apparmor-docs-3.1.7-150600.5.12.2<>,HiYp9|9 $Up̐GnтrqzB '=JEMyYrF%,Xڵx@ ^ YX[O?Yiȼ1%zML"-6oeI΄t[u1gA#6)."V6{9'y! =L!m Ru?AQ(ǑMEw~?& 4<g@#¥NE3?C{6Â-Eؑh@`{4<m>;X?Hd $ C 5Ihnx         G  T    @P`(89p:FG, HX I XY\ ] ^bcdeflu4 v`zDCapparmor-docs3.1.7150600.5.12.2AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.iYh03-ch2bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤iiiWeWeWeheWi{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-3.1.7-150600.5.12.2.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ih@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2b 1774261849 3.1.7-150600.5.12.2apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textby + o).utf-830dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722?P7zXZ !t/N]"k%rNCQZuǡjע|{EC6=)tgs 7@X&H6AE5сcHӆ֗Ts )w3} m'wAR+ Ņ;|=Jz\X]mH­O: moS[&a!T>h_eAn䬭T8$ 5nv[ 'i0PGWf9Jŋ1}K Mevx.,0-g$'Dðf-l@#]z#Fۏ/0-8:#-k̂6{VnЯƯ^.{g^s']k-O|?L1L$i<"p.O6FA*ܾf =7rn8)gb/2g9F,QNR,fcϪ NE 2 V*ӹ)X8H$})xjtS2.I|7t-|eoaxp ^XNņB~ܺEZtĄ/}74.u'7*t NoU~egGC\()%S˖0 P/#3FBŒё7I8/*ΓaӘTnI.cD]"9,7(&;Oώ/#Ӆȣ״U„5,:WFmQVp0BoT­TΊ$;$Pl:hݴ_TB3^3BNiz _$.?h{@ɩ$ńCk"A/;7, b\Nb%6q9^< x,3[ibܥ*Yco)H*Xa'aD06 M'Bd ~jsY!Vv!.~F 61bv% ]M}_zh{rycV+FV|w4VAh {> A&]Q xwZz:{Vs$>$a2_¼-ҵdM;o=.B|ѷ4j謼+!$9 (ޕLl[/9:I yU>ZBϤ JJ D_Ό,.Tݼej||1}ӾSV,x`wj6pѲ+!Qيvhx41O4KBnO %EZ^^P`3pΖ,> 99)`tOa37ոz!SBEh[kK"4M~ +dΠ;BsY"D_!wz%ds/>Ht-hrT?[&CuZ>5μ+p)y$/w hnb|ڞ5}EtTK`*pwm':ܠ"ֶ*_ (Ubj7=Q=:wM~l6tלs 8etaV oh4cmZkjntѸ:A#vsi|),4( > ;VY#˛vҖu[]qi`CiȎGfxG@p@/5,Oγ/ J9+ƝD &6);w?t]ɤ.ŤȓNDBg^4JӐU^N__Jg\D(?NuEG~|fI M[I+^fթZTӞQ gx2OoAC@<*҇0O 3hʮ| \xLܡf%ڗLII= H([ %ތSQھwW$?Y4}qUq F GX)I N{ylu# UbI3싷;)uh$/Ci{1i%tskݐU]+ 3f 1wBi6+AtJ+m pc80q]pQ!9 Q϶#dznzM\PrB!ڶF WKTtD ?;elcD_~AooHn3Car(xve``{/g sR AQ$G,GQ0H=2$,-tvw&b3gfy!sڗwOg$QK€5P/t/sbϸ ި C3W)e23ζd9P!02%*BW5593qP@;a?3%bM=|8([úڨ-ѳG)]/o'Efpef~MLԩ?*o&qk'x3nxPSByEh݃OI]Jm?PoUD y.չ[hLiF'0aQ2U`o+hbe"cvI݁FвZT]i\% ,B&nֳˌY;fUuɱ ѻi1Tᨌπڍ{%6+uZTgZ=v(_Mz^`+\Y2@Q%ݗ։mx־DOC\o4x@X{/(<_Iad Q?LcD!\Ͷ,'9P$݋4EǗ{.- Usc􉿒pU }K?۽?;Y`#$*wq̢4* {zؐY5)p.q-!}زPPskBPtoPI %Wǜo:#DϘoy&bʼ۩]ͤ΂=u["^ )aaF_z4 &umD $*C9lajX"f8<#;DX,/v?*Ay{ʛ͓=FMO{>#bboučL^vQ[ᑛ`9]fo?@7PcPE ~.9l$x|ə~N5s vvV nu)7R|N@7H\ʚ̹snv0^VUQZr tO-侧' 9 bN>{2X:ZMn֩W>x= "S%֖wHSs){3"2G|O q!iK&7zΤ?94I)ZvO^(qn6XV/0%!b EE{ a{"/ʫ¦^ss+2Ȭ#(O0"XdyQ7S0:q?GY 4 O,`SBJ-- lI$ Q;I^`|lo.uJ7~1 AΎ@*ף*wc2q ;ҁ(e8c(#nɆIhw7Z!)Lǩ$+X }ރjBhnSN4so` 5AelF+K#08&NVڝt3͙ƢU@)x,3 t(xJ RӾ(_8<ԁ[h K Be(*:.}briK%fjȷ)Ttl*&eջfXlHo;ɯO@oSIfn@؜G_U,#Y%Aj^]ĩkQ`@VMNAh{aZ#Gf QNLE JcނHۃ&9׸Bfgv>[u")IK4ɻR"Lmǿ;9.EXZJ5ի̳ ]2JMqܬVu!nqGE̒8 O68l(Q64e G'\87t_q@4O±3纚#遄fGZ`0 O^M\>%ὍöA!Woރ@Kr9 Gc I޿ɛȎ[:*Ct1Щ֡bDJ=_XOYz4MV%8U5W]] /:%o41}nqط `'B!';dXC6gu}0ڍcôY™JfxLHi@ ,jVbL}HȜbG:N`'Q_?ջ:!𨱜4߁kkV2o`S!f3Q[): /on:ق(lz]jbM3pEn^Se?iSܾ{AU^z^r6Ph{x$KC.7AʌEtI8*-DG[Rn? Oσ'UN6m*Fv03`G%݋߁ Ĩ #^7e3_JC][cP2'bOR=R1,-\m*NI_ tnm蹭C&`˫-*dNa1`qA 4} q3D0nǚ]+9z4T8t4:Qir@0tgB2s|: vo(?z%aNkc9s]hDX?!MC\j6LNJhx?Pʞ@FL [0bhc}Q>''(!(&KktJW>P'ӨvRBc y@-'#Y|Ӝ.幄I4冄,!qJfQ(M쯸G}:B0ːSYȶ6}1߃^8ͫHp,SIN( ƎN,a#z}nG}D{hkwEN_8?E?rOAԨ*礕Ny5ZqűtNV(SށC.p&CM $T\jHx*p՚خK#")7FUd"X,{U@ Ȣ-@, <k B餭ҤrfŠbbӶ: " I9d@nN^f)U~CnTm-f&6L0bP*'|]Ⱥͣwôr Czumt%h=8 z+ڡl$_ x0'`àždxͼup՜xObə`8ݬCL9*Qҳ7"0üJڰmZO'ad,ƭ󥸢ޛd+.qPR+s(8 ҍeh-L2V75,͟@kJfMPRc%gѦ;A%r'7$,UyX@-%ort8i]#0To ` 3ĝ(jYK@Iv0{.aN'41s|"@AȧZ5LַWD:&c`͇tq}?mFd~y_6?'e^3FD@L;EX#rxYE:M3^/U6:49å(-h԰vcTQ$rNW4/*&MAuF7y:2YiF-`5#i!z6Io5`Q>|:*Hi@x ؐ 838"J<SoH{:i4=g{J' km2Q¦ AuQ<֭N=Y[SVagj3uO#s5̶^l)z@|/ {PRC?o߸=tQnh/y I2%'\Lb*;Z#+>@PU@#Ao`!C$!rt2,=k WeInN*RGiHiUt)W'XI==~| j~DSZJVi" MkM'ۮv5wyF~!dT3PhûȺ!ʖZp E]}9O !<Ɠw^uӢCvGE05{ZVKK e@tX-*0}Lmhӝ3#ڬHa_)Zn<"ѹIno!2[ɋl:)$1G3\-ӬGO E|/:%X̙${$!;v>7Du=;%QlV5jV:)vrfg6?Ժ@!\'Y6Wp%/QsqBaoÓ';)n^w]v8vB.Kph̊dDj7{8Z߹ړLf݉IS[Hp1 '<+ R8xg:Vt3E֩,O]j'$d'=F΍wDid]ՈZݕ[{jnfc׏HOzRM#5BoS 贿mdVOxS"я{Ff@WqDi=@RSRp*WŸ 8+ yrNnkGZVܙ3b PI Cexgxa6pʇ Ӵsu˂ 믏1Y@m0fSc̍ Ddc*7@yYz*[\_*}UJ^1{>ȠzфjzU8?ώj:bw3fw'ĤhҼ1j࣋b ?e*.L4YviD18 y7EoFǽۿ$5͠悏e*(UJ>Bo  xRL"(mnǕ#u`9Tqgd kgJ7i@@"Nqdjmٔ5a0W"bdE 5bvGlEi?2`rZSmZ^.ZCLgg6;l^5gBs(b!6ɴ?@f9ԑ%vuE*ç㿕,Uub+F *'rK 6%WPrNӆ)ͩ9ڍITS4Z(=u\Y&;%B\>LYF1bt<ぅ f>(2<{3ms  *[.EvF MA_5fvHrUo*#Ʃت@kиu)dh#)gevm' 8سSO_Qr"{Mք =y!!ys0+V!hON CTRϱ_o%ce\zFwPV NOZDLtTQ ;^]&6NᲖҊL`8%Ӹׅ` ڝS}jG!'({!c?$yszr^٨ op R׋9L)gأv2Y.JnjCn 3J*B _sF"oFc?5qn_áHzOt;lb[ƕl2ֶ չ 򫫯YKKENN(oJx!A[bEY >٥,=V!Ў_"[=[I9vV=c @9>YiR~z۬s &rމyXi]u{IcjtvLs@BaXћrIsd|tks6Bⅵ~]\t8-dqĴ(/n6)*% |uҳeejR-\S|/eI_@7J{ iyr;|sFznO)K;5,^ 2'cCS `0`϶BNFZ}> /p?\diLR'U<%5x<:ւk0 ;;tl1PIJ 5d,'B FN5 FΈ\::!gl@+>ة W K9hK|\3mYV#KXM69ǯC?/˸zkވlF3'D"g1kmRn>i]4>(JK q'Wn$Ⱦ`8yBV )pk8:Q2%m!8Ykuj<ڛsTwuG"ӽ~,m_n'F{psר &o0Sӗ!kpKbTM#؜Am>}~*y M%ڂn#L$;\ J/3WVQQ{c`ȷpαXG Xwx:qs(BXCo{%\H=i+f˱d'cJ=jsﻳV\Zh'I;4@[Y"aeٺNIT5 ƆcK[UV3N4ԯHbftNnl]uye=ִk3Q*u<eV׸}!BlN!UR?XϬ;y)qRK8nԸ>>b -8Rz[ h ˿y_TfH]ˇmr'wy8 Չ;/r#@ٌpŜg˞g&bWPFlcUS @Q^ _9`]JB_L ؖ;}B<_M}w0V5t΂(RF/cd ` N88|ڢ#m}uW/a*lۭegmN ʐi9=2z2G.!x&K7T-D7QV$w׶wK }/m)L9V-Z3KH^93 X@fr ~h-Gv (.Y)L(ˏue:xxkrC2ON'wFY6!F02|< Q>WE{Ʌu>{?6Z9\"~` _Q&q*)qUuq AXO+@]Rc~_2<~*ᦉ2͘^kH[mؘ,aE?O4l{a[p(-c0c^'x;}6@ 0壥uڮg/wHB{EtIĿM&U]ʃ$_WHAZ%"ݤ':)D~7aIo} Ƥ4.ZZ+RTs~>1pȎIA5L6Pf<BG~kb,gVuHk=wS!fxmh^bZBN"Ӿm Xt>ff$twY[á1 S *(ID9:98eYi.~/>%ֲQdvYs|Û.dX?yH^|+l?ڗekU$mct` Ek:iʿYޏ="fz_Ǵc;GS²OP 90QkPqBV6zO: W@Ҏ? ;:ݡ)hEelڂ 4p =<$LČ>~Dǝ%&csfj+eZjц~QnǬQ"zT>\a( >W'q\28vsD^ /cPÅ>:J WayrICŁ].Ҝ_Q򕞣3kGK>Yȣnp5 ߒ` 4: Ok}b\^pCz i}rϮCΣZA@/[Qq%I΀!qYs. ϔpQ6 J؆b_=43(mf];5#(PZR-H +T*:[\MʼnRnQgwA-N0듗#;[ʑ(`pȓ&T_j53~X e4",xWL-g_(7aU,brߝZ͎DgU/eQZX9R ø{ bqov|'yNZPNj<|#ǝI\Q'lj9FM箾[D,<= $QQ]Z.:$<#?8T}K㞎xK@cw]0 ]ij=5/*|zhwB`^_'OzaRhئ<~ \5>T9 F,3v6Όc<2eFPmw𽛐D.c^2wC⚌̆+lrK[ U_Z «h)$k[7Lj5J>*^ry݅;}Mpjgyy0tHBT,`\Kh]J-}zz*j;I]lЗA`G*4X^W!- $p-v 5M:;<ÿk_7Kn {O^05@ajQFġ۲Ibqlϕbc[tc=EW>/ > 1cL.x?7 {Xz!Pw'wU39R:цA6LEAmBMdQ =tvܶGa[T&:1d_|//Uj|&?'AO >5,S 蹱x`K 0QRHPp>'nu_`3$|r$KLwʨT~4A]Q̹bBlη4dPS(D]x*Kqf璕9/#)?޵~Hև' ;nÿsP~BNkL,? HWۗiVy8;]gM^FPM U"dӘtPA1'ujswQK0 1q3ꤏ ir0n6C/)oQ\FKO n oy.ۧcM (cA깬U`P@=Y]1+bB%1b d65 HW[OQ_kYѯ#.d W*G2(p婋<*fr bplE(3Q#9+ͰH;vh- k7EtNE N |l,r3;߲~+U~vz\/ UNxP[ |sNVhDZ jS):395?0 {O,,\n+i[XE 0+2zntj}vdxN v+AmB֚.d`mLbPܖ345h"{jAeD4zYg88)~n Sb!)Tx` Ol l)h& Ykd|JkV,ACn e5$;bc'U:GKFn7H{5-\іoPٿJb8l𿫉gf{٫OtA4dF?ÿ$Bkc䯘Q-s9w37nYb u#Y֩uv 3t'8J(#SCܠ|K-NdwF_LõgYt$(# uet?T{wVAVGH rUI,)O {!,9=&arP#W3:L0E ş]|7)ؐ6A*1c E+a Y!jtjLU\>`H`$#$ImPr1 c\As>4S8HC=dm:Rǚ`.TQo`SwU إN>5sISTO9]*T2|1T5saZ S>6B?2Z;Q4Vl˱4<86lѢ<ֆud;l ]SBj y|Hn.԰n\\Fj5wGGWL/.=`_ ZjTǼ_B=<%O sE%|wսSRFc*,M3h<}>KBY'aULא3S5#{d1$!wnp/^e,kqHoOŲ!#G\vL%wȠv`X뫧Ĥ>-BU"ґ@rXKӺ$1[rhʌP䶛.l`f& R{Ԡ<>0:a. bJḫ,2%DkG<-g#gTdad6dCD"1˵ҡ@n}Gڳ|2V ji=n"n=2nݗci#};] GԉvdaU52̤ڟ kQz,ae[^d`z2%dڢ0UgU3TVG `]-|+=Pe4aS/Y"δ)b3] 'o^LpِKrWЩD⛫ @%Ƹy{ۡq Hr:1+ /!4}"`k 'Q?(KЃQyp*A3l /[jnBWD--ǃE{΄ # ǶwQ$)u$VKh;^<kG2a#¢Ӎ;p`x̻0]d $`Y@Ђp1vvGx^$88` 9Vk^e2Xw̫! kt >xyEp ̫Y%EnU%x\g8⯸ǑZ3z/dMN a퍎s`T|T Dy@OW FFq-<}lOe{-a];:;pVл@ ,~Qw٢O%myΨ!KoqEaNy.#ie Tt-Z'%vx-m3R"3USxu%,_=+ڸ4l3}xR߭4I38#hB\'b/c5j&il 8gV@a̪LC/'A>U# ŝoPr/PtPn6r_ХrC 9wyfD۟ l-0zQ ưTUjXFG[_3`ݭkdQ_6вX(U7ǴC5xc&(Kwŵx}j $ ĚH3z v_u%'Iy+_Dym- V7d )kBx;pX=t+2U;RaM̧\,YC\t^[!Eݫk?)WJ/O 9~pMVz[ZsDI5P1ì3}z򳹳oNBU< (bi*wZ EvNwGثWX|Wgj`P{oD G֑ʓ %d7,If&g1{R19 c"6[ 7 s~)EbXx}LK"G0?Z 4tN-E\R͠nJe~GE\$Qs|Pow@#h+xt8Mpwv[E|$~Ib nJ!Ɔql᩹e˝aaᗐwpj0G}ZAfݯ.|WցY:ؼszhD}\<_H{**/@)"aQ^{FdfjhzaD9j:qx& kNMfd[Pt-蠶^;˶IhCŦl"vn_\-O#6`]pQ9_We!l|,T5etՆ%_áRy7Q],~u2Mߞ뢨>;u[99BSuL#xz,C0 HyH{Z~NX"|DgsLǡ=pHb_NL tz$K}-ܕ ],N_u@lD\ztrt T? IBqUe!X󿳟sbN~2 [TBY!1jh6ǘg SOy}|LOľ)عC4ޯղTNr9ʂ ݸHD߬ /q`N9 (^KfW4ϴЧonr r2u7;ALAa`FQ֠0p Sz%ړBi43h1K˲%o#Bg좋 ŀNx_7URxU=wXDcv" J7<5n)t#Ⱇ:j9!]fǿݔ4 -H|VIgK_w7,9nk* 7I%/X[B3!]?JH恼MtkN߭NkxF(Q_ jn%,c D}v<_&"=A)>ޢHZpY4˅eX߮?leex&ee NjkU-ef#sh~o~ dowjNtL:ď4 XiCdfP)X]%+ґ0J>w8tIAXJ޻gdN'T-'H9%GrE,9mcPx]8A1;IuR%_Q. NU' 80;scn9(W9[ Z o$&]_6}{/!B=H8 ddC r馓VA0QQI='eXUӲᎢTswנl6V8__cCyZ"93';&%MA.%&v9/E~j q.&uF= kz\f,4ҩ:RnLQ k+.↯"昊QgN/ ҁ oKaU%@<#wLf%`{܁ 1`DlbPq8i'YJ ]\CrǨ)ǐcUܵB@ҋe~b)i@`QƆPO~TbsGK3ZzTTTU?)WׂMxYaȁGctlB?:6E.H/®QdjA_f{ڀb y~vg!LFf?tJuGWb<@."`":LCB_l h]ߊh]ƇSc]z{C? ^y,J9s'pAm!ԂdϋʓomxB\qԝt2Z!a=s y'F`#Ef?V]&x} mU*>ύe\Ao1G/4#6LG_n~9 %f>m=Ʒ ªC%m 'Bϥ[:mԙZMC/GՒsIdYrd_1Y/R&g2+[2IWx*8NLv:}1VePΚI 5>Yc 8b[e.F5Y [Ov#S񈖡C;jT3+(yoe$3߯+G3y0HށЇrKaûP:+69W _!IpFONuLAc\WTeT?FZ;d]\8@^J]ԨBKcCjԁ[]eAc/ $&h&Ϭc/ WQJW*!e俊1KETWyH#ZhƮeKiO:: 3V-!Ba o`ª w[.92rצ{bU.j}5 ߕ1qwـ`l[p꩝6}4 YY5ڲ?$y7%ӥ :t|PE$tQtzqΕoZϚu P Fs3jiqA2X+ \D \Lh5inRBf++'N@ZŠ?g8^Bl[ۏ,K:J)DNUx%Gp^Vib!׹VD,(Ts8(7*:brki!<59>z˳3v̓.n(~+6򽾳Hs=*c<XEՍ^WUk/SC^tY ,@{ #efx-1i O;k Q>qOE3&a;Ņ92٫@ Mޅ"$'T ݴ]%|BMѩ`hVP#vKx~P^FNOewD'p)rRCO*@]{6K8x列\+SS R.oEcHVc-^ iޓqH+˯[\?'<&P&jow)nd*^UȳȓN(?Qhpz99ʭ\Q1b df9dr^- s 7z[YŅC vq(}Mߧ~7M/W/hir,@(#t_gQzX5zf7,DrH((=Nb+3xI 4èay|' n2ovak?d*us^cS(VeV'@ͷ[B[]h9053 8@IǠj}r9lQƒR8_i .iuk9^qZs{zv->"u8FyhMD]h2r'hsE=lVk |lK6 o !%ڏ$箇졶80D+<ވL^CQ ya`.L S‚mq/w|DW=U*mpӉv 9 6QaN)kJ l6Ѷ::zC`?Y ` *M{_H6jOl *1(,Wb2"$*@UX,X4dVUt5rT"poQ?2gLW]#"6`9,`7Dت*RG~Ѹ!ɬح%S1}p5{i6wةQ':0bW$vNJ.{u2!w[Hu2wno-|UM JƫBf9+tLenL{ԟf {2_.08@@paN h`#Glg ZR Mi~92֌J@L =ʍ9Ti28X^ȯǢ.£V7H'Tg[C1*DqV,[ 'I]u{@gjS=pʭ{V]hif/#_vq}ziBi{,F2(Jhe S7d#.6K{cN/Rv.PbO~;" x2fjbB FVu+f[!lMe׌EA+-je͜G }MsGAi7o`,p'd֒%I"~|*3MJONQbn\W$C+[*گw6.pz@g7#Q 2*8bF'h uIj!򤺰%R@A}&y(0"W Uh @.MDzzI_'ywNOU71z/.T` P9 #S}p XQKaWJ%O.S)M`; V2dP >T{E) \!ǧVFkCqX_PIWҢ9foeG]Ov%4X߫|3̘Q:`yhBTmxU^dtirddƲB+ 'mM_aAd85cl͕+Mf9/;Nȶ"ajt2Xqe`asݣ*zNF}  xƨ)}Ir4B\IIVb R=ݣ QPBNe?TA=R^L Q~ϢLlKt3_2z\J?>k;O8OPWrي_Xak,ӊqejUk0Ef ? v8 ! E {&XW&Yw1Q5gԴ,uLA)<]oO'U{b譙 8Yv}' b]){<7{4N/j1B˽s fF8 W8 i>7t&x3P\HƤ8W)1:CcUj02"P7%ٯY7}RՇxm2܆߂Z$g\Sni1>TekC;'67Da"E6W[d0/T#!{RѮyK?{gBAIr3#iR 5XI -b{1*qldrx'a! <ŗLsrg\o͝GWWXgL}{s62i5%wj f3tdBa' "S LvV^=-m>BBң##ç eJ"1Ӧ-9 wY7~f̵yk_{❮BI­w?J"qŶX9x'hH lWDԋ ;+()Q'GK7"pN~@GeY6.JQuIVgAܢ?}m&wF"!9nCҪ,vQ#ϸpn`ng lЈz7nbL 5_UR[k5޶yPsgxsx;+A;!!FQz rL[ޜ|7"H3wWh%H$dM̷;qyjYqFz *9SAXKH9&EOBգm'ÙzqO?o,}` Xo)-T^buׄ5SrH赐-5Zg17X@Bgv⠁\)PmSfӲ,Թy \i-=fiC~ԤOlwI0(Qir7cfTy  xXrv&wG{ݖ>'!"HUt< EӬ|SNN;<0™\,( cglΎV)ʹ>%6jZ>j`*'fRd!2ͺ6Lt> CmijSA/+*=RąJXh#p*W ap$r!<5Թ; pS^/ɂͣ(a%MNW%ۡ`9غ4̛Cr567r=;U*o)-@ޑ' xGs X# jwOxy^Y>B~Py|V @E+k٫(vO#:k)'#_L8 >O 5xwPJed6-^Yƅ)#6*XP҉nmhY%px28^)uoK3~ : COkjENtK9 ,Q'S,xBB Mӌ5A'FPMjYI:XI_:RPC`T[jLt$۾{1VfN^٣51ɶjjvWu =.!7)j4H/i?{2'H8ߍp۹2l2eR[>v?Ϳ5*Q fwN>qoF%KٸF4zcHR_*2{S ?A|:ߧe`Z^V/8ե3{)q3j]DM%6>(%'\7F j4 5Ij΢jJ w%.0jC>ޑhquwoC2oXWZ(ڵcxz)ѶM".Ƹơ-iy~.@^5[o(Cg}bL Q2IfZ>w!"\+X(uu i7j?* s v/_k=6Mz2h$ uWV@2h1Fr)QM]]D˲x(p$Q*_ٯL:) 3s5 THF;6D.7;;0Z1r?f&gUE'h\N ,[Uv]P̟M*JY$fB~ 6q! 3W2+<)fM6d5h!K|/x u}Ɍ{_;!p2j1L\OK''iK>vEE %1Nj6Lz &mOW"yY ؒZ O]<\0bvP^]#' Ij<* ن.n?ԑ4`Z?´.ՓMlp@Ŀ3oEd℔?A9#[|zQ Jvn_}]ax+\\nB-l{LJjl.JY!jm5B.> ɶݍPX,I,~%I 4ZMOUvO\j5U^[yb'~\掎N5HZV2͐I?<6X@.pXuCIN9*pnF !hy6>tmT1Zh{i ˏd|M}n3:ʒ܇Bv? ^%&۸Gš/I]^l}^!p=uZ.`ɆD W𪷄%}Ò_w("Gh[1s#_cs-tһrGyU;ZyDeޭA 8ʏ\5=Ls+y DU˛Aw`1"ޜtgG(s#PX* ;$r1;BHyv`oD[Ͼ?\rr@_مⶴd#\0M썸~3!-@;uu' mY!Ig4͎'hiknbL)%t0P\@(3gC1`sk3INɌY[G R+ݓB*H% TXi:8]^db`g2hlj$ J<'=i QinGE9K#ienԖڙdЉV5~.zt+Cpl-xirZ6>|YXF+C2#$:kQg?xT:MJ;ғgi& fI-GGU?#Um&FV2f;J6S)a} |g C Ø ;"ObPʶaGiM0~-:Mh5X ƺW=Y03ݭdGafܝAL\pLlD֣J|ZD`#@t|41;5kb4Z6-ŃZO% e4} mFP¶m\ 4<P#RN,헇s{UHW DE9md340i*4u4x];Rf'QmSK g00|LvImH6&r*qv_*Kvs+\04JSoI,;Fb` 6MHS8C q~%%/f 1o~p9^vC'^Yqk{Y&g??O뀈׫1p[NRH.7:L1E!YTPmDQk<m v9gS!0alTUe]B2$ЗG ;Xמ4D \zR'h6dbW#H3%(g8fgm^F aylRZVS> SY2sdsC}z%7m8[~Y]]8R6^ a:}lܽ} la 4)Y(4 (OB 8OL ~KuHȷ|#kd/JMI{~O  $jjٸ([&؜JV_5qw3Т}Z9[AZХ ώ_Tɰ3lڳ{qd G>7)OE ],۞ڲʗze:v I ŶM El6LqOؖ4.&jfLhۚ]^w#X;~2"R8Cyiw^IƐ:Le*.,Y%[q&$jG˂s<ȲPqt~B8,娬!m ao(&t'ۂ)FB"JZ1. Fub0㷮?'z /LVq鶀vi .!5ft+r<IET7݉b6Q?G1q&U&3*KWk{N Dz:SyOg }(#4*L΁ң/Vl!Ÿ)u`ƴ[-7ӥrz<~CksC+Wr zC`Lm:f u'PC{uTeF-:0yC9#4?-6#HâjH@!g\uv0IzݽBU4!R0Ahd Ʒ &w̌聅AɡG B,z|/)?0z@F]4MShT&uPTbIK i~V'J]$P¹$UL(dm:hluf2~MM'%Xbq]>yNn`^+>=W TI1Ym~IrMi/n:%-yx+npGV*@ 7zV܂Egu$1cpXOkumO+?@۰o$61&-FqQ!qKH@-zRuyd_~?h]<,b#^;;ӋO'#|x31E 6^f*Kwњ[&};жNd rSB Դ5^/ goΔԒ{`/_u%蛊=.˕h3]bhє;σR0'c`Hg06Flxk4Yٚtnp)~hVGF,dTQ ~{.ee3e2J3߽Ϥ>ڠ:Ou UgW76w~ $)gĊ"NJ : Lɧwauf}nڵ2VoQJ=YZ؝v2u2ya$ߦhYSd0ԿWp(*yt\JESZƞ +3CCzha'ٜN {c_[Jbjۑ9NK5|sc+7s$ _Ϲ%u뷣LG (yyNۦJlee˓o}֧:pF<2ڵn'Uj`R '5~[* Ӟ OEZ :{jukYO[3>q0) ЍG-+geLk tKr2` _s˕Tɭ&{˖]WK9u"4͙w.}ªi̚/+i/ ^h>ZBȐҵʀ] hvF>2 kS}()d'm$+$> ìr'x Ÿ/Lti0D*4qțnOM(FR$3Ӫ4{UGt& &aeGSg΄ŶSEc 2'oӶa($jd,I2c]r 3 j{OkCXM`g m,tLnDM׼9pץs@, v31d` g+@\]YG< t)9$jND֫d*δ coiА%+f~WsD I>Kw3c8yciioJ053,Y^L-5Uep"DӍ98d]yUgX?oQ C_'̵>?[gL(_Ĭ10d̈&qi`i x;з\XT 7v_ ԛKX CEo/)Rw-Ȋ7[?Kdkn$J&γ8꿧X\T,SWM˖{OmhzHvL%ei|ä s&Z  n[bf6+W*+5q1I \ v5WlkW){s,,]vv|kAUKC 1o@s~A.#F/ TSӊs `cn)O ()2]A~;ANP/i/!NIEEOy@`%o[0j?\ )YSx"wei@mbwҐz/15OOG>P +z,S)޵(wcfMZ0?߇G=c+|D͊R2%ŇyX%W(r1bWTMqc}΅!ŽNa@0toН' 6Q#> tkujΰQeqВ%VyPڄ9>,lȐ;Oc*2"zxMM׶Kc0& ("QCG L{[f^d?^k%@Ɯ~zizC+\hgbwlsMYZ~o _$N ޡ[(cܙFola -ѓoT!6qǹյ2nf)np>yW[EbљU&9g`}BV@2YBBz+K 8ZkQ5)hLN-L*/=%f1(-)"]1ؼ&b8 HסE?ۧl0g &mX&3pʮA}: q*6{i||a I9*0tH88d]ebDA ̺NѾ2JXF1FІTS%o[k$S,'ẐpW ~^Փ\a9j E{_уW>IA/#\~/ΘO|E´Ǐ@S* ,WZ gUQCy=H ,m@[Ѓ8OjÉy+ l'GnLN)=ͼ*I3JENܾyIE >2O:w&bD4Ms\(!$z3ΨV31posXOu؝(Lum1x{vpFW`djV{cXY 1y#T%:P༹uXZi:^#dN[})^{઼W,KHUYƌ."J^JY`Qt?)cZ.?LuSzt\lhmkkD0?S$AJ.؃. T7\9P&OP;N;HM<\ߺSI6::O޽ D0Gk-s8c2KrZl9, 9ĉc—E!s&߯XOZ9Yԩx!%Yy }!>Fqߌ%k_,:"`+L ʟΡ7o.8Q$|Kuŵ_blقV# %G v(;D79y UbUZ| ),`[:bĮ՛tSw0ZXϬݳ-ݎ&F%oU8ˬ{f5[崌GL]#qn0Od "(t)FteSDN׃^(GJ{z?ݥCfLl_)|]\;hB-Sr >,PŰ=o@y3x:9@Y :4Eg;G;#+ 7#!;hgțH- >ޗ:USQ&IؿbD*ٿ5n{cS$d I%7*Gyc9z."x'*M?{pn  zym%|":مܰQ@! S֒G-g3ǎc{>z׍%rNYU ~`ؕ7Wz|>5QtOX'huM8Ovz'S',+BBsI\v~>V$1Z4Lŵp^hoFe'Y<cԿUe=U(?s3ѯ+*P'"#)eP,ei&]Sa5Vآ$~Fjg K9cr{ wnـ_{~2޷-?,^"Ȯ 4E =ʰ^["IG؆I)q6 ΐxywkOաpAK ;X<̥;&9U!?h'ǝ]hHnt] jrr|kx& \!߮mU QnD4.&q>"t@&[d1K躄n{3)軨?#ăUIwUqu}{I)۹}o! \M)\1` ehFMo룐U$vEQ ,KC%<YW7&.Xi6E}0$wEƛ#=4 Y0R3$_+#3G/Zj`AY4vJ CtoJrz)\I üvY\  MWOHIM\\Iw{ٙR m {E$IKeIA`bՀ%7F 3{MVוURݱu]x8gH扱=:~-MGb'{YM^&w2Z:_Tge^r0&um690Ec^Iߴ"dsdG7|:_r63n2*' [UfOIzq@ѷ)gσ5`P̜ ` .֒; ө_y8?F,B rmysyH M žʘo4$X;r]>ńÔA`~H'{Ky(RnIon?/s]fޘ*>wN&RܢH%8x^%1b LXByԲ S3tpk?ciNccMbf6U.)H`Bo%yV濯"&1U, n2X1IQ{RZf,QC&|H |`Qi)J7u8 |r؛IDŽ_վmJ#gQ_8(BǔWj(1I$*M$i:(g.j)sNBxF|qB"-&aRRWc|ߤ6"9Tio"SDzN c5Ms .?!gWuP`5 ӇVEH bze&$0_d"ݜL]Qdє4z[߮dRPRY(tDgx:?wް)RP kDۜ9nP {٣m~,))s(2p̵ʊ&qӘoFmPt9]Kٔ$%7] NZrH0s@=eB;: u3a X_9<tx,^d_3(OL5aLTd|/v k]iqPoXEoz'ߧ\TO=6~od!p=Hty敛5\ YrG>9YQd:viB8S^-f(:ݤUx ʪ˷k\xzO`BR[^qƏ:J%wSXi]x!R'AIϒ@#=` H9ۿMR[۱ZW߰{z5t #0s 9 i"Ib/=sBjkX:-4SDrs:dfBęzꄝo2KW?K-4 sFI$(tOO+@kṅ'e&ҙ{ E% wzƠkN$ϙyI ;Q n\ i/+[tÛ= !6~a %T^w}pn^ՋVgENŒ\, C6-:I\Zل>c^k夈~6!K+Fŗ-k*aթ oms*NpijҴEA@[7?-A]0Ԡ3̺ \DL R]A:PZJ (+5> ^T: VTj{Ox=-,SU I4pk;g%҆DϿUnZ[A꿊r;w]fCeZȈoY{7ߑQW_movJ5y#Jlb{<Ҟiy9yJYЈCQpƳW%0dgY3b0~rÿa2(l~  5%hg[|;J)eLZN׹@Ug-${؊cb/Sӣ1ba 8; Yq<Tj#QH=Vd XPg|H,~776cJ̔jF.5A9Dd*[*Ǝavg49W5SR3{8*NB$md0.Bt42}lu>k դ}Z;coDUU`5Q;B*YՄ^QޛH|DǓ=e3LfǍ : 2p鱴ndHU O``* X5fɜ]*|wЕӢ&-o^בI·̿SwƇdwx"KdX|IrF=~+?H#]G0i -+(mez1߄$o_:aixBR^tnp$j[X !$/5!;hl1xF|9=A)T}vB mfPsF&.qߞ#J#`,p&7L (RQhvtHn3 ;yKzGT{KnE˰z$mRN2$Bw(ja1 ,O!I(c;r6XZh|E{zoL (Ap# >CҬ5q.nNc~2PZ;cf1 =L/dMJgFEZxax"ϛS3wUJj]Nۦ5W,m̹3b:ܖ*s}EXKo\d]ju-+^;TwBk/qJ5>Wr3J5os 0|~oMB" -l"r6+U{(?eVr5K5jw*_:Z t$ym4دZF?~Ks}csߚrGLY 2n .AIOy2-\̚+O9\i%e42 :^fy9WgD5harlKih. Tݴ4mh.~yC:;ہ#5(Re{M}()@H 7ĸ#F[z o2* * kp|KK辆SHB`j}ݱwg~{f{'177$Զm$.Gⲇ댍<8biDPn,qDֺX'Ò'@|^a /$=ST\=yw(S0͹ vȱ m[*'._Y|z |aQkӒl`^bj%hK9]^4kv_*; 㚕"\vaG8yٛuMt[~3AڋXA7upMk חAf K4=^饾F P)zM[`FF j[VA=W޲.L @nc6h-P2/``8S`~RC ، Q6 jL7/ڠUoB)L`rhɚxƁj@CI UDr8T\R5#vb9+n gwk.䲨~*怙v 6 Getvi/Qm6CܜxØW7= vÝ_!W!emMs+Q٪cpޒJ]=1)r-ѷW[+6M)c{J#Y56uո.z?@Q,XFt&41슞0LEW&*@0P!˜|'Me#Qc׋-HrM>81&0VJWX;_J=șѿ /RG3#%ޑ"LS8T1DA':t[oa PPq!|43P!cS[^ 1@a&uS\|_3?l3$WATo;'4cX~1Xl0{fSV,* 7cԒ\RA8!( %7J4n5DØ{0Ics$t9CR-17V}P4v{@0vΚ6?'rBZ\R>u焳 ΌnS2@!fl#CSZľ~,> iƴi 0gBj˙^y4]#; ⌜%7|/hGmqej׹ W.*߬IL+\wMzv1ټqY<4lGY=h.@٘mpvYM}nR jɞBi/0 %)_}RhLX4yTfY \+^pR zƝʍ$Rî"*Z >=|kZQQ}[LsGV ҀaW撝Re?YJ^sğ1sdոg1,7p#/8GxZp8r 0c M^pr̺i/-|&측!wR9كǻʱ22T<9޿!"oՃIfyq8`É4iL䵔o>b%4m7tJj*fr֟{N&S&abv_8p[ +nsݠ&Y:ъwo\u'7EZ PKZ ׂ@gkDdToU6#:PY[n#NOyDKS/,|&ä{BeQ A5iž"Pq6kS&7s$\ߡo#,Cӥ07p -<;lqs%|P//R4%jqJ;{BvYYDȀpkaKI3ūjni.6JV|X9ؗDػֲc}>#;?U`,8HZ4\d|F&2V0zSrKUO13|(=:Gu&2$dz\iC}wrHQj51Hdc(I!4"܇\uDש/Э\ƘD0 %w0hqZ>)fV /Hi ~ /[qZ]n)8{ۆIQ Pԥeq-UE> /.NgY##̍T3fJ7]Ν"ɪ/*)Yeoyi">3.wlcm$+m6(:+,%Hnԑ.^ⷳ+?oRU@ {D#T:ox-<~iP X<ڄEC%I]QukH,uL\kƫjI%`49B@Oƀ`Xz"F@fqYJuyvҠW_J:꒍U7#3( $?zÝ_r LC\ 'u6B빠dx7۾cSp\:L^Sn^Q\p}Y젝< Y#;mF/&C7.\%Y+P J`0HVSY Yz]YA3az+6ٛӬ_<ʃrb&/2x*Ua& ?hICN8cp@uA;sӍQXі^c"?Xiͺto]P,W!Mm! W8 D̷p$7?8c ";PkĤٳƒ~ ߑǮ uڤJNjD=X kM= N1s[Ϋ4؜lA.D322<ԙp'hB~ZX$?3<0XVS5Kk$f P-aΈ5#8xP&5mOb! @tՂvT=htOs+ǘi^9#m_ea V>oÈUJtIG;7Dc<ـ2\kfkq{\^?ɒxOgT#6:;NuԺIܗ}?ʦqpī ƕmts9_^ T "eh -6s% $~spC2A ,BSLpwxifڜ(RZQ'5y{'eyuzEݎϽ%7ÑCa "r74@OZb`bNI6=R3ٮKNOÝ_dzƉCKJ k/0~+D[Rș41W ";2jFN$T"YAYĈa##nv<6~*0R["o+pڦ&"C\$*|GX;Ezr6JZ_EdР$df.Z9Cʕv|l+&hfI9|?I(m9̈dZG10-}`2JݻofnZ+ (c!\Azum!&j*=.3ktx'aey^Fnk D Apą^KJ/l-Hb%c\v?EK\vu 20&jvg.Id\.jB<ҔD%5}@fs61YUT?4]GM'"w>q0$?(F4H|/5ݻ^W2{0J0thbc2peU;u1OfB4TF4q+c᧽H4XvEk~3)bpŁzJsٷHl"klGyE6peT@UEcuiGgd0`Xq*'dCK^& XrZU)iA=a% ~[o.|5p@7BhH/ |qYaG羐±/4x*Lxԙ,#G?$P높'\bJ]X[p%O-́ZU515$]hmi ~ݖCo@~KJ@Sc!tgz/d%-m>X?%GyT]بSE[aVT殂6pLp:E܁UvJ+bә!sOBv G,d%h7/lJg{.(M#'(_kS` X拆 %>ƙ5n;^'K0 q\8J *VmU! W̟B4~~-b v_/":B[v ˱8: ޼!yQ/GZft64S],NW5·(@UƔ(}xnO5 Z`4s]>j~>Q7 sy[wOxMVU c$!zm$x񢱵;]D#L/,C/;:|Q3C,la,( aiv+ MA0|ĜjX"ۛ1> HԽM oA P `hnsIe$z_ uAdQ7M9Z$ &6 :μӐ. qm }n"_]ٞ6zU zz/~^u@k 'tQġ?e{+M+F}UίODPs#PU)ډ# FJ y{ n2=X,AqNu<!U{j^/H Lwғ^.ΫYcA[MLu] w`(&t?DVIJ;$[?A E ?jIjÞ`bvʂm wy7l5>Do3H[K5( R34e@=WTݧȭ.@f.gS8଀=#wN(C-p1R\͆N <,1l]70ݨ}K0g^&k 􇃷(ȣu^S U%뵶omQ6e2H?Sa0z"cMn d*Vfw*.co>iCg-}6BzfG(MGRCnؒ-.m8Gf0Ӧnaj>tnȬ^nY:Xw`WkD/>tA$>sqTanݥ [~@QLי8JOcǞ_au!]o?;+pzTħ1|x?~sZypyy/ TI@_rVc߾?(C'4}CWOQyi+a TH,Kb73k(eUyLCL/ mv鿓o]OV"(\Q3qͭ^?bQg']~CV}N7`]Ԥ@+@#㙯oQ:ؽ3nkJ.t,1SfQ5q]Dp ݇ϟ0&[7A ×.q[/X>[rUJөU,|I IOL4/bv]^h_p-R @XM:UhwH,U <p0fhs0~.ic,7qoOF-͕EvLRFh%c4OL_t fxfRPXQjr""-X@& kŰFJ! 0)^pM9tW^ֵJbH5cv?A$Lӕ \>H>L9\"by%\vv$s "g'@)lZƄ€ٳgHQYH] +/N;;tʭYsm69!""~fJ}oY2Eo M!,̧VbH$qxat 1#Uey4֘`gݜ@ ,iyky\Xw1"'cད-ݦDs"kכ&MB$Dīs_߫?XVW*ǚA:XI:iVt+K.Z{eN3= bY,eJ ~ &):FhzL/ p*.jVhp|>&!OޔͶqg,E(ql\8r&ެC n&9žc]arCkk@,I+ nV8mjb]9ɿ(N1n!R1Vރ߬IQHL<'QHAwٍe怿pY]%:3"\ 6d1 BtgubyEsm MHjVl3s̃{m`Y@ߵ }9UG*\ j>EqFC:/JqW';$hl5Iy\'l;,ȃ>rv.`21arZVFw.h!cE)94~ !&& Z%^.퓄Ǜ\!P@F&#P:CLdE9=t=0vgT곓1gYZ{vI s^tZj`Xj{UglO"|$=+QT8 V*N-T7S?n*-BF<ݝ/$qI( zobL5:ܓMD&Yh}u@!WVMOM+2~SrQh*]^M-I7eNLa<~1>/PzdhypY~h2jp;6D{SN1h~~!O8A?+,#e'SQQMEv@h Vgo?2̩2.agF"`{[YΙXBVW:45He]i;,@xKr;~aʖ6nt%f^y6/>P)A7KͨGoF۽E: T-{4Y #9}-A ,f{Ʋ.m8g}+l/"V =[*׆j]C#' DW]F@F:r1E~~` ޲2C˜˖!5{ݹ|=vWu-rRbg_EUӍuau}XcP-,Z4!a!?*̻NhhesPro!մk-禲"7Mӕ[u]jA'QϢt 0~ϻ5DpIoڤ3s_*G2A'4ZlG%ٍɧyOGe&Wvf }qhl:V$y(8ȫf7b1i9=!EY1+( O ?Z }R:VW\ٞr E)Ws"gF`8EU-<}a Pe,TTX0ʺc&Kk'0ITޣv O4>mؘ3.b\({[1 SNq*QpM2ݼ8Dj5jM*tk嗺s(!uQR? &`A'=>bxeπ<7` BP|'ÌC jS+jO:>OŒ p`}ۛEpT>}T=rDݭ _825Tf;5@qJiVxG%[)<{ D7RdFGXB&}A;jLjo Rȍ Գ*(,@fQ ʪ.Gg1q[r%4p6Eyz`]R}Blz΃(An~ÒRǬŵAgM82)HܨeT Et #Fd.^' f}>k Ýka[,&Ip[΢50w齾<9 k3<3-"wf#jsk^'lLȲ7|SU{EE4=f,Pgs޾IE֑\r"34PwMԏ9jB,Ry7]RIfWCYgJWSh0f(뤘I m`M(! ޣˌNtr rQIRtIYM&.YL#UD8*ЏEOh1hAHQ)*\w]U,Ee"*xcq&A(%E~{- wI%ށQ0+G{"tV{ S֟M5p$X1/[E/'>CUΔ RއD7=6L'K__p7^㮟wL^!QF7,՟{S!E{ m6XG씩x8q-67zi\11a0٪lj%\14 Mi!ջ,.k495{$OD[_|?obc') 4Tg$2J3)btK$[W!w Q[9zabW QK|C%bxPVQ+ǞC~?{ 8m\#M‡yvVqޯ=a:$%QeҽF]WRfc;ޕ:M5\B 6 .HM?_ٔdճ\WZspB/;f\hwfr\mVΝaCDtn ]G#+yX616BˋχS>=ӋF ..x#'9GCuZ+qvYЩg2x`z}_x$cH_ gǺ7NUw[sҡfBQ( Β$U5,t$Q,9Te%zѦrfCJCFan}+I ~ rYfڔ$޴-u3Nk;&kc*K rg*Xxt6{( *NF2oj%hah a-SN fh&g&-\h+M54Z*LO*w*[|U+V%ց|^hoYMq-I^зQk N. Go۷ŐRt+ҋ ^ o:يP]Gh-Wvv63g$ɦK4YןthekL$=ks=3nD}CZy}đPG0tiw 6y4D[H=qFCJkGhi(%Ꮡ!Xl9 ` $grp3KxUzL K=s`xaR3^5W ctjY'ژlhy)x"yqu^'}U]I)ԌQE-8uZq;j\Lj|+:r\GDVՕi)[tY_^ʵ ¥gPNJqz$(vmZֈP,I)feh@]#d R~ :2ԪYRB߻oŇP` sGgDi}璷sK)>ApoH\@&9 @4A-MކT'Ż2voR,Ʊ[0FJӏzC)jV!4(TT~~Zw$ xP5W>/כb;^Ĕ,wv8N?۔Z|qaESs.. ԉ)зe.&\~T2HQ뚁71a\ ӏ5suQ !ڱ<3c{މh_601tjv@Seh]~)4I=є {NgժA̤eF=m'`8MF!gPD$9ұBuZ5p>R#PvDDb _ 9@1BHtY$z4 {_'a@I `Ff"Ltu;C?&UHy:>wCEv*8z3!R.;_3Όl\;Ƞg9ExW&4,fh# ~֭)zd '}\0bi@mV[F}]9vuuʞkBU*1#7g# (*k 2? b . Hzͫ}2&bȿe=Ű{F{9~ŪGkMPR[q?/7yuc>QESbMUy{:J"1iI+i%5e[013bs?:_&s{2t5<="o e|Zy+{x݄.s('7{%}6# 9R5!1ߙc73Xj $jTqEYrVYhRD1à'(KMJnk0X=XvgT+ɾd(7g9wHƖwB34ϧ{\+-:dח*.t8LF:͘&=p`ӭ^Jڞ*#fSy2}3Z2l$kw}Iϲ:0 VcFMiRr =ۢ:5;xhM.@<܋ȱ R ngW+X4ېZvOHu)7^O29|2`>[0) =݄F#=ۭ8}kJ{8B]  C iIzybV¿"_k-m2(//)8H(W><`͓,#4Dl 7;T=-oI?9Q;.iG-78W=s\8q%`6JJ7ؔѕ\@!qfs|~U/[> B j ڇ?C'lq:&M[_;VT6ZhUXo~ 5fXh xi {{0]e˿e"9:rK\M{ځ"Ѭ _ 7-V/Hөyl6){I( #~S$)F@+JTnG9q5벲{(g7 23upQׅ{SDw5r]|ה"xNZtUuxs;D}N~ >ل߸15zT״ Ubu_%ܶ]3u7jPe*3Ԣߒ"0Ec1f>ƓVZ! dRWT:eMᥕE J]Kƴޅ+yyK2Wz mqmyϼ|AN׎SC2)diE` .50YUQLǓLCw~dP÷' (y(enpqԳ]KwX3~9_`X7'"yaƚ1@ITu[ e.h.b3P{+twt]v~>_nIo_X<7Xq>8ЫvK(MtRdv}dTn'Ĉٱx wݼ{W ]'k pb:G*Z7-3㗅,8zCg~l}ެx۞A8:QA0ǾϫG"/8NJdQQ9mmW%x'_*3މuA);r{#1YloĚ鍈i2i%r5li^60j^O%9/ xN7HSΕUj',XAS.,A=?^;痛0I?[s@ v*X^S| EBeWԡl%ηK' AY}#2d{쓂=CO3iNOd G햡q1+;h%W$U;^gKZs0?,1c7W"k9;UcQ}۳CF(]e硃7$tךq=Beq _M0gS%YBevV¢IV8'JLdwݚmFMS3Qy dV,p Kb p헽@e{e/s/h;a>ZI9m^W/$m{BQˀhדC:0 \z.ň$U{w.sފeuM4zGՒlJ~$.r|,Snx@meR<sufuMCS3&{])URMr\ \?@OsyFg(%,(ň 3%$=䱃<8ZEôWg7z{ g,KS\M_TkH]y){p~ 0^:%e{o<0(`G~薆eZrSQ^҇<k٧h4ʊߋ 6)UjymvQS;ğ& I@t5D>rCuy.&z"m7/ey, 1sD@^q0ʑ)]<ׄTWL3J#n3@ݭzev/@mL~)b-p &,%{D}qm+ Xpݵ !ҘjGuSVQӻz(#i}i&1h(. XZO@1MTKds0.uoޢؙnϹ̅KzZJ{k<ٜ!"bϾ9K|?tgH%Sv |G}kçXH9{ }Rc&+;?.2=yR>tIg!<66˯"Q Y\ 7'yg~Dw <ǩ==b9~Dm㤬k;˧hN}ѝ 7Al-Mq᝱0>Szv6WWOۻ=^> .'l,ݕkk:,% ;_دFPO/Rݥ5wz֡XoH!sHj7]rkΘuXNJA&u 獀e"(3B%VY6>D6a*AI'ivD8?"Xuv\ĩz @W¡Zjp~ȣ<&l[pݳ7&]3%V(/wTlQL*Q}TЛ( }r}kot"捞7  ?<oӦg63'OˢP{pa ƥۇA)d bsi}1lo1?ˢ2чl59,`/&;-p|SVr|%dA-ׄQnCC-fK%t~jb [S{w<<{hE4x*㱠^Rc;sMqt3 KfԹj:1}{z7i \U_g.p8e[1RPE GWmY l*J3x E7D̮2uu\<h0jH8 s7HBL˓ È0:+&"tL,tDo۪bTNL5urf>^+j0Ycx{O{.^EWfe7QEKě=qҍJcpݢϲpzL%.,dk#!V׻f*i;C! tMEWa<:)~@7RT89g)(t duD.yliRc 8lC@b  sŁpQM2+?]@Xed/YJ j-n L G  s lY5-_Ch?HO9yH&dۥKVJmu;>ReEA+vӲ*;FcOkI'fQAfOt WZV>QZк7Pߑvv6Ǐq 0{5WtYS(e/&傺nߗ44'67q'KxYIѨ6.5\fmi:0xD7Xq4τ c`}1HÍfU,nF`| T\U_fOd ?z3'T[T]6I'P8,?ؠpXBA+1c$Clz016Zu4TM_-ܮ|&50H'z$ jNu܍dV*y3 MtB&b:M9OIܫ5Nw]mi*D2pe} ,3&=Uԉ.S49.Ǧdv&TYrGu`"倪aNcEK!qI2L= #ǀ F'ZB?Cb 1 ?9~~ FےKѬQ€%9(O8mpgIPaoa]ZMc%DF͚.NeKqKC5uR QES:%5h,bA`s%iD_egSի }0jW~`l#N1ZZJb <9FU"첟/ύ -[PbB&}g؈.VV%4w,̞Gj_¦vXL8HmBw/$!]+ _V`swd?s&b%)kˎ9cQ#j[9QIjkKe9KN&u~kpr bpC)7v`*O`7>:kA >q0gx}qhkJGBA+_ 9*VRcdj`qf_MJ͞uҢ ȮJD懓A {ډGs0HgDt%`]D0k9Ok{yen4.q7ٓQAgyg_xeu8N`D !011@W>*=NJI`sJqZ W@vpo| B˨/_^xƍQ 79#116jiM¶i3bgƬG# DdWH|кpga1KML2; y}a-P(g>bխE* cK-B&z2Hֶ{&j o痶e,;ƘcS|RaŅj &+,*K/QUDWKMBz^qɯȖz iJ‡lS#.H"K[Py]klhd%('&A83e tX/*C|ȶ.yۀԭ4řۨ{,d nT {{ #Ums3 F#8"#RH[E?Y/9Wh#%L͖'xtcI:luD6eF[k:M> ؞vs֠F9 ]@YܲKU'hWd|i xt'ufݫ[|NGQXؗQEFD 5x7(?r x ,~[]pi6:m=b^SH5 ^ ԡk*YM$vi[2R 4ыQ+L,*>Ney< JFܨN+hs[ج#mb̕ 3$ ̶S۞4~Ëy4V<1ߤ ewFLճ'\K ߲4BQ2A%m "UHwY.U IJgu&N;UpE|&-Q/+g6jJ*YL#(vAՍ~ uhRmZa#C /|&yOĚsԏ 3:+E{:::׉ L{re+:JcxmE^ި㝮X`k%;hn~pWڹyss/ơq|c U JZCq ((ܺ$U)>:YKpr0!iL)kqhj]JZwo+UFߗk>0Uf=1Dq rWԵi[*knr p_>_0 4I5 F2o*Qo>C,~1횿YIl¦@%oWW[=$* [LϾR`-s{ɫ^ƂpsoUGoԗ:#c񵦛3ђZU+rm—G_ή 孧x<8^ټ>k&FIHP@*~"U,ջDs25z7ߓĠ.z!zʏ֠Ov߾q?ǂQ0~2$)>CEfEk##fgeN&"L]ebHw9d)3iU ՃІSI`!O΄OY|g3E s[ԩ*wJ p~@.W`K-!$u {%8\6 _mٸ+6D&夹?%leRl: k4h% M}7?(e:+)l"rdA>Z -6˞ ΊW<Җm͹Hı&%٘W4T9ИmW>] }<_>_̳*&Z&yY}(b<') WbꛛTSycmYvA͌)b1QJh- c%D{Tj_.RLgJڟ@8WTE#FB$odLH[I0{kxh<+