apparmor-docs-3.1.7-150600.5.12.2 < > , հ iYp9|ac"nRfj]b]^'*?a̻ۻ:R5ױ/+zUb͟ۅ:XKW%)|Uhk bdF6bpلe.ֵ%BhL{RLq5o BuPT{Lݥ<@?k%(rKϲB0 !@s% o mmG*l 2"y2> KGOr j`79:.ͩ@ ;(}Nxu`Qox,gMM > ; X ? H d $ C 5 I h n x
G
T @ P ` ( 8 9 p : F G , H X I X Y \ ] ^ b c d e f l u 4 v ` z D C apparmor-docs 3.1.7 150600.5.12.2 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. iYh03-ch2b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e 0- K I v ʷA큤A큤 iiiWeWeWeheWi{eWeWeW e18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a420 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d be26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb0 65b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c66922400 1e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.1.7-150600.5.12.2.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@d dtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h03-ch2b 1774261849
3.1.7-150600.5.12.2 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text by
+ o). utf-8 30dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722 ? P 7zXZ
! t/O5] "k%R{_ OdT8v%`}`$njO/B)-Ot&&w 5'5so0r>zC 8$ =kw|N%0pqH(پSS' HҪ{$u4edRe]#x X20o.B9cKDJ "x4ot cZ?8إֽ ͕"ZFaJ}PR($ 3 Hwr &Z@DDžHS· RDs(zN}=T/mKS-4EkkUd:ʞHQŚ]K;>*+f<ux2[e6uJZZ(Ls (VJk 6{A"j 843.$
_Wt #䙓MjXzxbp;_$ "r:g(?BBI +t W2,tC¼8?k ƛP'a Sux.Me0 I}Q
׃joe+& p7| ,uۍ5 2B]gfbӂNBw!d-%g >A㓳cdv=+#YPڧ@' N(] vQHh~[7KB ?VJI5W@ Zm'BI
UXr%a dh{&Gh %}Ĺ!abjm7f 91.\5#dJ
MҕQB0Ռ[u/ *vau+I:Em@+tfUOAT@3Fcbb M *[ yQ#$
+_m ^k=&*/̦![rDb&Oct3 'ŧ+~A}z9:OTղh4"똖30HL5^},A'DfiI [I-`
܁Lg/}6?xuat Fg+<%[%#"ca# ]/H Y aMn]_t(0TA|'] WM}XL%"E/,*>FW lDLf *y<d p!K+n]Fe`R R 蒒lVCG ]ߣ
[3I! y_da;babs$it`'7+;5! M @r$^m[ێ؝Wcyف|t2SѺS
yhsSt$/ c:ۛ ol@%(*nVXe愮Q*`Eڐ@U>I6VYScV$ NI#Y1: Mq ^O7r BCv%z8YOfqUYxse8 v)Β\AVcTvѓ e[!",t%Wc9kwgwBI $*
]`~\
19&4nFt39tSq; &r 3v TH =zƇK;Hg40 l ֑{~vӿ5 Ccw`QvT ìr<YmXfWhixN(bXК&Nj'\D DF ( L> sxq~?ꂯ9C\Ñ>b&(X&tcp/d5d+˦ T F-&6UlE(qǨ- CEXVv'Q :l G4SG .#=/vnI S{ 蘍!X$)o @'}hp2@6A̗(tIQ+dP1{iBs
$#yvx+h4NH弇ܫU~7.Im;eablɀqz ▤db kӺO7}A8 =&[%N?^ɃHF3є ӱ
=
1Qà
ґFC
1QoZ^/n#%(?9{SCHF@ IP^Mlآĵ8 JX2eE4b^.YP.A݈h )8Q*L=oFlAx@c\dbRD^<@@C'Akk@u9bک иSGCcY?O1}:Ŷ<;W\m೬ݍȦ:#\LyRAY40 ^۹mvn
Pf4+?n8/~4e
o< 1D]ͺ2UA ~FU*KEô|5ަk:_̎_ڎl b?Cᢖ@E=YreF@@-1\[3=*o
:G=48q3J¯[OcMgXNġ<1p@*! @<{ԈVa-G .&{ [2Ub073:`K h
Vܺk
{}7R#=?1]阻g dLm-<@B:])RM~y쩖aUy% S}S۠籋8h 4[٬6
8娣FH.Bg8kkª3ǰ ֓}j5R:F~
ki@ۋS}'$O$G lDqQzVrQOT0b K@ Ow
-|i7/r+;ۄp7CaȠ0Sbv-h}RLH7mOдA+('s-y f{EsQAX3LW2` `Q W>,0*c`@zg; GlﲊKD*&&~ $զ&$EW*q(A ac Wv jƟVOLK/I
1J"=֩[BnʏH꠹`ֻ]$wUٓ j JKfunEs {ײwۮqB7@F`
zbX` H՞7_|2bhSaGM[]+ _:nN!JyQ4wê-W<}oCT^\W08~NJ@)>'3b|U8 C}6x})
l_ϰ݀4N:$r!t@]N]ыvDa @K\D'í%Jΐ>EmHNKBr}+R,tj^I X'|=]-r*oZ_[*6\#\ ^B; ItEHYD92wXyHiȃS)d9֯*|,6`J3Yԇ^LB;p$:˰E=ޛu0żuH'Q Un
N7j ݢL hX 4.Y-RBI1#ͲGȖi5}ovFj9#[> @ r| #h;Ϲb^# W!WTEO)6rlpP Қ̾\nRN.6l=d2m sUˮÆ zkr5 GV.:>V>Wpf`#}a .4{! !:T ~$ɮ݇u~~l;m^bT`4c{?[L:mg
'#ՑP1^H
eBU|0p?Ck|
qLE@nuIks*kirõ8Qwox/#"w! lU|7&i
+6ؚC\=6͋f l0jK#]s'Mz-jcO
l#`Ck"v.a0]SweOxza*~K~Qp"䉃zW`p+2E}n:[yԑ eZl 6o3-KOV1#
>^(ތ~ 2!GiG |vKDz#FN 2
m.' = 4
q|cUӴ-[,c{ Irk;XP rhcC>`:r3 Rk oio
9 zZ 7?jjy/66lclzvdfs}Ξ(2srD$"$NRw r렒P?}v79D];B\.Ӽi| SwO.& gOPiT^u"7A] ,ྙ[fg7l'YLޞk5o㨚dt 2uG1Oدe n_H4eQ2IQ;w॥%T"9L' 6-L |dZ|ҿ)Ef_ǣ2>p\ l7 \(GڗH'K:`'῭O¥
'?R8*VaYdrՄe $uLkE:mBP5@Λ+inEF'Z,?5.Gnd bG{HT
Fˬ vr ~۲(~{|<0d pDCr=rw[ڱcijqʫ9dߊ5jZvC= U.Y Sg
lJn$ d:WKl)!Zjvǧ
3SLet2g[wv`3jz( ijRgCH)- "zڥr
ЙvDkdQ-& }n^
X'b|zz$q9G*C6FH|T<$A 56$-3fް-YJ-xC Wgc5 96J/ ϝ;@f,+Y/ͱPAh՟bJ M+OY?4nMh̾?G7" cgBbw|G9^s'm
Wpls5h8k5 hղhA< rIJ{ѕN;4L)l~g:2g" Iu{PY7)i_ SbILTDzL5[~ oŘW`XIO$v}ie.R
AxuUMEF#^s
^~iCarv:@~v
]j -l8BWCKS9pv<#|َLsTP/!]7R6U-iPT(ap:I|W*))Ec=j`NyMw$JB.kAy Di ݨ QIB ChhQ6/EPG&$dqR
u7t tc jdn@ m\jmeVWy_c0AhB5rbg* C:)NGmoK`ϗj {~$C3d%Oc =+ 3O숊%/2I0*)e :
2:ccrURJEXE
=HILJJQIlv]TBkxu[<5Ϣ\
q{7ټXǧa;[ocutǓ9&.綤}-ѱ |>tK9b=l*Tsi\ڞ AP(˦PI X3syV~ RʻPwD*}(os_qYJNp7i)sC'VTG7\og
?MCKꐍǦlư}43% }^2g7T)>k~عb0}♥71Qgg|jzp( G ˧)DN,ڙz]5?QըVI ^#`v2.QnqH=w\ljR2(*Xl} +KeJb! #;We p)}]9J5Gޓ>fF~؊#)Wc%:bkV}pm5yRd&R;:,*RP*m6
)ϥgoAI %AUqEL rP;5pggOSE yFԯX7_.ٗ ܨ'$lj9ެZ [@&%9:.cN* i yz~꾵{m" dhpbV DZ C/ !?RXOlo v,'rhcwI?ZRԶH>5Y[aqP wU?qKa
vTh^:z;х"t-MEՓqjWSGM wmYu+1E 9JZ~#KDnO뗊 ky `> ? ب>pq@Rbɮ6y .dm~ >:
=w 1+Y=9A.7^;<;
jRF}
}-J-%k^ %f0 {6xs> 6)S҈/D,4IR-0+2KwJSRxLELe$B)G%aҠ2 7uMB畃['0Xk^0rRt5zծ+`tG2i"N5U\YM* *6 iW.r[ p Cu ^/iUҽuZߌf֮uj= | HY+r4 3;m w9#CAVAb9R
|K .8JYFCQgay8ޭE| 0}t
9KBD?[}}!ԸdTx^? .]2#WoTeWt@ ]uX u~+ Z]1)^yʐ_p|& X;ѝI,_j/;=Zsֈ%Ūy FU l;2|Nt#--wΏČv.8t<MuȕX־3#ø"[,zt9=ڹ@Dn֡+Vi ȧ0jUU۶*9_CmWl|v:ww=hJm3&dȢ0Q^.tT
BFNI[*2P &J,[72 {4mjULEIj. ӣx@}s^q\HEɓv w]WR-7x:ܧ$yˆwae
ަ?~)q?JȒɠ*W1
'""р0; ֣UK_b\H)^읚 HGE\N =2 jlSV s1H vY=w9Ԃ=oj
*-
A즄SgI.z unx8ͤf mp~
ۏh<%f ؘ TBy+$wRm2݆? ҟ FI^I]xc '
YQ;Z]
j7 KE@I &g'_qnBjD_'IoV)).VG{_-ЮcԦ*lcE_)$T
d.)ߋ
du7 +Gs@nmCGW ˴~p lt *|KmN>?P4edh<44to9 PpMjZA% յ00ѣ
mEY@HkH B
C5Q%@X- NX{?KJ'GR,bF&e G Θ$T LԵ\95o$xĩ_ @RqN@^f~E;}և '2[ݸ V#27Q|v\LԪU1}l"gi
S_݇*[Ѩℚ=akwA? a@tIetd, hJoJ#U|ʇ%IR%YD?5ohLAVҞ,#ruQUg9|]z%
:DWoE$[% 0tSA!`pӜZvJU{ 6 p[CENlW^zSmtN
n#ąDy
I3`o^ W 7ɳe zI+]/ O0%+UnNL` o#O6L ;']M4rj'U ~c)OWFC31=6_Ysn~/b'٫H
& Ɓ}BmngkLsfEyٚ<ҍ ^>t;[CK$F~A&NM)/rnzc;0< 5"h{e?sJ.p
BYDž~{?Kr¿# kfGp~ݭO]4,MQ ]
m d#4.@] XIL+2JD⚬W3H%,9
% LCj DX// oͼ~vY s>aҙJْ $-:v`8of< 7I&;Ta
߿--n\*&O9n wQt|| R<QXt-x6Z
0f?y@g/mu ǜ@h
54w
&1j= qˀ2g Yծd mwC-HOև0c
hK 5R 8v9zgZF`!)Ԣi.OG
y d,_IqPڀ!1g >KфATF)zg)]o=4= dX a6jt,+ V Kb.IL2k)OEL}4`pA`ONn,K!pi jRZdc=8Us[#1JQ yCӉR#( 4_ Is'P$*Hq kܨ\>>cGMl&.J,SCzЬ (܂L#8e3 g Jhe
Ʃs@v\Z'
X}A+-l'+1ȑ' % J(zJPK+< Dt,9k e]8k &pz!u)߾ "L.k HOwaD{AB/^K60('-0KDtf92ivN^ԇGv5 26jc:5阇Q;I$zߛ'b܉j=8t&XͧPtXT*yx" kM).А[37Ø
y>!MDy(@ 7a$f{l`">VIob`T{g)y$k >!/ ="Z _3bکy@GP:ٜV5%= $gpgf"%@װj
ғ~']-ӿ:G{WA 38>џ8PY4'T&_3yeJ -
Bf]I!MꕌA%REI' q: C}mX"z8OyLHhUD||e e~<&գRަ_;ȮowٴW%YGOAԲhΩif
ZHbsf գY_2" ✽dʼn)퓋L9㱮yJ #o;'U/ć/eUŞx!'0R!MYXl@㭧!D ߲H41w9D'16 A9ņdUFqہ/t&ONZn
%FuFtj#O;"?aF #<̐ Lk0TiVRB1%
~e)W!I)7'Ap#xUwV$L#H0Y-!l
C?em%@+`o7gWyJp[16NSlkq%kPUWN{19PLSiD Eڬ')˴s4_HnlqA_ऎ$mz y?=IEB=RY91>lFJI M^Ca]aQÈ@l.x5p&Brҧu6U\K?e/xgml 6B\ LIuv!P Ӹp
|г<7o/[ 7r$L l= )H@z:h^] < |)O &w ټ4ȇN|.
;bTOQmF&n6J &
xnmKMOol^2: W֓y
y v߭mdS{$ B#U5W]/LY+5KK֛3j_m H4ƪb"sD:(XcwUeԛ"Daj1˰lscR] o;_R66_EsY* yMFx|Vp{U-b '[IOiJM~rӑ>Q/' )a.fw{^*eĎ k44{xfՀJZ,H 7wOka6m5HulT[X[KO8P%uD`2A"
1w.pn*^6 |24tp?dyl98
wZ,(\߷9-OUR=$JY8 ox.mRdC&b 6 lChk7Ɣ/N+X#@ըGue/Py4JGcfh;i,ҡ$]+|3d %5aaVA1 QXTv0^A/pbkcc$
4s˛ t͓*wmZv5 <~՜?#γdk}[| e@ |*.3X$lA @7v}:p?ɓc"ܣZ_*g
x /d-]joM ^L#9<P?!4 ʼޏ8BDG
TN!v]l\4%b[} H LAKMbzrαyB8;Kц ߘϼ, J!rB2r%v0H-| |=yq_CaNn*V
kub(ȎR艢84=Hv3ld
4Q,,mČ}"F17,^f76}|U0tNiJ-na"1{RkKv$3
ey|XBTȹ.?v QQE[$v">pi
I;ɭ5CN
';`S'©R9/R?ܫ +aZ~C[{"z _[Rnc7s7v:?~[$] $ 4ץkcSFNKiti6RSL^9:u0]}L1^cm_ J7]U
3Y.; \SE_Σ-g 0Ճ \ ےiN,UxouQ'L-us3_e^7(Q_j ԸおRmA ÈD7B"} |/"ԵLLFL 9~7=Mܟ`$n
$ Vy
k[pR9{qSߛx+h-rS!+Zg1a70$pݛ *p^-v'2\{.[ o*4 sQU*`|#ˉ|P1׃a̿]e$Oz=vB&FZ
RR#Ф& \ӨѤf; q5c)>1g#(WrCB Awc 'סF=rUGɉ99KX\wV
4sGՆS
=;] :ЄpP qb-JUhBhoWA3ŏdzlC+_bʦƳ)Jz $2Ym:g{L&H6l "]jQ2eV+ esQ ".skdƭ~WynN ŎḽlY y2WlPknCU=;gӲȁ$ 0c2;7HR 8
z#z), 6K2ݴHSwX]ǜvFc"^+<:(:'72 +qw.]<Ƙ1NGviz聆)J/lb"c' xPmu/ PTX|PZCtC_H&$^: QRn%zo]賝V1挏- 'k+k#iUe]5O6ԾIϩWѦF C5
5RT"vn4 T؍[sbzk¼__kc*n.BL &"-Y1~5d=LYE9Ibޫ6V>+
UƜ*v 2!+N3| ā~V;@Vq̊Ƽ;B&О9!4Rq Q}/Q+v ΝhSX*j8!nN^iojwƹC
z*#el}jPJ l! lbPx0~ruAU> e0XK=!NG m r|gGҝ OkMc(.u#F5xԂa* hUfm$r~ س'hƪ}:z"Mkjg{JyYc$r_w#Q= Hqd
DN B@nǪLm'#?yuGd BVʺ5أ\[k~6&7Tgvg"㚙ի ڝnOKb=
Zcbک Q0e_mK?͛^<]\[9b)-'D$b:ԒN/&&joݩP8 )ujz&;+ tv 9=<{9W ;7C%8 uf]y0b~GHhկrl_q9אXmΌRR'h $חQGX MX iŷi۱.vS, amMU^յDWFR6Y",\&c7?Tl
=4Y76L[`ˬ +&.D __>t^
V}(Ls 38ƿݮICf -@4â:M004N2ΎwE(9
DM60B/NZšss9a2_Y
qzˋrxV;cL*Iŝ̽
Mco CvK[89 N 6$M+Y Qbk&JYRv:"o8IieW+eoLݱoe KY CY(?$T6#fS^ f{X!5m/%x`
>{s 0Wgn$m!N;uR>=NӟUPC >t=#J$ܱͩԺkbԶ|jfi}ڮupQjKqfo5̹b$Lfuܰv`=Z
ZB~u5>70
T-}1
XyO~j/u C2 fV2m܉G X`0`V DS@ e>۴za$Jn'q%9DDcQJA&l[;X qr ;Ca,HjHEJYʄs2j!Bl{; )n״K%hcA `ۧkvcnf)&.8v X
m3.oK Ɉv%ڠ.M_
):|Oɛ'%z:/ & # f)^Y!8g=Dz0!AhS1y[֯>̽ $-3\zR#MЊL`{Ԇ 8Sn\m&c_
#Xl>P9EX[\iɂ(hWka6M+45$ZH"ABI`DE~G~P9bh18t/F}ݡĆ 7wS#{Mzi!tg:@Nur4z2mSt
D1ag $러
Rvt-}XWϊA9<]TyL6W2u)om@A8yf.~ ~ҤL0"
_'ņewٸ.e//M؍gBiVXf$Bӣ*m
E0ml'j7CL LeU[H~*qoYDa?f&*Ri3`ς? ̰"3~Sb.z><#|+'vI2{{yX D8_¡7(~H 47(GQBFͮ1ݤ 8rX-=鞑+I15 mA2 KׄӼ
/iK\JA@ ȥ) ]\숩IU;# X UW$qׄ 36kmiaXBp5ѽZf[O`[K툟 ê#ANx.zTXsۘuW9+wF"U0߆fQ5"9 =#ؘ 'HpHbYY n4(PIb},B rFsbv ʴeWCA.NoDLv0
t&X [C0mV5$ Ly8"I wϊ$;>:#m tN
ը 4_(#;m&9Ԅ(& OBm]+7/֖ 1S.kPPPlgse`S>Kw X4=B ?}2 ~>~LYlPקQ y m' BhQ _nRB0P'xywlT "g=uy(
C'W -_ MQتl^cnt2wjOMG % ࢂ䰯.Ϳ^uWim_za Tca'BYǻYwG_:n~'U7+=ڨFw H6I-%NާߒrE;[";K3ax
2HWљs z1&꺊#B6a0]5{{"u}P2Qh+)P/ÎLcͶ*]]Eh8Q(ۺ!xvq ?KRZzO!c0i/V}^ ̨}N1E|>_ll5tSg3Xŗ( RۇܘS.kӥۓvew['R/5Lz Uۧil{浛)JvB>S %ƍdNx!zr4mECI/DQZRGp%LL4_cj=f10Nxy*' ;\] |2>D\ u0j
2Z5 B^`ʜ8F-Β`aBJ7)>ZFq`$ .|@ X-K)kOw>LYFLZsSIlc[ p|t.ݣ'b h" >} \]{i2Who+E3n۰ 6>U!9J0~a&["* uڣ$Z2rܻ/5{{_UZQnR.oyCkXMۛYQRpHBW-`_B/*/( JcRn q \ O: !c)kSO$PFzc3_(q V 5xg N*1T. vZ 閣SD.. f q'2sUi̠ A6١DZK"_!YjM=>>EF_]hWz`n\Lq[]l\&ΙjGv2jHQTO!EVͩ弎iJ膶Q[pլJ(/VS*$,Џ%>@r2_Ԗ+#
W
mO=%^2!fNa# 62*+֏/-ĐR )JYA)Aq'<43HeCFm ~NlHE+5V!STYV 2#rΤG}Fk ڸP_4u16<<<-DxrBpns3"{2(0<.&N õL.!,e/Gλ[a _T[ 3( r``BHy-E38~ҁm#=T2=
A %3\5 ` 1^S~Pa<6#6/d].E0pFĵ^PИebsP
; xk1"@00p 쁍 ScT!}$fh]":3|p~w {oI_;^Ky$zjk@rCkpXi :$ҟ0~n.KJ$B z_$ jUM 滱%cDh1Kn&aLxx;S}|Z#p*Q 4 E!Y},*鱄SbH-[<{h%U#
3;Z1I i층yCh rD
ǏG 2Lu>*"d,YPka}aep;yG-[q{+׳ fiu\)'MݖC}*S]{xq t}<7,TqOGI7X0s%ed_j:TcPZO85-+n" NqU=fu߱JKagF]h
ɛA
?t;ѾtIh:68@HRm9GTL3"# Y>5'xC< o:8oi|FAe.к]
jf!dTE;IaAF % sY IVɗ?.bYma]UP% ylyB@oxUc.o8{?rwF Ub]|hoH3-yOc^;nV,k몭Y/,0aq ,%
W;&)%)@^KKP+v6 ϾqSuGHj˄S?":N % Y]rky
Gɿx簐F˿mЫ >yxK_9A#s%Oծ VZyfkuM7. \FEan4l]+P I@60s9g-
ӓ~$h
" #Bw.ɖT;?~%pقL襱_Ed@G&fua@6x?f/p>`qx#kT\(7掎h@,aF O ":e20INJkn5y22 j9UExO Tإ
8v@ЭM+J^p}?f Gږ(*}t95Nx##SN~(#p]'S$&j! Ϩ}Q\D52s;fꛖ qd+&KˈyBCn^Zz6DaZb&gDe sFD8Jv+.;)d>ϑ ;n5,& {PI )p5رKtX]Ym(h|pT%י4N4) "3CVydҽ=Smq(|mr/E/-we7^ao zL< |yȍ/= ._yViM n
j@ tox%z p>ĄZ/׃-&a1abx .ƻ+R[2`jzJ=
r](*)9-emuf|%#;= 384drWw\(RX3qs[۸o+! x8RDݱD_:_~cR+{bK] uUs@. qv>l_X`k9# Q>x aj`X Q!L HP|4Ѥn3$Ps&y ͏FpzƵ )Ł\M`i }ui}NM#hr1=9k$MxTHm;) _xRZ#Ԉ&k[~wܱӁ8 3>>zS/`
ymibR^N x=/ r+G;~{W1)?M P
'?cGl$fxldvM=}pT; |VC_z'^ >j{--NK \NJu& Ưbɲh.M r YP6jhLEBdH|µZEvGA;'m)ef%`8-]
@M)նmU
gMڛDӓs%p{/x2$ސjL Ԅ+A&˹p4
'! x|COgf! A4 A'0Q .E#Gm-QU.=?vWsfl~out@1¡ Qpb)K|Z|b
q
O(p\).~VMрGIZ
J͌;^"zN E]澙:gD7N 6h }6
Ǎ7_OREܑ$X]
Wb̦#Uҟ `j} _tIVP YicX8Iҵ)G~IiwgB/aFGYL{< Z/!-8ݑ$` ){tr& yIyWx:t B;iXX\qjBJ.HVPTb
u4B"0V\raӁ
<A/V( K̉/馼pkL=HsD ~ۨM?P#璋)X7Vcˬ#R$wNV{)stXGLؙſ ķJ1 "
T47tʴ|X`k ^%,Y2Q7])8- Vf͚? F{M GDk?r[R22PXS`w=A}
NƠ{W2fB8&l&nտD+!j=.GK eKjC:>yhy}q8jvDMUHD7q"6+]|ۿf۷Y=o' P> "j̸mď9шǮL@TO% ?DVI MW@/=@FtvR4X^if'r],kI~w1sL&
ք #Si|vχ %bg;ZK17Z}كAX
Aj}YNa鱃k i~J/Xgo8 hc)f0X__QD>Oe e&~aoV-*<~7ic!D#'GĿ es`r8:G-2YN69nzk2e3jYh˚ie=NnhMbٻovߏ X#e Pӂv>Wج6\ aJj|v\ڂΤo{73[B% ȴMNR4mkK bb(8t$o̢{:5ᙾ4Dž(^7@v5
邷%17Ͻ)rz0ECYJdآ6#4砯P`o.tXq`xݭQ;zr+
NIth_ֲuFart:{1$=xd0tVqE<3%bJ;KC9}vQc.j)eZi ?MGe}YȥR wQp$B칯ƊPRE勀]` O+x7~s+pyp{: #%DvrGt_{=w ssqe=^GކF} P6W8jSU
状z[!#j,C=w1C?jL`r?&a7v1}{Rbn<k&S1
Ę}n1YrוF1o27(H@$GL;?I#o:5/, &tGحU,·
ebǙur N. ?*%D2Gڕ<#
H lqiotM ٩Ứh;IҊ'+ Ax-uY q7I NCV u*)W܊l sIiS/w/[˾ @Q'/ i ,E?Hz0Q o \BUk[\L{cD]on9B@wP]uPrgt˹] ߍ7ҎgeZv'3ΨouFZmL Z[>`FaK%H˟.kReb<#SzPv+j^m q@t /.0 ܒ'6ZLluYNS 1"g9V>nūtsR& Z
sad9^Y FrAu@e`
2\P_# h&F
\䯲s؇}ּ\}n</'ŏ\,H~
h' )<_9/ f,z.O2 >6 ,5X͂ajRqQmZy=*>I1a\;:Es,eWwVZKG亚viRO' fhQl`;3<,:3khjO> _u[5z !]!xw Qxg na^ WÂ jMf~c_:|,!%~ goZʟv WWoM:X\a{e˅74[_j3![*q#/WF%
ڰ ́-IQwYdPA,Opy@D'Ub$v@:IĘ2IU<` G7O6;|q=qoF;GFkQ8\/ϖ)-o)j g<|c%gsD1Xbh<*K8U6C0XCÌ1`x$]&W8Yuv]([i B o?j_pAc ls k1 2,>Z 3} x rDYjg(Č y,L=J3xw5Ui`W̿ȿM wlKɕh Ra>kV
ӭ VCq{wyS#fqN *|S+RNFn2uD5tZm!L`fqs|`n"[4JNԣ~G֧M 8D1Hm4@ N^R}cH|>m'Kt={5ų !Cb)JXD$tT^ ؔ@,>O 7ϟ/U;%*/NI50Qs-?IB lB@vÞM4A J3up&
mG2LZj}we HP.}~n*A=cÅ
ٿxw[Ol0gC-.OB1).w-r =T*S_jX4ߙX ښLT 6 Ŧ #Ơ.,9w:6;E d+k(d&`8jsl'nI_? z Q {Ico Z z T}C5n
(3!"'!b. .
{a~BIQQcRї\PypV}$'M9$SPfyV1 |CXx9CKm 8DY^n@oCLH هX\ v4+V4DQ<_k4O(O6ᱴոڦF;c$ M yNTIj#ѥ(Z|Idp꒧hKi]sgd
ί ,d9kRH"kr6T +Z&e^k?N d 4xg[L\,1mC>%D7cJ3HdU#Iܝyij S=Uٿtd[3®w;A1, -o)eQ1".
9zҽ<x}0 -cC]yEcR',}QhÝ4iYjOʵeט|1!"=+UxdPcB)ןgp 1stJlƚLXj$4d
ZV;g ߍe1 10Gƽ!Y|ׅ{b%RG,N℁0:ůJ[
Q\4s0옟:/'ey
`ḱo ҏJMS}3`@BH[LdAU^{3&9 No[u]zaMPrH `_|mUKdnySH.aOczٛɺm#X; SPѡ<|=,kc ^(|#CL` Rծv*(s>B1v[;R d'E)a+ ,goH s%az$ 2FM;/q iW uܔ:x.
MYt4,x1{Q gdّ?t9Lz(D||4Žח1P=w:hC .ܔ[9eƏUpNpw,S=\}DqEp[EOYif4K!o) ;aD :4gHL@mGb ʹܼ|МRZ/
E2TWSFY Cͺ 8(`1ۃ2Af
=!T?'y0zIz=fGIxNuFtu$gf*(ޔDi EjM@[w C>hL (sLn9ه7|) ' 3~3%{~XAT%)fYSoH80eR~2}[ k3q~K(NkNϦv,1ʥNh/Fp_"GY.5vvזI&AR(+yv\d" >~!E)n ) =SVF,gZ-xڠ8L= VhmN٬bX0rPvMs托>)z[2 (ѴWg>=I`H Yڟ%& oG=NN4|L98+2?-(@;Sd80"Aa&OTh / 7E. }M2OHFe+7@:+(zp"+X߈AGH%o (Mf68b(K~^о ޟN!8a? -~T ۵181A-)x=:-~:{T7,S]-&Ά⤡.==jĸj\B6Hhr}/]DbIs0,*#%j؈dɗT$t
^2v2ZxSk>ޏnD#o]1#^ I%vf8,+CC0ckX=1ɧ,ڡ\2|# !%fK{Үȟ.XrRt:J6siEщ333 vn(@@a,5kEGm%h4 ᰨ _" vp=y)33 RK90Ԡ6:J$> ַ#fЗW}*JC>v;kF܅ q y4ޠ Zc2^kMRa=Q Թ6hmѴ Qa50'Z)R^E.{f >_K vaTG
e-^ׯ*"G Vf`-JuTBY=M4Ϙ\r +3̑#ÅǑU2^( o}ڙvm4 rCC5oZ^#ɦ[2Տ2-?!Hj4ÈP v뢄t.okSV۩u^h9ڂ#g&?,~T ^c}nL3A%k>l|}[c @Th!s:E
{LF <:c +uN8Ĺ`Hjb#ѯ~%齽u'/Ux^yn?QG1 K$?@lx(*ӊ lI>oӖT
%km
q=e桐AOu쬠矶s
< "U 9=4&h.kjh\R}_L
B =η @c,lcu\ F2C(?EpS.SZ$
ɝHfՅ+ )2!w 6N}(Ӣim}k* n5 jrW
)M #Pn۾qj$ *i֡l{ vzz_o1v`)+]t0X6$MCævO4ocɯ POL gY.BjMyuFmHlwQ ] # 9;QO%7M/ OȂ`]g$V>uH,x3(|z;BkM2 Bspb: L#`9<<٭oW:PiA(vVr [s$?6E. QyfjL2 g©[N(yVH1Ybrg3bb+-x 儂 m/n88qKWfHOVH<=d&K VK
ܬl'ƟIܝ3#JC`Am떌oO ½Q ,$k ^{jn} \trNsyPw=Mg̻gy X7"gD%\^T@uEAkKJRNY+< P^w:x?CX5v" K[Q:qz)G [soH-Z# D}5p>+ W:|ΝG[Z/Ix&B 0r(Fp¡U :IDV%E
8.~H9 v-Ll-,ye8g:9)um%9
߶yWW %Eһ]#8۩R '9iG9h &:Jơ=Ȩv "3w0|p,GƦ)ԂIg=)a| FadFU&#*Y kP$g!Բ,\
hX9CČ V; W'P'PqU|` N37-H 9۹; c*{K0 iYZ#o kΒ, .,q F ~&ss˂W O y@N8M-@)dTG q4(R8xEyp/A٩w疃b0 G1K'Cxt;hԍF$~k[9λw8I̋c9 L#kOHq ]2mT7;qJP9 zc7A:i+X#XJMU4&* ? Pu/IͯəɤFҨC
P2UBr7 2FZ֙=Q[~h \b7 |`&۔O-⁌9fhDy;y Zj9 Lax%n($ <.9JYw_6â) _ YEAgR2zT)$kyv@ܦ Df 3@c{b={Cٝ ˧&ߦ4>rݐ)^ ew= A" }cH&WC)5p/]9zR8< ǯ#aЇ[' t7N_hETU+p:/
Xl'4">Z&|iU] _wG'RáXw$[}#CM WPCנ$DDƱc 0
dM.Rh8dWxl!}tX'!.i+I g;Ӯc D\
Mb)K`eU!̝orYtde䣍M3.j2U 3l"/9H4vBeyuAU:KMӈR1 ɩ>g *M1OV>t祈UPxh@Fb[vu%W)n [3 myY'-i2(rQ=O)5{c[.<qOF㿺;Ie Q"C/(J-bTV[kE R}Gh]qٿ'yV MFp
\Ʊ, ъ [zQƓXe OsN伲*V|ƅ'"' VwF$Biqυc~ :weWV@m3 %jiqA2 8^!&'bdմ5ݨ Ws"u04e8^̋ۙ.8c
1df7C jQβJ]r$Ve ,W^|?5 Ԗic*0e㵀, t
0,jyjZ ?15Yd(Z}ezQrT=ZqYAz$=N#3BiFǘBM 8r-\RuFN"bE>/Xf9'"a> 4]PnSAhf@&s݁G
{Ikc!:,*HI`> I]ª{7(9t½,-K kߎ!ppA@ B<S `Fgڸ|g`C-!S~yyh|%gPaV j 5d7TciՊoY 1$W5ThuDƆ@vC./]R(#= (d(_N*A6Hf8&(Q~}]G%-.S3]6Ĉ3$#c7\nrM^zFj F^P$LT5$䒣<`^pC^b{s+CFWu&J@CH~%[r s>ߟB ~ dLt&g9nK @p@3c'yULcHVRe>ܼdY0H$ =_7lХ,QM>_%6-A?>Ri9.𒃕jKi!epqLItH?wڌ\yg$T*|KOx_0v9iPXc~yn|v~7b.B+l1W_-7V
Ur8/S Ax8A 뼳
!~I-M
P *W?;[' HMfBAtXx6A]#quPLuLF5 Qkin{
nq4 [$غ#-QFrՑZb{>ᥛV֠9iF;6
z
g&˷KUw߅+H(nSm &IEm \ 0gN<=v} t)Xe`wr
,A`
~ k{ F8i (UͱR{qV4${>nNB`]a\RA
k
yV$+z\l
I4u $y* K .M䶱'qW w Թ%cҔ1 - sh0 RUqD4kAmXW;:
d.DҁaJ$#('r4qHZC /OƧxcl[jhkXJbR~YO?~
3zE4ÌVUTuv1I::]Ss즒'Bjnc Q/<ߒj 扐3Ƥt6B JH.\ I#D%*Y&#
C1L8WL 1PepҟKU5L-±?u[Plx,a.=GQv'A>Q_xv}P2z͚C&}@Br(t] 9nEHzTK9%L8'f٫|~9wc\q.8+[}-g{
? 6PZ/e;Y }+YhְXGǵX9CћjE+F%o| 5}+s!FA1.2^P NǴTRF
ڢ՛zGjH9xh@p̱Z7}.%Nܷ(!o<;VxoTPO"/e} 7?0>h-\sUT+΅i$]
fiUS?\\\R %քFRRwobcMWg EB[lUƴrS4 e&M047IX]ߧw\B5eUvaS{KeIU>' ]eO$墮wT.KKz}2|Evbpw r/= ʸgt ܼ IQk_b
ņX;UZh}s Vi2W]+]"d"dԎ)d<,I|6U Q*~2
z>H7
%I\v &5^(vf5;I=C 1*ਣ]9 Ą} zx
HrƘ[bm9b(ɱQBh~'@ C\ Od+NUjm+f$r}|t)Fb]mo%ȳ+b ~< 1nzKqn>t.OOE̦5>ZQ8 kYA9ì$k0r,U^=?q%: C}2 u#C0s8;f"pbֽwLj7:{$%vZ]У|uNaOi.EJNlʹ
htPlƜfd(XlY:.'fzGZ;} D}1
gh~&En `tfdQN/仉#$ INOZ +t\KG Mo'qrĊl#_?/'b$(F>;^n[;/缒;.)w6-E]o00^y'6J~ zg&$0t9؞ItX+>0@/_,,tTj
Z̑ ]CڻXN^\^u`n%3^ BKdUΒj!SOd<WtzV0Xc 0?]?جw2Xy|~V+M8sϪAx$ "d
Yϗ/HR\:L;gE 1bS1?h-e6sèpYo/x
"2,CEBYdo
k#"BT1^9{[0 smaT|
l]4. \ ڍn<}~% ,z] $4V!
\6zK{\7q{98#"b:4E\"ݜ7-̲ ?:e p`Kxꄙ\@ֶ.+OƼb UQ0 ђS'O
o.9|_,pzؿA2ZI-
"l
XRORYٽf5snl)s
nA$ K ^lɏolL ch5۱U*[n^
@qfxW~o
c j oy'Ȏr% t@ =f{ o} HĆWjnON>a9$fzZa6 a#.Gfwk}坜 X0渿^<;{ۨ |l[df:Pf`IB#D7p9od~2!CZ3e
Pು' o0X2S{ƗI-@v. mIu ۱ ƀJ' 2IgQxۋi"9ǡPxs뮓1ޠ6O8-l*==C{H Z>2X,: 䶱lԱ
p-\|Cg<*b
/= ~TKqR4 (X{;.vk2 HERҜ[Il@+<)>vdfoLjex)'PܒڋNUA$]rqKo(X1@e%Az45fB~ns=@xeAh'uBY,LƭĬhGU,7ءuvi(i7"骾qh%hIr_15zָׄK-m9J摓 O ޢ5 Q(]ׄ3 Q]B8'E'Al2A[AwAQU1l=a2+*KQfjj#$eEB}N>~ EmxFmC(ϓr mpFGH┡&.WC] ?7(Y{՟ Ni!X[T@ 6 z}Z&c=@UfrҢQ1ǣE38I MdG,~hݫ8A-BP
7lq+D49W{N-#$Xa '0?+O(9w
V.Qq3jR,旯u_O*$XT}eA)4Eia
Y#dItk^3oiǹb.5nZϵ@ҵ@\NM&˩)"gt2q-O
a~h;
Q?RBsӛn{
Ճ
D)RI+ :vh- ƃy@XIΫYcTbcb]ĔDAv0PEp-#fuE}(-lJX9 @x8 gaq[6}*n`Z7MI 466)u7>
obIR+onۯq
L78ƢO tQ, zlb7=wI
e?5\%& |)³|9fDrH4L4{뷹E;=ViOm_|gSʾkА`R$ւ~#%X)j)9عy/` ҩ#ô-0LM--`4ڰU|fU#AΓuu{gv ~}f3
j_2Q ;U4'rDIU;mUeBMn; dNM浇+5^H9@3+A+`] _s ݻ]K$>I(254"_& sxSaؓeP) B6}DT=ߎ4;;>=ѓwϮ
U9nȟ kz+Y#lّLO2,`ЋT
Wئv{Mǥ0)[Y>R^_4\t{t*)V2TxDcsTƿuR6 u)撬#Ai?5T
E\mKao/r̯] "?Leдt65U{ԃ)<D:hq}XXIr~wRr Kf&7.06S1ԕ c?
GO*4y7}4BZU Yn}4_+\NTnGꂀVeJ%? yl ~ t Dđ{}K8QTR9<}ԺiMg͢
QP"ԔSqa<=UZ؉YP"fZ1;#) oC
n?y 9!{%]gL@zn-\$ :;],H(/ m3sK3Q
^gw>_1j MD!rRLWVk !P 6R+DH mlFĿmuȫ f2|HOKvH JD)p*Wܖ8_-}@ mLBeƆne2)pO, fJ.#WxuF
yñۣAɹWy eE2nw lyp榈z>OI{i+YC
*3~T !9gM^,24UͅNHAu+'1!^ ܭ"9UM JeMT`ͮMuY Iك;= מQ34vBxF c~E59? KbpDbHP媙US
P~2ЌMF)\yA=+z¯iH5RY0,qƫ
}HCtP)ȄPW%:GY>&^Բ 0ar?u X4B+rncE&>LP}/'Z/̏m2Ge^"BKUps'74"[04KpU"PU+Ko3k`>St h>M 6D3];SRZ;W=Cg9܁==ڬϢ4 y]64z_6kqc{L:4E>| ~@
0d>d`]a|πDjMFS,/Wel?̈́~%+c)h9NTf0N~MRq˄|p569 @ dq:Ȝ
+`< L4=.oe4e!h pD(MY 2Vފa$кlcnk[8︃
V_Ì<ݸpvƾ7HUFM>`(6g#;@Q Ц 7_*' k9HpD+N!["61 J])P6]/]AI]iU S6#?|r:Up =ZSnZBA@OazUȞ_!dAI4}+Pm9qp玲+r ݆^5m|\B TV$Ռ (E?oSPbϨ:$x< QT0Q%:Ƣiј_ldt@+FT<2ܯc낻z}AO
cy]e {2cWanq*bF$c$fxmW:9(UαӋZoy27F熰~0tWOQmruNw >GzeJgHx?`>Ć"5䤍"t7lM @"2\3O_!뚴p`[_x9K0P!er/1g%7@l"m 0<v$&cD2) \>$ > 8 YaQXkՌq~HD_*џMhf &UR^v?ƭ 8+ E~-R
'YWumMG?oď YS )f`u^
JL{'epq>ucK<gB4 $T**dPM uvlI d<}p?}`#OU|2Z!躗-u'iCR3CP$l L+oZTv
VeFf3 pQ#td[bE~KBߠ1łpU ܚو\_97x {و+3PBpTS#hsnl{+-*CNTa ;gϻSnfbCM:<.|2BT~ v-(@BE#^x(w0!c]L?{$KB_#7)}F9'x/CIDB
? 0JwXj22nďz J8igeb|+mn̓"|5^hU^ @dN? dLbJߓ-%X*)2k/P)wް;Բ ɤ e 03dSХIgBga x& ;fnA~x|?熥̫tjG3~Q˳4\EvǩG$8/f=]U@#1))բ'KpY-# iw֒|Fϛ*;NNKUUS?BዳtKWȻ @r
DNmI|+%>',
r.0T=4t#3!hw^:CH!Kcޠ
:Իu_cFG(&\*@_j3mWP,&D&
wk',Mˮ9j |gNꈀ@oRRV8+Ƴ:_nbӹ 0V NϫG澄M#)h*:TV U #"k2AtR"o5R7q%=umve8!j > ع6`FMH9j!<2 )5gikUEk&F#>`5< `˫ˬj}d= ` Fijͮnأ*"ihHи.dфKe. DBʓIa~J*4GXքܛypo~|[x8fC@tà^g{_Ǝ( 팀gwٿTu,ؙ+itK\YV 37_@j7C!*S-z*˺J܃u3N|h%LA@=Yg]= $r%Ldng䣒ޤ1OZ2&?=%=A {oؔ<`R;k7?^. ks @ܬE%
ӦvGNEcs8 ?$ lh۳Q `\f|͖
S?d
2>$u]+&,kcuJcņn24UtJD#36IKQ6P/4K25M݇[.=m:xW!N1˯"xOe tWڝ0Mի!ټ ͭN-VlU` bw8;T;4뭦OS'm16|O1@wI-}O tDj@8'\'?K ^#gx( CH{>: _ɣZ>zȾ+ ! G_ `xى
vsS6#hԴ7.s oCT$*[@V fs&),֬5Zh> ͼ
Q1J/)NSi Hz閈CcoW/~4Zfxx3l%l²+ p|8W KyjJX1AJIBtHM5:٧Ip3|>DC
lɎM @^8[DԨEk
Ô ~8+5q:j MԹ B,$|'7SɆ}mUNJW첳Ҍ
ػϬĜQ_áZwD"V l
ok&d K|q9NVE:Z^9%`9 ]* E9bAc,O MmXe},KQ!rJx(dS+Ko 0i9e (N ڥB埙)^XJd im\X*(/ GycB dtsʴyX4uYӶ.]PfZV8/~q oYXj/@K~mi )|hQ723MtY:ʘMeytTVa? ֪
)]_bQg%s,q9~0#ƜPph4to@ WX&*yA,^1j~%omB^ %F̑"89&Wb//Vd DW'^lF' 7rU TLkVni! ,nZJ:TRtkh'"[})a\R hd -D;ttg(!!S֘e 5(ÙI+ho LL
F,]惷rUp̿% _7P) 0d#,Lť}=HCTt LsYWd* ݁e n, qsl4vqDSǬʇV-U &Ғ='1tз)tF %ݝa:sL3FدAMNZ[ _
Kh^΅$6G6Z-zF
I4t8xo?BӞmNT7X^2-`{FvN4[)bD & E)ܝq_whBb!, 恜GkˈLzL C[:{F3,E0!s5Co-tNx9ۛAt%p4.Ņ0PALoLS.\ .>o3!>PJxTVq41 1U ށk⍥AXZ [P2!fpSUNG_0Ϝ
l }$KA:d{ 'fy~ y;n 8 T19Jx]:va#I;| kt
0=7^T5p Z"f}R FM NxRa+RxL
gR8Z7Ujsw9|n!kUmJv2}v JE xSb.;ҷN͜/D)* E2 !ȠBHu$b{X)0&̴ P0UNc
ĆYUrv]~Kxw=L;;C6'mʭ,+Ӂ=%E7" ҇ĩջL;Ȝ/nkFơ̕&>T316ǭM\ϵ` LbCt _Q+2^*h ilIz28HР3u0ٕR~2[Q=:ndh.-![K[Vȅ m8{Pz6 (5 *h >>bǂ|c
+<o)$hbos_A ڼۢO
žl&v /utq&)8J YHz0 WMdd:y,OCNSTXŒ 4r 6]ొjj.Pi9@3g{@I2KE. 3*6 m A1Z.tYK/b YQ (hRGL (\ 11# Q%h*B|ձ*}2j@ h]o A&nZN\CGuW KM3,UFNפPUZC>%Ո:c{o
X($ ApOD]}F+ мF@qRz#c(RD.a Tsp:N74C$*s2g 㸴S>yҮHjEIlLr\U4hv
ĆN0g
4'{%\}J{CrvH g-YMFȸҮa5+ ٗXe 4:^C~3~+U־:jɢ@A_naTF=\VtDOQ-sͣ :i̚{a!U G;GsxpMo-9 |:j>-7K ̶B~T)^F'1O/4r:x `E1OǪ
w>+\8u[; Ⱦe,}^z&]˩C$An~hw,4V {YN1~ʢJ#nzO*Q A;0cvmD#.v2b AB#+ݹV }wZmqïF}ey -?X Qdp ϨƲBjydzzJnNum1nɁPR*Y9 T~n
{;:
*zֲ
Ziaq`3~YcUsI%]h.8/G|1VcNdw~yɸpcO0g i[,pHq.P#/M2-jLAe%Ig kbMBقNg3e^=#K 5ù (M}.{ E(Y Pq#kr%bxlzӘq'7bno
NCi{XGL' e l#4?*:iBZ3s `L`ZFvС.n/%U\õe~bGd
^2f6 ]IIćRECjo .UСO
@iOLmb)fAD%T } l{ Ŋ`!/ Y QW'JyU,*zqd?6Q=eL!ٱ/ScE(+s F (htUk"w5 D Cb_Zq.pG ~Y.bٱM
w.`MW:O -+1/JIf&ܫcidk _B%PE
h'~B%s
r.Z$i(yg] \%U>a<%llD2DMS&ID{zėb=yPSdWN)n HO|P~25 Y[!Lkmȴ \t iaj,Ө,/PXa O&L@jfLy(0BYĝbFnF?l` E~ވtH9he-RS¹&I?7SA t,2a<=Ys:Ctc @ȣ
褌,}i?в@09y>icJ@};qc}cr]$x@ԺΙEK6)vU3Y#_Ɠ6oia
ƹ-
lt oDo`u*^xDu8(/l("5V~`&LVtog^widz8xOҝi VP|0{\Puqd5hiQ(5 ܣ [şYE a+jco3!wuk(}%x( +JZk %㙦hk!TDi8Ib^, קxBog3k*h V.8 fڭ kp?ˎZ2AZd}:eoړ v[u ?h4ZhZNog]f=iL''MP!BL(yG
ËiG iPd*1 )`gPI 2tRAr[Wre%\v ]v+9d} h3 2 (x@./'{ O0px EӳͿF@PeͲou嵖u(E% l >PhW 8/Q}C4hd( R(!),$c^4q_ zAEo+Xοu$" rH Ēma G?J1&+SGs#Է לwqM3r}j8$Q*oݘ$$ut+gl%t|V`n]GpnzO#hB4f≠dhӋ) ϯzZ' 1OV>BeHRL䪂!N2pP ~]bҿ ;$:^]ߚ$҅+)cI U%+3-lwÏI~*l ֶ5#e3W&cn"&$DɐE1[ y,> "E#B(I$Cg̯o>'[Ya/{u!H]Em"ГYTrFg3ZWv$>|\d"W J-Q mW9["9O f&ԭI gU(7
dce.7o9> vh|tMT&` va x7QԺ"ų'z
P6Oafg aCn2m\c9H~Yȅ Z+LRU }50˘:yxF!ZL0= %/^E? IyjBezZ/g-\-n+sr1WO} -'X"Ljy7ɚ/gʑ`D]4Pbj* ¨\yVA(t?އMi6K; eMZ*hq`% ,:E]q'[D=T3K5b}$Q6t/q]i !Gux ^p?R\z=5b}HC[c;FL?;HvTB{a}
oT8q8tp#e27m߰}~DEI!= _cƨ:Xa?87(&ng*%QsRk̐Yu(K6[I ߧp̭3 %{3<
^ M &)B(7~:-Cwʋ!Jf^:6m5?"DjJj>I&eݷWR(A/cz'yb,U <` }Eyz[z ]#Z|JEv݈:q?"B58x+v$pUd|#ЇQv v^ Lt/5@ v_'5/3} n1SU
d jj&i-_Ғ0 啎$s/&#fe= vjJ8b4W23P=q7aeF@+F tKsCr4tм?Cmt0HX_t'`"<+>JLO)mgt7;=Jz
h"FAi^ð@rѾqLi.5%P֡sf;1{iW=@>C8Kib4=t*oh. ą[Wpkީ#9E?nlqTNqex6@=ybGg~
Av,[rh5t5F[F FX< D/yU3E #YSΌ$Ea4t17|q $إ ,v
WT؛Srٯ\|fcd|
*wް҇Mq9qBj3yM_rC$GdN6,%,yPgMADb* 取ġ)8'6RMpB:KObބpa8 $VMW{:ߤ3 PJīmp=3kZ
dLt፴2
e1ֳ*0 7 _\Sev{o>i_j2 gxg5HGp1P Ưې縉: p
1PbT4z5#&~;\ ]l0uZ1ӃbV$EZf4
6@ e:'nMA2 #]zk滴v ~ U.ɨ
!i1RK=3.T Xnl!q}P-=#FbiO (pN _!iח[ )8ѯU* [v
8G Qs'VqRSg2*RFKU8;y56|!kh}TLw `
6IZjfڛjB'ŀVzEX@%v-DD-}5} P(VdIGױ B$ﱓ'd%w]*@?*2F' xJZ7hS8A0CArO؇G;;}h- sԼQMqgOK.Ca6r ,=8|FBm`"#e; {ּ 8N1}-ze
9b$*rIk{>^KU jX` Af8g
x1iڟf@Ю^
-b#sJ}s˓U m}_
x^X=`6 G7md<9@ƛ8
{xy9W}|5O!۸Z 1D%ZqFǿFVQOGnMtwTAХqL\rC-$<
bet!5!J=I C7hp}ܗ6 )F=D>Q$Fܞ<-E 4sz^F&̷Xw 1c qމf}.쨄 ][9 k & *EBfU(u_Ξ) tRYTa ~Chx@+ctֿ@uk>* (:bߜJ}_J0aE#q"GKGe`j|FL n Ǭ< KGPp.T>_pi>lvlm3r@tL6~ ;'n ,$S9ur0TU nT~rh4h%hɏ;eغ,ayV`x(
G WҶ=MmU@'=LvbSy%R!qFCqaBcRds?oI'w0_c+w0r&qar;< 4PlV >lS8^,Cw"mcxU'D>'A= sԤߖVQt>[i_lhFqXuKWIaP &9 5_TU!Ky^RZ[#܌a]ܡ+ 9""ܚ}Âͮj(v'$[Lr?
p?Ýl|TM|ͅBqY}ڎnXpZ-.QgQ, n|M[ 9K Vo )! B,R~~Ey0VX9{pρ (XhNJ2Q/"Eqv1!)6v 38jo}N djKv7?LT*,}O}0Rֻ 'egY/x<;HS0I 4k2!)u]Yǧq / Yyߛ j [U&Q;}lP ~v0͈A[}MMg GJ#j}sc`KB:ZȁNsS =An~^i٢ Th4[h+fKv<fќښsjQ9EUV,d 5d{ޡQY bPyiUShK3ߺZ6q>&"-⭌ J$|l}Vwscw2Qw{% E9_J(.k"{k$YӌDfҢw9-A:GW?jjzdX` /"794M_krVxvzcө֗7|
}]\m5q1Ӊ f
>0=BSqk PgT" @ ˋ%1^ %o:GfaΨ 2.؋'
]Nǔ`-QB35bf J0־5(c1Ƃ?c`)d .Li
\-C:BmI<s9^= Ԓ
9̰0f_ Κ/a\R`[A)]8sR hR[!7}Yl/g~j,yW }D`E8<61
K_&2Cx ;$ե2uk @\W'8a<8j47w ;K(w֧Jf[TWu $8L_h th~A%Pt%ج_[fv_=Bm7D,*b6 &3[_6NGܣX{^:Q\
+c8_O å?E"27tO fuA |j`qevc3bDG vNhip$߱L9vׅ3H
ZW^@_ qMp%G=RƼYYۈpјhT. dsf{hnQÊc_E t' gV^V
4<4( ,?al#9 II b{{F9^TO!,%SENQ1a)Qr3p$H3`^[$ǝnژsؔ9T}˨7!Xv PvF,OO 6A'%{V1rzsۗ k8l<#|\O~[ߋ噆wͬUԴ.aɪ{! yO!8|9hѪrtF\7=Y! j!B1:Y\Y O瞣XӇ]V
T}56G09:XxTK@oz 1vnH2S-;a' A*:'Βʙ e >&˿Lc hlmL ј{De-5T'IԋJ\]y,?@)PNT}iyQ%3=/ 9+t#z:z偁S4 C};CbM駍cϝb)4lT qU{[s~H /cXʣq ]z@WOpA涩Ql8إWH2bj Y2|dZHIC?)V_ًDʗœAFmK4,#=
%LQQquVlt Xi"i|k ͺ/)iTxpYBx^_t(=44~<*q
88_2C u^A,nSZ
5&$pN`w[Wڛ|ݚlwHWfML*1K=5buS /ߔU(pS-D_XOf!UI&wY07ڳjø}ljr}T/2k ߙ;G@_> )o1 |"FQEVsW.EV讑
{vȠԂzZegϑS I,*qӬ(GܱP>&J+~?a͙ң 晰G?{-P:-H/5~D,QY_5)WFX1K*m wuC7HH.p@۟zҝQ*"ڏpƛpwDO&7^w}@{O7 o6& N&Ƣ|p4.f]I%%^!0/P݆>36Y1bKOa>^~cCTP`" e¸ ?m_^
xhv qJz..h>!kLVZj}^y %+ѮjpN@; ~59 舥 aԏ]!9 ֬8"[?KןQ3ESeSN YI.o+㫚|^rb#/.<$Sol0`pgHӞvG(`!i"w6\p
yKڞOrE~&Q"uRĭḮHyq
hBP,7Ze
hQ+ Y`eMm#Z6D(ZARA:9ɂ2ʒ9 >0ia yd`3z\Mę+OR%4W)˔q8ڑq z j.yᤇAUֺ1RI`ӏg۳SCVrn{Zy9Zi{)? q2;ǁM;-٧Sw1F*Ѯer*M<& li{ #Ϩ@B9ㆾ;N }=W]?pxsfu >Ŋˠc6ŔtI⺳{OC $j%U?OouG]^Z PʟM
'Tpz1$D"mr yVZ3 YyEf:ḣF1z0<>2
U`|QV :^OENm,YE [iF*zٹ$0-ފkxύc
V GN%o[E
szwPJؕc
xGXՓMrIbG0-4y>5k OU>A.ZCxfX
{}3<@{"!;nvUO"
+]h4OYJՕT`$R *aIN.GЀ= EF&_rohxD
F7%\/kOI;p ##{VD%5x}ԙN@C"_>gi (]ZѴí\ݑ~P5ɮmɄӢd-(4qtujnČ_ ⒭n'Y0 N9To]X
w֝oIqbSg?
[LA
Y"ʱ\!}
|~?AXdn;2s͏ _-Z4 @O 6 -[Uu-\e sG]
}(JC;' n# X ߦK%Xz۹lw %ʪ>]x:% U
@Ãޛl_I-OX"d&0懩фϤHNa[yEGv~HzẴ!ekc4iЉ0ZDiw%T3 pSh~y ml#^sz9.Z&>2s庁nXf\磿:xIf3dz|S)v}߀mr,:mko$<[鷵|BTt%ZRYt)/^$ÂU߆L9T+ ߯ |_+~*8e ^,7xRmHۈJxIF˛L^˧߯DCr2Gz1#
/9oTdj.aY.uR~MjeI W9O=? J?_j'E[p)MU`t/OJ=6`,Kx^3:-6/(QoO9QqdIKfeQŬSC~tP¢H"I %.c+XG Hz~O9Ǔ|?UYx5>Iy7xcy md%<,v}M;&IDw1H+ k$/%e\ R㗙jʕ; {ˤk@*IY7Ćь]9H[qx{aK0 ;oC8%ʞyD)6Kۑxejl8e ]bE(o{A==a 6m㝫R[oP@[ 0 P!j7"oӧ.f8K,Y{AeXw$j7PiXt><;2ixŭHU?@IS5 I0 byBi%Cth 8O y*p۟v T-# joE6_mtmهgZG+$a exU|H1=!<=9 ن1۸HH 9>cW}t? /'l ݱ
E=? ZE+F:⤁2Hq x / X`1+y q:W+vQN;"H~@Ǧ|?s pޖ,rS^1ǵ=%$ԧ(h[iCƼ1=LQӡUpp_qe% 8aRi;v_Dd_C> x%t$я Xūi^n{;i^%%]{SRKEpGL/*[
m* FW_zͼQ ?4`PAI3"V#@v ?Gw\@v)]cd? Q[tZ1V{ӗq)m{V&D@%x6^l?i/Ѐj$w64Fe([1- !z7Cme{;7S bF
un)]hoCÛ|^TQ5 ,/( .: ?d ڱ=Hx@,CϪK9Hz; ϻSUhdIxvO C@`$,iK(^YjLEbߠ5517x;;uBC"4 \d:F37 ]B 7Zsx0B%(2gK *Jn3M7-V >wsErx1P@g&V=jtr^d N>K[[''>Eg6$wa"Qes^( amBI
^
s50(S9]y1fnQ@ Ng&#!Q$½D])SumFr _\c-Mji
8%a'
1 j^H^NX*}&P~WHh-^OԊ{r(섊)nqժ& X[qD{#rLiEc8*1rtr;( [ cTP_f?!L,Qpj џr:8}XPoB1/|இ`'I mKGT ^)8g9h:Duכxʪ 2t! sMfFZkOCRZznC szy~8S]? 3|aA"7)v7NLt=d=<''~'0w{%S% H)ƴ#} qh/̀0quņcWXܯyMX29h(qyz\+sL賰SE[ŭ *\k~h8&1QY{v![&ɗވX H(N$0[.Ѿu yT<9j b2ؕ)E4!n=ʬC$>+EDpwʓM(5| wzq53
JIH WJIT>k!vI%ۤjVNwmȎUW;k\/$i-YÑ,2ɢ?KTub3\?&ZDW%R2cHmd#*v&Jt4*t@ 93^穀.h+ bP*@GDpeUå#@VCқ;_2]d ko.4` ! IՎ`ظA&(/N jTBFO` 5 e= >A&hfM J