apparmor-docs-3.1.7-150600.5.9.1<>,hp9|]$ "2I5cLm'27Yj5i{T>]DagX!٧AJGԹ PíopO#~jxj,tgz gl,cvq[Tն8ӝ哘_KLS-Ӷ .@~AO ϸy/*p,z05D ^_ao1ױvqB[?LȻfmzrMX1&khKp]K;>;?|d # B 5Ihnx         G  T    @P`(89l:}FIG` H I XY\ ] ^bcdIeNfQlSuh vz,06xCapparmor-docs3.1.7150600.5.9.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤h/h-heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1746532570 3.1.7-150600.5.9.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textdnB$tx( yh{+|utf-8e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3?P7zXZ !t/R]"k%R{_OdT8v%`}`$njO/B)-Ot&&w5 Շ"br%֏'XLg JW?"uE/aOoYoWZ{pLmIj`S{3HO[j"STl(yǕ%ج_ޗ5o(,$>%Ψ5^k). rwvm~o[5Zϗ.ՠm4C@k"zjc*EC&=N߱Jh򛠅-[T^D-*hAҥ?k6MYƁ.לBXRr&ʆ"`24 Z,ڝg,29R͸6)8)@Ǒd:>g8GJe@w"L2 xLeVVLͼ\AkU<$&W<h-owH=a AvA9)HA-g^\Li{o;z&&^%)@ fW֗>ӌQ<(5@}=+?:H:cAlb$S,^&(+QLjw|%s{HGѪ\V76A6!1X8;l1Vr{5>?A%_17Ɇ; bEe6<ͪjPy H"e ~͞Q R6J>_)dEskhv.듃aV~d@&VZ=v[Eo8i-LMr#(4hvIVZ?j[X`"#o" /@f3&Ȅ lHb 3蕻p2үs eO,{J}d7=.2~~6 |k&r(M"FUE"eW}? EA^D #l[NoxM|0TwH~ZV+ߝRš嵛a(`Ցcl)ɲFU5rMO$uQʋwĩK-; , o lZڝVu `(xitj^loOQg)RKVtIga&B ݨlhkD{2LJnѝtEOh56$>rR})E`_󨏓|rSW[)9bzc&le0}B=D@@&eUnF6zӕ)^tI"i޲@j-M/l-օ+vʆ33䘡,&.KEPhY;8$^p n\㐺h @RFHf?>RRə ~i&4 ~ڭOQSd7ۢ6SqPO[=L9JYty)\x߼~(~nji _(FÔMk[up_5~ Kzrq<1T;]ƍTOf9UbByIR]qѦ9 ȵRk5٭ۢ"|i*>gAε"ǒFN `o:AXx=4mOoyG[\O,ɲ_)Cd962 ى'X@"qic;xdJY>lR!zh^+`n\.~*^Cm$]S!Hr*~JDD-HI4qZ٠Q, 1N;Y+>Xhu6*;^K" 49яEszU`tŬi~ O8]`Mj%2UϢ|R7Uc#uoTs}bQ(&`W p7GE|`'ۏ"0Ի53=y0"&5 ap.牫vS4"^]ˣ\(+jQx up 8Ʌ~IY휣1*?+g%v}n-E&ODskMFZ(幥{ `^sBR5㝿34BM߇,a `C$6H=۔A EEti{MLO뉛FeHf%!&ׯCDYr}np~.fYm"*wlmw&P>!Ob [0G8nnׯoř=Bb瘟|<79;~8SN~bAPf"Ѥ8tX'xnb)á @on'żaSdgﻳN}=U:*` S|:$\tC Un#M|%#R5r2 ޛ(y|`8 O?)'%}H @Zv&h1plIؼX\o y~MwZLu]tʏK?<)NlԾ]ȥ 9g1;EcpZR4( 4A2zвVkgaEq{F *mՃf{%M VIfIv]nf ٱ]&ҩ{gKͷ8GUK\=]<'wBs%OFo E dmNI01Rý'@wf4*^.ŠQC46>B;wnL-U{v4R~Hv!4[o3X 8\ v}Rk,# /-4@.EyÚWu%~ZUOɺC:1~ew|Hq|} =I̖, PCy:.9dUD+ ?dٚ䝮Ek8(/bQ*F)K3FqNrz w݊ [6jp[ **yMHZ;1 - c) <4] M 6 kY@t. Mk5e>:)ݼ*T|R0n!ڬt}DmcJ^c}{U"{4"׫MPv}Co x< ?}09]Or6ћJ'68ˮ~ͩdP~G=W,7ThZ]W뜍9t?Y'好e_x&u:8)&"QW+4a)ؽNⰓz&~/;L͛߇% E!n螮<'kb2u߫S}cv(!&0)#۲;Vd}oUߒXm\QCN>1RCucByf}X 0ys2d%.lזH fb #6#um-n$R gYjf[٭9:kzG.F8nu{Z5(!"w]{yAmY~ґysm5= T&V@zYtsevކr(-51<1*ܓVBP8HdbQE;n{@'2 eVLKN\yh:23bQ@]GUotwح*F^g?. dfI"Vc1H;ED䓚Sl wzc0j1ŪX|2;Tt+hc_EU SFCnDQw}R;jɮi^&CAi6}F2)kvWiDJ3V_+>ڡ:\S3{A+r~TWh"֌8)SOb%iLDci DDe[K}ZyyЏFT v6:-t?_O h|5SR|u D^eW-l>g6Bbc=pjkˮԬ: e 64wƙaa6o+AV֙CC jy9TAxdO}B  M="(3MQ07 UC.VBsإPUigEYƳxf+QPTAc"2mPiuwQ)X]ml3&M&04ޥNE{5@9:_UJX0^.⼵ϸ# S>{(J` a3q2la?0+&>TX lnM,o][tk>[f)h9SUX`K9UA wG@t$&0Fz\}iIr&aȣ(՛TuFс#]"X:\۵U/%oM y!޲]&ĵ4|R5%Ͷݔvu`l8ݰ^TaݔF'/NZɵo 䏓N1~/COh GH)mz b<§zev<ٛ.<|x6TPU4\J uJ\؄>\q?e"Nl5-Yq MC}]WB}BuY3𒂚yiVkTt/g`!Nj72#(}8`+jVN[T&&xAy/2Ɖ衞)7vu֧t FQV, ] v>ϼc1|5'/4WZa0Vv#.MCLH/(UKcd@"\+3)֚8 fccAã :xj9ͺԠS/S" e>7j!C< #gKLI0`E缊8ǙFw|U2"vͷ^,:(٤[z+ fN'SJMN:Mu3P?K2r( u@ޣƎ3]19T N {$I2Q =]Kfc*)Ud9g^ [&IԷ̃L>>ofN x58̨IIcgCyνV1ι~- GqwpϦjG^s2%dI̠tTcL*M~Ɗ> '~eR> EC{TCZE1ayX-_XY,6Q_C9x'Wύt^&ܔ#&Y܊[c3 t *!aۏ<~bk=pSE5$&O8ӏ{@i|hG;<3RZaqq'o 288eaQH2zh.83ʪ4@yp鈮$ۙl \mgq &o^! E}@GG)K4u `,r{TyvĶA"(@D-tsWHSU Mcσ$U?L~!hcVU:ZuZAM@ (3;dU΀Lg')uϡBs N8ܕ++tJk,;5g7^}OZFD o<T˳rz\JRڌNURD,ɵ_h!^c5Dlڽ|vǿf(i5=Q# lgR2 zriSB`ctlݞ٩@c%A58Etect)<%{v a.3?ղIk3 Xx>!ĂEX$[N-..bh$/y&@)'?b4\2čG3'DhmDV.Yx*e:!`zNAZq.7^w~ B>ZksP2@]|ֿQi(Z ߂.s~ݹe+;z{[yC]D)O qSsh WрaFeb'־݃=õ41z03hدY -&5֋<Ͷ Vn_l;UVq/*A!Tx@ǒsmrp={wA'JA@;j=ʧe*#}7:ڐCAPlVIN틀aT֪EƿQOjzzH:KX乍j*-c* #E8 `f$x|9r)EU ΦƖ\=ۓBi8C-eZB&ȉZ™CTdjy6(}TfW5I UuXаZ/>r+#Ѳ*7xT | /3+m]Q*[%@HiĪ"Ecn:0U8|`1j?RPm3|zñN6hȿ@$Gq," ).#[6@CZZ^f7m#$ E&<Ũ8ߟì bKAڣ-F3^ՁZ^>hwF?hp^ WPeJ8R ^_CiIWa YzBAČ4c1zd1?%eGՂ]L' N3Hd-TJr?~:Pסb$k'!/,ZD"R3Hbڳk]*h}qYdkm'ϙ{  ,1Уՙ:Ƅ~3sփ|O-D]uP`9bL셔LVEM/ǓAo5L r`'@pNݔ^P%RZkmUY'!VQ2f~9Pz<- )"BgPpBsEݕ|ڧ2M,ۙU7ϝkTh^\sӏJkegjs=Ѫ mN6ޝjڃ`") -?4Kѝ  /F}4%qu3$OvjY'o\@#x=4љ $C2\4D|t$W!5p;Htӟ&1xUn$wT|;.^ ʙ` %fAgF6s** -p,7!y/\Gc5g"/ps`F,QSغ*0VQxηOhѽAGJTpZ OKkaj-.G $IV.9>GڱkRT7?7N%>̘oΘ,aGPbCCnN|DAvEI Hi#e/1N1eY֑_ǟJJcljσȑ xX?2D؅2@!ovĔn[ŅH'Xix4emAvgBRPN_(R_HUHDXJGqIyhFm5YQ\ChO>{̍~F "Q0nI,C}^AQͫymf:FvJހ>8b6?.(v_ᖔ5Xlʫş K"ƺ^jjfb۳Exx}KI#D)Q=g?h,P8>̓Xu}ְ3 ûdUO2`Pqj57 [;`4)K퇱U])0;ٮ8 j^O{{I>6^5Ë@FF8+)5#jTˌ@o%$e+{F$L]Q +).h 5IhHpt6`5哖r3 6/[ ?W(,QTjl&}$r uFN_S7),_Ϊx4B8AoGؔUXq8=q6 ^|V)fM6'=S{ٗr5VzՕ1`6U><ƛNZG4D-Al% E~zw/L~Y2f WS W ^6K?&A_t/qPE F_7=T-t>iaa3Nw%hי0öx^ӒЂPXJo%ڑ?ݵ=Pyt@&$n5:H[cvF|ƓA07}X+*PkGdПfDr}6-rӨY~X[g>}:O?Aqm#܃|}mWYpNͤ ?KrV)'/ TCrj Qw*` ͷCp vl02=%_ .;1޵'@*Uf" BE\S = ޔG9ij1ǛڟOҮ5"zꊘ_1'k&F.ayԎLVe!t{m w?W䁴 HPگum ІL+Pٳ0>D~ͅh- [3#jH; 6;'.=&hnQFfJ&ط$}I+>h]dE 27BnbQxTLW#!#M̋> @QD㑯-p$L0r:w7t |0ܣɕXyzi<0t{u-Q& ,BD憑cn0 yMd yb:b[|G7Uey&՚GT#/ nF-5us!VsL-4VDI1=Q1o>QӦX&0sD:Mx4J]ĢF`Jf KVv%JCx1@\N}qf N5"V'N;&Ł z˟6∿w|1t94 _9 Kb$U,֫t;>|IyhUh$~j \?cumU#:ih*ג=kakvjNUkrҬPA1Xo矫\x#E oPCȖa&^uhpM=(AvH`-T'NjSh!K[C+J>.B`v/5_<,?pv?|겸 ^YM,DVE DuYOWR}e2~:dܓJ׻}Mbk+Y3fPg p^c'!t_7ǿ=M4wDB 'Y,e2ՙ7ݸf2HA" CW7[g SMS>=d$knCd0m#ѷ{3b>PAA0ZqN5?zo'uzeaT0a!|bC>ɂ= A4 KxBB ԶRHҦ|i#՗.QM3%A1s Ĉ/vmC5l@g%˦]p6n]Tyn٦YQhPYHZa7y8i{um5#a&i@*5B̨E`X1k߹}pdVoW>v+h}'YdVj,r=H¹ *:ԓ^OGLVspOT BvG`2q*3۞U +g$?9<_U?xS̓*V?7?|iɄq;gYH$˯{ wHs/۴Ay v=Mmg>AGLx {>8 t o5OWd} @--M5E}9j1f4:tg;Tb\Ѵ:nѯc:2G=ʂf+Nρ!X>Z AB yWlgIudjF:C0IB@E ><]bz$¬-78\` =wbL+:}ٞiغp5 J\柵#h'&i $%SǹQ [;}*Ib iMJZA:%eU V1ͧ*[f9.Q6EO݀0 i[khN=l@'8K "1##XNwI75'ao7&+%SS.PHslDrE@$j ?IQts 79i{dȋ ǚ@, lRi0f-r߫zQJ >o*;3(KZGzg~ Gu}HlLebĝː݂[u wٛkS,IM"HB50 r, 0YђU4̻r9Y\n}c`#[$̶ۑo-)ӑE;U&ɖwVf|qw\y3NXcq'-wJMw+g*Ćl}L Fe¬~4?Jbcxcgϡg}EU/4`md |*a1@qMaƌݫnE< !'`ߙ10Eq N(s/]%@13bXHʋkA^0p垡"\1J j~:;?Qj4zo<ݔ;4c &gOX!v7Ok( :<̍k .k'%hehnl oF=^r:ڤ+SMz:]0̝)ݮQʐ&rӾ)[U|>!`|J_5L˧Xܚ2ѯx}犓I?!~"Vdmqޔ+R:?Vu%/Ěw/`T1 rJ<pk@~~ XuJ?FR꬇1 ՃBeYݩj٨0* RE]ظJ qʨ1 {F(W;piJa]Ԅ *gA>Qr}P?B"cO>)UK7i9`ɈV9~j.+w@7ȂS%F&T 2@>?x Z;dv(WP P%ކ=F\Òпe͒՞4h\iVW_C0!J /Psx]&£BZtڛ풊,lsJFW bjZ vbVNⵆ}e୾*zCMNwZA:\lG[[" N8īKk]Ξk ~3o3$g@.K4im׫HU^6&'g^}y~N@e^u~F;Dl=k"$?7&p:PpZ51u:a8AK+$ Oߘ<=s1pPa[`^Sނ2qB".U9.jI\CS%@j {89J"aM*9iE~Sv1]{5#[AݞUaK׿k(dOb~H]@PCt(U%kUA>%fӈϚū꩕JqK2PjʣH ց1$΢Ƚ+WT`@Nx.`s3UǬLO쁍ͦ  ^qlHШnrwA,Pûoa$^^ >tzc̟&JI@DjWʺTc~J%X؟cx7xu#Qݬfb# ,OCG ĠƖ~Fxq71\d(~Ls6"Q#Nn"܊ZQ#XJ Gq4,eL8Z@r}>@Нj{M sY>#nq Q.̳Q,I|$u5ðv,> Qrq7ѮDb|;[ ܩ>MRtf̤e_n@ Sq6X"wzx,|!Z_s;]ؖ"f#_d,Ͻ2(zgZxFE˂e5)<wP/ٝMlP|{z܅Hk-o,lRd' so|k3SGp?ϓǷ*`f/ dAxlD0fۉ2Xl$-_yҩ:TªU ;!H0#e3{VQ@˿K樠IC:S *4gSDfdבxѠگfgwaǭO&%}ӛf1XK~@+mZAו *S8D^N~SրfK\c؞vWa3U< ,kmoOs5ub'Pm E/#sw!,yƏ ʎlp_PPr-AP} C}P ԛqJVsHk2BIbѩ6e؛AGv} WJhЗͷ2é-ʮ7/>"$-חn%9Zqj@k-[vnFau6z'~a|vvTa? >0iy?ZM36խ 1I?^lۤ55,b xQ|kvgȑ[am=g|x;L1)1ya{:c&8jb1`U>PWF킠ըcgʪa藌g”phG tOQL]@AR]?֫<֬lŀ5 P|~91h-n!^ gƊ9,)M ~ h. H 2;uݎY=v ФA  b=6UUЩ恮<=(jCp,x "UÉQ6F9SETu/~ۣ^ xq!^!^dq *#F3ĭUf?R 7G_C+!{'6shHTQ~ B$'~NLf&^u*eE)k 5d{3-C 5cU|LWm7\R$v 2e"@B-w۳RGTwe>`C ɢ7벙<&tB'4wY uo(l8ϢC3ȶʑ|־G"Lc)41GĈqjnE>@վzZU&8ȂDQx׷ɽyJ4 #)_ My;IB‹UN .ݕ "8_^ѭ1kvE99Ԧ 3$bTtaso$-W{Θ ̩&U/_ޠj? ^#.)?:\ǻq$ѫ٦h2@f k“3 Gs7ˑHXH'ʍX.^_47T`d DsZ꠼a,St>|i[q$^W}A-/jHbYy;>awk`(Wܩ3w78]z@ 4޿f Na>VZd.EOIjLsaC,gȍXݘة!A/FCr*kcd4|?8 1k4ޤ:& DУEddqr3+ vmw2dq!x3RyTsZ#fBT/Sq؃REUZ|~9F 0Kk>@vyN^16;e^R>A<++Ux.ETN]o!H (l_} 7}.Tiok7vSqtQ+XhA:0]2$  XqkJ+-4&Xy5keUdgU lu@V6lAHYG_nkK7ʠIMC9&QLn ӗ6Ԙ{1rga)/D寭Z|r?#> .o>v[03{e7_@tB:),X"v_ѩ mEΨK:ty+O!rzB{LG2sDu"o`L]sۊ0ɤ$SKc-U[%KyQ/}/ƶz%xGwNAmG=ZS!{RV* >:F:ѕ oCMKe0 (i[%֚NlHᾍȧ>[ps@ߊO!L^C qvML7mެފ7c&p%_l,&Eے>TW <@HjA-۴.[8p 'Bf7qm{!mUcIYo@%\ X:Ձ0Z!ٔdRK,8eo/YE/XU!1٨H_/\%?>;*џ斎[mķ{[ |x$|5E1Q=Wcү@F7Q%3ฃ fv:AZ\AJ@[.hEPL)@Vpڅ_8,4Z;嗢 ;ԯɶA [Z>4 'b9Su$4ϑ~\cW<+=bb  \Y_^#f_\ͥAl"{=؄˩= 'zZ/t`pc)c͞uH@'+$'CABZ 8]mO?:^m"OiXZxk\`AҦx %>AK8u<96 lDN&HԿCAit{+Uo>}}U CiLrϷ!HQ U4ɲ`qͽ}0@ ޥeNh" n5uUu31~oLR2?}n[EJx^g؄Q (eJיVIXɘ >j.ԟ*h/9  6Ax[#o(Hr?m?j%,E^$VlEΉ..dSpVKġ.fy8ŇFJaكRkh=ntlg4LcueQb]TY"DK䆎f{}9O[M ܱbc8gRu;H[n;AƐ);ܓ>; 0J7XC"qdpP@YBǩPć!^EL܏*Կ3SR\Vw[IVgq-yzoX)lK2kf4 xQyK=K8$AOE?3IqHjo+b ^Neqfcr r1x$O/{AIs\u dqU0?t :rt *L( Yl'8RhӀ+Xev YbKNCPZ)}"T㸫w ˹X7Y5XEC1!~lg~KV j(6ӗT5z{^c|V3>ƻ[PbDf5?ZE%d|7l61[GiKڮ*ͤFṈřƩnჾ,ܛG\ey<& LhАYVAFk:9A﬙01ƫي94pӲʮ{L/ "C0ykUyDv%o6I-߀q` kՀg@S]%=Vk qV|SKc"`GUIMfX65&)\#eҀkh?9 78 A(O) ]oYʆ+$x~|'P*_Hy~x7i{l+>,ZIuK"6r&0hZ/hG~>X:=tǪRҢ}=5bt:a9"C.IӋPa;;p3~jehV}FHsKrd=K՞:5u: LǓ]h?znӫ4SEQ{WOg Z_R7ypuDÖ_OSjad6l\7À89>.إC`XPLuRs%P5TE,`p֐oդ"pۑ}"ora Y%TK&w#슏0zH&Bq5ǿqPpnɮj .Zj 9huw 1F$ 3PˊQaYt!q`)F;d'ҞCogW+XDtZ <:!\;jO~'\zCዯ4pBB8Ӡ:kK\Pv|0^d|Kdmۊo{TSJX(IgE({1. lbe;3Mj%{=(|p{>6ٛ?CA)\!W] \jCc/ Rq{/f.swr'$,KQMqs{y1ñeKFNp4՘2jcG$XdC)WĄZ;.OuoT2hs`U][Er0%NE6$$'kv|f3 Akk3Lq,ݿzu> W,:ÏϜxcDɤ:Urj/ ^LO7CptXttv{D0LΖ0Shq9{D;y[\[:KM>ToL(x8$i)@AIX2h <tMi/]H܍G#XK _m#OE91F4얚so_LaMpi|*Tvo>i-7ԛ*z&ZL)5bGA*vU'6D55ӾAtY/ <_oCCu!Q%L':jW[ Fv=OCX`DA]>D>_ u5 # gWm…MsϤSOC8rNəK c[VH\ ̡G1$A%NАO[^1̰(j$ o<~D62kz\Xc1`zvnNr!X)@<V2U/ŎK#^W>ȜraOYS7;m4fs<6]LkTՏ,{J0 4rz ^>.H?ipxG l1YN(R* 2z 7S'YN uWSsʅ',lE'<8e1 ov2! vIZ)NȻK2Ԃr9{b|] 6B¿=h=VP&)F#*=}}H#sG3H4A؜Mhk@y-:v `qODy*%onѕƻL+YQy¢zqc};MZYn'puw?z^ /unވ,ZVeXdtm%(WyWs˵!b;,<#Rw4Fvg'% FX+bBxѷ^ÌܰA 6κݶ¢/HLHNjok"Md*j^D>;^mlܖd94[G&|/tf O{(4+紬<eA N2H/t#2iXhX%Pwx!r e$M81 Y4ua=~9Rݲws[uBW/#lKecA'-i/lGhX&ہ@oV\W/ܒK}:j*wQX12qEQ88(f;iݘ߰%Fe0 w y?l!:{.ki w{VHj>یj ݼQeLۯ$\)gGNz!@adnahʙMyr9Wz/UAK4kFeH\:WrBK kC=ȻIrSϝ02GXy L޷:NCSvS 1WmB:Rf3tȢ.ӱre2VsA0vlm\ #M7CFb@ ]間[v8VyӍkOHʎǵ~`7>N.hTD6F4p Zɖ@`BnD xHWxWjH$W+g+NؘeIn5Y_2CE@癹!vZlLokqtCL&{&z|g=RҞSISOu . yI '=ܐÝ|q;y02%m7]uE*(Qlo+"pNkW~hm1{1^RdPjy[@1#"8[T!4 Z^byU}BvJC6M#]Yq CcĐcgމ0Q-+bndc>G(ɥba%sEZ}L&> ehOT,?Jw7 i\XǓFE4õ̶wXkղlVXbA!+MHSқ2 L~-RAẏ08hHOjW ܠC%d;=$B_ұP?IQtCVŋfe^ũ|&e{٢DaG@`sp'j8JlRۙt:Sg|mTusCRI<=aJS ''ѺDFS k'M{?J cԫfnrXk~}n7bݎGDz+J:`K>՝a-P녭 ">+Do7 g]!LX¢/KD4,de^YJ% #$5ML L/f瞴A0yQq)WJaܭmjzHh{xk}v1x<ˎ $c[5;82dyuX>~S~p)eTE҉Oa.Hnao('첅ƻ,W"=Dw D +i%$-lpaSq›Og^]˒E}>+/ ;Y2Z#toM`lnEꞦx*20Zm{@O_RA2ݎudܙ4ҭtpThPCQ% gQRN}]cޞRMIBo1FLy ~s㥣o32~@TײW>m.}!)؊dks<$B=5{q-THaiЩ4rK%_n40*1b$$tT/Ihep:.+RJ#)i  Κ^CWxa-3Ԯx!\Nv,KcyL JUcK8ꔼ{KO/m `3(q \笢ʦ(SxjO(6i"nb;u3&}hGYn(1 ]67Nbu˟v qoJXRKh>^t!8*bEP8t6H™Yo秴:0=AzCm-U<ݦ ( >PkJk&;j}堗[gYB 3 ֻXoU4FvĘK|+6lEs'FO*+p?Oz"c9 %86;X |V fIbLϚ'x㒂 v=coHD\dOV)u`鬸.p٣٢dR'*c’.`$g2n{ fz9g)z-65"d1ZX}sGn"q;**$`3|!Yx\Gi.XxiҘ u Z.N>!ɇ˪b;^ tsڨ\N=BY8‡L g,SoX>r0f, ^N|W\>;}g4rۿ2S}vz;[u^7n;|QD+΋4%LgJ.w@a9/rC @x֘G<IE3qˈeWy #XAnY"$44vhn5Z4J5=9f ﷮ aBC2=#Pn΀ }t+3@>?!7(~vʅK^{:MMX:x$.ĝ?ZH˂c>\RGadιͿ~L~:əе[5I~h l!j:}|햝z0Ej_OmNJ G ,8 b6Wm}_ g {(_I-oy뺪&cDqSwj`9|n{ W9}T  Qi1~Lw_s+Pm}Q>u~*M;"C YkX%DU&bQgsW1'(U[e~qlTbz2$= v |2E1`"g ha(*F`)Powvڍ8{Ig N?^cl=R^֌@xDZOX%oWm17j!Ո>M'aM:HE0TkN FD_LqP>PƤvrfjt}|g [.|+j\{W]玝F{gsn y`DwǗ*-WZﻭL;ZYK/qqMEt#os> x9([oaix8|3~Ay1=#ĖWPj0%%n*ZkmP9=^H\BŠfq/Pl8{Y߹e0,ylsS ՎY:^]f9fPϘδR] :UUmO2s)Cv]Duy^,/B`yئ=ɮsHƃ<:"o淪)DX>a\b C?M'at._qKK={ȟC'l(!Fya><>*߬@E3i Yf98Jv6Ǩ% եiŭ DegCrlX=ދ7^̪eXiU; WrZt 9clExGW`qY"piU=/xTY]gl:=AbkE"$eJN_ uݽNctCpy[ vA֮&iW;,`tDi`0-)Qb‘YXg XjX5&CpgUa\8br{h3.^#;9RA1'3u1C&L/BVg)ϋhIş:O5ۺyB-5ez픕ծt͡Yr/!m`hT II&+@%oof9ٮ_0pK_• 'Bof9N h-3xiB7t)M58m)qjg#%arayų3yW@ORni/u\Q/ur2 DTPX6߁wV6 2t;RK͡y([ l6 p1%/ Ø6zB20?v0oQgrlC389r#oQ&#>w4RrPz+O֫~IЂ8؅I]\w3Á~-`.5ы`Y`HIIW>yPRשd˧DyfeA_sXc11kFGb~ÇaӭN2/ KI>v&Lc܌9Ĵ鍑B> ) ][u%+*>>:أ\|Tײx2p)nqTG)wD'fG8mC|$HA{1;YeѶ!|kwyI b6]ՁXUc٘ҾA;^C"9!V G K QӑHKO{l)n VSLqE뿕@Bz[?TBW,wFFGź(WTiC֜߀p%';{碯Þ}lHccn8p]^ \c Y-%v_fJAH qMM=w>QRW .uVt}ЇnUxp,8^aN$~L/ᯊ+w%:2kxxCXH,ނ SKrItz"3B=~AX0u(4OA!bH@[']bCy =,N:ɗ 9%JRۮ\gY2IdL<GJzӅvҪx᩶!˯QxGfa4:nf~Sݐ+r;}aӃBވwdz"th& U%Q!ͦm TMwH:c LpF W?b%ڎv0M%v|; ԨYQg? 5!`-B<՝.O ɟUS)aNgl2,ѨkMI'(>‘2vV3Em-=k0f!%BoK 2*yY-k1G*BߨDG9 OhT?Ɨx9XKoWgnb[oJqï ^g_!?F73|hP1qP g]* vJzC`55+\y8T>w=aJ]\֝wZ`Ѭдrr/ĥS'qK6T95!哈!3dj>%#.S%W3E{[?:폀s֔kZjPj;Tx-"t @ZZ-C' Ps=i1A:TŲ֌73/:U5w$.$e^Sr܀y`ɽH/Z- 쾩=U[sa!#9K7Pp;'&ଆ A=1h2רz(]Vr2Wr|LTq| Xz;,9uD/Zgru0R<;a:=*ri k N{BvQ\ nΆBR* B$ $vҠI)(E+&M!2I,\c[+nhS d>+u_ߕHqӲ7dUeA%>g* 5Aγ-DIf*~lYƅc'C"Q&tP7  &uE*\t㧳{>rE$Y [AH*zKo@ LO*ݽz}ٰ][k]yL=e<[Po*b&tafZt1n3[,S3ʆL/XXR'[R鬝`[u[cO(kj\ܝ]|g]gKCxvFCz,ĊUD߾2H,8ջ0]6Eal+\7i+.hw=LG&´F`9-5Ԝbd`NMpF^A=1-՗M0 ocw7,D n+ /% Hpچ*S,F] [kֵxi(%~ eCnH2[^j _!6cK~7G" MURM 7%99_ -]lߝ`R~в-Kq^x4gbK{`oe`g{yRSbc$$F-ho {]'#LN.! hr3L25/W ]op}yL8 ~!Oxpa8;w7%7#nͭĆK,[Az_NU mFhQ'pJxU6^[mq4mh|R~jE* ˴wwL nͅ0.^gjhLFF̈[韹F {j`W6 e(?D}y&U0hǟdm'5lc1%ҫt@d>wUl ed*e.{*BH[EM?q̵Z5QҾKL^2egaksf䴾:~[#Cj\3-BqB <.F>@6^q?HW6c|0/7XWR'^.ѩ}vSK3+yj/:{5M41CB𕆳J'VǗXK[?ͨ$;M#sFmbFIA>((pIzourq#eSfM+/fAp/J pttF,JۻI$羮kxM9Dvߛ.:5LA!Y"(VJybAʳT菔Wok*ҏh-_)ՒnNsK7)/Q;Q$=!Z빂n›KзA4icl>MAx7WC,:4T8Lfzg[z*}<ъ&!9 7ok<zoP$Fj18gޖuD"vRNQ Cҧ^\mtLN%Z/v<:G^>"kv%&`߯Ns<亥xlDr9XO_'M=<A/ ;Mד602۫pr4 l>,0g@=0İ֒Y )vl<Jc ::ؽ3,*B8[} w]Ĭ%!pJKѱ>PI5: ϞU]{!W|̊!Hai<Ǟ5%%Z{0Yэ¥ᐯL2xu1IZ]b"/X摨ӿߒ1:-- 4=>֨D \Uن ?3PN?,zP4Jg@7d!d n-x0 %æd^!A')v C8.2a`ջ"b{i%E1`vkV|tMkS/r{t\r,S9$UxfNew^CA، 8@pe{kH!xmaFѮu2Og&Kрa/{7f\:jWJ{FHԧ 7h[ai# p[id.²1fĩΟ o Fu$>;S[՗'{%tĜw)C'\3^ ^Jm,;Gp &^lM0Ӹn6 _)// aP':G]LQzG{O<)h"i=z_Rֵ(pU Bp\|xo[8c|Pr|dŽ wd9ʹ׬* hm tWј?d+m5h_8cf(3'(E\#!GGYXXҍQĢ `.ʍ,u]AwSyHrT@9&=K, 1pP2ԖL:!Hr5)%tX,H%4Ed,k&jmn 2s=ܺn{,93yكCYR|]?E4)A{SqdV+౴}p/aP=۲üx5~z0]-ԦԵB[;+C=@~:48-ad8i@x\k\cB}ۢN@hΩdJF =ɓ)bKD&:ɳflD))_.(0&bS7--0?#Jxr1$uDl;9Ck#V؄n%~X3j#@{/ce׍ ۗī FƑ*PĀaf6{e%w?GW` &.,%k[Xk,/c%>hd\004x .r6oˮ-BcY|THцfrp]ɞ"Lb)vtrENE%*zm]R\MnӯXP,FT]'ܭ fzݕrG>Fc*^1+m~2@j& i3>]b!p6okj&9<8﫠vڃ@#Bm3&Y@ פfq/16s(b fRΗg=t_ާiC';i5]|H_(nCa N$5{eQ߷خ'HJTJ{yEn|WK=r?5龛e@NGx;Z/('۠C{L,*5>vOr׳/_}p0ŏ%H `5t\e/A5ϳ)CCZVI垆(~|XC)~Vs_? QB@.8a AQoD0A]nu°-@OF|$<K#rPF5|'Ev3") |l?L0IZs!\.vm[ƫ9#z/GV:2<*Kʪc4@G}~1;zh#dTw~6Z=Z{F~H(wOQW.-O2 bwP*N~<ӜxU2t`dAN&;) polr&viMd6\4jE_[GSKĽ[ BR0 1'搇ψΰ%M|]ݢ-,'I+*\M~.2efx*53e2ǰK:vnNfgDm@Wugm8cw[sjjQ$`Ċ II34j`/w}1qEcÕS{Mj"q;Bi 7~BbE_떥O;rG[l''x5P ֻ ˃^W+rRxv"&Qfgg%7q_KĐIUm)vD o%c8?MxM z?=d}*Wt*8E['OĕdW(-~+7R r8ɋ;~[VS@Db:vQӱ0RZ^VR Fytv%$ L,4YdA̮; _ Z aЙPL%o$_L Bc CSL9K}Fe#eƾ +GBsF[ *x+#~#]Nc_R.Pb/=w\|K)+chsc_}Iq*ϚH2R+,m/ NPb;ߥ!cp$Zkyb$am=:`{dXu'A ]6¹-TO4$gXRBR2*L*}/Z\\/W'5B1dX7F: :@),B|Z H'lc -GBg}ɘybWO[-5 mNLkKU,nf|"fK^rK O=&LK&у;نQ 1̙TeJ;woa6弥Wgn9I8^WͰ@w8Y@P6Q4ZbVN>Bck)ğiYR^=Qs[=a1s,cU1i4(7LkխƮ䘻f`J"VxU `^&˸U, SI@4nDΚgS!p7ьcY?R|9#E,I_A 1 -.mVV YUv߮Ǔj)+ʇ'dUW -\6,W1mvd"y,;Ň Dž,,R5tV,UMH+"#"T6nI/Gl4xӡ(:}}iMi uj\Uh0CW%Ћ3*a갧z. 0öOd|_H=exWĞ~7}pwI܌ 8/ &F](ds( t[IoiuLcUk `_ |Ey߶ɉ:+$tdKGY!-%"䕊yLC2UcpDcpcqU)@ srrAtV32m4#=TV'2φ&f]El7\7 gv j㬝yk*pG^̩gac7}8xZ#lnL`) kB}_Ź۾27n}: QL1{ >8T1m94$\Ny$@D`D|zaCLڲ~8N2e(/YK ZUB G/7.,>)^nVWJmPC o4+Zp( /sx&ŵx7dHǬtB贆R$4\^(M}J/us='af .Z)V:d#he̠r,kV,!zWP^Yhr+sɆZ=/u!Z|)~hnt1c$*1տmm9v؂^m* RL,3/\ZK=G/#K jLcN))Uum_>p񑾜M̧xϊK/)ox:ؕ FKiJ nk#d91#C@bR»vgQ}? W]i]ra϶;m&0zgHЩZM-kp;r?c,C(O B_Dݎ!FXf5 Y>G{ Y"W(,ANZP_1hgZNgP9],B,р!#vC-~Ԁ}Xގj 660R )$\@aHٗC8/)(Q(-ZS!&N̺LY,~N4]=FxsoΤh: T!)Kϰ5>PX& xWxPS-W&g!:NT6v9+%g2 5ÆԘͦsQ?C+WX#A$}R]^\oL)җaD7\+4IbJ;wWd;t;L,a =ԅ[2>&D?So g78KOe?P7+ȥ#@/0x(qcJun[voU dQ-0(CFc2+hXQ]Wz\9@ͮ:$9L|L4yOUlXF 4 !skWOԽ}ro>-vKǍ(z)E:%_LU2z -@Puf먃;jITG_Ҕ$\6}fyWI*xyF;yP%ՐH|Ex)HiD+qW4Shb-7QȦn:->vա8v٘g2R&HoڃHt8]P1 M?93`d'pW??){ G\9ʫy -0p-}$m,S={7`̐[hACi\9t%Dd;i0=NVBjR?ʹX4MRʈ6G7ifϐz6s_)$c6[F>or#܀~j_j?P)qOWUlеۀ= kg1uq/(m '\<`6A#% MS0-}0N6 %?m@wGQN /Oއs\N1] c.X.LUc&nrՀ7̯^Z+v,I(S$ 95I?FA0Vq2d E/ב:UBnh zڮ8lm ypDݓF4;eD BAX(xN=@-L;L1-I E Պpo`*dH.͜ySN `3B_bҳjU\*7;+*$w#ˊR6pE{ok# Q z23T(Z9#"K6$A0Ttt4v@-m ohR&3Exj2S}/ ցRz|0>jݪFDl.&b3)_GtI@W=[*Eӟ8T{̎&X|}|uؐ0\gc5aL3öŔ7Jڬ=FE1n =)+Y6 u/J(.tDt"v |jSw95ƅ^U?byoqi0j}g_[xF~45(h@ O48EPIeӀ 3&=X Q]71ǰ5z JqQr '!:Ȓ^񛯁C[~OBits\JΝݧ8DqUM`"BzN9Pl&\GCy[p7i{ zx$GakB,eDXW)MZ(E,MfD_<ܜ@!FB# Ð/lz [Fsft @G_&|Uϱw,W?tƯԤ9smU-| %6;ŗn {ɍ|~35Tdaa+ S[qhMG`:祝EK?Z& v_J 8o[Zb#F*PK]AW B4 3͍W}=znUȜL& 6cr9 kD>h (fa Ѡc RdGfR=I{v֦>uuh7V%OqHkʎZ( $//yK 5.KϤnK,Z־?}yfy.3=ʣqtUQ`$<3[; VI(m"/w/ 9|%6d!Q;>^-4u;CM>IF}c-3Q$3ndHtk~OWb9RA7L(Ej &?(*{rC\Zf2;yt*efzfK7پSuQ˅1]LByMiR\`j`F>dդWwdߑk'6T;ȴqo(ZV{ӅѫrqI˞<5߫2t|\5jhM5W/օЁT\$p c_Zeq `Çf,TДka q}<#z^vRyLP+x4m} ?W~`l%UңIMJ]h?Ư^2-6l_s(*MW۷VjY~KQM;&"lQAReDEdANp<oG(ޑeۙiK1խq J\&;nV -\ ZjܩRkiz 1nvN<ɽK{l>&a6hNN (<%]܍jA _ Q1o@]^6[,Ѧ'+ĞBͭס5T2ZbthmF1jY0/kb.N@8iAwa;ጡBR"aYt%hQm/m(ow>յ&L_&pReNR2ZNkpv@X{ػ5?c˾,SFYJWISdwXUgqb'V$lq.*(k=ZUV-"owrDl܍azHY"+? UQ^Omt~8 Pj%c^Ϥ_4>$DFYFH@qHQ ԫ^Ă/*KǾ{a/u 1pfgZ9ݠ xHH_̶§*7DTwj/6o3\;x7gD?D v1I /IqbU{x&#wQZoqW]qaڴn4Qe_&V=L[q\S ˩^*Y-g ^x_{D+/o !4Cs-fVaఁ{J#P_̦-|nV)ҵ%^[ s: Gcvc*/^ j0A˞〮ɏ-vt52/_^qT =*,I1Zb&~_<R.bxy"02Q B"E"D /T˸fxEߑ@F^)dZ]) U:\}i("脀>!5FNPpcc.* rD_E,~?K{,0U@|Z\iBUƴ0k0:ݾ$D/ι geA&2&sWI6ZOГ~b2Ф!{]5XO A's(Q?*prϏL>(Mdߜr$t*%'o=2o+2'۪[^ -9dAٶЊ Jh#|Ez[Z70"`_󲰊u>޼/?b5-RW+ 0_+jMVf> GwΫ֚ƎqN>NXpC\R=tXERqݍ0[x|lglUCo)X-yWEx;XU' RZ)RH@&tl>5eprYaQ0I,Tׁ 1FN'H Z A::}VY޿>R_g^/=#4xoeF{_eL&k7DSrҗqES̫GRs .v<]"[g69#وH?[ #*w*-ET W'99p`7z:9KUҢ\5YN W5+Z]=1;a>{އUr)y(i1B{XWmܐ:%lY9,BvN(gK'Aզ BC3.SJ|A' I$ ?w?tX+H:k[AYxz=l\M0;P]Dk>Yo /ÚzLhTji,^ lpeR4R!KŇX?G@ZE/Uj8 @ P"y1lP>/jC(lPK]];vWqBݜa&Qz5u@%Š6YS<79ߑ v]mJ~-HvV\KzBu.QC_ E_laONJ&(nN͸YCɻJk`Y-P V[&7/ajqM~\B#PGғ86vam'v^{pmep]`(@mPr9:]/0 lՅ?d\BśI"PrDf-3OQ{Δ/`@Xi$wEL 2Wpo NU#Ȧ䖄1%dODeHjYPdzA sCnpQE?pMP.E{u1MVG0}o[j~NbT&<1-˅on6!wޘY },Ap)7J4-]u%nrI!QyK oE Jkwt Mte@} .Kҟ*3q0 w.|UʼWPOls?Yb\8 ekCg}QrDO/C\UW/m<:yhXxBQ\0jj|:{ؚ)Ì猥Sx++Ҷ|vq#+*}auה_2GD[ty1}#6>5;!nњ2rOǔy9X@H(q#[ I@%vju.GAS |pR-i8xSB=ZHIM0ryo 3nm¼TBP*]'VەK,OtRu gLwxRAdz6s@_o0VpB;ս&υO{2ŒNFpH:@#;>)sff0J~&sqQ+kj$Ř};W$$Ƹ\΍q$|"ZՃH̆¬a_I:U_w48I lTro`R D] }‚1Q+.x+:3$Yp!<8o8r4*9!΋glڔ[.r F5GVT+ݿf<~LE`% ˙lSƄ/`+7ա+"k* 26hu'K+Ї|M]qwqcy=Y٪ݒ#6S8n<ǦH+_  \p(3aaB`% B \A`#>T .*Л+y0_ ˌ`?7O5nsKEN?B.hl՝=ms+++\Ε/?Y:P"mrV"s ݓј.M qd1^Y*O]9(W8D䫑756OºL}p+m ~ix"u& 㹜?OaW xǪGysUmm NLuV4̘:nRBr)Aȧ#Αc?|y(fj_{Pp\.WuF=71C_8.btrW )ixSIQ~ Έ8/[&!=LHQ#IdX'y%s=-bOo5_%puOΌV1b[=M?i} xVصFŽW O =)vc'y4mr&U"䔌ecYFU[`NHި2D řW92pSUie%ayƥ33Py'yFL /r:#&q-`^\ 1.|iǶrf3MATQx`Fn̂=>6vi w/lYl!^mOA:VBe,ѿ'k؟[ QZKzjt@|̞MpȜB(k>k5-{ᆟY/)aR0w"yR!PI&upO,@EGH(l#c`DaZ*X zR+Ӱ:Iy;I0l [(Z{(//2D焞I5ڂJKPڭާx[ zD&z• Ra= Yb;IdiݾayWL %&+hifyv%jޡhn|ejM(`sVyp lvvl#%9R %oG[ 5[ w?^i-nՏ5ǡl ~nՓ%z&f`0^OlD|'\y\=R45PGYNiU%Bm%AV\7"I{>l.3OwW+{̀ b9L,ueJ\= rno IDy Ѹo+==1uax V$_j׌:U ,|?%Ѹb9f:ѝtĉ yc;-l%_$s}"y߰VS By " !I7#)oI ys`3};P:G,"i̹gY4D\Em1E2Ш.=_7*Z@#!DTcfF AY|MqeKpq֣(E"tPi>t[U(=hk흪-^S>^֍b6&2s1PXM!U^,b A>*C5ҎpQbkx17q)|gCī]z)fS|Wsk:ʼg}IWO84p>^3,ٔpsin=ՈE/JqYq wN k;ut T5TM {;O/9EuUw!b^n b^Vzyh04"Y}hFl N+:;0@[n+-_~F%3!\ݼ"$ K7c-5"G2ToZ@P9nt%\XKT~3ell8PH ]n(er=p!N|D0{CtWD8hq<zǖkMKl%1HmOֆBX/qzPث۽2*X~p C(M"{: =$Hh[,Ob;=th_%_/fpZy "GZ(8,|&kQv#;*oS FQska2?D,ϊka{Ak0O H*+J D#?y]|M#=ԶjF@wx_/GHTn, b잟є>y2cnֻٕ3xo݀kb~i"> 3iR~ Us(ݸ*ͪmWNY^]N(℟$2Ȫk,xF)6$mϷw^[`ь |D)4BؘEL%@=E,A+)smq/EUL$क \DPD@vUSѼ?٪ͨAwbwIV9Y ٍWÄP.;>Lԋ*0yF0CݑR%”E,8 wђ_ J*E>1 SH;y04XVrb~uu58߬(=8պUs?l|ԠK*d!(J[yh"]̀5KU0b~F"]t!?g乣36k^Xa:{ɀ22K(VhqOu5g}S <qq0s'/iS.Ի-ྟXgmZ$DHNhK=>]³-Hv[f}@9%"v-|'.fZ+M-A\F/n>ݻİz i YHޠ4A<?Ze=ٔBo/*۾c)w5x6Zf_Y6M/goT{ϦeͿ}OݡnO IDZа9.4K~!kZ"AT't*•R [ʃRŸPMs)<j{;xdĔ=)t{q-be.r7h2ƲnBŖ7[ }"ݸi7tឌ6Q5ݙH-dnI[Y6"Wؖ(mkvB;W >Kh/LYc:)[_',*]NhMAMnv)g٬c}34%UnVӖTZ@lqdT8nP NNu *w0bJ%.p􅥼]S+61f)7IM{б@E#TËtSM"IiH QK8%%OGT2z0Ru)$W#LLr[Vh>N&Xw~P)-(f֮F.<6_xiqjk#'y֚؍/?M511kM*OemϹL:zKE{/]ʯ,Z;,`,,^I4doY26x$P.ԍФT+s?xs^>zznƶJu1 zdJZMW]0864NhBgTP@- e!(љTG`0~&澟=į.S}a*Hm%ى^Pl.+@ta){J2Q*oz/jh"~}I $9S k0uВ>$e@G< vŷ!{6z獀+zDMʊF:c* aξg]#]]MθAN-NQ{zE]-1U9M5wq .xGNl"XXR%cjy޽V8nrZQ@]t\IFa% ɗOxκʹJUiFog}\Lު0lP)˽^l՚FHMG+ObF#w @G !埔[oX W͇t]tā#`7)12}դi.Cˈ9e>}&TX9NU0+,7t#|ֺ݅ D id xv:BD= "%!!a6gZInq3#[ m꺮}Jp5)1 p+RqQgKKiV UAQ_<ه֚lCGO}$tCduO6}t1}9YE$XeuP3k#ju!v'hx3.OmvBSv2"۬փ rA=uX#et˧Q^E=Vr2 O_o@tmVk ɐ@°Kd>{ j [[{n9oSަu#[B锫s\;utG`4h>&&YfZi| gY-P9"Lra] zy  qqݙtxǗ3$CQȓ]z?4&" \ğ%Cq(Je5ÐڳnOkTЁ& [w[N~ KkbгceqgIoI>݆rnAC)z\(imn{a_$k5t. +}`MICP@KO񞰟_{ruc/Tyz-VvSL6*{KHiEŘ+^羉N}Jvo 8VBw6RM>U;k~;\|lbb{ȫDdkt<5Ruw7Э_hO$c1'pj)czhjો'-ߘgé@S/o RK1nk׀` ;btm yWBa2b ?ZX))^a2jȷ3rO%*HùGUquI5)k˾~U# 0i4?FVa &2q)GztPԗ*˜t\voNӒրTpꉠ'߱&5ĵ8f5)qXF-|>C֯H:cYV{{n7^yEyc~wkPNv4H[3hB:2w 9\.U7ȧOe=tZ/'VqL]@oK>j:>:BE؁0Xӝ=apVȋKw7憔|#r-!mCmM2U'`@0RQf"٩!Pyd{HpōJT8ADurYR %9^20ۘ$V;N%|4Z#Ϥ2 _=//;Fܔ%qR7}<^yn伎K~4>??AgN%P)IzZw6 2o'm ~X:}G<58*h!M qslKPl{DUYqd)  xDsot.HCm^?Hcsv{'E`-E&|($sF{]T`ɍ#//Vʸ"b?>|Qގ{>4t`7y'UhA<|/CYia~~HV#X4T:ezX%} l:`g=0ruM+h#y*lz!/Ve2=gYď9_1^1_yꮺW~~[p8; WƩXg˝&58', $I(5o_NWbi74%;3g e&dC>8G\~ 9_xo Q^nd1Tb{Zilн&^' Њ KEK:o]7?K*C01fVd=k!i+P(p`|*8hnlr_WD$7KE9nv'uZxk ߓ6p2/WEk/׈џǞ=aj8 _Rή{ VLP-8W*0h\rs_?c619Q\?x 4o%KGu'֮3^ĥ1MgFq_/򣩝v\&%#:*m ٝGъb)<*j̣a1uMzK*&}"CK< @|qe7θ{a+"^ b"붼4Md^tPhl'c<+orLpï3b?iRFf=mq s rLbG> ?H rrGVcr `a54^$,%5}ι܂BaI-)I z ˓ws!CC&=84no~' j$D ?mF;Bk2Eo[r (I'昢Я4'7旌ٝF5KJ>XO˟\bF"#^J"ݸuݯXƫ F06>J-e I9P3b^ֵUinN;$|nѦ+}q[B=װwEweOuAIHlUrv7l#=F0P5[nRvn݁c`$ E%?^}'641(T\@.ٓIVREg*x|R"D#z5i/a)GSwv<|4~-V< ._fAjl#QnA+ڬ #U@hrn'Ζ27|h4˜MWI+C@Ӵƾ|+Y@=E9Fj=,^bkoViȏu(*p ܈X1s %Tyx_߂Ə6#˚g4~IBͻA1#*ݺ<'`9enuqOWWNy+ F ZEQuKؓ|ף^1L$| G2ϳ+RT|MwdS'6~žb?>; ]6 X ؂MF"ד ͗ ussrĵtM6(0m?[=9TZ& q}p0{bKH_VG B%dD#xuzi"K3]VG@ \.Mo uML14v|-aC{@ mS~ᢐe)qm]wD(YX  ;g2<ɪqGM(SRjzq\{)b'ItfWT٭ hKw2>xnz|3Ǔ!Eܫ-tر!.P~#$XAޛ[bT6UN!IrpadQ¿Ega5"¼iڱ+!Ă3 C tLJҫK^)3_c蝐 **pF QUk*@>s(36d,e;a7џԶfdTgjǂ2aG(1w; o5CAW5JJ PS߆0{ F#K1o@XGU2HlH"ݑU$e'< }vJrܷ%®8;mob6ܖ.\tuъѱA"Űgɐ`G%%"rRsﲈ)le# _Ǡ6h XZV-w/-ۇNt2 >EFh月_IcG1((B,t2(4#zAж:W|?Úr0mj{UݰERԵvP׶[mS$JK9- sMqtS n*xv5+PHn5@Lh(B: ̉W~.8o79:z2:>. ']1(sYɷ$h-Zfi- TbqEaeh~T5>1\+1aho4\/Ư/J0]L&'m>s'ZDNYbC}Tgðƅmai m1wazz201m%$ݴf';H&D+JbD2+R RXPuP5q -2Iwnod ȁpZ ?(R;sD7V6}6=@⪂v;-9`d+;t6XLz %Vwj&c4HO(A44eCVPO2bS&w(' 9n[܆F O+ۼ{shAډYf#xKb) =n;eDi$HS'缘Iտ 'ׁmkO%rw|  ./ *)c]OFLVetk/QHXv"V!_&n,79A0@ƽ $o&Zoٔ.adNAYҐ_NBM/nCKDd %Yǧ^!C3UPgshTu!:>dEWz D Qwz6 >P+gǣx}+x.(T:݂1"5;xb)[Pݝ{Plu YO/tz؄ Rs=T pF0 &()A1"dzm0Xc4ʉl:URſFLa\K;B(",@ut̴A+T#U1Mo|Ȭ!xlߑ~Sy.frEn%3}x( ׯPϙ▬KR0m]axʗRu0!A;*LUzcKe|n/7u˓f!@zFx,xm>>\O5S>O\~,Z}{OP<pnqzNE=C0BWgl9Blw\AKȾ'* AgPx|?u>GUT ?k#.}xݥf2{.Yd'v]iPVNDȬS5iKZUgr{Ջ]Ss {2 v+r}s;U}ǩ- @mnlfEдSFbd;oR@r1|+1IDqkDd WdBb8sx[X8e͙\1(c“wnD-F2zRy8AXFqzmmTG{YXcxDd1MY$uE9s'KQ7cJ{z8C05XEЂޓ!?9x6pO)y5"ˀC)SP }ުsWuN}]faHG?virʏ*ښ=hQɿ+LegjؘGBK7MB\ul=ڵCswxC%5ra  x}ovq"G~O``B=&拽tSg9 Iqpy0BPQAՎ]ca,W $ ]PWRp, h xhJ{Pf\tղ;@iDDfSP$9d 8E*zǰ MLAfM퓰 1d֙qтm(Nph7K`dtb1}HS=ϋXȝIO،|khFM EL/.Ub@HvDTDξچ2oT/ yСL&FL/&Jũ1oxӂ_4wTѧ\^Qw{Fu3mĞ_^ҒRPd jrƈ\q1jgmڰSgKl }ګAcM(q|Jy"̎H1vh iO<웿D'*WR` J®|8[VNruj/4ՏP4:`O`%cF!ӉAB4~as$&f1''BI۵u ?R| LuFSK0x>rvjx3KikImL$FA>u61񂧷k5L%)9wO۠߾UFw mA,['W-S'QIﱙk57`iDL&j\^#!`|Ԏ%Rp6-GgfT2AG_S Wj!ף+vC! qrjVXh88%Nv%GެzA+c<(6%b,إH^%?R GJbMqdϾ# P>i.Lb"c+ 6RrX#q)Իy>&(4וMW3VMc}Y-L^Bɨ6=Z))VJ oH䥕f߀5EJvV,!% 0GENë9*c6?ku:xl2AcutH(sc7ȝ)_XՂ;ٕkj6 b;Zj5T`M\TV nRIs/b(Ӂ*K5}}"~Bl=LS8%aJRa%3"]5HV~}!%B>bKFr" ᥅5䫉vC\W nofjj׫a*Sf#TiWn3ޮ_K3G?r%@)ѬqY%r,2|,B:*!Q2^Jo@#?񹼓9ɟɟ9,<@ZH.1_ v/~1 &)i6y)EجZ*٢ |@ ^&ݜȣ^"@tM\ ˝S%Pm-LMcjS=ʉ*ue%9j_z!kff, ]W4m jj/sB0c8+AFUZXC=Jf^8*AKN!6djj>E.9|-˫ Q:wZúVkȌǚc_Դ_S ͂mYv&W\J֭^XSW^UɞV?y\![|%;̊|[#Z4UbF8W\fˢˊ: sp4f>ۑ7qܵV XHN^;<hP;Rne_ RIH?U%7V,Ѫv"DukhpA׷ 4ޭ/*ĆG*G~'?Er$*]FaYȅG{XYH i(/}6 89*oąwKR,x{NOCrƦvci^{l 4'C^Fl24!EޔIEl.χFq8 WIO34O@әexο A)wUV1\Zfc]!2ףnv}:?vkWm቉tcepߍ \I,OCLi@|o\;{ϡ9oY}Tغ*F@\G Ki.) T.OjJ&},_y81N2Um[4~4T+ML3gSCID)6jjY=0i`J HgcТ/4 gL?̻kNk3>pCvb]laB2AEn4 XXJ&!8C-S9WCyu(M礶 YZ