apparmor-docs-3.1.7-150600.5.12.2<>,հiYp9|jͷZn$Mvf*l[6e z) LJӬ\W"g5ۧOJR[?5!s3BKQ?#+K.yqL{be&b"z}ts9cZMbbr?X}0؍xVI57*Pׁ݉*F/\}MMV䇸t5h#W[0>+g7DQ5?#?/W$,Ѱ ײ Z%%2 ~Lȑ@PjXE.>;X?Hd $ C 5Ihnx         G  T    @P`(89p:FG, HX I XY\ ] ^bcdeflu4 v`zDCapparmor-docs3.1.7150600.5.12.2AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.iYh03-ch2bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤iiiWeWeWeheWi{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-3.1.7-150600.5.12.2.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ih@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2b 1774261849 3.1.7-150600.5.12.2apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textby + o).utf-830dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722?P7zXZ !t/O/]"k%nCQZuǡjע|{9[Wp G’1 NϵatNR%lBs-EO#{))u _BuPÉᓟh>4ӭқRVg.̒{z%l.萌{Av.o{C#?pgϓ//SC]*,e?1 |'5^?'@m, ĽY: YTM5FuMڍuzdPb&',ؠ!w6u2q dzy"̊9`~J߸O{%K6F~~dW}+O%8U0TF\E{jk}sY?i[̖}5i0Pν]zi%W}63I獵1u㿽43Wgykp^;aUbȫsm^D {[glhn^ Ks~.~FŭOp N+yjvwB҂J^(Cu4O`ZBa]goG2,:NԂivk۵A (4M ,d`-K'3rGF:A:#M?O,xOPj4Q7O>t@K5B;ˉ* $O#`4hd3]?#| K Š#)J  ]*1#Z_d;;W.h~=__N dgx@i軃}x̿,ORrx2) .ꐐ-99_|]u>/c)gu[WTh7Nueu`-+d :έXxy?tռn r%DbX(auCa @EV%Uz n>C0O,,J7ꤌM#F }#:\>^a^L~>JJ?.`{T5~VNDO* n@U](G1e쁒TBW!jt"UCry8BB?(wd+]4=Mo3w'.|M{) R#D3.NC4o3\ Rh{9qI6|q[ڀKkvNX 4ǯ3|ۘ$y,5gkiG}EV^[`b#GjRaI6=qʘaknwŵ V5 Wef9{ዶ89Nk8rظl{Z4(p6 ?mEd+;P,u@A ! ܣv;$C<:^RV:{Gx)KtEZ%Nn)Q#r(kWYvWet+eě=}A< a4 QsF=3 +Š kE4EM0o{}ƛf9pg4hdy#q}% %O v&}_>\("L6qUoZ=E \/\ +y w#!#l)1И=  &CdA C[y>Zƹ>ddWĞ-0wFx2>F1b*- 7yg gM'E/}l<nr)U,\=Ґxtv"<-fQaT} 60t$jH8ҰsorbԔӏ (e,FɷcNZmt9kWqO6~1xF3j͞B=ss Q-5~<ȝgGfFk\WxUinZK$RMptW x)?i+{o?2R0bcL\xB8@J x[z19E-<9<$oj<K㦲Wwᤞ$\KMm]L!h6~`ƣofaprQsqYHy >DOex0G-MtRV5,z49'zCc !>{ J䠁W'0adkʌ~ py'ug E-V Y:9Ƨ9!hpFNP=4L[.tW鈲r04\NDseq9MݎAE۩Ԅ%PŸ!g~\dsRi EWȦӈ ơmaʪDT;&8:::To%-7ߗ-Cc649d' ~xU0?V`O HX҇)B 8F;+pu2)Mwv+1tʕ>yvK͔=.kOԜ4ݿuP }M*"cO ->(\)[{;1hmJ pn<Υn>Y5 pn~&d͗ӊN=C1 7i~%MW=IKtsXV &@Vz*/ +wmj/B^G3skD|Cu0 vf9fM\1X'&QGt&qkLb?:۳"}?(r3Ŋt]-KP~!woHa0 fl24z~^Fzh&)l ]=^MGG~eJȤr|n4墐ۧgʻGD]m'YG㎮ɗ E40?|oa+*TLG%}B}:P%iZeS)uU8!N5Qf*_boTE 0 -µ9rꍥJN{m畐u.*'fЏ\ Jqo̞ mKX$yEG5Dʐc~osaCW4A⩋m_C,txʹdRt6qhkݛr]@kJNntTx\e(ؑ!}(*M%\<V2ʩsy0s(=E9f}3nTTuQw-TGAu9F뢽.9ɏrZ&0|K{oXGZJ/1up_[L U)O.  .}?CKVpu7 8q7$<px:|=vbXCc_]ƒ+v݈;)"xկ5V{pK<*8WFd|tw w=.v+3YA=)k^ok&-i|>\SYWJ2pI*žA L>om?.<^w0þŗEr|Y3UMޛPiK%mz^-Oo~_dA*22hv݋7It~H"Isv#w_ A^Cެ:>"~ߠ*ёH_N2QVJ(^ 5 ^g/%i_D\nn5Q_S(A+ݵR:jJ^G$sL2Ι߹)C2Dws؟);"f\侬ѡ3!]aUQ1rp•۶р9@N(۠t۹_%gA\t!<ȢnmӸ}7AD2)ԓ K;~=#(1r^a/]? yG%եr(o\eM;~ Q¼[Ẏ֪TU=1I|`RWόRMVBWYɵ%ڴD Ͻܲgmd &ԈߑNn{L'S,ϋ36HgL#aGPfDm5)ϴ?1KKv>B6 JFZ10pr72nX8D,up8WA4BRX+Bƻb7KnQ^hh,A3H"FY'&o}͕kul]6C%Ƚ :p*r`l_ 1?wú``2/K,wg%*vp7c zaͥXQn.UX9)w2E4qn?UROK,l*#nz\%.g[Q/y)&72]]\mP Y ;$Ŕ.LI%lRZ!q>ˎ)E>>%'&K1&& SeoM92.[D ۮtl)͝e/N+B~s:Ue<]j|M~ֿ]p$=L3ӟ?hȜBAM:nur _%F]e~f;`3yVlCd:ϟX!K NT@7ӫE Y$놨dnX0~ӏ0IFN쒯kNB1H굑LM32#:-Jp'AJW3v8r1|mmV޼(TT£uߵ 'zO;Vp/T/qcQ0s [K5yk-yO]CWzGdvK^q!-JN?>5ԟ7/U+Pk'! !!Ў:ܡ_7urGȳ6 &k v` N ΆiyEC%4 觶N8\mUkc"h`™i};Vs;Y>^q$QbۨLOh"N+DT7 E0=}&x4.{zX€_R{-W僆eI&0QݝD++GT<q6~zO 'IcGXE4CEPc2:>n{pE1.0gkrmzt.MƛNpglQ@@+#j .sy[C!Q4nJ,gf\fQ-u*wTfw%GsZUMch{z_$]ypM2@@Qnԑ^uN3qVߢzҍx8%"&dB`rb:bɑ-aǰg)- CYL[1(!E UpzЊ]8>HbsCm^J\Z|ߩ..FN0CaCJht)0LV=lú|ʿeH辅*vϤ10zleE>ȅ%osA1l;|xYQ8 =?j}V.Iy Z uLW=@EH_~*M(^)WJ< b! *i-OI:](7pi8Lx?W"lӸ.)n6ph'1+JjreE3⌨yn"]?Mk$&"ɿ<7ϙ_eiP? ݤ[2+/v`Jk6_dzt|DPF*R֐|cI],٫ѡV٨α2;e@Er+TK n'&lE%|.]}'YZWN$yowzCCoΞKV>F`BI8\q1L)z{m5JM|xEQy84 ֖KV烾tC3+Oҿ3KHI|~ԫ2%@j:G%/5Ĩs@@IUj(CD5ȦƅCP=?i.aLIn{BXP*ѵ<;O(T_GdmqlE,#xyc.i5WH'D\Fg)${)K& ͓hFfćWIjB1PM TRGUǕ,&#?\p(7QRHc?e$Vc=ŹQZ洝.A4m%--7wY* dŃ/i9K#@ @Er6dzᨯJM9Ş.W*EVy+ D6Sf˄rNqV!p!Z 8S G||ϱ;hNY<@ՂIO靀TP6֡$m+Ч9gM&g2 ^I'E`s"{`N๪hU©lfr˙X}TPDalA׍S = @+_::%%3 <{E茦R=V9Y~pvZHrQv#a?`z'Xx `NT+d57|}W _xIT ױ!ᜁ _ۮQ;)We=p>*PB+rb0!WTmSntP2%8fݵ#GM xC(geSs`vJn32@(łY|peO(HwPL/~jaT#=ӌVldiCIK$Ug,(B{hoc;mih6llg{[R `ᆹ4JvNMqݬ/_${ӥ2 3NEnM_sI6a dN [|sj4or&6>._I18SRDuI2ōD4]Oz2ϭ$nͦ_>:= $'\Z_D0/)AXibbd~Jا]9~f2ƯxcQ׬Pzq A+lEPh-s3]b' K ^*ƪ*_`HUghbyߺŗ~\d SQ۪$ZY: =z:6z.5 $+PT׮tS2x>K􋭇9lXP<hNQ;@Όo3na@Hw 򣯍'҇jvپ&ӻo5Iu<ъ?|{,8^yd^- v'`A,vIv7Rrɼ*a8!e}p >uGP`KL׿4^Vf_[B[Ls.zT̖@@#RN.X3pԜV4*'L=\t;RU37FsGeԭmDM ~w*>z ~ edV4s ߝo}!M̛ U|ѲN6^42@R[1ـ 6ݵ`/e`D|v+TZ7io["=uްʂ[x@ TfT1# 9(^;+v5p koq]{Ynރp "5 q~.@15kϟ }R&Æ4nYS##6:~>dR6q3:VDf]y\F z:b:P'.\݋ Ϡ,vQA{P9h.M̘酈^(UA?(N)2x,w@sa17 ^0(5*(T Y@&Ժ֗lH=I8Έnvd3ke6 {JDdOK{drc#-nK)qǑ8nlNw!pң t]L)熦U$0(G˳Ц=M;G& 3})_^ل4~dM:ſ=O ~0hJsWU$G j'`4 ߄FeKvg#끰G  pyB԰ ʡ;CmQT< sVb}ǤPJXQK,I!77 sp M7${Vd[sr\IBP%"Ne rmD$Ux?{YO;x1 1.Mx9Q4BwB3֧d(]_Z8Z-[D!ÚZoE7 YEe?bYDTZj(=@} 5M cfS> >(snnA|: <Ж)Zjޞ}RA Lci: nW΀|ti@_#A(bb>L7 O}Y/=If]@8>wpPH >z`G9nk̀lBQm ѩ/͈&jX?:[:f7ћ@D(6_>zzurCƪ2ߕ",KD*R74$It sp })m"Pv{d=_͍x{|U!ߑNO p:9&.ܻ9Nkc-ffOwgѲj1e %o 2ngvS) C gG^"U8/wћbI׋*(齾=ŵߌv={&@#PWTwJ5Yr` |f,r+*c 0K}88.+{'q'/ )4-9'Q`}dJGB*;~7ߩqd!`5Kρ7Tr>qn'=Z]?ЮB:dΆ_d*J^|4(XBFּ:B< 5z^ MO̧T,Fr^وC[@Ɖj0y9p!Լ)=exQYޡ"gZEYo'R{y{iOS.]N.nD4x` ~ITȖMvEKyo.QwEC c%rru0NO`u;9? ;qʖ.22+ mkd.0ٞQU"eu](ߡDtK+l9F7Gƥ\ 8?oi ÂMBGYήmSӖaSKS:?»Km/dv`ƅC7\|FlfPV[ƃr3J͌ݥnB3(0S߮ؠΐ]d-;;ηƱjc\ 2 ()cn|R$}Sf#?qzI{RU9eأ +š :r}/|-!_IHf7ر 969NmQZ h@IuDlBWy )vH'`X S?ٲ(%=<|^<2VC({hH?#]_(Jk}_k@OQ0|C.ě~y,Jx`IRnh󁟛<e)55Dz=Ǖ Wg5AItbOrbwM=(/PN|pCmdݷ,֠o'OB= `^/1)=VK*{ Ңbt^[fSϏӨDgb|󿑋rդMơJx[QԡOS2A %FZm/4E^@iU"8kM^R4sw/H]=!BMǿvo1؆# z#;F! b1F*(<$/DEm:4[H]3"b/t)+XpoˏbE?9u{(C2mMN&4kۘ5Y&%a!پl:eIݐa͙Z &1 (L \- ꡆO_ =DOٺӫY\th'2Չ۔-ɳ%Ǯ i1}TuCzxڄNc6=ȵMJ?繚&|^$ɮyJ&g(RHwX . A2@5Qc AO1(O~ ʹ GuD Β4'4 (+BB:-D S5 2`ؚޓf q?9"C^O*{QM$2n C7O*,"#R9= ނ|u2Co =Omdu6qrq5 [WBaEݾ 3< W (V*>#E7lXC]gJ++K-?vYPj+tE7 Ipc4G.)j)sJ|V2HHp9;uB.J7.@_DٞǏrڦ7=$"Y7HMTAn&8G CtPLc폈$ &0om`p"@H~u{O5~q%~4IYmL/&˫yjOJՊ?jbC{.v \Q7@>\,BS7^nn˞Dߗ9\Jbrf8nWj-g_RԄ+ӲY XJ@Y?mQby@kGw:q~R`2w/}ME|cbF~;ZK\IߥJ aY;5nT[It7A?H`%~gOOc N$YS" !ڈv07tN0. '֗/ |km- z[<6K=RR~@C/ϋPWq!Dq=~mb}#4u!nf_54 ex!z UShUODN;YVe'N ؿHۑ_r.o628E[ >u3B5)]ePG;J?kTbS:4bT^A&%jZ'y"٩"3.Qpy Gwp1?7NݚV3,qszUF3?wT15$$AL˚-D#*`.xNj%?fı=}(r&-(T8Q)ȱ4N @5%!aMTnr Nvj"uOz}BJ љC"JAv/-"gv-܊D2Q~Bp>D,Jp#^|;S1z%~:0"l](G_>2XBI6novnn>pޥ҈i歨^Yt(0ϨWKoZxpf "j"=􂸓5 b_)q APmXA9N;~{6\[((y,.ذS ocK٤,}y.E9Ԫ"TӏM^Q  camz:%dTlo6jE ja|uЕPj-Ѐ ݮM ?6KB%@BTKĿ$Dzf}^J WJzʉ- 2ykx`HdVq_A7iFbu'[0.1~c" ݓ0Z c?7OYL&:">nJӖUj*{mi"Y#{<̵TN5uj űuoZҷKA6r :Vm/x TDe;[3[Aգ|І5MK~:5V#4k3Z@TrnؼwBc/<"PW#qq="YVK$oO82CЩU 'ǩQ2gGf;V^goeI8Ѿ_=ddgnHPSk"|GCz{Y!cu|ElJ~4  {-%v7Y Q3f4>Ffͤlp$O!t!ZBDZ#ϒNTse5DF {Hz@@:yVt&`<%=]Ne]e8*dƔ8 ya$9-WoӂvM-_Z,ٗg2v(-6qʜ. E>N58}P/4K!(M_Dhc4Hlq&pOk{=ñ(o20g-X1fhTs̸e"Ex yEX![yGe-xx=n(IT"qДgXonj,T31ҭz\;U1Bۈ#.`CogWAWyL}1x)2I*[5Kk&朅).O,tR\RP=( N5f( ~ͿiJk;AJoAd]U7庶x]?O /NZjױU[TC.#zorU6L%_ HX&>l_fgv1a+M<'}b%[ڐgKqgҎK҄m8 ,di@Xh(ځ'+j6ldo!5ϓ=ܞ6 J>_ :#Imase[_"kgnӻB.#CJ@Fs5/P/W<9FXaFڱeum|\mtwL%ʭm{"@Z)SՓ9Hl6-sw\A?sa2]o*xeHūp J~Z6Me٧?/_\v*Gf˳{}#VXy>Q?2Ʈ6u=lKH_64px5^Mq:cxțgOg百AMOC$ਚ0}]=ZJHŠ^W>bkzy[~o"fG^O/ȎVbXI7Lp0hѳfm1&Ly !n%BL YJ: B ܩe`P %E;(T'Ntdp728b_أkI^S6_{tq+y^a3푑X"o;!$qQ~@&usܫR([UkAΏ '_):k/sq.T,<-Chc3wU)īcS#̎ d&DGAg3Iba{#2$^5P>;W*W}k#Fx]QXϔYseHڻ#SwD>QQ. 48B՟*|̬`%\:3Ffv{=P/[?p|4#@*mOnN$oחE*DU'm?` : x CmD?н(P-ѥ1=$Lb)全 0_%zȀ5p1fH #.,glYV6tqxu9D-@JdOl.FzA,bFqLxڜs*K𾿢J;4\g_)lqQPv~$#RLqxa98FRb2Ky}XR ]l1 i7Ğ~ e T yyG82^Ž|z9eTh cg qk3@Kĺ`6g!]DG'$Wz_) T¿H gZٞ u T!q if?D5)FW;dd [Cs//Uhpq+*"w ( #A4QUKmY.s_뒀.< RSݤ3kqjq>=w7S?Qt!I(@þ썠u$g̝|K30MlZQH1K!M_kM ߎD.P݅\_M15:{ȷ)))`:*,n*fp4Wsz)j3|RS^6uj8% ¨ώ|!?1kn#UW .SJ5>4AI\J͙qgRhCL:T^δk/)p7j\G\ĩW{* W5/sK A3m%2ح&w f8q9bcv!ɟ󻩐5fH 3,g2,C|+h{N7v/P9/;"w Ȳ?bW?fȤKP!+D{@?׼OłMP<2B|#! ,皰*~xHr$]%;h?U/hChY!/rߒTD(9L,>W܄c6CɖJ߮ =k{50_ֲ 4CF?i7e6bSSBP~J`Ƀy5qN"HngDeM +il̖ij I{9Q vZy-CvG|)ɸL(ѻlvnzn^0:~}Zz'-DR( TeL+%eCVxz*_9N9Lz> `ߖFB~|TtwN_ρy:Ͳ]eۙg6v_n*G!~ ʡF%qP/]vMyB Cz][z!9(uD^ 8* tup5UzĈhm\N%P - ^2fQ|q ¤l#ԋg$x槛&vcR{iX]R$K/&Cv]ƕ,u1,#_O i1kM6WEſ6Fiۜr': Qw2\R ᙘ G~ 2ۯ\ۯb+ iXp R3$֣v/(8ZJ +o!] 캗 p{C_e:%(&wcj'cy!hE&TYcF#mi:`b4$>s$j+rVr7֊ϥ~G j6[׋X87:mF#s{:)~L{W |Y!@C7F0_V t.-5Wk/[+kmJ#x̰63M_!)tqREP'?DA>}kOARj.q{yYsVKQniΌ#=_aƮtR%2'Vv>M [8"Y2cka0ϔ鲺 ͦGg< UۀwVR*"w+{w"+(PYde%cô#KjWli:`HjaSqcP4$*?:b]+Q=D)CLۭUWКw Rc{M4|w̃MZ}H9hw |[L$otw"M.ɈYG2Yi d(0x ^ )ޅ?&r#$1txtD>lh„]<*Up8rVrk eзYsv fQY'`etl@6fjʦ[I云CTYb;JA4܀V0gq.p fYO}H;GrV_JETZ0As2de*? {TV֒k4,9 ,p _ٗJ<ヵQYcҊBj⭘톛Jc(!JX>'-j3"a&jjZ]ٝ@' !f Do^FFCv=ܴ\ٴ:|#N#7Z4bkO<7Na~20tF)sdr䣍V(j]YnY axX S,{^mBu@au[. | GWZ'mJG:]d"0o+1~",~^ \vfeJ(C9| GVX`X<͂rYcfٰB:1C#änhʹlIVNlEC0>Ҿ%ͻEs(~r7l:={ J1qx(\w sp@?raۗ\8ʁr)߂:l9}nfo3"{M8\W6Ҵ =C4j?)KWDpũߐAC` ;FFZ{xH᧖ < Vn<,7FB ^.>ZH"#᭸S ; s[oymSffv}vՑFևnL"65;$6G.Od us_G,"3B&M[m=w E.{NGpGs-r52Mjpg >U)Gov]%-z~e(? KTV13`/21@At#gn+kM6Aaok R}E7X^Y F"&|]dJp\B0/fJv,eK]PXrK# zIKmUƟjGEj$GEG_薌sv~%#>悾Y3R0ޘj)PB?B ڜOGFsޢ7sh%!ݰito = טݴ_uO d wbWpnv'bjE@zC?lᎳYN/۸ K4l02[çCx-A$#?FBip>z~Eö{Buy_(rV}guDQY؋6߹"DzSYQKZ 60.rpdn7p7fPRyGI_ tT`tu"-)n+g~CFA8CmviQ^=~;BaJ4x5O۷{x"8oo3ub2s`]b@>bNTU4/C7:XV0mo<N1 &q9S``ϴcKZ< v. sK8M4WS . n{Jd/fDܝ{@(kr6 'O3yRWۋL1ܑk^"{)kNvH-ɺ477/B݇  (bExG0 RhT'KCg3j`E"*F56[~@;@ MnM$yØ6/.!\ER0T.}>V#&Ehk"'2VRYw3tÔњ{ޅ(*iS>4"sEAب IT裰-9⋰;oDӈs]U1$pjAL/JɍCSQ_  YU.VFY9lpɁSpRϦAYq2}ߊ铊 ҫ/PUY&wدщ3Qr$ELa[>r; QRS!F&@b_6W[Ě` >B^r؃Ѣ$ \b~N |]]6kçL\\ܣ3zs:i2e9κH[85SjwJYBs>sx}ԓ@A7jR5Q4uAgEzÎa; Йv`hb&%qKyݧXAC|%QKLQd| ֹܤdsX2o76?( U+A!* 7{5RDDBfU0H_zd}Ndw0j4fZӪ@ ?FhW.Eq;ah'Ɩ<ג, ¯ 8P9#A܌1{WHP=Ǟ&mből?m~e/hM|Zg{ۤϵv(d*H7uD擳427fc0 gP=7@,^pq^,!S(r56@Gcn2_'('|W Z{.wTRyvncfWX/-i_ :DžhC{ua@&/Efoۜor _z{gT򲲑< yW-aEgz>6Y X c -=}L2^EbQl9OS3u ͊&| !lϰtA/v&NmK WR66]t9WBX̲/cFտ矂5n]Dʽ eWLy}s]'z_~$q06٫=w--vǤuǜ!BMϖ^xi<;);}"Z͔\30рFn 4GT{5]hې񵾂Y?oܔɘq†C ]OƠ5I@KPR.GZh@hem֨_V ^tM"q-C8'✸w1 2K0t倹8Gcqh<&lT) 5tv}YK!>m _ծq*%ho(>3GT(Jj$-7Ǣ7_>a<Ҫ-KpS3~Y"p<ɰG`\PP 'DqNH|23u%(KBs@R"4M^AC^3~FD |:՝[S/jO8;wO0E9 h ΔhWYY?#Zʷ\pypC143(i+4i ~9r7NknpH,N3+ոBD麪 ~dq]ز_B1徖A}˔;Wc;HG@%(ekvG=kkVs}9VHj ձ'F,ͥ6jcjh;qH}Mvw6'cODI9Ez/)ڌ3̰D4{C:C, H:r-}ϡNO+c~]l$Yw!!bv7q@qU+&M6ؓjKRڸZ'm3nva*$jJWjMyG1-þ^]2Cxіo ahK(q_j2gl2`ݹݺ_ CDl PVj4Aj Ա(79rk|pab]KV~84Kr92xq㪛=*7c9-/te;+{ <Ҥs߽SSkXU7fY9ȅA.ϲlW^a6S1Fp\&8,0K6E_J\ҕ@z//MCټV|lGԼce03"I׾xEoxpnɥɂLwFk T9sI/ 6?&庝! 8ic|"&wcK)*ck H)̐h-&$w3&5/u!9xuŽ__s`ŵDg<~RzNBk@mYOa?/]:Gf-U '#+EZ+ab5<#(SH𨧅 l$@]G 2{T熛ޮ*oM8 tIRM{ 4љSHSoiiSbbڍ#ثp x2hD 2\B*̯i*\qX,ټߔCg|epÁgqʄ7]*)0b0$GBTL]aU,a(]U+LcY!?9垨9I' >߉xGDV0f+6>l:ۡX[N\ۆ6ښl^RW g4Yţp՘Ğ~HpFܝ M%>[17FMq=EO{V`=Ǒ}3IW!litX*Ib`>Kr DiBs76v/Bϲ>h௵b0EY|(a0?'x) -Ga2DČqL N_]UҊP|*1e=ŕż!;8$]w^5HTm?ZytF(3!vO`Vx] yj PHoQ'd;-(}n#dd5VQ16>#jmFHv| GZaG;TyN#BdKBr35EdƻWb '= qe++̚5{J(>iTF5qu~BAwI Muk5{ }-{K2O";ٹjKȇ7_0+1[Z9 [~3"䠻W& 1n q7\:~cM~4 yq{V^۫eQ8Y@f^CkT<&t!1;QDBc(/\IieLgFQ{-n8pxGM#H`2gn3 3`y=fzŔ){ "աf[*|߻k?ǹe'5Yz2]eOJ/Oiρxū`%-!Fv5v@Kr "(YT1S2ܰ1&IJǍ W5Xq鱀akɿ 3Nf%?gHM mʳ@֊[ t;z+3rO,[v6lFXՌ`^3;uJ{Mڲ{{*޺zUz'u׀dcKxEmtK LRfq2Gv.?tv2~zh bGd҆J8C];.J3j'" nNM(YVL}m=ߊ>oOq_EdQy)icDVҰNES?]Ptlي*E:L1Icu-.W٫6e(?uCWS5}E˿ ^sr랱=jawӠݵAV=dN|1y d"pE?cvTވ<)$dPōP{Gߚ @:h*o:v-q!5\ `R(|\䑄: LUX$Y)}J+ufgƞZL)=1_u5h?<}w4S]&z} /m}M4$AW50VOYg|ǨB1)e-&\+`"‡|QVftĴ\ĥ+}@Jy gOy$+#WкP>V-C5ۖѪrJ)*6Oj02YW}|$RfR /,prk1,f6]HZkk"b?Dλ8@6n7.-9g}*}K QhW7wl񎜣$f* e +ؿƅ",{ f5N`QĴd>% EQS X9˃ wGl%. 47Lr업IvW߀(Vv- GPP#O+">oүwtF4W1>V8*jJo]ygH{M܀b^H?X;C,5a,56EFE Dٵb\ggm5++ю(:%+z+{{<ܩH %ڇGiC*mw'?J%/X *,^XHR?Z⯹0`H lE5b0N\ z|/+@0o#LƙV>ƹtlS cw5zP&VԒ?`RmB4C~S4a9PYaJG_=_($pU+l&9a)A6뛖j!s:d(*xg{oX~%aFJqnRAp<]-ҡJ&gܞA-on/_#|5if" ZboXcmg\5W d[IN KMn<41eD+ahU>' >mxЯMӬL!l#RQM0 ҷnv{D*4Lk6-fi;uzsq]L1`ҼX4˺ `vHHg9Jwkl:)QftN-"[]m' "ia* DNzXKб Hҋݖz6/2(uFSu:neԭdL_qeŎfc~ݑה*UbdSqBHMN94̓Ezd3Aphl-ȣuO)*==a D?%Fѐ[/˯d,c6 #{|hriP<8'n5E;uFְN,ܔJ]Z*2QK2t7ԏ>&26N_S [w*ՒD 2em.,@^pnPpFaY)ᤕ? 3d:8+& q!ԙΘB5pr3ў~i[B\[5 h,ظ&fc tMO@ ' Vͣ7z=^YJ$^Ɣr/[cۨw_]Ar tlзZf1)X=u!,5X$ Yu٪PY;,Wtэ"2$ %V&Tg^X&3< 4^.ʑLz|ޛS6sIW=| }+{$XKZD@?[=?h:*ԥJyiQ3`2OT}GsO@'j> 1k]f\A ː7#]dM>VÊ+NRQ|~Q0{$1PUꡈٸۇ87]OHB&8*%dѳI[9m%BX-..Ss-]4į#Zh"%#FWvnɼ oHt9w~(cy,&aVUW%3i6D1'cÓԊCRPE@sj6k3Ql $99ٍ^)۳d^m#ݕ3ڔg~B~)>P9,'<њO[{ Mԫ\N:ܐۅJ<'EɖM$za{\ftCAB͔z>Vaf_+okR vf(t ZcএB"(NiOk 6uzMe|V&ş1J@_x=ۧO+/>V|(pe"N B%W5/PwWDF/29E{+ć/b)"K9Yη<} +2K\;7}NLzNqwƇ)+ Qeo;5h"9}T&4c4{]\P3QUAmk9 p$KYmd<'krlUdo[;όlK]DDN@+:pHCNwV2{}ȳ-~@=k묏2x2kt|^9jLM#6QɻѮ KL,]@U}T諾!Wƺ JBL +цdΙw@vQ$8RC^R>J]?ȗX}= ,.[Ivdrmv+ECimMA1,gJt].䱕p{ ,\pv^OFd@ő ._yC ҽzZx!P;R/8P,LiIT#"kD oTތR}lK#Vc#EG#V7hHFSA!e>x = 6Y9ZyTACTt\ ZAaA+X!+ҭg7SfR:$3Ya8w%'orSLگ׫G- z]'z_a(˥lF7 Y$39Xav@ )~h@}JbŠ}MZ\A1A9: S. ŴUeAF=d!܇飌y~)`~)5ݙf5ֺGRan-e[0rl+9/hamqhdef!z;;qJA s>c?/LuNgG.|.Q_PiE'/ xw9'F1VL^+C'ݬU|[N[%VUpr M:ҕ:In󪓯.NL1ttAqOlhO$Qk9{Oe#OdZQnr,#<.GHe54Td9:u+qxUP!y\Ck e'>o\ +beE-+ ލVB2A$rA,ʹuK|-WkoMu[PQ=Ws#&QJ`sĩh t᧛y=EVŜty!_c:X kGֶtc*b*Eȟ*hݑ؝&Z8tkO{ vQ6fZ/6Qn %AUpFAt@_xP $L=0_/+˹']B.˥iHͬUG8 %*G{N{g燦Q2,e8Ԯ~-$UUwfnu=}gq‹\ϛ/Nŏ!AFУ2gboH"ܙBOnW?%SQAūPnl8>| j^=\2[6T/r3\+tAR<0[f!:[Sg_}Y8}џǴ>Qvv6YzWXZatY Fz*iM#+J)!W;N?D M?f`SEv8ks&;S+_ďe!oa/t84$Hd bf0mMM1Ic #-:8>hЖ{Q `sJYC"^=%R;w5=R2 oiVk*c'X5HTE=}X֩C9 5{2d֏e0(}E[3Ư>Ivw̭4`3qekFXvzDd*x.  Ao32sً{ೆ٤@A*x'*-W,Hhml^{pt.M˲Y`e9-ő,Cf:n5͇VH 1U(CUrᓹI5qʻ҂7giP-琄 91O - 8Ez+vo^? }6 _f=kݐ|AZ^wgOm()()'z c>^T}ܖsQS[D=\A/ё5=Ytܹ8 @@}QL!1i&H[ *ð=9bB%ʲ/O[zg3^ zf].356c n(ܸhJR*zel^r0q+ۣW/TZ-`!wo4zh$;xWs'^C@[( )!/" {7/:EY1O,^#L?=BPTc6VHYLCYUJ=0)Oo;Vأ! $撈 Z޳V-^X% ٗj== 9ce5y:4{2Pu]=j_ A!z{vXu?Yؽ9Ә "f=hH?+[^ejuv4IJmyu XFnsv 0kbe &mÒK9؆glLP5 ^rW-F-y݅W;s /͍~"8ڹ)Ww&Tfф%6RG6y<+r).?&:to̱\z\qlw,+ܵ5|\'44t_J]V-G!0DC1|2Mh_;~/Gh|lVz|qUz`8R=ޙ6sDealPtцZGhs9=>pGIW,6" ɻm5SL7=ZY.xoʋ\Oi1BɎI `YFxRa: $Gzewqݗ,vsILm^>tdTxFe^&Ռ8P+ٚ\lxW7c͌ޮV\9pWRm 7HU=q ᾨg:8 -oϝ>DcMn8pvkNS V@pup װw.\y@) T(̴=};|Yo=QN-;Lɸ[@JY6 Q-ȝ 9GݎL;|[D /5fX |F]rq:|;qZ9TM$[7ep(ɉyQZy_L4Mn,ȇ>$ ._~f^5ܒv~b3o~+Y%X(.65 QѿN4{ҋ|.s[ô=Gbzd"Ŗ]NUr,sfTj501Ą--K'tm-_Ppc=0)|PfI[J[{ B JEg݆'"E0q%ll?)l\'J=4 U&F="ui^҇HhfOB/Ghڧ~Ԑテ8cg]^C`>0@Ņ G!DTyVK~W%Yd'rğȈ#+ԮB}i g%*o5>6Gd :Y9bS]b9NCg\ sS3 kZlI:㔬R"(ޫh v׭5r4cҲ1ɷ 껲p$ Phrh1Y:7dҺXvx%z]T׵av&ć{U>h xad0[QO9@[ƳG56..OGi] l`!)["Ȫ ӳ>ȅpe;6=\u3s+n5"=0iΫ2[k9vzI?}T-|~? y[ZT#&>n?Uqд&b;т:9˰|Gx^Gx*p/NUe,YRAP2q cJRjO媟3OϴжͰ+3*WfA6ͦi۩ K_^ץmOZ(=ϻCk@1㿜L3=Ԝ ̙+qT}qږ׷x(1֙hzDyuo/5r^+Z zj)* nMJ!)%#]?`\B^# 0:( &+U/wa_\x P R; UcqTH52RǡVLGYJRt@ %PȷJ^hפ?;ZieX2IKʼn<2j0m#`ZMXf( '+?N;!vG26ҏiwPt0k9J;ZA(ԧѪ2yӰd<Ou(N+TozPV8!VQ=J`Ǿ  WBLL, `6|LWHvh!,P_ #az$&|5=_k ϕbGx+Lhcv_ag8~HL+gfKKDy'8D"gEbgMd(h,9e Iq h9K{Z1*a"건ۓ·`y\׹LQ7Is<"14a^uurwDzT G6I' ;Q&1tЋV_)Z Rlʚh܇+ 6CUQ)i_~(qQh́mOBDSKؼ_h9®E,u!)>jcsŴԒ7LCb vg1Jya\#Li`G_VǮel>A/a赺kX0WkzR_EzL5%)u4BsݾJ!.HƷBHL-ICjiIAoXzwHXÇ Ca;[ܶkʹt衾u];B44*HDeZj~/;7P3|]׀dWUQNH̀۽ ,nz@?0u3R ˥&̔PgB n/z#ߎo&8NS'4_v2yYyOU` h4 ֓xUqldjW xe.@\D[0f5?s,B,BXT*xdK ;8m~ahl2(p"J=_]ioL?h@:#af Q!?y .pDWLpN`J*)t y%%p }DHʌA|=!_Uwpu7t+&|V%A"QVswo98F#N t1v5O˪sPUb(ޓr p{)P6mkfdIq(`h'GWuYڃ:sGo˦BZG?qLm\F}i%:0Ԃ.ٹ4ڞ KJhҔ'V6]fC_@R @-_#--j<=ڵks@}qJyY0xwS;IjP9VL@g b ~ީ =;Vb~ivi쏅c4{}biHޛ I˪37/Wj+Zƚ,ܴ/J7bGo` NĘN~7É#FX/`T2'xaA7Uv2iiT;Uzz]c>sd;BS/bLmAy1^jK?K4&x4+>%?0mPmg91XꨳW,=-<.D >oѰ១ -bE)J_LuG'21I3Q`T5ؓep0 5&>) 7Wa=Ί $LtBKPyh:xrF__$ad+Iy9nQl!b{+H-u/WD =$cLۼ z!*Yzaم *ĆP0oAr=L{ '1H8˙_mqd-ȧBL}ym[$Ȓ'} {9VvD.L6۰gOGS:!vFU=!O;BaYy =6kHWčC7. >/ulzQWZ[^D,xw׃9zSE? ָ' loM@(M=VI7.A4+)F޽5G/ub GPޜOI&H'a;>3lR Y "RRLuܼͣe4 2NVR?) >xǷqQځ!2@:9Sk\SXDb2CZ[x :*#Jx鍹E&Nf;ޡD-|(,{JY+Z6o3Si7 Ak8l>rՕ6(7%?f]rJJV8tjB/ӈ ^(5)KmQOr8Xc)#'8X>CүMB;.7V?I*/$H9W1ml56ɝd՚\odsЖNi"_ gum.n=HY%)ѯ*c&x9u9C cR7U9z7Hy5ځAF266~]UM.51t41Kbfz߰ƘzQ RAGKȴI3 ,TP)_7;Xݮn/Z23NUz^v`h.lWb@)0^w]5Q{ADf]M$P\nu.ؠA5~ -IePsqòׄ9b6 xsk,ƴxl* uEtT J{ d7Q_i ]'Ўhk2#j)9j6Too0pz!Ŧ +Rӏ̸?] sh\~ b~?IEi+};yB] a 3ʳT[}(]ڢRH]9hkTb <מJd:EYnUiI*^Xt *Cd4>O,wӣ]>[5F1n+II@HI% =gxnw1JIsRjյY>vmHq)V6)ߒ@Be,&ȚyFT+E(/t @ E mO Z~c{}kQ"v) Ki04@lEӥ#ss!]z3Ί'|\ɲ"?3#r|R\kzIs@3rf@VfTo(㵏1fAx'G{AZ5ͽ%*w Gt<_kޙ0-8M^3@x=OJlQ!xqVRz(rW=qqЉ*:ys۹WnLY6mob#onm -7Ilܤ; bIl9H!Hm"i?u0# *>)#̛d )Yޒ411Ty~=!)5B~JSXNBf?OKTap:D$M:KQqg=,-BZW1_F{8΄S'p!A?J/LS6՚>tr[;XmR0myVx`}웸+H6Ⱥ7W{%Ʌ+=9)4{RYf8+ن#މ9xnŢ)~ w)WH.c^jL;;޾[Vi6LyW' jF<A&Ll)HvHu4 Ld F{n2RBK.@ҝNf1>l<.+͂ ` 2Dy7 c*,fЮps dJߺ3O6m*}/E9s 9NLSdօZ2),ʬOtJmTd9 <e'.((a/(5龼N%_S'?+HuYk%,MYӆn5.}}Bd)W]V}#3Kxd)Hv;3Rm:8>Z]T6xQ"DCRc ip Tš4cAE?q$V9H5i'Tqa[_-YxNŽ}x1~{$̟h+g"$+&ʻ*jra"R][ -HÎйLwEZc ٰeOKV Q݌|"MS "@X6 ij f~ ٤h /K0ņL^\Xpɏ `sO'fwTjAdxI {td~bV1N>{F*zËXʤvC"ӟl#L,D<@'0~2Ihp)K]_=pnԔrp5oeQ}̩ _/S\l@ u|¸mjU 4:MNgUmYwZav&řm7~B:Hy*k'geG72iVanJRgf$H So#ZKe+"J~Yٹ& 9=Qk0 8qpl︆B2{XATe(I08h2NOm9{$F#=9/!QUKПZTyUr;2 1@P%5zmĈpΊ^aa:10?ݍ0[DΣW3jSڜh]4uCg=ןC\R " QF%+o\YżYe摶q'mP{P4y1^^W mX%@?O6|DTWT/fiis1l'u:PWw ng~ZY^,hQ͈lF f&Ⱦx $T^wM(A l>*]o3CeQ:㐑i6EßcSOyYxV4!(_\ ~mu ٔ+5`s#ă>wTHkk0qV39 .Vd<)k>GNc+: 8$IusM UBoۧrG&NKhC3[ј3Rax@,B'klW]1ὒA}^([*\-ݻ8yPkkTʺz@~KJ65w-Ld<Ω5a-Eb_+l7i;`PPͼ:%]rO^WU5G ?:k9dJ5{{7ɋcbξw(Z?ݴw ~w}c=o?z3*Bh)! *1r6< CHxYN vlA_Lxnot-)zʤum[&"$?gh3ّC%evh|\.BdZ , K }Nbx\At"Rlg!ΜZ5N3p,EslO6bo05hF/L33G ]R*Ë 8T9)N˗3xqd&t"+>]&~_mov}^ܕECԎ&B~Iګf<8~3-}yFʹv_p%C̮r]_@8d`箤ף:`%k~ك[H[K1VWxd,)CsWF5hԻKVэIc-ͩbAΝaT`JKբ(Y̜Ui.c >vQm8V@ Γ#g*nվi;:'F&liz2#ؓ|]< mRC|iC ۯ{ε|* _dy&7oBgd$6ll|`~7@  y9y[ZN'Y{c oQgmy.fm5sB$~#]=OʬGSqꀳsJI*\ESk,lat0[)ʜUp25jjLa? V ~gwWz pgK5p剑"UBUm F$WnԽ "Woo]Mq0~UJlm[*~fg <ʐoKrlKD1!9o hFd;1{>FP kY9SX67Ot1 ◬*R-)Krg\5&d4kq1NA[!oA]mR%DH;CgJnJɈ?1hcVewHE"[vz^ӝtop)`P#CB#ٖ  b(]8$z`*Rl8Q0YD+ 8.&mu@IPT"P)mn ̽>kܬg֨DZ_S/݊#+SgN g;wh$a[gx$T.̸A|j@wFZX?b&Q]FLz~㢷JdYɿΎByˆ`SĿ/5q2Fu-/,T{bǛuvVƫaPMо[u0y{Us4AwUX%I|5Ej2Fz$FCPϫ jvPvXp@w 4cx@XPGtnj)q{\C ~A큋KKy=7[Bk+JM_ *j;3txȓ1W r -uVV:XY'W fj75:xvp=:e,E3L<@s7yt'LNsaZ:ӒIn1CsDPDƊ_>lȄ: Τ!uαTWΖ 1'iX>FAmX?njr9'Er$44w&VQ=d|(#@_@23b#ЏN[a*26m͎a[a7$J6eFB5Q̀G gN,χK LN|ڕ7KOW@7x_Ǥvľh=v<Õ]Krj(Ƨ<={aOBn:o7[Bl7XOT@d>!%R? .ik9j<d7<6(uVhGLpmEsL ~ƵޒOrWV] ݰ6}BWxA%6GŠJz찞$&҅堺TV 0֛M6^s|SIW!P .M^znbBL:e0K{R\i4ɤ`q?TKMLZ̥Ib.lq1oHf (3GqSYm[9|%•btiC=MI=ut}A:9lj(ӗra\ p'͕oj][(OX|KEJ%Vf/zߜ)R{… i4<4]Yb,x8\<qjPt%i?EFhJx2>?Z v|~ l_z.4*IӕI#Jqއ?-G`*рLI&㍪/tC=yMab>^;ГM@SqEa %;;1kŌ;hW*ЇHBjJ[4dxsh5Z}%`>'b+Cs. Z]zcg2A',9sQk ɲ{1&7K_:_-۷ )^viKW3 `=-(P`nWk g~K0x*ڷWA6p]uD QݩEM8, Y I&,!ԕ}2i{1>2 9a(v\9X}clxtL \yuR6lSr-jS篨hs'RM vrt&̪ÕL8PM$t{lp@sLS[6:v{M:LwI,[*](lrK ی\sjv਄_e) (~تe ę $#>?riKߍSܝ#nnyk",GB k>ښO~onej#S4J*emB u] J(-5*|IM%E4 }𦏋c7^GZyoJmU씝ΚQuՂy 'CrfBذrbQ3Jk ;ße"(G |3{ch5:{ jN !a0T1!g pv) *&&'(bX#˜`Y$*%0AThTen(=F44(x-  dcO;Q),n +KRφŴƣh߯'qG+=@y"v‘EVqPڠk=,ۓ+km"wIJàۖ> &QgkLo+ LFpqrE/-6Hv8uzS\r7>c~QB#UJDU#lig}.fV ۷Lmt&UK:2s.%bW#C K.*kVDn6~ QX/JL8>:g?Y6ϺNqo4`;ꖧ1 )UMóԖTP,oI]1!% _R}d0\E9am1gmuKK֘[ Q{"aXa<sDH2nr=qamX}L]iw3%}hq50nEQꏼE{'pFRnjxSyU S(+˘8XPimfUN)>Κ.s{CewyZ/1>QM=/;Ms&; 'Λ)i..*Ic!cuc2Q,_K-3ehovHgc.Nmھ`<5!{r;9`.ܻ;`qa4Yz9&%WΛ9)~͠Yp'ar`7{>8M#KZ &P4;:$⡔BFF̩}S8UA1 ׷-ǔR!E<~5`sL(V+O-2"c&̀YK}*9D ]_+U)?Ae+,㍗d]/`ӗZ(Pօrd$?TSMAkWD mCF:*&w˾gs[QFSXor IZGNsN:wle|Xlt@\q?0#mئq%%/ vתOhuQTŸ'[z1\ĤJ<`,~d5;9|}{WdVzu=I;Sv] AY7E$O/]Ii]%iȳ#mҕeaBI ^M_'#B ,lrn*nW]Fǭ_^XYREom0gͲ_Ֆus{ЉVPi`wH7度^`J_мp4CyT  3J_M.#,)Q70.BwOf?1u1.Q9M`!Ed\C}^-Zԯ6lh>u8ŖnWNmt2gY\( Vi~ Mܽy%3{<j&UG"0]5݃cxK.!I<ևi. جTOtF7xE_&&&\s/FQFS VAA&w0. S!- )ٹ ]+bNaToZ; L4,ceH@,j oI>:Du;XSf.0?HA)Z˳ɂLݤ낐7cҴ2ݙz~%i~8)|56b{:D8W(=zDA(հ.&UjdLv3yhKV= |nS:H-d7(j9jmj.t)+ ҅An6o?G'n`e浇 F\&qvn"/d-xQU&Xew@Avi{n{gbK<9V@HXP=& 9|iN'vFZ_Zկs]^` x6ʣu]+M}3u5\¶@(׀a_O/ΜYO %_M ؔn|WRY6St EE#Zә80J:bxF$-W๮cۚVؑ3F%-C'T[\Hl!Pj2;۹jGNA lK@A (˿ao)rr=KM<8A%$`LT=T@&Hf {>"/MZbMK* uVF9#3u:X2o/I؀jjV}t揢FBȃ樿qXDIРw ZV ?ny:jyD] c1j/SO:s<#`(+Mnh(q?;b(`x0KX (Bq_ !$܂E?jm8*NHio@ЭC?w \4Fcp3#qof{/"GN;KOc6%b}૜~vu1!nG:f*2-h6ҠB&U(oˋA ưYkgN8s+?w([>+ _7whB3f &7"0&z;nr9ڡO n(.ı36dׁVj}X4q!'!`7_]p t x<kޝnb` y)~Öo͎5,0:!WZi{P{)lf*zڈ|lwJ &}pӷ7gȬ7>3Ux7A&M=0۸0.?QIAQt3OT82’Z9sUBm>NK1NuTh'CfLq5(JHXշvM3,}"2au@tJyZUW|J2c4A$}H.R7vARz?]' 4tkOD*{34K_(z B%TYlMo:(\ ɻ:{59v͔Uq'`EAdXxf/*lF~gXXPÇ": I3 ҂ˤ}J_TrYtד!#ZB5s6Z{LWfɽ1fXL.Vd;ŝ0Tm.\s(UaÃ\_$o!,~Ld?UF?VE KPjz(2 U5$+[ cDļ!Ea}rGu!ΆKLenD)MNyu0^Kk@I("QA3{ew& |j?tX:W-C[11zmDstV8ȵGpzO쪞o,y>~}7hz`\7{Tv5.&Hڴw4%034jAqfG*4Pajc?@_ =_7e~omӣg˕{etPs3[޺F_X:`l"' r']B׃S{C$T2b yXB: ޗ 2ze_2ݤࣼ)^,J/F^Ue+ `;gcȻE PVÆOxCXyNX090F֧z.QYR"oB)yWHߜ:7swޙI#iHe-/U'&W#sj~n$ m-yu8hPCz 1\;mUWM-bFqk^!%!m4`sp3z^:Ԏ0x3ULᝅ1&V뭉әXoqMV_X{'ُ-y P92hTaWpi< Tқ 'm@cDT;Z[)'(%MIM>QgpJf? ߌiOUd`] ZLI>ӓҳtb#3 VpEɁSRP:RkT) %ҭd#-^6PUwm'2`ԫ Z굋P +@IѢ8e6{CI XJ>Rsp[n|H5x~.٘ҊfA=@@"E[ XE|}߮6AaaV/k1gO CCZ2d dy"0fJe K7LKJ"%Q)+]р!6ba)B {x+j n#ʆ~r6++S77Qq3[b5;y%"~J347(lT;ѣ C9b-oVpP9|7 ;"7Dl^RdcKfcumluݟtG-?WL1eX߉EDey3xp4pڻ"F|ȡo33n'گlqo߼Σ#U,<L\Bn؁ڟGCo2߼73R-h=/RDQԺp,,Rw Xn^YĤ{j5k=ϑZ>YT ѭ4q1>Ba:` Lj*[XZDhԯ!ʘ˃kg޷qc$>C E!q4\@C(\(rxFͧ D&0 &'Ǚ>)E$_Р-m Y'7e'v6.0j,Bs B*J3ռ; W*6צg օīU-%``g̵>R RS.Q S#4%|q_-{<J`k|$L0|IQKChT SWvVm誱- cj3;68 @7O!Mн:"]@3rI" t 6k-B@+Cu=&ڴ\`AppɄ$˥˞706R!C4%夰$ᖇ:ȽpbhZ,LZ{UUw!lM5ئt?$2MTH~"P=O$a8O@$M4{pV}c0gs__7v߳olܝHGP'=`Ǟo'mpE3X(uqo%-smhXX6?2NWfpR҆{`.˶amz/;#i}L~H8)rz&xv }ֳv`H;q #;\Gv2V#He.58I;lDMn"st{n=s{dBME/^5Ԯb 1Y[4fdTEY1zeiY vq$W6J~_IZ!yQOWfE 8M~+{_ʕ%Hi@Ew 5Hʕr J17atldH g"RShhMΣlN!Qb~*{X [VAb?L{¨:sj*Ϧ5}AWdr=765BTL7ډ@"kiMj$Jv^XhQ7jS@" \홢u#×;3Yˏ2Q}|#N @띱5:  $aM)nQ98NO g4zQ䵿urXIX^8$GKX1lpg?BGMP3*hBm%(>.ֽ|=I9uFg:QhxyՆV,/#@c2}w MO@/R$v 1s3%6m=s+`h<_Hik}]sOL% !-_0@ < cy`E%./;ޜFG&pa_%HWkM'nT:RuC][r2^K:EC݉~;`H||O,&zƮ!Y@h5)jڠbrmh0KG'pOT 9oL&d+ڧx ,c cA /byV1=7N%l?z.?Lw ܔUEr'pmyXs ]9yeM^A_H*o9ƑB{V(!|n^u7榹˔ g1w 9>UP];f~Ў&S% B8gާtd 4 -^ őfGNYGi\R1U܁x LΚ^XM=>M F-PlA׵bBy`KLILΡCz&z (\iQp\';&,$!>LP2bkK1{UC7d(4W^Y|FgoBgk:+QI%HLgYKABNlNmY5'쾡 aSJ/V*P[ƩNkr`%]9cVW(ʈv)ZSVf{g 0]2Yȟi~(>>8(~ U񢌾A(w#e¢ݐ a2A+|=Wk@#*i9kARF/ҏYEn"y@n~!m㵋@h Z5Z'߇1DGCi14Iu0 UK v%jNp9"=h)KZmmn*-?7W(?Zu'`Q=29 3E;NB d`"1MP' wG­w6΋\t tL_|QAl8ą%=Uɳn>b,VS -nuS4({7(Ь%")c.*zk D^Q;x/ t5R<4ܮI,maJ)NMT \N8B ]#9[֍S)$~IbM֪Bq>uanȯaTmܧtVЬ3Y8\ tMQM أ&][4Y9>S|x Y!*-&TfPNnW%uc"TjƔQ $Bd<|-^}XI<)~w<im+-,s*yW쏷à Kfdtri3+U G"*}^-Ef66*c^jحchw?H3&J#,2J'DџO<$~ d--!/gk$OzPyn*hUǺg9-,?D[m:]q?kU̐v Lj=D̀Se<ܟA;Xo\.cIRle{&hl4Av8niN.QJWֆ<7~b7I0L4O =>[&zjWm [Mj*+־|nHMɵ!}XA$+*d,/ZPL2jqDP[>+cIh[2{\>󛏔/,WtӀ-4E鱣aLޓ#\@)fc)3NaI40Ly&,) ~XM/X,bjNTvSZWr\m{VV- l_QBDK@~XI%)tq N\-mLmޓ)·(tծDnljᯗmWX}[,(g ?cz~4{@vN9c`P Nw~ۡ˕%lFCF6FLA)!0$iaHs]\eY37ۯZjn?~?=UQ`ay6dhϴvM_#ytgy8$tHPY[zs0Odt {34Bg"l Yy ҏEI:XDSl|yݫ bjbfu~7 :9BOXVXr6-N,4D/?v%a(z@0$$]D"#qTG 6ĉKEUq)R_,;''zj zD<Y8A7i&mOaFGHLC\&NF岫3nxyt$FZ\E"M:xAR̍io(҆L' |Jvޘ~  %)z[py%ylW&o|ϢJsnSn̛-*"]S0ޗo!mk^{"'#IPDU,e^NJgd&C6|O0K[`ܯ$GD/+]9`z<L{(Fe@! 4v'VwvS1hmmLӁi>J.܇V* Uĺ."ʛZ991)zb6jE: 5uJl ٝ+(f~N IN!%/AI!̆ϗL7+$U'Ң RoP h+',۬0UMA[Bk:֒2{fYTAJiHl\w v$eƪ: üdrToa50Ƒ虈@ҕQ;K\rU6@!mj%l9m, m:^lQ< Zl=NMBI'B,=UX1kM>ōmOD8Gi&4PZMv|{Dw&ͮ\= f^t[Rᑺh9ںREMԼB|ȣu٥+T~e0qlyPI )LoX̆q0f d;V{u{-.Fwi 2|jQ¡!ӖzhRL&Fz28SWI|e,Ԋ\gO{ Rx"|,+Lbq ]@(lc^KSf `&NMs ʭk(e"$ %cy!)H˻!l۪Dtoc|hJ mW,C} R1ωjV/PĴ+`vbQ=)̽wMW`js˨$o#FFUL27rfXoIp@akV- "`:%i@H%_36 ,`gt8v8w|*Hl X\Z<saL=†=k"*{uYCڪY914Gԩv{no+LWdAmQ֔:cjJ8܉XSBl֔y㟚RoT_) ~ 1}FK Aށ囁EH=TŅXmDr0MM=XΊвShtG(`+.̽%cRbr%Rj\y6֖*S<%R{V Xo+`*‘ϙWS(>7)I[<.,kf*F]zi 89ϥܲU^eyn<r F"\e3L!LC;!FJu&ƓC-敽S,= @&-Q6<|$9!Lt]7*j| Ðwc%Z 2S(mz"wh 'Ww!].*ƜX5(%2 `@0{{oPbw > ߺ%@O 7B>!UIRxn1'm1u ;{~~ F3hw[yɲ>6bg\7^Nl Tch}7)HiIw?1)-r<#rK0XR;C(:exZ9%؈"q'_nEi|Jp)qr/l-لB SH7۲Br?{n5szx$Ýi7J(#׻+Xzֆo]Cnjpx#66PsjFhɐt4ҧ9]-U-85*L\5tKLycp^ц?29ۮ(rF `NCNx4|XpBrK}fbW'Z$=戍9W԰{|_ O3 TM/K"&Ax=Fw[-(> P4ZcOQ)?ng̥ra./?$.ޑ?XXptV `!rӏPektō>F,UPc*W(8'-D":v)jfpf>o?6#(6;@n*!GA ${Şxsp@9>5fcUt{SveJ[YƅCo|a3,ōTv {N[@`* $' ]|ޠݦ+NuCWnP=G2^@-ZmEF ?nIk)nMmTwɺb}C'kh]7ƈr~[R-=Q RH$?V6l 8 ,^<6Q iy4/.4v^~OPMsSς $>gsOC?lB籨.c\i[5MiyUb <d*G w"R#^>\RB-᱌xVBa f 3U~#,FR^x;ulԲBdH@=w}7EGY綟 c$€gq OgW\t ]x+PN,/,[HGp;!bE,h->C܂|ucBfb.CR?_/^oCATKoEOOD\Ѻ-]a7 ;1?%G{h0֌e덈s I<`f~611.fH-L!3eF@eo`. YZ