9.3566 0 TD (in)Tj /TT11 1 Tf 1.1329 0 TD (/usr/jails)Tj /TT6 1 Tf 6.001 0 TD (,)Tj -39.4487 -1.2 TD 0.0244 Tw [(unless the v)25(ariable )]TJ /TT11 1 Tf 8.1839 0 TD 0 Tw ($ezjail_jaildir)Tj /TT6 1 Tf 9.0015 0 TD 0.0244 Tw [()-274.4(has been set to some other v)25(alue. The jail will only be)]TJ -17.1854 -1.2 TD 0.0695 Tw [(allo)25(wed to use the gi)25(v)15(e)0(n)-319.6(I)0(P)-319.6(address. A w)10(arning will be displayed if this IP address is not already)]TJ T* 0 Tw (con)Tj /TT9 1 Tf 1.4438 0 TD ()Tj /TT6 1 Tf 0.5562 0 TD 0.0655 Tw [(gured in the host, or if some netw)10(ork daemon is already listening on this address. The name)]TJ -2 -1.2 TD 0.2352 Tw (of the jail which will appear in the)Tj /TT4 1 Tf 15.8772 0 TD 0 Tw (list)Tj /TT6 1 Tf 2.8856 0 TD 0.2351 Tw [(command or which will need to be gi)25(v)15(e)0(n)-485.1(t)0(o)-485.1(the)]TJ /TT4 1 Tf -18.7628 -1.2 TD 0 Tw (console)Tj /TT6 1 Tf 4.4507 0 TD (command is)Tj /TT8 1 Tf 5.1104 0 TD (www.example.com)Tj /TT6 1 Tf 9.0015 0 TD (.)Tj /TT4 1 Tf -22.6625 -1.8 TD 1.0528 Tw (ezjail-admin create)Tj /TT3 1 Tf 14.6241 0 TD 0 Tw <00e9>Tj /TT4 1 Tf 0.6001 0 TD (f)Tj /TT8 1 Tf 2.6029 0 TD (example)Tj /TT3 1 Tf 6.3701 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (r)Tj /TT8 1 Tf 2.6029 0 TD 1.4028 Tw (webserver www.example.com)Tj -23.3001 -1.2 TD 0 Tw (10.0.10.2,2001:db8:1:9243::80)Tj /TT6 1 Tf T* 0.0101 Tw [(Create a ne)25(w)-260.1(jail, placing it in directory)]TJ /TT11 1 Tf 16.1886 0 TD 0 Tw (webserver)Tj /TT6 1 Tf 5.661 0 TD 0.0101 Tw [(instead of deri)25(ving the directory name of the)]TJ -21.8496 -1.2 TD 0.0138 Tw [(jail from its host name.)-513.9(The jail will be created with the )]TJ /TT9 1 Tf 22.8819 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5561 0 TD [(a)20(v)20(our)]TJ /TT8 1 Tf 2.5007 0 TD (example)Tj /TT6 1 Tf 4.2007 0 TD 0.0138 Tw [(.)-513.8(This jail will be gi)25(v)15(e)0(n)]TJ -30.1394 -1.2 TD 0 Tw [(tw)10(o)-250(I)0(P)-250(addressses; this is possible only since FreeBSD 7.2.)]TJ /TT4 1 Tf -4.1 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (create)Tj /TT3 1 Tf 4.3672 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (i )Tj /TT3 1 Tf 1.3668 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (s)Tj /TT8 1 Tf 1.2001 0 TD (600M sandbox2 10.0.10.4)Tj /TT6 1 Tf -11.4855 -1.2 TD 0.869 Tw [(This creates a ne)25(w)]TJ /TT9 1 Tf 11.1142 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.8691 Tw [(le-based jail ha)20(ving a )]TJ /TT9 1 Tf 12.2308 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD -0.0002 Tc 0.8693 Tw [(le size of 600 me)14.8(gabytes in)]TJ /TT11 1 Tf -24.4573 -1.2 TD 0 Tc 0 Tw (/usr/jails/sandbox2.img)Tj /TT6 1 Tf 13.8022 0 TD 0.0613 Tw [(.)-561.3(A)0(n)-311.3(empty directory)65(,)]TJ /TT11 1 Tf 9.2613 0 TD 0 Tw (/usr/jails/sandbox2)Tj /TT6 1 Tf 11.4019 0 TD 0.0613 Tw [(,)-311.3(will be cre-)]TJ -34.4653 -1.2 TD 0 Tw (ated, and used as a mount point when starting the jail.)Tj /TT4 1 Tf -4.1 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (create)Tj /TT3 1 Tf 4.3672 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (c bde)Tj /TT3 1 Tf 3.7671 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (s)Tj /TT8 1 Tf 1.2001 0 TD (600M sandbox3 10.0.10.5)Tj /TT6 1 Tf -13.8858 -1.2 TD 0.2102 Tw [(This creates a ne)25(w)]TJ /TT9 1 Tf 8.4789 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.2102 Tw (le based image jail, with)Tj /TT11 1 Tf 11.0481 0 TD 0 Tw (gbde)Tj /TT6 1 Tf 2.4004 0 TD 0.2102 Tw (\(4\) encryption. During the gbde creation)Tj -22.4835 -1.2 TD 0.0567 Tw [(process you are ask)10(ed to enter a passphrase that is used as the prime seed v)25(alue of the encryption)]TJ T* 0.0585 Tw [(process. )-250(Remember)-308.5(this passphrase, you will be ask)10(ed for the passphrase e)25(v)15(ery time you w)10(ant to)]TJ T* 0.1061 Tw [(start this jail. As the)15(y)-356.2(require administrator interaction, jails back)10(ed by an encrypted )]TJ /TT9 1 Tf 35.2054 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.1061 Tw (le are not)Tj -35.7615 -1.2 TD 0 Tw (automatically started when the system boots.)Tj /TT4 1 Tf -4.1 -1.8 TD (ezjail-admin )Tj 7.4513 0 TD (create)Tj /TT3 1 Tf 4.3672 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (c)Tj /TT8 1 Tf 1.2001 0 TD (zfs)Tj /TT3 1 Tf 2.5669 0 TD <00e9>Tj /TT4 1 Tf 0.6001 0 TD (s)Tj /TT8 1 Tf 1.2001 0 TD (1G sandbox4 em1\\|10.0.10.6)Tj /TT6 1 Tf -13.8857 -1.2 TD 0.039 Tw [(This creates a ne)25(w)-289(zfs )]TJ /TT9 1 Tf 9.2491 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD -0.0001 Tc 0.0391 Tw [(lesystem based jail with a def)9.9(ault quota of 1 gigabyte using lzjb compres-)]TJ -9.8053 -1.2 TD 0 Tc 0.0134 Tw (sion. It uses the parent ZFS )Tj /TT9 1 Tf 11.2738 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0134 Tw (lesystem con)Tj /TT9 1 Tf 5.2068 0 TD 0 Tw ()Tj /TT6 1 Tf 0.5562 0 TD 0.0134 Tw (gured in the )Tj /TT11 1 Tf 5.5104 0 TD 0 Tw ($ezjail_jailzfs)Tj /TT6 1 Tf 9.0015 0 TD 0.0133 Tw [()-263.4(v)25(ariable to create)]TJ -32.1047 -1.2 TD 0 Tw (the )Tj /TT9 1 Tf 1.4844 0 TD ()Tj /TT6 1 Tf 0.5561 0 TD 0.0127 Tw [(lesystem in. The jail command will add the ip address 10.0.10.6 as an alias on the de)25(vice em1)]TJ -9.1405 -4.8 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(7)]TJ ET endstream endobj 32 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 4 0 R /TT3 18 0 R /TT4 5 0 R /TT6 6 0 R /TT8 7 0 R /TT9 8 0 R /TT11 9 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 34 0 obj << /Length 1838 >> stream BT /TT6 1 Tf 10 0 0 10 72 744 Tm 0 g /GS1 gs 0 Tc -0.0834 Tw [(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ 7.1 -4.8 TD 0 Tw (before starting the jail.)Tj /TT2 1 Tf -7.1 -2.4 TD (FILES)Tj /TT11 1 Tf 3 -1.2 TD (EZJAIL_PREFIX/bin/ezjail-admin)Tj T* (EZJAIL_PREFIX/etc/rc.d/ezjail)Tj T* (EZJAIL_PREFIX/etc/ezjail.conf)Tj T* (EZJAIL_PREFIX/share/examples/ezjail/)Tj T* (EZJAIL_PREFIX/etc/ezjail/)Tj /TT14 1 Tf 15.0024 0 TD <009b>Tj /TT11 1 Tf -15.0024 -1.2 TD (/usr/etc/fstab.)Tj /TT14 1 Tf 9.0015 0 TD <009b>Tj /TT2 1 Tf -12.0015 -2.4 TD 0.1666 Tw (SEE ALSO)Tj /TT11 1 Tf 3 -1.2 TD 0 Tw (ezjail-admin)Tj /TT6 1 Tf 7.2012 0 TD (\(8\),)Tj /TT11 1 Tf 1.666 0 TD (ezjail.conf)Tj /TT6 1 Tf 6.6011 0 TD (\(5\),)Tj /TT11 1 Tf 1.666 0 TD (jail)Tj /TT6 1 Tf 2.4004 0 TD (\(8\),)Tj /TT11 1 Tf 1.666 0 TD (nullfs)Tj /TT6 1 Tf 3.6006 0 TD (\(4\),)Tj /TT11 1 Tf 1.666 0 TD (zfs)Tj /TT6 1 Tf 1.8003 0 TD (\(8\).)Tj -28.2676 -1.8 TD (Interesting additional tools include: )Tj /TT11 1 Tf 14.8853 0 TD (ports-mgmt/jailaudit)Tj /TT6 1 Tf 12.0019 0 TD (.)Tj /TT2 1 Tf -29.8872 -2.4 TD [(A)50(UTHOR)]TJ /TT6 1 Tf 3 -1.2 TD (Dirk Engling)Tj /TT14 1 Tf 5.4995 0 TD <009d>Tj /TT6 1 Tf 0.3291 0 TD [(erdgeist@erdgeist.or)18(g)]TJ /TT14 1 Tf 8.817 0 TD <009c>Tj /TT6 1 Tf 0.3291 0 TD (.)Tj -14.9747 -1.8 TD 0.0755 Tw (The man page is based on a draft by JoeB)Tj /TT14 1 Tf 17.6944 0 TD 0 Tw <009d>Tj /TT6 1 Tf 0.3291 0 TD [(joeb1@a1po)25(weruser)55(.com)]TJ /TT14 1 Tf 10.1431 0 TD <009c>Tj /TT6 1 Tf 0.6545 0 TD 0.0754 Tw [(and w)10(as re)25(written by Frederic Perrin)]TJ /TT14 1 Tf -28.8211 -1.2 TD 0 Tw <009d>Tj /TT6 1 Tf 0.3291 0 TD (frederic.perrin@resel.fr)Tj /TT14 1 Tf 9.4707 0 TD <009c>Tj /TT6 1 Tf 0.3291 0 TD (.)Tj -13.1289 -43.8 TD 17.775 Tw [(BSD January)-250(15, )17775(2011)-19470(8)]TJ ET endstream endobj 35 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 4 0 R /TT6 6 0 R /TT11 9 0 R /TT14 26 0 R >> /ExtGState << /GS1 10 0 R >> >> endobj 10 0 obj << /Type /ExtGState /SA false /SM 0.02 /OP false /op false /OPM 1 /BG2 /Default /UCR2 /Default /HT /Default /TR2 /Default >> endobj 36 0 obj << /Type /FontDescriptor /Ascent 753 /CapHeight 562 /Descent -246 /Flags 262151 /FontBBox [-113 -250 749 801] /FontName /JFOEBE+Courier-Bold /ItalicAngle 0 /StemV 133 /XHeight 439 /StemH 84 /FontFile2 37 0 R >> endobj 37 0 obj << /Filter /FlateDecode /Length 24055 /Length1 172192 >> stream HMlgJycҀI8vbqK^qvb'vlNY׮v:i!@А4HLoB;pav$8p@!|W> >돫 xl*yŻ] _AոO~ϼxz++AͪgoߺJ7}_{c~ڹ_W~wܹu_߫w'?wUkY߱;?h=~|їe^c]wyÇ F|{.8U{Ͽ?k౿Ž[|/+? c[?Ƃ+qoW7?GG/I3yM~hyw}W ugz|7557{$:Fc ~c`lvxʸq]si= wC7|c׌]noe~f?GA0R0???????????C!?C!iiaa0?a0?G#?G#YYYYYYYYYYYYY(?GQ(?xb<1O'xb<1Ϝ98O'y>>}}}}}}}}}:_u:_7 o7 o7444444449s @΁3r9s @΁C9r9sC=Pχz>sK-=sK-=sK-=s[m=s[m=s[m=s[Gz>󑞏|########cccccccccccc~ܠwEw;w].wOOOOOOOOOOOOO{={=}>???????????????C!?C!?G#?GwyvIVU_(Yx <+ԕs 2bV@$%)DE%^k^m׶?>ws_ %? 1c? q?8q? 'O? 'O?$I'O? )SO? )SO?4iO?43g? 3g?,Yg?,Y?9s?? y?E|)SħO">E|)SħO >%|J)S§O<%|J2>e|)SƧO2>e|SO >P >|*T Ya?gU~V*Ye?g_ſ 5k_ÿ 5k_e_e_e_ǿ:u_ǿ: 7o 7o&yiI&yiI&yiE1-"O<-"O<-"O(g~.~-Na {Xc? {B_=%aO {Vs^U߄C߅,_)5a {]lq/gW$>!3o {Dؗ}nYavlWf󾺊5_gOw}s;z*vVE}oUY~R+~,c¾8ςZ˦;$ ¾/ߕy|TVaʚG GZUn~gk*e+q{[<\^yQrQ ^x=X{_~{߃E{sT'~+Wnv;NYυ=(!a!oֈ%,&y#ȼ? N'yO-HXia0]xS؟5" ¾&~(~$gA(lar RN )=+lga ¶m/]-la; o-;3;3]&h}O߁0k 8Pa ;X!v#%Xa ;^dމk'KHf|smv0Â׌/X3Pb6 Hإ.v+mvk]+5׌H –ńŅ%eɛ0( + +  [V66666vGrD䞉={f,*=CTz Q3DJ>"*=CTzMQr/EOIyvt[A5Ϯv<[^S^ωVsv6sx~>9Z4-lQEV^':Mv*6a C;%naW}/a {H<"Qa {\ž=#Ya {^ ^W*5a {C؛m[%"wBDU"rDkzأ`+{{>ׁ= UCo?~_iqzPC/ ~A_WDi03` XkO4X.gڂv:X;`g}L0SI?K +`W]v-`_6lhRq`&MV6l X%T*i`fV v;ܻ^W`qf\, 0 ̮A`+ )@>`O )-r\)0W ̕O` `Kf9S`z`NR3L*00IfRy fR '0uN 5&* 3+0 ̸3dhZ[`o`.a#X؟>;Y^ e`' !X3G``; I+ |o |o |o:u XX̂E`I"z y."`0[ VR0@A``0`_"`_ a`W  `#`50a ̰fXs̵Zs\k -o6lh1`7+6 lD& Vk˝{ p.8!8!![! ! !!!p'rv7~  x0!d2z;B!{C!dwg C!g4d` 5Xg l!?[r\lsk ~s``gj!Zȭr=\`} Zȼ2k!Zȼb0ȷ|k!A`o-[ Be-dY YBe-dY YBe-dY; ,k!ZȲ,k!Zȷ,k!ZȲ,k!ڑ`e-dY YB)-dJ B)md)`U v4`3f mg6No-l=`[8v ؓ`k b{l=F0i,4MA SF#Ȋd2`^ ,e:`drU'|A.<}7>AGcG#zz==>A_Fo#m}4 M|?Vt2J,׳L`gLt`tzԫyan2j*Gkreiqj:^W7W_S:WM32*ߐYJx]F5 w j j>m?&gvy:=m}W R#p}O6A֒] ZTCM^?$d`oN˾/g'=wɾ J?PeNjjչ^e¶^Ϋ{^;{}:#}(:YNS;yug8{m9Wwsz 3']O ū b8XRs:wղ nireA{ (rl{0v˃^nppۭu=vۃ>v5n77v~n0v <;)IhR1-:W"ViQm#9jԎx]իsQU,RsMXnT{MjkHV}?qm1UgDYuzjүVUժPCgiϘ땱7?*1X+'gX"jIlMzGR 5.Ѩ U{zE՛URrQj刮 3%AUkeij_q$TڢktB;jڜPqU$udj:{ )h[ ؆ZP)C!@`#_C G PKc c5eNE&LeFed,E)"F"2LP~{%/cgw޳g9YMn2kD+nօZicO(@84*+(RգT c3Jj1mW@_s&$EjW/yQ}'%8` g|KA@kAO2d5p  @/{&犖M > $߲LJF `1l`W)u:͠i #N`O+d=-ls!9|ҟu]h\alJa"$x`tb-l5h6q,}^!y>I2-S~*ix-}v^ ]}KB{ŐO<G0OTO |i+ -}KZuk]uZ~je˜>d+ N۝ ڶ+SP\~hS7]<& IP.hڍω@;z1ryQP3~n֜掴ZD_-5hg븧Ԭ=Vhg^jҨP?#߬K?-WwzULV+ތn&F\U}L3me g:Ju_z2oFe"W8u3s&w&-dNm琕١\y7|w+%ߚFI[篡OZ*ߒÇo` E5 +Uob0c[gz' ^$Fi4Bh;cc>DI 0&7Oސ?kh菁Tv`p [*SHD;Ņз!`hrN5oUk,qm] 5sg.rg\]3øzubô\ٖ~Jegi\q~S*!uw.oW?4z}EtOl+0.W:r+Bpgge/ u߂ ܹu;ކ i^<7?pP<縞]YML W<N&{u'b}T q˙gQK3'3([sqY}Gl}Z%'lX x`,0竌&$;tNs^o8.e>Tksi `Xb]yFPsQQ78IGP&RZtRh"J6RD[tm mfl1x Sz0G!ѢFy"]=i%J fKsfkeIjMD$j|VDwx}H"6B1%o:h6CwSsyᜦU($T&tiQ?2B9xw1-MHP_w?_Iǣ#,/ o3AZ ԯ.ij.}[* 2pM9Lto=(`DJA;YS{x(`,zӀє꟤qxdr8x }}I4~*ߥGUIO{@1l #k[jgO<"-%ށ8wa{Rq2N!Klp6h8SՉ;oj:O:SwG31f:d(1CϧbxGvg꒥ޓe$.NĻCOGzO/$N pJUt?Mm| guˑC2Y=;<Hg^XuuA/$.HL:>XL=Kջ?-#mZWk=|.Fez>ĕrjz/PC{=m6F!n9*C/FfU6:+_ v0}JwFħ~{w<{:<_\vy>Fըxkzk?"Dmt]1T_LU {s}7r}#)d D AH@Q"5`d؟Y9ΰOlrv&r>α?3~fƯ_RJ(EwK2~_7_J] MdRl??03Hˮ3Σ0p#cb##2, <ć1Ixrg2cJ{So"cZ_c,OtS.%䩀QgtJJe1f)]B[9%17`2F͌URԽṙ|niDHcT63 򌳙q|HSj"'L+ԀiΘrLa#̐Y62#vO2Uy4tkls,OG2Ǚu#!馘 &ަ8on!AYI"fb.1XXZ2Sy,1.*wt/t_KK_ bUR(ɪtwT{Gaz,A:MIezT_Obj+=+/6}.>!2f+Y_yH6PE!P]˯J//MT \}š6#6' $"&!5UG esZ\R--U:J'+z*I<ړlGGڻM\R`Hv.Įnf.qHB|_<{p^CpW IGқ* ay~}#ٗ1)fD^`P0pH(h*IsPQ1PS3~96R/$G)l1*"j1tL߳J_A6b#N$N2=*R~}Mkn)$'wgggg*C4tY/9CyBpڛf)׮ن<ۡW|,:}{}́>x Uh7! ~8_>8q Gh> -:BIoFtbrjp|gS '+sxB8.±Š;.c|"5jz諦v\!hTm7th1tDωA]FQ&/E3", nf*PucqǢĭ<@bPpcq=$\cHo<:q%Q%xmp&~G0@Nza{4jEC[qw'nEvǒ/b~cc)XD>Iq?֮'Xzљ\BKxʣHGv]B:z['t~['؉N҅'qBI `F^'~sNt@_BR;ы9cNݗ 8= 8ݾ u։'kAp#Jsw ׍'ORR7 wԃ{ύutc<>9ڍpx<utnjo8&\hM>Vqf\7XJ1ox(f<2vCcM2` u+XnjZn,\o`:dz`'Qp_`Mqg_Zgg_> #9X؇"'p_x940oa9XC/rýϭ8][n=h=WqkEVEz'߳imV9BUB[DLWmJĐ'&^Q5H%S4*iVwSI"fbnP*L4"c)&zjRsڴi+Dmu:RTbCbp\ڴiLTƤ2.-2eJwfZ;;;ݮӦMcו߇w(ѝTobm1Ŕn]L_R"cJnUbaLW m1]%J*1X8x#jRS_iǭ:\mڔEGi1SYg.qq>qB"bA9E%!>m1n29QW mڴo`QDYIQ[XڴiLTHc]F[dL˔n2 KS čħoiӦ1уl C;Fj'Ym1Ŕn].c1՘i̎:c37 N|;g6_Q[?g%R!B $t"M* H."M(*` d3#3slv=յz6il42X(3Yl17榜V)'l2Ȧq;Yrv\AYrR9oR,F KcYrUj+7ݬ..ĹuS^iRjևb吺 fP6L9Kp10sh.Jj,z@‚ wqN/aэ=c#K6d>c+]㣪P;^~WFV2M5fݜӽ[~n%qk9P5dSDNBut.+=}׫zP$9h5;HGƫ=k0_R?\7Vo##)F[ԏu˜|v73[/͇G 3;49R7ṚX "XB}"՝DO3\/\FP /:^)W Vװ:XO 6Ӽ7vnqT; zPJ=֠w s/~(IwAuXݳ8VG9QnI})OuNi8gȂKkpn\jċpl} ;em韌B݃@ᑮ;VL3T,.nݱ-D!ۥcO.^5\/"-w'TQb10C0K`cIHN(hJ1r *3J}tef9( Tr)Ra:V ebuAX ӫQ&75[5؂E+)Z:u>;n#Ka{i2E']h`w}]ק=V=Vd[ǽ ŵ ;hЃ,J1İ~b0PB  :~S( GGr=s4XCx1:~K 6NI8TFK{>~kG6N:L%vis9bWcB/6Op>bEB-{NqjK\A\Iʐ+) ܈p3V܆qݸ>'x;gNBG]?!~0VGW]0cB''}O)=MqFK3g ΋Yd.l/:bWeq5yC';o-nr|۠pޕɎ{}_?0臲8ll_6Sp8]8]989 r,Yӏ(?g1✁A!%889KrFpFrFqFs,Y3333,g"gg9dT889+rfpVd暠͜HUE5cwIQf`>M܅. zoXH:|?& ;fNgF8q C\a>{+8FVA6F[E0u'J1Q ם' YKal غ sl0Qo#Uk!IBpwq3lM$NjH̘da៊|cu0 _SQ܋$QbDS2*NC竴UYmZ2 B䤕aO?݃nr2ɨ0 R{>:eaBqc'6#|8|ZC#|Wq 0lN.uc, #,gF=5r{OYpw"1ZewzE*v t/Uk!I # lgؚHDՐd ꪒ)V#||W$ IrZ$ީ!H:*87cke˵UDJWiγڎCZ2 '¯Y>u0'p>hӐнEQbl=j"X` } i)udf ]rmWp~'8z|?c"&q3yY J(kLLp {\` y,b +d9oJy5?lO);^_O\Ϲi<x7swuy x/gHݸgHBʤD*JwSFNX~C؋b*筼_vV۲J=.]e7!{/ʞ]{V {h9\2X8so rH&A2Xp(x9ANqpe9ANX#e2阆8\L4䬔eWapb8|bOR"~kNv_1~/?9B\3ot.r78 y7!lq$=ٝ3%)R*R-{btA/010>9%\㬑wd<{BvY#Xy+<VK?,'a2-GJ `>!!X9FnZ G9}r a2cedd1>xY¥rgOSx ޕI2E:?u~B߿ݽܭ#@]9yV7k<33%2j?89s|Il%t_ TU|>޷\Hewf/KtZ<3NwMbf5鱍~x uDkίoj[, H`;4Ig5@b~̨kJOHl:c;l]v.蒎u"oUvmawݴ퉽O}7;=?5.f~7~ω#QĻn:c}/~і~8z 8&3c#u"!C1E8~׌ĨFFfMr ƶ0sm}̫"o0t<ъ\}T}wUc<^ULG}oU!_ WA {*论ZJ^fj_nB^%}~{96,3y.͵t n623j\Vi6]UEiܸj/6! I9#ϩv'"M ̧Dccv6`~:Έ<\93jg卞y^MsFύKE.ﳅs~|p^Pu~ZxH8$h{);i"AՕqH+Z_'\x_ 7U7:W$I9"9tm:\}g\8={#wocg{?=R9OTN:S~*r"3!y{.8O!K_\qHjH=EC*7)RR"C*?8S~+c.~;3LìG y2,GힽGg9to=6ˑQ8ݵIRBjr's%;hg5| )a00NWO/ EEńŅ%%R$aaYa9a0EX_@PHXDQcDž¦f'O [ [ [  v*aй"S&yt1< y)V aW |zȋW%p@Hu^:*zr֙<yE?Wâz* bq]%hXRaMɒ> pUy#JyJaXV>+țRΛj'[aXI z=UyUuitTC٬+mҕNֵ穎;[W_z:fdk_:!w:{Ȼ#:n;AL M:?yK5_pZ/^ OO|͖VuW|`~jd{ϿSzOzߋgdl~ M΁~eoNNL͸: cmlnxNֵ] ]f0n[ӡ[P?#ALנ'(clQj,XbC⸱Xbb;Xpز~jaxVyPq?Q>7_gyq\o[_Oow(> ] }} : t=::W ԇBO7 ߜw87(~kQPcD(Vdhtqӡm= =}_] 2(Z[}Q@QObs Q_aY+[+Z+z3d堪k!;kZo[02k~{Ce_k%Zw \s- J?_J;kfPM 5\7 }p5B͠&TDSD3Dsrg \s- jAkAvd?gς!~UQ:T;#~xċ"^B2W@# 5}:vGI3f8݀kٚIȝ\s6Н[妙N7Z!kΘ;;<jmnqT0*Uר$#y8VZV]Uء*>7 J V㰹B5P KP]MSe61>\ʨrJV)jژkU[sjgn07,'D>yW1*VUW5T#XuWo7T5@ TǍiq8a3S%q`0usqӸ3шDDmD'D Cm0jbe\OQͿea Ll*LԌyKpZH i멋EUF ZZr+(auםqO˝mk/3X_m0Sddo@'MԌ۽\?Ww~FO<H34>!Jʞ*􉧪: <50K0FzjhCci 4&dBSiMnj3SSfKh>-ZJ%-崂V*ZMk+ZKhm6Jh;vKh?}C t1:N'$t9:OH2]t Iݢ6eR3+6dGq4p,88B\pQ.ŹD.ť9pY.\+pEĕ Wj\kpMŵze*kqU!)5S1t7> (- 3Cww7X(!(2o=߷ήs{+K*դH )$TjK ROKi(4LK i)pHhi+1+tI:K*ݤI)Oޓ2@ ,Cd 2BF(-cd2A&JAJP5TBA͠|"e̔Y2[\'e,EXRY&˵ԾJVn/ (elm.-{dvr@!9,GrBNj>-g䬜%,W\rC>|!_--w|%_7ܓ|('띿oX~?~R+WAarHFbF+q ,}2|`b b>V63]9Ll30 KL9 ħXXX؀؄x$ [ ۱; {qqqGq q'q qgqqq qWq q&>pwp_k|oqx?g_w'xgx?/+H$S1|o150-1=30#3130+1;s0's170/1? f!YEYY%YY,˱<+"+]VfVe5Vgk&k1YazlFl&lfllVl6 g#he cَفىم]ٍ^>~|999C99#99c999ߜ~ȏ8S9N ,<."..2. \\õ\x&0[۹;{yyyGyy'yygyyyyWP’0Ib]:=Zi]c~բ%J}DEY\vLjԞDpeõW[im P殤Z~yz6H3iJ7r6$5Ʈڼu-T.Qo`X߰F:ﵤk:fچ)QUl!1)-YV1(V4XUV,'\6]S)cel)6˔.D=[D [l [&ˁ!%Nq-\fϩ쮺bVf̚Q Y̓ٲdgK1U_`HIc-T4*S^F5(WJ҈ʸ(GL+?W>/g4Ge*xff{|#jV}"D$9MJjռ&S.~Y^2z6~#e;T{i6֪Zy^(Soʫly1mo~W27}%* t ffxf\I>ev2D=_v=H[*/HGy.OٜS}28ao~ܞsLhQ9^܎^['?pC)o=T~:6GSyda?CE&Bem+xn_Gl7fbKݡ?}>h$(G$X> O2wOolJyMF.:ƵnUZ[{jUUj+ͳppWGYB6ͱ3k6vb}K3l6n^4WqS ?;;ОR&4h"hbw~0>wһ;gι3gfL?GWj5uj2whD,IԌ{7Ʒڢ;ͣY׬Ih eG¡}sRYoԞnCp#yT\QQ=xx sU7Glދ,u-: gL T{ ~H-y<}U(}}6e`l Yڒ2.;8OnK)MOYgɐ:TzD:o7d$(?+sٛ :>˨tZ 3"&`?0'tN>83p(ć0x|o|O)i>g Hڀ4Fv<컌XW$1o&Ƅj,@tL N^jĨ\4ՙXaI]m} G*ZZ*W,.7MMfw„$$! IHB%Q/*\r(.iEf?R>Tkձbi[6 s*ZAK Nh m}%Gt'8x]Yd)&ji1W(fotי[=ͿP.gϙ'O3/hcGu]۫M0,[A endstream endobj 38 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 676 /Descent -250 /Flags 262178 /FontBBox [-168 -218 1000 935] /FontName /Times-Bold /ItalicAngle 0 /StemV 133 /XHeight 461 /StemH 139 >> endobj 39 0 obj << /Type /FontDescriptor /Ascent 753 /CapHeight 562 /Descent -246 /Flags 262179 /FontBBox [-113 -250 749 801] /FontName /JFOEBL+Courier-Bold /ItalicAngle 0 /StemV 133 /XHeight 439 /StemH 84 /FontFile2 40 0 R >> endobj 40 0 obj << /Filter /FlateDecode /Length 28717 /Length1 178732 >> stream HMhivG]\|ٙvڦIyi/iiڴIIbwvfQFXtYz񠰈{Ad{؃D=x g=>LXϕ '~6"޻•_o5o\_#?ts# F޺ܽY /}n9>/8|_|V# F^P]޾y׿~^ W{>o_~t-ӟwW~o 7ΛOtR|O=+޻~O}౿?? F~|yqy_xGh0򪥞|ŻٯT7S {]X\b>lf4ή^/r_տ^s3Jmv׌k?125QyOhT/k{gzۘDzfј{swcFן0z7Fw}uCy<2qw81V &'''''''''''C!?C!???%l?a0??G#?GQ(?GQiiiiiiiiiiiii?c1?y}>?1111111111111 )))))))))))))?C!?GwyvIVU_(Yx ws8q?8q? 'O? 'O?$I'O? )SO? )S_E_E_EO?4iO?43g? 3g %_ %_ %_ ,Yg?,Yg⿌2/㿌2/㿌2/B9s9s?| )SO>| )SħO">E|)S$O">,cO >%|J)S§O >%|)SƧO?TƧO2>e~ Ya?+g~V Ya?+W_ſ*UW_ſ*Uk_ÿ 5k_ÿ:u_ǿ:u7o 7o&MbiI&yiI&yiIyZĴ"O<-"O<-"Ou>}ҧ.}ҧ.}'gYo ˀuZu@]e:e〺 X5Y2i<3Z9l6}fs>2i6+y[YL|+1IozÅ!a M&Naw [=v0y {@؃0y{Tc'=%ia{Vsž,a {M-w[(laVȝ;!"o9"rD<ț&r#L>yD^gJoJoJoJon+LPPp{aCr/r/r/;Qܑ.v݅!lOa__r_ OƄ&}Y(}Yx &=M(}m(}m(}wxSIJ!Lag (la;Wy¤g/&=px]"Ra \6 RU®vk|YUa_Ά LnY #(DF R¨Wn20(q&""6""!& DE+-ĂD䘅ᬧu=OW3=l3A7 ׂ]v= `76lp XƁVV6l-`n6lm`U`6lLY`v\j6lBE`-l `K[ r V 0 GV=Iu`O=,wl `^.X~CFo+؏~S^v`v&`~vQc`N5}eF 1bJZ˅2M'~_f+L<9c.gOd+)W4 [C\ҰkJo{ yi0[5`W`Ӱi4qzX#B {0W4+4X 5Xاڀ},3`y``mN,X;`} 0;N}M] lإ`_:X ؕ`W] klh1``&M6l TJi`U`f6N0xv ^+{:@U d^)+@ @ oA9BW J^)zl\"@z d)N*I:lN*I%0N ɫ`r@^kyM 5*? W t\+$i`o;߃;w>0Y^(;W>`IO@0 {A7 {@7 {t 3X+`E`g `灝v؅`}[V 6  E/  e.`W}ltX@5a tXs5Z@5k Zs؍`76l XƁVV6l-`nj_k3LJG`qB8!V}!BÝ`C ~0` C!dw;B!{C><B!?`f`m+`9`m06 l!?[rnm7σ  rj!Zȭlszk!Zȼ2k!ڋ Zȷ|kAo-[ Be-dY YBe-dY YBe0Ȳ,k!ZȲj!ZȲ,k!ZȲ,kGAe-dY YB)-dJ B`SVv;`f6 2v\j6 2]^`-l5`#Z'ց=Bς=lt ƾ9"ȔdcY1A9ߛ!EٹLG,A Do"2`G"xFGGG`O`O`O`O`O`O*``_``````MBI߫$dL߼V{eF1Xg(dY 1Es7oeF]Uֺ,}* o>oz1oқyឫ?_5t˘KLc*u֐4kxVkxVe dvo:s)c&u aT`?'/A֒G ׻ 2^2 ;:usrXs93ٽKt5*g 77of/SvޛٛzٟCщvɛ;5{ +\ջgȝep?I~].\xs/75*:5:7wC7׹Ώsn.u6wf7rݼ/5| 5G|]G}\zj*579m=y>H_Ο閩_.vax;t2wt8pǕ7c;q;p;?rUղ[=V˃nPPVYnpӭVlZVAoz>8׭}R+=78ϭj j^׭jQ߭R++xjuKJ$VoWWZiѹpZjVQuݠv5]&JUUZb1 Qy:71ش5-7ѤGm1퍿[Qsp3< ԡJ(3KV^/PM55Ԫj3ZUjh;Ms*[%kdw K@-ITϴ|Aj'UbW,~&=@EgZ9k+0LjP:Y^5\j*Om5dj:{ )PBoI_bRjiB!Z R~ 5jƔV3 fPSTd2 3*#c)"Gc0A!n{/yݳs={Vvz;E:GmBnKT޴F].S=2V]h8F4H A2or(j-A (Uv(Y%ZC N5肯B??ZDgZ yQ}'%8 ^z<4ˀ[!~5vP%`\Ѳ)b '\[iYH, j;"[S6R% / { ,qŬŴm.f=Os+v[ٞ2MiS$Ean^͗F1e+$χ  R g2?{1(X D?\p*MXp7]ֱc^ΡPc Cci.G":hgģ|89DWxmG$fs牘1yCxrYԳ~7r%L=|nr\q_91[ߵr{ )[2>/^ *c{\GGX_@'t 9@>e,rD{Q";wz0-#;QX ]f)S?IerD >HC?vncV$uu=W6絭j~'ߒU@D`8'}z\`4N75g';#Ia=YqJT ^]r{rܸ$)xo_ĩq*yrS sqJ|WvQI꽆VS@U!&ħ־Jh{V`ewWLaz61 y.N|ZZLu1q؃_Lճ {,s7 }}!g8$AMP@D<`PD&&AD߼ ߫{]]V!z_ ڀ͌≮)w[zc[b~V[ydH i#a>c)Y9?GyM/ qO[l+2*}?y?ae|#7-E #,E%G:BG0睰Yyy=`ާg D2Ut>}֟Sۙ_y ׶|xmM5dRCt e[F7̌?0 F1b##2FY#H02&ɹ̘RkX>/1V`J9[Ξ TĨd_sJe1f*UBrJ cnV<yX󖀭,}kߨT-KQרg40͌nd4hb!cb#Z)1&Fh-e@Jus'f],e*nFw =, yֽ<}lfg3bXd)96Cap{L#F͇`qlg͌Cz'xR1H=) frXlMwƜczH gβqvs,EDsy|nc R{8Ŗ~%2. Y?߼W?7Kx+,E #*KQyxXk >DILLgVgde6cgvbbc`beN`Na:(Ftp͌aaeƚ1*gE+S(cTL,Q:*]{:U2Ny*P<8 &^%*]X&rL9f23,L3cw3(YlKLQyS+]ҔbYmRm3eᘊ&f8on)ΎJYdf19\f ]d+*cf])G^t_KK_ J)Tpβ-&QX7K5Y[MIT[TGXyau MHa6WzdY Py`#w1/^BM^V(5#llllżٚن֌Wy/-T*quKPR16ׯbzUzd;yڳlGڻM\R?IXv.̮nfNqHlU?/Myv=CS}#cj(}w_~,r&⾔( `ٟc*1A{`faecg`db62<' aU{? 0?ןOH?<_h.cT9acLǙT{J_D6cdNdN2=*2MTT)JpSӘә33H!)]VrKP,P][_!\c;7F󢏢`~ c` q@lC_q$2VBp8#t>-:]CI)) 'bOpEScA}w^uyQj}ЗLШڎhСŠ9'}N B429>*+ #u8ψXTXTqǢCՍj _ߏCOڏs_" M$gF}Hc-~M\a>aݝ-&hԊ{@N܊ma~bW"~q8kWc|T=M)RΣ% -/ .! ] kB'˅RqUm0#  :/Q]\1X ޅˍZׅZ~օnߍ:“܃5Rx˃g؆ǃ'wލ֋kŽ:zv^Ebx<MZqϤ]X/@cH?1U|45cXXC&d1u*c&I XLq‡{$ku p_$#lk{0oa9XlE?{-k[q.Xlc6<mE(xP=Lf3 #[tO-2{m.UB6mś_7 #X5d6b6ǥMDiªwm1.SM4g՚نَٖٞفّF6mn=Hߡ'GwV}Hw1"c)&"cJnUbaȘDj s,sscI)-WyW6eё>mEZ T2ecg.`żyOPNkqHt-2mY*UB6mś_7 #+X=\\sK6m7 ueEL6.G17072gnbnQMD%o+߇w(ɱSm1Ŕn]NtTL?_Q[?g%R!H!B :H. ҤIU, H/ҤR E@N7٘ osl6粁?̆jGq.u/^F2f6V;gvD_l~l}F1lN9W*oѷbsg6S;fS$6N iYaq?ՔO.j絳ebq4JVh7묖vWbsqv_mkw- PDXsE0{ ĕ)8nO  AAa( QP8PJA2P͝#AyT*PsPԤZP@]Eh hph Mi&ךKOxJJw y׬FѓS丿En%=Pׯ۩V7ـđmGe8aL;+8ox&$L)0<ށwmMaYW?,i=brs$=<z|J/ L;{cP'OsJv_(uZ/a ` 2a lyl3ܙɉ`Sn8z s?Awo)(w'6G:ǝg')~SBgrBpHKpR*A&܂Ҟ72= ܱZ_{ʎڬ٬;u'OCxd౩Ҕ;vLLkB ]Hcn3CK+Ǟ΋^S햻*?c A!0 c NH(Jhnb.1匳Sq ΒR4E)$U1aye*cUFX_0P9S5`C,,X7u.ebWHqr Q"S3S5`kb"_?,.6p:cĽ&`,g%Į9qV&KLkXJԷbȷB&:dҢ]]M&LwHr" )bOܚv J/7@^N胩]e6=ymi^Ns7\/QG n/w j1ํڵ xQy}~^ G? P51 Je!_Ў(@}xhg@ (Z)/DR~f/EGǁz4=6J_ 9L_ki>Av"#B-J?ހpЀDK%Uy) EAc ,((JY REDJ{E QS؍9$&Dc 1;*Fӎ!*ٙ;.ݯݙ_UuߐBO=VDkY02hq {I 5}BZFk#f|n WU;/ \D'i]SJ_W ) 3\PjfW+0ĭʢhtJ# >o{7cuF8y>h\T=v2¥z*6#/VՄE}wYοQ|{G\]FX}?AsaIVKFewUHUgF8q 9z; "ҥ~eaEuDVE^X;M̥ 3bfԫ # b)֊C # fؖHD͐e13Y0¯|cy0 BnUV(BJ")ErmQbUڪõ-axw"X99iek>}w#Dqmd)½pol2 j8B6K9*&P$6C0*pm ƂeȧbX8/0px K'NFzUObڪp~o^Y9WzUaA<'% _ h3gFZ#A5e.Y5V1?j]`DcUPWeݏ7֌Z5rG+Dt|#\U$F^ȳ[`^.38KR00ƦZ+IPo/ha`7öD"m$kPL?#MfO""H "$،mR/Vu(F*=_:n;k` Ã?ge.} e@VC:WFKPuFAy6( #lbq31m~zL,3[rmWh[ǣ _+07j;+eJ6` W3u|os xL汈%,c9&C\َCvݼ!?9?F<'w.iJ~)j!ཛྷ%"1v) )*i߱;N9 9؇Oc㭼_;k Y#KbJٓtu6H9k=I҇(9L2WXΡΑyz G@}WP.#y ˉr.˭|^&Ar O:$SpN /L͛HU_tFי[|p-ù8_泘,㬔'vb{#%܁3> p.ܙ򇸄pw_:k5y!lq$}؍JRʥT*Z!LC8_3fR\f_>9Y'oZY{LX#]Yy o;k{LC1|8F1oh<'b\~fmWpw@yU}m<&Ӗbs5ZT/N{:1Utv{1(Ẩpު\ݰn ѡ9nul6f(deB#FdF##6FgFjcrVcyWzn|q5&؛yt䜕S"v'VhO<4Ok:ty6#gcjwjwjW`ȣ+lػ0 E8rKYfbvڜs#)6ȣ+l{ "] V`~9<\[re15ծYZfw#{~`m?̯,u9+k?fEus¾, ,I,Eg #c "A@DAz[{ދ"7{^/sw~3Λ9oͽ># `/Ch3/UF R{ ; Q]>&duq]>9Q؞LSwS3}z6wF>3;+z*9̹xǜ.pl/E; %R2Ji\{_ JGu5Z}0iA|=s>ĿentT7i+nW8-=zߑMݙ Yݝg~xW{_>8m<G8#٣{?=T9ۄ'*S~6rN{Oy]*KA{ ׯUj)\TpFP[ATI{Ol:9l:nZ.He2@f|llll| 9%5 Yf[$ K2UnG@E*υ@U@G1*ḥF ᨁyU^ gW%3y{(_ɯ,cRAy,F+@^Uj!XLָUVƫڧ.J OTкvD&ѧpy#JTy\@4Sy3\@"hFPEYIUYYU@UUjfuUio]{;juezLج*ڬ*ש};ʻXλғ*;{POޜOU7ܱ@*3*k|h|lU;O-U>v>Z F gpl"+&:   moONNJN:lbnr~tt+1> :->2c*>݂B~GC/ACCOA@/bQ 5XEb qZEov_>8 ~j`x VP1 Q7Oyq\oG[߂Oo(>]} }:>t=: :wLԇ@ڛo;ߛw$5h(~Oq{|w 4:G~K΂>..Zk9xWB~VCAqc7(^n( ؜b|T`oXJlkJkQZ ^ekflZo۬1t9ߞkHZ"ֿC5\sAD{+Ϥ,د23klUPP\s͵w3XQр\s- j>HF4B4F4!wp5ׂ͠ZlM ц|Kz"׈v8"}P%ⷈC=U!x'?#:"TGꤲ`ۈnl1Cwej&u'wvpMãm&{\I3u7Z!kz̝mP_9V17bc.X1R [Mc s-!?)rq@kUSqT%ZYJ1FƋ5$;NKd9o.wr/G̕g1an]c9O' q\j.e emYG-u^67l(&X/6(-Ȫl ۲+ q8g2NǍyqٸh\777ql2$iE$"Q1%FM̱b_oY{{=/gF:6?5-m89bkhgzJ|y cͬ~Esf$u'X_m3Sddo@';=\:OVLLEQo/#@@OyO" TTT!4SD ha4Hh2M4 8<=5hͥy4Ba -eJ_rZA+i5u6xjFDi mmvNEi}wta:BGtNi:Cg =]KtUFݤ[H?mP.R!"ED-Xq"'($ "(&xQBDi ʈDQVE *Je**|UI("’ұ.%Hg(-H) H(b7";sv|sj;s:jD-F.nD=G4D#1) ͑hVh6h ] ݑLd!=\D/F ܂[1pn;1#1 wa48L$LƔ$%ܘK' I$5i4IQLcf`&fa6`.ISX.:2{ZUjZzg :x /cc^Nnb?^ÁpoQw.#|O)>8/%u8opz?'_p 47?'gQ@19<{m d)fϲ,"^ "+2^nlJW['*Uy-c5^ޯkkSX1l&l46cs[[ F.®`&a.{{fc@qsoaRn72wrqQEF#ñg b'r's{k\>!>GL3N3389s9Or>Lp!"..2>繜+\õ\[/%m|;{r?_7xoQw.#~O)?o{AmEo=2~56u-Fl5k{dda?#x&"cʅ+DYᅰ!ֿ1 YqŚ»x|=.Ye=Y4Y|V ks|e^Kb^lXBCǧ=o_cQVQsgG0p ߉-=M04O&Jm09\m)dmrYa{&xxqv};4ƣvhǻGã\{:hPS-2Ŀ>ccE t[۱Gʱx4z8fm2ݓ33ݖ[6\8;{$޼6$fCбERua my?k;6RZ*C)v#;T' d,RGaYRpdwν;Y,G$ERH^oTgSBwG]r'5sudYTu4_·+#Z(Qs#s*+#e)CAeBɊ :Srdy̤|CnT?F~$Zdf n"3#^~5LhF9]k<19rCPD KN?I_>Ɍ\#>^ralԸ2| ֓q]2|UcM9K&I&*|}/eƳQy /7ɱƼv?(Xi c3AXVʸY8WU4NFW剀p:8^'yހ?CEu!p { 8t '<™x8Ig)h=S*UlK!RQH6 6A=?ɞ?Şobfmocvh{.RM/H#aR"%t|1U* ˔E{?W_S%BN` ^A*wr'.p7$ #[9r'xBWyo |od. %|.~)|)_w_@A>C|6<lVհy?5| l_|Vn G>a~ }8f5, +:y-7In f+$ l6]ЂЅ ;!`p]v 7#<`}5ZQ u`" 8$B#"(8&bzsh FnM6fh"m-&D+C" N,;E',D8-Ȁ" ȁ{D8/({E/Oį*0VWq*~Q-R+(Rf娺m.[5W3ύ Cj:>m|ғà {.{r3v9V͢v]:4ॳbnglϖWU ͡ZJU"~|ciUs:S1Y+q^iW'ZG8394i ڋo;=^tg+w qY؟TIS#6^*Wo5ɇ4,H[vur|t"M ;S:<;6ov9ݝ X9茇ͦD>j=x`Ёoӥt&Wowt4e{z3|-g6=2k+yT&Z֟ 7 ll8&Za "fAu"D~WU«YDpCkJR`[4&Q3=*3|K.e}hFthf.ӥٞ]w?寭cϤz]]tt1I;&itKd1|Ir#AwBljj Enf$TY⎄6R3]cZ4hCbaBC0>KxMzRpR]F&]v(ϤC-={ڵklnֵٹlZsz;?frvx6dhx5U?)n[>ӟhyU62/҈h_:75fWE C Zc;ZY:1Q'yʺ YZɒ%ْ%˖,꺒e,16Nxp!0IMLr))iI(I3yHдɃ:JhBbvI\fb5LxKڕVZ͞]wc$5qU@,FV!B+RCwghw񼘺DOq $o2.On=egW4X Dnbacz ໭w$Ho2]%J]Ft P$$#$'Jpw1$G]qxZ [&g< &] 2~ÙC}nj~wH}[h@eof˄clQ\]I4W_` D- q0L7M:E- .gdMS('4i!SzC_)HZ +\Z1?%Dje`P4'S&5tJ"M`Nϧ 8e0zOo̲_V LF"I"dֱWC_jj\EHxP0*uvbr㺝|f4?EЍWSLpTRV@ܯBïԀR! H:;l+n  ),;:1tO3*,#ܱ/d> ^!w{fGOQ%GlAvרE'kBw,_i9TQ*j+DHlPUzcYHVdžÍ^p.ԇ(Q0!H41zg0M[r?កr6LE"~6(L崲c (? :nm!("M2[2-8qj& IFĪVAVݭ^S`Z`ZCyQ<`:oyĵˋ  0HaL3oZ+>U/54GH.uxyǶm;^Ծ Ɠrۏ5τxkt( )De+(ː)G,27rDHlS>$JbIJ`NY H\,[Nk{$8&Xcc9| 'ؤd v7&ͣύ//e⃪ J6q ]T0i5Kc~\F}} laϋ欷'CREQ9󺸳\C6S9͌ J(\t* F]RLFM8(]\P J<oQi1NN}+=VoQZ" o󺒃MPOjH-RD 6#G9pF~&2J(AK08F R#39'Uft'ɾ[7޸yE?vES^{k`jTv-j׻᭛<;~?Q,n*OƋ|kJu],!Ϧ),>Sϼ0jdB(]o,4%7aoר_M|wTԡXK,J4C3xYWV4DTuB'W$YGY]߱>ܙ=jiwA1tPcS1dbvh,+8h?w+s7+fMGoFh[&s{}Cx\t}= |/иrC⧮u`̇=q J/gvIc}R!kPI&Xs-rBbv>Ҩ-/ID@M򸄔 .TE,Dk-.q'qI-$%T"C0P(H0ȗI7tP-"*>o1lJ?\-7l B42J+څEDcm*zJ(W#9!"խZ w7OM!8yr`Փ!\'wO7S{9wϩO٩+SXcwsX`f>"UoʉȝfLvFtjrRMD"AOR*r qEK6cYKJEaf ɮt83wKJr?V7=Ji.2 k;`7;ݰjU*\bt:kcWWnfG]q"hohq⭵q nX\"*R#rPײHQ~m/QhjiL$pt[찐4])gi=xFoϋ64GWvb6OCѓlA>4}p>*-UנJBU( e#Rpg>`鄴kc5\ߏ]$$?WmlSU~[nl]ۻvltmsaN7gI?, b!!# J( HLI -=Ɨ11ys{ws>xam]߆094S.H; 8{ǰ1v{G7Vl/NN" #+HTLji5RMfDׇ8f^D$N"vUJouۏ=wjV^?s"Tg?:`5%OԻB!/yd)QM*7?Hbn|E5aE-FՠF-X "2%&pĎT"È{/G8Btr =5J+xًHÑ-f~ ),]$ JwqtIq~\e~%hOH$Y?99ڸ1 cTRJ5!Ƽ*;{;+5wLSD7afJ9\ŬAe.e(] jU_^)_,3}e&N*@>(GB/* vpX12f4uZΆkU|ØI-~ l9 Rc{k鯩GGqW[. _ j6펦ZV`y..S f:gKc5Ocw()@~4)){^{5#wVE֫/srI ¹|RK.̙bR56T9%JW+bx >PA{cūR!%3adχųi:) C7cq4҂:` PbTŜ+Vp pY-Y;;)9(̳VʵxԒY^OASq==]&rl~oso,};H9k`Ws6'0Sb9mqŒ\cÆ0zf䜴2RY q''$ 'h$U/S.wȝ,'-I(}JV(ᐯxc= Yh-;X)$?[sStX/ W]@`33jm;woIOv1o0swӊ6ʤ{UꐚQ, NjNk+X V`O6i*î6甚7> endobj 42 0 obj << /Type /FontDescriptor /Ascent 753 /CapHeight 562 /Descent -246 /Flags 99 /FontBBox [-28 -250 742 805] /FontName /Courier-Oblique /ItalicAngle -15 /StemV 51 /XHeight 426 /StemH 51 >> endobj 43 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 662 /Descent -250 /Flags 34 /FontBBox [-168 -218 1000 898] /FontName /Times-Roman /ItalicAngle 0 /StemV 84 /XHeight 450 /StemH 84 >> endobj 44 0 obj << /Type /FontDescriptor /Ascent 753 /CapHeight 562 /Descent -246 /Flags 35 /FontBBox [-28 -250 628 805] /FontName /Courier /ItalicAngle 0 /StemV 51 /XHeight 426 /StemH 51 >> endobj 45 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 653 /Descent -250 /Flags 98 /FontBBox [-169 -217 1010 883] /FontName /Times-Italic /ItalicAngle -15 /StemV 76 /XHeight 441 /StemH 76 >> endobj 46 0 obj << /Type /FontDescriptor /Ascent 701 /CapHeight 0 /Descent -298 /Flags 4 /FontBBox [-167 -299 1094 827] /FontName /JFOEFL+Symbol /ItalicAngle 0 /StemV 0 /FontFile2 47 0 R >> endobj 47 0 obj << /Filter /FlateDecode /Length 18148 /Length1 37096 >> stream HW}tovgvfwvx$T1V` %H1pRfwfGf? =H$RBҔFDnH)FJ!)bi (_R`zgvvSo;o~w}of `ȬGE6߻H -y~*iۃEË|כ"(Gʂ"CR$kk/!TY2@6?.  ax ?&|4y㱨Fl,JjNu Jܐ&5`}["*҄ #j8R^:`Mk-.f PDr(Gd z=d vDXɬ0Z\&֒Q{'Vh(oIM/t@3t0 2?a ΄gf(ĠlVL&'` <9ֻ*{&[ft9p/7?$1EioBm0R,9"ZPVC1zqK1WgA RVû "rCaus7W +y9 }v| bJIfŰ]af!'^bnK :sic/&ibqVVn, #c9g tNS|Nws |s=~pŵ.K>N$Fb:k .|M4)WSW&1qU&3&֘ϘZfFnb0q4gMls&n>Ss"QY ƼPL҅1Iip׼!Y+Op~%ʡXJ'KACzU{F$}ET5IQ~6CE A6GTJ_"J,{mԋ^Iv>S49AwªpDYR|GS5s>y죯1|A^$)4rH#n⩢Ș[n { qyRzP 3EØ _lJ{LըJ>WV MW{i0Gv@C'B0Q/Tkwԯx0h̃!1ebPgo(ޞ#v=Io*S2Uɨxө29j8(ge\%u߶ }1M+)Gm1.5xwSC0dj}E_,L_/')LɆ' iSKhv F,b: )=~(DcAt3}Z_B4ϠE?O<9ߌTKϤ4Q&h:Ii}<ڿmK,I~l71rŞմL㟤evM4|5FjO3wg0isn7i}03:=Z&6eV!Wo칹&GZ-qxۜ%jDgVYUoVmz}osTB_'$l=u=:b8Z v'ًfa?[|Vllc6 PH!kB ضK#_proc,fq7f q~pqmnnrYbX_̪sAlp}9RϨ# $pdz~YPknx{Ul` {^oO>Yx,m-+^r:@{(gKMC چtU..~vʿYUQ4}T}|.]0Z֢_:M#Z݈9'I}#Ww]iy+-ٓf|G]$Yk}+GEyHt>g~4χU`n3>÷NDKڂ Z#v@FOܸ; )]# Pa?Nhey܌tɡ3TIgcnuɰz@L4Ʀ#=yr{ /v 6gs ,(֮ !#}Zy[QՑ`M}OŊJeǫl%lȘI ~M:xmd[3d*duWfPJ(Ƌ(&_}HD|x6L_+Vi=B=Jb[+h4םk) eeeP5gf'm(?9zp§Hi\iy͟eOβ*bn*:Rd[]r }Jr'"O%nE6P&Vi ]6"`;$lZv##Щ1YJ+h y SᾚPoTB[r.)!Ui}m[GǛmBWZDr{ـbHW}H,9k:]_HNNlcs gv9lR $NKxZ"NPC\}(Z+ 2"6ZY,wDck;(]\ի1d |x&3'|ɤ\adt fkM1vՏ}[d؟lGA]kGz6 a;e12.9w6ksFDuc'xEfY8\1?t6G^cy=' $zGMlo<2лs ωgcݞ(XN95"*9v5/.ǵ' N%9 LU@FZ}6Cc~r^AS]Dca}^S.EK@twqZʭr/ }ɮܜHrEV;(X :4H 7!NjTFs? q#v )c[:,U$# S@ #֘ɳiCld5bu3Nj02vrmua;I``"L)0y= y$,% kVZ!ڠ^xރ+3p.%7ĉ|L!/ sRC!ȯJBJv^9@BQ9Ey%LC 5Q+us2Urk)-)ɺ{8ҁ{_Abc4-ْKj;x7\]MOA|8J tw'ZStm'>:D?lMx< uT=ιܽATۥq$wT6^juxEk oa1Uz:2m}➓̜[\~4s\K&k% 9R]A#%4qi:$g-1A=ni-MEBH-JASlc&9gYAB;`6gM peN}XCؿݱp"ju/"h1b-G?e2ܶ|lH E&?4c- U9aQmZeӝey:Uۅܜ1<7*68m碅%-/ @M=a[i)7ݶtR Qa+6Wt]Zb`ɧ7.,Z.]w*`CCW"E ->q  QQW}3z΂%muaQCф7x2e~3jNE2b vӽ1s^ yz+Db?pb9V#Ee MFkB//53z0/U4s^Vט/-^e9Ei m보JK0B{^ֲ$[OfIiPMyDNCoGr99! r2fd^n>g)MR>2xB./G=ی ِ3Ɛ1M F3^ZӜ\e@9{rv%.:U+B2Ԃ)ķ{itZ+Cl#BDZi|Yck.۞/ou٨ԟ_g+s4'G6{DSTD!WhE,i+{}Gh}("v4H)c,hL!Z+͜+jq|sбiJu㊾@> #f뺍ѬPfA{XevC4py4/+' nC< ΦߥnJY"ƾ=1ˢmI o';P_y09K/s^-˲kyڴދaa{ &$w^ kYIڲǺ(ML2`>+ol4-¢cMH˽/ueAФ^"+G9UZ;߰fAimcRtk,yݔZz?HDabΰj^g+wZt-<{ϵ {ZI,EK,ʻD;TjNqXÁ.o?F |v9t47h DUtlx5^e a(:x <_/Wq*KD &Z mI $ȫw$E o_;=eX*f i`<„f3旌μμd12X-e%&v+ngw`ìϱ?e_`OeE{6u{k'm kǁB%%#иcRjk@I\D$¤ & J H$dJ(S!qg)0<;y~ՏSzNR44-]j>m6IiOkӴgR-FyTܖ@M|*H2X8+ب&U+"⋨Tذ '6H&v1$ U$Sc@ s;Mё5Ѣ DزJ[k"')(åUNJŶ_xQ@Da #50p|sP&bܮ8H2p`߉"etC+4&\/IqJ&! E8+(XՖ2)$n+ycT7qp>=On;)գo7 $FO[3JWw) H=vH-tiPEɵq>qzZ.x\޹f@5 E?=WW`޳φaݠD0$..f'=C o%NJ`J/[~[Xx&D"&幱V!#^2Z].E[T 1; :Izz PQS yo 3I_.6э}onN#!ECfv ɖZW Vok(F$d:2εI:.,SRwQ2>s59>x+];_U}\\_$-؁-NW{VW t;=q^idۥkvo^2=zu|]ԝ@i:ͨcо- >?}Yk=Y/aKg+Mvy{Wq TH^!09$ȅ*BU0?BdWo/Mh caac/9֧|׈7gqO&"* AܸfcRC^%d'o&^&Aw}KIWr'_+Ĥ@=qQ7r:/͠$GIf7VZ.+h#5t@nnIzгt+]'W` lĮX!ӑ, ` Iš #K0^u7;(;֝ٴn;;:s=@z2>96響X2}l45aC O!gG ([GvH]ו%f!cV+2%YexaK;*o%^D;u s:C$&‚HU/(;{ Mьw#MTb[&"DI2Q/ 5"D%hGqlg^aLF#\PN/o{w%ةU;nwo~ou9..9r{MgIރEuPry7)W~`^Q5{ fhCvN.|%7 .艂Gn_a濽eS|S ƜŽe33׾soU<3G]O\ΒA;E Ե) *j֢]-UЎ{&{e2qgOoM~ȗ3%q\ch߄Yr")\h͆D;d[o3-Ά- ȹGNxV[z q8YsC<{nڎ[uCi*419cCU@0|[ +Ύo>d 8P%$uw~3k> M*Of l $v&Y'4L\)M4~_Ztbw^~{Y'ڞY H#>7u1#'gNs'x SR9RP SaPz l`܃zꇰX+PO=a#B>8TG\Eu ;>88+H6U$UETV3m&ۨ%'YLz!I 6*.M'ȯQa&/%ȟ[mr\$ F3kQ_Aoߠ&E+\ZGߣ " ]EFJSoic-%dQk]nd3PmY-Ͼ2VUck:T^-l چXX7;Z%2WeJ*u|*%EP=5=JQRwc$T6+g٦6QǹWmpuP$*7w<{UB/x|^Kϯ6ˆep)`Tna nTHIQL{hWTuGy$7\ bqIPi2wMBS5b'Y4/Yb{e=')嗼Hܟipx>f2X0.yx4 S >\(v*IpdZ$х{)ۙrrBF;o{,HgQ_sW+ddn ,qf'G̀H#wqDjh z'? ІYxf 5EY.: `^y,'Y(g!b2 @9%SY[`BEKTv//Q <g@f$'`,& >Rö$ I7,E;tIquPAf;px_2O%:-JKhn>-䞌,hʣ(`ؒ%˲꫚Q, >ͨ>B)H >uzxe"AՒ3n6/i fqYYĞZ*[FMV9gp.5EX"y<-Oc1BOȚ{e3a jgl6@Xl4rK\ƢFsnn/Q*x#  T2T4#GEP \OӛƗzsuÈ*66AdT]Hֵ`-7YAHQ,$p^\@"0ĜM?Qv&2q= "Xpd1'Г[c\ESyɫ`pvo7kREmb Qc,bMbgoYp#ɂ^UԕE., u碚\r U]]qD5ܛ*إ@rzS mteb jCSZ7V541 Λ*鸖lA+,3+\^,B>HpeapENbџ, Iz dO [E~qfgrV=UGٷ]iGubp+u]P?BVPs^R#鎓 JW(45-Rst (N&pCL7fw"I:ofEF9hUK],2|]#GZ!+ !G.ۣ+Fs}Ehq[C W,\,F <ʊ_5#4тKe>ech(ɓhD }&44, m2Eivpdk #)ضHeހ]]Aޖ6p=螇[87}XLڙwm6i,|xKciնŲe}Z2tKi4iE۳2(bFM 0DdnFb) ("%؃Kmx2`5p ?bۣ,E׫Ex8O-m Fsael"S:p.nْȡZ)'ʂT[`Bm';u,\e!eKGhN(eZǂ͈-˭j]Da$"\.$e| c'aCB~GB@GijUyL;Bu.*:+3c|ĬF.2غ GI5AEm'bXoY` YIY h,b!3 K*@dQǀ} ="/ o95" ѵ`,OǶ+(vN8s^[d;^=#(nph5 +ob؎h=7RV սT2' {-ZD=Gf:>w).Z`I՝ʂWQ1m7XʂÌֱf(/3d$Ok`5dmx+UiR|5Jc*U sL[h%rI6B\=if.Q*&ԮjfM5ȩG"#^ Mˠ2ЄӲJGljj#ձGt(F1|(JB{J`}Z2*^YۆUFH yn齗S/Iʢadn$I] 2w6Zl6H0e8B+ļ)#Y74Gs@s=j=EPo_Ki+[뾜 Rup+G t6m4L>t-EJ[{D}:J/9:c MY,ltM}֎qЀ0/0 ~wm)s'X[4q]q/Gߴinrt\kZ( ﴠvF]> c kg;x =BHp('#ȏ 9Y$/WkdOni6 k_kҾў+E]ִNSt_18}EZ?j?vE1-(4h[\X$Τ-5.PXGmTL1vnCצhϨUc~MNJ>L5Θs߽}޻f&kgs27`A=Hȓ<c$ɽ|9oNgW2%EJ%MIOIå1R4EJMM҇atUYNl)O_+ry&D)+yd%e2GYRVWcZG9V>UN+_*T.(*SUըԾ_x) uf<"=~<*1AdfC{TT@% KpWBzH0#@$D`@D#h[ †cQWb?@E@б‰tl,uC"F %|#j22HDhk?)Q p};{^4NB?fQ[( R$F>#q\q\#aB@ cPЇwW-L #SDuz$!,x+x ν%PTyzxL;$=Y ߃EO5elެdQUw&HwRb~NIt֮;xgzXq/,}mlSU u֛Q.`TLΫeyY*ɵ3b:Ps-ӆʋ=?:[2OL,SؒҐo<HU޸l;P{ ʢӎ*/|G+/9aR33 Ys&6.=9zDl\ +˯߬]_dX6:=gu] 3J*Ӗ7*EGcS1om'/t TgurfN?{={mguEjW7Xv`,K[/J Η啿=!6>lW%=1?]*- Ջ7~᭜y~g~u=,sr%Kˆ䜫$ȼEmsԙ j}ې4/usUg#] uʞ;c1?L$RRe9cqф,57 6[ѷEݺ/lz_?qk0ôz8i3j^ٗWѧwN3<ڋ/';fs/SI/bL}kہU]9W}= `='(~'fVݚb Mt(͢Obt*Fg`XAaYKХt]6C_"BhA;i0 giFևc,YX"@8 z@E`Tȓ( -ŨĘ^JPTcdݦRLuT1J2W~APݶ-_@O=dȬu.o%^,I[,Q}.NGٌƄ[7?S2Ż~}Pn1 sސ[J΄lpLD f-6 u OB Q Q3Q PGLXZK\bBkv +a d;of8o*G{y=DGV(C E h?겎|n.cnsle-oc,Lr5pA-6w(Q9jY-##(.SP`Y#M8)ˑ0đy/Xs?|?#Vd!GaiуҩcC=鋝E;fԛ2rx b!4bRA=16̗V7vyUa>:xy AъD~1mFjJЈjk> }s}ԪHz7T#F**0>1f/}xl7-YTݒD֚a+W(a˕C{s_?K]HO_x,oYʑI&uEI<9A#$ϒ"ϐo??SIȿk ]˫D W? OQNwYls& Ew>i92bmߤ ^>p -ɯ{UnycJx=4{y;6H*Ѷerv6ୢkH 2 gw1L/Il&FfDVxT7C Lϓ#ײkWn7bNcѲZVqW3fpWqWm=xyaیE˧S'ɏ+GeR^_еlG_C~\B~$L-AmB%2Ze>wV|G9RrfzHYê.Bb8+?K)}S/(v3]u4ga Oe쟁gqF,4V>|g$A>[,.ܷ,bw9۹Fm\˖Ւvlh@z0eWLM={&OY>v=SjHvjFʢbIILj3:#9榦HRocze#aV}z &䯧T̬̬|5-STX"T+ f)j™YڒyJ׼p֌)U5D+BųZ呪K;L q( /koVSN ̬WʺpiEe%E E0P4m9س(`qMR>Wb^MS>%'=%YrOxX1jj(Qթj5jx/xKrle٧,,BU&CjGdM2,,{nX^VwLxj\|S\-b'’3%[8]|]݆~{Fۯ_{eύoV\,qQ :D+q܈k1\>;a/GpW`n0"?'w!k=Ԋ) o&v~|mC =qE endstream endobj 4 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 146 /Widths [250 0 0 0 0 0 833 0 0 0 0 0 0 333 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 722 667 722 722 667 611 0 778 389 500 0 667 944 722 778 611 0 722 556 667 722 722 1000 722 722 667 0 0 0 0 0 0 500 0 444 556 444 333 500 556 278 333 556 278 833 556 500 556 0 444 389 333 556 500 0 500 500 444 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 333 ] /Encoding /WinAnsiEncoding /BaseFont /Times-Bold /FontDescriptor 38 0 R >> endobj 18 0 obj << /Type /Font /Subtype /Type0 /BaseFont /JFOEBE+Courier-Bold /Encoding /Identity-H /DescendantFonts [ 48 0 R ] /ToUnicode 49 0 R >> endobj 48 0 obj << /Type /Font /Subtype /CIDFontType2 /BaseFont /JFOEBE+Courier-Bold /FontDescriptor 36 0 R /CIDSystemInfo<< /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /DW 1000 /W [ 233 [600] ] >> endobj 5 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 122 /Widths [600 0 0 0 0 0 0 0 0 0 0 0 600 600 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 600 0 0 0 0 0 0 0 0 0 0 0 0 600 0 0 0 0 600 0 0 0 0 0 0 0 0 0 0 0 600 600 600 600 600 600 600 600 600 600 0 600 600 600 600 600 0 600 600 600 600 0 0 600 600 600 ] /Encoding /WinAnsiEncoding /BaseFont /JFOEBL+Courier-Bold /FontDescriptor 39 0 R >> endobj 6 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 151 /Widths [250 0 0 0 0 0 0 0 333 333 0 0 250 333 250 278 500 500 500 500 500 500 500 500 500 500 278 278 0 0 0 0 921 722 667 667 722 611 556 0 0 333 389 0 611 889 722 722 556 722 667 556 611 722 722 944 0 722 611 0 0 0 0 500 0 444 500 444 500 444 333 500 500 278 278 500 278 778 500 500 500 500 333 389 278 500 500 722 500 500 444 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 333 444 444 0 0 1000 ] /Encoding /WinAnsiEncoding /BaseFont /Times-Roman /FontDescriptor 41 0 R >> endobj 7 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 124 /Widths [600 0 0 0 0 0 0 0 0 0 0 0 600 600 600 0 600 600 600 600 600 600 600 0 600 600 600 0 0 0 0 0 0 600 0 0 0 600 0 600 0 600 600 0 600 600 600 0 0 0 600 600 0 0 0 0 0 0 0 0 600 0 0 0 0 600 600 600 600 600 600 600 600 600 600 0 600 600 600 600 600 0 600 600 600 600 600 600 600 0 600 0 600 ] /Encoding /WinAnsiEncoding /BaseFont /Courier-Oblique /FontDescriptor 42 0 R >> endobj 8 0 obj << /Type /Font /Subtype /TrueType /FirstChar 222 /LastChar 223 /Widths [556 556 ] /Encoding /MacRomanEncoding /BaseFont /Times-Roman /FontDescriptor 43 0 R >> endobj 9 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 122 /Widths [600 600 0 0 600 0 0 0 0 0 0 0 0 600 600 600 600 600 600 600 600 0 600 0 600 600 600 0 0 0 0 0 600 600 600 0 600 600 600 0 0 600 600 0 600 600 600 600 600 0 600 600 0 600 0 0 600 600 600 0 0 0 0 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 ] /Encoding /WinAnsiEncoding /BaseFont /Courier /FontDescriptor 44 0 R >> endobj 25 0 obj << /Type /Font /Subtype /TrueType /FirstChar 110 /LastChar 117 /Widths [500 500 0 0 389 0 0 500 ] /Encoding /WinAnsiEncoding /BaseFont /Times-Italic /FontDescriptor 45 0 R >> endobj 26 0 obj << /Type /Font /Subtype /Type0 /BaseFont /JFOEFL+Symbol /Encoding /Identity-H /DescendantFonts [ 50 0 R ] /ToUnicode 51 0 R >> endobj 50 0 obj << /Type /Font /Subtype /CIDFontType2 /BaseFont /JFOEFL+Symbol /FontDescriptor 46 0 R /CIDSystemInfo<< /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /DW 1000 /W [ 155 [500 329 ] 157 [329] ] >> endobj 49 0 obj << /Filter /FlateDecode /Length 216 >> stream HTPN0 A i Rnp=%u"7$Q{ly12.~ep 3qJ6 ߖsG# < S-)!/+!H*h[8 yp3,?p*}k{KYӄTGA6oVVH;y2'b$[pZ+!k endstream endobj 51 0 obj << /Filter /FlateDecode /Length 235 >> stream HT?o w>ō:`HU$ )J"o_n~x~ i 3FpJS,pD)`EW5"GFRn@| :;nߊm!'I':FfdI=ӏ!B)ux|J`q[ endstream endobj 1 0 obj << /Type /Page /Parent 11 0 R /Resources 3 0 R /Contents 2 0 R >> endobj 12 0 obj << /Type /Page /Parent 11 0 R /Resources 14 0 R /Contents 13 0 R >> endobj 15 0 obj << /Type /Page /Parent 11 0 R /Resources 17 0 R /Contents 16 0 R >> endobj 19 0 obj << /Type /Page /Parent 11 0 R /Resources 21 0 R /Contents 20 0 R >> endobj 22 0 obj << /Type /Page /Parent 11 0 R /Resources 24 0 R /Contents 23 0 R >> endobj 27 0 obj << /Type /Page /Parent 11 0 R /Resources 29 0 R /Contents 28 0 R >> endobj 30 0 obj << /Type /Page /Parent 11 0 R /Resources 32 0 R /Contents 31 0 R >> endobj 33 0 obj << /Type /Page /Parent 11 0 R /Resources 35 0 R /Contents 34 0 R >> endobj 52 0 obj << /S /D >> endobj 53 0 obj << /Nums [0 52 0 R ] >> endobj 11 0 obj << /Type /Pages /Kids [1 0 R 12 0 R 15 0 R 19 0 R 22 0 R 27 0 R 30 0 R 33 0 R] /Count 8 /MediaBox [0 0 612 792] >> endobj 54 0 obj << /CreationDate (D:20130420011643+02'00') /ModDate (D:20130420011643+02'00') /Producer (Apple pstopdf) >> endobj 55 0 obj << /Type /Catalog /Pages 11 0 R /PageLabels 53 0 R >> endobj xref 0 56 0000000000 65535 f 0000132354 00000 n 0000000016 00000 n 0000007298 00000 n 0000128271 00000 n 0000129131 00000 n 0000129546 00000 n 0000130104 00000 n 0000130561 00000 n 0000130735 00000 n 0000055106 00000 n 0000133091 00000 n 0000132435 00000 n 0000007450 00000 n 0000015596 00000 n 0000132519 00000 n 0000015738 00000 n 0000022010 00000 n 0000128772 00000 n 0000132603 00000 n 0000022164 00000 n 0000031587 00000 n 0000132687 00000 n 0000031741 00000 n 0000039544 00000 n 0000131204 00000 n 0000131395 00000 n 0000132771 00000 n 0000039735 00000 n 0000044357 00000 n 0000132855 00000 n 0000044524 00000 n 0000052917 00000 n 0000132939 00000 n 0000053082 00000 n 0000054973 00000 n 0000055247 00000 n 0000055474 00000 n 0000079620 00000 n 0000079822 00000 n 0000080049 00000 n 0000108857 00000 n 0000109054 00000 n 0000109255 00000 n 0000109452 00000 n 0000109643 00000 n 0000109843 00000 n 0000110033 00000 n 0000128921 00000 n 0000131757 00000 n 0000131538 00000 n 0000132046 00000 n 0000133023 00000 n 0000133051 00000 n 0000133222 00000 n 0000133345 00000 n trailer << /Size 56 /Root 55 0 R /Info 54 0 R /ID [<06e7ee2eed84275abb84850071bfd8d6><06e7ee2eed84275abb84850071bfd8d6>] >> startxref 133415 %%EOF