apparmor-docs-3.1.7-150600.5.12.2<>,״iYp9|Iu- *W&G>0j?w>*Bo+[\6exC[ޡDwJ;𼼣!I7McV.7#Eւ.ݡsPU^lo#_ȝFru4AݩC>T&hiPm|PWeyM4HFH#ZeP\4Ba&;X?Hd $ C 5Ihnx         G  T    @P`(89p:FG, HX I XY\ ] ^bcdeflu4 v`zDCapparmor-docs3.1.7150600.5.12.2AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.iYh03-ch2bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤iiiWeWeWeheWi{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-3.1.7-150600.5.12.2.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ih@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2b 1774261849 3.1.7-150600.5.12.2apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textby + o).utf-830dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722?P7zXZ !t/Rz]"k%{=CQZuǡjע|v=X&I}Uٞ\obCBAoj,%N'GL IcCh0ƜD`xcc\flY֣xF<,f$)*&5vbN S"cB>I[95uis\0rs7 ZӴO Ԋ݌[ I61rG\oU9Z.;-뜅\[WaVl寀]QD}.߷ӏqgCsgMݝbZUJlnߴm:tZȽ[,fߎڌ n3-l! U91tm^ lb`!vq.k)s丄WZhn̗@pdsg"p+YnZ(?r)Jt^z!&|(xѣfՒ!o jV&)w.DdM$hDak)>XZPhGQ-zx7F0LJPrL) D&j`⛄R1 vz:]ޤFanP7k1Dt~>?-VɗN~.R{nuZflB8'{'fS7@=Hy$M超|rRNdLJaU [Y)kجVZKZ˽d-dX$2pws%Qk6]ETi}MZ,‰1e扙h1m@D[io+,B?)5n8'!ʗ(gbsAAs㺽Xbl5ىLQ9~hfywӌ9ReQ`cCˁZD kܲBmM˺?cՋZ fܷ|;1U?d~x '*O J>=*ojAu׮k{Sb y.ζ|ISot|QĬ$Bo暦vg0y*}Pryc^̧M4fgҳA~6玌uPUjƗO]y3=_[Z#@@ߘiwC{bS~aM;=, GBxs7>/yŊ6̋!}Yy[.uǭ(2Wڿ!dCI+ !u|nHV5MPSA-VC~N"I8+wHJU%J$_J~s=@ݦ"&K/|[OSCbcQ2!o=v]XedLg]q(z= :IOZ N-2^9wg;d8mN#I+9E1׈@vKRAچ$xE #%eBJm'vt67, ԟHj q,O5/>F]_ ^QqRˎ*Гt*r=~v3C25#X$GƾF+4ď?jAf??@ȫ1D1#8 X#,(l|UQłlqfbfHkC t)X${2Ty2A4)n<=5R =%#5es+\#1BpM5"!k.e;Dr-hUZ S_114(Cx]cOP8/bŊaؔ K.QMM=TYY%?8bs,yi;dk{zaKbkghWb8[AwVbTvB! G X'ʗ $b(ḳJk Z0 ɚP{lϒXҽ`Or/SH|q﫻ZMĩբ CDh9EO) #b4aXRk 2S5y&_E=0 ᳥f읍Lka"iY$ګR2ؖh^hV*asd|$7U2vީ$jxd~U`3sfe]O:-eNyQTVg㧕͒ak[9M|!hiFZupKIL#NaE9W32/k>WzVZp{sRctPaF)Ɵ@ָlY9j[EQEUv%B1[NBx[` M&X |iJI/w΀sIuVPNBxN>/s%yf"nfF)!|gRXt~Cè b)~,QOs 2 2ү;sdQn 5(:$IB}x$`Fh0CHKm]7 [Kz.,KۡpΔM땒]g,(IfaZXx(p O`ByIlm{ c] $GMg;^~9B"3G=6Q2mܬCiN^i*noJ%k:%[ ӫÁtffӟ>bj"5]DdI{Ø[kl-N*N͊e+I)mA i\J-l Z*h7%Rwဇ0B"p؀ux[7~Ĕ}Kt4nQ;d͈Q3ȃElrH:ط*k~ldmQ6x"&M{S5:S(.{R"ۘBȊT'ny0m4r=}϶E_ɣe)`⇂uSɹ58vLzY41wC  !4VLdW^Q, BڭfOJ=+dYsCss3>뗵I9Z<۞> P5.B9U>`-:I$.P3¨9 05Y]3,Ј?V4@jЯ#_85ro9}Bn`QK%oYdR6;Lda]Sm;\,cSJGnv憎95qSDzޫ^TUw`(Vgq'%A}Q-MlXv]i^mu {e_؎ĶATo([*fSle)&|eHRe>/^ucVifYPdYhЬToCVrÈ!ؿ>[v U<=?y}]u^ߗ: ʜu!r|m 0rV6C0nyOAJ-CVM&̐D>lS fY{Pj\>HFзs*֬vY'֬(ƊiD"I;Zi5Ҩ!avE8O:GM#%-7Lq Y«G?ɇ8G`ؖ\b0PİcS6Ӽ|Hx[[)!ط;M\~ڢ4aaF~ѻE/t*ECm U1OPAh%6ݮp\9>y q%rlj:eaۈ$w+:Ҳ \eToǖz`.q˓p:->t_7恈a3cP:I3{Ol|?mgD7:M]t… ˞\Y \]4*LT6M^/ku5Pʉ#`[2.i'!s" fs[ 5lFnRY""#"(NšC ЭD?2壒ɩEӒd]zvC#&r ܭ*:$(XdO葭Ôe~G+q3 gu&_;꓀oGЎhS G¿{VsCKz9Jofzm "]Q"!J@%9o_)HnV0ƽ]$H8_[ K3$\#ys.:Gη|l-GR*QjWߜwKثlr~vFGݶt$ad= ~CP@j{SGTMY3YWhu[A%ѕ}*N{{Բq'aHk²]awbZn7㶹z-fW7j:nH"5trsf1"FNZ6Pq돨PÕa[+݊?Noaf13L/J/$eT%s|ߘzH 4(~ &jGʼɝff  \= ZJ=}8s9'sBƙΚ$#' RqL}*83Ծ뷜dx>~qj՞Z-gJl񭏱V:u N [Юz 33rò~"[,Z܎M0bh-)Mm+#r$I[ ҁ,|֨Chsq%eoÅ!wLi5[c1A_xubʠߒ!K ]eNێoͪ6AGп+R?$P6UƺxYkMJˋԬ.jXLLC #1&֯ĴPhc!￪Vkʆ(o>TYe%pW%T׺ N5$ GGv$㇙ v_09!*mKeC!` M98 ٹ }vlfMOF\⟸x5$j(,ĭė|^iEpW+iqcSvu:vj&9n_yw᜙UMjod~9:9^|%|В넊҆ 5P\L/ ,"ɚ/%/:DBW[$j`q;ٚnABC֐5x:P{Iit^ݏW+G^T"p[jkG7ch O""m*IPaԦӜ'Ck4gCjDi.2|),xajM3~' |@V2Lj=UC.tڨ;^!Ig H NC)/ͻU;03&!ossL$: VZ={n.ƒ9%LJ},3pyC3_Gdw(doQ;{oZm['ޗr=O^52ޢq1s3Q,x#T.T"ςF'<0k,. |8}ߎPm^lf)L#!-"FY7oȃ݌WDsQf<\LjOa 6^]kv#h1݉E*8KvKd:\db'=,pIk͢ vLhXc3׌K2bXN;ypUGAr >%숖#g9qr/±JwAjnASֵRQe0>o$1kcxH>|.B8jߗ'B+Ŀ30|Qpto$[!l'ab9ÿi^db0YM،]صjq'RQ%Y l1$Y%W5:zMO\ p8Q/'5<XOPѺ&_Ov"@]L Vt96֏B=ficI1טMvy"=V~x򌻧`h`pa둱Qzi\il{1\n5Y^uj+Gs.&3%FB߭/ 3xva(ʊQ4]>a:k_"k' ı̓PS}5Vϯo'w%̊]M*-!Ƙ>Fxau$-WY_ո ǸjAzPYUZZ%,DG̋fzӰPkʇ"LTXsTR[ \% (dMAݕ 4ڶdYr G mC6ۑYEQӼ1<ž)Wh'Ώǜ` ro?Dq@.ndIc_R3ngcO/>dkT2P]Kp^L.\@`f>.'&-HOرB NrREi0 ?eJМf){ƛ׼w\9UBޘ->BŴ߄|tT( 2n|P'KM;Pkׇ;|]2y7MH9hHj[2xy!ϑ-נC"3` *#p1ƶB}ج9\ݵEt"ET9M?#bk_8!RVԏ1 Q&*QwPGrlf5Y{s7f!4UŸz,B{S^ &xD W@<l>ow)l),DQ">c}~v"Yc>qA(ku։?,=ێ<.nh4'0I F-bVeDF-z@Zq!t/GD "!PT?uq۩F u m>t~/J ^/U᳦/9 *`㒥^`?+ t@_$QeC՜/kr)G ~9*IݱppmΒcۣc6FJj6dX)16ѱiڔ K@BO"HX(w' C$ᱯEKQZ(͙&@!q}BoOm`m; "HɌgn$+x~o Ԉ 7*kώ~}>C"L[/H5 U 嘟~@2$:؁ʈ1a4@C ɯ?4$ɋkk[ĢGI{FaW]\ |kƄ F;YY6hci#{i ^Td//2*X@e ͹d \#Gm~ߝǤ=x# }U(^.: ],6C&":las\W60>*'LH亽SZUk0Ph?bD`2QI36(?7@,$R; EOVmysz}!lk'G;Pd6-a@@A^|x`)o'_,4U'\7{/G-v {CbE邃(gO¡xgi_&Rs[ |ԛv_j%v+0T=L/OxL^HC))#e9p<\>I uZxPS%riT%e5E@>lj efuoF?Rh VJ=EA=;Yi9lmT+lXn.B=2NËT.c) Ig몘<GGUboA+{0xο;_̟D oMhx*tIuM˰3^lEx.+Uev$uˬg0_7 a~0W 2亇S,6+SӗI(uף8tCq9q5YZۀkQ P՘A&R+T"?Ūz KmduM}bD:[Q6S d! TT~A8LqM)q+a~A ]Q@Sy"?HeGZ1xRZ7alof@TsvEeJF`OJ:1gFY ;&t$ۣ~-{)wt*tՐc> _c-b̎`x鮖1df&7U Kb"Jgy⨩7WKk  FbLULhAjE )@ PSuf:'Ьn`G%d %tKД+/9\cbs>@4(0~o9 ,nr$pY-ґ Ml[;%-W k0Y(ez%>RNR: Qߺ+D"eY9HG[nqQɲx =F[.\|E'٦ץh7ujv$0劢sqM)caW\({̿Ovr Jq1ۉBR,J$c &D-5P)Jax1Z]03fh? ۾F]i?rP1x:eV~ {o>5xMb9m^4Jv;0eY'$=f!;(5Aa\Jbl"8ɉ/n7Cx86Y'Ƽq[*5d-o&D`;؈{<hCm>QwRsoYF[zDGD7M|zZǷPk_^E`"ؕd;v4 8kx'؜wALUʙjp`#ЮX/>3f/l967&zLq&鶻u;T+\-ItQ58 i%iӪf667vz [)a z+ri ̓}4td %ZK׀b$8iodQ=!9KL]Ɲס˓#%D*0qN>g<.# p_t*龜U $%>uai~€/Pe\7m\j]Jpd.w>uMA!}c%|K=:6^W@cZ]z<\E>ɸEs%pMz|Ƃqqlj9? [PW ?::{7seIn|pN)bYƒ4S:Ѝ>O )1=q:I pI%TFfd\-TIdaD2߄Ft D~rikc걲5Q9ւ4 Ϳ#y[B JhҶXĪύ1h%kx.RNP)׻K K! c;NkgJ9KPLi'ZAXe]||vVԮw9O(!<>1&avE>a0?dk0 $͜>w) nD궔C1罠cےkjG1+鄜={O_2fxQ;Er+bKgN߻ќnOkɱ*{1q@f6b(C1` ؊(M~1N$$#'L J8׌z А͞hZke%vo57!tc;RB M!jlpjmaBXJk'S ©EB(0k]cڵbUYwdI2QuH2囫SC:S2W27&Uat|:,E.?>–D;i^~Ǭ( ,ǹ| o <ZӐH VD+-z9/0"no.N:sK=M :mZA] z`l04W__LӀc+vb^ K´%h9p<Q\*XCK'z.h6As/ؐU X41VYC/1DyGii1B2;u_%%P بFE9(ga!b{Da ަZ(zuNR5m1_N]FD j9۳;eGDsn s'0!P0p/2̢QIgbcULxa\:! _`YoRVZTTA%5_kV\/;ɾdlC/VYZ^pqE+?V:b 2 Tc| )c<m6܅MBAL %nw u} Qsyy T@y'ȒRLƩ/-._Ȼ[EEXrk> yG̫ծ1%ܚ %^E_R!cmwW9d/?:3Jk,ت8T𥓷X ]i hAtGWJP P)fxȊ.W >v"D--o0XCfaYF{ɷVȹ):N\,ȧ- łp-Ww+5k!v4rt,rLA{Ŕȋ"kj5[ :qD -2 [[İ4{QZg"jέk[( $"JD詯{2lcEh BNV_Crv+4.dm̓rB__,ϼ >]%!]I.[k'fr.Hgeҋaܖ)9gP(+;'rlk!@ZZh+~vtpy?Op2WjG!92]!FVywX=zY`Gn͌L@&TScP)##KcUĘxIu=O\$I`n KMz϶VFKt`D ɷ2F.` AfL,6c (L]Wdz?ּX=F CT(,> W` nٟh$JBW1sF2>D*͎ Zr >6ipJ^^T*7']Ȳ&Sy磮 Bkl;İӌ i&`ֵDTTJ*7ǂR^ESNERDp%AL(@1iRPF y*3.+: l\4_ˤ9 tP+2EW-$+'-Fևml?¯b-ʇ2Č\`"\ o.zDT8^U;G_ SNT ;$2v@#O=p6 #, qAVHXJۿ2Fxi%_q.ʏ&*:2: ᦹ)"pkA雴C}a H 3t'U5gRi2@-cڬl M}cM\Rɤ|s.7}q"Lk@=2A\}dRco}3(Iן1Qnl1IA23|hH\ReYwt !cY̔bsx.sҁTFNu/J5ٍ РSD-+rƽȎC",Ws҃"dE'lQ<7$Տ=Q_-'^81)n^LLm]AJg i3 b۲%,8d-+'2B:v$ǣQryykZÂXsjS '81`fr5>Kjܯ[,1z!ytq o۔c5Nnyt҄\?EtٽH&iiZQNա,,:!ӂ b 6m}qس7Ĝudp-chtdؐh*CXjmE9gs,ޖ{-2mB[ dpZV`7w^QI{cB^%/D9[D3,h6겙SbKTf,nײw zPĩS&x&3GyT/~ڔ`iYּj TAGr3ŋQXλ>]Caa:hhTm! #_)ewٞz} GJx[Dž4$?h^lD2RlyaB1]v24s#G2^2pTdUU0-hm_L$WkahRY/8k_&2)2AēgC"J=1LwC\-ٯ6ȯ]AY= _>x-M#: =k=bybYmG'. ̣݆:)85n3Zׇ쳧~0A9Ru#I*hx]O&&\E$?<u!)3KFn4H+ SL+>:_3D Qٳ.aXAߵ[:dt+cOwXqG&c؁r|(cg]vuꔈE;<)a^sN- tGT:B< 垔ˀ%Ga$,"\GoT@\o0{/j:]òŔ0"E j)B[VW>9O УNLBp. \RBA},*E%WaK#:/f Fm -H!z:xG C "m;3i- /ȕxVd{NGT")F:61bZ))e ^|Xuts>tqy`&Tu/MH!hp}B;5odw=x* *%٦@-["Pi*V[zΕ<-5|(@۞:uC7HRm/~n7}E$aQBd:E6EF88  =M ) ^㍤Fē,ݕ`&^(IGn OHX_RPHGzyz'F~l M+jĠS+hư/W5TRZeu~>~a_ռlc*82R.)<ICG{na9[ŀëyy&g[tBqſGّb =zәg@4KZmr}i OLqvD=aW?Qq11- ?@5/&k?,qMڳ݆3̅vkh 0BT:k;y%[sw s<Ѣ\Lc9nF-j\πo^cF DD鯚RՖ$wj"`l֏8'OL+Yд$$ xpd~ 9`|s^'҈4c-ȁfzRf<g߯nUH4n5զ-y}4ؕ{uB<3OI;cI^-ȪJ)$ř*f ) 1z};iYnȾ1#$yYc]CiniTaLnqNUhC ]xJnnQQ4kuKCաt:O229xS|r'ˌv`q{~ y c#rUA C5sRόKRZɈ>)g_JwY<>,r\P(j\gWХ4%q_{6wjBF`/COwu~HQv+ oUáцrSvj/mqdmWGT2ϕ-pZڃq#G~aΤ]W_ $DII;˂7)V$-6PO?Ƒ=9aܪJ;AKFNL+lArrK㐀cǍR穣) WG[f5[bEVhSz%a _p>hkyVYU$5Z{B[1wH7qkCX*`.f[>ypkFXɸ 63{նZ6e/<鶡X]KXl0 jhǔȥ|X~fo,K.FM]s&4$.cnH=ȑ2|͹ʑSjosQ^gbVB|,~}_}Ǿ*> +-1`o]~:;$=ơK>kmQZmzNnn.h0겯NIXYG%t*.UI VG4x#Es/ I[:z3Ǖ^JhQz!~j0qT_O<\ƱEiէ?=ͧMK;w25یhœ#pb-*8Cy [߹hfO݉MܮKM9!wZmW+B:w FǧՇAҁZ(fx>RutܩmEc ϟVaɺ0b;;ώrE^U8 '=Lv ˥"7]tb[~nGKI _{kCfa G}a>D!l r !3SwdNzg^6UT x)>1o\ }{d!$LdONUnpz6 !G:\r$&5\ڂ&P(i͍>р:$2y$.$95mr'K$כ.r 72ރ|UXץ!9Q8Ʒ`GH#L$9*_ VTl5hfmݾ-wX`BV|y+S(;Cz05귱[M/9'M{.y r3Z/ όůZĎo :d=@=kr.Y"/ #P~Y_ڹ$V^H>!]eU`#h^C#.b'*?^h{>GN̾ݑr`j9*sF% Pwi0Ry(mhuV;N-WԺ|e](2vhTyy{vIS]KTz<81Nټx]Zk?E}wLICt7bp%1SzW*.pH:a凯bA (~{-),wż-x?H*  # ~`?ETU88r_ԭ TF#~6nlW Br[.T)˂NTYtbAlt*06R_uZV]#\O` 1U 93Ⱦ@<1~k1L EX\ I $W<v"syDL9C8MRdǃ٭K/6Spx#JnFsֆD5c׮0oy|*Lt\w jy[:bi~][/CRwE%8+FDKr1!Jd>ˡ<W{k}u+hoY>X'FU#R:ܛxU7sKm2Y`tz`%Dp'\Y/!ʁ+/ Lʣb+OkQH٤Z)7X4 ֲF|x [GLǸ: X1l]0-P?m'^ ~M45%"fas{M/}3o -64Yx{[y^#W$fO~ 5i(W1L)t9L Sj!ҖQ%1bg*k~AVVe}7 B7ЬUVگ6ş\OM᷶' ο 怛]^AJnd]6>)t%EɋF݄b C!I4R~T>nyGQ8gMg̷TUi/]nÖ,XQK|)ܐU^-czLB6'LPdjQ\[՛\Ҋ4d?AM8 6h2Wk'cݡYQI(\d'ֻ;f Ha4W%B\R`؍wv/`kĥ[pGȜdT2#XB96Z"#TZv=h7 1s)E4 ,IXq;V 3v鵦}JDm܏D,ߴd|h`߿ C<[b^¹O*vO?DlBv<#TG.U -67Q׬($=^!L8ħvX#l+9lV+3]n{X)H "gd 4 ]->vT T5.[,1YuL습0F\g Rq=byfT4rSrJK  zlׇtg#P7|'X5l{sJc A#C[ϛZ/ћ'"jd4j,H?8vSr -^¯*2K.,BEÜ[rXq:0&/5oS#^ڣތ"8Yr1**wJM|U֬d+L#|ߡH9]^K^ Qi%gkz}ڎW\ݪW Gjw[TAACcsP0&M}pҠ]6U68ަ9c,~QwG uTJ̱wXz9{ؕy.uB7<7Ta X9LRo':Hb-3\bFkzڔdLƆȝ,2evBܯY_2~M)T'%%B_q(P<w'Awtv?{S̩N+6VX(D{0y9%\5'1 CEm4gV͓F<r)u隐*=Æ |]Кt9΢D.k!1fk+S漲߾{ꡰ|Ib6#FJHԮXwd0 du+fB8f- ? tyIC4#Lr? 3#˝y׷R'3LʨYb1 AuxyG>D$lGe$oBh!uF5tI8 5PlPg5cX4=Gd I/6`tѴ(H {c8F  %FO!YN8Ǽn X7|2krG6C)f8W-iQo4TX㢊Y#hQWkT(\P5$Z6e )ƴ}≒LecmZ#꘲cR:\6uîwZOo~8:aeO;f֦SnP'^1fx5̒O8%n83-֖6[BPwY+> 9pU'!?~6?󩑄=:tl#0c #+|+6֛&u#BGH4iA-x"7M#LSs_8aR=;^ͥbpd:`SpvViZj]nQ%N[SlHǎR\3(c祘µ5s Gk3ubevVѠs Zi|fqX[c*G)_br;$:=C]q 5A?gm-",Vի$q| om'&EXi>Dh<1_eGk%ͤ$xe8TƑ!ahhs2j[eFiTі@ǍwM\=t=Nݾ~-Jт.{TZ",rbah#nr_LG$، Ayc+Yl$Ki;ֹXVjdi2]mF*9NBDߜ0b, zlTΆ Sr~*طO18,YX7=XFqQj^aa,&,c|#5"iK`FD"tv [a-uiiq) 'С\u+w DUa+,N<1 {7uS=X>jfm__NPQ>Թs>;y KXUɢV HHv0 M5/YXwvUw&@GoMG۵Dcȑ>d?6U-UPj$j Pp^\/O5 "&^ԗo Y < e>V7:2) yÓw&/E22$b{DN]:ُJ=WLZX@bRMkK-އrr5+]Tj>VkUx()-o~}~wV)ͨj꧿+ Dץ6GDzmy5 ZCHn.d\Ae"ԕH[Z.0S7$%E\ LkZ/Vt`w&U鳞Sp)D)-f`Lwcogl> X3q#Pc z[/x[=t;yOSI #M~~䉡E7nɪS/:J;׷ Y65 b'R|p,Ulab% JI%|jcΜy_C =KS uUFmPo$0M.B= 9 ĝ'!b3[qv\4)pU-VvZpMH&lb09UeNK,WGXPֻջja$=E~[kC꓇\y*5YNdYqڱ*r?㳦&|3Y2ٶIIGKݔ$~҂[I+6ÄaIj F<\#)a;2Fnm}3( )'+ӄ)*+RrF{M;Z{OR 푎+P8:<.l˜gZva Z [e SO).fwi,ڨ#aԐtCȧc0S(Uk.w(Jo 74o)MMa%zMc^j[5-3Qɑ&]4sʐf\9?-}7xɭB v5͉RM^V]P> ̥88O$JC@8杸,NSB: -NFOMu\g<ĩ/ř;) 6X0>r4[u #\~+``k_Lz#_o{g%%f|3#g }E?&4@Ʉ3veD'q|}ֹ] ȠiFZel}3鷢 2d{Zqȝ^_'ڍ˃rJ_:N(JX8\G/vrOmk{:aU6 wG/P't.Oz]SterI - P41I8 @O.QEK!XtR. tt) }9܃("1lٱ0nx*O7QrUl"Ueo 취Td=bn䭀zG t% !qȲ}8+nrx6Cd솋D[t8!T&*J~!^YNV|ｻ9cz֑_4h#j~"i0١5pOcV@,#VO2+[#]]dWO$g['d}af]fOqä%CpBٕHW`~hB𴴒w3۳vxϻRXm:@/oFV }HtUU{p*eqRi94_ CbM1XΦs<^YBj~,xҵ>}$-[2gI"xSCۛMkԇpt6["y}H>8-WaZA}} Pu7x l\ݨx(V=!xQLn`< Et"rJg;^Gtl^3WK:i, %ڑ"HD]SЍp2mmt=簩8NA8l m,3;\`*MLgBsFu66Zd8Wh۟# PF5a;. ۏ oCWTGyQ0!̑F3FRTX_5\&b@@ؽE4`dVS{Q\O*8Ex:.!ฐ6⊽^<~w,)@c-s_a4T˶?pH|#ᡅEIQUGɯX6dP]]$O*g#5iǷX6jPJt/ F8a)䮁ŹMi?w.Gt&4!70zxȔ8팀$]UزxFDhOӂ?&`/s͘#S?F3Kq N~(-%C4TyEd=tGql!FP 9 q<2ÎiwshEa0Eܟ%X(KZ_|r)ԕvfѰId߈)X4;J9Q24xRcWyO@y!>lCkw1Az,J٨؍xe)inLY rܴsCzT]*Iaŀr9ɕ NX⦈i\ze@NtGi%n$O~?0GvrL 7s=7mcXP'C%,]ljpXilU 0*24Qf  x3„b009gJz\APYWT۰8DSK%&r:i,k|'(].9!)l [jgJ.GTCWa;2r׀UvOp\96@vQ(t7nN^';WT@3?LK'T)nћt-1D>=4x9fs~N`ukՔ J`ş- (Gg^J┦:ّ #kuɀ>_<-At#k= $ Fr^_\&/ݿ 1X⋌v?H.)K+(0]'?1*{ 9_=$b)xzO?pQ?dMkO8XJ?Pf, }UyƖR s -,*[D geKZ`]ƪ8R[`#@BYmsq-зW;(o\葩9>;ᐤv}TI=i]T:Ԓ0)4=,DpN =߃ge upz+g8iuERs$SN_Nր.GC դWg΅|fA''R B BɮHI$ sz>$(=p\TOKk ^q˴065YQ\ShǠ춶[ȄH]cl34{2HjV8'%HCHզ2N|8R@ofm@a/t*Z>0.Oo"e-VLyE#CY( uCrvJA8Պ|=T$Z"B q$u^  V:gդt Qˋ̽;z!OֱYҪS#NL$dŧ9 [^τ|5%y&i-Ny*~@ep$?xjHSJ[+rpǏ4h8jbIsF~W%q)I- :LON|rubG% |)tߐ,/ u ;;cf3FU' a}[:|6N%b4336  ~ @ ̥1ؒ?p|Kk"xӽ)-QHl q'#^'=a3TA)3qQmR0DPY G4 4sXk6U&gfI9~66I3{ʡz/xT\c]S> }uŤiqIk.8 ѳ_)E i9s+T#PHp%4`Nd#e0r##!r^:ZJh1=ZEwboKLfJ|op1 >B[HˀjVyS>q)AJ ^m%O6$ \G0M(:Ou/ m FwB(8 7y#Tg9lzPsWd϶~&UKV?l a`(-m~PQ$۟<(*Ўw]'uM B@AM&~j-wS#JkBA$gu'>Uӫ !!o';.7@ς9[FJ 9z9ߤy.w҅\9ѱZ2LU2sKlߋԥ&O>ڧb!p@aji<׬E9fp6e%ỹ'S{+؎[=|znxzV –1^u*[LRKt_wbڬ1N˧D,kxg(9_/A:C%';U \ZoW૬"L|_M9ӸI>n) ('BE+=/KУ!iLiC+lHȪER`We2 |7 8 7Kog("<ҳ6M֕c$^OY=<ԜVU2/8ר=bHWӉL:DoI:VcO?ک@~@{P:h7 ,ݱiO&1J@k>2Y|o׋5ˍ~N?猢!sgg]L9*ۚA Y=9hY.S^=& 3+s=+`eܘs[ lp;!$KE?n]4%V<,:_'ooDⳛ C&{Os"̷ v`u>LZz8d.Eͺv}۫^wp( *?uS0  v39/4wʓw̰eHt h8C*z[qIƂ![ER2ċaG1vjC6'sp'e8|9v z{4Zv\&=4Uygd+kd}4wvG-^?eUu >J(n$e ^ '.zd'@ܬ=нLV6)M%VĹ`Q qAOmU`o,1Kª,&ou  b}ђ[{&YD/(TZPu`IZUwsg O7 遵dXͻ/axυHZo`F%DRRMу3kbl/纒˩b:`oF&iհ!@`?KYs nH[{Z;k;E dY $~cʡ&b&a Oc n2y쵴QyHÐUTwuE8 }}5NYѕE$-!M;1]шe^ n-#bF]00/<ٱymT%<7rSڐkjPcʄ\ĕ<Bm!*.iDRH7QѸ" sF:{y|J11sXWgH>~!<ђZL6.CmӞGƟ2Wt[hLsڭuCY`#k27leS"@<)~#q?7E>T+U>n9(H4rRU&& dON:d$۔`}D8D7~p7lhO0ێD⳱񥴣Xu0}͗BXh^ˈuHiZo׺3&E cm9Nr^0 rh@"7Z >8VMëdk'i0UWJ뾁N mPjZU' -tw uMMсv=R1a`%Za\1KCzoT|IqPqvll;`TwyGgRV*h΃ӰV*@'ߝw A$.Zk` ˒xyΈ$3[NP1~ ̖Gv׉2 k$ٷ=*Ӄ)d!+WęE7`&( P-}Ӂ<,>&enV}>(Eۋb ;ۚft# n F0~ (=40gitx`(DU#0I8yM8}ÇpRt Nb;1(_h3&_mSJcśns<2S\4Ƹ3$vK"Rʤpuy6#~rmì09EfKzAdvd9 JW4/_]1Ta%_.OI?`fê_2a2Alޤtw4>H\9@Q .eA7&rn`P5Wʧ0|Ի[(-pf?{s=aYÐ6څF2҄ w >]W6aC{l%~a[*5Q{J0@]߶W=<{`ڇsW_~6zumye# <3m4y<5~k MrSR_ vj6ӁGKjfI4ʬuyxHh'HHu ưma|PK_k?`=*de@< *Ѿ$keuZ#^#%n]+x4y8ΏOgWGus|Bx"e_#tXֹ\/wbVt.6&|o ,xidz=x~GQ\y/bZdiP(AMo,*vMHjݮQhZ^i 1o&!>w|29gabj 8!=]h.K >nD)Ktr)Qp8"9T=3df6Ҍ* 2(/HH{jC9e=_{,nV#S\KG,GE!ک01.‰+ڰzPzSBT5@Hp yF],9vqoy$?l]/%a3iYyQ7OބSM LkEs & Eί<[F5sZk.$l*bswVR Y3,ه-.#B*);e+M0.1%S|py^d i'V%imCbG"16\Bpip jQ/Ђ9[SotpHǔ"8-Uw^|(Hķ @Mp 8 ^_.9\X1n\*f{H^L$BwGzӌͦO0.6P):IR}%q(-NE5 #L ҽ. )2fŵf+<w1)QNk! ؅ qXCh^ St懃2rrB,|NtwF;2zH`kh_`,]{Ϝlmx # ԣ o|!,z&١z.~ Gߍ$LG=xH[4Wpc0mgoD)4(sccG^;4͋7Վ5‹=_gB3'gĪθz;n9\~(pAJp?Z0q\wf[ _cS"hiE v= 䵁j ws41)X@@Q+^dLR"D/;@w2|N^ Tmz '0T]*s@* ljHI"٧ t-:ҽΑm@[}qeAuB I$f5a $O_Q=?wM [(dhE&-qwO1ϝJwf5Yc3?U7ݣ g5XYgfTa6%8fs A~Y8hljn"5nvQxŦ-2b;CsMjyT\*O>G8 X`0E X+G_MMkx7l.*>SanSˋVG  hf?ab=7/ {࿍iTBɺSYtֽD= _yv5gSy]G N~s>!]'XBcMR5|'&08qhK]p2,K ɡIj^؂Aw=A%dXq,u-wۜz|0Q#kWR76@zcG-ſ~e1UfalLuzZF*{Mm @@'Q'f~\~I`ks{0 f6аvsg8FԂR_-_sKO}ŶJBJe_xEBbU^DoTŗ|]%!-B1 YKC͋Rq9J2r՚+LUWe@؏!0 bo~"X !:#osW0uP{8@ }Em<'l =XD︮C\P!Z򗯖8l"ܫfFxBvnі%}$٭NwHW^wg?^z~_AR7?lZ ߒ*Ec[Rǥ'3u4灎9 [1k7  evHiaPV3t x5G bCLTJWG϶u]b)Aqv\_Jth-|X}ڎ _J8ٯ{ll Vifk=*ݛhi=DpR_T2aA^L]*LCS->`]0*H=l@]{;`s\T}D}*.=4+%,CvCS}L Ymѻpߔ[\"SwB7OD8gP?XdX魛ԣ@ 7 }X,w`!=z i1-\ нg?8k4&E eKI\Ӗgu\&}!JX:[HxmWnea-E`rVӕk) fAj;kY婈y~J\|H(?74_Sx_(re=)y&a8hYؒ/r,tK=jdsҨiQ7#=_;58d4M:\BlH|NYGi+2W'bˍNB)7h̀QXxPrma<ʃϻKGK$E:fne&(lp!#ldq̠j"U~ N`x(Q r)<ǦyNA%`*>+C#ԌDN\J;Mg̕؇qU(W= |ȶ5œkA]f.`}y)VGH ɬM^E?9P GS/j_gl̆.}S;yL>51Tǫ:".nG-΁ f|ﱜT$h`nh5x6d-4dz`/]VBi/.=G*wfW֓pDepiD=8oD{b9ykyAohiFE9pn.y",|#tB+ s1jjC2g,PDUvIz u0hЌY! S7˗y^92~unO:QO57sԆR<VV)e$M0nG]6H$0Á&$Di+%IXVT7EQI-|~h6-Ay!R]kNWybo9xcmlrW~ ^WnW̫Gz%0kc냷`u-4Ck-^%3ej!5qdӞϼŊU[$  H8!ٺ,}~6} $e&_%6WqZa*aOWWtKһα(m8!CQE&茝Y> ;{.EYrB9L`Y]uUnþs^d1TP,ed*feIT*ff. )~i.9R#.:H&O={xIh4aw7-ThȚ!MNF*r+8+z}ܐR'Wک[k?<&|U Py]ӿ/t ʐAJVGuxȌ(l < !8|Du=/ą]ޞayk_ 0Mt2犉ޕO_4ތ~O{ ;ĉZ\׷CD`‰hq/C\̩?ȿi|y}ݑq<} v;}iB> 3Bojħ>~KM}IAr]pɫqFR5<aoUcSFYJ)<Y$!}E9{n֍L @=HfהsnUnɡ7Vx[I3c$ts RkΟ!?Eq/*>2=]M݅AT;Fq:V{Q[3 qf] Xf#{Mt_$Z ?iSO,$*^IA2Mm,m -3:f;ݵ{Ytcm/1QϨxW5N 38Q-'z9C!Ru!O1B^ٷߡe:%5q)*8fm&@xzl9i3)0JhS:JQNdݖ.@0MTfO,\eH[>,B33 "v+g(hU٩72Upv!_[&T7u,Z3i#ÛТ3+eFK[~bZ *!gޭYk<_Ch`AZr7koHeɒ΅(\(?ۓP dN4\@`Lբ ~$&9Ȁ([̶Ld7L=P/(=F:NP4x[6Iω5i(bd٠ ՏɾPOX+3%7S O6T|j*oeW%;e,f'SpE<hF KC(v88nT0{*`9&Srk"_0MZ{,4>TeIy9DJaݦWM\2ūd7.I'.[^) "0ś_ͩS9(wi-k>6@%=y&YS~^:nbueޗ0??*It%SAp SNK Y jT1=Պ2 ¸@/wsjix3efGH:^D]Mp\I$Kb%@FQzeCfeH5j*?0M#~e2Dd=n"Cp_IP)M"oL_gjT!+zt,HwȈqIMs(y8lYfuQgПFIDn"W7c)3=l % 8"v)R%pִk߅`aB<"Zlvs{Y:0!?>1Н,fJGgxMjbc% Dʤz1|h( q<ϩa>@nRV8D$~d@_j DD}OX_|YSDLq- gى7:Ff.sĖ]YGtJs"WЪ Tp.nqOqaeDU ֩ [lyFqoo)lQ>]]HTuY1S]H$xj's+ j5ۋ,g͢EbL*s~{1DT"mh մ%U8X &>` 9`3- ϕA5&9{#g>Jd 0͘&v6{'߂/ѕm м*UWfjA]}!oɲe\BOd`B fExq5 b?l<|WZRtvd~:P8a3I}Mę5 Qi3%J[<hٚgtX 朆 $u] Be K:N^Ya:CVS§2 ߋs=p5T5A}:q)FSg%\ߩ9K읣Oj8oǸD9VE_쳩N]v`rlh}@̋n3D̹ZQF{/KN <+" >X"o{ѓJiK8g}.BiQzY ;SWEr^![a@]Ќa@{XyXWL$M({g1g̝rӥ2@^ĞGZB?<8&nPYDՁgC=&4ٓT1~ [. մ52ΩZ9=9VY}f,BroAaقͤ| eOtutgztdb!E@%p>?RE@NoP)kLB; ՌNotbB^exMGV?F DǕ8 d3sD)˱ -m폠Z_C8?!wVSF1~Ϧ4l/q}mG{qD%#hB~Y`sJ;ܢY&z#Gzz;P!`3S0c;H%8)+^*TwّfR9a[Z`A/0 ɇzĠ"6 jQ#1d6'b5&_]Xٴ= Ck O=M'5@ -эzU7u y{>&#6XF O$VD*U]}0y@U@(6ĽעZFM/NdL S`#sxt^|`nZ/P4 >>}o'#LN 'BiY.F'{=Y>h-"*3)6 !̀"?bX./VjΌ ֿ"q !!: }ByVI _,.PQ5|[)(УmE#ύGfn"ra\\W>z/d9<ZGyl(5\"$Sd|_J'2~/`erK8?@?G=@{]4a&oy awk?\ep[l?f&dհ\D33̗Yv h^t,=]8Vm@1p)n 7}ܱQKtFlFzi9 b [+6d^’EʝpNJT:`^T㮎͈[dtz8S9{؀/3nctAK5s7o/M)āl0Cd2b5N` v <%g=#[cdnBSƸQ"|2DGcO10Tx'+,X _krhY•eLrQh%GX!~2 pi커 DʍCm!*$ vmt#I M[x9uTi)ד@^Հ%f3-4C2Mb_ *i_1QW"qz7&۠tzޒ.N;~`M۝.â7*k}N*^'X?/ "'.Y[k*lk0OA9zAAHp"ϙc*1_>JzGJdӨ*>+ s^hikz `=cs:?Q_fa0l"d>75T0j}|ap-~4iK|E "֚ Wؼ\6뀰3YpnN*SL+ 4H)j"UvSѡiNx"uClp+SR ^IG'j@hԒ>]_ޗě#'q{&QQ^ `0R1h~9"‹!]"H ˊx8?b:zs!7|"vW_>Ϭ}2&`=Z@ ,hTIi `3s9vIyH8:V=+ =e`.ZU;.X{% Ģ}){ $H,q m,>4&[Jj0t߅IOF%B`l)0 '_6K 4DHSaE܂ y[q ~6imf7tAloacӱFE2[\oGG{{(b܃>hx܌$Z޲̡_ 4֜"lAl4U8%7A:C87\$ƲM@[޼72SQzUk{ qbekSppfw*vӡRW"Ks_w!9MAD=SX!UnbCa*(8uY _6H%AD YmhAY&FU{rVjnp8\Hz}ld*0вCre;A]fTc˯(іgOߙ ]ЁЗ %I^6Lý⡶:–nJCVp\I/3ȳr"l-d %Y1)5$dIU]={*Q1D4_fK- @ M6pb#5MxzX>i|Xx58:;AubF平~*g}O)?bMDd22cV[vRv,ą0v^O:@_4eF/e|йL9(|tBntG% Ż੣ =bUB6WL8l62AjFf$Z$/KG~Qr8@4j̳ͰjK MH>@H9O3Mϫf-z jpX>Zzj[%2"gԬ+>Z?"^hq?2cX|P o~w.a+1:<õMJLC!GYHD+ӝ6Fҋ==zhⰺN̾:܏MBHJ[N N(j_P9#BOhvllZ^ea-<g,h Y,\A~oV0B1 -nRQpDTx n &%jߣsZlSQPS$c1P2e!Y2e7Bh#Ma8wb+b-՟M?,yx_chY;۶{1.yL=\bo0wx= 2\t폦!Lae9X;+^hz#1kkSWw9ZyY5TQ޳D+F x#a )2+Xdq,)FZe!V3R9bث"FI;usbI"0Ft=PaslOA*7&8ѭ G7qN (ZN6y5%Y 2K}tVo{4AF R OɕK̆ s: |Se _UXxG Sv;TO0XCU~#ס$ >+ʉ`ȝƩ=8K(9ϮhC4A2P:m/EY<:q(hl'pHCo@|R-;± uhP^HIvwݰ -CON|7CT Vl+9>HO".mT}*;(q/Ga6f  \%Ie7aO^a-kTkv9h)BPg'.ia rwht/7_ƠMFv,LHHKz.6%RFLơ \{~?Vh٥P=jK s`v73X. `׵݄'- S.65/**fڬgeoJtuF#=DgnEZhoykm)qV}IT9V 4-Tg2Xvb"l8^pl-뫠Z.Z<@⢋Cj Ɨe2XŨ*Gl`PվgsVEs2ηUOc&lJU :6BƘdW1lYtu~G[h7u8o#` nuX@yp߁I`f8Lj 3 wlZ4nA}ijlIS~ Y9Bm&$ŜDl)u2ߑG̈$m1&3HCNA#"4HmU+V~Wcr{ ڽ"m}-I0uwvRtLr'eZ鞚ѼN|-fr,hrYܑޱːasebJxQʔ]x0\}#h 9xCAғ U=}Amڴ ޏʑ΋R(v܏ؐlms!w&8 !S(Irb^ncd%P%xsMkdpTJA>ˉ1.kXĪ'0&{\ˉp2+$ӉiĈ 0gDNgbb,Al8e!ㅾgX0X⃘x6^V=,u]_9d惷R`\"KXn.:!!tE|w^NXظ*ؓҶiX۵#D،[X18rڃś?Uo>+ ]_*rJ2e>#4xVD ]-`d 9W&Hu2$J*{ a.ȫ-23߇زTSAM [8~kQĽ9v% @ux4$&CIvy2 gQEH,f@n#~M#x8U\bƳȉ-"V.gŹ$й^;5`I2Ÿ0Tv9T×=c)[k vMMK5`KI.ʈ{k`pL`ը^=t{Ī㓳b1vya@OfZ2z. 6c͚VnB-5zZ.h7ʳ83+oˡ>ZjZdV ])tM;CwL\ח"4VB0a4R)YUWP //OÑ-L+w~< @Ée臬zpX?kvH^tp&T\^0k9i."1@f1^l6/Y(qnI gn!fހkquL/diiFM; 9194[ۜM6D{_9;d0:qs"̘ZjO6Ո:EI78kz gnlА >?ct~1Ƿ;A;-{;2ӼęH3gfqkFS9e70lܡ3l vA:F[>hǤ[a}4f\?ˣ)^9%%(3d 90=䈋Fi6A2hc3yEuqߠG#NkGU#!_b٣}׶91@ {o/a5ҫ\}g` `w=Ly^)E+ސ+ߵ{mT.o&H&]o;FXWXyKהD6MP~A" K u!>1|\@}rhpĄgt^QxP)V%}SޕpRi~[ob5!Po)/o9I|lZcWQcE\G:b:Y.l^,Q=뼆ݵR}R̵> _j^%$9q`%a^ HJ#j+יo,)&nhݖv*s 9"6SP僈ZT)kp2YяOc=E0 ;omPv@Rf]%t<11rR^V{x8m}O^1WŇf9@ &p&:E!J.l܇s)O F] 5J"0#N`-[."t]|X*Zp9!֨dۭc1"( F\ȸ>hEoݳQ@+c~^alcO0f:(fFInӓ mf?^\#p1Mxw3)lzrxQ68yz)FmǕAk։yŬ 8Q Y[19&vu%"spUt oYYJ2~2zqǹUfDKi@{WT<-"`d V0W'H| J@߿D˻7]{o_gzļ_mg_HK)o{ƂcH _иЌaD1VC]u?LyY}Lk) [ /rgD&A CRǩx:.[p[C_ .!l:Ir>:˸ig疝,9Cud!ި-\s vH1# {VU`J:z"u4Pʚ; ;QOe6A]3@3bg3jQ!+NOC^_jMB/A&Ƒ䋜+1D`62%hA;k$*bZBը{R0 a];@v`+EӕrbPSLI =O%X uWbH0AbUW3?=c~Ej`wM0-Ļepw$fh\`KJg]~̢l V-~)3<q$m ;# ޟ"XT9 knJ; 8NOgP:͓b?~ BCK(Xj=dτp̿$z\mdnˇ6xg^ꨲW?jbH5ZKv4uz#yK%l 1&E|_#q'Smu|qt?fqd8V%F`X;3u05@#,prwX4CIP R2tXCOg-e3;a*~+(MnVU][~%qq㖋4"Y[QS~ HjT\|#ʯ|JrM*P+h'9~KC{ y']"дg.ܰl8 d(*{fc`Xԓiu""J$'~1!Lf dPKRƀ ЄqB/_ )$z} `-+?F`2 4.XMj$yrj|jD ǴE!/S]mˠSQ욡1''b8"U+]Jj< ΡʃHESw(Eb}iãNɄpߜ,Wch3~LQ}|,cjĦR [}c3LM ̘S"׸n !9볝U`̩;(Iu`Q0|_!-ıI#uΟ>Ր_08bl9ug ~Bbd6#T3znp6`D 4&,B"pܥe|.R51p[0(9N42 ?U3p#<-CE$ VQ_ɯ E鰹H_܍ d!{ޘ <$fԒWQ> ko*p k/;Mmy@Q-;mK BL{zF5KZ `u.f6X,c _i,3;^7 N,no1:Yi_,r\B JF>-Z W% 5@~/# v) h#i럥 'Y*;8{QiPz=TED Eqi~<ޢ=e+zO-YAy%3}&be0Zo$P_G9r zj+y=aw9Ksoiu0] :TѪ-VTɛB36i=w(" ĶŘ?e`b3.9u|cN)mbL8ɍzRJ ނqљm#X>0y&?W" .y ,N+~ڬH9h\<ǕJ~L*wVˎlvtX0ÕIFvۧgqĿ$`@잸GmD<.nfvv`Ss+~PKەrYZ//Q_tsV2#Jk(QNVATjRSj>I58Ӱr_TF*1N$.ღ[ -e ں^BWS^ @t%2]_q} EZ82Ebl!9|hMOL/K; }Ol< +q6jǜHs1ԿEjՂ&pY+ԶoWg{[+)4<(_Vz.W9U+PE^i7g#pBRS~OIZe}X've(sc@S7Gbۻ\Xfɍx`H65,WPŐ $}A H|V­$c wOVWGJ)Ԗn5ru0X:"oivDWGN ;8Q,C ho,¥# %\$-&p?Ov[7/yrB`KZcmDXhr Ht ƥ q#W.C&B "".'ܳs3e`hd~J)EZ`\ l 2)Srh?Ip˶\h/]}9$oJ&ݣd #X &:zV 0{lr0C֙ 5\2+.*&jzY<$D6^#T& IQ&omw37p*2Ώoݘ:9{V\o-6M.Xg+^y|Q3>J>#د&ۚ2L _Zc׼9^#Mr=x4~̍G0]? Nq>5t Iu>oR^u+)x?.'|9W.qF?#MjVDd1Mi)"I5'RǛKNawU9/QIZ͢HvEU?8Ϫmܱoxud-Ѵ:Ύ(DiM,k9DTt zeL~hR}uqj 3;рRfA;t%2(ns ofyh[w6 Aq:ծ;tg6>ThY0(ëo@3ĭApogPz9N󑮋`YX. K&Ь2hHLAAM&b$(۰.&7Q`cu bnyS/s꫰y` G_ȵt dB>3xyT.@)n $ιVzE  tkʈ\a彚0ZܓVK1V5<Ð pأ$:ٗ]њHV]%;kL<وqȓ]qmT:)o-z\v@r.5@9I#Pm6 *kYl }pabxiG0ԑo}lWg}Qd}6>VH6pK7gԢ]FC;Wzt'7NSg!bVdW^}M6ò!WC /ptJ'fMN1d!՚I!-wI`ح:vz 31Vn>;!'J&ߔn;L 0[,;璉o$R QLo&V F!'@ S& ?85zE"+5;2^s)3b5r0s\+.d`I:-\scyaYO*Fm6T*,LM u=2DO$!.pSjfx}=íyQ2ҫ7S^}7 #/Xʺ.Z: YF J={w9qBmwUu4*r)HCSj\0/fm Um|UYa)PFu0ݧ Z&=Oiƥ:w75-$9=鼬wFWb*ZVC䅢Hm將HHF܂9΂D) >d@2Bՙfmi+Dr] 0]Mv|eji2Kܜ,#` y7)iI jk2B+,G{S$`Q׾LvB;ctnDMʊ8 +랟"l9 oDz;sI+XʿSGtDoo7X eǡ09%J(&yr[V4Rցv <gDK);%i:9 KHi?@whtTfs,B&*m#a.jKJ$ + G*!L%h|}d| !L@Q *7m_ Ad3zpB۞ERe7Ҿ4kώU9b;LtWG (,0)6%Sy*Eﲁj~]\lqj|JĔ3sc,L9&%]`1yK9DwOY݋ M!1zRYuu267r ,Y|ڟ}:5(HV!t\6QpVpIΑexgL3{4&s-qLkM$Զ}Ig}xNgRJXaa|HR$`7~98'mҫyL`[[sZ5|ѳݭ\^h=N\/C0tF` IYx= dОakbdLCaεQ{h)ޏ!rQƞЎI6Џz D5&ȸWYk(SP1|'-[H25a[m :X>CMܘ:O{GۑuL@ 3'Wt-3Goi  L>*_ | cMadک [>6䌱+pR [;Oy(EGhS{m 2H; ʼn+ 9`^ M|u7,wQR~и^6W˜?@;1ty<5"G NJkY>m)G fn(e~+%gP5F8Gw6rP!4kAB@m9YF^VRЏ(d* FHE'Ze=g`A1-/J<Eǭ^D3%^݅8R7P4$*kیp8R#SVDe"σpͧp>C]$W> H_4כVS5WvVJZ$SvCN ;-me_dN 9'T7Ϯ!J+mK}R푫PA|w\D`dxW{HHȌVI6g[yKB*fZ|Ê56q)%\"H :lL]߬ {;_]lF{P}i,AT]G u.@Q,Ks-P]Se4Xʉ3bcWL,]˾`DC$ ߨDS+h$CB3$>IgX[+_J6I ΦzCK93kXj)el7zjc T[R#%C)"iȡ幟 0mtEUR@Ѯnzw>FO5z{n9b-o,=NeXd^[Y-TVbj^5{>Ƭ*FdgIWp3!u:  j 4]] bwm=]!MbM:ac'P.&>0oM5*46FsJ뎃Qi֬3J-v]N,Aid$6]t9޽>$d(%ƛFF:3ߠ |rnn' XR|52f*@ԇ ˻jcDZ2Ҁ*aq >!(R 4RMC0%ㇱ'y4Yu>,mCv ` 5Q}';2IǠƠ-E^" b q t&^ێH2IޅiC4﫽HG܉p 6P1btdnUeMS5btcƄz F0> yyb,uOa( 3Xk3d}c⹲:+͊Ժ- ɋc.* O#us `Ֆ e2#)Fһ?:v~^#n杯@ ݮRX TLv\=ps m>7%X|퓓9xeKeWX:k6nȧD46W(XM;Rn"Rˀ jڈ*h,?"t|.h[% L%53'poSHR`niw0(YqJ' [Z"L`}<4ѬP^? %䬥3ua4 (ޫ_g!&O#!)s-Fx!-I`m)Ԉ'A O3T(. M3Ķx=9s\YO|D't=WYvJ@qdmɺNIĬVgC4&oE/HENÍ8GDŽݱ20WmfւtK ,%|:B^m?x44.?)Uʝ)Ov/#U8JB.'),1Hʚ_EC XK+sZ8 8F`W8qS%s 5\c{`^hV''TʔK`_|{GחF7oc?lc3(aAx R3CBO8ˆɜa9O&zXs*.V/L&E[V(O5(i7i:+#ae^CW UU}smiHzP?1:7pClCF>y@-jJiL0XpMLK\W ւ?PNLYR:di%"%0v] ~Cm$p t1LTm`+1[3zm/b?B$#)<<. ~F9){`D> /͍ ݰ;ѱJsDQ0C>)0jrL]|A女z8] ;;G\5d*ȩF+s, f 7#2ho3MZ}t y |P2YtRui`+4WKMJhMϕcD0H qZ*5RAm]cYz8yk)V't_H~vJ#؏9K3|U  @(ݢsvZE'A Wt9g A/'ڲygJ {|9S'xcTK}`%PmlzʪPZO*??;7>Mݾ ̇T+ip&CмPTog]mS/caQih߬I%f<rS2o`.'ĥ!i$s-o6̃3-%µ#Ƃx%@i_p #$OjB?R!~kРTi$0/e^\ER˚ԝ |5gw9QΉWo# ahZGiB(Z%vg^ymi$rņ映4=IڥB2%lSg%02X\b~f5LQ%RC r(3b[9aw_-ؾƂC% }>k: /ԛ \;D_εg>sebeGW-h7 ZB|,okt܈l˕!?6 ,0M%¨m ?HȈ/֢SǍ;,(K LqgZCz#dp*/Ԛ]rtsl̤ Qe 4> i.ř{-RbI5 @4:IR.[j=7sS pWjkMZS2^,pʑrw7~$H$s\=U%դRb$ȥwx'4c0Wc hP"wK6aI@;tz!ą2sⓛeU;†+C(zV+ o~R#z]7FXoBUڜ| 1vv]i)3S b[^SCq~[wԴ\ݟ xK3uY<[6Z 91UTOOJgw %$f5ݻ#m H-DH/PJ Q(zYUpk 3ȿDW۴)[lrQKoK$J;?Uc ;n=_#[ DtKL-%UTF`y"jqcvz!#9쑵J'>mT04%Y >!퉾oz=^7`Y*hI堤ЁusUol6EEf'F ͈!0(-M-pRL%@i饙 Ngz>ZE 19ofl5M^|+O QKp,ś+g?!ƍ>LC 4Jv5ST%#dZ=^nq_mrQRP,7P ;Y  RM4PVZp! j7#m+GGYw/j?a(b:AJ~llmL't|pJ9ed`HVHpM 󴷏sr_wfkc^Χx!ډ]=|M;EP);΋BZ5G§uiMaN,2A䉽q>Fs}nRt!v%R ,jL2k+SMQiҹ YZ