apparmor-docs-3.1.7-150600.5.12.2<>,ЉiYp9|ٰZ ͼqi e #vd G3wtsdSJ(^؀sҬl(,4"TnD*pQSF!`t xКoVR1oWd(jQ,ŗ\ ndSƟ,<5Ϛ %7ЇxHz)C;X?Hd $ C 5Ihnx         G  T    @P`(89p:FG, HX I XY\ ] ^bcdeflu4 v`zDCapparmor-docs3.1.7150600.5.12.2AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.iYh03-ch2bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤iiiWeWeWeheWi{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-3.1.7-150600.5.12.2.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ih@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2b 1774261849 3.1.7-150600.5.12.2apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textby + o).utf-830dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722?P7zXZ !t/$]"k%VR{_Odn-)pM59M{S7mס{Pl氄"2\ `}'fDTElS]*Y2ۉ 6(rX/Ύ;i7whӣ61q~.w |w APmDLSnF`IXTڂIaߧ?`Rn~ Y/0}!-YwNIZy!lJ;٥Q``\A .W{}2$v>$|'%ݵ9!n~VռᘗqNS~xد*؛%Td ,w7vx1Ng{8|6$u[qgNXV$h;5R\C|/*fߦBԃ!.a%lS `Lse* 8l9`w$;`/Ӂԭ 2vGTZRf[h =7-]kK#B)`qrHsؠb򃡙GAlU[f#ALT1!c6_6̉&;BƫA?@_mЛrtk:p69ƅbjy!S̝ |g_LVG+"ŇIz&eӦX9' Uy:G%Nb@-O8!{#Y[%@{*.z xj_ݔVM4ySu=I-UIcc耓&gM?K86'$oiPk2|tY1 d]3D򍋣@>F>8;#}\y3Mv"My l 9CHb9fMobŒdd= >yI%q?0>r͊ցb\FbdKpI `e1$K`!jN՝Har|h-:y~8q% &'ώ@R* \ N,F|H"44@Ĥ7ьx+ U9" 㳒YE03d!byD`#2*Ikr>S_ɛWJxk|b^!YvqjV<4xG gf(iNA6]t9hJhp̐-LȓM7K)0aVGӞ}p5\+6˭\wByn1]d]O_9rR_G%'ͫOpk_2x߄$fNz$6f`>^PƨeU} chn{ |bE߆=n+^5&=wm3Cu64t:\/ $n ]Njl?q5Eg#&g_XH.A{Yz=?8 )>$ۙ YaѷH#LכŸ\6Ka9lÏ}qC4vp5wPԅVӎmQKJۏQT0gOz[@'CJEbA X!"VFm\4knՑԼQB!d: 7tD$驔' '^xU]GFyV3Z CZ2sD&벡?nޡv6\$ePU9ߊ K Nʽ z[f6%.P`fӘCr.x"%7~yS)ܥGiyZ^5 8RPy$ݛ2"m`BvW~ ߘ#iLߡjÆe#y1ui09 ZDׂiR: tR.ↆ@L@ɿ9aNʙx(<JȸR;_8\_36mG~}(~aBuTTf4UB|'mȑ!T2OV4 ?3i~SNPL@r Y&ˍ!mS`̨Uc?yL tv}D@-Ĩ-`%M>:0 Et{+;qK aG?`]VaÊ]5C޼0cX(t~{=2˼,jؕox#ۡ4Bd5!W#r%} ؿ0h6*9c.-&0`u5Kfx2Eq_هH/cmzXB-:_)x)@+#TF<=nʇm0~7vܝenLR(:}4bbA+ke1&>mN-&X~?.C*fhtܷ"7TlFҮ-CnTy"sGow"zl-.}2Y;uNL4jsQ.Z-@o ' <0{ԃ,UdZ),-gᬊ#k*t/ T}nйޙ&Fs.thД$󘚏=r0U<696mbB {X`IJüh5N/8Bl &;mhU֪uf$ݍX⦧Ek{ R 9͔`gX}K(wq͆ݧR0u8GA$xS /ܹ`㯰$@Ó#&4nv|L5h񦄸ۅ䀞,(<~Tءͤmd|W=!SYcÄ/,Z&tIY4D/,V\ ͈i Ny[;9JzlG@tTN'Y+M)v 'Wl+Jg~X[Q=dőƲe$xQeu2ՠxdocRViUˌoC]#t$"?M@5^"w0`j[׈F{v1:Qn·ٍ9J~J c5ԗx^աݜv9+ _qKSN.6ρqgz?೷8J(.Ft",0_伱Gj1GqAgx_EE=ĦUNN\<7rAulsx7/ \Jgl'p"j8EinR=5f1$" jMR4pV|tܒ}_{ڀ9:m6ITrGQ?"g2^_\#vP#%9zlL7˜LjdmWB͇>x&w՘C-ܠ󫻢mXNsN0)+=#`! ҠdoTc}jry`m\RwFM{З5Vo E-g|N 0% B; @:+fٽbh|!9Y#~Nq[ 4֨&%0p GYZxYf=rHX/p*TI _7NBs7y-g%ye6}m}k{x`loS=|}+3ꗑb?B d @0l[ڏ-R#xqq43 WKלs1}v) urW˾Yw~zp*@dW#=rǀq!;CuDE%UASv\#?(|Ӱ#6bW&YLޗ> }6QL[[&ld^Z7ۚ*_۞:[Dņ,du0 LY1nH9~HmS}Z>o&Nd_ȷ~bWuЧM@:Q[Up4:'fACGkwŜ} nt\lj Bo&B<A&m}B'c{11^ώqxVU c?-OsM**P-MwUX%M ٩grߨڳ!g0d$y'*Ax3\38-0 <^F t j㣁|NO\XDR%o3Kc;-^R6hCu$dd <u -@ϯ>y3$}X΃X6~F4V"N>G!S`COnxVX837xPI8y:<tKip;7=(2׌m}M#`;0%΂Ud4H<bYŽk1K'Kc# f _҉U| k/ HZmAK%iUcpe$ cwyԔ,d-٘ TtE#7H\MtQ}V܋mH]wtY?׿z6"cMjݘ-^ zm-rC J),rtNjkq,&F3v0mOI:EdK!Sz.=^*I"TЋaQu>YRpS\| ߅G'&엗Sq5̡bGa'9Jp `L7AVPVS_PתJ iW!5N[AiMn+;-]H! 6-6W+KT=DK+sj˒b"]>no5̄OQjk 6QWYTG `t6nHP.}tGb3\V /.ȺBWA8ۓgQQy'I<Tb'Ϩ^9+1Jk b(pRu+U%`qU(1ǧjYo0gA)`2dZ}Čn-?I]92/~1PfދԔ0G\}&=Ic'<С?!;dTmoTOs08 L7w~1*sGr:96ְ-ګw t ^zY0efsK { 9zC^쌕pRc]S>Qh+\giaU!Cൻ I *%Ⳃ.hxfU ehQyS\ZHhDZݨH߸"EkJ;i:]@Mr]Bd#3.۔y2xW\4Dۂ̬#`e!+l܌:p~pSߊ?fb!if$F> 9Am BsNtϪVk( ȧ6N"^0*^v[Ba0J/. \.i} 6e{_ *NQ`۲H &,w9?@E6|qCFRz#{ Wfs5PlA2:,ޤC#qyIZB ei qbsXmV.$>I xUհ Hj;x=iXsNHұ %! nV{>ʯr!cC i<Ʌp7l>G7ںa^O,oᅉr:f>ruhbZZjv<Tܦ E` HSz &r¯H@b$NK63 Pc2a' pu/ /uC6[VB1-p'Eถ̋++ cST,z4U"wGXNWfD?rDME/ek@(5~{ɘvr-n1cfLpUs*>" %l\H;Q5k!|cn3}wnZO=P`h; >M+ACG'|hixbR_OXc+l_ݸ({(^%>;GN&/b4zo1X<: d!>^Xá]Pʵ1L%hPZ'}"@eX?$MebxԎ$Ol!ioN< i0cX23l2dRŠJi6ȸyKi?ӯjjd?С¡'@hيJpeo7"Fm\nD3+m0)Wh$~&g pzTr ݕ{iqD'0͋EtPNX3UDɉ+1av> PxZ_"!OO&KC2h>Q#8; r= v{`Vkנi(]P@-+L<զeװ%ٳ|A/R1.Y"tNIl!.M~ѽ7Zr1F$4P!T$xwa|2|_#~x.L.0>2`$UJ6fK vv.%57LAN4LWhuSwg[&o]̪I屲LY[@B#z量"Lp1EL 36c5eVւO`wT.\L\}Ypg!댇xꦎp Z'|A'Rƾ4\KC8^_ۦsysR Tw)]x-<$p?W `F[}D$!,KFo/3caE 7i(Q07&K"Z%?ԋ+ny x~*)[`,@!E2:35nSڵuƽjc$wYoKR&^.MgR<;u*eI)U(GaxM"cB$Vv}Rɦk d\ .Kbqb& T98c' V4 څ yYcU85~.^=)"eDqCO+Ϝ.¥Е=ҁήSt)"c*n!^.ߘ(&?egٷwO!K@9i!B.cD΍D\EDMNsO3GsPRCפhCW yb?1\hH.iCvW%IR.Gpɡ* G5`:Yh_ҁ?='W_v*L;iB=]GD^*,1 xϾ2!0lҹasE~ZN]]J0᝵Rw? ܆o\R />[*9$7L f<|pz3uD3BL5etNu+xŐx5#8%5pΝ@/h]5F;F݄ ڷ[^{_ j-{UX<Ԁ]diRDFqO36mNJjꐪzrӝƫc D%ts`܈=!#8ydGBh41<~mC=+K뻭"4k\eQö6n]Y 0-Ai5qbL'neODхV~I ]|/O2=B>#)rC!aŹn'y9:S{?k| |y 2؞NDp *1>r[LF._QM Ot>=hKK vs*CPdX@Gl)=7 tPr* !1{Z)n*Kk_?3S4]jf<`դ,ץH)EzP+T߃Oг"cԯIJ'B OÀВˀ}A [µ4U`Y8M;R69_u~x\35n8]n9# [9P ]gUM抝zAzxJҋD gl3 */nX>jDDg-6p>" Bx͒i5G"f/ZseOj >e{z `kNj%{d6!*`|}ϫ::+7٩F (N4yGߟojZ=J.*XH*S!ef{- YlM]d~cuqPx>$/yE9XGz ~4/%I\lW RU\C` NoO Rv", vŨF}ގ0hlAE %ɥ"nN3W@]u|9cM>h)Tdw [?5LAtW%3_xoVQ[·%kiCSI4^9,fKʥ٧{‘.j6ϔh5aPPM+=dS_E - knNi·u1mQ 9V6uX̤b?O͠#}xPFA S^;lt1G֥KJ=8kZ=ǡĢ6Sxu>ԜX >dg[~Sj–P 2*|d߽c @] .[vs +d1?Mr{Y&XE?E;Wiy[c I$g1+E %xJF*$Ӵo{[^f} @`h=. Җ Pι%8&YN9tߚ}с QNK }JHnl$݇ɛM\Yuwl%V {K%}eaŴ9Ş +0FQG '}6P=;ف2n yT?xWg3ѷғYb%9]pUNL/?>o'"O(\~t@}9ٞ0I{'-QHvo>\ݺ 5(?D<,;m 0oKJ{,^BIO΋EG댻H]̻D1QWΓpdWpX-˻Bjp~.. v=if!?F+U7$LflzW|]W^mN l=T힛r HC!G HdU)Z:egČⶩljD$9F:)wS0`LijlhzO- /vQ{]-ݸ?idC/Wú c%HٷW@\5ھc>EBLuvp[K%=Լ|;;tJtպX.rm)Oy@/ѣĝJa 'RkӚeEظW Ⱥ)꫉CmS$&Y ߲#;1D]Wqf*se$ȃ4ϵ@]Vd D)$=ΝCUon*^*QLۮL~pn=0+L7Wj9}˟.]R滉ګ 6 Z A>?=Tuh:Qף #e|)Q5.V2ɗ(/kշܶjףR'luY;L-qÉ;BDhn.ճg#ҵ@}{ 2 (thR7ܤ Q7Boz'hyٻPkh zb1bLHb_qRNͲfFǢfhGsES-0M5'a5Iٝ%FR:xBd6 Xyuru~w,O2U=#No%wtpKްAWtgX$bpbZ%@:@'ʦ"WufIdmI"УMhgQOzm],HA>w'sc+J{} [Ti}^(]Uɼzn f,Z*ol g_ ژ*hx?DwW.ΛW|:f8>y|ii뛵!sCsu} P >|gsڪ5f~oe{(@,75K /j:ߘyLDR{[z cP+C/Ύ] qP0"R2s 6wÿ9U4Cؘ+ -X+|6T̿BOo#Mƀ6kq.n25 erVaFB]UWgUFkmtBÄpߚ>4LJjf&r#'SohCvΖNɘf2 @<6GA #ß}!hyAjR <ΗryCTXiO>Q#B.J` 'L} }Cr]x%al/@Dg4,ƨ}u]&[[".\+H[,;dПZ6~ҹE_=`B3Uz*KԆيfnǛC!ՃCHm蒝ts \"nyn/z` ƠO>4g% R9<{Boh#ȡV -V5$"#7$ZGDfyA;8nBx??Su>4r7 )Ёb k*ǖ_ Ħy.Q[FltfմE661mmL&xUTZWcJm>c\e^׷:<#44h›?ҌFG*^ޙi.aIEsF8["9Vsq'/ P觱/y.+0-6@{|60!tZMwRO~ηM,ZJFR(wt56cp7϶G  ~</γ$Mf2/ᎫQ{vN<%iFXe9.4͟P ^RMujM'S%R{ꈩ) ɏ:xG;̣6FJP.$ $p/k@Zӻ^8H '?4g 3Z'@Ku34]5z|˓R3v bE]lz52w0LhZD%$8nt/Br0u`¼2[HH-]ƺ/"{p}%@YNnq<8*"F*GKީ7ߦk@h{.@nl[g`IC(j_:WUS,%ث*VIy:s7ZB!7-E<ׇxR=p-~ߦoxG/bpߚ<]W0Oiޒ`f%D P•1$< 4^">ׁ cm(Ƚ;.#}/7VBǁuDAY90_\%,{xVϛO/Q:P$}Qޜ 3޼y]bY!ot ]h:2`FS^Z6cfA~ oX,~xZi]-6"f9S{j[)I5 D)> Y89}iK"O!+ojbOgˍe@Kg@ؾP[k:[*'$HXF?|bpOY{&Hf677 *^ZJA #Wf%Eiǎyx.o[šsM3Ի tp{;j č9Y~I$~f‡&OlH{6Շ <9&}ڊYZj>rN^k|v̪xZKQlwxx0q# {c侞4 bL[}%+9N;R6=2nPu?稉MyWO,ޢ\\'ܑuwj>JHapOZiً*[aOH4/cXC˵[Ӳ캻Z8kr0Q1db\'(h!-$2Pn)f)'wzܸ@AWȕ j*=!Zq&oULjdB1ţ 8%:^;$cxS k—G,8vP AM4 W(tx(%SL U_C_;'HU͡ 0N?08Q_r!mxJH˿4‚Hq2*$qtb i/E\76tֵ M<rے*Ԣ3)&rRLV_s}VzBW]Ք;l1š;|yԜHיYrgM<;.g_RɘnsUXrO,؊W6k\Gܕ`nzދFƥ 5Wf9Qy可S#Odڿk0VX 9@!2EeJQ bl~R֗6T(N[XNo͚#p Lgl:3DR.I2B-p^BU{H~ykjRЅ\FΣ`ae楄Ƿ!р;-P)Ϲ$x,/Q?|^||Oncj;'(S`ugH')QlvnpH9m[$%o;.p+rvknM$`شta_1#5,J;mIlYdCoj,PāG]r\{ vxw |q Ex2B9ko+ޭ*T`HYZMWL15=bW|jwSU0QMi)*Pyil5OLU+Kz/cj?{V!\Rf70 jhaI_ZE@i(cѠtQx?{`]|єPgȪ2e(Aay|ׯ́?eNФTʿ 4۪K8a%ǵmFrC}_nЕymeTʛJc^Rl-Avrci}Dq :DSh(7(<FAvœ* Y"!) 66.~Djҏg+<5HU!<ѮH4/Fc UbYD\Jz&Yi3N^owpwňaMIxiLF*)TIHfEO/J{1ʦ0-qFÙl\cw6j֒XYkT2/Dip m5tɂ*w_vv+n#2bҌi;cJ?T,&|a7SxT6wIkUSv!㭖TQM0m'gPXdK(D/IyS?-C(fc0f%_oU2"`̀qj%Ugi"7).k}۟`2%ְ*Vt/&hdl\cAZA,RCa`r\.NwSbPk !m[.#OӥEE{bnDU W@<0jJ2Mh+ݎoGȼSwO՗}bm :\$i*GH)f'7=[2L0cwA~Qlcp$D95! 0:ySS_. uy2Wp L EWFݭpuZ r׈&?b!Zd?: ҺhWɡL𾃚9/< CR/mvuzci_z۾xf|ľ+NEd' "$v/s])5D6be;TFiSgSƣ8s{ܓ>S0{zMHG;RnrLUl^`RWPR]鏅,9֠{Ě2`ܟ}XR`[ (LAve1/4= |O_$88O24w)WA d4X?ͱ7B/ŽÒ2Qi^w?`eUx; qYnI?r5@zRR )Y n2eЊ|JPvX]G]yW~Б*2FOV&e_=>=J9R7l|}幄;%^"|^1%/^3sMq)j%3|n;L%!`bgӝmdnl/Nop3 X_fk)p+NU61|Y1 9߆FCp&).R.%k\,Pi.2:gz0K"io_k^cZf`jجVtʅ5& z\Ce?6+k.4}_eۥ< wB> pSs] iZR>oGF7o2o16A|xZk^pc`3xsnϴr'^Km6 P3,_ p, H .nRm.e^b %md3/{]D`p$8kU.uR4wC|[5vJھܼ۷;0g6W]F)*xhlIXUuVeKXuA<4Uk"9ԥƴ+tt93S<.Y;PT}-8G,Mk>MAcw-kguC5#3V9]vVÀЏ8eo:㊞3w ;,NAU e]͊A2Iܗ}4 NmDj5d2bBc.'ֵJ.Xf%r,uZwU晻Mk¥l:˞&*!0:sܞX)JY>܄HcE؊˘ OԺN)/h&k :KF1Rg i- ߙ7b]sezBp&o4f d׼IEfHRg7(=8VrpьtXy[BsU' 4Y+`riޟ&gH&u,W:Q:uoD_d S G ~dmNlBb Oht6YŜdp>n\:wskostfْ<0C(TSf@²*+jٍӘ+ЯɷU"Y7?LAnYԿhc;&Hs&W#e(}J"rl`}aC]ŚӟM!o_JpM^*b' :⻃-OikEǙ." s gSXI_R:z5;<vorB3l 34"-¯l)`ed+‹58z(nK;M,[0x7:{0@TR{¨i>*NB)+|oz9Ma* 莈P8' U\"Sy"?b]&PI&P(e+Y}AoM_bx`ʤCie >{`%4lB܍4+c4J_pdz$"8&mL>3*rt 39SFb<60o)'36?Lلy^M,;~a.`{J,,O0[u|XuLGz %k-5ЉS_VRz805$g%ύzVN,8Ébqo(0R݈3U``wYń`qR>鏃 $vS+ tp8Y}ar8fNiVe,.z^?'`CCQRu`'/nP?#= h2f2o ҂ۛKΒO7a,k꜃7VOÈz&eȬھ^. l3$6pZBcRݹAEN*|QCܢ[TTz?TAtmbj9m:\znIǼA{B[?t;F+wjR8J˗nW -jo JB LG2z.k-D"c5&ok+&반F4nC?W2EጲVk28vWKC9U>4Y%/zMPʁ]d0]tHP{}hU3&6MYV0DSǼ(eiBSq` b7վns)H~f^`xERjCm9/)LޔU8z4IOqS!k¾[)kOVasqn4͘(o$W$uD jRez E^h~.ڹ5Lڦˆ Nn֍C{ x/ij$Ag@6R(YFl`"]ŋi| #sƴ;Q#@L۱nccv7+3q :w0Г]jpP k1- [&\Av5u5C?uEF`2?J9T/̚<ּ[7@LHle, Z+F3[lz^,VCTxjP .Q8;^؆! ٿ.][تV$7lQmVXKU~Rpnb/jRݬYc  'Э~›|D } =ppHF!c ܳ/ォ3K Ժo !2~wV~6B.hIزh3\-4]Xf 89?}b!k!'`E+ܻ2ʍ9$En/Xaz_KzLa&~mgfs] 򶌉X$4\ptV˴͝I&݋\yr%*_*iDUn }qgܮ^ItךӹfxN4BJǦ_IJeow&HȽy$`iw aCW&u wЁ4U7βFY(E-"seşDК29 zDjn[//]am mpzf"fr)\+?縹@@H]@zcNpdS:XYbB 5܏`\ 9Tܠo҇\/'Ƨ0ľmAW^hM SCȭIK9A3Rr.bK4˨*l&9 b >yϬqX2AKV%AÍ3.fUADZUJLMd=z΋K4R&ϥ8+Yg/Px.CzdGMryy6LJbQ<` wޒo<; y=~E1>E l ԉ0Љ~@v m<8&R & 6[Vۣ`D*MCso5TBbwaӮا/4}l,Mݼf7qe. Z7V X110Z1~T#/ %ep9hAyfSƀN%~SFp=FdRqLXGFnrF}Hk&/gfsX}^tN.n\7 ^o.ϒ ^L F|Ջ(? @e>[V;6k*̱E7AMB*ydrG:b:)CL"k&sm4DŽ΋JTCN<'jC`A[4Tع?G:?ZP¥T8S̹[DF=Bɹ嗠]|(ޫv]|"XSY,|Cj·彩" 4i雒 Tafqg0,,}'Yg;϶-lԍO@1_w=?vd~t;'WEU0p~l!q L+.50X|w\|ͱw{Fۃ1NȅUQuڗ3/6BړXڙ(77d<4 A@t@kߢפޗKS8RɘP|O؃":P{p ֖ꡨpMB*:'RiۃGK=Dr.O4U9mmqw0 ?sZ~0kZie%_gA!೚t3~-pyˑގ5)~J`A{Jt52^ߔʩsB@ χ" &0ܚxX.aS?m7nyr P{ vNz'/3EM[2n-ѢT+fM-prܳJs.=I>{c1tƆh~Km0FHV 1^b<ᰩ%ː[' =9q*pE')Z Tw3F6&zs(9kI/HPjf+)Þ2,QC/a%Eߢ7n #wIUb)+3yݗAn&^VDn{Fߦof(q{&EG^yfC:!OoQ[sNfU}oCLSMpKe9( |1L>]}Ed !ݚfv^Զœ!jr͆Dr#^۞)PT䝁XCHAA 0aiob /",#c][ɚϬYw-B#Q:ݘ..p < FF{|͉$EZ/&\[<::OlB,M o)=m0vP;SN[2KNSh/ &% ]EU*{=Ud4aЇht?,298oׯKŭeARxh,;GpZ4 Q%=he^d ɲNRk=v8tMWX2Tku(oqM+HK}ȓJ~5ap0B/<7noYQ RF 2dA4KjcF ;iC| O;7Qݣu 5d KueE|JM CkD+K\@~]ZYץ#}pq^1E2<{!y} ?QdALB}64NPE'_/.nB~Cj-M70C Tw8gHN$Y59v}**V0<^\r,p2TV_vzte$EWͼ8x~ 2M+1'{ԊO +%Ⱥ)'L<i 6ga,b.q / ՠ=r{?x5g>(:j;Kr[ِ-, h GhQEƻk+䏀-FF(t[֪?a2`;*uF>ed;Cq4Ak@}xffoG2q?x\=Ks;w?8mT;o`,L̅mA#LnۼLb>14zCh1>mC%;6U(%M$B{>vliy۸3ϰmxC,;K.rҕl)U"dڈ WUԳ+-Sg,L4ˌq`97Ä8p~q95rK,=Wy_)mCGU@HGTp:Qֹ q*ixC׈v(9ڣ 61{qyQX[`?-hO /`DmcnƮѬ}BQss̓=S `GOƑtIM$OK?H|/ͯ-*a1G+>3 -5|1dgUiM^[ $BR30b:9${* YQ?'/q)4UNؠCq Dyn{TL˻k;o;^|df'CyNd&$Spgl[%rR{+27 Pf:G3~սFN>Wu`(WY&BXlʦCUi-iw1kyGJHQP ֐&IwwX{㽛|Ս/Ynholش2,?bJzh']NH;m2E9&M$]DkRr JP^2{Mk]dB6lϱ `ai{_m}ߐR쥷^%qAc J/ֽbr]pL8@{q¹߀ஹ`Y) t!xc4溞TP( py`(L}4"imT7X"~f@woO@3"EsԑQ֔EETj<ח&z#0%z2Z $YX桒8oE%4+NݧA)+ޑ9w%e"e*.>8)XNK ʼAB^Oa\3$8dEgi"x<Y zKBy>^$ dfzk_B&=wV-s ֪GCins#*d? )X>)_-;fQ$75h2&~ېSLL~>sL+Zw}|\ahs/] &]4R\/>#TV.͔)N -UO<wYѓJf-i^ :0UʈoxF1n[t>=F"1QoHhU!GW1vis_Xw;-;Vd dw"1u+TUǸT#Jf`?gs$>p>#(rkJ\LĶwghlذ;6tGZ/ Dp.82 |@bHY\b _oοb/`6ߺ\@P!wNto&n8$lrVŇ&anwF^'Ji O!Y-kUChU=]5E,pwkT:wvɭr:.Sr9WW]ZCkY}s8%_ƣ_b7w$0Bٳ<LbRиEDB|78wށuȾY3QPb-_ȋYE_ OJ*HMo)MXK#~^ז} 0Ƹ!k?9Vӎ4W.µ<; sZcM:c:WׇA t%*qd>RloY}qT.G&6jYo3ടaEg y=9vί[H ; \ku|mzF@wT. Y+:׮k[F6/riK{JZטdiikr6:=QFDk/o='> anTHI ߆rwjx)޽CWz nmQo]!BE]:\KM%%HI1Ζ>I $g! {i*7$ Q,[TkKFG7MU& Z4;&P$cHz7 |ާGTI9Ѫڢ[m(bxoW᤼{Cͺ3{ށĖią :=oC Ub*俥GH̎KtjXLlCjd* dJw!?d{ܿC-zq;7Mizo:l^JCJ,csN3c޴Ѩ$x#L&M^}jOEWh>]ߝΓAˑg 2s8hOw{ipG2~mxIk[*Wwݯ2fh'_JP)IϮj.p`ç~*&nV]^U>bŲfv 9Dѥ!#13=RUq5߀dm*{>HdWS̹HG=[?|(+x]L#"CY3E ȕUW:}Aݘ_y~'[qUubCUUBvb*M?7?uÇUPBmBc|kWJ)#?bi;^m5iIr(NƱHWsP:0;Vx'R*w=gZ- T l8EP<'~, 4F{":Hf< KuYZAȦF-C~G2~ɞw~KΠ *gYſAťCrhX?!/W^v1 PBM~>7~qZ3^?];hy4DD L:"cFqƽ?NWBM;l[) 2v &TV 1|[Ջ\.+.MblHߏfjJ88Mcs{xl7ۛiƣR&דO1~rGisZKl: DEĆ+`+ڋ$ `\GxUSq`yY⫁٭Ͽ z? J_M~lz$u_;MYٿ9ҍLޱ[_N!>}C7GV>F]5t ح9$Ewmc5_6ÊH@?oC^(hSojjx;g*,K'5X+O\JO%Lq1w>`&:0_щ}Rb BZ`-Duc0]RD[ei K?r`k|NL8|q|gz'd7[:G8ԝYVb.c9JSdBT#/1.﵁9o7'2I# N Re7zV9fHuǖ:ldoR[tWƴ(`oxkd@3⊂(Me@uϖ폭$6焾3TǣOLʙ.8No*388;..7xÒ-ɕ궯Sl% 04. Aܹ\fˮҲ6:A7.u !a< owD;xjWxi͹͊q̐F|Ryx#wZ9->|&:WAßQC;p ]_$@4LnC}:/6`1> "\؎sF"q 에9VOk 98K? O)BX(\m7E)x 9 {3c`X&vNi8Qq?|%Y݃owBDT> JQ@G>`y}O;=+ھIi[Q2_{J72_ZE y_ fAEa<X=gbϮS},}続D_Doݼ p'c݆UeO$ rU<WB,. a{>zsG˨t, s],XL|]WIrljbrz;A_Wȥ*!@ N17/ vfpGg#hqb9SBʪp_a{%r&M. &)kbBC]wo-6>>ULhAqaz=pʅ~'TQ_E,B` -8,z$h9|OHoSI4ef1$ ZJHэ\W]5O?:.oN9fp7G<.d7GI+t#S{SQH3wʿhG0B߅Ebu[b2 rݲ7Su {w7o|Et ܒMrUNLԘ$~: w2DH*߮f ځ^_YU|tao wv~ 3<1",`{+h9%O$~Ev%#9EsQ݌*0 Mgu~AIgoDau_ h:XO>d1I!բ6(с\ %s1mWx>{&Y$,1C{AqR*NΌ%TDY,m%\Z|PMe.`(kʼntH[C:b uJ/ zxJK~Ew [ ~WEק p5Zc ?wqQv}L%R2!e %!hGI樊a ~(k:ЏӋ1կfrWكḞ(sʹB\g0Q7?ۇXSO3,J]VXOa ?4%*ecWH^CTKV()c}B5#,7>2;Rʁf<: 51~vf{1"a3ޘ4O eFHȓ^ .)vh]tCatXAr.@N>FY*-fJ $Ht\nȚ j+e}U˰*GRKWη[фJ/04h^^S6 _jj8}o,"(r9;edD@40<,A脖 2xP0vljd܏+|uuc>1L7u<j& C&W({{LC-+q&gd$GhrN3N? +j z@,$TLń9r ʻ`ܷ,Np5 O{Ld1xM 5cKx!BdFp GV#a'&G'̓gJtB<yI3_%K_ F+qsJrی *I|dq @0M-֠{iWCh00yj?~sEq?G=^k H%59N ]ʤ34\Q|P5 {m*(b'Sق]@כz$p3zB3V ~l959SGǙ)ID`A#]ુ'c# TδbDlSK6XYy{~F $rUE \88IM)FdӦkfֵ Sf<: h[HKj]$d X"JoTt>Ab6:©V*EIu;2DG|b}qݜhy5t: yv6y2:L, r$tn=漁 #͸`(ŜPt7n"spzиBXL1"]wkoPbh_h)Juk `frh,tiOM"aP,|)Q\$z+ zn/S2=*z]եF'*zp׸{5r.5c\>iڑTo+mيɭdqkDLu䅬Ă6Don+2 'a+lNL9`"/cu$5jnv b2Pm$84o;aEc/s( \%Iο%SHkR̖ؒ jH.ј_VHN83TD[{ٌ?B+- Y2MISmA٭ηf4 9f$: fjEYRsy":g Lg{thեFq`2zAN%hATƃV~ی?盂^VgzƉƊm[gF6Dc0? B bxS"nĞh[=:FWBfGX,L%f`bҖ>bǽ6 eʎWD9fhvNDofx* NhV&G\Xu,35Gr ðJGFмЏ*Wޏt"HL3h7ͽY]eV2gahk=B }:fV u+qdstq}޾/*!kLIBLysBS$w;_xsE9C/WIɵ6/< H*-D1[4: 4}F^I?& .|t{qMS{cgPGљ⦲ qZgxFz $Yr<`q<kں)8 lCy }:%#C$Z}+ИY;[T>V7Џ:(>mr'^Mgy2f :"C~ X鉖-B0$^eN.k cTI93m+vM7Ģ;|E#ep*XVpDZ~£^e&x)~y+Ȇvβ-*etױs~d.Khe}wS>O9C8T/Sqm-p<E]u?hr|߹:ߐk-őPSX D\y`wWBGNW?t(;G?d^[GjD' 0tߑrC&r(yO 7˨[5phyyb{"|^ŋH8?3I%O lKn|󳹷%8Vh{qJgֻ ߪj3)D{vֽW R@MD~9ZItͲ(r؏"̀&AOׇbM *3%lL$(ƩPY@&--dhJPB4NH,!) !I;`޾Z;JCز{s_#C#%P7bY| i]dXcY }Jmsf Txo<:SygփXe[8|*ƭ$j  4\ȟ38L;\z}߳ C"ߥHpR>݅\UH)cxOGx#4B{H p0=/a}QLp$0 9fyƣ1DЪׁ2Țx}T# DM?:B/Q.ƏyML޹ɸOu^0<ӳkE{p^P(#k:>lPpy;E2c^oRLUT tE#`N1,qـlwļQQDݕؾct!+_V Xʂ>=-$V6"17"N`4 _jU/qXc$vP٘hiyLt8.ЬO?^4Մq3DzZSAKEM@~ .h8! 6Y_JnvmY:d8 xƂlN|{7}G`Ce>uJͬ7冩`Q: ӥ>pפD+wVJ2s7dfsP7L[1sh-᫖0P c?YB vuTcyKf"as8i\|Kim._rVh/׺Wy D*†W^_V砠hCu˒qgÁ?+kB9ZU`J^ZF="M \?/ֺd=6gQSK>u֛zEK娎&њ "2^ '(;PaF?+QcƁ%E0$ЁAGGs@`D5ky-͘-]H- C%=FCf.x|A{Bqˆ'jȒK@+`\Zj7 >m1Yz) nQ:!@J5Zݻ1ǣ.$Z>ҥAb]|Q@rC`/e1>؛0ML4'<ݼ4D H1qUs0*Po,r(;ی(:NCRT?G^ cV8 !=Ȓ~tCB"EeN;PBO۞Npr`@?4pC.@:, -ب`0 *[>|?18JȊHMZ7Go d7ߛ>4 ߒL/Wzg[Xp]`nu ʃ1stidYY-EU\=uQqY\̡%hJ͸kJRv-=^E hr\6W VPTHYmF {[!xZa1 -0JM|.gLŁ)eȑ4#8gOVVM/Lypj޸ R._I=#Rbur{j%5GK_v6lpВQ_;:S}K~$ND} [ +>R8K`*|&@RѬƸsU&uI έ9B̵ i㌫䗧u5EfF2x&0_< ve˓QYǺut޴emY8E[b_!;`YF 2+RC>_U2.ѠxVrI$[V5h<3Z+qbHFA s3;Huu$cnvUfìWBܚUyf)pd C?Cp605Zi&> t{,Q۬}Im4E$ْ"Z,EtՏ#d;WʣD-xtە+3V`EW2ޣ1 %+G?abb[al}́ɏS6Tq2l~͸/P&TU|n ;ԭo[Zd}+F'u~ *DR ]G)OMwdԢ1tdLJ{i??)@;]eo]YXq"d,Iˣ&0V#. WjwfO$Z|TV7[Ʉ(9 \p čFK z@-l>]ӥ&q2sI<"?^- M15wZ睉Eʦwg]3D<9G Poy[glw07?itnic.}._,hk7ڱarU!B~LH-ON<٘e*Ґg%T j#8k\ێcs2|ylbDL'fJZ5s2Ym%_άEV*d]V{The ògDHY~ڇi,nϺU#W8kO (Ƭ|kt(?AXE|zѯҨb֦騄(д F}f6J(2v-r9  es ٝ|Okj$s7Ro)4KMpI&!w kJyy'=?$FLY(2{~鐑}etӜ<1[GNpIUR7nosSRWZtw%cg- Nh60qE[=6 A7<^u~a«3)^%dk$*+Fx88~!/j5(&^͌ɡ 4Ꮫ_(nM77\  \cUm8Ўu<˜ ɤE /7w/7փk@mYzV<'Y 4&m"u"+Y'J%:m002kyI} xl'x2aM/?VHW\qElbMuo+9͠%\Uu /)(FC=lv .'~=>81 Ю{r;F1L: sq\o-* ^P0NdD‚)n4e+3p> WCS0j7W+lHJV Φ f)_I/urrMME-E6m*B"b:pL/x͢#Z]1gRPS*fOǛp;ڗ)W\I JVF{;2CI˵n}p\)jnn!4wG5m2 OufHQ8TS_[=0xNsFXÅD? $x,3Yzf̘ 8ɭˢǖ:~IW{npίc#XԇT6llŇ0:~'E3D&36\.ݜ/9yHc9xGRO}۪ݾ䜱EeWw1EѰm;piK_9BBbd7u1U?L^ )<&)> X$t6tq:fIf _ᣛX7a]:rp◕ʹyo^EjӘ7f[ Rev7>9&xBNEW53t( 8ftF,U'&G>q6(㴀aA"TҁN~LH%]?A[4 k2!" 8rNwpC<.!?3ٯ4ST)7]ne h͒l1)٤fQHA r G䅘hZmK/Sî.Y5}`NQmfx>Ē(A#|QfOС:tkU @O{8ȍ]o ,]d '1ПugFtWSvg+Z.mm(otSK]pQb9m#>}i)`Q=Aiː'K  ǎ0_m|[י_ovK>J tBR8;fX׭2b9<=OSqRѐL.kH}p$&${-5聡ׂAP -mwQ|IU !J711zDNQf/)k{33?Siw%&zwmà]T7%O֭_vXL[=ưa?8 .bg2L1aETlt1+9æ>)w@!Y;uT' F%EhYM,~M<+%ZȊi0'>}EPREP$j\eIݕI={>MPKe*^.{EtΤDHO* aF- ፈ^ iVGIifήм+!@Ea ~Rӭ[ *j0,`yv_Γ㝵+D!ōaΦ$PEϡ0OYB˻dl.o/f4PP?-neva LSⴲafϛ^sN 1[S ȇa!8vҘH`;<~V/U]U,R,iX T.v5& z~{?,N_}P >Cma ,g3+n{mbֹ@/sLBu /H~O>u>_x qx]4X~zI}u0 gb~hwɱNbެow,!wqO$9¤jd#áoJaD+!JS挃 ,ὣN5r-LJ~i6hgʙB ϊϨ (鞓=Uޥߗұi^b}m?h;?9 vm |21ڠxL _a-9}-R@;b t47TBھ`ӭxtp%jb Ioe,vYL($ T䥒$Ok<#b{ʓ>$ȩ 8H%,aFAO6, 31bWǺ[/Yؚ2O r[}᪄y){%P]_jtd4 bYtNZMsSG(Bak5݊Ȩ?`sifރ)0>k> C@q0|4[ڤ| H<滪JQ(D8n6bE~l<ޭ|;=֑ |ѝa\[2ūƮ_*X=_'VqRLsm_e*ɷ:!Ƣ` #F [BC9{U $xnuQ:a֬.igQS&dX+lPr)SOX8&TG/0D_pG2 tDV `%FY"kۤ:Sf]`SdMB_RZ;8 dO"3b-W~F^Xi ?s!ΜOZduHlD#ggFA9ewa::C,vG\QuCPh8X:+QN2uDRa]lJyNPpbj;#Akqw#,xǕP2F恙S'1hs {`Ab:o4Eiv"dY:ttƫEtd~^99>G9=jY-fHOyktC=\=5YxwݽYLdQIdGꘫqaUE=4&e,u^ -Y]7s_D4I>1$8m(-R% (v>/3 3qAM^;' =ʟPy'X4v?Se ND@ e0?He>T;Îx>n J |vf`Ҧ̷=e,wDQ @+KG,(zokjz^ʽBM|D7/JG9-MXA}~MDEā2|]ϖ?2/fѭ(u{W;"L \6f ? (IJ8|Nv`-#GA%f$`$>k6r?@d&/1WTRimcK'M&m &5\ WLWKGk đkѠ[>s)zwvD }>&P i0`'xϵZT7Y˸@h@tՍM9V[m\wW}&Ue.-{xynH ?t秬!Ȗ blQ@6q=p888Ǟ& AGXx'rR֣$̰N 9څ (6ҢO[N8:ROAуr)YfGM~BQDI}Gو;З q9>w0o{ɋ 2N>-!{.tF@ xpleB/cݶ փg]7>sIWTg}I,sRv OXʦ@5鋐Гȭq+[VZk+]Ʀ\q[4OeE {Һ lSIo1TXw>z$AEZ2"7 ,x,G b?U""EiZDXl"~ْ6W&Zu7wxfaDc1%z={ gHn% 5 z4SCGMLu5(PfFyBw57Ic=LC W:/(g$ϩ`ZFVrâsTP$*Mr>t(,t;]^mP<2+&Jm+F^v6=śnhS1~~pi)c <^?[[S0(00k2$ii'nDtkC3 {#Aycg--%*=hy։{-ޘG6I➫pݏ~H^Y!\$o!x2C+~87'Ov=/Lס؂ȗqO\5Z:ťLS)J!fRr`~\ 1Huf>K(^>i2E} Ԫ +>$BvEk)q)n>gݽ.F0$Zem&҉DI&Fmمt]}!UA* iI\;H9uUl5(G8#mH]vX~PKa*aF<0 )VݠD?ڠ*Vixڑ[ӜL#M) 8Lj [e: !zRJ5toZ Qg|T;OŻ`0{3 1TMF|ȼw<ȣ4PC^FP\d^1AtBm7$X}`,9P+Me㣖 Ӓ,oG1wIyg\j=;gl)^ iG 2`r|]=X 5N4Phl)@ѯLtۊbR;& 5Z CsV7'JzQDeQ렽}Kƌ~eibfœF^aGh$m3x Rf Ӟ@ll_yﰿE `O);W]w̒[d Tc4Yύf/jh)Xwc@7x T߯ǼX!RQLf=y=4" I F 8˗h`4-^twYVY iǰY)ҟ(@:8 PӚ,?RO]iĸ3 X:j,W 0}6.:@In&<ꍸ~tӇ9Fxڋ=Ẅ́ XhYBTض[> -/`Ȇˆ&X+&k#z== 6 0#ORp?,CGx'!wGS _F;-AmeBI^T j BNq=~bϥ|d fJ{bU9o?ȰBU+wQ;YjY!";YiM#{Hcx%nu >v.\7ibF$'HƋEGGڤ8?gq&:> c؍3~wLuBibrOt$U+ZK5ѥޝs33"z]FĴ?5RUϲj0#r 7W3PIBwv>iY1q,#pXiJ}3L 1rvShQ/c8-ғ1;\/Tnqo?cTAu3"Π6\VB.blUT+8BOA@ ٞeO)~Go`el7nTpL J5LomnL9sxۘ֓ z,JY^Z1oh$a:=7:-Qe̗0{Я+^ }CM=d̡eF`&[$L{ͣOkEX'}=ϹE9VS:l o Y5+` ji7][1-[D Δ#Sa(z^[ꍈ|)ꠛ*ن"ʀfQĂ0>w 3٭F;z gxh+X[B ͣ)ɆI^*mjqJVq^Is@aU[-e ֡m$xr4 P9.C4$mr2nEI΂DpPT7e!}Nױۼ5-f7c+l09 "xߍV#V?Dom!RZur\@KR֓mV?$׈j64҈ݭK]L?~VȊ*8ӵF*vF얱>ݧujN@H ctg_nu8»&ʤ||l #hPFXM7(:RKѭy Bƈ&$1q_zP3X%D^l9>ܝb#H!&Ht\tU4'o[($EF|Elu Ž~@/OQav߆P@/2(c>/uZE܇9ERVR띏0P2vӃ^v)Ա 9Z6أY6Uz`ˍb7l n"t,$PjERw$ԏ,h)9 bP=Oi(]$ 7 pOl>r^R jsz»_$crAqjt&1D#*mfG\m`a!`B `gp)q<ʉC"J059<B'#e옼#JdGGv *fSt,ikj[؜_Hp$ i/4~xM pRI/ǁ)uxЏ pԧXn,bƄ)9Rx6Ͽu LnwGFGV Fyaϊ0&vMȸLNI\g)}zf ~ǹ/ .6JuÁ@L>kx= \Ƞ^|4XriBтWAOF|=bՈ1Z)J:oM$9vNڤckes$p#F?,k4YIe I8|{zx6<9dcH[n,i_t:$ ~b7~?9@QĉPɆLya!AtzCݗ8H]+ٺoEY`u%|UY ˦ꊏ^4wkاBƮ~,}0(G:ypb:=ǾEM$ΨJ@9Y S<$/9ɍ<ϬtRI$׍0#Bl* 3īJ5><3𚀝Ҳfui 5LkI|'Kl Ч nY!C];fJ0s#}!lVMNNBJ1]aLMo{)y}v啐xѻ f=06@ ,/EY7.ͻD,T􉾝$${t9&/hnN 5C'n_oH5 ,SO14h[/[D9K6q~O[3,5/5F5gf"㳎/ɳK>Gpa=T`Z|-qVq O@<k¸mx-2nnKqr|} h` OB:b@~Y`)~o',d>8Si+@h^ƈs@G\6 `:Q%`H"k16(=X"r}=*:PoZ*eo*D5-9PpByJ]e}Y :/QRyP謺HP^Haknв);TO6[3a͑\E^ZFB jEfj4^N[\ SSrOҢIBAXh fs2N羾ϕNhc4s(9d7ia}-g,{#@L{s.]L fig4 KRw A>ezڊLj{d;tĴK#{viK=T̆n{7mX~x{@H=j6 HáRN61(UCTS6'OˊT !ϙe5ʤɽ6[aM4\YN %^UG[#WJp_?f5#DjIY6ԫlDD ./Axǰԃ;uؾ2yÒ8$*U+0P%46b#kzڳZ,C .,1x;^+;Z8rM*2Ru=|Uh\?)hC@)pO㱓ˀC4nF.S\J.Q:(yb D珊=tI,)^;-˷DM@Hsna,ν^ZeH.,:!*C3lʭ$btZTPİ׬ E婱;j/׏פ-suh1R}Gh$=/h L^4n[3Vq98Jn>ajH~.)]Svm9PLrl?"P/&\'!u:,0GJd-VP#/Q|)~jB! ,LlI8  &k޷C\@<̢Np#PuHeZжBˤEY$zV3*b$!D/֥Thȼ񆮲q(Pt]x%%^l(M$Yx=B ZEֻT1Q>#7#ĕ!1BsqG$SH͚{.e H( =hzz6ot!G&wkB`Q<\Q<5&u @%fU֊Au)S.Gq3 2gKX錭*-wՄGl>0\! /=WTVB\Nτ%2Dැ zJ|I miSZ wfTP֎'ˊi:-zDR=bioֈ'b irS~]V+Tl"2TJ Ķ hq*Bo:8w,rv[`6ܴ/9jo[`Nܤ|j1b}]Ô<Ӱ\ Ć\[uݾF~L]]´R#7#Ao%隓8GP *:6J"A6-qp61 @ `_9,^Cȸo:$„aV&S5D?v" *D5d]n {8MqRIZKVƻ-c)MZNS.c jmC(NIXm4НWP/fE{!e'!;4j O/?.HI?cirt7}~~$dIV_u E-`Ѡ5U{u1ps { ]/m)Ds]@b w -hxWŷAYkc|hͨP:v\TKlʱNb ,LQ*JXS+[xi4$A-CeN+.(H57UܪbDɱvq7O-><&/&e4g1gxàeyl*Y:6Tฑ^NΓ"jHj(˗Rp4ްn ,#tUC~< 4dߌ`kt=eee[k4R)?l6b:?)[7 H؂M|^Fn(y$Iv`h~G g@d58Ig%$$ {pK/ rR%*n"Pb9?@S яbIcG]P>TwaШ1QF8֚ nnX {!>N4ak{bZMzqÇ|$HYhrη/a4#wy+1IŤxuR}k,t}ȹaY_sTy&.Ozc:t!1R$ z}83>TQdঁjHidb>Fj/9"!0)f hXT=yz)LExDQű3t|er2|žXvzߍ&#%aijC2\[[imS ,g3#QӄMo҆eyۡK=w^g_=-hi|N6P牛 V체y2M[><\z'R=OHITwDm vo0R=H2.1wkQ-Y4k+$ beEdP|$جQN`.Կ` +}ڜaǹ Aɜ[#m۸@,66&3M+)|5WվP$u{+Ҫ(8}dWBֿԈ2S5+4? g&_2e^E/7x h pDp,t5؇(EuG3Eq=. _=$lTX%@=NW2q=@d@.Y!"q*b8x{$7\=LLL ؆="A1 uQ%,3Ί&vd [OR[xWh HkjLˉ[t .&ޑF.S}/.pK3>!  H$NQTQiq:#UIU+_ؘ@M9)b,m V%cܢ:1u-8Pd)۠PȜ5'eE-_@ۨ~GdϘ *Xgխw+z=C|#rC< p,^ Ρ-*/m(+|AC"bCV8uf1dDrmԜUe,h)'dRpFM~dūlRO3RУw)$k!ڨڋ"g9"2/N6%Lofւ"xZciEPomm V6ڀ==cY=Du{3n%HD :}Ut9H{@ 7I#_~V$ p}Ý"Sd=ȉtr-Y9B.a^UۙR4-\ HzD}C+{?HRtZ" ?.|~G>6c`,iL'ѓfaejKɤBdtaL!pRqs]m 'b8=|n}0ef(gI 4Q@&fa*sM"G_+r].hi8N=r9>77ۗlL2ء]9eqzpCsT3 +wC+,*p[ֵq;,eX<˄ZR=.|Lͼ˶("Fj$ٲw ,KED kF|UtKFbVeTg G!rVhp68e \;֐r~WMup53\+Zr%5 6P5{Jmj#~l6:Al77LQ8׳bX !hJi>߲#Ǯ4&r 'YQ]g~|#L wE}># r0ԆvP7cOk, kd/d5ą`n܉'&sQ?g1dT&Dȼ`??OՄ2&,eV=mveH 6j֞ =QBMJlZN}WylS#1C` G{Ձ]8Q౳b-KX>k "48ӽݕ:VQLȹʍ7 Nu.-I3m5!XF`ϻ\*pT]96r=\4ݩ&7鸔QgYAh+j"~KѧMy?I 'cJk3 ۯU"|gt)E 6x&ixZUaV xjX/W^v¬SF;'&'`CV"f99r)svѥc/fyE ssF56 >(o w9$Pda8bCiyٛmI }*ǴTI׮x(g6y׮mNlN+qNl)Ljkpkќf Nw>'r3$&J1,08< _&}o[y&B*?#UU-Ē7(>5@!o%trif Z%iYlQ:M5Y1;bg6;Wԁ9vdYu_%\K1HrIxTW/t6 QDpQ&_9'%p!{% 5kz eї\0kUrpzd (OijHA '9ȏus_!{1YNfa˺bCmE *)ii]>ӄ=n8p;Uy0n#HȪ63s# >Ε k¾߭E5},̙{[}a{ zm!"Nts=0aѣ&sK}S|Od؊xk ^aҚ. SjH(J^O!.}rƎ"I&W⹠5R0!/+2ZUAK#5=9#=j}\rNZ =fEA #Lhb@̖ދ WfƒB0m,06uJhHCk̯cgYέ9?W$d-}Q{&NgҮwڷ|kGUo/H8ƢN+솪\5g 3ɑ%'Ps{2^rz6{qeDP&|J[S xb +GHӊjΊ%ci1dͨOP_U,^E`VE8K >WGf7L{c:FvSGն )e8V*%LxegxC$6nTMs_FC[kKyM" ܪrpLEgCU⧕UqMw]pz`*{^5}|T d64IAۖs 7D*,kES>"Q*zMnbcNE[Q:~BmipOb iMq,w/eߛ4{H4E˾ }*Ɔ{+vn3!m\^Iݨ &C&-PJ N3csFZhr܆6'k xõ^ TJ~VKn$pY`ijh*l*8Up5@rC^6,_h (¿/Ad:ra昩\BB1ŷx]XKH%7Y!  b`i~lX>Uɍ zj4ɘ> ;;V2 fbM<8FQ;,oADX=R~&->V3xud?wҜc~@!pcE\8f}u0wA`nCC]?s%PNmCSձ%nw=_2|GPA@s|bimP3j4Pwx㹱}՞&A[XYٺ#po *e+Z{V DUtgWyk\{Q1Im2gTB>a]Rd e]oUL]`'s;~Z al uI1K8fJw7*{ ^/b%s k jgaNs|Qmt)Q=>u؇z60u]:3?@맱_L^ ƢBFkTI׵.:p !Q ܥu[ҏo=1P,`s״1)'gG(]o$#huK!]qbJYHg9kjki,:>PS2+ci6!uN}`(C=gGQ' :a h|/a4abZJ"/H}'^jW[䢓3Y VT"q:<D4ކ &z?VG<Dz4ȴxИXYg^/"J;BO&s_RnIY7MY6vb,_"&Ly_SzsO)¥h=搳.?rd@ay) Zyj *Dp#YPڤE~ű:640Lk{ 87^#|VeF4oPS[ j\`\h^ UD@Ȭ! J =}ɋI/ cXDe~W~LςP~H%m^z -j.pe)(^xu8WTiy~j(PB -)ӱ@O/'^ƳleRq8rpw`6 {y{u6:8OQ;rhKI[N ٞeAPYQG;m aU.:{v*N؝B߹q>jwD֜2Y~Di)RU˹5Y㮮|[A/} c)90QgۢqF5re?=YvPOS؝n+W)w\‚fդ&gf+e c(i#vA9"_b\@KUR(jMCu< WVA㱳Er?a-}U!A˕3vOսDή+)8q r}}./&|ߥj>5FErw0'81hPq}3/,n:έ[cPa$76s j`HHV3,4MKW>弔Ȁb;:{t ϫ~X(I#e9]x xDK@)%F 1zGFԕx'lsg,(F3 Brj]xf|ޖf=$ej-ȐsO=7$;erO'3 ' vAdkwڥpKM4#!]LYzg+2g؞ɨ@!y-[x=+E멀xvq6:XI"md&aҲgjKs9Ϋ lC,W!N]ia u~ӛLwj)Y.2VJoh+[^l0BK\9T([jB)!2^eEzqoȖ sױS26B-6}+*'HƋ@M`79Jα+X^\5bRڑ#1cDdʱu;r".ijX wBoYc‚ߣ6ސa9| yŷd7h?U&~َs0!L EF;f8VczъA}{h$n*VnofPW.4x7"nmڨgv'' .i~,G8 j966Լ5ˮ;-e`k=zFeGg=*LG=p\P쏍bw9Io^IsXLKRrXBBEAuReU b}9SW\ y=]zH#!B {|]@#\ 68}v-&Dto(9&"wg+n2N))\=e5@hu-zB5OaF-l*J<|^INVRhn=ƕVbu( Ir*G>fV#m e،a'8bO(bgKɅc癡UM{'o{> TM?`%igFmp4\ANGB-劾DCq Df*ފpLJ:aŇP"-cބ=n?ZVj\#?GCxr|Ͳ\]N >n[~PmGÔ =NYmJj-R؃ls;s^ L%nXE)t4F_5zTX$rgf2wvKYNPL}׿ǮDšh@YcKE`&{VPhPk}CۭU٨] *˯0 ԇ16썷P 4E2 ĤFMbLQ!*clge4j. 43@v ɔ:5J?A8?,I Y@Wl|Io( h)RxiSӹ b`ycD\aq }QbNOsstCSF[L=zg9'SmNڗ0𱺖doIQF YZ