apparmor-docs-3.1.7-150600.5.12.2 < > , Љ iYp9|5rVH3Cܗυvh_٘r5dS{}BF~55 Bu!eR*+xOH8^UؙX0_v[B?,MLK g;
Dyr-GSi(n \q>yԣU@rk l:{XwM }[ ҂b#]Ien$F-HL*y*![jug
PT˨6z/>64gF.SugS` > ; X ? H d $ C 5 I h n x
G
T @ P ` ( 8 9 p : F G , H X I X Y \ ] ^ b c d e f l u 4 v ` z D C apparmor-docs 3.1.7 150600.5.12.2 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. iYh03-ch2b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e 0- K I v ʷA큤A큤 iiiWeWeWeheWi{eWeWeW e18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a420 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d be26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb0 65b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c66922400 1e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.1.7-150600.5.12.2.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@d dtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h03-ch2b 1774261849
3.1.7-150600.5.12.2 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:43338/SUSE_SLE-15-SP6_Update/dafced5dc34c05635c1b35e59c000446-apparmor.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text by
+ o). utf-8 30dee7a733660d6db4b9e329cc847c3b50f204e38a732c80ef175e50750cb722 ? P 7zXZ
! t/$] "k%nCQZuǡjע4dGb`
G4YN"ۈA')%Et=C#CKtc5f,ƕ^Eȵ`E-%
m
vd{L{8% ^OeƋ̩ڊȶ `S =, l(""xMn_ojXo;O3xJDP%9Y
zz3}G PgEʼ?FEuTTJ#Awb<فq0%ePAWK}[*T)=u'r?ZA؋ǏuD\S*`v\#:[Fx9.YQ @v),_pMȫ3u`fEڍNz Dp{f*[ɗ'ҒŕuT-{<h{Sv-7Lӽ=+sIRq~y~E3{$lk
:iXFZ?gUtԈƐЫdBc[~'(E]3 }+訯Plm$g
!Dr jP^q㜯<|Zh 21] Ɓp U/^T,Ջ{B6-BO;z΅;zA/X$¾5%kzbw<mL\Pc {5dzn3mS, Ke٣G#Jpyc{5mG?R*W>.g/l!ZXfrrBv"iK1̊뜂l ½*Ӑxn8e fr:sh]GKvj]X&kT
ɄƟۧ;l~oBVh2 /!X|6gGb+) :n C8C^iui r*&G1v/ae
z$I t̥L@}NRjc8_'^2ZPWTi m*Sb-D >N x
2TbVޮG~)=/Kcz!1`0z'pg> FSB,%}v WIs?XwN
;7\G
椘 iV*>D'HuBVo4nxeDX 4]kH"]O2K'O<]%m5X<[/lg%+ H.%KL$V}6/|P'ؗ&3u) '%6qL5QB%
Frbk RRi}cAjVlxk.
h |iKX^fƊ/Nu
ou)ՔmD]^j ] ߷~<k`n88QT^b
'ɰ3[w
eTOZGE6ˡsЈX8PhzON^q3ƴh9SڅXWg c?
CZ+O`po d#
hs:yO6_ڛ}~Yn(&LJ-=eM11'up KAΐ' ]^o[\\FƇvlX0 960Gh10mu$v(`V!1E*TPP#M+lTZJMZl}R})OqzܳP !]&+'<*$ YS`[2#" t.ȧ }ekk6@bGںGS@<ʋ!* +z<
fG"UgW, -\{h_9%]ƕ+I, Gib" \FhfLtuTKwϾNeS,TGTn0Q 34/jj> uQBw84*kNr:Z.ʛ;b%[
{cv R ("F_6ɰ^ވHAw2{3+i<7Px (HnKܮ5×U-YW#f<Vb!nXqrV+c:qf- L5r
E1%n30m
9^n4 ײ^P(8/q|s%֑۫]FrQ#GJ4+TY]?N:F"2
x# Z@k5'*Bs`Vkޖ]R0t .TԈcX!_/5G纱&[d?Cl+ qKn Zgiv.&
nl%uNq3 C++ % dJ&$XmDxMT0Mi
ɓďӝ!| =YU7:=EpDbP7.Ot(ei^dtAo
vmK;~(<{G% ?\ST>}OK
X~P--F^Rn@S(slTб:cU"dp.CS2!ʼn%2H^Gh}8d8rZ^8)ıuwJ఼Vި+gQšQx%
9B SK>"fKreƞ`SlSa9$sfBitӶ eaz[]jmċ/|SJOj[/)װ9ZCG
&bU0{ 3F˲/ƶn쭽EyjcGʈxnNԐfT7~81c\+3he:s
biMD'
n$|KN +Q羺3OIMAe(}Z'+i/wyד8 K~4-I%&_.7Ec1ˢ{^> -_~IQ:F4~S 7Jmۅ *w8 /|# y2I3Ԏf;/R#0dpA(7:T|0 x1ڥ7xn{u^8X<
A -!:
i?I,:>ro mJ\;A Z^^U䨺`b7 \O 5 4{wrZD ֑e*d|Hv2a.&s(}*p 9eCg5 vGU> FtS^=V. ﺚ= >1 bɴp7uhWKoP%P] oH-4L2팈+;z}^wߥ
}csI@8+حiOªsň/Tw C2= dp iyEQN ZUO@LD+dfgw/y
?}
'BZDGYS 9F oO\Yި%2. QyD}bwsq_+b&C0S,?P vEOz~m /
c)V( ˦ Qe[TD=N&Oкzp'\-dO}&~uD6tmx)3L8,
aPlƹ N_PbsUz"
KFMLM[TVӱkJl]6<~UjNWPD~
,|FKD$nTTZ
Zv@yMK Sـت N<ڏ ~O/5ȖNID[o+/j7.Q9 GeH1~VE%RcW p,FAQL$5A R #e} j(+ᤌ*!@y r:J%o
ƚ1}.Ћ%[-N" "r
,鿒q/D#-=z 3ʊ?7yKAWM2.6yx/@wwDH&Rݟn{r8k䘒dxC5T6{aBHyiVqݐ.[ pz 0z@H3ιQ#bcT@" @VSy(8 CvF֩o'ɄRV`,jSc r?rʍortE~J e'DԡR(Ɠ* {2]Y!0vLW,l@5aŌl$2[{{ڲ NSް9LsH' I R~
:Lc|%gNobwVJ='':Hy:c䲎kڹlKKiZ pt d>/uMfͲ`=^sY"b%Zdž݅O4I@ n}pMZns|n_Tu
Eq^UCgT 2PӍ LWpC
˳2_wҝirv,)+# U? & iI76&j?H|L
iZϡmfp eZp Hb6K
~;tJ:1Y?ܡ9q5na:sJ:Ar0zAr q<=*^}l.Og*Oz\V e q҄Nx8R:/z$
/%OHYa'/]zIPԱM
\jZx B^,Qv+G&.q:THPe2(34>npf%p
c! xH~-L3z )":lrA: +/.}Fz<"Z$!rIUi1, ٪;'x كA $ UH蒂uoy<ϻ0:γխ=j!F)Ebϭna9==^z}דC mIn]-~S@ҍBϞ@H%8y'6#kdu( .
h|_/۽nׯQ5\lýAZ>GF
IA `Yy;ĪqZff)ԖQ3&MU bNv _N f.lP% T.i D:8jX'l?j0"gb( u5^hXJAjsjp3O7n{ {3ۤM"YRy zLXe'UA@+ 4E(*(^,+3ӕۃSvi(X, 9V]D7'Pu R ke+_={ 3r|D%Vs_;_z =xlB"/}f%͞UO0V8r+A!6=7H:l
-U*Di@8sFF6
e +э G'vf?a֜84`ݿM90&tZ19}>s4
IH(ċa]~AT҉*( ,6bZ:V* lְF.&9 ~h F뮖F5ņ9:CmɁPyʒ ǍV("% Kz('sCӃ>Lkf'!uU$CaBrC:4 bN!6^:PjLZɂYh__iA!bwHOIX~mۀQyFӻUKs#6S9א0x CﶻZ8h'ߋwiT)qT7 < !8e/U+VT2PRSOzBI ۾۲~}T:<*!uΠR|dkMjzeu0=e {ܷin ӵa
Q:;"h0_
.dF!9Đi dh9,L:QBG2a< TN=Q} Lu0LWVVKr(]M.XSh/x#<@N5pvQ$rAF>T)괅 ?cD`O@0Օv: 'W݂sWjM̋lH~w f_g ~Ӿ9&ز_4D$j])Ydit+= ;:@R-,[NζxKt=͎,{uO 5yhN'Ex#YuɛaxZ%Q=a(ex)][/5 #ßɔXP7>w-CQ ` E?gU.M2oVOlN}eBcmOCxYL
*E^KUWctESQdIxw^F-kC n}8Lۂ Օ 49@ލX(Ke}RϭWu-!X$/͙ ;M+ceQqAaXEgFU{Bl[$TrQD9r c4|ZZ}U=y(zp[
+n uG {ϑN\ߡjF-KB\wB&_ Yo SL{/zlN9jW~0;,[% AջYFE gaӐ|Ow@
P/F>.Kt:H
-= mWZ_V#Vc d6OZ[ wշʍ3qgן PWeci71,lZB`[t f8d9PPZ]g_ڶ=X3qw;-{O㣋e
5$P꧞Z>bLfMD(?!R{
~\A$
h~<xq()'7QBP_}=+8Bj'{ Ű ̱^lM,jpWB2"rENi"N͍ZΡv GK3u1/06 ݡ; T#`LݤAYV ؘ39*/) k=o|KHn,L-{UҚ^^]OlKRBxpgRnk=ayW #ڣ<rhgW]?N뛵HEۓEײXi_Yy!0S/U, oP% lU9U_@Yzy{dDF=>!章@I7x}![} $c0 v)8I ~ o%yDnc7AWzq ?'
gUy69V&#L
U6f.s?Z M[`iպ2q` 2rK9<HH&2ǡǤql_!rt; i:40GQT'd ʷ6%sB ۬zlHya0Hds
Ma6O92e1yD[S
y@pl ,owtl];yT숿
r:3q/XPe(o\Dk}:Xq{> Cd
~z7Ldm:\\ܨGXV2Qr ,>0)'F|iK4͡} PD61Qu:}NGdlNoP} fS|s뛷- p%0$l G1ÕkӽUb L&MbI|{;t"d~B䚒0Yƙ ,ĉ >DFwΰGhj #wͪAH_Kr n:&o1ރ_SWoPq@ceA}j~(p4ȱvz߸mi5hdI&ɿX~?߃+(U`$@hr וMBNNRczZͶ_b7iqU9#l)cOp,= }|mc 4g,/#@M\Ta!+#AɘW 6$%_ܞz,&J>u-|"%M6WX $3Aa#9T30<ٶnVK_d:bA6=|: 0b5&!DlůlFJnoTX,h߫dhC(0b BFd鎾u+ B&&r'0~udNr/gAJKDCy`scy^[ujL3ScV/IT*W$9o8v͌%-AiUXkk?2jd[/o`%c~'WI&#q,ª\LNn`rPs >gVUtXԯ'f90lW/Q4qW7mC!Y. }`舖&.|s>/)(|j
̼.Ҟf
/ :64s-g[mCm*fѿp1 5= ZZ de+l5=&١8e# O+(G\bn hI =-J/&N }b @]-7`mB~2rb;4<ΔkxZwiN?gوҮ {2=~XJJ'xfKkgl{an4xry1}Hά2R4uI1BKpcw9c @ӛb}B=w[̟Jԡ'lJwJ9:.!H97[",n7" shJ[]P e =b 4q:s Gx-4n/'f;AR@"wY-f `~.)-
? ? O=^,NF`rL;HWE}iwU}@5(}+.
\]s{UŶD=7>a1L\< yPM}E?h0
@MZxS$u]&S;[ N^ܛ,[mgGg7
;sc.yrڷ8~`5_aOChxIǚ%ayy#h^K PUMA,M/G8P[eeޯD ?PgXJhb xQRauHϨhTsWهDduY J衛knS@E꯭j8 Jz|?Ss
{ |Za[ ?Zfugw? )Ģ~@H&EGa6S
b+6D1ɃGʸ*>').b8x[8!SD萃c%soRz%4axCaw!1N/5飣&-7'D*9
C35Ģ#Yxڰ+rݧ梁r)%C\el` gݸܝkO$NGjթ
4_v߭g/("hك-jYs}ܫ[먗1ƍn3ZK T"[~.3Ż07 &fu!MX%֢lI J#)vsp\}T
7ǻ> '7/yُ#i/(
(]ZdƝp~ $Y$Y]?GI*,H c*9|جs~ 5H/7`RB48+O~zpݽ' B2A%$:br*k0"W $(?[%t) / /Oefnѥt=T;h ,_q[| QQ~CHضiHhu8 gs
hhHK[hov(ۺof.
a_yoz؍IQ%,$>!鷭)Ticok"3=Ϧ#0 j$Ցtm.qws(LDr
Uiڀ>R:ZH
Ɔ{I6[d tl$/(] a ܴ:
`O Ur $ܚvrvva Lvo~'C*V_XBjLM ZhLꦏaG^^/`_R' upA&ɂQ]_G9X8ng l)dXLlw v\tWlpQMTx*{M1N w}\8-%*D(^#&rA3EGŞ"G[9sWq7 ,i~GvFdpPw+u~ B.R (Qq >k>K={#OdCg{Hop^/1g"@YN8P+jO'ꤰ0<`23Uz\9!`&~5t'ml(q
uQAwYfV NH֜mox v# aQO)@~å+D"JP|
Р`LOoEAXG,N-t, ~*#`3z[):|֗^mx[#
5-K`~a%4B5o~>sqw[4B `C&vȏ¿Zm _tzsbAG!&˗j!ϼ2虁zya-_6}훯6IF<7ad> }evfAd!]DW̆ؑ/Dv" I$6i} upY >Xjl*Us
2Gu0 *u7g +cƖq n%렇y={
qj.
$<=1yhYMQ5A(ZO%ڏ1o (7Trc
I N%BD%3STz4U2>/TW{ԏW/LZI&g.2Xr3J!:{STdwkU 7&B^]?mP3]b>8b1V8,=^ 0x-4(뵴$60wЁބKRr\## S(2A\DL7 n;RQBpwЩ=Ȧ (Bc,!ל'l`Dmd8s
hڢ< tU*ʏ<L *\sNɤ)cf@6ӌXo
p V9_CS4,y(b\akT 8H]N\
|x芫QW +TVy>W&;Y*hdi!`hBi9ehXa/?0=`}W Ô#03&`洰zCk
C dJDy_W-~2xQ:OdsO4V/( `CD}voz #=LTH/ϰQ 1 .(jVΎt̊8e@vRRؗE+fI/rQٞ0Q'& Qz0|E*NƗ *m\# pҎ
G( OJd ,1GQI}|E{i+|aaTI7`־AQPBݺ@("V`e|PSDj7R?'r,} qRu 6Q"*est&5)UxR !9LyܰOw)Ͽweһd:Ү.R8.
0y3&5"g]Gv1 #yFLVa{aK7-՟=})#>-)O
Jꁠ`M=Ͳ (wg: X pY$lW aG/!Тd>7SF F{,*ڨPWh3Og *G/,y0 8V NTOorj& d 5a.E㐓Q6~ƀ
&NQN L
NE<^1 ٗ- MZ1dK֦Pc'D^[d8Ճ-^QJvֆQorݎ D` 9RP|M*o%
qw(` 2G'Is H? uGMKtIc6h 2s LVK' 3*[x+J%24ϜraDŽst溨=Ut0"Y*S$;y-^aP]K iDk%xK`~5/(k,i0VK¿8_ g;&恈 ];qsju-tqsX'T. ;2謸vZ!9v=-olip%Ccv k-Z =9@T.?ڼDq
n!Ι :K hL*VhG=Bz>ֺ始Omx"R[[t}d&WwS}02JxK|7eiJNdȞD8+)=z!Q'^]]-T Y⨤bPLO`;)vrp2"V(* - 89-5
#~^Y]/FH;h]_,Ԑ}ţzb@$pSJT)cD>3P rWӒ\BY]< B'w;#W!qfcΰ6 i[#// !4*h0l Dp^?#|`ruDY@9=XrcshH&"6&c|/W7"#A`Yhp}oy/ۡ13y =Sxױ':eoME·S9=0ǬCrmVv})CCo K"@! PQimYb\T
%Q!IjE>Pq/|Tn0X {l}&Ef ~$pp+7 ܣ *_PK r3\lqk@S
@֙d
Hv7-P--
f]CWC妡| 弇چd:1?W>mJ(R9/j(J|t2fϦzc8BGxHϒu$M 3O0'ħ"98fm$cX j:/rbG4.^h^1iM ; bE
kk]b2C
?h]Nk1b;o k,5RƅW` WjL?Km[/P H5b~u!*BNƬ
I.)sXa]{Sf՚en\ ~/ѣFT>?H am܅ lfhY]bTES2+ />덌-nYf70k w4 gU%Ey 5Bi^D|$>di\s8%pº@)홉Y¦կ?lmGc3 5UAXz ދG Ng,1Jz
@җetr;5EENE QKW'[`w52^nR[ AM4m(h>De7PDwz ͥ=q]A:em X"zMj]&ztːN{&y2ۯ~|p v>]; a6 Sq~!ZvjI2>,* J &܅
Ҳ
]^*HWWcD-kh1KڅCOe94j B,iZ{ " ʂ Q K^XPk (5ͧz gU?bhc7 I4jݔ k!/w`+ jBw 08c0c(Fc"I
%W톽Y㧹u!xw/wW)=7OF_B]&Na n"Z'ܱ
Uv{tZ6ۃ@w@Z3KiM zB7%[3Z?0p[trZog6J~&nw00'd̲8[{TTf 9_ }%+ai0uRl 3/`
ٱ9qeU x;*?AAKe B?,/|MìRAbȁTEk7hԵ#Ycy\iNħ=N(j;3G,H`8$"[&vEL,ָ(N_;Hk?9̩lѹnTaLkѰt .7p
OXEܰ,(d&r-%Sbs;5E碦% ,n2Ʉ2hVu/{#hpݓp r{O syDh1]|iGP&N2Un2 /QANq;Cfa誶]i=%\booݜ:&zɏRk`8k ļ
~Q{\x&shZrdS
k<_i@4|TIdpsԹ{cSK(9[AK[CRl.%4ܸHrBIP NJgRXwú߅؝nU W #R`/Vߌs;c4S+y$QatEŻ#Bf!Jm[ U4 E+\.dsZުD4 QHRYOL|̶ʞFQgV Vp0poF~3%:vXN5)oWW-I i?ڏNRGlJª/ot @9c7],Γ!9lUc6mE8gHhpBuIN]'k
Vh:Ǔ/Pf#3Vl-{-gGK:k-5t O^.
s1k!֨T ƞ@+}[B78{0'u~兛2%Y~
^r/IgAǧA6[SMkr.iI
Pt^5 Qb<!
& GA >w 3ZP: n*L[/D&'5L Υy05iQ?w%{k-G QqfF/WZ ە_݈
`v.&wU4NBU@R\
!6!y )1 *YIWP`Vix @ @1b? 'a%\lgErSxGfm}M+WaXUl>$og?0qT /%8='ke=V9K%cbөQR8Ns^=鞋909/~ΣR,&Mɠq& x=Y?e'
#%֥HOgs$) )ús4."];*A*HdI˄unյW1f_s} f>%* '?d+=Ob^i^xB5==?bF- Z֙=;k̟X{;1M'j cJ.yzbYJ0qPT4C *~OE(F
a t{4d]f:v1Y=ڌ- z%h܆
V!xb{wlyI(HOG ʰU_S G=>s2˃30 m=&hf0 .? R(#w}2&' FzLc:5ќKO(05v% & 9N`{dv(7iB0cp2v%Ќi=}TZ΅Q3|Cu\
9ZAy'c4{2
r.p-J e{ A%$<G{ -B_Bx^"Y 8" qH^w $V%T'BLF 5V0YnH^:J?.\=]bt$(CǒIOYt F>KlY@YIԮ~XzVEbI?ȀL.} I9i̬T$ u*GLIWy W<2͘\\_TrADKǕzE2'ef7=CN=Gl! <-:;)D1Xf
a8 8,cwo^a@TeMǎWM#o$\km=ψj}6IΜl^| NrѢf܋Z,$/S߾dx7Tdj2
A%4>0d+Y{BYf爽 >1ÅRTrLsd/z!(wl-SU\9|TB{7#דاN_'դ urO >}'&Ԍ=|βe<]ԬDyTpn r g n|5{T"MGǯ-l
cT֨䜊A|@OZ |B &ȇ3.ՠRrq72#t3V[`Ap\E ㌣N*c_9,a7VY )Kĩ/TlQE<=%qSCB 0;iYiy3]9XA=uiB &v brGL9$ρliYZkn-T?G5*To
%Zv>SHM}Sӂ0O`>S*t
0 Z@v
VˣZd珆G$.yR 5ipIT0ړFdC2UeA
{!:"Pv6Q1`^GQ025;qqXP=A7p;'tG58UE@"O;SɮMiU_p+^8uslt] ?A&i#B.} ?}r]4?<=4Х9J}3} EqӔj U+3oVn/3
y
m 5g#]#}}hʺjca{8"7?$)Vaٔx C2;e.MѼvl ;k1j;Fw.8vR
^ 4iҙ mD~#S
8DbM*GAkֻ5(,4Yf* yudY daJu`:]ĴHz d0"]AnDiCZ1"w$rt}ϒx͢[ ˚'jWg YiJ+Mu W7$rv_Rn30S(_wnuIJg1Ϩ
Hg ob-^ Ajwe bx? @҅r>ybƘ֖{'l
+9cUl$g}3> "r)7ܬ_N[]1G^BRJo0xpކ nBedDY1~DPL
Ҳoi
X$B֘e)P [u|K%F 눜}Ȇu 2C!t;1UޒDN iUkFabPn]>{=Yi$g7cB
_} Ԕ\.6ˣYcD_LjolpĹe!c w쐮 Δ7ڣ? N?A| !;*R VZ %8_*6W ၜkP671}кaV) 6ـ3ɐ s!(vH&Ϙmm£9JٻsY@3/@/G# 8chxui ܥ1(m
S 7=FjWq \?w!=&_@d> z|e$% FrF˕
[ˊ)3y {9'$om{]dR(GUKmA1 R5)%O̷f
OaU`\vޚCȌY {y/s nt}\E.w0Il~H~e'j5,9ȯ1( ٓQdYsաJe Pmt]1,5sN7oJP7GPc9^]0Չh7}.D٢ P+)Qʼ#-k/OH: rI9؞x4h^n%偩1gΗ,Uw;J
\%>T4G H6Cc_ Ky.M`;-Hw?·F 6#W۟j
(Y ^:{RLviQT?鵸*(cRbNO{v2Ѩ|B'
J˫&hQ=R[*Ilѵ=iC e]X
Ք7j
x͏Ub@:D2g, I&zN$F$/u]:wuLBН )bUc:<*IR#Q&W4G ` ek'
w?E $l)Д 'zfU.,l+XH-w_/@ BCVzg#>_vUH&|8Lq
^#XD6/ )T79r(,$l:^9t eDmb*H?R2*3m ft80 N)b J)~q)Ug!# E`Ӝia+evN?C}z.Â{2d Hd\^Fm |LYuE)&%*ЪLֱZݤg`^@[]?Ar~h"KZf]i
3l Hu.eP!6RইM%~/L:HdtCk Ȗ?0K, jjm,kiVHTȋ9WݪzP+`3VQU<֧E:`C0G eurMcws5UY @;plgn ~P-bkN0JzX^Vj[&ꃜ4.cߜ%vO,8
/PxPb(~K Uz`z ;(B%.%=EuOTH_ Mc)Xx%J) C>C $҆8jxt &%s(c,J Xl&Tc1w"O3 `Dd E 9t07 8+0۾R~rdqɋHt&wk [>u#''fmX 3 94hN#;9\OC
A41&j 62A$
? Pv0&^3+ϻ}h`-όhZ;T+ɨL*Fz\̣e|C4 e+E8OGOov户Ee-?S(qPۦԲϦE',:bcA'EKENMlRPuIM G!aeeC$/Z ғe 8
^ )n] | _W
MVciLӖh^j &H+isV21bUˏ9?C/2"Z9bAdl- O5O Sne Vnr' ;{9> r\uzr}C_Z@<ъE>KԛrOw{!b|l<rǞ&Tf mRĐt78O0^ϯ ל6@{Y*5>G2(m4ɓ,I DR
Q? ' }vz-ηK e##!4w|fr; B`x@ɭ2 T> ew@?vWNZFYخ)
Os,ឦn|º#>C`6 t. O (~hՍ #k t9 =uo>3sg[ֱ,Pfش^]`~
O @ I& F 4 (!c'ݕdR\lY:#2Z'51zlX)܌(2{ͲIvߊ_3lN'k}sY1Xׯg@]|!,obpXy Ffm|@ mH* MceܡωWI7 .\ u{%KD.;<ӉY YiOz' ,@jgv^P}$ D=t؟%A:kݹgG$^$D n~n?jCQ s
! &t@vʧqX=[:OmSX8{9Jdު.ھ
K ".S2o1EmaKҤ&[ l+gH`ك ni 9VԂAseAO>i/e,82d} u[@GB
e3 ڭXTࡥ#S6c/+9v
97nQdI2kEDpRs$B2d'{WLXxGZMiZWel)*|} [3 ?cq5l9tYnHΰܯ[{bVU4G"-6 !"aDOy:] UB^s7ez 2O#a2UP0646G W
^Z!6=cRg/?Y5oQ~/ RX }J(TK7eW,i4< tF#47~J|n&%O@y* ~fmObO K#6"^
^@hm)g,ыAo6hVHHU&-&HK
Q]sG8AhLv1 yhCK"ݔj .Mf& O4̟Jk ;¼s*סӚ ppUypz-H u /-{84W 5 u- =yűickELԨj2d7n٤Vd*(Z`w< s˾ojmJ"`ېٻ %QwyPN,@Bzt^#P9ș{>v(Ya.ȼ3&g$%_#A3zX묥p2af$3# S3]ZXZj#] _ \T$YbFWLoʸK ,r?RQeBY۶28k.uD20NCeJafrɣgJC~kV{.6
o3hы$o?}cvjĪHg]$%Ĩvt쥙 @8wxsJ@ fκu
#dT
id]vpȷ{d.}*mRJA-Ίݰ}yR Dub^sJȘY㻞H. tv6JU \LʑQC(f~[,';|gxWKC'ܔT'v)$X FILgE܍pD1za [ĖXffN 6ǡaAg U{{&
9yd\˫ Oԉ rG_ +A3tG7$GunjYV
ĉ
,Õw&fFVo/x}/گ۹(."7
{4L'D-8\dؽ7,+#QĘg Z+!ajY۴cQNJ^ZKn;n\^Ďg|r5=0Ov}W|Ol ģf31\*tiyZ4w:[H"tBt4HPrD&_ܤa!.N`7 7 ^wE|KM 4Lg CU> S2X6-/dLZBܣ"{@YkoRWTuٖwHTa!bwˠлW`0\8G
ɓ&8SՑ['u7JRq@ ˪_;z K[sA[A0dJM&CGgm* :Fd'k!-.7V3A?(|-۷,f)^L*eL)8HOܗ|`Kv# ~-Z|K ,Xmy,T(4{pFP
[RJoG (*% AF8} 11h8 Rmnaw/ŗVF$BxKʍLؑFk0*NM]5k mtn=D3@f;Fqk$ v7{rhkE \gY< %ˣ Z˘9Fܵ# _=O|/Æ"Ѵܐu]G ύE5Nُ|:3gI 8EZ3hWA[ U=,{ N tJF.w*ј'G ,ȵ7hW`uC>S[FٴJ]}ɏ!D/NC}J<; U աo1oJI{:ɠ~n-Pr߂~뽪f-r:VrkDc2-յBp`kܒ!*4B Qe njW y˶a |[P SWեMz=Jƃ9`2(C2
4I0n֭~]
6:}@Ѭ^M w|l+>^:HМ"+/"IF"&Wc Z`E
E컼 {%\/ Ǔ- 'f`8"=s+وMGBsA}దU0~ i+9ڞ&L
[%H ovhJ.(!.&*K^ 8&b<*Y \dm!'QCn;SmKliU %1P(~Jk?_ 1zޮ({ b{du/G0=?&6NXj vךpbƭGmrO!9~3nT"ؘsJ 6)Q>n_ j`|I%^y ñ0uݒ`[#+W?&[>Ꭓd_. (aSi]K풄N J݀ Nd>z% >o#[
T9S "DG>Lm1ՐK7k"T54eVpX {ǧO gm ШJ &,ZCњ6W->xǁ:\gDC vD Pɢb3?Z\$\f2* +QТvaP9/h&nP؞ZD1 SߦU>vZ#_
#C *Vtfuu@zu C?2p4c:e\Ԟ5sh++h]~J| "ppһ'R-nh gA0*kɬ\%d0(1 n2YŀCa+
^'~ɫOlBaʨ}JwKM f . =aYq;&V4Wʴ
>Vn\pE6CJuP
R6O߽MRve#8ЕB=^NQ 4S٤eL ?,s'm$;̉8efmwQ& !rNd }/% 9P,Cx f_srd" Zb`0$ U)+1m*.~6͡Xky@:l
{@;ܔjnUrJQWm[ArR(ç:<@B ~o4!1ˀ5ö́.ıez?ِ1\]Ń>քS4 pO?^_o%9DO`G1i% I9W Xh¶B.|ɨڝy9ÛP1@8b
ߡv
}QW| ҿyrh4)
3_&N!$s7&$9>D[ObqS&H s %o]SRG)ذ|6VjyV8,-X?
`Ycjeus
>
s,%]suL۰ ?Hs՞=n]<ÕL 91JM a![,YL.2ɳm` c*
lyI[i~WzVD964IsPeΫ a ߣobE껀QojVE0i~F?jF.nQlwHtU
CCyҁiF'n?! `wOq1d
,e8e OdhӎJ1 Kvr'<*(; w4]!f*\3yb1ojў=Fn< K|2v *kҨH8Nׅ.x*;t̊!@ט r"%oG456SZGȔNo_})fFG!J͕6 gRGC$Ss]Ao|ŎM0\d:PaF,I6rmM*2>] 3̵U{8.@7~/nt.3;HNu
%Nw
d!~ ~5~h -#0T$zIgeok C7W]bv7|OP"Kw QY<_!y+ N7B6%p d^5Vo},~6?.4Q3)J6+(e
:,,7H0!VbOpԛf]oYԲ1GbupX+3ߦ | w_RTq(
z]φT$$ 6 % W t q;Kms=:Y<e@"+ɑÃq 3ڸZE$UEM# ^U}MW0&mXLSp9Uxe{ uBdE?|{ݷww Id\ ]%I"7$~DJϮIk?eXϙd;x"D m
-9Q%K(7.c#nSg5r5ñ5M>H_&(٭1uW u1L
-F BA `f|_DvR?kS)ɆfX̅`ܪ
HJ|-5:.HoɱJco
=ʼTDS*`}BYSMb#eӢZ
~ ӎ e]XD{4v#'NMsA2ʶ = s/aJ!~Q
u l0=Bl|)
AA?'M-0^eys nI4 ڈ8 % bՄD)Oޠ nª*qJ%#tđ3( xF?N TgUɔ-PT j-U|eȩWH,M悦q 2w,٬H1Ɣ x.#ϏQ`NTb)υ`$@hE a5EDaм$13qe
o
$xaB ~c+x:r5qoT6b82zP-
]nIwѓ
pX:kH[89MS>"c!x*4kg)RJYU7cAC<(qڄvcs|M&X~ x'
HV dҹ=N}a\ +LǯdTrpl1]b$r*ʊZ2&(A * j8;\<VmIk݀zõp_N%^FE
K,9v
S͂ؼW峠`KFKC @銝$NT4Bf59\',_*89 x , pSQMU . 4}R Ãl51$ŝsR\8cVqy~;_ oLlXW"BwiFnz/ g%'%ؤ0J5N 3-T,fdv G]# )PX¢U: \ Xhmh&U%
ǞZDD,.EAޟ\B
5 줙%H0qy[iۧk|:Z>~_O
Y =Aш9ʑZDs $STEoՓ̤AV'
^Wn}Uw`cl3
$ 3KA< #XS]WuYt\ xiq"bIy~ +h@~C)q.Mu(CD4w:H Q":s u7T+~6$In)p sUb0U&w 2 xJBgߩ#NUEl!U:O PU75J f.wWiard}<#>L2 &`#pxfxmbK%qeyjNC-j6Vp1ni7i
"( agGw]# 8W 7m#rZum>=f ehʝߓ4m^[!N X,H 5KVtSrUo Qχ'3(-9G+opYA, }}:ՍĞP0wk4ZvՂ RsI>Ֆ[*z?;ci-7rH2xq mDZ J J#, 'ZMq#y_ P\ f.6ϺB]Cw.v ;8
7̠7cs ]"8lDXiz, \/-oϵ!Brl zjܨ 7+MT0߅E|HҒq2fo.q^#b>O i23Ks ߶fg&2}gbCiY3C:'ɓ8nJnp=I*K"+2
m܀/웣VWi*Zw#eauЧ/A1)a
U(R ye2wI
RZ+ {hczh'VclgxXCNt
[.@,YF3TS3R^/ BA |UU_N2 ~ jttU %(^*|?|ftV5P&p9 >Q(NfOxFF+4& .ml3\ymG|n OL:!"t+15h}r(ձK&iӂ$_~AiSG'B`S[Թm9) VGh3/$ hz4_X4Fc$A!/"{CXf{:\a> yY>z2D?r+NهNz" PSlK>*춾=l1㇒zG- xc &B+ӗI0bx
ۺ f{LirA/*``3"lJ: uX+
76utp$}G`۴4;Gu&duT/|JR<NHAH"h wq< ]OHRpL*"IA&+]vަ46/xe?V
ޠ ⦿)|nc,; N Kn~Ƽ a#VˊRV @ X8Iz`9c4SA>)
E8c5z-"in`S)YO`-ZwVCKQ.6zR0 7_U ӛԆCQqe[.Ko5Q榁7&w&w._ul.\f_l<ꓑ(6 Xf}j^' wHU1[ (.C'OwPL Aө-/37,ߝ.N Y9*
CA>zQ\78 Z.ncs
%jtS,=;Zzb5 dNGtJŢ%%;pQIe;mi? fݔ_ӡH]5|
4.1n_kʆ8 Ax`^UQtJSGm1wG ?r(8;ullh(A,[М>4o4GcӬq1
ѺiJFwo`Hf1ycw8.Jd D=YYi@u[fLMx/PWx_ l#m
+^$Ot`ae7FK!GJ 1nvm uڔt2ԉuU-k,X+
3!<4EHGs /gCfYLLP xGw~m?h%-V1du*m}YxOEh })]xzJnO8̏\#QiOgO^_>RR5Ğ|fn`P g ;Q;?5@TR&77 $y %?k?3wVT>F'<$[WY"zGؠ@5读3]cG J /%qc61NGW~jLiSd~Z
ۖ/7y* O֑V s0:WܕqF'ztLmLdlx{3mq>Jx S;7Yc~ϴƧS#/syHjp62cuDt n\8i(*hJ\gį
{ [O)Ʀd$7TԬvBMd1[\t?;#!-U ϋ1@ > uTi8 Do>e!hqiVx}.fYf2ZFp3T-Qek`}HsboVNWxk< jAE?+Hun yԋJu/MW6ڿ[`/㩄{tCep4ݯ}B`h!9O?L2fX]$k{I.dOOEf&W{_ة"Ez",j#b>]IPRe徦R gIZ[tvbsڴP$ɷ K2W_LRH@ \L?R^+E# .b8^ 73DVKpjO]PGݤ'r[ N )
S@? g☎e*[!: َO~;-E? P
fa 6+yS]0Sb6$6&osamݡT:q/A/*)LN/b!Fa
#ط+ !,[` :I&Σ7
mHwm mm1J: #u-|/ v;ckG
G+Y;?>[$U5$dƅ:ʎr k~6?Ȫ
(@Y/qWdSЎhɣOO眭ȼNQA[6]8XB iVbEXϿp[&S?LJouCUKxBZQ
-G-Bzb~ Pԧ <
}HdWvAi;uD<
24yO9ϮZ)c |ߗ˗ VkjGi|Q/vv0aEa-ГHIy _ldˡF슚K ql
B! ,
mfYbh @
-c u$Dʵ?&^4.o_+FeSGh'Qw*7q|E~PtջHSenntՕtSuGE1PfX
]F#?KKM \]ǑTЮ/ )d 70e'.8vњͺVQ^(BjϹI ƄrղY>@39j^^N
816E{LR+CJ&tP\Q?YͿy1 H`ǧQX#yI5M;N+
E 5Lu&Ys +4ٳ z?>W=_ ́aBȺ[!Diaoq @{Zs_yCCK4Uص*pGˠ"xA
EQr"FG JS. G m/#4Z,Ur R! )yK76@
EU ^@~X8 _U v;Mrb ZM@mת%nS6| θ#JIQUDZUyce9LQK Ar4>){b:E.ONٟ=e%eD! 's4v=d$$HDeM
) ~<.;]}0TehASB I10 ėWt>)l"$Y\xN=)bvj[[im~ էzw/6qGso[9@-{,jq8m3 ?1/vs! ,XsmO}DTv;TCdkP}MY|/Lm Hw!^a(Tf }HuA ¯$ 1b۲x=O>ՍRAL.{(w'q
ԓqt}~, R=!5ӑ3"Ѽ~@3t
*IvN=<ʰ c{P5;n ":O.gHV|iqBx)?a4 Hp}M2y hC7-8k*ԤPʓ1MʂYɆ;fM' V 3.˟w
qE6 Pߤe~s[tv:* xX-vJ A^Lfjp3UV_?*.w
Yew&u!q*7bp([N`刉\ `_yKxCw}s)C|
ݔ2J㔻xZ{~~?.]H `3;y~zOsDE"A\ܺ\@'.СYl"dx[822v60.|6K-w\Sd&
y_q y_d ^5)xJ |8n9Urg,:(a] 8B^E۩ՆqХ >6, b~ۑpL, Mߕi"SZZD,Vd1
2m_ nęSyưF9^bdV"˂Oju] kY 8qxsLajrq fە)oLc:fqG<$y9 ˌZJ
?FimeФ̟fqbK_Ă[o KE
VP6!GǰJ8Y@|q;ʦ] zk6
}$tzO| 22ª[Cg7;`s.Yk~T5VUp XQp2R!1+OD6T:<035L7m! %k;C%l-½'V6!yJa*kG]d[7/[V L UT&ĘWbr㍏&=@Q ұ Bt+^Lڊ .!5 d߆
b!W暊!J6;-"{ǂlH8c4|E]+T?DlٍR=wfӠC(Kn\ 9<|9ptP `sʿֶ|BR+FS~.
d!N?] ]3pg^iiA#,!㗎0"WA/?Vn=c6X.Ј8+ h/Nˇ "
6 Ŕg<]ڊE W̲K Ԙ/KK
Bo t1aCZDzcOɒ{9Lŏ30T3~;ȏ=Ăs|Lӻ)!%7ŗCNAg,^=nV|wPUJg"ną 5[ MC{cq?aY_\We]K]KUNvT+qzp Am6 R顗:R°?3]O{P=9g^^gVL}4C[])SfJ瓅Q$|
1V ˻
|1n+J1 i
P7e2v vkl`lLΚyj@[dƫ=iQ"
Le UF67iO¼C!_xpֵ8S-k gVCz~EL#i
v@j{b7_1% r?"hELWSW+(rc?EC((L)V%# aAVqV
z/k!'DD- @.H/F 8ku:cy+PJC)2LS2p:R~G4}_Ry
toP&Qό~ _>{oX
AAc٭>iւ Ƈ^Sw{t۵2ݻUϡSffUJUU=ĕ / l溲҄H)E?옽N+
ۆuCM0V&cYGsn푷zڈ~1P} + i2G_Z -5/eմw^#.S/nM?2X lZeH94 JV^CR
%3&hW>j!#5/)_H & *5_[mJ^V }=3Zq2%LѪ} )_$/^;lb+KT 0t ЪsмJDRӄ 7J$Dv>Q>0ʙF.ؐ{ݮ dxLg`pW]e ֿO7\D#cCD0eB,`7Kl
j"
NH Kj?9!?p^n*A5+_ }g JM`' /7174I{Ā
x8
dQHOFѳ67}D t9D;Ól烓9GiGK'% #J\,TvEJ c.fRz֭^/6e3R:֪h|. 8K)%ܧdCɄͷ7F?
-[ Ѽ WaJiB-11 z
3(d@ \w=HT8jIBrL$n{طz+;}G^}?X4=
="Z 1 ?C^ 0hz
J]m)2DϦ["xb8p( )/EK/e(Vz{ ㊊؛4 nsSa_
iRba6!|">z#܀p|bF6`{rfVln<D<%̖s ! @Q*$wՙR2MHЅh5%
kZO;esjz:'=
~FA Ff@O( .Mc Y%eG%؞CdSAA&PfT#c܇NR G!8[tEQTcȪ esX y~}V4L J \ps5gRIV!HM'h
F/5xiRg$& j͜~&n,tN$ַ f | ԮYF,WƸYsZۚr;SUG-ՎϳK 8 ov2d~SŰj $Sɕea8jжzM(vBt"7 3g0}F φqxDO :*｠0m]> [r LK!JԶfpf܃h"XSKp _a
'n Mdm,q9C
c7LG R7Ia鶀GF _ Wjg<,qÿMq^(XgnUs eAjhY)4ufd]߫듇ٴiǸ ԨrtaNo2\ [jF&d3髖Cވ% w~b ،@@L)
l-0]U%LoA_檑 WjC8$jR!' We鞀,=" ^]+3J%Vm}ȬY2 A
{!ֳfB}IOVS:Ο`dvw\+뫈!/ʑMU'ICnԖBm7"4Q:lZF9pN%*{\lǀA2=%'ӠK֏C%@dHdxT0,^!, tkTp#4(Dp
EXlnk6&>$ .?´ yđ[ LWJ.( / lyNeOs'86(1=:cEa)uqM[[J6&5zE/ɕ[@.(펡3uǑps|^p⳿ C Bg-n] oe+UF*h\$
}|16?Kt.G膮V{~Y;|[+HuU} +EȥwZcr0UBZ? b0I4{ vUـI6I`֢φgΐww&?-R"5)Tv2W t&m|wRxa|n7`m }+[T!!r|]U; W3&k\:P]U5b̠UH[ #\0v h Gl)yzn" C0grY[<0
.*g/0.b
m A\)ʛ8 M*0WT`rc!1ACNrzS)bxJoLWkXH6f/TޱN|>dE:C) nƓ5] }|hI9!Z-r=[hPrˬM~̽w70 RCٳeN~~S(ӡ6]W%
8.fpUD_C`$xtI
"~RiA#Xd& W~_Dr]*8r'"g~O$ʍlP ]Us%Jd
ߗ
LO}dM$3,d}ېw{@1,X2*%rW+ #N'H#u b%[D
zs _ S.hmUuv-qd mO']Gh:']&{FY@iKrJb҄Ssm7ŖP#1ђ>גTi/8x,_ҡORwhۛ$k UjBk"rkwh@a : k T/65)`y]Q
\#;zVq=ExV V%VT:mU_丼ɴ aғrZŕ9YFF\5Y(TϚ)N Zt*ܠ#־XB3
}n&PnB0!܋xl,\>e̵IElm+ 3ADEL9H[R\coȥ1`Y4|cv(JL{BU{0sEVz5s;[I&h>G 7I[f TRT*]1<H
CdDD3Tj,t!cJ6 xЖcヹ?/OROfSX%\;B H:UvY27kk.ԇ # o?fz.5bk?132xS^k9 (wm T w)UP\]&
ڍcXXs/ʒtP# 8xىPhI su;\]$8DH4gA'%qlf !Yv/SJbJ<9H_(} V1]3-✛P*fkQyRڅО8]t 02C pR$HhǐpE^E?qR3H^>Tf3LJ& }lV/~B"8Q5Rn ljF44`01
9"Q\W4C] S8N LÈDRcK?3ډj;c zyƽwVi&e|
u>>f nSP8G+4fCfg0 3#f
ާG ^mC鮰="Sʅ)#¯j2@s] 31KЂv$kG) Z+<&(Tb W/|(&z,]4 ʛ@1k<2d_c]z lq8: BcEWWy/P'` ҫu`¨}vď[
nt^I!ɨjQ* Zx !t>=g(&ͱʎ 7{̦->8wGL)6{xt[YxzLz5
hS)둕,Wvbp!ޭ'A\pЍ ) O s̹r)Ba3HGgq k-_1Jm x -ΣޞJ, -RYC2=gjySН*A6TitAnbӏ'i
STİG鞂2ilAo߅$J0މ[ozHTHD7"ra}vsIu WG"Y 3~ɪ EIlB
k[WuH洂p4C1DHX ( VcY p=ʀ{_y.k~ێ\ؒn
E=`Kkv i~/φt{]հK[OTE@tۯ5t_.vK/7ϽT) ZQegdۚRpQ+Ab9=` kRk
? :oO4l)CaJ0)Zq?X#`fQXZ=a(;7蔑ɢ': j@g#WyOZ>P9*iyz\0:9 h!=%;(뛞> r =TOZrscvܹ !7+=64vYd_6ubג4śݳtGKIILZXg F{-P2q QOG;~i܇}U&{t4s-śG R<#}}
F'$冓;Ork WGo=2XQ'; Ʒc f74gq t+BU=ݳK$[
?C)sbJ'ۣ
"HtGIC 1qQa<`ԵGTL3 &tLhZ 'V5vtYukqR}a3pB8HgajA
%'._BK~Rq>bG8&3ڇ6Uglv4GP[1wǪ(;:c5c7[4)S,=Q'!&S }V;f~A س
(ڼ9f|rDryB~£Rc4kY+^h |M3H6jK`7і1'appSx|)睳AXx"rBE 0:; -JA|q^LЄ ܺQ) i NQ5"(a!-:m~hpH;9|+s;#.Xfs%c'bWFTؽN.ꁥ9rx7Md/Lbk9 iEQ[X,~OcІN;Z8)|^A?[CP j{$X͞:_0FM)Pqc{|*l⾁La/ G芶G(q2;& 7-_ݵ)&p1_<+[Ua[vn`f F؋ȒUb bluR[YÅ]FZP`u pI{kUMd(?]n|ej
ibPrh:6]Ր Y A1$JfZKG8" EsP8<@Ro B'y5?}'|Pgk ΟvXáay(>M!G?HrE@
Wa$?w&i~7k
y+jZ fttp 驎SM r0t.Gu2udyJ_;r^͏;e}]Dne.M ү^jU@++,,o]mk4 >q; iOY]%8oNPwNIaxEKbc DSYtܮ⡩&aީtx6z
e+G2wЮ\ߓP<
gvUkPyng*sn-w*㍯FX+h5O
d.(EG!kRG3W]eS4 K f#BN~q# ?x w߫[d/uٜ3l8$qu=%6X{2D:Qi%$m҇ ;F dn5 3>6 ݑT(# `+-R"Rձ-y¾f~y"ZƇɻѦg~p!f ;^Of# ܿyrq6zK#8RKWߝ/ p-t㷜gNkz;Xqñ/.mW0nE- {;SV<?]4=WE{,VNk#GmyRvm_6Zqd\O K͉֫rC~~=PV Lvqz[(D1xl *-!!cb[*:su?ޓ ۢ)8l
HJR
;,7C&?Z YM S SwX-#BFqH:`lPv`DߋY)mHB,Z1|ma (7@
ݰSPcP{(#aY]".$4(B lyLvh Mق)2[,+4r&1c\op L l*YSM TK*
Pq/I"@E'@E66,Yh8#Le:KlJq LŽ: ;
ȳcyB<xڮ (I7bvZN!Aϥ4Byو2*u, 0!1w G wRqcv9_r$Uh? Χ{-W[3yH)uu-v!4TɺH:7E%°~9$^ &
_\a^3 o(VtkS+tmk"dpX/L6r9ؒ~
=`>D_G!L"WԓYȸv"LY)#8>iBܥ./CE9Ŏ&ǣ gVd&u+|o0dާ=].US41W>tBkhbAb Pmh lL79&'OrYi sS3fyEFtxb?
nI:uqQ8E *xt4Iub+z|Xc흈rn0}1@;th1B)^'#\ @0`$= d:P
5nB3>70hUcpQ2q`_5X LO*S/gE&n,"#="`c2c(DGYpv֕5c$P` nnӉc|geYR5ytC7JUɃ) y$agh,gZEftjaT ӳ`N~ .Ay쳈_Kq Q pRͤ 7cTHfm;:P : "{V6G ܜOtB 2ՕsfMEΘ𮈩_Zkk8oTܘ_j@yȣQ0-"D"3>{E@SQK U~3 sv
Kg9xg4-Yn㫈xvʬ@-xaFgᤜ[L
߱Ը#lc^!f B`r꒗*es+w2d5L&h^aykf⏄_BϭsxUԭ8^!ٲfmo\%gmJDewaZeb
\,'X.3WWM,7 S}xK58>3R^t6i,ʕ JW\|7p α&=f|Gx=ec,uk_W:hh'۴UL-4Xe .kքA!,Ό\o(̓
q= ݛF%+DԽ#Α.M1右,swBi_o6k㠥2ښyF~Qo +x/!HЪMֲț
QfV~]&$.Rpj|>\p| 0#n7udP~0V#̩QWJB Swoۘ"ʓ3H( TxV"٠>
㾫c!;% b뤔Q r|sTOQ-99JWe:hP6S7X^
ז@ F\Ko~={D<2NI"p
Qn1g
f [Qx+@^4[a(k:T `DqЬ ͏sESO0C 2-D%(|y(~~)<}{7C܆8aU_\e 5 ةycK)dxp U|QK" - XMQD.g /ei 4FF *A/A1< NOx2!`x AB O{S:h\ÜN;y +34WՒq~a"~J3C^~fD;n Wz ߝ'30hNe-E]j]ROA{fZ͟|H[L ULj?*1Pj!ZQ"nT¦֚HXFg Y``X ܌ y|oQ=o3ʸ--+W$d_nok0R:2BC3m^nC /b{ &*6wͣ,6!Qi =p)=m1\.ih0!47s 8P.X̪ B2Ҡ0AE5 OͧHf 4Waw} z
[dfid6i 0tj_ Kŝ OBtL H*[u3#1 C쓙 [qvғk(mJz4D
$&FKW c[8oB0!2$ޛK
0|Lj7e'@zQވVw=>6VtzLU.wt_=VRޤfkF%|FلY|plpY`FmLg:Q ѕ!#Wo(JQTXo~=\_ 9ˈ^w[ $IZ)Rl 6;ߠ&Z5j*FtBTAKz; Ko{%@@m])Ll۽ݐKc$Z1>?U!$f+K ^zKbҠ9(ŴƌS8 vq79Zcƅdnp Q=UzꐆQ ,`'F\?3ߣ
0*YKQ˅=N?@cCp悌hlzVͧy٭ Lal*aeuiR#G۠. .+81tbD}fxz[~M5C<| Ӆ _
#IoC
tV/pLkk݉0Ȭ盁+0ăӑ7gAA:-JMp}1PbR~ ]ɪ< ORy{oZ:1U ?ؚ.ktXQ )$aE/}rK'4 _jÆ :$2-tx(]UzB;L{S\W pO >E%lJq o<0r%izlte"crlyؔ+@H' OO!N$ȡ:" p/7ȇ
`Nn;Olj=_H CNVF)%C6s Hb}XsD Ea7 >
܁ XL?z۴y95}Rz~>r`*x 2jѿ 6r)_Sy7Ɨ(O(+^MP(I'oOD*050sA{2$O :NZ4S&Tly 2ʣg?4rIO61WqQZ ՎS1 G0C
YZ