apparmor-docs-3.1.7-150600.5.9.1 < > , hp9|q f;둭H~0. n.0[? f"C2g"%v#`soqA vGZ/4H ĚM'K %`QT$WWVėqV<`VHDe qawJ^i4&tLD(J0I% #C $,mڛuiD*Xٵ{Z@@oupC0ڼ蒔}E^GjTEA/3cK/ X]0A))[fم$Pe`8&L>F > ; ? | d # B 5 I h n x
G
T @ P ` ( 8 9 l : } F I G ` H I X Y \ ] ^ b c d I e N f Q l S u h v z , 0 6 x C apparmor-docs 3.1.7 150600.5.9.1 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. hh04-ch1b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e 0- K I v ʷA큤A큤 h/h-heWeWeheWheWeWeW e18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a420 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d be26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb0 65b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c66922400 1e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.1.7-150600.5.9.1.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@d dtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h04-ch1b 1746532570
3.1.7-150600.5.9.1 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text dnB$tx( yh{+| utf-8 e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3 ? P 7zXZ
! t/Uw] "k%{=CQZuǡjע|v=X&I} Uٞ\obCBA~Ae '1LRmyMi?F" EsG!l"e . c̮1DKzc0@ jV+Yp#$3 be RB ãvɼe"&MnSn9BQu# GMWZ D{O"wieȡc]w8xb>Tcl,h1r !L+??R{Tu кgU)tI-ܘ&[ ܾycBڝReyuɅK1coܑ
vZߒ\g_e4U҆A ͳv@+9O5y66 d ? B'~
%WLh$"bqM.aV[.OO^M0WNA4'ⱥ}2crGK.$5^!YPf6m=þ!ߔǮ!h0뚓 +`9&hV%a,\7-\NI ]mXFX4&5X!
:;vb&-# +;A^G8Z@Ifn {yEd&,qN|;^ |v[v T0]
cq¶U=KM0Csk,K|[rh UG q+
I/ic)wY8?Z
GYr-_Z>J`w^G$bs#W)кTjL A#^h68p LSЈYլfϝ+c}ՋݡGF!{`:מ iݗ"n-}^i;0Bz$1tƿСD3t"',h;N%}_lR$7 `9
,;YRAj>vbnޖ. Yŷ+l7zO'_kC"Jx`p>^ٺƱVx*_jt5ۉΞOl]TSG7"8\,?vJvEv{cGղjkrз&im0 mZV`/ & `.1rT-KSfА"(`!N8Ebm9*
9IeYa@L4}yK|KyD$FRC9&Txue:ypugiFՓ=JBn
{biSΞ:F,ǭ%Z_.BS>L 0+Xh&aSyHU} w"N/ Z7tnvSM^
=po^u UE#>~MFWNMf#"Z+YU-O^Ɗlnڨ{+ u~> tgn|7oGAC4j-8,L%|
%ۺd`:/ 0%a@<}:UeM6+ratx]^}Z"JOjKqN$g ςK
eÖzD.=rs!;ڎDK=5R b1RwÙ]`jyU XI] ,.`$Ū7Rj
upGDE&pI`ᗆ(bYKjBK#m^
o3A F[SkQ{xHId4 B4tx~Qrn7pK PPGz dU| G 獑C0Go?‽چ
z6&X@D
:eĵ[x`x V{ŽUfV\Tv'@ǟ5cg*g!N_a34 !Pʓ_,k历6rɨQ@z ve Nf6{Td kP
KJ:{9}uI2 ގYdC(B 1H"܊)؍@ *Nn8 &e< [0t{Z+Ў=A< zdS#*h*}V7GA{z #kRkU{VXղH0eaI
k$\j@AG1볱x ӟҼ VRޝ`" q W`,REo0FMsWs˪ u崦 홫j 3t m +vN,)/0Ish [+=JG+W^
J5 8ȡߧ2WT2~FAuɨXh-F^V4Q$;0 "< }s M_K97p/nBNJ[=UY 2]|`e"܃ Dȱ 6 V 7n,a1
6WJ6@GQ:S |O5c
{F c+@6C <] &MVƑ!n|b+1sg tqrܲ[`" ^0lat s@$D$Yo^ E@{]O^0>ќOۍt1#[K/P 3
Meox% /,1c 88':il? vZr82_އI6=_A
(,դ 0{|.P)c .v**2fi >W{v=6C|n+bC2s܋̛]0r?CTr}5r7"<jm] 3oR+?1R\o*4'L_
%oX^
oyH`}څB?͌\kE!鶻 ;zICɕl7Mĥ?OKVoKs -8Դ%#ɹ x D6J0Ŏ4_u`D1i':f1l灿L
Qhҍ2>rkJ,.6m*k`B
s w-OR+p
c3롰vq@FƄuC|S9Zq6Y9hPLM߰qGiQ"ص~ BUL5;=`m[-1!).SO"Y}iXx1o2EԨߟ^h6,+Bf!+
%% &`ʋ0
H OeLʠ:BcD"~
w }u9[?*+ ,e mʬ 7*Jcz2%ns2˂_(}] ,}5TI ؘEy)b]X'Є %>MnL|G ݶ0"KIߙ6zv
Q (/'7ZMr/9d[DʹR4,1%WLؚ d*hz0jʁوL6ٗԧy'fP17[fsވoݥoUߊl%PU䕯, uМ+gЍLig{q<Î:Sv(
A7 frN1rnODMꝩ
BgPWz t T4FJkB\fF3~̺K T2=[Ae&t:QQ9^ 1sBR^(ƷXTs:> Յ[ /%OYLBQֲP?q/bYS%I"f! Bvº-"NS}F6.H1 ɹzu߸/QNlxm.<v®? f@ #grtK }4: Q+[l.7j*,blّHnUJ=9Ab py
#5]nhALw8e_|L# 0cgWqӨؼcº@[Ed/ D/$+Auհ 5a~vU"fʠdeuv"7q*V)2JA[ J$&I!t"( ᢺ.ap^b(A\iB
@<+ Օbz9W
ZRnP%
I@+ ۦbyH3RSĢSN"Ȍ?gf t ,cvU{ Ǒ9:o3}
('l4p3˱;qT9!lLn6&մo3\sF;ݥc''+-lG5ع86,6+^sqI.e}RH &k8R@KOSGl~$6?4\p
K`y
[ 6W&l |^٭ S3d":?~̲NH"-x@y(+)p;+_#{
~ܝghU65՜ fiF eqޢjP0|HފxvV WٍSƕ-lV tbawgC:Iځ62j_} .d/Ess[53;.+bTT d7p'| ;Hk} T.gFMA}_`O}Jٿpǿﲠz6=96 Kf;w5f~}'OӰcG/O/πԹ2/WXbGv ̤Kܴʜgf b s"\(7}* =R,O
^TԳV߮^a Np;̅I{/D.zL2-R!Lf͘&<9PMZz}Wi^43(k: ! y].jOBTI\uA/3nB xDUI.ȉpVF
oUv'7hȸ Nf6 %7xE"üYC/k|- ywDݔ$''BOtxW1*gWHN+z 0P͢ "=KUFMP-@МdVy
iLH *[D=hVH+nI_H?PR_bBȇPjo Yk9Z(VOSa"NPҦZ8t,x.xmݜ%ktnѷ ށ 32$'GO^X JɏG\P2 Skd`x:#
4G| ɀt@ΝW8>rT LĎ dN_>;|M"2(x]vqnn^<V솔f"h K] ´ iu
P0|Px7Frshרe `'f >>,
k:@u7%7 ' Wkq 4EjV$QXƌ0=tK{ \1w{#Ș]h&9dJBV+oJbl?@
z,/UtmlOņx0<>9mjAhRt=5dDM n4%EF~QԫX e< &ϯЖ.Kb B2>aƽ1#\I>Z.|\лJQÑ|ThN(|miGBb̏W9\NB~s)T
'V%hűb\<+5x
F@TLQIYFkBn+@7JEVNgÀ`\Zۺ k >X I3-F}&|9WrUkz};g۫\wyK(AU,V$Uص"g`hlX0LvdW(}?囡$ nm'ExG jX_8~udnŦ_#BwuZ*c<. z f .Ijջ x&iD{ס+A¢s`#ݲWdU7O
"~+4U`$Zxl}-R;g,9= Vθ
aK"ޕOHm;au I=!@*>W}~yd8+i40MjA70D =s|DVQ~ءrYSa]|J~yRPB2T Ȍu+8d/ 3!$" ܝ :!DGZ?LO h0yq¶g)<OQO< WF2"-2Vနi)" V7Ո]pۜ',I| >1r97Ⱦr 32v D7 'w*-}!:4Oن R|Y ?`ZTNӘupyW 89e'Y1+{/Oƫ ̼#Hy;RPkSHakg5#)
j^fw=Ϥ2,
s =2IEHYbeEI2Pr U\_3K)y<ԟ{%Ti:Zy6fyk~Sgt[[EsKC ~=R$ H5>}/fsM !dj$hH+{$|-IqX]>>5KCiy-d[rR <\s+R ˫7}z; X,nM+F?9[( Cs7U#oչ`z/5S1<H.{Z̑P
ql;
,)y?
?#ByHG-跿B /8?@֮'o
AQzMMG~#DG]N vȃ*5*J]/ XUB#-I%
BQ 0YX~s @TUx~[2秩d@Pxh ܚ6x 7xM"-Y-cQ'Z=x;b"Ϡ(jgMoTbi?"+6ymIkd3m`cNF@삱9|YcfwOОЙd1vH~-K=x@F_Fx]+4s<2oVK| a X[(Mޖ>25$v]q
qT*Ȗ 5
~,B
e G5$^NJ-,`,F"EG݁?xԩƐ _LUw ByׄjO =
rәM4'+ n}T"/00e}8X_PP '*#%/7g1wlyM~ Qwf+aU5l*Qac" MH>:
ш]πk@r%u췵W?JvHxxhn@o'jٳ ZAPxeZ:vd :$~gK2Rt
[xMEcٷrni / ocݠlT 5k+" >c}41}TZc .NY8 m磹ITF4IWK3h?sf+=;U n304d
Y %X:Į 5FR⢔k3oڨVUhT v*jg{شSb<^ûBApn CBh&#}> N'(ڢr]^iYAbEbN(jK}s3 dM]2<AV/I2N^?^(je$߶1;c
k;xK_NFfƀ'FUiN4Uzs
t
ZTafZFq[ѯ3ۯHbƏC ]ϊ fAX㟿=tp!'W5;/, (K-1Hc5 [ g yrd ٸOQp[x`q&yr?Nc~d>eX.|v n}
Nl۸-cT5; \m%&ƥm@q֠??(j%b;nC-f )క( o7r T/vHSz1.|]ٚʺ%gp_s1~8lLTk.4;H Y4yYTY BkdžL|Zhv=dh/
:Yt$Nͩ2yJTK7 +o!Bydm/IKU^%:zfI4kA*64~4$ QMYcO/̑L݊u~(u#TJB J:n[V&:iZ!)*u:bTm1D *]v-- d 2a>\ ȝ@>W c%X[g/e u/NMMsKԱP4iFUHv5?{|ÛZgc0<#3 wQǖ5^C\>nSp̤ 8+Աք>.:k I.ZƜAA)fIL)X(AQ dEgk߭a#?J .Rô
,5y:+ЍJ^g>F>A? nv}n0.zG smɯꭸ8DK5 X*Ke ;sp
ږ[_apZz"N6s EȐ;U;):pMlu1ϊ^|̜Yg8|;l .-L74S Gəhڃ^~Kp Uo#ڂC\ Ɯ4ۋរ Ea FeI
R
<9}Ϻǀ}RO9| -]9ޛ]T2pu 2pBSj.8K_Xep霽sa 9NNj{Nɦ;m+gOL&dyx :4NȣE-٬cT[g{x⹜Mr{A*7z3/ ֙{ ><1~f?5,b )ʱ gAHa`[t zZ2:N,4 CQ<
&+ SJzܱܘ;}uyd~Hp+Hm绵#%LJ^Oq:_ xT0ZDH o -G*~Cl!@5Uh# MZNܴ?+ڶ""hBw$b =Y sN Xoj}^[͢ 7`8C%כK
PDV$x }2,ðWqKek
ꁞB*YlTOw,lZ %u6
ԉ֤`Dfp||`ejn}!|LiUIycPB"3L/}0ZVĔ lskI
2O YuC4'6lD9;a|izIR U =S+f*EoR0ɍ)ʏD>L){NET,,o (훨 9ZQN?,Dgڪ'i< Q"_ti)݆k U*,꽆kzmH?9-0pD2 nxJoTDR.(q"pgr r꜏(Vc!MOwi[MH 1$t7դ/YbCuLmG Z bro-腥|x1 |h \Gn 0DdRxmo ԷGJ%L*߆q+ʪ9|QډXsMh2%F{/=M#P> Q|
vC 79ǎ0"v4N+05B)A\k@k
G[U
ߠ /rjC"pH 6 miUzx-
l[?|pVj-o&+pRPo* b
/j$rCKHtunk ~큑A=)d^* 4`,+)1yU >< 4 uZ[@F &@~:fD'nihn@u[Q08$hp}>Uhr +o@ߓH' TZ>eUĒ1 7]߅Tv
nD<({7h17,x6vW@j;桲%P`@Q`wEXe'- . B> GQdLɤuT"(!K \U-;4Jx029?˽a*?,Yzs&>@0V,MtL,ϙNi]e5!)#, }~E$ &)aA|Fwp4?+5gGmz }^4xIE OOw^1iqdxr1?4HB y͡1 V .\r0t+o j LnG ]*]ʦI%OE !d?af;j:މX2GƋ sxpV55W\>TT9
Ǔ[:RKV]e{6$?Mhn{N ޒ_-{+싎
.^h! wQ Ps)h/8txڏB65Ib <8k7r E Bv"k nWx"2 XRg،צNh^ ei]]q}_
ɲF 9|^O@$#;3@&<5m $h^3hthR#3+ikM1ru 4ABy4w@r1.m( 䍆R}D٣%bQ^
RKH`ާKtY
jF[v B*_1>A 6w9 YqBٽ0J FTբೳS!qDSj^[ޙ W!suGaQu z<(_RJ zʖ҈ n$-xu7O
wL> ,kdtM9l'q U]w^xk5|*?Ch; Y&
Uiuz tXn©l0Qe[T}oxRlIv/bX)v&3 l@Q!Q)9劳GL#
l5NH?1Ap8;t +zLt0* RXvIIbĉ٧ߪz?4>%A 1MآQ9{[t# Y8k:U%Zfw_C"gCl7^۳kJ ([Rc[U=B
-fH/9)hC⭲&g, =)g Jw"|W'a 2nc: Z5\qM:
M"y w, TޙSܡ_.ϲD Sh4xN`> <g4#;7PegZZӣٹ%}ĄAF
2ؤcoK+bZ T8N*p & ݉qׁFۊ!1_ӊ
йa~?/+*(sߠKXBvvxQ-X'z k j/!{ g)
(%"[¹AU
֤2k-PDʾ}X\6 W
SbUAdXwÛ darnj4́-a Ǯ 2[F/Ul}GW8ǂH^*JP=qh}t''
i$&-uSA<@HXB/INLmn`$5u&fk"g $ 349㻭2 ^mmI& ? h"rCdv/a-#ՊĨD
\KИb@X7ގЎ*ErF9C턴d'u;P:ZQ10١"έ"]<" k,ԍqhѬePW3$ ΉEfbQc)o_j $N.@@}
՝&Ϟqg9NA&W[Ӏgs9EY " `=TSϘ뵠`Vy}8>ab )jܸU [3!qvNu ]m
<FIIƌ%}Z]KpYA-MlS&dzv 8@I6Kl06ݺ*̯sq˸"#`E^x%" )UxL_W@tao> Gh ER'M2U-o5!tK
\ю_p-sSj/ eVvӹ7}ݬQI2d6r
{іPr-%ؤ\ Ȭڅˍ.{~5b=}/C?M 4!
1{ol40vnF>/vn)Z6NxG{9/`=}8K[.Sztr^8
GCE\im77
sWEkG{ A6[C;{gWD =H~}V q|ޯ6 ̜#A1Y_9ly{(MyF~x6ixʣ PmΑ\ XU ,G{wJ,KCAܿr5ZQY
&"]-|v6<Ϊ3{G|]n>kRzQ&(V -c,ڲmvnj<}10=4 b&P ? "eꪧ^?a'd/4"9 V
j)[HT?Ö+ C`Յq?EJ"Tp -S gKDa<` toHE Z P"l)vk K {kl.ƛ Z5
@9۠3U77w._%ށ!ƅC3"*yJ%Lq q̀zumf|53Sfkyjva)&9.W9 t1cs 0) T7Nq"|sUHlATEK?:]-34MY6(~A;a =M1t00)zr :Wq,$F'J_`-Pn Mm'c;:5f;g
- ?cik)~a*֗0Ur{a>*:~#\8"]O_;~Op˪d&P=ꤞgH=A!x:)Z54_ q0v,4z%O3ҾH?gY˾ Q=DO&T -C p#qݨV*&Om'ǎ!ӭ[TM+e Ed2=4-z~VRazx$7xW)4@(b F mh%] 5&N?P86^5b?#cfѯ)!
0
,:x|N: gitnC'3b %1##" ʍSF&ʧnşKJ̝/}M{#{kՓ+xQad_/L蜵 m]ߍCΣɠ멮%@U ܡnj%LMl\ rމ9s~dTtBˤB(Jn2&ƺJC 7/LWJSvdPRGPW3CF4JcRwZ2Z8JE5B Z`fδ B[I HQ:0\hf_
8N5Yl~r~ltf;}$ b 8C6V[G˘MkO;Õ_l
GGdnԉ~ i`
5$馰p_6V
yDŕ2"6>|wA?_xNbFLeYlĞ\P*a K&ȉQ 5
OI;}F_U 4B5
|ղ:ZJ
w)7UM-R {#* YnjNho۾;ɥm\ f9
)jw-V?ߝDoV,#K:OnķJs/5
x$؍
YGVYZSL[% ̟nZ2B
q0 5e=(tҔ6'.哑RKQGC c}& U022pԹPŪAtxI`xQ-:; \(oq5{Edd % Ԡ f πժ&O!+ҧ(ܦrCƙõPzu/;)|7g's %e
}[è \+ߢ /
X|8P8}[?岅RҺp @s؞i4in,X8RQ: T[ LIO(p^xA%X
Y4 g_FCP{PxyT Ζ?\yh3|q >A&>n$XR|i!ͅF0U6Eԃ smu 1;NS*Kj>ZtҢ_An mR4;=q"e%ٵٔٯzSe݀ WaYk>(6vphV7 .Ϯ܃B~ɡlj"͋M1$DlEOOT6a
(@!ma|cBM=|] ];H&zghyPGB
PA)\It6} 2VV\=
е4Hв4ǫǻjzOV5b/.OUHp"fV;+j4e2`L]5 ժqG 5*ɢFA,k3Y+ 4O:,Xf 1m[\2·i'*[rꢄ7Y ~r >0p'o HMx|(Tsr2N
@IV{sg[dX9%\iadwcr&uĊ#|wS N<0wr#}粦LR
q1o/2%cSqO |=*s ZPp!l#ڃSKB
LL]k)uz-ej4,)c846 }aq
[p tn:~r #e8Y
qlQvKc281K[!IW~/:R :Ty}&+#(dUp@0* IlcJZ9 RB<Ə+<x}7z&qװlVU&)6(i S2UML|POʮ >
{
8i
{yN~BӤ VEتD-q( g~~#ᘦr%ÏG@t,exH
LA}!Q) oGXM{̨N -#&nGŶu~<\Wm3I2f_ Clq2iJ==^w+W!reAۃ +<'h݈,kk WH])љvAVMz"<0#b) ~To,Ú, ?f̣ܘJ/Ŕ{OoEP?(gf:`@COwtI >ԭHt_(KNs/rXhv
Ĕg/1QfS[; 1DvП]
dHC7,,P&Yճ:@krN aW,E0[dN46 ` :}
+ ,ixqv1dhi4Nzt ݹO
d_ TniHSPV0I K y"/E>ѤTv֨ÎڃRqAq-f>#xfZ#e ̚1!oB Xue'=DhL?]S`Gf^ Ni5*E|怖nYO"Dݳ]xY)ٹ& x"4FE%l1'$u!PLU =iCg,mO&?^
4f lYDm'5.[~HKmNG< W9?;ds,XQ;*^tʉ"`w<- ǤAQӜ>~'?%7*zv5Rپ6xa I4|rY~91fPPx _{b
|m.t U>
U @mg\OQ7GUP0 bйhqFZDL]KG&w;ݹz :rh%MU9 C, %JW$~IꍤD6Yr~,fXx
1`=V+a(QGT/} b[#ێFa(~ <{65vt#sO V+JWCmo;AE]&tR`ATkeiRYP]4PTc_Rc:hSP Yʄ-J6f9D\{^*~% ӟ ;Y7 V4K2wJ7->[wP8Q^ҢAv%c/$m{]Il-J q] DYR ,7
xFT{xyԷ֗ W~=q,ITA`q6XRNu OIS^nCZ5+fJx³dao7}| \F̕-Zv5nLq22p>ho-)i` I\o@-m{gY,F!5
Ӽ%oSH6rc8*<1:L:L1 d,-B G혴wE]]o"] ȋzy%RpkO4t.;r FH]uF6&heF9{T9iFж4@&om/*<.bsY
Mʚ$痺&<P]l{LgHۋ֗MPciuLf@:H^:8'-~>k'Nq"Zj\@ q?}]?uyǟ \ ՃxT<>gnu=4S&ϑR!6Z4ynF 1^ V ZE$ \MN^ŀW!
R/P:@ ϸ{8>K#~S13]\37,8@赜H6,Lzr++! &V0Mbknrօ]EPn 2SS*Kqto\ `6ZCv4w" NHoNщE Q W]Bkyw<7M{4c&a1U 7W]]'(orur4q)f+<,TaKfJcs!+S|.&7o6_ b*Fd0,٦k"@)G|)mܥZER L>!Oos8;Nj&w6(gcG@3_ʲF~|
HؙF\cu~n<w6z 3
GXA77Ӳvqn$Xk&pxJc- XG )#@!4
L ǬHؖ`ՎXC?w;UNtZ`8 VIJ [ ߷eTO5%c? )vf0kp
VvF[,&6.?{~G{]jQ
ӭ 1a72b9cD:Lލ ާNj̗˰;vc=!!❋qi37Zw[)ItӼc4rIvv(?填 ! x3xsD+^Zrj̽:+E#BQn܆ozu$yi)`t<D?AaMp'm6]>*UP2ƌZ[,hy̦U+ u2q jJVkOr=Jvspy[7@;Jц ֕=-Eb y|O.AT4_d*;|xO#DǮ5{~3AD0p ,-1v Ũj$ovˠ:gڠM
_ktH6L{3Sxc 8 }L~2
XHb7^9IZK>-p>zV_lJ" :t3v呔A`U ڂMcNdN
b ѿ`;MXSShv)BRē.[86f?al\Snn0NBﻜ_p/a ,fBUد8gy
w^,2q vȰKQ]I]s,͢U
2: .EB]0 R_[t 6gI,|+ nʁ\,șy )n$c_
ax5>HolDmn,O1Ie$FJw>N9 xQ ͝h$]DAN- efF#gf=IX2=+qh[n6 -iEw6ej'*-17:kXAщ;B`Od _Si -~f?F ڙP]- Q-!0 Aicl @I9i*] o3h\ -W
6aئ Բ֡w FL@"ѢJ
C"q[\ҭtCytػ ^raμ¨vсJukl3Ŕ$Y~6JJP]g[z<]Hn M΅"b]U#XsY'-[~Z\S?AqFonew&ī `&.Pll[砎y؛sP+%KD߾!
r+X?e{OT%GJL%~a ꄏ2$XWvmU) ؏V63sΛ``tqȇHڏkrdFSSJBl. 悯
|] o(\Y N_.4ޞ߲.?.m0w1]p=ϝ]ɴn}nauX'ē߁Nm("xа(jb75!jO qVbq ky.}"f;2~OlNRoge>8Hqb+ e>KQcUbYӹq QΟqBhڢZrx1g#
B@:7s0z$4~ `?P盽Chjp5{Jh@|H
[R]D[B q
қPދN< Vrʝ7 HJ#b-OYLYN>P| XϣXe*l!N[յ+5X#S`¤bO(TjH7u~sR;X}ꉯk|qCq _AMk&^Iu ^rv|>
#m6} ^29F+# c -$&D8%8aK0?!\ t1ID
BĂIn>mĒaV 8ExYЅŠP}t6 9GEߓ4Q
Pgc@ 0`a:Cw"FZݐҸ[TkYx}=OZ uJQ%WZ'ٛHu6, r AFS4+ynY9[Pfg @6
]9d^r,Hr6ITXrwg>˨Y
2{5 ?p֙n/) r<ˀB8GDс#T lvU.j.'4p88axUĄĜ>!e|[
#/YytM|'noIO\FT:D,Uc8
- ҏMOBT$`u T Wt 控 q`(rU6_Bӌ9GlCI@ c*\b 4Ol~BH( .ڱrT{JZ,uj4Qc`
K9~ ǡ2Z^w`lZd3- LQSʆ͔-Mrc6ۤKIY Pwg#lL좴kv_p8`[
4aR
IL ʮZqnl!ָ>G=T=T?~~5'Is#ś գ[5cщ7J
WR
NU8(ZyZ{r*
JN/EV#SD1K7廤d?' OQ(̟WTػjbuf%&,5 zLټ ckNAv;?ëmU 8@9!ĸ}+7K %?}:wj9\{s8 P)K}jHE)Py8nDP,/%(m#-ǓwKĀH}zT6Vϗ!:[q҃loW_4+(,8:C rN>ݽ%A jaS/99~LaZ4Y(;s|
5zN IdO\vÐ-bF_[Vwm!_8>;dI- C
!U G7ей#+ףdD .V\ĜgW,t6E H
2uZA>rѽP`/(
EIhk &51b,14^M1@fJ zQc!bajv'Z
6[ JSª=V<L{+Ƚ Ul'0W'I~ð| 8X GP o!7D82љ2-"On/@KBIJkN=l`^#1lf8Eļ/-Kg鱦05Q
T1kl00W5{rH`+y&S4>Yx3T,{TS>;94'$7;+S|F h,aA3+z7U[!kLzqTT.]tT I$qFk,t7\VTUud28 iPOGN.{{=$F&:"x*Fwz*!fz(Xx4 K,MYCon~xSb0tAuОl=Ӕ~n->Lfv3r8 jݟ6? ApY'1n /=KZjR[mK ,!B]&MN8I@Ko> K*V:S
BaHf>;1E.|/:VsN: 0f%x)bWLdxS@[Uw'F']zomݜ jz3j+KɢI(Cz /3} cf
X@ 4Ҝ4:cD bձL7?rb劢̝ ^9 ;x9-&x7)@du[} 84`UrMb~yڟ 0Ae>&YE.dKG)> ; huZ7 `?Z^阰gicD4 <ڱPN c2LO"8b'4ʑ?ݏf)>m_UyO t_wBlf=l} {mWđiBznLeG*ŎUO7"/Y/(l
ha)j| !njKL
Q 98Uu܄ATg*yi`lԟ ghkzF BPxbTf&k8Bkw ݆ieKVA+r%C|
@d; JQo,
)FeM08+MJ ` dPϗ^# *t ج!.!+Gɺ-5n0 `UᒋtDt4m)u2? : }B561dA:J7n!>\"iw(yL{`
,{y
y'y"<[70= sW ?Cn0 /i4iyCJhf/{"2%cA' 9~[un(lenW7jШqh5A79*c0{F~ƈ
K6T?J ױ-O,)
Hȵ6pfnij0e (zYfxhQ <|) 8H\`yKrGyշ|M
"dHf9P]1sy$YDLOh,Rg0Kа.' I1tGFsC}Ӏ5 #
}9aw{a"fmc2 oA/\ N+-ɺʔyy>|ҧdɉO60l0m4:ps ~Q:.It-FI@W TkP}H Ei#Tqpô{ -ت,@;p=˼_pgiNC2>lu[
?IRth> k
mC&BƼCFLY Lyw糌Z ^"=y\Uؗ`Z6}`2HSp3M- Dsc>y#2bCYp}Br8->[ ];-1
3!P=P}{ؖz88B^!- * mOIN"4YD,AI$gIۯI)/!if#LJS2xЀRb~I.$R bήV"|H8
.D *y7 ESs]"\
≇pFB&,|tyxgy[d|?+s:`]d\R HK/E± XN;nMms!8 Ę*tf1VKm@|L*]0i ˠ]Q0~%79 ?hH뺦OX_OzMTNZZS@`d&U^/-Ѯ5{ ,}峑ΞXO--TrD4|5v W to>cTE?#V^d9OM\ؕ*/ bOC7r$ŷ*$нJF9_@3ć{J nohQ3ڻ
3d?LLC|
ȭ\XӪ#]dy#
xY{&^jU[`^O`wpۜ@ɌsE^f錕Ux=X;mfd]
7ܥ(T]{ی |wqُW>Z~m[*_ro,L4 j٥뱓@eEd&=Kt,_
J7d*
5CTNy7檤PUZYoU })ԐkO7Ag_v<<"G]"AG` l>ZyhY N>nM5sH\ Pc`o95m 4]=(L
X
| Xla I&X-ww z-LIΘPI'>EVh%Nc*CejDW'%9 ރiKd?W U \;bc]> ; X؈.O6X!nÔB0 i1拌U^w\FoL@ܬ3o1_
~>OUƁ I(W1/#Wջ'Ɏ,-)f?qtŜ1
JkAHc|d\l?c-jmuٌ:OC"kR[0m
1;E ƲFySb$FJ+ mϩVӭ!)f}r AY(49+s98bA;$إy\ɟЇBH'{9^%c`Y篱
̪lӑAV:`Y/}M N
9yOO=i̝(Q4 }tFG&3 c i\xo8anw*R"ȃ9:Sq[kIvJ VDPZbA5QEEPSl 5T;g9j^!P~F |闥Za*ߓ&ffY%l V R'!((r;? w0v |Y-n;@TPiH,
˻ˁ( ?NʾK\[ >G]I8 VpW*fŹ-F$hkjq-ukXy 4!a"Φ#F>! z *KS"jLL,SۅgwƼg!4CDIsYmVw"b 0&+ED4V/Ij,"xlYG o]04JW\tƽ&zmI,5D5_oƺ&X29XF8=r]I,^Q;[ؾ3oz>mk ͯ5::[ ap45,+Y 4L1g? :'yM܇fJVR[9qQ-H
>ўj Sq$u& kEfPh5J &
Hv@! #zi_-{oJawTg1tP}ܺb"z#JoTtHG>8bL 3ܩ1
#C
,k!ȔaKpgYz~
pl'neBJKꃎ4=Fd@,exCmoXgL3ceA:=JE F(`H;ʊ}b? N˂*Y!/g5w %7Ɵ/Xk
Y#jiM<֧ 8 fG6ŭ{Jiv͒!9xs4ٞV3K|
ˉ'ڱy
NDq7dB>SvB,J
?IR $*s EEf_ ɰ 'kB }) g=[bZJuBEߖ_dS5!we6l#>f1Om0|$~(7>Zvs3lMʅvy7bJFﾎ+:-M)![dd^@y]8suiK \JܺMa%A~;Нjͦ>Ӗ1Kچ]6{C'؇[]
o&΅KwKC љnWrThK$xZ:ѷ3¡6 дu%g7_ z9UF A,* L/i ƫv@Tg[pI8)wK
J
Gw| 4Y5ˈ>7`
CY9-gy.{'W ԅs tj[w%s ,SvhT'1X!Ҁ"s ZK\cJB~?# M$kԓZ 7ea?,* j- X;
tn"mvDOG%G :jl8%$4FD=Q2.y:C1
RKe(`%JP5kvS<=-60.MZ+VyGJH KF+cAW+c)a'h
7 z䳨S *pDfeʵs {ޡ (NAg=} ه /hy CC <]pF8c >UxO#8oϰ"X?y+xKoJZFO<"$ |4A_A@ s?]jNX{ A BwdmH {E2wnu/D23 =8Ǘ
ZjD`ctdQ4) Mn@Vgb_?SB=dV>ͨt% #{,3_TQ\@W4o4#~#$`VeD=W;m'؞\Lj FA"l`& b V)|V6B3
MlI>[^@xYs`ʞ¾ &I~M0u/ŝDa̝ mK]= $^ZW)}Vi a θXJܷ1_TX1ހEd%v{H`E9-(KԄc{Iۼ۪)ڃhu >BUxw$ D`]nV4Ar`OZӤ+!2/Eq>@ ѣai8tm"@Y1?_=0sQS"ѴCF/!iӒǺ
BPq,o~_o$7OmR|j%~ $JIڪϩ`]UTBQ $1OWX("نTpjZΟ '@'G%"y|;-=D$|Rb>g1ʧ`}V:
;hH@k5I# 4(NӉ#ǰTekrR> M[ _Dj5讀V&//a0D$ 廯$a9y? H 룈8حNU
ԓ` eNhh\dzk~@
ʔqE&3ζÔn쑨M,9{"h5 dQ2`%HO Bij'\Zn8:vKmq
˲W uIe=2xc%š/t}gQȞ7u:b]R
_hMwM غdJg1NiֆX_q\0>jO78`D#5PIM{0_oUL:XD~d:VOX[1)" 4;E{vI "˸r5 2@21Vm;1P32&.
J SGS{?y , $W@ *ZbvY鷺x>Yl+Աc~o k˗Z
Bٖ]@Xk ެ!@5AGHd~;> 3^.E3 QZ[5xWX moqZ3w2躣jtg?:I v;HŊk0cgm=>MTHRDa'Au2 +_K
jO稈3%hqD 3RE&|b)Cjĵ|l{7/Z/_nf!}T |d(XQA+
H)Guzmn^ et6Kg2 c\X=-Y t mfzB[lJ gx㬏V)5_ '-_sj}NL"Jom/^ )o+`X 1ozRL26= +}%<[(c27|`j^;-i=Ck [V]Kljd;ZIԻ![xp/tVzIRG0Y4l:p ~u ͊t)59}z
=$~&Ohn8@t6cGX(<\*"'hAK/
f^C$-RQ E_nYv }H`?"m>q?L$
ir>HIfmL0wtYQZk r TNֱ
m
t~j2ac}K]z5Pmyd4΅ c!I
s>As/ ~wºWG?c]I_}8-b *wpM!Z3YZYpD+f!5bF}<ڭ_[ZP!4Gx
(c.>kg\CF1ܴ5d>/)$> iCF6x Zm /uUEּOK hm@hG圀CQeZ0WKN|$ZMEsܘ(du*kFA_ hu@ o Ns 6# iC'ah2rWB[mlW]"?rW'_| _8Mn[1HdX}HW\ ЂF
ހCv?: "*,AU@ܑ̬P S1& Z"A7*I
;Zl5TF0yԐ[, cB'{ fr( b cv&3D[BÝ(PB@@z 2d? V%P!_ Ȱ`K +m߀$M)w~U;v[J6%tcɶ0t477n^&@
\xA;G}2M{e)qf[CIxwv:` jfZn>l{ݞ:$<
1GEdz7I6q- d}a ߢߊ/;㗬f`V>U{oTyK,{{]'B??l~W?nDvJ`='=tLZ:D똧窊 ~z 0m\Kp@RbfL*tިՈ3SuErٰ/S %vU=Μ^KoOI`-t>P;jSҪpD ײwaD6]}yJWBͤ%`_ozEϑXJ %
=k~( ?2nwA̢f] iRdFK^M
o|F!%\$ (%e!--yxwߐת:.5[(X|Xh>K$Rl}Ƌm-pbc@> DvNA
LDRK~NAdz+1%\K# Vr³REdv0/ j`|b/2?'?n,igDͮi^2Ȋ#߃(U26/ʺ7X CДqOJ\ -ŝ#kӣ`
,P"ILb.lr' so ~s#8Jˈ NR^X\gPD3g'Yz~.HJrq4lAz5Gx#'Ka8]Xuɾjjd1 ś0~kvu k y. ?@@$Gd o3 :3ʹE+F$.Mo$V
{Xoa9;d`Grm~^휵 z=\V^kKk MI*cvǓYY70'yS6 VD$\X_|Riv} 2Ap҉E wS-k
,Q Y,%gz{2.ag6z
j
l>x#>$Ʉ,
}r3<(6Ģ{}Wk`bs:䙞ң"-n/HU^⬷JLJ ~B\8 D|![;ݚ ם>fW(Ui!< >&0v@gx #1 E~Mx8)ʅ:O`YT9
byOhJQ}1cܫ6fݙX]
0M/`ܼRO?V
%BZ3Si\ .;& o%Feik-8G^e5:`]s0\mp}0鷔\ބY._*WP`4cJQ\ɡbHn晐i zjQ=+nع#S
Ei|I<"WRȔv
=+%Ոn]_$ghPtw E_P*A4*
LpOLG%2A3Rgk6<&I-3HCU[<
) 4pk1ܚv k7$# 7Л^r1Nc`ZhĮMYOII:$q
@EJ,
-v%rT L#e1ZCeG:R>t9M kQtP![afsR_66`vy^ Hr^P| C w->p5>9.rgd_,l'26d-"Re!&XOdPS31USr 2Y q=<6&)kwQ'`l0jB}`j I-YstD/ 8>7::^{ ^#:7>f[,Y%Ͳ^wd#C$&e6 >Bmu?Q?+
KTJj Y`~iu%&|cWwۉ |c>Ard̒u)ZbYW4 : ƹ<D~éu~B@6W ^صsbWWaa8(p@~XƾHt@+Y8 9σɩq q'N
ǂjWYP&6Zb:]/UEJ
ZI~*|I+pWpBK<RtGr~05`CT: jA6R]M"@{豃Xx[xJڬw~ae' gL@ aEُ]F>^VTq(Ds
pbrF<氡X2gelF˽vRK̑K -5@h
# (Nܹ.dO]o-3vR^ fmwxҲqk*6DD(>
?7}u%LT=G7(cDp('cAiͤkֳPgr䕩B9iM (Tr9֡F. ,mKNC.Md~\r땋 7{fkb
26eV- *>R3G%OHQq~sfTθOx'H5"BDƲwZM#+k: KpYcs'fp$ ..:i8=íV-!}%/*oJ#&aӀ=R :͢ Zck
R<'b$ٜ3U%H Sq3 ~/L5v$rYPaaP=>HC4|dA3 `cT_IP{"7_#M8ԥ#l4m3X=ӿ<
"|Dg iU@1*$ Ni;̢M3=5`=дmt_{n3Car{eQ"#l`@(/4V~xvN9J v/,wgSH8s7˒ /w'ƣ>8jҧkeh@żPO_QvYB=9F)G
| ),X hu+$
.
2ۓf @?9NEs'v=r?y'o=nZjtY'H a*lQC>
cE!Ȅ&MݤS2}FHhOdlv,<
'}=4/)!^:ib2дQ
$ȎUhX8 ",Jg7{S5KF#]ZG֟/" y9Z[ PpFܟFnϘoNY:!x5gCnAVLdIH `'+c| #paegͫз2ˬaH? أk-@[u 7Ց(GcKw] 2 HT3ۀi pPtW֩ 1| imZD' -8 ~iWkczIP-uly5>W5Ma7b6Te`B
!n}HrLH۴ԫ ]*6y3]HYTVVgR.Pgp&#;,|Hhoݝ(tUi^|h nV_Yb H (2밻?f&#ÀꝿNS*RXzKc '-M
)0\;@
=T"a-m:$ӅhsϕXΤ |
$#)
Ns1Z:ˠnm&$x}ӊ7k c
M暪YÝZI.]!H!
?u3o4LN6(AdFK*hDpqB%^ s/_ |8D8|VX\{F< qn3 6ߊ9W/]tFkN _C]tK1kb_i+uMt}jf=;Q6 :gbi
NO@)&N1 t 3>DG 8)4u=˝EKeJXГ3R8HNk؞oO\Dgurm5mѩ= *0'l|FR1;%-3V?}qM }\G ,ûDsDv)<.*u<yf~$0߽x97pm_dR9rJm- _-pVE/@[bbۨT Rè/z)h{ `9fUYI)ui,o$ KΪ<9T# } -{PkѪ%s
YjM9JnXI &* ]ف^舃a =c߀QPrL" oѧ!ĩk)< E " *z=y ͜X4v@,O1m6v+ :!:bv
~2`
u S0{Ճ\V⍡ꞤAHS%:url5]) '+{PfA{#M]8?)ݻdž (iNN-3tS 1{+A %s҇0E9kIv
3`%ADZU5GvOơkh' Wz$$z
#$t×`nqBNpgyꉅyܯH4؟}cFl' !"n = _SCOVz#G-u,1V/5R&vAB=wC r0!J^5"K(;*-PġfGQo˩Z%˪7[wx&ih &PQs(P@Vxhu #Y`~T-)~FJh|WQ
ucE2?;}5&q>9F{l0͋jXhrꇓکRb0M jm;k^qN.F½IJ8
93,
Vd^l4'B딠6 v1${69vz[~[)HJW) buyeŢ.U#i!
$ѡ#O#۟p(f%thBrҿk2Ok74eZ$\́b - $eRs ZQ
Y~"lW ٣8N20>rZiRGYs` _pJVǫb 0ʭ2o E xI_ֆ-=TԞn'bh4gu7 #x~g]Bt tݲ<#[k ,%O(ݲ c[;qJ\w%|K |FcB%8d{Z +96-H8
+q/_~2+D3 Sw|Fw~Chc#R . ,V
8V]ߞ(t ), >k:5=">T k&?vXkDUhR+=-'3=ϠcrH{$'Xn/.T%{arUC45A[
)y*0~JVs.^-;""VL)x ⤩e<$eB36D)e$-AGPnKyZfS+pL+x^3\'pN_ד b;aCK6!/+?C;/$ŃH)&}M&a$@M7 clɞp4b{d2:MLJE#e }4=S1<0{T /;ЮrO TJTmV떗1#\
dmu%D.7NKp7L2_ {`+j$N46F=nbּ AшfO NZCVA (́N66-` /2wOK]inI+2 ~Դ E WM !J(af@)
̜i={b2d6/p?mE;| EPЯ<?x¦X..s˃g#cUv!\CtPIx05s5S% FgB!k
?ܴDBS"?6JEU}vmgtfUy PFp!?RLz{GZ&/ H2w)J7|Db{s~ʵF 9%
a k}Qق;VǰIi}7[O&}VRāp&"Q) @] W QTBxvpWUg% .X痁]FDJ[`b@S` y-S
hpR!&}L @Io1:حDjTxAa@Q4;6X콆e|
WX p Iiѝ m \iIڟƠpdTq5lƞxl&pP :5F~"M?ޝ ve<#ʜ^5vh14vq6E${8R m{6(mfM_W^<: p&C]RdrIqK U4
WFj
z|' /){.$EDA5tRNz.k:2gY w-+%`-VfD_ = 0a
-=ƞ4vA5tXG5qlVF`G Ǣ_چ~;eP.{[3I30To8J+kdZjj+ƊZ mC 仐(SO&0ce*3\ZMRAzA/5A K
{ TM APcEec?5
ܘQn8یf)yØ`<XπF ̔\ jU B9.7+YrRYp~..NTCkETITEIyxȘ٪ -U|<!ca6Sź.3n'mr?|ݞ
g%J86`7¥)U3-{ƍ/IgٴD#8BY?5:K| vÄBD2R+J.(ң~D GvMY FǰgaPXi>EztjeMnȿh
cNN P Yn >Qiy
~|]]%4edFRҵ?K kwe' > 8/"q3SbCdb rL ڶC-\t
~cᯅcΤgݝ |fO>O9^Dؒ90 5yuDB#z \vn^2F6~vtQ}{bH
76譖Z[J(ݬ܉{4"ߎ\Y>?8-@%2F28dZ5k]mqTI ?+Vԧ vgJjT/89uցpZ^y|oڏc
FmJ -MN l* QirV xD*hG+ _T n\):wt
am?*rQGu3 T[ KZ$]D-BT )X-})zl zկj u* \B\g7"ћ,+0oYi~wi/#Zl~tho0j5[bSrPefTk66gq Ocg~pS}c
r>
bT;^JBme5!ـ!bS7a^?/EbDМ)t#W
eSnrA#}[j,{wh5 gtAVگ~D]xb
B ]kV3́ .
Cl8D90k $ $g @0~~DĘ⒇)d9@ ?F
n ]Y
+HS~yNIdңA/R$SgInVR7T T+#4Cj][fFV('+ 1UTCaRe#㯯 `$CU:U b9p5/H㸍ipCfWTVx; ,P
ݾ@zj5ro
f pwDM_rރ,Rp!HJ(m#R+Yu-dfp^erU[JAMbvJc ܦVj7~
7z (zT\r+ѣI@܃Nm
[ F
Q'fPH$hNϢ>q:CzSxhjz.Dž Quz 9oWޟ/'QR+2?Wဠ^LݿcФ m0 l NY;:)qLDX>2 d, 5CMQxtm!ze
:v$
gEi@# N^s/hgx gɗB{n
/DFkP+9usrhSp8
]A^a{(rG@2Rp$E5咊%#XLn>+&,3\l8^I4YU[P.>fG{Z} cVxGVăCUxl~ ։*@0O;ay<3ԏ]Uwh'Hzw %H
E' r_z6j]oҳ,( @ >ب҅g/*HLsS&p?mH)Sq9#_7V X!?{,
;l +n ?{,b1lE\0薳&,b% yLg螛3V0|+Y0@&j1W4
;AYr'Ile S,
=-ӠY2q,#''jW;pNQ[8 H@*FC/]#S N] %HNeTʠhr Қh5z8XtȚ\/ m *F2u%N 8tǺ4$8f3]W
?3Odv,3rO?r[}0$t
.ԢRmaR1o$|9@skqBlhPL.RFtaѽAD+)| g]>ie
xH ) sY$$Ic,/`r+-
衮8QGL. ycp))Not%uLNY ső'12ժJT]2&JЈ:Hw/#:6._8]7z빘 cywѡ*Ѐk..Q9^YcEߋ; KI b5ԺeW2p Zry:% ~f6A
X۰ `b~LjxG$Αfk5-P,b{a|""^kOCK?5]nʙ .)8^0d 0QWwН4TEg*kJ۾$؇?g &zCqbY Tz,cT$b0s UNS᪆jB3Jgy]aa`yiq_.HhGRpjy_,`LLu}în F}J,O^#ϱ_Q3
t?
Ym 6b:yċЊN<)+ަ!,W퉣 JbBQsu;NNTR=SUaZ\)gLX $91iH =lىߑENS tX0R?F:!{0ҡK`A|XNH]:u5UES* noRF^Cm}4 kU3D
p4ܨۈĒCx̟R GA:ŋg5$?5xiЄv"0\]C{¤y#;ZMADVqd?_ *mW +9 >ɓ ,Pl.ӯZ]\A41b .q@j$*LB _1<͘=qjE2tBy%gs ~tR? yH(Zv|w=tW82j
]>˛ywXpIo 4qS weV4 ޛ(Q8֨yQ Ve8]OSҦ*NޠsF Mݵp˲}VFD
aPæ_ gb
yT h6CxdKN59D (ʇY#@UGQ4U/2g?`OeGG
Y; *'1 ٝcK5:#:e Og 3_`cGLWm4 (^mڸr$0o E# w葃ZRTH5].ɧ? cic T i
!p1ް3p OXn"=_/F]q BֈR^m%
jPa.\lУpDrWb8Zlai.Lt~%Ej껱N>
=D)F2 !jX5lqp2]u*AE739/Ȑ ĬfNAnVe&e{a'cn`jR-l`/
)r w>4Rs?5Rr1g蓞У Y68^?r,DltLE>*Ac}]bׇ+UE 95l |6P PcDcܒTk'KUpUԘurυ($q¦^ ]oEZ²X+* M{;]va* .@'V2S1`sѩڭXpҸNǣ/ G\ע'Ђ%#1CS!"J<pξ5k
}4g!/6R꺢P*1hQZ*1Bsemewpn[,K8@ E Sb#5'@9:,^iv *TBncosfOieo~ ^;=_3U`_ѐhN_0nQk<<'_6zZÙKt
DX~/&c[C벗/pϱ)8o :Yi&oѠPxNG =DT)NUBq=hN f(,Mf7 7(*Leҏ -u¶ ; c~S/^%HXvA ӈ4 i}_ Fj)*E&;^pwb\7qVrݜ0)Ѹou_/jm<>OVI"D=OPղLB~.Rp N~?Z,}Z*L'_V
P@Cԧx<+Y4 9FCF
Aڢ-b ̷y%^*e' "㯡ؽ2,
zf\.5HDio+
bj{|g(kyIL ߺA=T>V[ޟ2weƌ<,rDAsbLΤ/p/ͪA# I%iv 3<
O ,xڐ^ LsTȢ
Ih@/A$e|zZZB S ȿD#!@74cUu U|OH/y\:K\VB%#Sp_0_ oYR\mc^|
#FeP$
ws Sc#]|bW+uO)K/IowQ565ձՍ
KvQDnR#КC5S~6|7hl^֭mM a N3GtW9~z(nSM)Y5+͖> oև*kwafTq26&0fHp=MW k]ϓ=F2jRw`$Bo`2^|PB2 @%}8HKuf[Fh=͆>d8SEw
?ySq[t!0Gж>y d4rɉrئ{v5
gLm1Rg wvY j;dhnxsq!FXyYFr-ZEVlR|I
tճFtc5 P$:ZW+.ռm
Aa)&.K( ] h4#;Ѹjv!eGݽqG] cOU 5a=,0
s b;cڤ VQ}͚Хȗ~JetA z(*ݰ= e)Ns"DTigObS`-ox?$2Bh&@C5S3:.*sxڎDǤmJwH&꺔 gڠ&_iio{Len6ryf=+5 Wbee(U U
fuah&n>-rTsV7T6W&M_
I) ?2ʷ$Q'{K:ORY pV1SL úED:HF Md}Ԋ? !<7M#DLJk] 7Gp;~J[ v#TpM2f}: wbaߢ _MC}^k bA 5媷0! LZ$ȇ6 Q&h*&vĄ+\Jn aNFw r )= S_EܼQUJb RӔʋ{bfp%X QOkԠj;#kz< d!i-[1 9u4gHM$K ]*U=᠀_" jb"N?{[U;v MgX+Xۭ>ju=-Fiﵙ0fQ= bÅlǚ <ӏv
аid0?KvI7T
tv)mn,;:TVnw${o5e0RB%8t {2 7+߷ `jJBF*z[O 隘Zq
' 2'lJV}7Q}9}bRjHj&)IP[&y#RG]ۯrު<غ 43EA]@3?kj0.ZR%0eyӹ F
j蠡uk@ tOE78gcN8
ׅmPxbeuDY취۸V:D UcZXn*+jk"\OlȌxMO㗃} T莇&4IɌDWѰ&_@~ gsx7nɦx[LF3@m@w.r8wHZs+":A:S*7 ;ƚ{b|ܧ3T
z& 旰X6LI# `NbIqQ 4vܡ `"n IJrZxؠg,[ZnM@ןфkຣ6 8|K'Wi'T}I|Qi5_g'<u3 ̋2\teN{zt* 4"V}TO<
A2+ͼ` @10L%PNyH05
ɼV'Kچ$ک~Go\/U&uDs0v*6//
)S5 Ц /HJ:ؗlIaplDBsA00DMߜ*#*oE?j:HwVi? e3I3o.%*$qgᢖÂ 0鷩Z+DRdt<ݭ*~M Kg?w sePUy CAN\Z~
D^pRǿߵ @sK_1MRE'WbOSt&BIj
<tIq 2]le]7 хDCR3+LK~ /y4 2 8OЧ_n" jѵp{ I,ΖH/.,DFQB
UɍȜW^9 v d |NUiWmG;^AEr
Ә1>sd خp /ԨV}VpԺ˝V-ҿ`uy HiEHG .Tdf-Bڼ|A =.dv4-HIWM~;;'z9tCrs#$Q$ Hr[aO_y^u zcۘQ[j|y~<ҚqÑH['Rci7HB ">yϒN-J
lyқȢ,?X>61}&'+{!fж&7H.nr+)yJNoF3X1@MUsr) *SyOp<8BBmMJnAG^F63rG]|ԉD2xwWdL{uFn5[ ?w_p/̟5SY[G!ӛht4lN
ooa
BS*g==p/UDyhkP^x =<֛x ѽmX3
@W;vGgЈ2}htQoÿK7WNv[`7
pQ)=K(*ѝ
U] 'j9#P*tC,@sGQ%W]P=h N^CG4cc(wߙo&8ɎtKhݕFmJARy8d_:HH vƴ"Nc]3p:kl/r9J
^Zlݿc_Y x N!H̽b7M 'y(_n9` ǐ*Xp"wǧ=scu&"IjH^#Tv:ky,3/J`t7^ fֵЪ뺸-8їkM O?Q-jwqE)$UN$ex;=˯VRxX 8l/aRQo,gR6k^ k- +j 6O
y3Z]JIឆK>G|H
*W%p)!bt5LiAs. ?z&}J k;T({UTLco
⠉C1$"kG|}s@@[v i;RBіcX>ܝr^|\=ӱ -P^Th6_
}0 P1Yq yA A 3G(~,%7@k;}g) ]=LoD@^_ ~xad?O!zp&5){ƎML#o`k}dxqiIIkɨJ5w/~!ީIx\ p5e :AfǧrdK!KMHTjUm-o/dLQ̓MEam1oZ2 ̕Sjݸ2az.JQt۞:Þe*[]{_="ұmy j\Eܽ!c2Kx*~o OSu+Uh gN~ Y.2Ryh/P
VXFX
,%_eyR RNPT=W B9O2.@zHyOӺX
5x1WJV9Q^5^Z2 i( û^' "P \ۓO;). DA2\? u=EKWdp()&ou_A-m0;monxўP1 O`mv`mV2%!G*ml%:Lv 7˹뢦Y61u6 Ĺ{J.ȨOC 71zPkPRۤ
?niaN2L^U⍘W#zP55ĮŴ=sj0ٲk줶&nL':E Z34Zc{ qt#u~&Py0^^ $S+!M ȀKvY+FxDzy&^,}Eaolb{egďlfy!,\ڃٖNvO39y
p` 1"e=ƕ&\x* h[~Z-Pzl{z}~w m .dݍ⠟twE/6\
Jpv{֜!X?+.Uïٗ eS/NíEƒ\X0).\ЃzW y, C|y0{
U?Zgvڳ9UpDձLj_RXWd\̺ OMe9|=C
s }d,\ILQaXdG! 5.cdu vTYc"xe[{gڦƸfL|ui!omԾHHw1 #n
8;?sQX*O{Aϳp !Ø S&3ӱ ܇ty/HUt7(" ^Zu:}vfg9(UE S)ir8M<- `>ӄV͏_ܿM~ 3eoN-Uԋ{2J[Qu)ElD@{)4
<ː1Kt p z!e=zGZK+ÿW<>DƾLĥWX ktµh_~o7 ڸ-%1s(VGq}1.!2W.pOOm9D\;Q N ["{xM~kbp7uR#y_D `c_.cJn u7[F@ %(qltSM:זZdqxzgy }dE.48}.<{Rv:L&yvHwz)D)&U k ]e:Փ~z%9$
YP|D$
mNT@Y.5^FOU=џqdj".|az'f2îl
@/#'W 7$GN"ѫ# iՇegNMV\";M+Yw lv%ٷȔSjvomݩ05'5ʩ6K*)ɴ2@#>h]t_u<"xTdq_UR(q4:L(4J;?j '+`ON?sȾX #^pFw#+ #h9w43&K kjB`ێ۞ufiu!S~}g PU7n(zh,ޟst^^՝kJՐ(AR3@'6VvUd(%gasOq }_M#XK't 5 Gq22G< f %/#e ˝'% Ғ-ȑ̞9B?%Ȥw2oQ{xHW3h]p͑gRQ 6!y G)qzw Du ǃ]^Ib=܌Ԅs] N
'c!8HB ⅑;Չp2_v a2W XI-_His|ɨ47pJ[$iq{{2sWslVbTrblcֆ o=E! <~o}[MZGP ~wԘ&uцR)(«TH
~ dGy#Z33q>V)Tfg]Cr$7j^/\ޯS[O#r~{ !j胩D
&(]zfO7FNJdA*fx&={諁M>TyZ 9)3{˱c2*:5S];0||s ~V$+4v6"tbְgʞ%#C)Yxim{YMinА\X;iȦ[+Ue;Y|9rEPW LVlS9]exa[T
iAϤ$>ڍύoPS
i!ل$
áx} nExs(iNK
K͍.[\Bnqk5yS tk%X 3 T!u)F9?8')\c{̽ N$&k X (IS5(HhRs$;bj;.U M<а4πWH]xCX6[{{Hn7+.ܷJ"ymg|Bf5EƘ/֍M=m'@J${vE 伍' Pa\#Bɴn c +!k OZQ=yf֚q tŔi峘&Dub9 "ޔ,ǿK4dQxݕ(T%F;p@0y~쑰 oy>L5Z^&jq9Á^"3LKn5
mV;`EfPn8Zq)Hz
.Ca,TyXg ɢ4΅0^5anl!
h?GS&P } 7et>Q"2:!E z5~Q&gl%$/=!_tD8HKX2yLnC˂cQ _v ^Gmqb;3&0F]54\V{
*EMipg
34 *Da:44zQQ)G胯诘\ʯʫޠ"B)?;1L*P* (AE2RsAΩGoKޝU aР a笠 |z&'GI28Uh
P A]x| xg4w/U|;g?