apparmor-docs-3.1.7-150600.5.12.2 < > , ̉ iYp9|ӯm OK;0a9Hˀ áӉ}Ts3 ݍG KCrⱹ+
[0pQ@{ qÇ S~pSޘB)}Nh DS!tF175sE^hqw^=YNZUVP5.Z&`K C de5?ȈvT kID,!dC ι6dxt{`A<-˘U9"vdu = \O!*E > ; X ? H d $ C 5 I h n x
G
T @ P ` ( 8 9 p : F G , H X I X Y \ ] ^ b c d e f l u 4 v ` z D C apparmor-docs 3.1.7 150600.5.12.2 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. iYh03-ch2b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e 0- K I v ʷA큤A큤 iiiWeWeWeheWi{eWeWeW e18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a420 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d be26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb0 65b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c66922400 1e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.1.7-150600.5.12.2.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@d dtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h03-ch2b 1774261849
3.1.7-150600.5.12.2 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text by
+ o). utf-8 30dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722 ? P 7zXZ
! t/$] "k%R{_ Odn-)pP~ e$S5Dk.#HVfɏǜvXOʝ Q].nL\@coEȲŎ\%vv_b`pu_ ;m7]FgOȕtQ%
%c"5 Q%m ZGtD? "vz1yyG\bϠ6a{%w
0c(5IGZgNbn/E>4杻uX|t6Qitz A#bݓB=]qxH s/tRV9@ ˯80a^_\e^軳PS@p. +2*A[tKdKѥR^8t=:I!_-l banTf`Z ,[ ^UcΌt3te@ʛyR6Kkk3GPP-К'ڎ yK[OGO"9Cc3F]B`Eh\m/]7f V*jIu=zyeU 'V-9P#lQ=l /q^7pl|f 岺؊saj]t:itk(Լ{t I'NF
,dZK9r% 'F2 VkYsUƽ8~ 1-A.e>SkfUW[eOԥ@InPðg7 ~*;l
bk"1M SP ̳n/#Uo
ٜqNX)A&I\#Ouq^A"txJ[r;z1òk\^,f QȪ3R3xOP ]im0|S(BCڎLZ{:Iڌp>tN/ uԈ8+ ;7%E bqBzF9Gf$ޓJTttXp%bl ?2R ﲬRV+/vQx<@D&c?DboQ<ƕO^-bvq%2JtC_nK!pHB;(F[2i;#zb hm,A^ЫYH&I" @8T '3K"I $ %'k#V-!;.W]:BVܭG!m8"@B QSYp}kv7G%t aӇ6t'9ӊt"Z= mJfe5Vݣ&27xkEf܊|qZ+%ZJ5C$[ s @u³>>zp"p :O97W_ڪ!=MJ+I rX3NR$ F "ԑu-cz
מXh ?%tS8!˅~ Ya. ^䥋4 :hGkzEٸH1
ގa(*$+Khvהk[.&~hDV /EiA8{i*4]B:~Xb$ȣ*>850P\i\j9fPH4^3-/ xkHU֠L#]_u^+&5ߋ:}, IS
mijkeJIE ٜ݇4a8e<63ZA70ON_DgM2P
};EGYFp^ϛj}j(9:fp˾ Fք'Ss+-" 8D uEWj條g-Bۤ=)U[1BWp rŌ* $֗ʎ+xPȉoJ|e
uF(:>y l>>:>EV{SL4
DB6An:k=)7^rX
ݼ ܲ@q f1X:9XPf[} h@fYڲO avDXk*7e19ƻN,Rov &$֖ T$3S%o~g b ~ vTKpRFp!o6NW0=gT<`sc&գ`;Wu=
se4V|A qBCy?`,fׁ!0B߳nm k7.w (#qw F^Lb}Bs'MiߕD=06l+Iw@ଽ#ov05C4Q3ꍛ3̺a [ 'F%f@;]pm -cFd.ŏm\ *ϱ1ք.
RE l7?BC K5DqEe| "U=^_^& ̓rNgq`C%|oo젱t~^s`CzVA_m ֶJɌ}}:!rI[QjR~2h G>rq\
} R 4ۣ/i#`I$SGbMʨ咶d[ό2LI# /._hfFo aC +yaf=0J+1mk.e] _
sEq::R$} *lbujܦ 8Eu*YkIH2W; -1JM{o(/ <]WA\N^;~c;`8II 7X^u ycEp5]3;b^h^MMsc7t(4X%3/2v2f%n&dD N74 uR;NAA\qowk|Ur_l1dkQ}:7I$$&:j]lc$VgG j8(c7 RPc.4 XºinpLf(]TyXeA5;!\iۜY+.mVS!a&4_ܝ?= I) n8;Q {ԁʔ2 Cw.%y=YʒL5?11J!=znWzKg#$mjpK*{Jg` E/2 [4ƽeleɱ\^x
vtS}nIAB>?LP?CDiMè%Lr,**@:GI
D=뿦{33qK힔
v , P~ fm[5< AHUmC U{ep $|Ŗ1]wEmc2Tzvs3XDyTqas\0(hcZ; f#?\^bJ!NP-zS aloqNr% jK6#FۼX'&嚩 \'Dn\WG;}3֬ ɤPC cG yj&o+Lbעߕ 2JNBU;Oԙ)
ht|8O[̾$.kw̛(}R3+)F5SKs/%Z
/GfJ/If,t8'}hY E Bb=iPcagХ/j R.kQ o24؝8eR^mf (aoJ~*4$OS{s)+e\rʱ6+a͓7bFN vQXSO֪ĜvDn E)5lqL|E;a]
Ml~ =:;M]
+F߾Q: -DݎPJ}= 47 Eӗ{
g}I Ça3 },Ԉ:z-;Ed J8ES 6d1'EV"UeY+D d5O+th?[QO$V1ݎ3C[5\pPV .WL$xQ}a)~ (*m?HFC k;mY2 P*јlt2`LU)%#g9ˢ덱z<s:'_p9b 4)Fko-sQ=t7-]9۪@ cz0{}lt'P
SPeMifRީ
uCGz!M'jV*z1(C6 ,{M;9.2K++UMT1)'ߛwI 4K;DU.#{ r5-}dh-ެ 7,]ĩ*hߤ6 (ӊZ I8<!"WA%#s>!_u
IfUl룇 ;#[ 2-ygh`&G=1h#쿞VI~T6S,m- l`rB c[[ P3"VXFnm"9D /{zN+ 5aۗP4~hIT)T:W,#?܆\ ̧6ú<;i헁&mg
% jx>Jrf5r%89
aɼBE8KOG09
" nen PMXg/ R2tP Z4 sZJ^9nJdjym^,i3 S#4W@(oh1};-ɶFi\̢N
X=܂*24,sG"55\j(
$}"dj7TU6 N6=ɓvk~;{
`{HNf-?#5v:D~Z:RIz N4UOi %N4
!rFu:gnPgkh$li:O9>^+^HmI6)
Mx!<cr=jϳ/ψtdUq :0 o'kȥd_*fr ~T>4 j wYQe*f#
քƚ#ַ0y1_ l% sxzt 9(yxV3W %,! #0)Pu >*} [oN{_qv2= EmI|V)Y)5B:d`+[jd*@3Y'o ;hYkĥcqS"eM4bn8$
ыWq~A LsV眛Exn]`} gYm3 pHFGҿDz ɴ 5{X5: Nۏ2ļ3:k *銎Vةd*ZA[hp0,NXڿLf 03 G,yG {X~I< kcl!ʼ:jy_FXuo0%:RTLf};#e˃M1ncEHz@SCO|Z7iWg7sq&LSz {ARQ/U:k Y3azgsrlSG֯T_]پzYZ0~XxLfp =VJ`%&* p?oIuXf
1l;Gnu۾)q|"L3݈[y
LH)]H9kHgIa"w479dغ/NiujY z?1kG|9]W0Tǭ0TΧMjBXtKo[q۸ XPl >lҠhs&^jW-;h~a~DZ2lEf?ST] (:sBX^3U1vEr ¼)G=!3A%Dsb"ST݀dI+7i-ATaܨ#O?$mki] VjoCavA_R쀛.J%jj B.1(Ov{ y
|C,}-u]NW340Er,K$ G =ȭ",j7kV]4NXoroHXX F
U 3nf nrZ (CrORڕO?Bp:92D|(HrP>8jt}w~8B1<;űQ/#&n9!F+
ynNY"M|ȡa 2=na8
[Kf"f7|v2Ҟk:&^ߤ;)Y^"2Rۆ;8>7m̒p)4C{
I]j cvX:
B8.Jt9{kq6# 2vh}֩JCd=E]Gz 7~7^:S ¥u3˹G
Y]bE5dft(7<G ez[MַO8*UW#;w+Q{92
Ȃc|FKDw@b0OuAyY|Qz&vk^SI=&LΏ wps1zsEuP\_Swg9E;:k(JbLQ* F7 3w-1˹t2>U 宮6Zu >?U) H-U4P~`6bxZ`[ j^5nbv|[uݯ=mѬ']\Hw <zm?햯D=p;x !W R %"/~9ee
[- rs=sͬǎPX}K$
~p/=BHq[!9h [ei/;_jf͆blé~T]1ԩQU#<63I ߭[ʺgG[MPIyD$ 46 Z]"z$'QYׂ^Tщ= V{
3/eT ! o Mh5K:D`=ʴ-dvիq2)BzY 0FEdEQדNǿ?gWro3dq~/zQ̜mԍG|nQ4^[ܧ-^6M" }
MQa>rI:?ME2Tf'cafǮZϢ4=w9fXT;<9 _X\[$ Rr^3 C3FOvjL풬dWq|0Lyenq^ElO' H̹&ou"tIDf0z+o6>^ |JX"=X"|k?x/pI5"FbUi ݷ7= ˥ذCgdz "VXHA`efTz_ .x~`h9Y\B h8>mfgy)rxbBxz֗S:F:
[
P*1Sv[ga:1x=U*Vk Yգa1ep=sHZ,ul͉q nEug-j¹j:+%Q$B!"乤1)rtH865yJO]p
ar./-Ne:?Qk|Jsc4 ){* r㰦d^-K; g:Y(lܽ[=\T JHV1j g$W6Tԅ\&x (ipD:n
QKdIzJoMjc$ YOLr2@a6:%}Wڹl{P";Yo_ajrXpjoB7?"_z&'NX6ŦPTےkFiS@U⹄bj wsЬ";K P ^>w?(|Z_j@ F>[1>љY|a+g%ja?7Kfk=:/~2a?T2RJ07]eVyn~'d ~6b:yD-Xza"aU>y퓇>e; Օ ^'A{VH"._
R(N4?NThAqV@4b,oKBV"u ɼUԑ4I!]Ր
z{AaH\mr3L설 e
<ʹ"[W&$;.J%FGmܴbosϫJM 58?^SLEpG!p C[Wu+pTe&2$to)e#H-锷A.?Ikm!:zfP* '|Xs!$KJ H 1Y VBLahZ=d1}6 "6۳s0ק ƜU`JRh҆rgjZgxMֶQy86G4ݖ ѩ9*Kל>/IqO"Ů]m``,1ea)1xfKw8k9Ă491mIM7uh9W*$A> HiQG/ $z%OcSZiv&'F8G-~|e; vAX\ʩtG}8LG?sO8=XMjdo8m@nNB2ʙC6Zsd'#ݿzW Zru7!9B~jo8=2LT[ :ͦ`dSʋoZ;\G4XU1Rʴ+Bʃ̯y ɼK
c)Ac ~gZvowkN:l
h)+W/ \W: hu\!9Iw&wl|RX% wـZzq Xb.9h
J9*QB
1|i%8% w* KI-wF+c_f(e k('Hٜkɿ tlf=jt=컄^2}|GȻJ95C8ZB<`.`'=Z;:|6Mc0 dW ^0Y,c=GNwi#N7pV5uVN)[on~}?
tPN _ $3D<6YStCߜvX.>g>g 3]F.?S.gto= 6oS߯l#z5# Ԉ@Vry1W Hnh.އ-ۃ_ 5 V} d?EY4 ({}q ۶LuE@*F Ob-JZ\ڻK}e2ų}uyQKW BKbfᐔA4ySfi pi
5r "oʁ #$*d)9%[' )<ڌ@/VE@&>Pt9h/Kڻ4pQW!X.G%
FrGݻBCKS~H1j ?[#!ȝJC,cbG-`}#F,}H9Lv Cuu tdPEKv[mkFZ38q1kM=ib 7iO܁ڲ+c\5[g ޒΩ'2Z)!t='N_ 'u}g yjXJ] wgWzqXㇳ1b@n3oLvz8ChEXR)҅ }.! l@yV F#tUIhFH 8\п|
;rqu(v)b(1!lIەxR<' @?82 KS K bCSٰ+g zZ,Z"LqS
HrK?RkR[ GT ItI϶}W_SpD0Ch]QUa% 4 JIqgaΤ g .r25sWb5^1'LKL/mSP^~Ec%Q^ogm妤qҡA
lihѵ1=a,
X"WR1iY4$EzbcDiMF95 A$-B;zo^ o7
VhrQ2;'H eUјWS4(
a%YSrXmZM ] <@9=fDDB& \F$\ q&8vp>|Z* ";Em]Z}f.QwV}ĔJƃttMV)u&~%~Ipk *;[p N)ؔ':[ %9-J zmu;*bNq!: iͱ59:17a$u.T)oIaymF4T PGIRɾ26Y\Ef|Zn[\M6txUD d U
ѲpXӪ >E{bD(fH?A13@(qK(j5Q6"T)+Yz =/o(3i n%̗iE,NTt
(Κ2u]خm'16$w/ S^?
Ǩ D𒍡 k7!q-x,G'>ã#sX)S$vۜ kӓ)*>F e/)ux7̎&
>B ߐH^J2%3瓡,i^\I x
/ům/bpﾤ)ų˽gfo$P ;_u &(mi
ٿl`S%V^o7;;~b U~8EnD/A^R#f-g+I>b7q#9lYLml^džDj JwqtplrcB1\Jxwzn{ ~f Έ.5d1vSɓiFbQJ$Wf`P- N,XF GFWЮFxFFsS6.DƁ:>Ώ6bAfN W#:( rsp-u]o}x#[3榪
U!es
Fd]]O|
ϊ/0t;AD.3j. ">:yǗd[u AhL^MLF' p.$ը= D) |so!ci\WqM^(- (bgEAD; TK LSC)V-Luɿ:| h gvS3~P۴scUHVD(yy5}әCVB2b#,Z8Q/_'bp?YPe? WpI.
S8e xaPlq"lӿ̯C:VgW dnp= M P؇
V@ )APm ~ :<#$=|SlK]qkA|R
fN8:rP 65DvJG
J
Cl<( a
bk';[^٣/fLt9{b
ɽ" Ο*6
DƙK9 =^WƎl[32uU3vwzpic% $eRHOɼ-)u\ 8N)CqqŽΎ
f2__쑚-:A( L_!T|j d۟QC,ږ _*"_v.^?{L8m6
KrXNASjl#f+ `q(
YֺdhJǺc.ޗ
>C;ܓl)NJ+T1\yc9>o `ή+EbHYpz Y>F oV(ʸEB`T8aAKI
Z~ P|
:`T %G"r )Y@ZJS72(kC$t0K U:l+U~vECǰt}Mehq==w}QVNv,g=&"ӯd*n `;ݵ Gi@\Ͷ?*_|}Hg REITп'7 [e)Nkb;MZ#oҘwJs3GYd!#
uiob(nZigm#oIg u,P[ K%if"z%f)k=:"KL-yQ> eTlMhOZ5nڄSp6tf ;؈X9>b66>+t8 Y4P6.m.Xw~|{܄=Pp_OꥑjGsu $z7ȭlG+kYxVd7~> }6@I @+pԈxU h z'u[2ew4} 2P(ǡtW\ۓ@ۙmCa9_3gx \"2,6H + ҟ;' |YxlH#ZqMƐuGHƚ]h2fɩLY.D& t3Q;I*Dxu~o1S`lF8
{$=s"X0^>q`r I!3NFu[8g1SW rH~?TuXS,gjN ,jN V)d F
GNS(e#YW {s6n]я1iEؘ Klm'rx
$0|gh ݏ"P>Z%t*M@gFBh~Nl 9 `5pbDw>haL_=pClzAJ7w>Qav] <߹d2mtc-)WnԘK3joE4 @I[sr!к f-6i_]^_:=[SIzʂ ̎j;ߒ$pUqs] e 6rɪϙru*6PMDϯL% nK) UJt3T y뒟G cSrIC<w b^ڇPxXkq4hkFu"Ď a?^@ۖM~3Jϼr@MFJsMf`0eY %zI
>H :,q>Ҽ3rDmrYPw t|*eɔ/_7ό!adƿ6'=ڼ=1o֘tG@ZT|~FxP EcPT^E،fWbhN2d0(MVObݽy /e=QI,pgDC_;]#91~;Dtzէ%'$8@"}&\}iF:N Q @IM-!6T ۽hȩxHg<
Kޯn(ObVH'tS@AIQQ{ٓYuQ>6a; a@ .ɜwtI!J> k KmOlL k۰ȁ>xu`1#sA4S||DGDP} ߉`w> @e}61qxW p5pi0_bYca]i
н6xH7SzRx2"NRS`P90CSʹ2v[^sx!+-/W=Hrڕ0a̩}ռl i3D2s[5mJDDX͘ ʑxEz;Ěq$2ر]u@gd DҶa kZ2 PQ_k!9$pb 6]-%hL0yOCl<B9z
~hᓄe-g x *L/AP Xȵ$7e
+ݶBk] [ qY ыG> 246+zP@1N^Q5KX@!`0"9B/}Im7C; ZTPy6&*K.c)$ ,QU; Xbn?S_zj[A]^~7I
85 |1~(ۇQ>\Rf_Ɲ ?^\$] ̊GLn.ȥ@} p4!cy* sf
Ip2!!~.0ḱ]2 `zHMYP%#fx8(O%8Ԑ[ H6iuL۶Q=٥q&i͊ +x,[b
J5+)^Jog=gNg hmGMdS ~gQ/Ğ!ugKݤ E{ <xhliա8dQn}y0ʺiMCncmu.mPqӘ:\r?N:_H?5fme8T"3Ҋ;hc=Z_ W@9>ʳoz> x4-yR|a$50M&M;$9@R v?,b(x{ZJ]];if1_Ʌv]_Q %}x~7's"}MVdBifzh`*8>=c;i2M]fԗ-z5nbICp0;Mj{ d
8_z}>QL\i fڐîbTVHp 1L?KfPoFZGa <9%; 7sFFtT主/J&r DV,$A5zQ
_'PBĘ, d;7u=klEQqް
^-
=xu`C+:x `e>"Sc} Q:?[m~4TsHGKG͢_b
?x\4 O]4nEl>O Bwg{,Rb xV XMTcpa[y
rq̟ Y qˣ$ 3v>b0y^ >)$- h eь+!3xʇIkF+Y
aq0V6_ H-&KmҢqUkqY\#u7 ٻ u.$F^s fH7E?j@Wg22f}AK?c,_UÃB% /z#DU1г 3'&|C@88Dfwz:gQɀzB{o5r}7_%f 恮32\c#6F0'xk).,u8?!@*ʤ1`
bvUgR.+.BP1 /?ˠYQ纐lZL 2S w1hj11 i7ly<2oq<* Lu'G#:J=52馇̍N3) jg;CxKSfݖ+i(g|~džkFQSS 槻@ Pa/HxEaVqYueD L` 2$[T휂0
q} ";3k w;9!)A!ʌ )| !c)[ƉuHLFHꬷDB|}dLōpH-Eyv1b1&Y^㍻mfﳳk_:f%CD?1Ʉ>.C7R9S+
cSq
mO >SB # p}M̻X, A?n+ ( # ;+㒪s)Pʳ N!{ !uO7R@jkn)X(4' 1#UWJPc?pHRliOG4rUj<.Wm}[J2>WX SIǰK&`+j G
wH|lʜJlJ6%˩jʹ
sK 5;g\&U VIFs$ny3 -=jt0kͽWXJ 6}H[qukW=oD^4Zߣ"FgȂg7;PՊK-8N V߆5 J鈺k]5c, v `ͨW}91}SZ
I`Q%yC2 '% =Td .q\ugP BcxLcy|gU>SBS%qp-.Bع {gC
N!H[`9*̇Q+hJЕHFyt mo{4Yur* n
Άb;GQ@9OWΉVDjWlY@q1HRKH&6A)WJDgeyAdl΅ ?>Oݩ)_AsĄ XiT6J1L1MΪorAEuddR3w
p !Z:$j$ÿ] D Dw gJOT5je E㋘[u=D`
v^l^s1dR3 J]#؇m@p# yM*\%n|8>
?Y"z9))$k-rQ%8HU|AGc& pU, ω"tIE+ $2Wb1ş
_~)`B6
JDt>]Kkaz6!~ \TY;>x(Dkڊ Uvv$ da' 䵢&W('Oʽ .8!m !0*RJNQHa/?œ&.. 0u+@ 3?ק
RK J3gJx&̞ z
C4J)v]%yWun| -HS ҝŘ}/7r|dZM.$-=dwwgGz Á$%8cGhWp"
Y Tq+T2%OrĀGQ!ZWު +( H&-n] `ゼ:cBn
>~Eo *E-1H7/?? vAׅu(N^ $ Mo9GᬲD$×= &!syPx*S ߛhs$' ͗*r0 @iB-ww' L&,NBB tLCU4
4 {LkD|GbF6Q)X[-=4U( caIL.}y,4%0{d*.=ƐNjkl{
fegfx6TE y- B._ =݄
/,`a
W_I$T%(v:N4gA:Cs5^^v dxXeYM;
R~A9Ʃ`xb4"I6w1?z}){
` D[H @;6.̪
AIy7+mi"rk!W?lc7ZG"CgIe"(XU1'0n^ .Lcc E8+ZL5yW z
&h؛`⦥MF6^ xIWĥ7*p[EQʞ #*m MIwk)KhF &t>
Nֳc^I['PxԊv 9^%Lus#N,C$_.>Eo`4dI[ BݾO.V7s/V ogZD̸) ζY
xTm8\Gfx
X_:0/|&G?ekGPcXl3ЕǤ<~:]%n ^ioMReر! }N !.[t0O\O ,j9 -F&\2:G y'
haGIvRĝϜ&GiWYXEX8*L{@찋jyN
Ai Nyg,YbK^ x 2T/2{mP"}Q.VUY|#aFz)bBEVۛ% uF zb9[B7og]볝sW 9q wL*w6* +V6 F> >}- +OS 9E߷?<ڈPke&]4d5ݞ^Tt5#x Jkr$?JLKZe}w)#zP)}Ku% 22ZTֽn@II3sVad~Rk-tNgt)|>g$JJJR}pZ]&A9Rl0ĂŴ7QXJ@mE|ClpL6 鏪\'DjwN% 'WZ4 x0y}ŖwH(8yZpkKQhU3 `
A6䲢O8}p0`,$1a`}$<[0c.$,o)3Ziv=E48#2QeL^
#WTfI& oHXw]DC]ag<WnPLK[R!M2"LE $S V\-_ꅛ{feXVKdwn
!u 5LݤȽeЎ ]͌I8@62ܺ\r7]~{$
O8`, 1 iIȗsgDdb~P]ҹ ~Dˊ>$ISSbUt+-ç6ql6\T1 .^HQ_&9
ߕr}F`ZK1Rp>6HXKgN̰BbI!Pl,mґJ 8ܟE-w
YZrèZ#0!e+'1imj8=Bڰ*Ȼ 'J3G@_ԏw_#V6(Y 40O70* ѡ PNe{tNdwԙ]Cx9"+"dW<hs2eb'a04KS 9]YAb!G`_bIND8DŽ-'b]%: J b_U,WP2#BYD{L G^5 .%s8]^%bI+ػJf&%XJ(`p yjws{P$[ #Kp=[w@N&폂ns{wmKK_GM8 /F~ ӽBHjM
lAonO1-rwA⼾[B bFwa NqpRmA#Kz`?\wá$Izj8{dLyRQ XXm5/c$~'VeszM |4_H/*=-džCD3>iTGW\p =_$(rgt[enW:Mo ` !b \'FCB%@3vG5zS˲a >Yz?e1A RA.=%B丏Nʏll`MG ^w
}Qݝ#{4Fߑ&7ivAO6 a^Ufsc9=Ӵ?fRe#l3?+3tN+\X9{*T p$ %˼/. p/AX3|MʹZ 7IhB B \# kɠ44thk2|%n,' &6*[&ʕ4o:4kkv/ch}^2,9+aHS!$J.q܇֦e^297Vz4xLqp=X7} bxZG%yVڠ 5<8 2`;벽~w^ޠʂ&-xUK.aꑰỦo@cQꊳк]G/^!ZsniGɇvY3]ۣ U/jE
/sܡd]RFLm!!İ÷4Ոi;du*;n Q`vK'+a?Gֹ !Cugt;5a|pM`iAF
B85Tz.\z_X%Qj'jci Zo/ {"
QY5I~0 'V8˶g b/vN_zd9ra ehEncRg5>0K ώ*WLJ=" )$wy;@QwwDxE3H _~ܞ#3vxt.4E+Odqq]{l|IA'?ԮC&k^< ]T}Ϻ df2Òo ʃ'ʤWpHÞ -Qsp|~mc/W4 =zcnRf0 7=3'!aDGj?Q[ Qm©? qWU, cJ={s3a xv]=שrQ7D$mPk
83E{Z .L">}۷/.ď}8)g|n !D8VaҪoZZ݆ϼ:-?q{iM 7-[ƶ\)mR4y3.`WUme\Y>f< [AoɹÇh j/Cr+ }
bK/;Ro9 جv)^#Vdl+
( I
X"( (A~ҫw}d%T&=8Pשt1~KbeZ7 h'
LGu [ R//t @}Qs#wXF;b !+5q;O@P]k%NW,3~V䑌aAzr/q\ 6l'ބ{;=(U*dq7ܳQtqtH튲k k`Qǚk)' 7;U`(#Hd &ըU-ML9bx2Z* K7ofd#"TߦM@n2q6o@hk u)WT7 <(Fٟr\ #zg|Ů 6OS7㒙Q9m@ZȞN8H[&X'~rw" lLF&4o MYW6Mv¸gOY:59`2q)]_º*'h;O=v5٧ *WSo(/;!ԘW0Zn ʅ&> i4D{AΦ[̋93
R[e vڙNoĞVeʁޣk܉}4\7 /rpxç h`;j;HA73fSCKW~+h'1^AFvHMWI w 0 wsOpwne5ɥ
"Zddٜ#z, EATm!!}?FSdZp *> +BqQII@fU9nLaxĻw Pf*a0+ ͏0gΙ O)R< }L7r.ebT0$-ףg2oʫJ;$X 0ԅI ?)#C^J ;Kֿ](Ra*P 4࢙W \[TWafU鋝)Cl[ZH2 !룕!#;᠌boAEeR?,DV:j.|
OߋX.Ki2%(/s*8em1U]ͻ̏*'g Er>
I,Z] ]P[o$lG<
W#F~Efr\gTWڳ+S>-Du`X0,'k|Y߈,DXyy)m q'sOgUfƃ;
0w8طXZC. 尊0~@!U[,@%DRaI-$Ai.b 9t
e S
JX?0Eyԥj6@Yzedl>u7ڮ73O&GW)9@`ظ:
ՐKmut( 5ZQJzo~؝E3E+(A2OܙX]yrׅ ǀ1m.ʾ EN_$xq.XeqQ<8|ic|*ls. \D:7-C@g Ibau % 7Re3͋5_([ skTޙ#ѠAoLIMY=Psp*кm>l|rqyOH=)_6!% t"c̋!Zcjl*/זNzʆ0AJ:%?pV !HGρ#OAk7% ա Pu)Bqw<`j6E[9xc (-{ *P!ʒ H%Pɞ
5$$Hf#Du$fs¶ B$=$b6H!IykGÿe|Iq`%CodHzCWiz4s`?x 7 43MúP3DA@z[N}W#Q)UPgzPEWdDZ:ȫ9TC[ 5B9&հ'`ۘ:r#q%KÀY9,Tabv=-;lz=/РIN.Imx]X,PUGxi9!>gft W/[hH_4QƎ
CGL}e銥Jɒ; i@1gڋ/)WB>5U|BQ f30(=g
ZBX)2d\ Q
}uwT4n3CE
X~y^y;hېxV<'ߟnBi彫@aRhhq> }6 t}Ue2-\ [$V/L e^ÉO*P"pu# C'f" AXO\N5 Swb(7f:|`«Le:~ҢUN^4w]W#Dl<f_ǫ_ֻmO@}4T-Tgd<ց5;;{QO^5G)*ik89rؿ'Sֱ/a#1L4;[ϊmL( E"i^C]Q#9T+\ݧ(ެ%P,mi')X̙ \y\J*+iB 5<ԃ
LXdbb,L5{=43Bh^I6Lس 8:N9Y&/_:ڳtncJ*MAͱ8u*5OnKz|kL/O @o`շZZ)pm Cp.RxiK,{F4h>qQ27 EKf׆Ti'p7q*egv]q\WKPl˔'^xfv3!ArV؊}M閬SBgeF#Wl 彚*/f0HaFD9(:iIjȥn UщD< x>}Crg/"k,?!Y+P!A>S60=Ю "*C)~^/93e1{_ QtWM.: 6DTk$ŐDD`4u"Sqo6kyc.hFC QLGzx6qB?{; ߷ p6EfganO,Aj@2pϡ =AB$ H"P5/tr9- 9jkc9` K}p\CsyvrISSU^ >
P<>`/Z8bLj- G rO FDH#Iu >d~ /&0>UjB}jx<K2 ЅFMjPFu1RްDKM)>ndnB6}
uݸMDmXe
_XZbqotic(%?='<Efr*6V Ze:]XE8UFё4zHn+9{I Hgۜv35S68M> &;.=èJ B
s0.]_̦e<$Ojӗ ۫
+7m/wNf/΄
Ż1_GfXM@Ł-2^GwcIdG{$ޭmt!)͇mkV |>YOA{FeNև2 #PO %Nn*hћRe m"xxT|A yR]uTG ޗ݃yC6(r`oJc$-m0Wy/]C
hvg WJF$ \--+I ,oA[N]W>P x8ڢњ5* ;闚-dU=szywN?<9NŅd/(SB8yZ\XSAJrez!ɶ7Ŧ-KBtz8eX;pPTg-'2~:>X)v٭ ]6 qf?Z fYZ OQF H_/('q|.Y"vHޖ=qQwb;$cV I;+ l4ry?;ɓENXͫbpϜ9@
6Tl w\Xa M5.mR [2Cy5 [m)5 hFE X a."]&Ǔf1l]Q7bBK}q$@,1h{ < Fgs:
uҋxRnPyLJd7MfBr2KNalx?2ϕM6bDqbgQꧨq_G ;L/Y0(̑Xiuwuo=oA{#y c oqkEɘk`K6Ub< b;Ɵ5GWwc]gBCPRDWEZ #o TB;TN WI qe!oKЮX -\,SoU jYV\h$}r;` :ՉF;bm'mr+Znv &?~(QݻK)8^n v)`A
$v4%lW w/
UɅhƧPx-xp
% 9f *JO4GDJnؘ2ZWm~V[y:r߬GzZ50u 4 i܊2A֍L}
mmgo)zVu淸Ũ:2Q Ta Gޑ=.~qAipoi((0Q:3ȪS5xsAjHZ]|(im(qwjʲ'\X%E6ՇdL2+Ǎrn*?
2 6RVKwQ@/6Rk, S8+ZmXu2ڼ
jv"Egi>/mH |ڒUy\e&h/`!v⮫n$ 6ڝW$N z繡QUj$&JTػqio0;$U81ExCFZ_msv ~ۃCI4Le?3x|Sb ;o9f3щ1}a {ZLqF 3
e ´1q7? jwy5C Z4 d-k{ 6VmfXDgB8GQFnCM-4:_</nU^ #NYƼ.$b
qM䔕sK E8Nf(sbן?pay7txiBPzg)W(fFqM1 ѷyz'1ٍPy(t ae*4~>7F 4VlT6[ICQ v[$yyyuFQ: tC7#}}s0W kX
t܉m٥C3=/o &u(y65E++nVW-).>8JLDڢ=ZgGyWI5AEz3RH{h\z:c\' $^h27ݐe5lhIUPJA I cᘩ"xÁ$O#:s h7l9}B/x0fht Jzl9鸷E#F})_7ooޛ~c6o`_e/Zq}'A~wE<Ƚ
B5:MZbɟ0ֺs1/_Ӛnd1?p.@r;ʹzٗRC3Dm^V,FY49An4Ԭc'B+yD2tvRl)JW0pX+;um jOl⎨ -V+YxKVX_BIkqdMी* 'n0KIR@Ŧ2v8
.:KnjkT6Y>{3v[ h6`K`gP`/nj nCʽzj Xu3&0gq =F*#:
`ߩK#xޛB
ւ3RX /Onٹ=ÐS+Fܚ
W17e7::hS8trm2BG_6rП䱬Pg [Qd p
s&܇0ʛN|: xnk _7VgvW8A.x+tt g_uJÏnUt1 &Z5_\ ؚ\26 Ƶ͋[&W@W~{qAU:8+)Z|tʁbi_p:B%rZ+=Œ$Ϲ%">BQ$=Hr/)˃Ғ5ax1p Fꏨ
q\|_oP$,)]duiGt9v5'Mm4e> o$0(5Hh# YəVۻ':
Sm4jsm3.V9ze0{6_ <괿ˢ!&sk}_Q' |v<& >4>݊pr [ AdW3u!\BCIz 2ͱMǺ}ޭ8 y 5]jT7*K 'Q)Ig}#@0@ N@xCحŁdmΙb0qOWl6uHZδrht[uעYU}%Z *ͽcAEanە<,8A>]x9gF/j Cjs7$> cRzkYգYjd;M/H3v9U.#%}Ua^'qŞ'lSK54 u&aUvQZЩJZ=xt -Z)> 1 Ph%MEE]t W<.Ȭ
ץeӀW&t۷ I<`G髫#,o=W>8a F Pa&e iΈn{~'2 ^dq?NG|ٙ>!+d\FRUl9=?dIp73suK2jJ=$ZfS߮߇ׁ1@M
K
v2# s> xs:O\9UPZ[d:Gv~4
cFQj(<7Ȭym ű BEho YxyRo h? W:Ώ0 ׄun\L
^2 K~(%V!]h.
~܉GWTGF SKwܹInLŘK!gѲB+* RnWV0wI Ԗv3w<# i7IEtE@,1ϗf 1EdXN*'d ni#'R
89O`Pr6F~e=G'?W . ϋE T w{r3I?9s"Mq&Қh~ Ah4eVľFi _BdJB7Uq
+q5cͪ ծVJU5JySV] x(Z"#d㕺0$= w?ۻ{'g ɯ?,kdGt~%IwtB^x
-
7*+AuU7A/Ib0e~;ʟyhkX|M|W{{Z-[ }"3 3vۤ ypbNp3MJu%槡h7܌;n1$Ȇm U vEz h'98̶~\n
/( 㲩 I Ʋ
rz'ME3(CbMkE^-Ni2bz+`-
KqYMuILs:
\:O&w =kb,U
n %Tk&\,M^S/pC~r-$wgj/ƾ4Ҕe1Aڌ|Kf?̫{eC4{,bS_濠 {m 0ٙ)0) E k (xȔaX0GjIx- #,вkpI0gDPOL\f >3R -/H1!ih,-B NN8?^TLYDgxKO2J%/mJ;MaNN-ZN^5IypCyafˣYOj.LUץ(IE '. *~jwSƯ
Lh=ӌ߁]B.ƭ|ZZ@ZE+#9kPWQQX\x {@?V
]o
h407 ;|,M/ [22fB5TUbIj&ըt/ |Y7qeBA9ed
[h1 \vAc(%d@7iMl
tkJ=jM.#Z>x[/YY E~eOc,kXV'G#~Ȥ} B`~G{Ćcxj ԯZتTCtĈnj tϨ(i7kBiƀ-r^o$Җ﨔2j|SW d}*`}(ؒiϬ<NRX%!3Vpa 3W%+Q?Oz=Ny 8 uuv46 #ZӽH FB[ԳhMo>!ˮtˆ['V<8Ş U&=Y*ٜX#RڵVjEjЪ %_PwnJSYӜX6
x:ٝX T*rz 7yj0+_i.QWH'cJVo*ΕS5e:`6T VhD5EK" w
ePPJ)`
NOq}}
`!pm qLSkR?^'Z]d6A=ׇ0b#|eRo}'lrP?,XVi 9]Tf*f h*3 l]LDٽJa,\ ?`h-^og )_4d,mC)(ZyE3`Ȫ,ƵKpGc* cnVWP J+g(aM6˪C7 >X7UhHd }|"}TLĈgIEGyL5lsf?*c:ςUv5[z?ȗ{cUӗ5MJ7 QTݩ"OMz%cM}5;a|3l|LY{bS!3P7#|;_D%_Af 9;C _ҖET4Oީ@0Q>т ,var_Jֻo '-Rj_t3 0/M^%8K\k9 t9 1=f>sp'66eZGݳXՍ\|9g*S
\pc=9v`liZv8
N^vzH4/{x92}0 0IJ3b"]GWi ^R މ:Oba\F>
k$G=-<u'ݧɏOU Z(|Km6-GB2HǛYmO*5: ^^?rpG Pz -[<,'pUEP˅]iKrӮTn㳼Mʼ|_b<ߣH7i # v}y;>7˺=촼 7
FR;2aHt*66s}Aw讽 @ `vxЮ$Ҽ]
kd[ o@MxaBؿpy/}F,:},ngP,
n=omu~ç0DIWuBJ
& ~<),c_;HXcǤ] ùk
a;!_ueHJ]W]c3|pk[g#倚VKP>P`3wb0|zt T[}gO(R :ohጶPu"D6 >J/|f8mt׳
ED~I98ld왷 3\* Bq3HF0K̅q ē 8vϕ٭"},S- x oTs|b+Y Z7"J(=2u+lrX&_m:=.֝9J|* FF>hfbĹWv&@P55vzd %_A%h.e,!zikxo Gd I
l aR`z< ޝ*JHa)8??L!UNwj#{aWlשF
0a5-6іC<
Ry ^6>Udtɔ,'{vT_Oa55ם:_.@874pegDF93̠fN}$Oص'Q]iioKkģnȥǁM&y NU0 ]Ƽ SћچJ bGGZhɜ0`&9LBC={i7Υpn`%P˳J]py%3Q?zpn+P&gqH53./}*WSۖZD|ea3 'ղIIc.cJ!/
A,l7Mp\w{wٽ;.ᒟB
Ӿ7j{J
Oy\?֫&UB]Y$\EwOBڞ M\Wʨƒ\?"U?}%m(/@-2Z"f9
ޖg%kFď4j mX[8+zVߊW6I"<ȥ͆) ڪE;Ҕe ՙMwM<䋔6Hj_8,:x~``w6mNI<M^68/Uw'VkW]_4v*>~:S^9U/rK*M6 )k[Ցc:_>g8)\<5 : ;e(jBըnpo % 7R4 yrGUDъR}'ckOAd[>QcaW&KXȿ\-@vB ?ZY1PSۭ@=S~35d7 R)L W<.uĞS:#LK-x}l z\YoȤocV B`t!$d]Ȝ_Vv W&ҩHMeQAu"l
_O8jQP}kK`6^<> -ԡ5+U
w&B;| .
.ݓZkEu:=C#Z Tyd*[r'.W5+Ebcs]v>_( nTC 4T.%G+n'Ƞ&_;"LV⑃'blG ;4]ku. ߢ5[(gaL@V
ֲu3qi\ґ[w.p(a}BކWV8apՒr_ߩPfܕ0x9E)o =8 _V@o=Cxq\lIJPz iKAuq*uHC R-%[j,9 \3Y~Na>×k6XK|
IwIom)vUlsS WWQƆ /xٵFw.@$dLJgLA3ɶUW"ҺMU&!@,Bф߈$=r
XP.d$؈ IWL*Q(ԋ+
0>՞&up~¡/Ԗ~ؼ1OV* 2~|ŝpր4\,~ C&zK?L7
qf@U8 =D PQ&j ?Vճxw:=oMj`@o[UŕsJTe044.`G-qkcjmo-%Scc 4؈ $skWjNȟ=' qv(b"* :B]t@` W-`~tތ!F*PqR(8l ͍A?1]*X1O2
>6
G
zv!<%6!'bN~`*J6+Uێ+Z 9aJpNQxZ#|{,rjɶ
uUIf B1÷4e?Xwu 犞K! idM.vZybc < `~1`5Ք٠,h M!pU. Y_`θl'o(I E ^`dr2vgq)H|{)P#Gپ"G4gH쪶Jӳ2%|ж n9/Q. ^ɚҠb:̷j垅oj
Wڒ=s`瀨Pq^|id\8`C3g Tu#Uʃ1>Z ?q~fQRI
w@ E҇mbf]#6ۮ]\deKzD ,|Q Ix D8jlm W4Ŷ B6{+B Ĭc Cf{ǙZyR|/6{=UYu "*w E};In7 5Č7t t0Ew)h'5n4?r]
Lw~nf8qeS;
b''!N廎 \NQƗՎ't ,y+s%XЄ -o?[^ H:
^a+DvA ]}=A@h4PA>ykL1%!hW KyP4W_b t aeKݧH@ /5cݪsOdz=+Z3E~VRk.*w s60ٓ# b1SWWp/ĬY(;fʩ0/>i@} ܿ.Î;O 'f ' N
->ԲzF 3 Vߗ@ +a#wZR,ȗSc}
5
*ͼmU!@ĚՈo1a}QʑcUG &D&^d
|/[8'rxGgi)Cѩe:Hy1"K?3SBnKPԯij?\ "
WLA2ސ)lCÀ1҅hzMDn]hA% \3U ';CF[E{ΌjyxjooL*;8m[-l孱T;*L h痉Q7͂9d;J<%mw~ AV0
jiйN L sH).~%ȹMw9fs+ l ռ\ч$
Ù-N L:fN "0~-Zo :wPn չ㟺! {S$f sd,l:uPb9%cea:jݺHm&rZxvL]p$P&ȃB\_pM{wŞq\gə53I[dm=yx7zZ7 Z a jWu!o_~ljn |v"O繐%@ _ASI :îU
ANp8AهWY
0on7h@Zwh_,AE&P/NO6gq0i)F'X _JW;().|s蒘p J%}i5DbٍBz:`#g^迄v^ޅiR3dYVIOV/ >
~kd"]d467;?#$m}ili}74>s"n]zZ~h];?#)TvEvXZܿd]P/tR_]?Jt/h^uT|Й%)
;FyLΪž%1n JU t M'<Ɏ2I]sm@ayaxn|}cNXh*207:yOr 2wI 3@]:LUN8V7{Rus<ؑ21;%[KaTxtɎSϐl0q6)2p=Bw-In8SAm#Xpq^YISw ,oEb9,mR/l_xm"
ø~<
\&.,+B-8 r θJ$;;)<夳~*N#i!7zֺ%O/ǹPvR AԼ3O*DoSLZeFRʜO'
HDKGߪ^H0 ~jbQm3 Mx}gU E迣IuKNz>`Ê}'ה'Emk >aro$Sݠ [[ ? jx.dg$ ;q0 E 3)tZ5!;94!o)!` FV\OF F,ZWjzqM)qbAַn 0ރ4IKCZ^ n}@utgO
Y"% /HZ$C#.so,.pnɴt&R
="O߷b:ӳ"do!?9G"_C^mjwDM|QVjևVhKG76;Gl{+^ M ̗Q -M09_
ͅ .uFШY$۞GJm&]e 5ҺFxXE]9Xx*8{'xNY7+ymێVDsi$<|W>J*+
0\ tdJX)3tt-k% ͘Ts(@ds<Ƕ$+y/z(Vkʓٯ^i2ŸuSwDͿqy {oNƥ1]qj1![[KfVTɯb{ql⛁sp.]E`q
tow~P"Oσ^܀VM4W.~Q{: hmR wDnZWU47tC" .
w AڎZȱ5"ľbQ |M=HO3aCքpH
:6uNe]tXu{wLl"ة}vXL>*u rX1{*@.1 2 a̐ a
Y>Yxرf ,V`;øYQ
@ZU$Rh ŨEo@r<_5pz!8jMv$3e|(*W.2m V=g[pY0S8Lc FECfK;O NA-
v+Ԗ^N$-D<*Pj#}:P>F?Uoyvr 3&5iB
25u !lѩzb`G%b~RsJc=T3pJ-\)TH=DʼnE8C;{ޣ Z!b *{|wDUx|KFỏ BðZP[/vdr9XPtu Hu +0P^R×wY"
n& 뢻xKyt[N,A*{CZ"jOeBG2~t6Z
=`]>RMC
Mޣ4L,h|QI&+T- 6u&!2Ņ,S.]o5ՇVM^kGVTb.P A,`dC쇸,V!e4Nޡɭb _FGFUVŞը
,]- C{8,xG{C؆JtT/)
O9Is @Xw\ H<7W伮(ZAwrɝP^"bt7OiqaH[}a_k:P
n1G
G˭1DHɜQڔm[& 7:m;u u h0ZGނQX @vz$QB x̗HY#ua]I4^ 5T is8 ʝI62LȊ? 0bFs3VGX4l.IqT0ԍv:͏h#Cq0BuUp" [ڛ(?
IM2 o55NNTJ=fheŁ; 8{eLf/YAǕMAr`;2mi<XmkxqX!C%L#2[ ~I8
Lʔ`e$oc3ж=!rn7DuA7v%x'Լ0/dž
bMW3od }[|0|hspy,6Kwc.֍͖L6GGռl.غ{^oU;E3+LĘ4\L:}،jd`1,w|Bp_ HoO
/?=%xN]3 <,|ei?DT=gp}Sh t]ΰpɭ:ePOXz0z8=DF,I!{" 5j*?~Z5aB"Rs2F$J#P3c nhs ӾqRԯ-Pn쵄I{j tfar% Ƞ>: X˟ip fYts;U=Ξzt9 QV2H 4qJ*/{~\W:sQޮ [$ v%xޯ?VeΑri@72q wu
m'@.ۅ`\iY<}sRv,{-b@s*h
HyygmOh8L6W:Pw{_q^kL R<~n*u"QΑk71#ӯqܗz. 1sǼ CD\
䚧 /,^+F|+T7_bЪTPDW81,tR ~s_CU)uӌ"t2,=89c@!\]g2v P8 D.lF_K!dlWD}+Q--pW[涶L,*vzVB26½Z:6&ߔ}2a
R"c+60+YJfW˸αF{ _
F=? h67, (e4 )FE 7xeGZXvבȮXԀ>:\7YܫA]wo;D/^} lrz3//rѡrGn2HFf/aG%Tis{ 3 ')Ocͧ++[gƴ2?^!ΰ!as)L,ps &k pf*LL"Lݷdtri"5`rۿnն(b6QJT?djgq+G7AW;8yhdTW-|YN1{|o3^M8| sZ)\ft/(S$o \avڿ8wD 'cU+f Z8 ;'La{AK]F9ڙUA .1gF]2.n`K>1;;'"\<` 6zS$
|r2
,⑯oԛS y0A2$XsےiwDTTs04j@==, | -;AG8{~Xf}u7.ؔi3v%WqM#W _nH:2F P:W3y (oRQy
q-I:Ӽҍx'* | ʊSx!Zp~L:?*UX+ $ '3U>I ߣK lhQ>)t)`{jÂgvXEm -frtT Qϫсirh
D0j
kM%i^k|=%X qf2V] R6dbj `zZGoqC2||?F
uD7<eumUw`{z})¤j *$,G-~OsN) tڜyl,qoU{{L^voE89檻 O3p%יePp +Lj^y'vAn^{ ?6ө ñp+g#&_g/|fuvV2xS Acd{KVSI`"?I\OY²Y}<"FZPvNLR_]˷O -d2
^.apU)!
PcROL#m@QX"6R^EMX&`
.gipEa_cL3헀 叒2BL1+dҹ@fy2Ö !6)ͽVzٖ,hHAtN
֪j<;.c|%ɟK&e=i-@rIGOc0Y|""S/<3Fhn$,:fjܖ$s2R n_+U.Ji:$!y`ZV L1uSdCeudg5Ape;Fhn |&Q KD=*}J'"TgQ~^̆T8XP[ ,>o)fXK"yQ if
GUV9/q8R N}I}`C 0:UNY6CMIm_+
B#G#ڍ(|Sj.D*L18cdQoG9E}fCt ǣz%Wk%wiӏr_i>?/H H!O<_.9l.y4Z-Ha Bh~&X .̆gUly/")
aYRq=O*DGH7MoC-lyڵB
$X6.5x`'s} Tlv)Vt#깶2iRh I8%&FzC_vZBb_fE
DtA "pߟԽnjđk± "Rs# \9Z\
0MkyU +ݭ15kd47$[z
lO7
-|nO.鷻%KRѡB{sLR/ܯJ/:tJɟ0~`
Zo[ClJl S{E:=v b}"[\cQFUbUSe{ {[w:1#IBj^Ь~
KfRn -AY̶ͺU$!..4:sL:WFer[JAi&H,H=Kf&mh}L?1&4`#*QA~Sf
MB`4Amjn= +ͳּ"_s%%N`a3$b '3%`:Q Ѷ# w&8 aW+5),+fN A=ą+?~lqC7'sVo
? c5 !_wFY~HY$T'^yGXm"Qb $"ׂZgs+y70I"\[*4P%6A @wL ~B(ksV1x 1L 5קn8 K#q3f ? )-~p yFaw*D]
("} y2CפJѧ ;}a栒J*yU/( jf>)j<=3[2nqC::OKZO0MǨ1eQq}9{˦5>(?-jƜCvmAVD7LxJL#֢ dikb G_{t4)!Օ'+Zcm&71/9ܐIZ{z\1? D > pT?C3|[1+us9 JnywOde;{6 ̃Fk uo9D"L - L:+ThOH c o,?vI{3wMr )b n$n%eun'nVEsqJUR Ng2P4EiJ}5c #j,5jj q Sœ龞kÍi]'w,_dlUcS`jF *_ WءH#T
U֗ZwHI?)-Qf&n>WV ʥ3ƣ;G1~P0/*`ժdBho6fa Z)?#U- li٭|{[ 4i448"SVP&r Ns#CQ~L%<
L>eT/6AFz/UQ̹J1(ci}|M^=rJ%(ľ_n" fIpY~ ,'FDa1ơt˜Ys;qMŶAYxm' /{t Jp-sNKUo7 ULEm·]'\ 0Pf( r $CҹN}ᩖt2|gz
#7Z_
0>52]fWRj&,'Eۉ[y~Ueh{ąPz׀ &}z_TLY*# Z'rKpWMhQƭ[?\'10"YioJig; Y
(Gr Y4+x,MhBN1a ,3(#$ǠFQ 7W+? F>GǥX6X {b°kNgk-id A )f m :(d eF3!+A
b ?l>!ZTpPt1&ܠk>EG Аr3
$'5#&=/w{ nӴ/ []VYٳN?6HI>ьn$Hܥpd`f#[n%g07npxÓ:S/kp8߆4K'CV$"Mu/m-?M=E@Dƿ=tfVBO' Mf@ gl$ kORõ;&h*D 6kXK'dJƑc3hYR£4&#ݢo|;up7o=E4oCY#fĄI@ *N"RB %TҦ">.f=M[ CK]z]Xr-zA,)4* Ď')%ڗ.
P_dl{W}
4:C#'iKƑo&}*(To!ma:͟eֽ(됳br^k[t,ݒߢko/NzI7aDri]Xǡ*'S4g< CBcPE~wJ{vࢠ0 ȼk;I cBy+%]Zz>7ﭩMQ997yOVʡlBh`Iێa^Hxlfc.Sw7OWO'#γ$ xs4qVƙ>,r)tOVI gNs-lt9(0 K I1 Q~ZnG{(bd{zT#HQL
2 6bI3c'MD9"_*|ݯAM*x*k
.^1|m pr] $8?\-A[&/NOHY0K w%FaNh=9}n@/,Kg+KÓ)u)
EAPuT =ϻ5")nԞ ["F3 3;8 t¬`QG4TA6p4kN}}qLՐCA*'=2^ꬍu%5scE6h x\H X'I&s%.&m/ w9H?ݢօ̝J}- |KB1&?(%XnJX'搚]A/*PP#?Dk B0mx3~,&O ݛ@|7-'wИݍ»N
hCx?UT|pGӛи-{q{ݱ? WǔlinaedOs&D hZh?}gJލ @PvL#F)&H 3}*$`9v(HUfO 53hq>b#=fV+]zv,+64j.1Uac$gr7
.Uşk18b́x-E
´O +:Hv{i>G l4$Ͽ; _='`۳EBus\\gN6ru@?mL / mUT1
= $k|Z -AauRϓv 0 =¬AS, =%a܆CҚ3Íʭleh~mS;:oid+w, 9@XX :}1r 0@ $ZzH=]ZiiiB75J[\!˩oAɖkNs̛ FFyRrffys%/qNT+E>̓l "#<M:y$>ēUjٲJAf3Ǫ ڣĔ6 ޕ1r]oV ؔwwR$ Vo;~GV)'֝$Qhr8R9|S!r~(иz𘨦:j`L\ OM
"L ᖈ8
ՖQC39
u^je/ I=BravwornGz5 s[{;Z8L&4ކ\W!2#g֠Riƒ
J)kX@ɇi*6^1bؕťtDس;bmBNbZ; 2t&3͔|C%Aê'rtpsWNB} @?D)#ĀWDLcR%w0.1 oT2 dLH8EXj፝ ni{\Z@eὗ.]QT
owuto įB 5n۶%'cDfU]#V fȑ2y*֫x n&I bseL5V !䆦1aBX9˵n9|E58F7KhL]h;4ܾՏbEtdz Z(#8;xtvpᬐijh) {{>-m̻JJ|>@/[4E!塖O o
Z]o OȒ\o
I 8~6{TWdPG6;L6ٯM)R^?!k>/Jv_I>Mõ}
Iqwp2?pI&֖3ίJMKEZJ~s Bl|1 9$yy p \PC/hMl 5bG ˓@E*rm"D@ ҭ!h" H@][H :~utpz{LGc1 NW;M 3eC½ko N1 ^1Cߢ>tT
`Y?n u<_Yˑzv
+[vey pn kCآR]Y a}mZ L=+ K]|Eh& Y.r*PTrA\W$04 %{G 8B`bʁ)sz[I> )2~ J]Uԓ%-;NF W"ddU^ Y e%Z9lBPkx["ҠAF[%Րn1nJ8, ]GFuZ;L2QLNm
)J[%o{/v5PH]dR}N=t1 \1>QtbTqU\]2Ch2pp}
"ê7C
^S1&Ze"N_~[_bCI=z߸[X7
>FcmwVRFK<mez@k/[~U 9 9Όi*8P>8
l1:XQ,k}GNu}73֬hVֶXL-AcpSb Q< bKu^zj K/ )>=ztP$kL!\14DzSeюYrvkO)JH<G+OfDZ6FEb j}=M/SS=Pt( B><'!XUxigKBvl<,ԴzVMM
O1{ m*0:}/[tLR0
|!g8D.VZ~ȭ t!ʾZt́V ioMA-1Z&[?C}IsR%bMhA ?`݉)$cVh=9MX(ݤXKsMCxDI;}
Yxl 6U$u4÷j{ sťrS* 4h.=sםv{KճE5f*
r1LQCjGأt[խG:ЕN؋,>2ɰ
DkIf+|߮j&- evҺ!nlh`JU\s')X s*籰-"
yi"7rjِ; 0|D~U2XeaEU; pVfb[9T 9iЪכx ۞d7X
%;Ncep8yKKBMˎzqBnNLl:ª8S9YvZT*_aSG hFBr$85ݦ#
+ ,KL4XFRxd'f&2YK{Gݡʛxj%\ضy/? M̄68GY9XUدOn=k>g ̧n=
)և laƥ=`}7 {]eC<=:0Ta-Qww Zԟ]H}S_Z(h G,5nj ,G@ K؊ _~;]ϖݚBf̧S\Tx m oy[A+M2gmsRpO.
HQ_ޘo
AfM̨H:V&eqXW 8 )< L>#rH E,}⾅
=^7b 3
ڼr! $R`G P0zF8T3N29V"!
#:g*$#]3jLW)D CEѸcV3-Ǘ~*7FNv?bҵ2 _
YZ