apparmor-docs-3.1.7-150600.5.12.2<>,؉iYp9|dQ=DIdd$uRS шG mblxNx-úcf|HadQm]XkIt9^RW+`~u5*T"! ,/C\OU?56|64od^ Pj}M܈:Ner(ٌܞ3S{ ܿ#Z=Su]mDɖg&6onwailժE3Q6&PLp >;X?Hd $ C 5Ihnx         G  T    @P`(89p:FG, HX I XY\ ] ^bcdeflu4 v`zDCapparmor-docs3.1.7150600.5.12.2AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.iYh03-ch2bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤iiiWeWeWeheWi{eWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.12.2.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ih@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2b 1774261849 3.1.7-150600.5.12.2apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textby + o).utf-830dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722?P7zXZ !t/Z]"k%fnCQZuǡjע|sjdBC0Dj'D_>H?'pAVЊtޝGUYwULb!j*(r:P,mɌ\Z1Y]FZi.,R^r Ԩ Z1cK,uʕMDӨ3CFF\kәZ(k+h׺Bt,D+ -m5 H7.ж2M8@^SZS_ۙ(G)w Cc'8k r'7/5dyPmֲa$GC/PMPP5=R{uT<(e `ՄqU0o@䈇{Aⅳ˫bn5{>8-lfC^3oEp:/{Mo >שO[ɏe|Y,S2 F86 ȍOGbH Z+oItڽ|8!͇U%vz7J2JQF:}<ष`N&5y~ZUz^n$ߑ $qb^@&jퟤ;b8Pfw4JWYr1?'!R])ZlOM' {`ӓ ιMP@ oYʬ!pf~9s52sm_wi.Bq᲻e}YH q1JL"4ܻt"Ɗ&aRg^ȗP@(a|62 Q| M繆&(m }[.eT yXзD5xx%-/ Ȳ1^z4& 8i]33XSjY2W` c_zT|T<+\V,@zk#0-VDGp"j5cd-ޱc>KlV U]#LF=Tӯc_O;NÊ@I#lh :3Ǖaa||'BpzA0S9xz |Pp\PyfR\LڝkySgй]';+ ;>j񅎧^BY;M Qt-dNw{`^^S"˩|EtvH ެ 84MHQz1I9fhsҘedĒaNz):C!qZ`kkyv!& 7<" H~j@<~:,"A)=Pi_ k2FTog/gM{yݶ|%YcV8jgi,7r9xwְ@#ʈ4"v<-LR"cq%`ߔI͸MO0DfGIEc7hEv|]#q'+O޽8}+\i3X6eXn&bXb9}8b05M)GX6Rxe$Rz7Ą.|-X aiL1R;00IsS4Esf/3<䇑.+X[.'3.fz2~v%2]D %tC :"uZe@% ᤘ$y٩<S%8~re4];zضO ̭zQ$5w0A#86AW. W!rsA"0/j%~FmB ԕuhTXm8j;R(U8zwnyz6 B@;-wl_*ЃM)V^)>k S pWޱ|6ݗM 1@G rBҟ)Ytj<-yl Aa{w\:.b&.hscZSSπ)\4n`%hfM(L9.B꯰CSmWV3V#iPp-g UYklGFD=n˟o)xoV#-Da*j}xͿi! GVn!<"[5^_rMr#f4l s팧A4;Js̛-&lInC1k':#O?<d1:uE<+ڗIZCPHAȼj\@oMt9k5a֏qf[8nÔ XPiݭ(ɫY6O+MćNw݋I$O9laȤ )=;4a$Pݥ1|N̡Kڠ9/|Y{ބ3}‹h"" [K}]"{c"Kj>i B6_ыISł-T#D8s2kB!׌Al_P}`R'WXA'k4_r|)Qt ߖ gj[2pڕ{Cg  ItsGȸ(DlKO z#{Ա48I"ieB8m~fCk1_-ƅ{Ejȉ)>.%aJftaqQހNa]Jt Z(0V (DKE~6xߙս~Ay^`\@+]7N \h~\SֱR?dc.@ 1sK_ńk'e'rMs;Ky<Bۚ1R|8bitJ ڳ >0@ye@I9eߋަ~c?E[n#Z`'yxGXu;M~ }f58;L=<滵 0݌S! d韅rptcb|yNc4C}]V5j a2 *r8o/ZĀ"nBJcHȭC sҋ<ݹrpFlR3gWoQċ[%?u VLsqP7Tcla.}!K&GMjlƏ>o:j/rdPTKL`~.+mkWVbV! ]iE9@OnJ#fbˎ*1x{u!Eny2(:AoNgfP"$R),J\ ?kSőFzfv?^+A AjO`듰qnƾ6NG\@9J$r3^1E&yt52Б`d/zu4*)JPԘ*Lb1{hɗޛ?W[+kJ]._FZ "NTWd#ϋZ;(zPaǞFyT;OL #s#Ed*In@dA1lĸdf$8HE%)s>Q_fKin5tM`k56FY6i‘b2p-"f Ы42oxE<> gyىoz`M8=$"S]5'T T1)lS_D*4Ak(A: {=W`+~rܜuf 8=n2\- ֯BhEژo qlsM?xS\VGi:}vo۠u'J4=7M˥ ?5h +bzkkQ$w걝7v硫}bKef1b^ -ʹ3 5mp:S~Lii"֔f?yZҼϠ;]T~<uhdƭ0p^<)xrf A̝OO }g"VS; dk:Z16sU>k"YŻuu͜3fJVT M^JmgGd/ ;lL∍f0߀SL Gp0 6r5'dQwҺA9s&9 "55T=7U \) [F\}l6X- yn@Z}̑_Cb!Vqq25?/(7b˜Ghm:1+A} )fdYVxqO$͏%vF_`1Hۊ!̰/96܇nE(!5ya.g}ˣ >7%3T ^3ߜ<q^kյK%b3|Ɍ$9Lm%5"'7 w{\YQhyEIpje(˭@%&UC`>ɷE! 5J܂H͙_Џix@27>C,!Ͱ0'KTS\%׾]3X3t ԓ )h:nR%skގ^ېm+$IcEy^?U_^s)DO>کjFW]*[e&9RSa$FMM/eVRrx!Fm%!YEW9rRޔl (>^m(dlJ#a!41?)VJ lHIsc.J;0<&]vOTH#~tcDro} !)vKA N iY"5e3uźs]xԐ-_[BF7еv~ wfz< @G5V'}"'ZPrPrLd;wH PTz?}3Im+Oo{%ZB2>SI?PU bV;ǚFT\J2V;!{@}-iE&[*3%>|kr߅0g}$~<MxNwpOLӲ.-nΩyᄎޚ }MւO&&;ǩSŏ֩T%mK _OT 0Tj낐c6fAK\^o^MY mЬxS>Dugca?SKfU҇Ӳ+/ūgz Qவ.??SZԖ?veGlP<tBqVR^z|G,pak=2zOo,$?eqs}hw͍exOts.:f͌Fɢ ADt[ʺK$pEBL;'3uɞ/(.k^R{ a:M›vSKDe]X"0I̷TPST5vD_J g#^ϕUVFGת^ BW1H&}ClpG)t5ᇑ؊vuiy*Wj` }~sl.2#|e86>! HkT/ 5" %l=ɳ]Bm~@QB~}g^:["zJBv`ϙ:`IN =;ŝb^iG5!_6?0nXr}vI16IY T+t:"g~ Oʓ;):MoںJ] u5o"QNv (wv*v4ehW KR9O*K;y:N##bIw2Uz; ں! .QN1)@;&rYY["WC`TݓKH;'!B9NGD,>/mv #}Z^%s[ C>s0n|F0 YqzVH*vVqJk#D%|R hk:0>UTޭjچgpD1{+7G0ЇB`͉VX9^b ]n Ng7ʺLuGVf;.%8E"dM" =p|\d+v^"fmhƍ$B^Yڋ"nCZt3%qy>,33eC6d}7M,,#;ٝ\s5jWP\1]R9ZD5u> :s7 pxكk5l?qKjoeZ-rw=v |(_~qN hUTfFVf c'46ԐO=y<0c5 6#z/;ԄkH1LfzI4PH,FDmW{);~m}@jWv)fIh-i)N7ChM @]KyJZ1ņu=в)aas}-~ a96v}LN.-4be9&ĿLb_ R^;{ µ$S;&erv 3m(oioXHAV%H4w&3QvTUEV$sW6 jdPB>3jI 3(hqcycaipv:l8}be{ߠhs9F}HلցY4|Hy+0nur؄(xI$& O\Qkޱ` hϬD>PO{'45ʤ6 _@@5h?lL;HMago tCf &ؽHɫ(& uSSnD9W_ZKAmh>ÛSlo礈QXf8Ji%p w\jio˹MeK)>ʖxlFȠ RZ3bEFlF''[I_E.pw/5o>*h2#td3s7-Ied,a'OK10lW#8!oGLWhu==Cϕ /LI >EA7)Y >Ż\:Ju%`I 7q}nn*^8e'(x$Lq œ czhW2'- "J+STxW';ZajfŻg1)34&xM^O~F2F(<*4O_*>t pu9J9yQM"Yc T[ZUI<8Y埋@i漩IwT@ .USydټAGpVO%TZ%D/KV/HCvϠDL:WI%^Nu X"5O*W,gyȒTz/RYnn7qҦiح̏ Ft$XfpYc4* /Uz$_KYOR[ 10B>b[:ܩe9&Ab״$73OxKSJTc@c|WI"ptzoc l%M\&(I:u69_IJ.*) 8Bd rex!@=v>Ȉ  Cw: m]">DîoV5=W2Rr\4'ޏ`9cDp+%"3ɸzJ?ojP :V~3VNQ,d!7%q+pq(^6T #b YgOW7Л9|.#u^/20jq*0ˆNiNk˵D0gS^} dGcߩX/'q`VȣA#GFfʆ}`40#?XTD:e4 .b xP-Ơ5c]ݠ+˂OcOE&2nG_u9x|~-^ u;p3<^Wd B-OK.DMN"V)9S E__x/rY1 {ٰ$Q ]DVH!G,qG%8f\*щ"ŅiJ#wL%^ 6(>(Fɘǧ' &!2< ZwuKya|<7!j_G\C{*5ٲ_& }gjk6C^T.'%34^I`3la20]@Yy'Pa %Bt·;oӲr-uxεk᧰}lZmP׻qVP)UZ>` |ظ.k/+0>h +s7 IhXD7Z=r6c__FLMۙ|jjJ$alfQ7_zu`9[21󃁔7oA1ɕ L4Ծ`+8Z4я)ƳȞs aS p%&Szkmʅ7A|#=Iw{TN?F.ZSA5v[HUOou7#p(*vحKJUS[ cX1O#A \Q%YHٗq@-to.MiƓ}qA_R倁ڽA5ˊA@3z3|@ k_|b \%q󖽪iK2W\}9@ONw6Pld4 Nf^,jY/E1hiyz` ㊜IZAZLp(g//t~6CM+T@ 2kђ𛟒+co$RTwXиLNΰ|>d]hVݤ|oй@k]Ѷ:`DhLРsLb+J(J#0%2 {()s81O+D<3ĞBR?*U8Faa?pk =F_hV@R[gE"JdNIʳ6릴Eat ,Ɗ[mvi;f'z˅'t,sAJՐxv+x>f yHEWO\ Y4j0$zwx =_~5N_ibLbPz& P`u>i{<7$y , y$a4"8`73HsEJ}T*&}9Ft&+OrtvG.JB99x'R_2a,dVՍ cF2VMa|/]ԈPsnGv㗺 4yM=ڠ**3\޺RShxs8]O~z#:L;ߌd:No.嵚+5JD}wΆtjuħF (l{{'Oj̓Nsv1{ni $[h'!{'t [hGu(էvAD*Tİ!&w$2^^ϴv *V ~NC}>$n *2 e\;(.zץ$WDÚ"~(a;<0䨕NA|nk:\"]1AX|=̿{$q=)DB hwf{H-}hGJOH_y{ʋGmtD waf `W&@/rte+(Qp%(p R,81X3J0bķS w4At "tGN7"C쮎̂6k.l:`!|Iȍ*V<77C-+]!`YG&HMyhX3}S,_|(6?tV!thyWfHcljYf"ѻ*\`jo[7d'-9?]̏]  y.7YLjSRy _+3jM0~3I(i6AA4ZaSנ4XXW>yTg.@M/!<ۙ7 #}m]7o=uICH7Uqn%/>XižW RO.}H J( k#$iC-W8lag`ֹNx?`XoQcgYD+ٿ6^a 5cMN?pwgNuM~S$z64,Abp'M+Bn!#! ƭͩF=OlcEB[#p2cCb0wڼ VWɑtQ҉fmύ]QUTL9T>pZ]4\j>9S.E0e,C.J ZmwxCSfN&"@b(W8A[_a|j`3nA+UKS [*xeQ@Va["[YI:ȇw2ܐTU%U \pЌ H uR; M? TCHUH^ԇw|T$}rGl@z\V9VRuZCA~R{&lXMpY+'c-i\)jݘMjZ%| wYy8쐜]&W;I8`uAHfHJwC{BJ5I7qХrdC|J9L|]XkZmktvebmlA(Z&L|7 v.N>AHLn0\ÆO{aN'eeܴhSyүy[ҍ&AVGo>m")(͢c:cq %:H)MUBw. I驲mkqȤg#Ħ=Wk iOa{eF7ytwtq_<# N1eN6\b*X),Keʿ_l6k-aش6H{|iEs=B:B[h-%f~AGI+\)33Lȏ̙^ И;ɷ U*} 7 z0J&#O.ATZWh.[nfi>Fa^+?Lc.&G9Gً ιA)S.Z'(m-g[9 韍4ώRIig;OԠNpu!kQKp hMI-)6EGʮU;g:qL~J^vӲA6K6"hH#^ǃ 2[w9na=AvJMqi<a:NQ-8Y좎UO€G֍d /rKx{]>dlg<(jw^`pL.,.ppQ` ?8vsRAϨy|ZJē%z9*Bjl e}8Yj&<8En‰]WQEsYP,OTdZXU&a$[`|P:_HI+l cവ,]Gi~v^V*OlvWB.y N mqz%*TY(MK@bn':o7x~ )Q #Q^SldJ.)I)VF;뫙3!lK NJ\T!!|g Eg<ۇ1)ouh⾚;~pUlޗ)>RR{ 15bppI5E#%{7]/GOONGc;gYaӖOprDuz.:Q,Ve]Ԟ FnzP\0Z% Zh]FـsdPx]r$ c)!doVmKcW ! lHn/qƗ~ݛXFe-٪.+bq! 837 2Qy$[#>Kr%%7 t| U(^HйA>pL؈pu}C{sADխhZ!,0a5>$AE<u5"x!"*u?( H`x @;RĦ̇ JŝsK&Z_\]RT@mXf$ӡBzQqIvGTknĈ`+58gY.HCљv h)-ߢG^.}F"HY3#6(BI '-hH!)BH,ۅFti$Pl̰Zеse '3cб57%dم F?ޚ+Bx(hɟm %rgcve- g{6e&2uՕ njjMkif3{[=qm~ j,]eN,wk#pRw~5O{`X5`pÎf`ӟts"`n$9Bo<}0  4XBç9A!dqJ[.>4Џ9npG+MF5/`IUeR1KzbIq_i{:< j[[v4ՕDbI<Pp*SG.p<@dͯD `ww0 q[< -B@f/!cr3m [dٺ8E0%o 4."нQXu?&\(/'.`" <Xz抛!V90=*&4n>ʙE\R { SÜ}h /:K %Fvǧٰ N8=z (Peץlز}Uʔ5DUJQ abiE^%Y|6Wb0)L~jj軝.ȝs*Go 4P}P5|V6˱G2:u62U^zkM{/gbvUv\|쩋WMjQ:ceZ!^ {yUodƨCN\]?;/>][.??6J몳.Jl};VTJLP#\$УqkLSb 6NXZZtJS+]"5?S`t7г=T (.(iRx{CHo 3iiǵﻜ):r(@R^j2 Q@(81CǏP-]4]b{GktI0seG˽gaUOD0Y:);&]]0o*V=ud&!lآ7KaDF}6pUpPegE;bpdVyҾpZ͙+ >(XؤNqfvw{[E7#q!}tu*wAolO%wDo-CG^b{H`@|h>(( S;Z (L*QN)YDj/x_;菴`KqA$F)MjH%>%Fko$p˱yd6BӞ0j%h$Qa9gU%,JGǛ!Qke˾X>j!#J2KY*.r;/d6ã;=W/;5_gGD"OC>ж$]"+sh;:0P[!K)n5J6b.uމ? PϹưjFX$?1azyvk_ g"@BP͜ueA1#V\1,HL记x `[NFrWz` !FݚIӺI0=z9Ƽ@ɉ JW<`:!]‚hE:Z^@j\1lS!͙I6'Y+ ]uv!|H"494ۙdL}*nZ31 FkiWbJi/XP"(6:h-|7F~ٲ9P,7 ~(@<@[w#sr\,h5XOtŪaAW5;ȖB`(L He< ~7->y whosZ nQALz(p GcWەbO^<5֓&L-tTzUdz9tY?9)Eb:^#/*lEݢص7?OZwlo{Yߡ= 9ZJ-k *Wԅfe A>Ԋ= TBLǟq~ۿ?N#.im&e:GEM$ENYϔ^=RrօN˅zεL2qa" t)a`gb_UV2,s JkOR_ȑwCQYij@\0~@]TzRC\"{÷\ P7$ 6 l=R.×ɯitݢ AeG}g\ gV:cI;bJ.imGFiLG?` VnmŌwLTA9T(b|x??LDdwI7gbaWPo"9IDZqU.F d:/}fnLJ.*bHS%ʥ(u7UCH_BjR$ }4?L?Lt /f!QqW~yZ8׽ z`; ӵyF,D0]'zxdŧ6t  /EyRZkP(΢{ʚDǶp&fWtY7cr~R2%[ LzCGI~j~C2V+?^u* 6LZ8&j˷GvmKk{FMFnPQ[qf ܳ:TS o6 +',u0n_}i71JoKH@%t> lgmI{GT/S h?} {|ƽ]hRܧn=Lsj]:{!z0 PLn'6yBE@|5%;o{G\KmFd%AWX \%rJKHXxRl-u攅`^ FiyhRz[|M*o,Q'LGfu&o O4ns Zxp QdKq{c5rs֬0׍ C[bTPYT} `^E6o "j@ӥbty4 ^ӈ^!?ΈgX$0+y?ej~PHp96CbmjA3vOx,Yip;PA|ݽleѢ+vp:JN%O Mh|H~D^An!d3?rhs>|ϼ^W΋#BsAeExN6~^H=gjTR:e2). jap{L,ْ {.XVap:piL÷]VAvj4*?S975gELzh<}COw|d}Ұ ftH) N ;#DH;?kww˜7ZL Q>FOKܿK.;)284ġ]& _ B1bky\e3|J.ӲyDXKwK͇RKQr*K ;#J5k ͉Р4='Xf`Ams,Cd hl.#:ՠ@"W`!B D4x R:\єbMᜍ__xIo+o IEosʥ:[GBB[$Ba~1-K ڧ4:W"j^2 vHi( @R'%\d?i;9 B/Jo>(ũ'c+2۔ގ;C* >Xj4#ٶ.h*%H6[uns6@֫%؀ ' {{^L`0t>K~=f)PCr5&˹g~k=":r (UPj,<`@;z:$;癐 X b |/s/m#:nC ihV\I F,_H^M(=r~%PT)6 )()knhOZGh>_ }D,s/hϬX+^<-:X\ _oJ]9<7=R\zRaNK;^q!'w#2Q5;YѲ)O'w~` 3 Kי_?YJRf(L$(f`vL#t}Nr x­'.lsx~u%B 0wxk W}0/zyVCJk}#t &'9;x(w MEvLg^q9:?]m$''KR|]԰+fбԶsWܯ2>?uR1c+3+^(q_vc5%I%3$bǏu*BvҶgR)X>=PQW\vƌ?=u57{t!/ pDB|y8 en)@&Bƺ RKP)X]ZJ)׌Bg< xb=R^%>— )}iv}^crD,'iY&0/g|&a YOdڞ[46pZX۫YsM_Gr:eޝQA҆3R;of.o Qs>6![y}ZȒ,]eXtGS`jfH;AS./.-jkj+MBCfH/Wus+GUҪ>F`? G+[6@6JרSyTb {i 7LਲKűRe9KkaS bY:i{[D*S}\w{ǽ8(wt瑮e gɑ9 t 2(R}ەP;9cW:D=r/ax[# T^wʸaKyyѠFߔz{1LClA N)Mp'q"5ākxu$&{KGcg 6=FQYr\j%qͦeHUi.hH *;78 [iTNxDL*ݵ4.]I<ۑ}ol`VBxm 2( AH} UT.tıKgb!I}A8Ec~Ya8׬7(n xY #q6g (}/Y*ZyĕP[pm]˨VY0yh+р?>U+ȸhX.^f;F1 ) jCˏpͬ|0h1 phgW[.hLlFadU!t>NtBQs~IMS.|`,fXp'Ѩ룊\9̦ hܷF9c/c HL=ٷ81/J#Hf$Gc:c M^Mkg2뚹Y@T %}bfF3]'JqˇKjܧ@זddwtܘrK ]GIA7Jap쯑2ɇ)a"sEL P ;ix,t99Cƭ2S-S۱,Na#á(2(@Z (;zh\"3^j#'%H{ڒWʯgi賏7G|'$  xiRvRS?wE H&XE 5qvnVQ@fG5(tΓR8CrZܣ'7Vyjh!LmC =X/F|53vZݵfcqX69vOZ))Cvd4R;~LT[Rcԍi{ׯ3.aMS̮2GpĄJVhPXBlXRy>s ;Ѳ~NvδfƁq4| @&O^鋴g( mQm8}CRA*FԌmXQ"KYU\lRgiJ(rG{ 5pMp9Z!;ZRvww6Q!@ !U_Btj},\ O}u [՜N`}u$HC) !FG-Dbe+ E G?R夵Kfy21ݽ!;3bZY+D$'`W勸$m7GGimm[o+DtUE<i@^-%`%_+2#/,kdUPg,G€r8 1G *luE~B7HCDL 82kXB1)/OO]L7~D`8LҼ'6? v]. dpMR/`?f}"S,dgMhK;Q἗?~rʝ1 _ m\ϫw;W':2EsgO~^^آ{͈{qZ(6UmIOQB7H8#`es&Mċ\:Lb҉És,Ί@0:@xr[/6BB]x`NWO7>^OZ5Y.nu :/"TJ0nrߠOeRU~l%; iRuV)vFٽIQ5=3ȐtU9(eKA^@'&LʒpDY$Fl^(݈:Iٝ뉠n̻Qo 7衛/QR9҃IU9wչRSTo?,;-\?,״߅d`cT`p`RYkXOJo(͊jVmk,\Y9d2yqQISa9]"/JDJR:DaH|!TG $u*<-!a8|t}_=[;|/TC: UifRڻ\ e;c^U!cgSëpWTߪ>o1F'Qȍ:$r2s_G)񏆄 a}mr$WlYVNՐvFFs\ԃ"9_MY}b /{^Cm1=0_Ҏθ8 "!K\4޽RsZ0E[E!*68 4ߏiMF\# q3Ͳ'(Q+DgTeItjC?KsR/_erJ'=ي4Ȣؒe乣X2v{~r/lCm.b8c//u!`F$SIU˻_ƾ(=1)[reYsdNmt&~y1XC&dLڪDjfS, Vi̇""{HӀ4Yiݭ+N φVaKpWgo9aA̻XZ%eL9Q{@IM'c 9S8M7&| 9ʫ Is5<Xh 0⇒C;R)KGA(7lGI;sA 9PHJ#Bsd7&0ɛj`x(T1 )z!Hp7*C? A-;Hm25eis^0腹NeL״!LPڑYb':QlD[!A!lfϣ']ZwX:`b|M~ޣ1䔄0kH H;֜,;ȇ9.WDa2=TiAMu Mh/ʹ;DAL*aWǺu8Ϡ=^2GFyu"EJֹvIaU`V(19IJ ImNd#- u (96M`4QAnΏE# 4;QX%ɽt"ȣ8b* <?Xhnʔ@*3r}6@ovÐ =k禬_ںajGG`'k٪'A{i4v{ȃEH ϩ̠нn%>6R릝{}K6'TGnYgϘhǿ7~*3qe~lKYL{,-:S!0c)DU̦gxݙf)ef%"QMLQp#i|'a|ק c>" }5WP<SRX9qk;nF,F7y}&F-s\l/'F:LPQ#Q,>CZ`pF+3}B2sGqG4w=hRḏQbȔlH荵x3йw;& =g!1l9*d }ʚ$o,uQ[γp;ogS 预QCjA}Pzza1 lO郴.bur#xEADTKзoxS  0uVN٪)_! Ns>#IJL\TeSьw&l"v+&iL=3,*{*YNDl֣4&lP2{^-' g!7gsut44n}If#TyAa! )wMnfܪq6C8֑KNȑ>3~̬='J3!!{xTɻ3{N$U*B.;v9&)Vk|?)7Ɔ\c-ķZ7ϱtbגëpE?ˁ?>LOOsC]c]ͽ<44p;iLGfe1FqvP1F1r&LȢ<y LR 7Br嶌);F9nn? Fx9[IJ ̴Q?]VV> VV|ɐWW;AY j`SN{V@< $PNm *qC =]٬yu^렽XAd߃,ko?ed$:"8? Ցfsݏu;RUEZW$y["$IDMx,z}q l@Ae D"0Ѝ|HS1,jOeՖ* 8NQn2[f1?4+4oQ gǞD|Yr9$x0f.܀Ӑ؆)鏜he镤M}[ UJc(|Bxye@󯭐iH 3)9vƊ-7iFԥ 7G({N<\C@㢔LtngaTǑ^8  .w#Vo+BG$$TK8vϡ(e͛!Jz6܍ UUĎoceY=8`a e;a4 QT4AܬV}nV@!Zgr), dTryKĒ]a3iBOK#i!EhR+)_<ӝ{JDo 7U/h{kUIDE¶!-sPD⌁ҙʔs:›`IE<-O1̞R:8`R?u #c=U4J+ "K)"?wb$EH $Dg&ukY su J?^E׾J(NCLs e(ATvd +u2D)VzC'(V-yOG`O#_L([TtO%.x~4iY4dzjoϭIdt".8BvR͇Œ wh\6$жFUzZ:e`|^_GKJ @R)5/np'!)}%\=?gL[G6r:r% hS F4t!bH|o$m)Dܔ815)Qł[||O+rMF*^3B/WZE&p{5&|8NYi7I`7HsMKݑ.|a=q tnm~]PTy'4RfrΘ+_8VWm;xLh {Şޛk뿜~|^O`4HQB6 X*sᭈlXmmF I~ֹҿBkGKq8:滮O74'!7K1 "΀~mh> LˍS  $ټETaJiv dz]dkNc ߴHo|{bQaGbrW8)}ce48B8V\G+\~W_9y_jV̧ƺd).`GuF$F)to ,iIzì˥+k#lH#U,iU EVtn Zp /ƥ0Yd?z a/J\o>Br@k{-V|EI"hi="4yOvzfo%I1mAl(,|:S-m ŠNƽy=޷߇r2-/=7w [jr{A<)2Bœ`ICU 9[<5x)1Li'87.@2w()2IG$qiEczkH%`,x_C 3M>dv?2l;%+e%EslR8Q_YDjf9TU"qV-P1Q{QO`'%jK-DY̸$̴^UyqW92~闛LJ n[QltaF݀rҍr&tTǖ68&"YJQrT*5:{rߛie+h ,Fnf(R<6U^d7 |/׾ 7˩*=6sDOdq/&*J1Jm|Us*K)#擊?,Νg*Z~qD?2&Xm^;/7d RwVf#\NjE^Ti6uα`(O%\u./Z˵uRk6Ti>*2pa +PhV'BzpmmQt} Ȕ`ϱf aǥml l -4e%ʈ`T\Q.+q O*3>|@9ѼE T)zfV*xEsPG6s| 3;19ԓAd}w^Ԃ\ h=3+E_-?{P\}fi{q6y-/r,悭J!Wnr!% ŝh]q^hd"42wʱbx3f(NÎ{}- 9骊CJJ6ʽ= M aaR(Qg^@^<oe>G0>ܑ EP0`)} n2Sy~CH{pA'H8IwV (I@S5 }QLM!X5| R|ΡϞ;68wN ?F4 IOt7*m+xYQG\aK M:]f!3%~[yD"d ݀JT#뱵-hnQa9+csjcU|MRؼv΅t<)z?V(ktGzXN>V|toS5lnb{5( Mt1âqf) #X{qcmN4Ps俊ZNƺVL ?ԡ4Q9GWOTA*8$NV) oHTuYS>2ܒъEFTز":mzBvA4\s2o|*d6WݩNFf1D6h̩2& XI׆pLY,-%k*r?Xmq|n {[ |xbC:x@HA!S;& ;X]Vӊd"xع0Nw!UI['͜Ic6wC"P$im\fVz $'Jњ2Ža /)ctq0:aGS_۴9d)~ֺ%_@%ͥ~ AR(Q3lG|QNP툅m J[)bh]+$TwqHy)f g%UXVl'sTEie)ưV_zxeKښ:)LBw;s.y|~s fQQjHT:-ck<Hg:.F^MӨMx 'qI[8d#e%+b9/`0 PW(ɖ 7gWvhRA:"=JQ+hY=m~~!υ ZT;^Lne0pMBB / #Ͻ7{W=X._u~|4BYӏƬ`8~ދJ+$ULI. :5KJNU M:<=%|UKNˊ͍b\ls&\)Ϧ7ۊb3'S2h*й͜E+bl+x/{Ķlx!8[XnſcӬdE/s؀}'}!c> oI`ZIkA)GrYR@µQ~.p!pFe&Z=ndxz8pG:gaW; 3$GoG8r?&} !W^8u#멚|̜2g7 _$|dړv׹eʗs5;+ݹX)JK֎V$| KD(=b0 o>?^|ļo#.htpfvQ\wvϙe1T{^+*jHyU/lM-#/b!?YRoL9wCcWD36x?qcT,:âکQYy[KBMĥBښgЙ -̴ c &̏!8j9w2[, OObyHLPVR._9 QB8tZ:A)(r >V <*֛h:y-EO(/4V^1呩HXRI~q/c|_E2UPm]4돓ˠvzO:>oT2ʀ뾾: GÏ{y'tV$* vV @:zӃ{4C([qcu فNq^/0x>dy ]*]Z`PTՍMxh]JM2%DT\([{S,zHɨ:S@>c(V6TSKkM[ :cHDj:}īG-"*?h۵= P=%884:t*"eh}[ܹ֫tU+DC)Qw-({& 6!`axY$1NmW@vJ+ uj5lT*m>9!x~H!6zU4٦ߩ8NTaoB< W5hËj cNX6`ZCp)2[Zjeᣝq@*#į6qg] kSQ v$p8pJi!c> 7نzpU2Ts9xvOfn/ R< Rw3n6} 3ʑb\ czpL9q!+ph)X@mxMmM^.hN+amI xM/8yŒH~5AdCR{ N?1ls۪@/:Ȕ>K]R'1ҩLƏSj)lڀ{ r;ebQn"t@֡d P-h ‹:;nܱu 9Jai(d 狋068B`]22.)⏛4ƫ>FQ$8>1{\ /\LAclO]1On+fK[^NRِe| )]LUz7q&0 ⡁)uB}oKS+'O,pE! $@ ['KsSTOPhd ;[#gS We="0(VNZmE]$b&Lh4Ogl9t~x~ϙ]V@bP̹ZǼ#x@{,@W MBy,M\ՠsuJH',bu$+rqJ&)n¡v_(? 벴:(Ym+f r}BSYMU؍g2=ac=]V6eKE. !$p+xc8H[$f0}u0!;K:JѕQ,FHa Xw,T *id첟m_O:JC.|jb(zĿX[Փ§0@IFu.[+9iwcX=2(yJ ӆG>]<@~J~aǹȈJEH"GB6rJF& >?CC^vW/½O5*ipB[<-y!RH&2ww%& ;);qςwQO2JY)^\Ziɭ9w ?u5ȍuymhWC;,FdK8J8blcN\22) [s(E4q4iNAa͊B۷ڠ;WB5-םFxHqhU(aIt& cޓai뇻p[y`(&}F$D!l}w-7%1v@SpQ|3-)3> VEug |. g] #Ç{FVY&|u2qB{hhϘ݀ -밿?8刭s8bb!Y=PnQO弁OlѼ &/ ~4wաFG\{f`*D[tmݖ;37w\鋙1&םWR\ ]iZI3;W sEhfH`WA%Ac閃| 8ҳ'dRn\2͐P|0!u`k\<'/{P9|Y6 ' A8İk|a=VMfދқ/.$_,)O A!󨹃ţX`7>#̰WJ/xػ#*m3ջtSl.D*-ʪ5:H?%ې,y7]o`V[bo@hױr"ۍLnnY&8YSexG@I)+q7v33|%P͸? İH=,RYjR/K4 r`=3#X?'xcO|,:HoY*NqN4ȽT9]<. -!hFO/zMY5`U$a\uqOqODtA< wC2t 9Jlp jz[Xb˃+whHR%fEYuW!#_;q1xN)_žFB)?Hx,n}Nl ESz\]ːne{0Qr60?CX#vʥ^ZTZ= R/mD[RF|'iɊt|ҷ_=1E 3C gKA"M; ;#6UsmE b(V% #m2ه锾.*`>^F9(`IÉ#|?ejnq13luqw=7+(_'Xr=jKQO3^2Dk kɓUo&fa]'mTiϒؘڌὸv=ҹ\ 1Hj}D3ðtPƵ5 ԐЌ++]zAˠ82п/TH-)i=`e,'D:Zd_MBNUG혂zJN'KC)T"l[3q~M`7gD_|4n`^ yƑ[N[`ۼ&!h-,;HAʉeVsK5axi񫬛`y"acJKpI3s+_}K> 0JO8ؠhG! ZToȾojqhoAkdάMg`$ak_%u(fxZfW$y MO%]C9SƐmyԇ+W[wvVS_ְHܫ5 {ЂRq{=l?[#NZuЖ0?؋ oγ%ѝT %<*ר!*ß~czL1kO (X:J껕)#dQ*Y;/)A&Ho|sɀ7o$ 27Jh+Ё̆Aհ2 f~5ad477C >ɳ) R]Vԛb!]E)\gnU3JO^aE{,6PŗfE8އgm/ / F,O2Acl*x_]an, Ժr3W98}w-$TctRwZv'wmJZQRmK4&CuduhQúU3l$=%ۺ~#)sj&3K윪F-k<^Vǫ"=_' ^!ݺnT8/ +{ynGWA)҉hp+/I2":O@cmvE$)#"*! 0E]y3 󌯘11N@VDgx2~߀?*~'@#e֛4hKw[phSuOрQ51)*4uՎZ/f/1(_c\Rvh{rD?"Ƽ2F35.D]US +g=.j$:Y`Bт{yXEOmWRGƙŵ9Xn}mW0'9sxW5,wx8U2@R\9V '+Jh21›>wrd"$aj%j%!n5Fv k8  (m[hCWcǜbϱ6{MT& xKx牺KNeL/c &$s67Ns GN3xgd:kƧJȅJ*B{ȅ][#o-Rp<ѷY0jj_>>l9f%F\E J 'i9`S0RxYu´wxLTy$Eu1!I} ]Ϣ:AXrŵH ,v̤a1Ԛn "k+df4Td$K0 s .J0A4 KpJkxȧoVՑ Vʹv^MTl Eؐj ivbJ/۬j =)>lIZe{ ]~M '; 0ǜHcg(=s/*x,e?_d]NG֤m$U>o~z{od.BbzzCdh.cMEl&5qG D8 X, e`}\a &YTΗQ&Ҷ6)MUahơI"åf9'DAuI0B.@uf]Ӻ|-"%Ky>^m_ɷ4 a6S% 8)sAG¬!jl(ؽ[y9.(ʵr2.{Jn]-Ў :[՜  8?@@SM V5Būq++1Y [sr§ w`#Rv> ;Y`< t>̧Ӽ$¢aB̋,&cZB-g۱ŷyM~Yp:_UԁxyWY0pMpu:6hK,mޏbD?'oi[r=j3| }a&E SїQ\D+qI-Srյ,OtznL~Joq&`F4wjcMHM-= X(pbWg@vR-.S7$;_$%xLSWTz-A Q^s/ʭ~|m98qjNؖVP6gO f)*[ #Mu}'_93S6,lInznlD5q,jYԚ(`)ӂ.#tް H9H7*=e,8#}h 6G~D-0e#y-qh)Z<ܔW7P8" p5U%Hi. ~ή{!XfO}0wz>5d릁5 I!"r. LR4DF[=f+.[3Ze;69'?pWtF;i`}Pry9ڗt$g?Nzrl7 zqE4ε7йǀ tSу؍ܾU@ɅNɆܗ}x(tIPKq&+of?@t;w<zWW7Dq(RZp4 -vG'WZqyF# Rܴ2diߤF_Sfʊ`8ޘYpfڼcث}[@LŅGW:s'N4R'.othGfXQ W;-a-` m9gYxH7I`CĮ6cшKVmcaXݯƏud#f΂i 3>P'{ *r qsZ%3~Uc`M nNQ8$b*d}9weG}kFT[[sOW9A5@9SeP(JC]q/[Tu?Y I5IoǠO m_۵RxidK2οI R}z9yc6n`)`ioJ4B҂χTˢr@W9_QhL~DU+|U2?A?sI0׀ tE20C<4˖H)MI_VL'P%5^sZ+ㆼS{lgfKdpUVC11G'E[ g-`QQ ( W^S+?:~Oh2Aw[K|9J Nmږ Ηq:P^njF#Ik TYaC?(y0 bjrEeURs|`XZY=Kn̯|y+oL]XŦ)!v9ڕ#]i23|x='+wؿ&ʴ]ç"u0O|T5..c`wWK{!!:T )2[PYC9U[rIPlnI 95OtU w [eVxY9w,-P k ҫfs[Xȩb%^1'JeZ-,C&mI/#a؛ɉƁB'au8΅\U4H0NCvبdmlU ^{G0o\~C8%8nbL od?T KW-2+ N}t ,gm<[f9QNK-dnfUb͑ӷ5 WE[ӳ;oC3/u } z@02?.#_bv 11"l";R/m,c7'َnHw}gd*Y8="tV3l`.dcAa&;wϞ3Y]y^U;x*U:q߷ qIJ9yG +8 ?RuIO rXܯNWN%6o#G meu 8\HRY&%p |k#}Z u;L5 Y]ჲ kUH敔DD7aԱ&Y_X~آZ6]ätk)@: S୒t]LB 9x31tBJEi}s >cK |Oz]|"_|^UsQ*JVRRCQwAԃN',,z*^+_VЇ\3yA/7H /Rx f.S A? %T5P=;.7珆{R.?xmݛDm;9蟽>XvuJn%I9T0v Dz hD]O6gq2~-Pw Ө4 C&M\1&u1m2B9" ?w'yL$ߕ&OX] ''jd.2krҹl ynnr5J^W-+~am ߿KH:卂[Q`¹jƨҶ&rdѡ4s}~(6>8E#9_bP>lsʗ_,SRq"] S*Y|w7=!ȲVkVebWܞѭMآ3sQ FLgZPpV) bb~3g hʨmʈs_=DF VG;'b^cIW5,'tĔ#%irnjОG+- x}KA/Ձ$]4ɹΉ^f܍CM_y8Zm &? `Q7 ~cY|gcJas BZmw/.n*$>Zޱ77רQL %KSֻOZI~ehu}.1v92CYF?*oh~~ %qC0g/@[׍"h%BpJS&*j0c^Np,\D$ 8I.F qp«[*e@Hڽ!1F^~Mo:OyM/>n9-d04N j;o^``Sᥱ@j ¶ysEbǑ͡Ϛ3[47uY4E:Ur5%NiJy5H0THW>; Tw5V46câ(dDq?A3 }\mnօՕWr齣ɬ( >(8wO_ |6xKO3>O@Ɯ:x~8$x0ZlGy4 % G𽰞ZKlqf6>~%F+WіV;@ĨU- %Yfkm L_"#sm^w9]̒=??xx[6,J k&L/LoX% 2hfLhUKy@QbdD(=QzمlR0Â$,@+Ģ34z9!VC''D=e1k- tDJR`RI{Rt|ng*^#?8;:~uP"v,QV:R.(l KW.hV>vMO^^Qa"HG$@V*jf(gP~v(sb^dV^f+a~l% #GٲJghINM.z%(Uw~i$@lU=(.-F ^eK;o $Ļ:SQ׭ϚpIp09\&eA\{𩦛W ͆gXr5; 2Q%j0ax}LXPxV9$eV ghO/5T$sXfikr><+s(~Icڅ,>4"<!*u-6yElKyV9Y!@RC=؊fG4!Ϊ1_;&U2]+ȻXfȞ]bY6lɸt^&^HpA''a žJmVúa8- <_סO|'&`P=7.i.j;G+3zA]%њo@dGn:ObϠZX[爠 zx7"G<&CROv~ℾQnؚމ&r^( 7AD֠ u(`/6Y2ӾHYrS!+ 3B0fRTc'B`ˆ^;1<f8A[ Y}Y!&2NIudѲ2M9Ð-kũ6uTrbxgFnjZyt〻sMO#exS#Ͽuտք<]2_1B{%X6Lݝ7Dt;E| &"삯ʆ*aj0Lc W,.`["F!ftՖlkD^ 0\QD$̜k'!W4[BB]4]xK+~9k)yvS7T@(* oo 2)^ƫ%"ztˍՈ=Zݜ TJ7]wG+Y>#wV멶*_7a-06u]MTSùun/uPx3=eP+lQI@D.;Za&^ö&6MJgZVl')pkς Uq6Y\P'p ECm jtV6qW=/%j1O,x _+"@E c_"5M,F[?z8zP}m 3= A7"u7CNlpG\I0 a_-ZqcKs>&,$W=&j}ޯ79B-B]ӣBFuD38?.NfE5!@Jy m13^oP'U2?ͨcO3 2EB7/]9beŝ&fϢ{`{q-yUG?u  +y9k%8u^STs'0z Ζbn7#inB l\W80ro5N;6YŸ` ]B 5H <"z>]>/`zmу>\+|X-a5HSLP%45xy{2nK8b.iDu0t-&@usQŜtw/lBjd8ZFe4vht{\P$F.fJ 4P~kxHtGhBqh&=g  DV(G'20')5>7^Z`Wh }9C4^PM̤6KPaj7cln[ʼ8tψ*2!|%(WdTJisk% P3ttO 6\SW|O߷vt%*7@ie%kȫ跅 +,ON| \?Y[M{c+@s!.Y!S :U+^瑱6p UJ$N'u!Ѧt6OC\} -۰2GGamY`m[f g,*7[츪ȣV1S?g =qOO g}Esk0{sb`trmu\*#]%G&}cJ F΅x1e/cU)']8"xbeAx5͘is3e FK?b^ Ě'ҚE_ڂsfiXysޙ䰅YR`˂J F(v*ZԀ`؆߆ l wf4A[O|Sஅ^>RGdt^G;ph+: 7M/=CPK$mQ(u̪çL;ȾN\40ePQ_O.4n)/ڃ xqK FwoF+40N&cJǘNpiWd#/_Yv/n: j+ PRkjg;B`F8jX[F>)Jdm-fglAYc/[U ͪbg4CѤd2CxĩKmz^DCS+:-]d+ ! !c3|̃^,^w&Ch:nȑl \#UV+b57+p;8i-_;*/R3};h}bzަ9je@ME{~Kl g3iO̖&~֘]$;8D0X^4ʱ)_Zih!x , jbEeՓy >+OVPq=Mؙ"њ02(;I&تfTeӤ nn5j>C2;uW8aL$ˊpU'y:4ө-""e/T '<]9m?&|\\goDd$\[2C<Lؤ=?c._`ÓىSzHK>&2TzS??H9"#ifDۣY6"8C˭M?_O X~-LO _-PKWF,m%p wUH#8@{5H7w\BdCڏ% |b̗ Clrl Ϸ>i/63z`wRskL^|&φ;X0AX3d3;_%!1uʬ>-#X+[R{|ߏs:Gzu_ȡ Έ8@6NHvkk †۪t@]'V0_r &{#{b8Qp̈%NSP(Ij]ȉ>@/.ό. QX3F >*9S! 9S? f'*wY5tz.&Ai>sx䋩C>`9Y4Cr|ڳJd&k9LF-u}Hv!*3HNpc^[COc$X^QQAxA53Wxzhz.UljS넁~-xP &p|1qDs%JY:QH&1@()B[l;|J%!G G5nt .QJ(t y tؽ>f(zH"wuL1? 1Pbu CHgG gQG ML $bqS RU^WLn9B.]x; 窾 Na :0Ji!&nsDl4H'GV8⤼x*0\66Hn#4Jz18mۛ@m9d":<ǏRFe4ugI xo,w~5bFXUf7# ,o` ^T-^iĝm|)n6i ꖃPސ4C(HGj{rdП?J B"ǓIN$#!&̙7v9N;ɞ@1\h6rZJ;#>D\zζ1K+''%"4nJTn5d ?1W:b釴E2RiRS\v1"b+i=Eg~aP(WTOZFm))?p)q|rkYeOq݄!ϴ ؄q)O1nZO _x"m (V 03 [j5D_rל5!=p)8[B9|+cg4oD .ԹI1'رCmKL5gP掍WT[,pQ#ɂXzUfuq5Xx tV[k6BP Y'չQfdc:y7QqRsq29 iq"maĽ&{MLբAd e_"'#kEK' YIO4Fy>KK9O$: s~?Ԁĸs1!ka{U`y!iʰhߔ18.PZ!*(1_mU(x*J9F8cw겾ε3?;w \Ui c[Ͳc([KT.wߠ7 N8[95s$)8 T}iRJOJ0EMF߆҅B2:hRC098ꨑ`_I^\A"|M0_&WKU0~T7ϖį?ɳE̥73ެd1Nq26 &r.IAD2ӎ2 *aMӲ=!C}+{xQ|6&Dɠ}W8=ݐocXp}`&pTu#OᏢA`3ϵrWByPPh)mnjq4<[r~$5葾5Wn)t|k[^veaE>%`ϾGj֙zZ`N ƪԾE^<‰L)bʟyKu:+},Ug5| hydScX,]&&b%/[\xJ7IۧНO-s4ܲue xob' ث[8h<(#+h]T;\9mG\m>СNdXv1 2}uL\#8[R$h`hW3wcXٌG`(PH& NzM,_'_GO-7CP!_4QJlF 3j,|t9sX]JecGg`kEoˡ96-R{qشuDg%,D8iHwhzpđTʷ)@յk̒Ri3z r}OI !G*0nBZ= HY+SZXiH~J}i`CIڵ{]QEuΨri`[[04WẬZDi,k{~{*Sʲ~H,Yؔ..I%jb7ª3 DbT"davےJ4%WPVOІaE.$P?]vy`#\`qK54H#I ~@׈Rsi.7dKJ\YFOAu,tI+ТXܻVw/;I'TRDgϵk)|^k "EHb,N~cW61Äc!_G3dr{L 7-gm 0o?7^|P$Iq|ҔwCc))x7%3S. OO tԿܜap PVr̼F-Y,a j˲oI Cę]KTZI3yfFFRRX}% ]?:u #5!.ܓ3/X %3=F?zc\5 ze3>D.u+U!b,Ww@d eY^Z__,%*u ܓ{i7-{bA?6E\y"Nˑo"r%}G2Li=?'Gah\LUɆIVM4uhUhL9P#rJzG}L]؉y ($ۚA5};Ц@`)2v<4!/ +\*|[xT_C :Ƈa)!"{ٽISxܻ.QP ܔg2/Y=I_DKvn%i.):ock&(w@'pj{F.CqI@F h2.D|Yr)Q7ϐeUك7?֎Nxp5)d^[4ǥ*ccv@Pө<[ևvJZI^[BufO(dAlYMgY%#MtkCӞi/]VtfSX;`N_`p9m4&wW`WYau] QϤ!+ꑽkܡuis?k(j+p@{:pK &_ D#){+`G ~9\H Nf1Ͻ)E1!szn&Ճ \]qs\5̜^"TkYʚˡeʗr%o/J!;î1NtK-6a,a.@i(8߀, h;¨dتn|E~-QDu6W e$\6&cPGfITtq-,§F2s" 勉%ucQ{ʲCC 4 VΗNùCȥ 4̷ŽK(qܖ<'NZ$]pj=M v_9ǃM]SBuU  %urSL*Rw>x| gGYG(r , m̂Îg/'K.~P#^M425 vڇy(a z4ygtC)zwp.TV/]c͵w"<-d@̟0Oo贽LxMKTOh5BCL& lf' ˃OSr/k- Dy "_p&ޝIU(l; Ȱ̊SMvvera/[xw# jegӞCt(/Ŋ@̷&"U/Doؙ$r79+9("W`~_A;c[\@GaVBpWNg߫xPZ= sGėOw ðu9սO^!%  4pKy}\m:+X)"*jc;]yOc&<늠zZ7Í)5.8,i+e&䖝;$ɻ_3B1-| Xn< ~*2RiM]-G: W+-# >QyuHOEU޷}بO-\AċeRu#уFDe 6WzvC17Å1R LkA;7 dL"iDXb ]"L.]'}鑮yi܎`*z#(ծ|E-7A{qeQԾ/a!Tz3dmoW=- ɱ[A,DI)6RS_g_C{JR?kx-&`3r} -v%'E$wac WNl#DO^^Ҵ)2@]I`eE*4S:Quk)%%=6sņC}E71=AQѢe֦FwQv+&ᱻ;p22%t tOնo=$$tŌl$u\0&d.W|/%gJİ-y^['?hڂM.lj}-8GV=Wq UB`n d*d'OþiLXf3LO" /K1@'Q4WqSjppa\T}7Nm-P,̡@@[^a]QD6JrCQHU4pd{w6)-Yw'X wToI^|EgObfk';P 5"k3E)npSm0G<a#^,,'_u%*0eGZ^'ԕfO"hu2<ΎKf`&0!?33h6KрQr^t3 `#X^]YwπllooU|AҵՇ}.8Xh?,MmgAs&I,B4AӔ~[\qfɮ9Npc@J:1~+iQqvS< 5\)A)젪xa(.لKV"W*v>\Y=ۈ2=?^dUK"I^JA!S_oZGLtqs`9DfKjb?o!`n4]ٳ:G릖i:}bq:/V ^^;aa_ .#b2:箿I<._m/@Tl3TT* y{`kgv\p./Ŵ22uE1հ5_BfxYA-,Rt\gU1 1RŅ<NjWvdyb_ ~A9KgO͞?ce#| _tG Z8j8K?nhmٵvs䂎E߯%GpSeͫm~i=19T'yKo&'!/S'Wpr̩',a*.=J*H7?# bN㊼d\+U{DIL@-v͉* 5JMQKcW FIK5/цmMzesh| 2u$覐SEK6;sd.5\:RHdf0fwSjt`T|s9Tc~ՍؘO*9WkPO ?b|,jf[{#`A٤RvDcsWoTaHM-l,م+;2G5b5J%FQ@UAIGF_Ȃk1!F^bʩcݯFH137ګ;+ 54ny,=h%=g EM]Wę'r`@ &BT gҀ)6jŌpWKH~͒.r:vWzã>qS&Q>br36"=J ۥ}uty U{%ėH肂<&VÃv8{џuTm E":e[y $vDÖZ݁5nGԜѳ'}{*JqʔZ@1@5h '7qD])G _&E<ceK`_.h4*j JU7czA,ꝸ^4u rmCQ{YEtD e$,G<ҧ?p OT0_p\Xزu{#T2*=(L+$kޝ9W};ivbLڌg*,j6}u bT|{BE,StM Dss'aRݦ9ŒЫC T;fTpЃ?heZ*.8'.Nicn\>(rF}T܅2"_ tQ-o|V+L` 4Kbx7MjK(3kkh 2OMѓ2}d^70%u4a+" qv2)FyuR!tab*jr"XŜ6uRKA VvҮF:BXbl/2 a"R9{t'G .Ԯj3Âg3wEϼiGRמa()ʐ9vkH,eH7F]WO+ Cq~FP 8jmS*(8"fkݰ,U|g_fM͆" 1cif]tZT _T{wLS%vJ6ѓw\eLI;/Vs\<[pEB]mǖ|S~_[q,R߆NRLҮsߛ2о>r |-LnR8{HգK,.eq/9azOٞLLpy8VZ"}rz{YjsTb`i%l3Pw!x0 B"gwkԶ#] ܔBuzPg# aoJFȱyFւI`OͯxC9:9߫^ժ' Ký佀WceMk ?Mwϫm>|wLCiPo<9?>} 1M9꼐^0lDDZ6C dB7j_)QMXQ/g޺.3GO< JGNo0}i1n޻q:sX ~!a ~3iP*%q$TqEɺ˜0W8̶f>A=@+c"@msFȕ&_: ZM//1GJ$Y0^(d,W1 hNs Vv$5wyI*)k 4w/x%䂩RιPg~Չ"`tԩyHt }S"k7 OZ  e#QGLmt[wL<%SK8.r%c;RCHxKlWGwHX3hj}?IpÈ)Q XONXN=" hR- ^62TרLV7T}k΄Ug+2~:y  6c \z-,/u0d*(`F̿Aq3t׀KxD\ ެgUX=9BIMt*"*-cl_H]a¨ ?T~l*j8CƦXŚ_O¥uԅHf{6&@Lhi,r?#%}ȉÞTG3!/Ρ20޹297]6Wf?JШz.+gڡ is꫎~V\W*`lhU7$[Xc~P6F9|H1XV$|(j'i%A75c 0{!V::a82Gl] W:wcv X\E07HE aE@W}Ms^0{WIVBS$5%s1>͑{Sf_Dͥ]D; E4\$('œBal}/B5?T|1 ^?N$pn`,kNrpEa"v yCjvM;|, P!t_n%~)Q]G`fZ)nFO>ϓuFzĴdHB-`&J7w4,3obZc@XnBtV;P`p2,"dH{kOkdY`1D^,qݣ_Fc5yGigc#}} 5m}uՎ5Y MdzOY/r\ k]EJ%3Ed%Z橂~TcR!::iyyD,cr!NS-vzsK<ȫ<4x k}o>p:ᇂ~ͺ&%ؕN;ZŖHޢgM{bu&bvgd=H`&%}O %UI\1Lי`!,zOr(BtOrʑ϶n(E@MlKS.Snz0j"n֛r7D oHlAaxe(hVTyi:NX]5# _FUq|LfxpBh F,1/apS6X)mQ,:"6cA A&s(ֿiRMϓ vHtgO,E[f?9&NٙrD0aY*aKZ%x_TqU6 <4֪U .h~ Z:)fBi,M8E<>3Yё人z;.yjГ߼GO11weϦn!u̐UOYƃŀ0_E4E wz#1.CL .ٿK(:)ahO&)[N[gLmuldRS1Rx l`Ad>H4lTZe? {оJ-[E0/e,3 .53t%@hN* | 'mg -pWLu𼡨2ȓC/$s+pgm+韑\4ߡ N EXJB g 6,f7Ŀ#r1—ʊˆBlge#mc4xP[.t$c=֓8:rêo+:k0M94)yH\v|1~:)jU~Ɉ`ZKyMO!&=|c(G;Ǎ9ٻgdlęW $#o|2i)`)oKF7~Ȓ;tv@ ~)B'+rsϗ$$lasMit{#ץ68MBg(aSe$s8űۥH7b5C1jaq1 dI!ƃ,R