apparmor-docs-3.1.7-150600.5.12.2<>,TiYp9|rCv~sևTWm4pת'M!]RKPKT:>;X?Hd $ C 5Ihnx         G  T    @P`(89p:FG, HX I XY\ ] ^bcdeflu4 v`zDCapparmor-docs3.1.7150600.5.12.2AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.iYh03-ch2bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤iiiWeWeWeheWi{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-3.1.7-150600.5.12.2.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ih@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2b 1774261849 3.1.7-150600.5.12.2apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textby + o).utf-830dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722?P7zXZ !t/N]"k%R{_OdT8v%l_ciSRt܀nn8q{)*ڶ)?mX۽҇27^Tl=VQU!m)&GUkwL@3+PyCI9]zc_F*<ו=y8t:ӛO:Ay?Gg."!'M=9P7oaY>3ju" tW*AQpD{pqa,?FOM6Es3Ҟ$R:WgBZIJCw-B)3[J`MH73A'B0V>QK '{)& {74E%F9oXrK k'ȴxs:&*|ή@ efXU "nM-k {Xx D)6m((]W܆2!쉘bD[YaIv5 Aҕ<'ly_{; syM{MnaiEL$^/A[VЏf P)P0)ևbM.(0_w< *gj71rw`X4!#kM;î`PSh9[;٠)eA":iikAkԿ[SQCp' hū Jj""ig5LxyʣYs{FS$g w;K"|[Jc%2n›Nz @-t^߄ǖlh#(2aSH )(^ 5`%_M߹eP 4guY]@Yk''F) F)ECК.0ƫy?ŏHxz̳  Oɝ- -[YmQU= q"ǗUݐ;N__ d҂4>89UO~IjvP_ad {x(I9kjpxc1cEt|N#Ĵ6( |iՒcNdZDA4¢4`@)SrSH%U;(bUһUesD㿡 C6%l,)t“O$Ѥz]] $k 8(uw+\:fЦg9jd,räV^IC?%tnȾVkw;6~dO0ˮ̊K-ᨺ<hgNRM ;OF˵uR/7j$&#sy趈jƂ'&|?WZyReof?+>|tV6c+iݝBr %(mhDn{QAG,6APZ~/ I@5?x#/e* A&Mz-b@NpRۙ>X;7R]!*މ2q ]f\ rӖ1ӈ4SEϠjpHHB{JnTT`22,=W9 Q +?9g8A9a}8鄫[@Zx %C-KFtN= -`)E8$Lmέ*@>voDo )enT|K>e2􈧂 +=|S;Vԃ -=wB@/Sx,ISb'Ra,PЎG!F81kHd:sNF5nUc7C*ȴam:QujPmfJl  :G>{75чT_^;7j‹C(U DWo dTLEb Lu"J*ę`{_4=0Vu()V -rAtƙ(6~Lwg-c(S| a@4 ;_c]2_WOۤG,  ;TΤAUؼ+ׁ8fsZH(ҥ s2D Z{Y_$\ȥzz?I97;Lޮ Cw/οLYnwj{Rf*bgLD .MѼP{W|wCw ݎNzY|`5]m\gޗHk䓠ۢ4ْfCp.O ]z+w"ԝiS O0`Mk{"gݗ lr:m/A.U$pdF+%)G/t\cژ>4z݂*\b8iKj/\6@R~|ۭ!QSjuB .!p"bK2LP!cG"Uzݍԯ|Sx4c!.u$s5Y,";tAT,[G$xK;\aZ_0&QC .SHcu$R4jEҋ5Ě"{zJY`cdj旮qVUWz,}nNO Y_CJ cs>ݭ&dkosh ,ua5ih 2%.„3B:P"ܕ"[xN[Hfr/gXce򌼮ɕ4C]횙rK<^qOKuGB_ܙ'y21_X,'"{Yn U)A1^E6z2/{-5ͮ=?=*c|Du֑2ن bҳc[bjӠb[1 u:m d%"^WHLί_W&b MlF4^:E'Tg^II/]-LӵU89DjFA2G0=Dl/ yN,P @{з(3P&)D‹Xq&JOiԕFH|-V1i)0#?P%] r;xBאZP3^ueѧ^m=@._t;2Rf]1>UPhQ,.:mAqfƼiV?h_hI[C!;Qac34j5|jk^*{bptZPDI- M0#"ykM<Ǝs\?XoKtuWhb*IJ K@;J:NWd$ølw]SzV ۆɐrZsVщ%< p"4Hȃ@4qsBcrG[@w> yEigT<aJLqՁ ^ $[4Adkl-@7a$}{oEa(ʯVVXsw?L9z{֌UDVE{y_ƦuJUԮnh=f_,)*B|nzӺwI{YE[d}*{VRwtA30΢1q|>0:PU/xC%QHqwLe\Z?AS7v Fc^JS :mIK/Rkj r_ XL'bpH?Jq`qٹ]>x?r IBޞ{3fA$ O=˲yY(uNTdBfV2*D%?Hs8 M\)cwVh9R!6K3Euu&J {~"x2[ pMLFb`]|IlVx3>H2P/ <LUt(?g E**4|*՗"ף(bH3Gٷ=rTbYԋU`u c> a`9ӥ9c/pe:,0ܓ7+_Dr☘ MY,.c6<(YhӖxHa53<=2٫'錄 B9jdܼ׾w[~P^ yH>F^]mq"s7\s Li)P5{|,#Tsa$M#;43>`@ MZhFC鈔'վ$Ms@=`YG&aj :; zDf~x+H쨭3AGF=bcGcV)|QQH~ J΀}OzM $@?n'\}| Ae.YkRI w  n$=s;Ct/;%y-iyšܾ7V&SeeX͹w^~)eh4`lĄCF 2(5눨%gKdwJ G[&&ˁ! :+&+*I<.4%?V0 Gv.O'k`[%++Mgl##p@J O B`# OWE Hv 5T/ Q@{v]M"mFb>bz3SW y/e^"6'Şx`2y,F)2@jz*{M0֣97?u;.3u.Op@!"-zs ^H9f=l`җcoZͅZгdCY /ղe CM3sIeGlՂ`qgrNf@QPQޘ4(| =P;|eW='|¤RC!*>p;,BNd;?ӆia2@8_ѣ(~@?r=&hh/o{mJ5w>s4&Y=-jKhꯕgl퐉"؋i Pb1>Z.cBwwl0rSeKhԮo*\:x ]l]bb-uLSb?WzHXy(#w`ۇbͫjG +0IZYBC}pǵ83U^^9*+Sޖ%yZYTl3;Ow3,9 Ka*c0kAru\_X-pMZq~yާKbҺ4*+58:gJ6oݰo'ً?$H,Kkm~g |l:r4>!}@q%'³Υ RUw_mbDO|2ya-ᘧa[m"-^;bwf}+W6tٵ8y:y?c`lGojHյ-.f,dMQw,H5(e:LUQ"<ؤgd^8}'";>bs?@kqE[xiblK -z;g5 Y^7#9gUΒ~Lk3=&ʫ`>7}}X9"KSWGV[q1$wБm#P{dF&_S[$Z}ՙnQ ŭNV ^<?,$H*QU^͵A`e4%ug)!|\`cl(8f!Xd:sҿ fZk{t*H$~W/Ie{^*9eəFf7m}fO jRUv\R,i0vܹ0ZZ!n&!|ps::"Ű%epw We ~ H1a2tq ,پLʈY,VYoپܺtΥT+"J%g KEi IlZ>-^`jG=_wAd.nX !Bm2mOBbP]YJ\ZvS& !0Rz޼&pkC'%9nO"MQ{ ]Mza'Nܘ g=D~9LGj*s^"VԈE]NzS^,QAy~ZMvF՜K+3qP~$$;ܽq#>B(ZĚ;5E;aڢCЕF:h{!s \j{J*ã y }G[Y'Գ-20p)B7*Ხy85aNj4bHR:!c}FH̴b9}i WL/}zmlɵK9Α;_Vxw%u?ϫ s+z #" y j^;e2|t1K=KG =_ v|y]@ 8hߒp8pJ O, 郟T7C]0!8uDRMh+Ɋ}hw R3.(FF8L sX4lRXP H>9N,^pR>Ȑ4u7㈼qX 2}B'ppFvۜ!枲Qjq-PNX 3ns䬍 h.~+`{rEHY-=ťn/riKu(4o Rkڜj 䡽 F Hj*ݗC6HܢF.(`TtvPQXrsvoA@=$6.;Y\kDgwcilpąM㵅6d pțMӯesCgvu!k6"b> ^:0C\^9~Rln^' yס|cHg&ޔ!_fa*@L.n"d_V<#RסQSچ;>~$Ub R*3b l[$h-Yz'RY>E kI_"ߡ{ lY]4-y* *`>jZ-;=K3F]wfyno'Xn2 &Uqg+ R9mX2ߢ;"sgʠ+ Z0}kL3/vL$.i B'l'$:օ'40_AsY]'ZTRq n)@ dyPË#(7ق&UEr܁MυGW(a]|ac+I/+urf^&qRBHپ S2II) 47A8U? g@^o]}`;^/` h)$u~͹T (xjZʈ3E{;"n0pCTyr5K߽&@`諹6?wd: 8L? 7>)F;HEC.ɿi"F Ң@ԈC-9e3 5P3/WZW,;滋[+ Qt اঃ˴ |'@3)U8ϩ:m 諂]l43 ;%qa=y/'9IuBwu~bXౖ'[}1siM7S*1k[5}Jގ|)&f%#5)zK#703tyj0Лhcϲ?ǀ:WU>J[WpN6F!\Js~rF|4B. u |^hBjԤvi#,t:Z &+2}7ڔ'*hp1_O\"6*f oU  pZ[>< *&`JIѕai>3퇒ȥyp Wd UѾư=!'Mbi̠5z4, >;>ՑRy2Y^~P!،%i $L {q\:\ZMYplR`s OʝLя걇++ML\UE <\&`Cݣ{{n SY-Sk(N't6F$n UYRYC٠ի>넎QY|+P(5TohԮ<زBUZ9Y9#,޵Ƴ(E!N{BtX%EUW0.Ie%j9$.P Ytn#4ϧE1=8Ovf|mX8,Ud]YG )l:<1ԧ}S͆29i(N0 N2.M^_mٜ,Gq ;I];+`A"+ .cq8~:xb2j!Fxf(;?80lU^0ԏK{3nR0D&dZ q>11×#A58D \3 l]dR"kqP[vD+S p|1h<߫eӺ]TI~ KnX9°,޽ jwiBL6qMi aU~ fTjf@n.6}'ӡKL"vYFɞh7lR,#J#i׹Qg;Ӷ-+ 짍~ ˫B$ؼvt~Q g$A7u ͐UJülݡ缆'0"ힱXpd 9 x~?!#mϧ^H3[M Vg]38>&?S5jp Βo ܻn?ѠAG 5:C~8VUѳ\,;ozF4(GM|Z9h+ѝ~7ܻ: IJ"98? 0J_Lٚ1Ejĉop^xQWI.| |_o*/C\fzº'*)ޓ(>KLlm9$[BSv=`L@;@m#գVdU.ໝ\ Mf- AlJVR 4&⓭j{̯2[.|MtUƉ4*&@-$ɴ5CZfPn({kG`2Ξ!;p \(%gIywq8$WbPy )A>47t߷ƼpcðWʨbUahtoᒜ3S3n>uL ˵' \!Re4󘨻]r6*rU%eYvƿ.wK'Δ/O@tn3gtkHǶƗ`Dnד=egR,%j@H{[!/FVy*&czaCBkf_Pzpi5_]w3o j۵# ,Q(vi6 NB|Unes\Ó}` i7qd%+?8X3Y׆Q=LA-eN{+ IRU4Kl(yd 2)}ncuN 1'tH"Go]Pxb\IBT6WB''rk133Pڸ4ipTE1sϝ@ 8}Չ2Ķ@,Kz܁@V*}j JխͰ`8oY51\Dc՘&]f\K^ QDg % z>uwb;AS-^P;U}n7r&4"]gaqjIxO<~L°"чHBׇBCN]zNW!/=wqhp 9MK7a,O3&SeGUw^qac\&Yު7u#ɟ]ޣ i)%sf]a k|BǍk?:b}^7_&SZ. ga(IHxuXI'Xï&᛹JHF2^dqWtڔBo Z%N5y" 2/Y L(p+%7}bkpJ QV.7 ˲]bj`[HDTUT ŒLKulmurIf+7qyG;lMS~m\ހiJ `| wT5~5&$ FS~5gA `^IrPh'1J "J,Kwu9qQ؀R*/ˑ"].;W1GN UG}$ΫB+͊݅pXPtxχUޓħ Vl%!~3z9  w-Ʉ@o}5NhμiaDUxUݠ( #?t?YiDRpg-L/ =uA|!eot1_ۂ5!xgJW=IޟA𡪷שH@ ʞ_jThraiYV}^56Hh@؊xBwfҺ~KhɎ oJ;oA`U 8L]\ip\V38,29a^4A C1cr<3 =:L7_[3D T<9Ι^1m(a`t ],PN+~pVߥ؎oM .}3sEPz\:}1ᶷˣl&+v}'3Iq6cWLdgUL PCL EsJO? lZ'S\nɾ"_72O/a^$ݶvl172n?ܳ=8#yﾔT0=l)p(DtqB]Q\h7|oEAFG%XH|YV i..>y@3IUퟃ8w0VV2MvmDqsAt W)Fea3k8,p̤%>oJ:@' ŮI>ǂ#Ԡi|)w,xB&kиr rPI%sڏ+>LS"GoQXn/"G,E4']ECPfcNk%[soT ;ހ1J5cV-Mڂsxmi!vcW܋k%dؘ>S=r]]4yͫ;lWԔzFS׮d5Z6떏*^%Ua+#}_}(@{}( 9RhH_96!XtW"*>ͩa#(Kߜaޥ'0C-ȥul7 F['55A+fl}?`>^OJd/+l`AUUg KF4ěᦟH^OEK〧%22Bb H#<)BEWMkȒBD< DA=A93tSZbS.蠜3](hTc+GIi~UT+K(k1_4,XƞU\Dr}R>p%g 3NBі >dy`YUFJgIL.V <9dݰO/+M'.!=,\q<(ft' mZ5OU.#C0=)o[|/@[K) B4K#8Sx@۬xB/FLE ^KupD6/ '+IGUB[u_-`@|2}+C)j$" K"rH JFz=R|s}ރGpm)J^c|Ŗi̲"Cwo{(')] TH'綵٪Rv,D{8<)Od ږlBTmpCC;ElISo;%2}ieW0,}6r@Wc&y]2[r7.dar4U5/j5bgX bO6 j%$|Q`K<#Ox=MMo=*tX|"Ayi۳4wܢ%JD,ʀ}O 68 A0 ()l ](5>S $cA_@?`qqv}BCXQJ|zVv Eà ¨CZ5),a1xc~ZF_#fT;hv C u1-P.3֤IʂKACR($V4^:ȳFckO\.VEvʹWѡ3`]F5ja^^Ms^jG\GUiS~} u0K'8(Y?"W':oK1/wPA-e \h.E/Wok`fģOj)q'w'7V) wMxW90(^1MsjoB;hs^иxQݚ¹¯E@a:dFS-dˏ)ΑݩC2&OaǙБq`6,G9,uiIM*i톋n!Om?\ŋ~ ӹMg\mcSoG.TrlGA==$rJM-T(Wă=幪 ss!щ֜Q≽]bpup.Eg5V,w.e%SV5Q+EbxG@W|-,LM-`}\Ϗ_`JOk) y6eVݯ:)9 K5_Kv柶ւ;<\~I+iQӢKzlOճ <m_#>h(d/'(mp;=yԌ@O-'rۏĪy~0 N<,}7Ͷݹ|( }2w*ą$k>q+s=`>4~}Cir?Ʀ:$tz/l~ {hQ#sN t؄} jfsU9\ּB{'OH@V͌E4#n$̎Ǖ ܉8-r ʳ*M2@m=a2xwLp[:cA+";f&L̀HQ7%Ja8P1$Xn 5Mo% DW#;Vs*v0[p$vt!w);묘{05|sGBdۑ `cV5N#9^;ck( HQTHyFE-E;TD> ;- ~{_5N=8j̳`a)25ƹU7^#~$\XՐK9VfLfgjq[x=]AhǺ4U=djauIVAhWv4HU%Sz2y75On+ ($Xf'Aܕ>sz]b%GӸBРV9,({ѭ .]B{öY qV~W[YSIS0:Dŝx}^s^^pFRf8:ög!鱛<$_XWsKWk$A/fqvy1sBv.Lc Y) +-D׎Y@)2Ep_RjgvՏ(o_ڡu{o_0M,C`l݄6蠣p@0wyXy\U+%) ><3StS3H:?# TnDz^ܻJҩU5 ̈V0NTl 0~ x_{b`*(g ʡ':n#oƻlʆ /U3b"m dԚ5^KEЅB~ c~{gS``Qhϊ?Zn3HoZ<e׊!U@cD/Ljn|`jZ.w}B̏n9NfIhmjgzRw~Vƹ7_i aIv.u4h#?x5fm\yH]l“YCMOUY"K^$ir1>U0busrSigo_{O~[V6LSq&s&xЈ<*$]8dtU޻mY4je3]o5Æmĺhetjť^r7*Z-=ʛwřMOp`o1pk@0/!U 3 4g,! 'ө6mqRng!@H,*6jNfsifIo l>:!AM{voȇ#fDbd^bWxr@'Y:$ · \(gyhcIP4* .&61[j Ï'q 0Q#}kA˙#2;|w94qAz{}( /\R9˗zE= '!a#J Ta㔦~f8*# _@$k[>`\47<j80T7~)EsܕL699w#k4Cd>pÆU)qPXSyL0Xtol8;~a pҭe'Aԫj'}oI^;39NJl2Q_ (6QuCaD& B O4p ͑UslyiYl^8eGRƌ"I9ƂX)%yw>(3iuL4 B&$:rk+8x󦄷nn:k/gҶBkyBjm(NPm*DЭ9YS̅]2y(ƼFotYF1pteUl>Lby%V\=R>.{{mqA͔%1˛Ju/ItM3I mK# e ~{{`ʻ#RO.ㅡF \" ޜTVԉ*&cR=FǺo6g;< ޕ]T-[kQ R~-zբ)3c2tA o-;i5QX*A1~tĆLOYɮqbDjrK#u)3&W3RUYvX _>860u"JxZ[ 2u&W@0A{ȢT|P{0N=!R*uۙ^PN+d4|,ZE:I vf:LNl< 4=rF'v&ֽd<y`z3DЯUS!? 2 x1k3eJ 7»-l -IUj+st2&0Y+k,U h IbD9E_Dz:Vmמ9M<μ{x:@eBS@ԃ)o,$[I{nq&sL# q5'W<v-Kl&4],er?"tjkGSB:Y4HѪƱP^(e;Тbk%_j$8EV J_nQOs|2>O浧^; &#$K~jGޱ$C𓝵Ć7)7<8ۿGޡ)m{Tbfͦm켐j5Et*ml]LMQ5p1 f>+K\hspI@ BȬJ)e_O=8Ez(  6Nr*\%u`,#=5 Obi;I5^CTDbǝFI)OC|뗞P*2B5L+j2z=˚4ojׯ0@xGxVaxXul]ˢvh"a݄( /76_G#a\94?=ЭXg_ ^R<*ҷ̔ ҉}Ia.)w!p`5vLxi +F, PԂGNIFG^ћ,_$o 1ZVwȺ?Y1Fi,53q0k< t)0[5l=Yv`ZvhWEjvQiOkb %8 dԤݱ~.jF!&4MW^F,LyxZ 8q.Gx3D׋q^c~-$y;r'jMXGhm1z`&v%ѵ&rF:(8lud9s=V6Ci~`N%u^T;ST繌 $WhB5 TnLP;.!-fc5mR YGܤqg)Qhf ]d 2e=RuANջ5錔<1&?\@Y¸-8X$Yԡh)ҜY>7,_0:n`%Ww) , kw`r8n "&q0}5xԹ"#?H}aEg'Wj "+MM<\N/Exͅ+S39^xƮj&6%@ 'v%-mk^Dxw:>Nt]5|(9Z" q`¼V<5riG^ v =B:ӥzhL06ke:ܝQo8^ [ȋ<%K) ٽ;+ؽֿSu#w.6Z2jE, iGR4qPjcuiZjX>g9 '&tR.’Hgxb>F-`tH;cjn ,+%О: &_` AtȆA,4j^s>gO13n& ,^SHnX}WIS@%p:8zzGj,X-kfɔP*,9!ވFm뱅2mc:?X}'T$,skJVSk8~'GjP lQo ';ɮ$5x ̔a/a0'ӧ!T_\l/Ў}EQ oÚDCo.kz+]qCEAmoOY0Dm[7}q#1%quxtDtkpE~vRe- qDZoYt Ӕ:v-D/i8B@_`j%Dq$9U;n-ݠ޺&f^G_Xc-47o^^FVx B nhq4~\Et)A3Fh*΂)p \\Ǵu~U8 :9d8s1BUNSE>}|ܟUWƬYml4b|jײ}ec'(LίQJjVvOpݴq -,[-bb-PߌSpX:V`WM~rgf9i7g kϭLSLh4(urT\-_e+FB2#y\5 Uq4(%Qgp 5o\ vwK5Z^=HԲ+wF.qۿOc_?G^лd;7q5B%w0دZ?T7! Ńљ'~my LZw85$ŕ#`'RVP^TEW{8Mo0#'ݼ%.x͖r0 < TY+:-6ƈ<ض9\5ܱfY"'f/M1?XϨ o|C*Rlݷ0}ydQ`]1a4r6ZԻ>N'JLu$\[gnZ~Fr`H(%*)`!!_rrn6uLB3ˍ@ 9Oj$u¶Q<0tb} .͟OdQfz([*Ddz{!R~B9+펒&ٺ3Ƣ=1j718}s A/cmA]SI*CߧQ?`͕wcâX&gƒgG_;iɆ~O8ږ  6eO_kxfkUC~$hiÊsݾ*r竾'^D1yVG~@6={M<xt<X~T*xD߄%n?˂e«I'̪WL`u@0ʲ L/{ ێVָm+Q>W`}t>=Y+ÝtX*4^~eyZ{#LȖcdt )1vs;oIE 98P .Z3PHW j0OCS9q+^x9 v$L?ʈ`[ТhBkfE1*l8V|t]@1šŗ9z;,@,fVCp>3MRU7Fe̒Z^_S_R͡]9ߔҧӽ-Շ3rJL7?.VAĭ_ ,:'C<}hZ+¬Xsm*DY-XX5@!nKN~ IFGAHb=\Klڌ~CAW=~ӗѩ>1 uza޺R=9c6qcΨ(G+T3a;B|;pFD CAfozx0MO=Z]28@/z͌q! +n%$eLɀ,7^(Jua|b%&Jb,8krdI0rRZ@9KIR#Ȓ246=aVwg֕< (9aAJx4V |Ɍ=h/Ы)Qq<P2f3~Pޤ99 ipٌ8M?XN84Ҡeq^ m1No?)\Q0tdD 5kդް@%ktaK!-~_?x!q %,ޱ&DU.'Ha7u-F[pOrpe)I[tN[Y(>9c,4τt8e֦{gJ8On缧D{fݾ1.^dc|3qM[}GA/n(<\Ng$[5|pFZ1"X} }$=RI}.a#Ӊn{~n_d,_Jo>{~{vnSeU_e28R&0Z'#NˬhRm5ޡ-9׃`$P[_Һ{ϟM_̋+~ajA(j~`ß9Eǫ>C@Wȷ: J~L~S4OoBbNNDX{v}vȈB}jڑ`!VAo6? ckZѣR>=V5 H4 C!#ԊzED {_K4wB>@t$d,qtqIaدG}`% ;^OE۷l j3weG ޛ"*tFSC>:cFP0 Ǹձ戋m&! C} [`ҤcJ)9'AA fGWyb0Rj AЀ3.jv& 6/d˳#k |fx& UUd->z{2 `i?;Zn!Eow;͍owʓ +zĆ0t\Ef# zxr9f9H'6Ȑ_s* (5 ^HV'夶;(E^gӆyq}ʹ0{`+}~{|3JMB;i3jiK N(JrT=drq v/)5O3zd#bAT*uEwynD$uxP Ꙫ\WM+z߫ҊbR攊JRyj55* Odr.I! Sz# Oy QK U,U TuTtBvKdy[| SM4>U"-o++#.-TIQ)05n⻉έQow-ss[ׄЇ i@2į%7K99=+єy{&3w1b+s:mc" T+: vF /OX~LfwXr;S]iz5G%H33~}V%$$<8'H:h!L¼<*wk-fHV3RjXgU&481Dn1Y) $ڬ_mwO5(57 ȳd&ȵ )""]00=tylJteKl,6 h\$M郝I19ļ8Z*EW-4OLeȣOdYtdSzR'-D>y(?yn\rj_o\wÛd~\׋o{ޔ'f!|6BβO\ӣ$|]f窜6 P ɷWf-OXVt%!ƺsK!;ysQx}^O2\]~yͰDT DưCs-,tßBSdmt7Gw"H|]c~y"Ԋ55 #7"!Gl& im]&t/`#ϋYu'?Uod+K  ;?Kg?zy nMGɩiDBqϿf'y7M7hۚ;;]ټ]wp['Oڕ0׺g4 il>@;eR2?C-3FYFӽ)uf{XxA"LR ME/( Ք 씖 ?q"9mFs1XivoCb  ֎lF(։^by!\_Q :`j;d;?E=V5; VNAUN3P@ģJ)濗qX)P$~\}Ndr /bvZMdavVE>oK1S߶v1m]hYN^ǭi*8mMkzg5 ^To21$!|fġY@6?Ȅ" 0Ԕ@<|#l$r|] uzUmh7kY,p EC]=AwWپ>)~o8~+'qcF{)|$ny-E s`a,soG8ł=eΊ+إ5L>?v<6u]}S~z6rt+|Fb=GHI$4G02VDZ̴ˡS?͒js8tyF3v*]ƞqJ|M/tܵR -Nb$ X)۩N}Gџ:T x|y o# 2Ϫzdb)g=YGLJWʽpowCxn.e .Ly2N,H}]Z,jzm?n وEɧhvUƟS%1R4O7ٹĽeyȆFeUnͨb.[\e/QrW/s6r&pϚ5g0RJ(a+Hl,nʻ7xTVɐ$ڬ=*1}zypHGIXJԮU?1y<8ޗVji/p~LZ7bcs;w낖wE  PN$2|=8dK_9#-K+rX aR4XHd@I\cvl\ob00Q$)H:O(!nC0+;B5Q2 2;;S0bixj[ՃDOThGEX֛#2GhcUH7,LX(wf3'" L׎@[!ƦmJG}~7gB0u~LT~ӓ9NtIr;PB =Z5jDWhm"VEnqyJj|@yn t%[y3ruWopgM1scqCz_H?O# y \_߰)Ix.p.'IZ:ƒW*3suMqx>n€Jo|A%ɬC-/+0hh g ͼizCT}1pb/ykI )65ȁrə x2ݚѩ;/Zo{K'ЌJT"\}*f'?9N9!37 =R'& .1aaF 93;C@g7տ'qzeʫghTrZ~d3OI[soQbi~XD *~%W+8weK}{IyE?:gPT7D":ɰC._DLj GƾWw\ ݽr<6d9 ~4O#V?[(>q7Z QKMjgًZOqf'DSx3aH<ۨܭwp@̸gWcjh$Q Ba 1f4M2R\cxW/WeZdL?+|?3ɒ`2ҵW`̒2u!!,S@NNҵH/&̑913ur&B4l+9uJ2u0x~~ncsase7{:z(˒X9HNѷ <,WNv>c7:?u6Fʺoq|I!IG=l˝$B6|PdFbT=&nȊ;sҷFRI4_rGJ: YOjؔ^tynKm}c}EE=J Euׁno>I/K2*Nu]Ch5{|b^c5^yB \ s6GM=;ŏl (".S4ƕRemo+ߴc" 0݋q^KG+Xt e؟ J$ޗ+3"6ʋQZlУ=33աܔA箸69wB[9"A~X(\7X'8{̘ 1ÁpXQkq`YxP{h r21axQ4Lݼ,*-[75ܖ5-!ev'iKA[4*Iti'RS> +OF{W)yHs``GT?es.MsclHdy1ڒ>)ԶI]i1mlo0AZi`sH_':[_JŠs im/.B{t⴯@;IL=EQ㡈gaM+A[x:{לb-l[xq~FX VBg\phE\a_4XШAДq6qӇaU/:dvl.'oPy^'lenv]:dxXh"`mvPyz{4^la'<,Q(rX7;J= pb,"杇ЂGҳG}!kn!`\C-L21ENp9^,x'r0w+hs BF5o E$CldKz).2,)t`历GzxQڣQsџ1Hv-R Nm]Unpꔵsd%mLו{ZPɤ.xi|%:[hyCMs2y{kvo=zkf݂p9juX"Z6z'訜~3IOB]+^%ã+w_`?wl54,EOTG]FC,+y9~Z/MQLP[ -N_ѢeXW{'wͰO㊌pZ-wB̘c,_"|_ 6:g뾼b#'R0e!0lLCɆB뵫rmP "x%gmx_IS:NiUr֥y"C;u}.9Xu%Kf[/l''(E#db-dK;6 Z X]\G}ے^9- r>>&6!,X@vpGEݓ9%Q4\Pu1 6XG僿NpQ7]~42xz$1KJP"Uu`}K~[յ\P(JUc칬 aYeYiP){MޚSsrZA~Ny \4]^^Ur׍ hԸ ?Бʦ^z+ămnw_<$Tr)q͗(CGp]GK٭ ॏ5\ğ-9.% WdrO*E#/|a;]ܙ3}BgE$+)Vփ$17<"v>m&Ĩ3=|te O-PH*w-N\C#o߳hE4 c| غĖf]x]YɝpeΠZZ뮙?uO,f_zkxumM;b&^}d2O{ZG`;PQL ~) X9\IuŬe.ՠ  9HWZ_٥̃9h"h8vCKc^a{f^Qy!7puE$~o1lhD~/ G kB*juوlTi Q-i虞jlZb#UHZ}`zsyf_>: Ƴd gD9 ɣد6MM`hd(ٲw,s.Jaٖ6~5m۔Rl(˶*jy,+)AiDڔ4͈Ux9H}Ǔ?6nHv79`Obv)' UĐ4 |v8s$'y+P(CT:z&84ގ7@k+JD(Dy>j>bK,Yl&0/mn:KɒI`(!%)%|)-nL(V0²#,hY͇ӌɍ @eu+ FY2T IHѱ6܇'/ L^? YjpU *VUQ`.iO D:+:TC?19JyK1w1KX1>l$T"۔v^4D|22yPz߮QR؇1U(-`\B> 0.o|9{VHeO;VyXB{-8UJ05Ch4ڒ[=a?){*Oh (gi&Ci-m5U|F4WlwԹ1ƪNl[~ܭ1Cѐ䠀;ɗe#MF. u/IKԨ7>;-oڌ9ۮ.2tBJEkYN$sL#ػ"NJW8N#+h[$yfMfPw9_:;QXDž,&\>@CeW~ HCa 37;ρz8 a wZVgAփJ[jh!tUh[J2JUHk鯢/@7n"yG8Z1,u wp=4Ng7-oI$rfeK%XCȶ.#qzU^Bz8}A~Aφ>ɹߟw/pf>v@`{R`7߂i^5h|!"ЁsZyUn,|A ѳxh͸?4a'e:cFQuvڇ1]~/37JRnR_;}~\"])p2\ǗV$[VTy@zcyeA3_TxM ˿t3v6եpxY]z:ba1OZH?p;}3S+@e!p'ח+KN2޵wܐ6{{vs:]ǣMAqZHa6CI<>}iČz:<ש"f&J@^m]_Dp@2\;"I˳474PI"UM|UA"ÿSP'6u:H'2ga})>oNT|zos3{K;~dm{"҆ ?vHU.b:Եd_+/L;>Ckcù"jv{uLF9 7~^B " P`²s^m^cžR%FfI {y%Kp|Wӟؘ*9625r/̴8?O:1ʻ(X*dVtSjۣ&Y{a{Lw ȉZgFx)Op3R)7ݳAuXӢmj`m^VNήHԡd!zmkGjYX&\٘E=AO.QR13,vQ3*?vF 8@J;+<D4XKDM8l&{#`')γX)-W1Ph&}]xs#/o&XL6.OZ}{A%5V̽]NJSAPЍ? VG۩SP͜T=z|/T0Z,8FJ3Q|'s~޻d>go&FsxC+TRAJ*z1Qo]1b}XYWkȦHl6 %l'b' 4S։l6QK 7i6̵}3jR~lF󮒋=ԟ ¤Py>cɟr d[,[qt.> WugIOLĕ\D)w- ݩ_`0| 6[A.*73i^>,\)yP"Iwk#*G vqNQe]vb_Wǯ5hHh+E.&Ε v!K3's1q4=l`>LHvQn|lLJ؉L.[;7[G Εbgi'T"Ѕl\ߒ6̚fF ŋNA: S3{ؕ+Q1uvo*jUsRn6/\E=F-@ڇxf}֡"7&A1GEQWY|r_uN9Vn+fEaˋ Q^f!Ro+5yٸVD-b}[N &/&LMP-npq=i3;t~t?@MJ+!3:dyO9/$B?-0F;m/O6$A> w%8Q0uSNw%'XY20׷%$e1ܹ"Ubͷ`dg;Wkdc҇py P*7JJ-ZvBNq?ذ=`0bm %.w sr fĀS]{ VqhqD ӕ?8:G9ͼ/ _WQ=!'83A,}G9\*M0q~lV#hAXP\`E%`r0^%QPz&ܑrW9? Ni?Hi+f]8M\a_qSq>{OKnbzd{( 4|G5M^>hbxawY]Q8  ,IWU%UbX)pO?Q=0):X?'zH EYoFKoWaѣ{n xXm@WSFaŁD3{Ih<K { 7JʋIN+0ex#ܤm-<6 u,zٞ}gX몿?dC;Sy|y÷↰kD霿%7)S$Sv_5tދSVcfS%ѮܚH6TIrBd1kvȃV׊TjQ(@:{kF3Ҩƫ%&̧=+gV BxCz^EZZ>ZU0ư$"UTC%"lv]cfեׅϘmVi% AH,% @9NɿN|\ r@$c˔%]̘J .R6Y cƤA/NsT1<ǚ6{zYq'2:ʏjB 鍞_$xqZ%CMoU+;BQ3xN!4`L-7ZsA-@ /0i|؞tuGNR M4#Hv¶M*mhe|Lep^PjS/ea+Rawx&T]h"Z_xH42۫G/g[39&nBRmuOB)$E.S`GE1uUD,lѨPH-wQ';ZKsׁ%C dC*  mLmߢy78͵,]Efwf/%b &FE톔7,fxc!dRyRMgJ%yR_Ndq'THN&­XJ\#My4雡3 ˯mkjKAǪ `T|! T'C£K1 خASȟȋX||O|9uH˄ 4 631up4aߐoNclo1>E˞<58$(_n.9G‹z7}j$: X s= qqTD# \rs9.{]|e(`橜(zFl!jTe FE.mɷֿ RL`sP!N5+NL d 3o r31L.bG~ 7/,5} SbU33 Q6᷺،[-ys(r/:IwG=ljaR| j{ v#pr0 F?%6 #0|`=l?zT#{SE^P=Gk ? Fњ'[D} ;RIJ#ռ3Y0jr;8$`v/1~+Zyggf?p_}V6|%Hj 4+[nu+#KTCcfҨ^Qu@z=&~3k4/3jc3{[٣T  0҄}`B%&S*_Jά>c`*O!B8!Dl'{!ܴI ;h:Ƨbi0FMI8IQvRlpL21?woːV&: U0'RHQ(D{BR_g 87.kO:sQ@R"%T \O9؛ օɮY No󀝭8Jn1J;A>qVg<]&^rf(3i'eSZߣ?OuZܟh' \l$VPxʜgZBG47VȲ8q⬯V{p^^EUaU7Mp?6FȭVOdN/W=U3]%yخux{ٟGtS¬S B$G1̴6D9B4"s. l3#6WɖeptHCbZQtkØtIC:4mje*.l%~0߷?Ey+#AlѾS4}x~2 NZIW7#W *}u>#1&B  vW9QC +Vnٞ* K^ ʜmO|/*Bi;ȁUKaIL#lw`G+o?RÊyN /1 ^@Ph=>'x߲+cϻ8ۣIx' j0ZNn/E.$}K)2bF u#wOPFn :rys2d!d'Duە̼7O%EFF5:TݘAE=!A@o8hulbDv~Pq,I?ЊU4 +ƚ]{B)Bՙ|YdWѱIspk (Wu>o(f*.<Ի=dd5o6]&xbXG[5< へ-}TS90!zCaM):R8;R.,v_@ md6vWci eĪ5xdjJ./ݐˌg J>m0=#q2V,Ҩ] h[rGn@`; 4)M0nJ0\Bp!+>rWXē` >ޤ9DbHhdTB.|Մib.\~4;EHvyVM%méGTT*D. h3I\P$xRkGʄ:Jn4OixU6`u QΉ~z]1ۑ&I?+[49%jBƥYt Lzf W17]A%ƜԎϪ[7$j&a3&QDSZN L&{eFNźn[ppʐN'{*,&o/Jlz]xigO)&,M%߶6O ZO ٸ$9i#Ov}~: =xvnNWLJNYϘ؂q~'{EO\dkBzwâfP+@3Z԰ȐCR ' M̳6ʕ^gS[} ЛJ9Тd[S Zi>WG ݩAᶎlCiru>hh`r&r d@E|-iGۈ&?ӭVL{{ˡJ#5ۙ|%mePKz%9u-;z}qC2eM!pzgetCbXĥa*Xԣqڐg%f=0 ZX[%,u>>-LṆ4[7SGqIuppҋPN7݁/U6F{"ܬ+RAt|vK5r +tHBbco >'{ m/c;`WOInal||ڝE E|WX ipsY& Q?rPe9$bFfuH7sr;0gǖ $9M3 % ;-?'V!3Ri[COu?}ĉ<&K+ e.2 k<&@>j< nwPV] 5r|dָoL)@K8^BkB|B:'׍ln$H툉02j@rFR4k:c֗) TOC"w̲ 2„"66= .rg=c wlB]Tn|Q#,βP20an0ϖHwv"X@8&6oE8%7I O m5#t8jO7u] y|'!!0>ϥ9'Լ^a!wi;ǻb$Үe0Ň{IL4GvY<;ܤE9:\˜3YK.dJ|K>['6o*Ml,\)kw8Q%6/ZhJI.ދ|Q6 0r䐩OqwnωD $8^C:-Js-=.HO09%Q0m;M#!hpF)~[sfJMO/uh}⋀0_Ť#7B/Ou'%9%z<,'n>MP I#vB8BXkQP=֌8`$F[iC!6pir\|xb|B_#`Gz+If`MvgHvNސo)Sg͕Hةz( 0 bA+qd3<|Ύ!V~ ,o yh,IJn2SaL\sYU,4i}\/r/tiL~ K e e;MmY=.h 4Ufeܓg0, rW$ijSGG&@݇쑩k2Lu"O6=3i*sk(bkc$:"[x~#ҵhnDs3Qt=Vm1؇"#큊䷀]uvCMч%ӊKo{hqgEE]yVÔp Shuԋ- XvJ8wFg%/d ˥,JԔg'.=XEp@=/\A]Ift Zqc|j5C˖ V#BbPB1@@0Bi8:?],*d+ނ/a6[;r4i 땫C+аƆ3P,TǹH5!GxQ)HkJA%۸ɇZ }PJeŪglz'K3@4.|G=건0Sh :;c0GhJ5;Sjrnsu1. ʸyq(4o alTv,>vRm.aBB&<o\FCzPYD S;ȅW 0<= 3,$,^;Ӌ8d> .P.,šKlS]op)0lU h% d{"y]A8er2:06+"!w]X~9Av*p|~H R4-{6Q <|#}KeKA%cjG2ןk t0{xU=zQY0=!J'}Q 42|WB*F* =&;>K #ۺ< ).8ȾW՗= Tq `Ɓ'rHMڤa!WHHPe6r h&FinL/+}_$]d_lLUȼYk'"\8G5֟Bt(!:>c>b5Zdbs?V9p]Njҳ!jM!sOAwbj'z0QL#ÙCLMh3s=])US\HUlƹ&l~0-) :sd9i<3^ 4$\I& `rv5Mt() ; Qf ".̜M+"t`)'Uv)'oQ}PĀv6wK{x @{Ut T+'"T$%ΏA^R^Ro,fvi)VǨxИ< ;ˢ̄I?0iZMC-Ɣ<> H:):'-ļ 1M-ee@8f?Q3@.Cۭ1W 8,[V=D򫏴}9 -.4֏ݔvN.| `͖*a%-ay->M태(KE L(0v Wrm YSp{;zYJFc_>z?LdI]m_2=YF[@y~~0~N1BX:i9 lDj񥉿xgNmf,2H\@3,@ o3ܮȀ*]ok BmWNRPj#bs,Oײ="r ;8LK?Srx/jĔ5}O\iLU#8g}!P)zZRѓ$-_?aL2CNddCcȚ-9C{k!!Yu4uw7(EeRp8N΢< CJKZ=|*ޟ2UP!pD[W{H3OX9f/O Ң5'>k032Cȸ$Y>3BIqNpiP}+]Aho9:EP/Gq02X,`錯o5Z"$/."BPIS6PE|qg2|Qubi9z}my76A.9e:~kpVx\JY$->ya;'|J<Evj1&m| q/o7DHjm"8r149|g Eޝ0;' Xa1joKAۛEo쐩ړgM~-Nʂ0j F"@Ҧ7Bg95a/8>̓R  FOt̀E9Y&ڠD8o-JSJH11*jk`zg-#kʴpw@;3XFd.ArG`uuX-u` /9[f*uOw"I_YH5+Ci/NАť驣W-G+:`ci {Fuf[5+HFXVވ~]]Wh #WMyQ7Sքn8WJFTG+ eWoٞ>USTa `kc=wK0t#vŝɓ3  ?thf}IF/)rAm5^(-(?v(|reu0zHJPj+AN8a܍ΩܲUnZBR ǥP*kGAE&۔HR"x6dIw(ϜAd׋&708.2O{>eU{̞3dZu.&b' ! 1<$⺲+30EhF8c| .ϫRAv!)X)Ӹ_236\ OY-Ҕq³qԷK}v?yq?QY\%vu h8/twa~]D[dXvDڔNɃGfL8"QC#${Be$ka?@c8/;ʵ$-6 :lǞfZVkHb̐9hv햓+h52. ()[(kBij]ucMI6-!ߧ2׷`ݰ&qi G$$ZPZ3zp ܘc욦u #ӣ")-Ud>*(-\ȶo $ [cږ<`O-չ%J:k.եj*LI̛zI]x;F>VVeu$ `"+݌=yb?-e>׌l+U4O{|Li:o a#NFaּA{rd"Q4gS $T '副5p9"ؾ֑/py 2GLZS! Dz$@"%&E3z:.n:P7 !DŴ6H3C}e 'rIAwTJ=M;-:qýQ鯸x ZsKZY5S4D\z6x2(^[9"Nvv_P'^E *h!wPp$, 0YI ׌]3+GB]ΰaXɐ0=J_'C8bza%QmL_ٻ.7)gmꃟ>&fjN^.cHjul ÉVe{.a6fkO?J~q9% m?'A1\$NE?Qd wϷThXriEn]Ng K)fT./A:4Ze r]aL ì1wf﹗@j)E751EB,m{ag\l:oGRނ;}{[  'ќw^s $tӷIog$YfWҷ&Ľ5s ABK"ZZ>n)H7W$H U0C\2M1oDNW#I+x}-:)18Z}_KjⅉQ!x+UT [UhVf<,32ԇBUi[rȋ?0E}E"~5^9uUipKko'6t/BSQᒜ5ig "GCY/,fa^@30)JcH^{c(.#8A ,%+fgH[>M:|˗ŵʦ#SEuPYDw oXJ&NۦJ\6Թ\1&X.1Na󡐼̞'Z;GhO':Mq3m:vP 5YD*uVLp$]KB݄5, RߑN6)zZmo=E:WCBt $KbG\h-i GBpTpe5~ae~)΀'(2 MCCnƅ*H:ZQwYo8<..GkZm~#bF4&`h Oխʀe}ՍU& dѓIŔȒ"j8 (!o-ƭ'U)m,]DQ>MBT۷S)x$gg.ٍ[rh t](y)':WTw I2dԭ_za qjվKZԺ;q*ذqc`nQAE~9vOVX/)^  ?1vKĤSZ+QRβIh J~\4qGajz HӮła ѴaA8@u<.:D[`$kJ3}|`[$t5xRfK&%`w&#rԎ&yf%דb9F0@.W`}[vuC)x[twu_`~ Ј I1F0 |HzD\~5T6) -K'C  p<>{ е , `˪XK@Z65xkԿ(02L_8#^XиVj)gZBu!`B68J- uC\-O7[t%K^ 'wd#L;Mv)%c p`5r2ɌO A?,Ԕ7a I& ^[ȃx!Xz~]"2<<܊eNJY?[s픍M[ܓ[M\iPqIá:a~dTr'uja=jk_?syxOg E|/$c`uRVP,r8_gp_I$$1~"Y 쓳VNrKcw_Fɩ.,NEXQ,/V2rMѶBB<1\36zb* ︈ÕΕS#j #imVZݳ SH8sJВ YXwamŊ L:,XYkʢi95+7FҽϢ1!3NH%z|Alad68E]}+K‡!yF׋&IÁIC7QE\#|f R7,ܓaXʲB6 %z_c7Qh '~goґYƵ>`9 ?'&-wnCЃm s Fab6+;p%ec}xl0bF^)O+)$h\KۆTVͻ<Uky+dBT#nq )n=YAwf&%4]O9$9 0TSv1z}>T>hJ\ΐ+IΖ걘 ՚ı$ŀ) YsL@Zvۉ2 x>\浡cެ͇?9X}PԗY풩sh~#jd =n` IccN'n :M Ϫj*:V !vh"}ÿecTE:b9QU^8}O'fR@Duw`V)8BsxOY])IaZI+F'c,L7V1LQ'Mz^9̇T]qQKl @MV& &\ScKg! t6 8J(m/,.IF䛏/I2cZҰɳNn*y.{OEI-ǫ.!Cⵠ=M4zfY0qR ~/WF.lJn%}8$4< $Uo˟^ܽ+!aCORȋ_Pt(]1gy=OmP r*mk}IľWPPPsshx5=!m U& s鿩ۋO Om'9mƒ~Ӈ!JqӜDfJ ~=2$')hYerЌ!ң３yҌ^/Z vu4I\}={r_0h=Dmi`ډAX¨rb=.RϯMQ{r9\|Ni̩{EY)(%HOE"=61ꌢ!U$#sO^qVFH̳jG{dECm;zVk!)=-DZL Н9Xf($$r -U) +;|#֥e| XrϜ.}YEFw"u} r^sאcW7*O&'+v4XԮ% #WǷn&E;q(un>)zN% LvFﻥI`- 2Ɲ/׃ +۱.E_⊲Yc oՑw̍FO:UDR[ltgYJ&`j5ՓDb8)6F[}n[}Vf"R~˃rHkCu|C5X\2w4HAVf>T3jmU|3 ':ev]0 ̷#gz`6lbtoLQnJ\`+)UE'_RI^JK %@ƷʅW!sr>&@%$[ s=7to{ǀɘW: ڔf`jXzT g]EtEN*g>qȡtv.Fw 1tQ.%EI5QD) ,2>^p4r.}"b>ARʽ"r""JC鄈-m|՜Oŵa>a`"pƪLx7+| 6՗yR#"XwNh+&쉼d]~SY)5G2{%x9Ri^i *D>',e”mfjE fn ' kq9 sEI?NX&OB~NT+T5DR- #Z4Pw:5,E:Ll2,o:۸HC>Uή3 t4dC%:g*^=] c]ݣ$:z! JZ n6u2N=z-}$7 9'^@up֛CgҦh`)g~\3=4 ר{Z;m7@0(S?c6٣ޭGbPr A=պeù~cCtw/VAg"-]t 8/ܪcs癄Ϳ̷,iX-wx }XaercXN1mxB海40LxfL&Mv Ҳk$>>\X?~3~3w^M@Uh?ipc!0MrKfUxNEr̕5،GjلkxVVwحfjXQD e/fط*f~gTpRNChwOGJ]S^ucK3Un>9XU 󠁓 Y]ʆh,2 HM!lY glB g1{SElXb:S9{1iQ[dsmLɦ4cZt0,|.!/ңK3քloGi547.Eb_ LgJU3k ]=2iL#\7'CI,1gWo)Qt_؜ g= IBYr`\;W,]tAhqk ι6iPF7cQx8–Pve=AaKӺzXϟ/V%I qgcS1bB:'A=wioYhǨ(r~}X¢c1w0{P~g.R]em9`r-@MW"?V1Ɩ i!WB\aϜsHvy_:J+UN\#t,d: F &aqo4j#cIIcy5`ڡܮL#)_VO[%g X|JBq"OtNY:8j M9-WBHx>@"1/cLڭ v1vtգgd"mD2Lwe|alo2t8$()m\w9ǂX(\_d:CnډxCWquCXzU4ICF3Ftl!.:EO8i\"UL !3X :!n{\ۧ՛,/}ZsXⴎ*_gY7ُ㖴dzj)"tfv> C֖DNH: 4SIPp-J5D&4]R\oHK6; κ48*9m.,Hxm5ĎƧjҌM-hxyt?AQ ;Bm"^3Z$wxi6A:r. +Gw =6S޴hChYʴ`%;nY\PwKNbzitgQt={ґV *M4 P #JNr6"J,xT{m]QIC .amnyR"[rF򾠗{BD$6s-HV|8aՑo ߑe@g}C!(IA? axcޙM TQѲ`7aA!5ds2\zQJ+)YR[d*QֿìKJv'^ڑu墯lh#|H!~îa5[9‘,bSoH GNm!B-9Y :ߏE;QbLS׭iYwT+ܟ2>/NPsU G}_q_Y4s3!O"H$9 ,Ê+fU`ǿnޚV_0(삑*ptzZͪߖc_ږQFohu9ԓ+ʶգQl'oh?,NHʳJ=@mۓ0HgxzvPgYΥIzkAeC*мP*|ݠ?KZGx< 2,4/D`B\ÐrA\_Q&2 ubY\SΖ_Qj͡+,n%z(,Ω0I?T%ɕJw(Ek(9򓾿*yi{e i/c,B=X[~=q.2hzG*7! X2aLq6:&o ˖mjUw%jؐ .k~̽Q[RϽ}P-RgIt7KM>6㶮f:F׿ Ia V3jbF7$}V}B8v<{a{*"n"=&cbԮy>,Ne]`_'0+qu5޷a@R|(vT> Gvvy4]pP!pzkn%Ÿ yWYhAS96I8ER*ޤ Sg1n@vTx͆BbP16p8@1W_keZۻiB_w"~b@K@`" N² E]AQ0ٖjHp#Y$p9?| 척r)rnO7'];e؂;G[*]o(+&^KttNw{B),njڟv&YƞU貄֕"¿{u-$tmM&$AWka/Ibm`/ʟrK]g0+3Sv?YR"%?(B#Db$_ocE&QG}ePv1K-iiQe>uiPQ|&#[ԢCd;Imx1=S#-j5`NlhhNt/܌6_W(3 ^-J ecT)|'(]K8D\Iڎ# hrr"7KIق !%f2/]= RA}TDž-5 {ꟴׁw @q ,C$u3ZZ嚋k5?835? _@3u0Yk^W_rbƷkCLY )Ml6)6&8 !5.: ;ĀLx`(l=,L1i",I96ռ-V`-!.au- &F?UT盛Ij(1yuu߲;;6@BSˍK]";%Fi"7.禅τ'H0-cRy49Od= ''"gL/Cm8j@ H:f!>ּ* 3K3&-@GL;p2'{>^hitZMQ$jn)BW ܌W^}ukXLÞB#M8mHZ=D8q}&Pw(}ŰxjL=R H? cNd S͒Γ?W]@X,mx8zJ;=7ޛe.* R6=TOwz|iӎ Ox>tN+s\ӝ&,=v]WH˕'H)$Ah8]hqJaFv= 9 ϻU6~\Ɖid;Ceo?7sZ$? (4JVTyfٛ;Nza6iB*QTuh4nurWQIZtՈť(:g?~t~y/IŨ@{BeR /۱lws\{{˸"G=[kQt;((`;pFQ@ YV&x[_ LK5WFZg>}ydI & \THd AXFPE(ܬUMJ t'#)\_ᘓn,88W d-TY 7.2\/BEC" Yb~ +Jj^ V?s'\Ȍ'OP.3s_.˿}Z]4F)/KZ4kc.q){kF,}8 -Hӗ3 S3F*5_O5xwr)z5()hʶ+A1_2zu,-mB2JcnICA;h/L, ȍ V-fa$[PSS~yvi KstqZGl,ujw Jψ׽怮NfédtVXa 2 ifq|Js*SaWM1hßܴ r I3z|o5> ([ ?_4]C^e%usIv,#-RTGmg)O̅~4 2bp$d]DL}`_h;fy%!/1]zvn!iY/#txYWKMFd{?Hmuver k7a$ sPL g5sˤ4dp!b|Ų|7cR ;:TbY&C=nTʃIKe9m >HȖt^/OqϬhA8p*dT9#U+ yc y{{>Z^5j KSX-Y݅S_!ݺ G|i&t~!%߬15y4'xs8 .͕i-JC n{۹%)d6rF0\ah4z=ϯs4_.U9\o2pwttkx6zEs] 7, 8@8y#UuB?uځx籯mTaag.8 =AW?L'Rh>2QlCv0Jr2O.[CC1a(8ch٤}֊[Cg- K : y |&<UHBOO~Htu |S1 Dt0HW"܋=)g;x-W:dӔ Ha!qnN)ԣXX-"܂ E׶jW<Twf3Sݻ!Bhi!u+Q!Srh;>"EҦR ˤDa1M˜hz'pbhZD-eOɽ5Dۘ_2zJﯬ{ilayv?-T,df `]Iv&Y`WLK~9$]XaC\n*rs!>n[.1+GŐ(.Dk8xzΌ޿5oFD}A zUGHا֬J~Ghzʊۛ3͔|{<2cMi6՚[[=>`TI}O%9KzI{Uj8xe3۵hD(XN>II1R* YZ