apparmor-docs-3.1.7-150600.5.6.1<>,܉hp9|ΒiQdP^*4U}L:u\{&7~#%E湋Hu"siG_eHGzPqoYG2j¬hNjzj1;Ź0! a@%( ^+׻ iLPLwP8%F,sP~^X3iG0ϵ46Pd%p;GKjyDa4j֓nkڇɚg7 .S8SEVRWeoWɨڊX>;?xd # B 5Ihnx         G  T    @P`(89h:^FGG\ H I XY\ ] ^bcdEeJfMlOud vz(,2tCapparmor-docs3.1.7150600.5.6.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤hh heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.6.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1745392364 3.1.7-150600.5.6.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38382/SUSE_SLE-15-SP6_Update/108ff988527a5e410ebf430fd63f6431-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII text*"sO˻Putf-8938bdf407102b7ef40452fadc9b567f46eabc24fb1849fb036ac59b1988d6e82?P7zXZ !t/Ux]"k%{=CQZuǡjע|v=X&I}Uٞ\obCBA *+Uި}f@OJp>vv6pe;yMeJ^dR!G^qZtKJ7 8pNY|ҼNap-'֣ώcvB`iq9}Q^Aaz<ӡKu(lwsCX6 CinO[kNύzKhZHK` ; dͪ˪#U@\Y"ZArHAJ{nfZΰto㒔HSQ$nMS]ʄu䨲^ x"0HڍF>9k"$Ma-M"nNf5>S%Mǿ 6qR1zn---JX4> xJ ɯVi!#Իmg]x }=) #;Cd)l?wSD<窰JHf͛icDi˥@ns>V\vg˦Cj}06JM/nчyŬyV3/GkDvWc-!De/gegs8&1YC$UMZ]~W>&;j6܂jk/b:d\pC!=FhRCסu}Tz= i´s?EHWU܊J`$usC+wE-YkM$ܰK4TOaZq!p~*qHB!PL!o)#e^كlUC-Z\廙` u!j1,6"@ Fq*A|a oIu ݄ZSdpA"}z+-j-r_41O(Bzda/$S"VGne VV=B~o˸Bx):3޼|zc9``yB ke5B5Y-X8Y[d=wď>QK}U_IvEN0 1J+'X5rD7}鱝2. CzF[tw1}r%̅-^ m*UR9e2MjVaw<[۶F@UZmz|"r6^a+Tґߒ]D8& 6≰J.S{!e- :xC$ʍvհx#4!"+oSp6i͈B :*j_P{p `h($I>b+s8Ǒ<"~+Kwckk@wH*H*,ucT FுMy L|ՠn8SR2ANd{@ 0fYĚ;fi눭2>{.a@ gYu{YJe|P/Mt5'Df==SA~4@X%ՃP_ ]n:GGU*`V>il!|o)}:b-.Å+ 767WD-=' >fzΊ֋j&)\@jiQ(ϤuA;0a6j`b2S]Q#r()a+%}kbM:Sy( vBS^vlލJoJ0Σ,䘡P,BrB~N9tM˵ca\d0U~*܁bXD8$ BRr m1PN/ݦ󡫬 jkT~;xNLL5{n?M63VTɇ{2ѣvefrd q;iuiS86 \>*ŌQ$@-*ޔh [`?EbNz4]^;~R\I+NaY~dJElԙjr4SHMP33WX jSO9".363o6 G5$ϜZ_.'*nQ~TE^gvխ~SBm :E|HMoba\M)xnlԃMՓ͐`iAKvn\.m~FjqzR c WT\I"b}l\ CKCZ x("5z|L=~iQ;kNq> ot=q ԲcxN/PM<@H|AYL?xn9edwP~wja1-I[:D /TsLEq*g6^DX|wĞsq_H4$Lȱ"}p7g]+A{WӀ` %z#`8>㒖iCm5`jGCh ldOl q' ˇnōC1z|A-5W;MY zk0Ϯ bMk\_BH?i6K5J3:tTJKhKէ( H5Fk,`}; ~~ ]LTlWɼF'JҞsCPD(C5B4Bq`>O,65唔͟G0pZ1|H *Y>HeYH#ny%=pխN~ȕrnz7[[)C=t[vnF <#Rĸ VFe Ʉ2O&{2<ki.'*m<@h#1~4T得^S}l_jDkv t) ګoLpG<$w b̛q*KbU;@ {]&tJrNDL"L@8!蝨!7*$B2;f'VgmĠԧ -O9*8˸i$7Z~]gJ%V[jKn{~D >6ct M~Fd*_5^ dV6[p 'Xt{u^aE5e93&p6rK ݯQ}Ocn=3OnUh-_؂C y$Nyl<ʌ^kPZk?&E9Fub"L\@KhGG݈g8F=D3賄Re r2*_8#+F\ceHM<Z'a1:$Pم7Ր(cxSP̌Qq2tA(^5DT)j[V&sAzm(#m׻ʃxeBH?`9᳀urтɲ(/ c2HĎbD}1P_+J '{O0<i5xslfMbҢ=rɘU9?=g_Nd0W ^`QZMGC6d$篂M/db HIc3h8fi2Od ꖤ-EM-p|  3Yc*j>]);:ҦPzkut34Br8vżS$;aT|ܲ_6&+}:1^]n( GluLo^X^pCﵫWUG6\qew1pU\8Mt+  E~WC8?~V jpL ?DNJ@C&oU;Y p~dfϩ@ 3]%cB3tu ~m)eZR?ngmN{!QbOk_I$a+ߪoJ@0DYǢxo5KW~s寐1 RVQ"9_DQ];o@"@& v-KJS /[NW}JgĨMgO_ 0eȩօ#'!N% ?&:dIIܺn~™A$m/?So4v`OaUnyHNpeckjp?r9*ÀiwFJ{ny% Rxu *wfH,3 1،Yv)wI\ݳPP8T=4 ޑ \ٵEm*zaCٝbh^/<ά :LE46ܜsHDC5ݟ}GV˅b0T%.g2 ςJ3ǐ[#!]˾aDۋuV'yujqq|ӂgȂMp *Mrex\\FATszjX\Ky!8w)p }Axz'z^x0zZeg|+h~hXh}ViX@rc4YN4ꉒ%U8B d'r4&ӂw1 㧊(.' fŠB ksKP᫢pTy/018O5@Jys*c,_g+N㹻NQwpf <Sd"m#E[jWߞZ@9%H=tI8@qa:Y|Z\Fz}6r΍APZK!PFe5U򮝻k$'̱%x2aNO) y@̝u͌}ei\(XP}t&Hz({Ym3dz <|{YIbf:ϯԆ*feY 8Q´Xvȉ R҉]G2|HH :jI-v7?А·Xٯh +BlBV zfJ|DLe'Φ($RƖ`]7>YL4 aKz>g~\a= ,(L^6N B&`Պ5 (< cc=='B9zm{{GHuO.[WVBS@$E0TxBFԓ~\n@`2U);YDVEѶӁ-KC'ȶߣdlV2g[h Wk{] !T֐J)5pH66hlP>tH[ZMOV uv lc|7ǿbC'rB)*me̋1he2kV0uمdmJ_BZOX"aV00T8@CO;^e!s!>ARjHỗs4 >Q|f+ܐpnPX6xuoƮ'$lF g=?hWm{h_2jXLKƛSµsyMEڃܕ䡵,m{߆m$#P'^ZE]po^M!ODBwLuK{PXNb''b/#|Hؽд-#(cB5 J@&TI-Xw >HsIYYMOZ.4Adٽ8T@Q0~No Ilt C)6?׫8/+10AN|rdppZ3eox@y`p=_9r4;ZbJ!3anlƃKwkjSMiCoux}̈Z/5«ӡIpssM~^z݉LJV0u+ik 6Vu|]-6o!c0o*eщ|#~YCy|e*km11HU2}(% j܉PпrIZMm6d"֠J8'‰|J=K&Xh#rH"RJXg|8n`z{ s 2 6B]3d4UurKIg,,6bpEͷmrֲѧ² h<2&z9to8KVDJ/z@XyxjJ]ϑ=" X (*֬"i/hU<ڹ8 ,x+ܐ=W"]]3KE&fZ1&)ײwWAkSI0<e|1RڤK*/GMvhTpu+sNRaQ>gB1o͖J>DAf ni,вS7jրOşWQO Eϴ=Z-0 I2]uLC0Gqත*UOEYeJ|.yVMnwE_$ȔS\@>Ak8nI;92~UPGSM):wkBB6 36RaۻJ|Ҝa׈gp $s⍖: xą}S6mqޕ:0gNI|h^+\쏷\!AX1+avp7C5-j} ;c|_UǸ?='8X!n\i)[FYX[7C]і7]^kSiSjهۃLbg.&4%YӜ"̀74 UMMdZ1gQuxp H' j! em6YK.%4s*\|ƅXERa w~S/n+6<N'0VY̼$rX#`BB'{d-ckehxjTu5 .r W\_GhHBƿÝ-@5ΰ3DG P‚+%*]v02^ .߲*[ 쵹&C86Hdҹt5!s͉ȵ7bW_J|R ߀0J7e'ѰKHǀ#_wU;()a3 uFIVFgm01NyC_y܍] w`2>)0aI"7}BQwyE H٠b c cbl!<6QEtI<$ȯ2|zDUA*w^)5EA= }>Y j~Dq^Ko6(]kRƓO "9 'k4on[P6+/8c)#dvXj/Fk7uSjI. y+Y]'.֬ ‡ߩ{1 .A?&|ڍeN\FdZ'鐭o/?:®Rrj4潁\]C$) 2Dq@j3>E!Dj58dS6r;`ú(kt淉]xW<"H/ww7A~Og@m^zŞ_ͫo 1.e3^KN?ۗK9vݣKci@ -x\'Z g$0u;8Mz"?78{:{3FP%tp̌v7|adRCk:A Y(PErH0=ۋ}ls/%}8BqNwρ"ǟE߷cOAϽi9&_)h + Oج m JMb;frx#a?aƟl`Ӌ0$>_3z<ǤMb3#<Yzyz5X1[FG݋Uހ7bF59ZS[9T$q/LsFz);taLj~j7.LȪ2(PQJys'7X#]Q8 QAs eŭ@HwSs6yDv(Og 8)vJ7\,Z kMWbFR=_*&u1;%=J?B mhj Fv/-ԇ4@kMX(DQ)Dջ`ɹw 0gCK57 ͊|s+~O=a 'f>6w+*CvY,;1֬4]՘f:T h[f !|hyPxwjg:ɹƶ /zuoF5/Mz۔AOqtM0cG0L[О-o?SlxQ $ĄVl0BX̜ASv/=raªwuvFm+a?) -GD휳b}2Ava\AIWC ˛${J_]Rᾥx +c.nCHKI~P׼,_n+7ROcqT/j`ellW^z?@X>SHn0V͆KjO/M^QZQt?@uHo4boFj"ǘP]jpQY4yIEgMEi{LrQp/eXd4/u઀zRGU;5v}WBVlR~D@YWj & #̈́4ㆦI^%UjTNP.uwP(o`&!͒F* |N]k9eDvK.\R&0cVT| Kmw)",NJWot2K:ͯ۟)u+T7>E:( @[ƚSQ-+Kf( főg8W[%el)Ígyx&iMT(}VbNtK9a [G{$e 8 п}-Tؙ`LO5]dE#\E*1iG򚄶 nRk@ia2#kH/%~FR~{t[[Afhςw=HXlXɱB{ SI~oR<j4_( G:Z2+?4N?loVL nIpbX 13yۣ쾻9[Knj\Lb%iO{%ȩOSb`RVFX7`ϠClf7hx__.HeΆÊҪ=WNn_Ll)_% >r,]X3BQKOɼ?ԨG/Yv)$O?>O 9u(BCtMK×qWʠɛ]`C6XŁؾʆAՁ{NW`7E-EN$@M|YJɜ:J~V'PbXKY>)C>7+snipāJm+ =F-E)e `A-LSVF3F?}@ tȨmzFH5wlNb~P8Xߢvnڻ!<)#2*93;JV֠d+`v$qIIM A2 y1x4*,ӵf%uT|LKnpl"V$2ͽWe{|a$zް*A\K[EUOo ]I[q( }Dm:Fe#.c9Ǭc3f?)i8*| ƤrGEuɿԤДodmaUYPyM[l_VNQ=%3Z`TO9!b` 9'Q?"_% I2e|y}śp#^ =hD !u>e1Wh zv!39!TiIä=6#h;h(PnuI$onk CNmښbsϫeVgKuTb^RZ+N|̥}BRU %4oz R EzuHaC⼱&g:,7%]B'.}I5Q%8.wMy쨶*/RVYI7BoS}﴿#E:xo:Bld2HZزMͶ_As/Ȁ ΢N:kaP^ a;,ˌ[`*}c(m }}xuwCc5KK,)&ųhEV?&a}`rHBͮ߆}ؐ{6H'mv۫ak(r3PW^t(qS\ 'ycԎ r'x>DrA7E z櫞h=]/8b#ƀқ>m>ơ] R=D^wMU _lǪyih=|AĺAHW3xlȌPVƒ ix0Rlׄ-$@Z# ړ_0,ܸ&mzڇS$| j@b<3@LS%M`̑e:!cO:/2z=ΆRM"/D$\}trnń >MTcn kD׾Ŧ<LpIex(cN?@ULg*O߿ZƄ)ޡn/iԜ4Uc?zfBk,GN]<2T ¬_rոfϜTXOs/u"nKh;nd>!t(qJldlߢdÙ;Qa#DzM8aDjD9ZI> ThT.YFMx+=>Ϧ#A UPE"BfQfVͨ;yLrq.ڎk҆Me5F>ˈdB,eɻ( *:x8N=*ޫU$.soTƊ0%;~ox!O1 \i@Xf_ιߔZۑ E,##S,r4f "$P6<dz0OPV<$ێ2m6V%ĉ.V]Log bC3yIjNQ\ X..#sH_339yQQS*dW@>wb@O 8`9|XQmNd>pU䊄6+I0{+Zq~ 6H?6 W‘lb*U-2g"CØl #~s:D9H:/-bŗ\{U< lڐ2;y TiFNmu4&ۄj4);nQ Gi 5L,rGd g Ƅo8 vf5QűS.Ʈ=꬐ 0ܩn A.'! B~aGǦ[JU1Iq tUtxjښLT֒ а$XfPxQk6pissN*SŤK]F6TK8xy09~V/_JQߠx.Z61?8@hhˑhR#zyu&7mF?8m3ոkrq4Jb _6Kׅ"ߝuzu.g,j-Ԇi_9[<:Ӟ Z4uܟl"9"y-܎?S0/67|zE-K15 ?fhqX#j6tZv u$MhJ/k"k/H|dj5,Y,!D,a;+G#RҘf 2>?@#c 1i nZKRc)tQ1#ePʐ~  =iTXWPcdĕDxi8tɁA sdĬJnf:m~x&pq罬(PG -bmS-ZQIQXgri\-vSC9*_~gpeIa&&46eR`O:e1پrN !o?G"'h(Vz||)T KsNZ'c}MqQ0VWl;e(jRŽsb 5k(7,Y^'@*<p!O){iԤ'FOK}pŝY)KV,ݢm*Ux Nff>:]g-zd\SEp%BY4Y 0za(O3?q"wx1gHodӮ2Qj8HWGPKrfD8G[9 6:l}>_8?ekm^G›k%tؾKK^϶! k 23.K^C/Գ\߇.Ӛ=(āe^n.d;09T?B0N+~5ѝcMd,e7D(?dnb`Ga− QC!,j%+V#@L" M͢N؄!) nI(aI[S\ut #:C5I+ pnv_e̕nzy /RmE$/)ܕ~Du>kdl}~U\`a_$NR0`P0!sU39N3>_Votv)N6R DBDߕ}H_YBL&zBϏ-VJ=A \^%)ϱl$%٪T y)jG/P#?2ѽeר-:!ȡSfއAdQ7B(} "B,O0*cqw⾼A@\t@J~FT": G^=ϘB*0s'3us_ o?x6PCd(;IJ( ; "bIh<դ Q;}lZVXdU7 QC`ŬZu1C V]|%휧}S4INQXf67!ZԢ6kw?h$RP߇)r4 _A#yr~K*]'HgZ',S?U3!]n{g.G.aB}FX HjdUӝ) 5wa%.WҼvz$0^xiX*g8$=E =6UYsbf9mF,'+Bu1V_=ۘ:x!gM,-Veݜ[I&*][r3}ƻC bg)mp|9e%)uzIJտ6ղV5\GN_aRko,X9K$lz35 k(c?Ƽ#pttޭFG*_QC)\ -Y<a8Z=}#a۵T+= jkOoX3mc ܲg'ɆTQ4 (\X5^bұ2͙<d1?LmK8-V"*CЇ9)I^q,C&;/I:Cc $7JV0Zq$ h0l k{r<= %1jٽ _BRK̦\QTFsL],KmH},Uz֡jOipoQe#el~.> msn/=ί4䉘­XUӖZu &U nAc";c-zFM{ǼCs&(gهe-nǣ+:C5Bm)ۍI#P7ZRʙ .EmNA3]BNu֋CVAؿ#!/4Fk;ZtM5)<٨šۍIٹ$+(jϪIXSBe([(/$ã|n0J ;aqAu#_$ؾ͖ebTy"80 F}8jILZ9vv_`FBgJb7,%҄Zm;aRId ysh9C;/1L9R*I2^G~ࡎfͻ%Q̰J(mmv/,G{! Pٯ0fsx F ?>;LPXi9Mww에nӿDh,T`; ^gA'MFsAE@d{PBt .Ή.^VZE"8 tWQO |xHD6!8L}ckͿEt&SiKfv~;ʬ}@c> : Rcص}^v0`ڰzɛgȆ!P6 ` .r2l*ں#ς..S0 ~;\,&[uL/cRd?>LRtVڜo]߷$Bpp=TWW<{F} YϭOvyA"=Rޖ19jsGKӌ_w]ލ7B7i[z~v3ǖCq:Z Rk\)\+V24y&y jjRG54jf|aF4V* \ WQ%x|Ib`FH"YZ6^RȘ7FV mSlȳaZ @ȑډh(ƣAuݳ~n5QV&C6U&QjW| a :_Ԏ3n*({os#zƥFɴ޷ڑgO) cn0QqNʆFyc?s/cmps>B!@,QI' >]Z04w3pMs^.Y Oڣ(A:Oq>~h sgyHE"cܷP{G}pKYUئ0\M 1f-Dк4js#@yB&Ѷ^67vA ٿyau>~@ha/\M8Qahvv_V׮ʦNo'*V ?E3KʺHrn̝~`(h_ lVQa5G6ngԆA@.K!W' 54v~x0Y:hPA2eCbF*'߅U%=ebAz2IDA$a'{a:T٦RndB[טUAbД~W+*> &MKF@MR[I(t2 ťE[TV?qg* gYQŖJP?!ڒ5{s0<{O?VA =4r1AKsTπe<a4ۮ mot\qIp}q 5f[DL`ѯȗvIECc/DgU]\l=🏢vbl d?^w[he FM:e,~xAVsG'hcV vxEF@]`S>bIF3oXǔӋɶ#:4D6/M M ř5DeJpvc3%F`>~.O;5#NMB::g^|?'F[O~ʋ,R (hRt~FdQhJՄf5nvBu s~s$1yh3 vHmNf *aBz\Ϥˆ((SMcy*lu-rޞs3doPa*y]mfމ0f|~xH͢]::\G7S;ؔ?ct&tT\%X&U9;ANʕuCᒻǤ]9f]P^aS*VWZEh6"6geIKc\~UvΒ{{!ۍjk543뗎c`زVV;U&.( xMu'Pk:vdn 0Q-KM/Tmg~CHx#VSnLЏ:tLanQLxnS}x--t +0}ebNE0#DmPU?߶7k:f._4"MO /mtLV +$Ъ\xG(W6X clܾ[*0 }^ΐ'A `7ЇX(KL]{3xC *؎@=9Ŧuw](sd4״1ї [IJ0FV'K-S^'k--vCgulwkF{g,~KWrvJӣDg jd1Uzqid%yIoA< 5Wt`Ew@j(.֓HW-PT |o(Op܇PTX@&Uv:pR&[3,WP$M! ˬ 1YWve[D%gE^qE̥D%P=<X.a ķd2[}tA]:]XP !:^4ۗzP'+ ]>gAkiѝ j;GӖb-ㅢ.dsyȚ|)+1goX ]sHc@@Fbz[^ԧv /I<LHT{uS(L>=j\f&$ wTpTjrT皏'v?E}t%/=gUFܴG}JZY֙f6; _[RKU_̕a7 {_z:x] il,Cyq h#Clb))Y)`/2s": ȁ `[@[wr$jtby)$:0vHC3+ZjX |᝸5S&.yKMzQ2۸o _" -v Sֻc հ@PP3=t#,I3kCvq.5N PAS+/Vd0JċE){~E0E4ЭQN3eFh6Y9"^6e ; _fe&lK;(an /|Y,_bPQФ yޣ,@0zlDi d(98uss ]lx.3+I>T &i^[_+vRFPM0|Y#!S즗YԲu @}lp5lu/|8lJ/x q ;JabRiW^kD[nA,Jj\\~2`7i UvLX^,#C<2I]}3+nNӿDg]MOdwg\Qh@S~5_|LWsnW !g[l !}t)=nKPѽTҵP}o.ʽzJ7 a{t}4A׎EfL{ =Lي_Y$\%xUz_TF۲.dXV\kކ]U瓄q=j>_"zV 娾iyb/mPSӋ92'~řw]ZHF #VrSi:1x֪,m2g?APM =m#ŘgCS v4N,%3@BتZ7KEwqڔA*ad>]lAY5'i+E S;zAK As2S!644CNPH94qyD%$Ub5#?Na]!n=lrZ n;喝!q|b[R8#6n؏bYH˗h=ATMW 1# +\TnJ"MJP~dy~x&MV!ee J5ń!lc+tjzbMW0no R$\Jd\K 6'"*2#笇}}69/v}Ms6K?]piq-B1(~i$gMvǻ-3r>)]R J8j5%6EN=k?-ϒ q3DY}n; qx2ME}6ޅ~p†nZNp1 Ɍ(RnsK=Ī,p ʞ+v̼oٜۜvd1$> HhЃCǫQIVjHg5$8-.+p5{V婔j_ͨ: $S&)I-XhC~:18k AH<3} ܛ> JOʿ ,ELKfܧfg2To4]*# }TJ(/;._a)+,/ ^)5O<^#Ȉ+=-e{W SFR"Nx!6 S$y?iTҟ[fkRGp8{u-Jg0:&lK HG.B^*oJ.ȑpi:O}1\> άB+q-M-[mKq)} U}xHQF:½M=/5GSZ;T&R`>MV\d)N='KbkIaZ/cYt;(o`~7+Gß6x <4K0_P\uL NHKG a9H'"ʧ,4T6㱸_2-9NsuP0 ӎ_4wk[A;O_ c/ F.:QOasuw7m<}n+lrw qZpimџpy$@l eOAp\|BLHH= ʆbرb_?Ƥl]4]_|V>U]=۰'!|eG]H"m:ՀȂuOvo_%:Dj):?K*Xs ojYj<i1"? @DT=p@LM)FzF@ HG?;Jm0Q1+>u-va!^qY8ܶIdr!gpNXdZDX'O<:E x-"&uȂ<;?*$*v|]K`s'wP},$ka+7ſ T˵+qk]wHekU>.%-r4R4_{,d M׃Z (;ԆM4ID%Eiǂ}i/y\ ݅b;HzgF9l#v3*u? Cu*9-㉎ʕtZy2㗼<{?<00:pD8Ko¼l|oOXuPw-Ni-Æ\3^qa/3R;:gFBUmCu,f0 RB S`e˚ߎ!aw]j^"\/S% y{DgJioճ#^ʑ48.H84نپa&NB1f>w$ݝrbS,SBhN"dc'>ڻj}?}W/=ZbjY?R)^ℏ "(1dh:kTG)mf jpOso95?b_;cB D١,lF5u򢦎:eC+Pbo!+_QwDۈ Y$j[C$a:g5[) QDX יjXi@%:LgG~[n*sd,Y#*yj\rZ &Ů^^K&)V#B+[U_{〭#=ϪHwr8-ɮl-I'2‰ iNK~6 "]zU6t3sDԀ0U?nYՑ%I#ҕ-w/Np*a`ځD6 Xax"G#JbZcÆbE9y;jwSS+5@T(9k@=2T9Υ*<#MQVT/٭>^D(OukZv2 hVwSc/ѫL0Қ8a䘷7k6$XMɅaTĞ͛X}Kr17٠1KjwD i7R*3fP*/$eb2DỤiVŚp,Tjde<"E5Qsڥ%}n~:V:6ʖLZ u po7gÆe T3_@"u ߼.񜆦2,Y3UGmZ̶v~hYLNfK_ニpsLG2"o㛟}}u,žs; 6]y?c}Gol>RiT Ē1ȉ"jОwRJ^᎕ ECNi?T=tYPHs6 Jg ;cܪd.Α-L +*3,AɍmA֢ws&!4/e7@FNj),ӱ Hp 3Mc0xG\3Y/y2^-5yV}}ߋflf% mC|Bu 3j}ͺOn.6بdۺ|&O'XCJ%,00?\0ى"'2QWGCH?NS*σ +a!&ހحhgwZ P 4(:xC|F.tY,Q@*XAw#!D tXb~Og? Ee%z-y{~$;z}޺N.'ن痧jBNaeys2W@;' :];1f ,j @[-{;@kտLE:n+}k0ay(OM䜷E*JQLT=!6gmdtxwi`ƷuW7ّ[-S[Žo*-z+YѢ_#-13ÅWW7,0wqMOCwΡV;&n.%Z #Z&-ψ f-nISq JfVp@ߑ?~1}ރA?kı8ߤ Uxf6+>I|SCi;&j~`S᯸W&mz F1;Z12oO/o+$9BcVQQ\/6߽ק2w,k+ FTw%>w$wF,lvßY|§& t&FaE 0of1CA含 X =9?b $n׵__F={۵ϛFtQ)}<UC#7!ݿZAR`Ƌ! wZR+8[9<;xEuɁERN@}IM+i$oO֖Y̅: D~R6Uڇ'sBYح& oP'-tFl(Tt&b&PV~iBUe BiZS9&WUw8޻', N^&O&<{L 5q";?:YR-"RXE7V,N&( M +q U݌75K{jSQ7<QEX +f@YfI|d- ~Un41 @Ԭ5 Bi 5=SE17jbX-9g̅b1NHKT1-Uow3E<" ݇=/_Z[-O-MP tP ioXEjv]H@xYAQ>`ZOgˀUoK,e3ZZw\&_%Ţ֧V4Yo\K}hV4QP1p}ެ=OGx].(Am\=6|ٚEjimmE9O2CI/"`v AzDޫBr ۮ!n2/{}-~gIx-_L~5Olx)Eu[ŻɌ Bx~OC}>o7>0PcPqҴPRG:8U7DcpH;0VQ;P ijN~H/boj JzXz=&G g0M[b0;C nk712S!%Lcʹ\xniv~Ƚ?1_,xjԿ:' ٭K"h#/ sBAGޯx׿}-@qZo!O`ڒdBZ[oB)F"|{SVf{8GRܐkP"ZT̈́ kz+ݪMMv 7o-d~d@Іv?~Ն/1%Y2Ⴃ _ރx7]0˝+])/lKhՄΉ0V0,AjeLZ.P!0CnE^k>/:m,Yxw;퉏 ={R7R3B!MvL|⃏CS]ӪtNF=O 1.}I>¢ulA# Kۛ%E /)BkL9PIْ߶z~`@)A5:c-K $xt[œfŶIأ֌/czR``?Π5/%`'OlI|iڰΙ^f9lO.E {YnK#+UlM{RmzrR L}ɊPuH%Ӑn|P"5ެgѬMXr ;l&&=[/0ƪl'`)IjnS?h;&M1:9 @]a=QʸdKGF_z54tێ¥(Z!Kj=vy(pv3o Qfp;yb (j2%fiEF>g":R0;/MvWD5L|Sd.+t :-J7c=d7xRV#z#frT6Stco1[rn_\?`xNLѳds|]D1O$S<;=E9XHdqsGq 5&Ā:c``SHï y7{ >(Jp@;J&dj:/-R$P*p|EM閹,E4S0I>3=dp/AH;h`Y3ބohXNEZKW8M:,jU~ Fk8s9{B束m xxMI%I6^e(A,M;Aڝ ]~Lg䒛gEV/fTiWUPt=>+]b"ri薷*s5s̞~Ӹ?IYTy~,o&uOr_\iDrh϶vU]vMC c kHHkK=Ei$vQw_ϙLaz`W܃O՗8M-|n>?Ҁ: 9̄pgzrDzՎ(fI̎vR]vZ.Yo. Trz#k'C,*Q49lD Vބ+' Ēb(!\ H2nx J6%G f+':tB3b\ yTgBmRGECGG%ӟ-$'` m sV9t-k!#ES+F"Ѫ~1S>#:gu_TA`\?MƷnArWϫ8 D S>^jehLHN,C=q@+TL#OQ: ]!3+G#Zi ! -a%]J?sp̜tkI4Hg@P2:@+;|vƒfrvHvs{}I\UrRnE:h,D `L.ώ} dRQUĶ(#G^h,RF_!tGND:|۪EQޮbhˁ$b݅Bث%%$6 ?hICx(M=K)yn`Q$mѻ[Y!nb%8,P):%-9gz/H[,ҙ%EeJFt(xR !VB8VH+`2d=0ݑr_i#XvybmE^mY3a8}%] .OlK IߗZ9nslߔuSD*H61͸iDW:T~B|0J 0M* “/ "7j * ~29&y h>ħ@h"~~nGUweve?Y۝= _sσD\KHC cb al~~{u/ -r 'y^;0$QlsdpJҟ t鼷ڠz0DT*=$Em^Z60]95IH8c{B;^cEf>,UfPڧL?kߋ km(RUI> xzLҖIsցflr^CCC1֘^Q:Mӿ_c{-zum1=mT]EGHcO).C"e]鍢!G|8*-{'?wtH N6Y'%׽9l%NV] B~msGj$bP;7w)aq;ypQJG׹Q/"9!L3H߈/,w+u czn~nq*EݦpM|AMZ2;B`R^ws|K8i8Oõ!rՊB}8=s׆ӸwE(}å;IPÎR(.nUX OȔe:(6,SI!CMY1C8L̵O9Z]Q+S:,(1aUY% ro5u;R,PqNuL/kQp<Ю`x-B4/Wn^6k9{\ G!P1~-q݂/Yߞx/?ռY$S]4#-獀8{*-Lז.g  Rr6h\7kx(cz] J=k{%KKLP؈ trIŏRyxj2[}|F|bgz,bWeÀ 5O#W՘G<^`[ $Z7ek0 d pt&SCAɌH0 [uXcLbsqH`@I`?֭ɻG3nΙز ,|.GKS~$joIe2%_\>v=KN18<@$Wֽ87,w[*A" }upcsJouJiFE4)TO7ea ŷC= VbmWc|50bTR//7eb3*$o0/0} .bs}9qHRxچEk]4ʧ+ک6So/ՕG\K=r, cja@j6px~NqA~a>16%_^AѢ j)*AhLR+R+F8L)D@eWǙwbI[Bݳ.=ЛBl|>n=S[@qUl bȹn+@79wBi-H8GO22Y{f`}4]NٹRn~R_ fؗ=wWʅgh 2MDtĂmynҦՏy][k ԡM/ F]=җA^@hGi|"[v8 {27t}Ȓ瑵:*D:*6_I=5  BQye$\؅6:gERdQғWO LK5~î*Δ\M/N:]\PŞ)qSqFOfʬ9ٝb]l}+Sr=`IEUx("z ~^b0H.J֜IJ:|-%wq uz5> mkTd!9(Û[Q;R#UH+ 6yWڲ/5XDIT0u[Qyj[YQUtX~h]NIfE/@!- C=>Br6g)RlzL(OV:JS7Ht8H'7=KO1;/ ?_a$c (I-@HSȪ E:DyBVg۬&65 7+C''` !ڮkaVǘZoU~;J'$,X#u_(zdԘ AT{@ekҪ:g#[(o.60]TH/T]uI;}  cF>6pu6'< (?,?YE0t$Fx&fzsFY ؍Kb7 7wG+WJL=P?H_H֝C?ܚr678e㋹h ՏMKs6 p,6][%:3,zY":7!سg@#DB5)S6cTYҎݳ(;GJ͊~GA"}O.6xu7b|/}M%Q7psY~a@T87nV,b碛L5N`xZ͇B̈́<5XX((7w=:Y"7x6a&Ujs! #պ !m/p*:,Ra?BmM8O?bJf݀ϲ]QgO\y!U>4J콢85D\tg!hdL DbB*xP1i'C4,ɏTe }jCuYO-6xSS6T^#lt|b3+ي3Z~blD$|ȍ߅C!X><1s~TG9ZMg25TH*7PUq2L uzW>Dg=\\3rxOK*`{]ł ieRNrʅHFX:A7K%`FtcAl):\`L2@E]nst v ڲi7rFDόXt|BQ~דIhCٹv{4.x` C[ G$Tbjm8BG\l*1q=B(:2{[!] uլ D`4 vs6T(To40)$ѧro!=J)6e/O WXB@@@X~.%2Axڕ=XNӎ+WWqc~R@Mjkf9W`901nkצҞ/ ǯ@G_Zր+cx}rH.ee_:-( zT/n̋BcqK9ЊӮ1) ֲZ3@6(=" .ޚS c/ )l`Apf3$O=q^tူOXRthNPJ{jСhn4L>'!*(C\ixkM0vM×[hO/k1J߀)ܱ &d4lJ9 eM \*zˢ߯$UU5lg_J\ЁBd]'yjh(X8/qڜҒp˨-j\2}q PQɓ[OSW oKY{`A1𚿮T:&9Y uexl.d4O#@vW𻀭9]~)~7+_d@i>"Z~\g[ϔP@Qg2z,{gH;ܿu*%JV5s/p%|NJr;5+XyGt j*:Đ{#Y̱ss/;i#E˝eHFsyF|i3Vf*"+yGKғ~$%O ƛ]eJc~-6="̶\!sc;ܫόBp+۲- ІXăZkFX7_)%){}TX}iO(QƂ߁5fQ%4KJt1)@HFYa ߦw3.l:ۯfؐCKkV7ibC(?n*lDa?`gr; BBc |qoJE%،(H2vx͵"PF/,x:}`WqȜ[APx h 7l p?,YÖ]7za*hZttʸiR(,umEAsEF|hi}扃Ld~nge; p )sDVqD|<]Pm%2= ξO!I ם4"zvԅgYFO:a-0|3Sm6$ 6;ʒZG4 e0?vQzrcc:Ō2D(tZ{7P٣Bẗ́4Vj/By^MMY)V20ݷ^hcv `(n|RŦH(f n59XR֔"v3g ȭȆW 6n9f+m}_]xDz\u" Nnk"-NLVe)R]u Ȓ"!R9 w@&dDW@ ᧿:` Dxʪl2e϶ MF`Ĕu޾Ӑ{B' <`~:]I>7DC9NA w"[~w4c#6+i65KbU֯0h ^'TTZLԱl;XtɡdrP4EsĢ瀣BTYoqqBoxchUM9զF4Qˎqݮǎ2es8m?H: f-@ Ӊ*VE1zɉרc"U>•x=6r1ENKւrdʞn wh)O1  x1*T9A43B[yAM(9uVi6[׏s(=R2nSSgigc=[ΞީG, 3pOqsky0B'K.A `b9לtPPG:آ .F%&-z[e3Sk77_3G2ւx.8uK7UbJαc&zsO'bonEb_+g,9PezJ|E adW H'U@/L,As)ZNrƼ ahPUl&t o;>˴7m%h,}jȇuDd]#]2sշl.Bnyt]/QpQabȋE8{bh.Zs6p跣?.#5+~0,7ۺ3G=L3-I }]=z7h!D0p皑e4K  غ H 87r(`p !M #R4PyRUn*:'ƽI/,J85(kr_I&{7G-4аξzPa}6vVJ +&΄-]Gb!VC~̺8aGe׾LM&n<_:İ;CT`ǕXh~_mE§^t?07f+?!Btqsbu<‚R3?2_Xɘټ{hݍoU̐LVGխ0.Q ^VIVcb4ԘGǕfO\hRd|qm~+3X?"{4%y }Ò@Q4M]SC:8@}* κ܈-:m큑`Y%G[=@\byԮ|Zc8SoZJ8$Aܵ)=G΍|ƈ D;`nxȨ:ɛI lu*H^A! Uȗ#U\\6 hg5c;۬DsB@e`~ð/!*á6?s.N.T25H?<} YOȩBB ڇ~TG-:R e"ܳCK"6@t\-Ls<8g%ٺ·!v=9d(Pi=u'5K$xU fup|FuSiQ~sj!95;pŀ 0ɧcmqq~cSUxKUp.K:%*m93x6@%q2A`[_'qE59qo/J=O~CGiu5Kđ %tPդ3[Mov1SI'B]QuulEYDz͎S]O1a<<]}ps-za`_ S̟)ӥZkKVP([=vy&d t4,$$ra5Rgw|O}9 ˶Q(yDHL=xԷ`eB>)1Fζ\aʒwk/oqI ^-ĉH7-˯ozsQ:`oGc\tht?eq)z~m,!(a©xW_CA.$mLoFS@>KIEY16I@ppi tMa8wW`{-wME0^ ֯IAc,r S81b}B}kbj7Pu<髟R\.p{p[L sV"۷Fc ]Vw%5:zh66KT)ZJ,$.f&!+o pͧ|nḨׯAmF+I2~xnڵuKH %넉xLIQ~up!;8&b_6{(W :u}YAe~"ӯ`Ae[Y/#Bsg d"ɇBPh1#/tn+~+s~^7ζ<^4Q$̎>{vW2dcjq"4Je9vc-Rl&++=1.e'(;Kl*`۝}iȟ–<Ӓ~G-r/Ok_ptYW _v`j)((o:WuhLCn&xg m:4Bidڼ\ |e}멹M8Ye <ӮjMוa Rƅ|{̐0Z7Nd4[0m6v=i`4ׯ P"ŵQL'Oțq}Ph`CWӶ|.e[/XNX]ktHhU06@pt!Eƞozj,\䨒}Or*C%QiJ$NЗ_G״254xeh`hwr>#vg$_\.ǜ7/G H +;<'d?#ʔp2YA2gWMl3"fzSh * !D/s,Y8 &l!dsԈ3AYX'L7Zy:+L= 40,wN*EB;9t6i@5:`n?ks oA!kN' B _-ui=FW9^2Il\BьYD4ǹ;Ԥ A?݁|xlޝ>ȋmK~`sK2||Kghf/,B~ho`|ZѕGtK[ 8N³_G6:w[b]MW/6^c1SlLpw=hP'rד2\eznf+} ]yOLiF)mn?lXY/6%1*9I=1gXlE A5`@e$avI[ Υ\D\t yg&it;YI2 p/ťد\!^e mx|]_{ %=!Ä|Yi3bPl(dGQ t8Қ 83хq'uv85da€ΆHiE9ZΔE@o{9QѰĵa:q4@ᇒ=:F$ 3vbIcW΀JgS%W6w~Y%@<jC޵޹p_;$HPт䭣ߝWqmlӪCgcxDmu ¶a}3 _ܽ,]3ˍB՘8y(T& c &%\1gM;=52= } Ћ!eȾ9 MxϜZp:0$i,xyÐS|`yGK" D)^>gȱ}@o.z. 7}IA6!{ bFO|4c^i+wf UsbCwHvj*L3E;OE<[{\z[4/GrbG!^:+TŽNC娥j˵0dbsC&t{ 0?{bw30) D'4T -e)Mk-dByx(퓆R7$]pM[jgw UR$ ?`ڊ+X5Q|ΥKk/&K,F!"5`-IMb糅KdQ/Py{`Z)Q<4ĘӴ #>9њ8̲3c i@U2ر9#CU}D?QD diQ9$urCP7E}'LCߌ[z@Yoi|{ȩ@ߒ.^=,b)f KL:A zVd 2T?!l P^)ġbtjΊɒ׾2&ޕ&Q?nAӡJSѱvwV3Q.|.Q;LAocL ;)>o>{qGFO%+:6һ2o-X3}RbOyT GX3y9"L tTJԖ+Л=x컉gQ\ O Ha~ ѽyվp75qւ grzgh̠Nhm2? W {jԛ[m.X#j sVJ8E)UK,ka);ˇkEV{ZBԡXFS-nv%mwyYQ' LX/O;Bfm$ E)jԝ9yt^5M-$ÅLx8US5fԙ6η/jYAq&اuaE|WEHA ͟mp9;$ZG[\Hyp{^~&kb,/{UP@W"ov@F̘\s#I= {ɚBRP,`/qY=eʆ~fsؠ #q#Tm5#[5ꘅn\F8 pqCk6_*.g8l/։[zk"JGɉDX@q+e i8`* "(ٺ >k)O+@I _)`R2T.:,;Uvڈ;]|4LR0Vj}_ZǠ$/+: h@ qO݌zA2D"BOq`!pѹ5fv\}DC X"_=dzRIA5S6Qh$!Vq&d:Cq{Aˬ2 )H %s|+s7ETJ vSs:0vUʃ9=^.Fdx8aG HV7OΟ벽k tVD#:=5:Aj3kEs<셛(dxcf,$ԃ\;d'mbbX~)UPO]S ӊ%> 8Dt]ڼ ɶ ԃ_8cTDr/ȏ3-iR=8|goMZsĻOE"N܊`n-),Jj"-qksCxoڮģ/J#S,ag-]ZͤL Qo)7)y\bƩ.4RMXjϧ 2ToDGuҝ֚NiV\ x⦵_m.ZLQQMql=âyIj)"6b=/wz@ЩcXTiHX]l 5S9hybJHdQj- rq1NH\,"EʞR9cY8@)"UMmnr/QD3:.[d.rJh Cl+ƠWH-*]әx@,a7uвUkf9 z2G]d1_HQw9eЮIIv S/(T0YƌB#mN6|U=.Spi/i fX-F61g2rm*=Js+t"L[yhEc^ݶqSTB ǟ]Gl+ZTi=]Rԙ*1vզ38`ՠh1)0Ͷ4J`t :эL٬K`@1rPpNy- ={]4D2X6a.8ٱJ.D^[SDSC{/nCvm^b#n>XVK^8Q * #-nZ%?qNXE'1lܰFp-]d V寖%Kp+,dž=oa4؟᠊h 6L}L)u?8YWA I򑅧)J:&q6\Vղ ӑYP2[sS] qe>hhxW4v4qHH*iGF >5`Zq(>YEUX;kJ<;$<`UrZu y_02߼,;-6x욀Ӎ?Y6fdLzgǧ~c}g <;f5Rw~x}E0IB>+Z \BإD'Ճ3c彂NIˤZiQ"anʣ)'K:uG9da G0NT1GRh~ EHRn=%eԂQo'?bz_D~f/K#tzr+o qDR0=򝡱6|9{őe0*]#~8{#C:ydhXaK0U`MEĄB`.mtJ\î[aD eP4pȯV|Li tuV<ķ5~)_Z BY^Es/HlgLɪ[A9> [K4&tL\[ȭQ:^ZG$fϑw0`0[f)[wmSMK2| !qwD"FיPcCwIf ,Bv Ps'-$TwJk׊|t/:{z:]AhnJѪVnx;SGԆD:L5# Mƞ q㇯-&5KsDH0C5~ L_"+E9|Cs +` iԸ, ;(Ʊ#T %22O~dcQS_ ? jS @bV:J>&3/ !HL LZ!˱XP_а. vt8o7  YʙB'/U 3&[9BЙ4<\zjfsmʶ蘀߯|f󸧇.5&M4no[ܝTsRZ/`-EMC 8PB`$E~[,-NԒ)CH-C"YK IeZ͠ilX{_tHBLT{ ; !<",$!.a^Vk1լi?wՖR/U?{CV3@@6DRLFa. e\%FPzustݍ^FA{@7kEG ʚar\.sω6n2v.4DػѶscH27I[c@kM[}L3{Q]_siC= ArEôuɞQrÐ-جĈ/މ;͋,mRVFSg;.1"RAf/w9WwnjȭYOP%ݬ8M(YKN uldڕu_v —0z&L?1)(·.FGiVj >'̥ (f<lWx^ co֝^L/s,kzÄM =DG@>hG]JyDQvHѫL܅+"}|'\^vcَ۬DYV+4&a' "*YIz@[ ;xa +( Z!7>d )JO?ōP6WiYL)WAN9iQ6ECd kI‘ ݇t +c;mg#`#VV:Exa`u_+4i̹RƻU|DžM_Z%u c'd-ĊRC4.EVdTE =(FH87m|@)CcFYΜC>=EуTҲaZ+!"kuJ  ӚxgvWZa㇓ɟ:uCsp0]V+a+|/Pʷ8AsOOR2]38t/Vl~qIin|98r=8e_)0(RCB36JF, ҧ%0ayj U{iaJ[ HH';9٨)UY=T'$ T =4•B>@euח PNBVfN dO"Oz # KZlU 2 SroVqC=λC?vT\`b؜n@FFWJWԚtm{?(LHf`Rx;FX]ky4Ig߸ ~e5hIރWgH`bVi^*NyQ~bޠoA_C$sJ՚[b>Ku= NhI]%(֪U .ZxľJە٣)tdZ.)24egV(H)}#s%s'A۹;*ijn&,p(E`il 좬R@I{-Óp*\7  oN1k؈; ;c,.}l2CNoRyS?(]xk:`cu?iOݨ*Ȫ͜s7\ϑ~:Wd0l)_t1{U2|EvQ3/]α;&`s[^wۧ;zt>434NOZl(*/3oH.3k9^K]R:$!n"DG0cʲNH/EQA"}ꆮec*;"OpcN% ykmtD}p߲:T5J{Bp'=Âś@JO/ %d o+ ƥ$ՕWV5jB-Aa@6NLr$-G8l%3`%PAکy6mΰ&ܻ+p4n@ZJ`6`穡J ̥P;Jk`lbtM-!fόfL|jHtxF=F{ܞos{ⶈiwP"WV`ZLP'&8SM2 ][n3UiAmYc}#XC8A+|v6'We1 30sRjIǔ ffbϒQC_yv$(=kxpP~đ$Qw -9"{J!1̓k4bJ_e_1Du۟Шv8??QDQ oMMۊčL8Yy)z?o/v:#/Tb]n"Q%:#bD詂 gI `¥ cuC5L)bx܀:&ʤNN:t*7eKh,V »%yWVr3eCv7i1dJePbId*'*iYٌ1/mX^e1߶ZA md :qkEY{ {Z V~p<)-3Ktc%AS߼>Yc}FEۭ7RdK&,nL1$ yƘ-!,s˯ݚָݬ_p8ǿW$w3W{TߔѪ'=+QkƜh*D fK|U*A`Fkd'{0r^GPɍZwҭ2 oz@T.Ez)b,Ry,} Sc~Xm v=c ΀zU}4~E;Ya5<&©Dv_/ۨBYF6cV>gJb*!d%W7H@0o0Fd@%#7.|k푺'nmcià3cq&BY %ў`W#ˬ,8oD[fn}~:٣I:.oTϸC K8~v ߥ-e+Ե}@*wWF"Կ@ DEenC$%ȃ7;%8|d,]zm-S2 ϑ E&Mw +jjϛ}w wp7 j՟[u$_=£r<1QdK &rNi~-g"D<7\ZR#O AVcjq>>hfpAv?C]}|/YR%3&, '5IM(X{r_aix$e`=L(hMXc>OV9ExfX 9[QpN@rˢSYªetu_!4J7!Ģ"+2K 0y8}աیL"reh43`8TƱp.@auA5Ip.KȅWt{Vx[ncRJעn@{ [13HOUȃGG9ؗb rJf+P`5\NBFuA`ZվBLXQSSA+kd (0IڂChcˡG'&g/ZoIir.Q޼^g!M$~%d7`\e׃hʔ?et9jM!K+vWh-% |#gvi A?NhG֯a\OG1(* =r)ֆ4׾v{9#[\N -unGڶ7&3VNf&'csbz2]!$/Y !z G_YЙJuӹ^ bc !^:?lo2lc-~ߪ13i jKKy,([9+ơdB+g%=P .pDoXh;r~ql]j,oı3^TK%QX6w30~w<OreW:A(kjGW,ى赮mrt٨Zc8Smٕ~XԨEj玹|+1>:eJ :كHD Ik+qDJ^R~aEcB OMbsYTy3ǩ#N B#<񅼙 ?kTFӗzM5}yk:ϝ;wsP,xS$)h(x\ 5?8`Bj Ikmy$T\·Edzϖ!Esgc"͗3@R>+xUC<)8Pl>[7o ?o cJ[Q׏M8V3QFu)lSmv2?\.S!`ٮzT D#F27$mZ0Td\菀^r$жŇZVM|~c2R~$ |5jԘAD.n01At> R[dhxY6Yxև0Bk (w˹"yB!XiY=mRT`V/ wY|cm-ZsItY92ۨMӟG0PƏsk ~J@x_Vn]HBnK)"v;6$8oK#z(5+)bչu k@.@r{뗨%j5Hr`Ym0w~%7l=^ѦڡNm ZJN>홱0f΋9<6[2hs pIv`\G^ഃY/$[b]fd3leVE2x 0;+%ɺ/q[GVx絞  @z<5aU+ڗnVkL.Ҋ3TeaɚP)W:-?Ba!#R'xvL&1ysg +- ZIdLKW[{H6Qɗ%> X%ayXIV7-6ԘMNh%D&'w{T8,()3grj[;W&PɳSFO7rgH7Ob~ RLILIvU&@ఴ-GUX(:9>z>L_}5:86d>Q!09ՙƃZnWR~O쯖|)SCV,aTfe/o|9K\=8> X~}`d8|@0Ĩg+گ*9?N,]]R?v^Z;? o}*5 syܤ=NՖAe-h⟱4d"1 ";>7L-% \gY'd8DPiwtTO>F&tzrV\-fqDAzzÙ9)alג6.{>֫KL3֮h nTyW|b7/1($8?CuV R2,1gрxXCKBsU%Rɫ3$ƵXu[=νO2k]q3KqMf/y-m>Ԁ m`b(T5ЎY? ҫD7b+aԗ&Sӧ4yv&{wONl AOA 'tY9Fo] u7Urx wPG'~Qt!V!ocdqhC4n$o4)H;0q; }QHu>;| sl4Uc L`v`:ȑ_4깿xӡ]&f[f"LпIJ4O2FOˈ\K*+d}hW7CcZTxBf67^\\|3·`pt@5n "dۆ8nLv~FAv,0vOJֵuS0t>yuیjG H6<5cϠ fV|dЗ{E{Qio=Mz; Wf_%mh%\Chù rY{cq\k8y ~Lx\_3/Id f) C|VCFC0E#QD{}RuTƗf?$wJYˑw'5Ās+J2E!sJ:.gL%!<[)!39횚7| V$fo6jV [EP0ȒNhʛ!^梵\4.q|rSx$ Tֹ ٨vZnVY)A-Ȉk'9;nNL&=B8\[E~~Fo?DKUd5KSvcS>7噮Jnp-L EWdd(@ڥw;HTzGT8?l6s 5@.BK3w r@%E(82s!Bi5Y.0n{q f`X9x/B?琾hI (vczBڎ0>qÜ0w|b|Ca H66G sm٥ 5膝&hUzIt&R>z7xE=R9@Ap]SПi~ rGyH>aDzH\g:7-YoQ㛡 qnv[N \ȼq>n" =Kk$xV r%r^ 8J~+M~Iabf NEpDImY#mo&qd CkDNSMڹL_q$ Yo][Јqw A],G=:coJ4Lgx=US Q ɤsƺ3<<.ϳlT8PDEoQRbtUf J+f[O}pnݿB^@bB*ѧ7q< e4|dH;Fs sŽ%fZp=*f!R'O" 1Yk]?09=vuJŬYh1׋]\CaM[Z )~|fdq$k1^BGfHBB׫u "3[elҢ) _^,n }n$ծ1S01}fDu+fLXgO!6 PKc6y0aq BbB6w444W՟;pqL+P) yuHHx#/R%,rvH V32lwvX“+vE3T9 IeXX=_ϫ)YG]4w1 !ʗ*3I$mnw# -&h2UUji]ZCw*y'QH1b9?OmĊ2#BsMq6,!c̒Ҋ5J 1Bb`7Z<I=LDD'$AL~wL{6I+C%Ϻ:%E5<:J~WLKaqThKjs9i{ jmZ. D $@^s;I-$6}}&kgV&7[(=!Ou?bMy[w7\#p šn"j%}^-Ri@kF%ٔV[4d'm۩N8cR" ڶ ԍyYnyPFLut~jY^v]p?&*oYN2H OgA{+0/K$ p{EzxxV4,f \?N㫮Ή>mvRC2/6dŽ}J#htN*7UVc=L6ޫC7{yE` ;:9j~v;4RNу\ ~g/~k]&ğ7T\$tU4zCRE+YofK%1hpƩ'Ek(0W)C-}TY/jt'sMXp$bP3r%STDXTj`>5D{G86VlVN* : !؃^x/N7R`ygdjWzQ>9a`7R]e29krٶߦȉA eFy3 4'5絩}BmcC#i:OJ[;16U-|03^9 }07 $w=jVIwjP HNm=.A`x~\S3 $ Q:mxBăMa+;q#W6'??B%AGm.{c?+z XmB=#/M9ylf}klF!W0._Tɡly!KR)O@4ȵM֋yB*+(E8 ;L _h#(NJ8T- x3QDB؈R;e!avYWQfQ\ @/fնȸr 7FFmHUGqPc-U\JvҼ1Z(M4Fb)]ҝZyhyխ he+*ms"Xv(zU1Rw s3Pa*:'wM!ѽ %.-TM H-W}h2<3ߖ}P z;>  $rC@YAx$b}=W3wi nXVF=*)\2Ns3)yq4%SQZ418hm`%/()mH$aR. ܒC0,oߤD=6Zu59A3DV(bV}?(Q@2VKϖUuH7&{-R:L]XS9,2B_)pcv$O\R(BGEf>E0Npy0=D")ȋsK#GpႯd,l^ w Gv9ĜRkpK<1h!HSt FCL|zrOə(o@P"EYop~u[֝d3'mb1/|5«>2S[0T'6cnUIx`&0|]0#a>S%d[j7f{²NjΗsyUAkC jm{sD9@ژPGW jn^:?(w 8 Q<6A ⒆^A v?!笙oZ4w2lV<*Eƥ5 Yue/MWĝ\.Ta}y'dt߬rYskXZ+rc,[}խ4,6}Jr ?$*a;`|줎t)̔ §dAYVe^2XG-ܩZg+hniR,hsya Ww㍙XAڛi:l) SOțɜ</t 7w1HH4f=8h@.yU6A{wH]U/c.BZҊ˹v /_~m9;F eOvZf6=6{;\YN9p[50x1ff =fנzA>HϬIJ /KV`Uz@c|۵6W3.;ݯ֝# La-]$sٕj܃qJEZ )Q xA&,BH37JUš":7퓒x_ic} qAE! sp`_0euGމqO5hDH-ӮhUK;Ƚs>҅ ]~wNXGY~` G}Qi~^d^GW,񈱙顕MdNetk\ʢnd?f7_"%9Ej!ǘ~קZL$l^@ܣ_24+?$5A 4:b Qk\7s4ʿ0պuX7ؼ:ߪU}tʛ_+'-""Bc 7moh~O Yb{W[=z!+$9UKDn.(,η?I}Gjo v >IH)dbQ4TYOnH+~@Dy1PtQLޑ_{cS "M!mjhdV9v죮bb33Ǝ  ݭ׭^N$yCŋ-3e]YҝQU.8GSEcT2eY 56C(SW+zR"P\x!۶ιy*vғ25o> TzCBwiUW L=-TN{f68'QT ).PW,|\6)NvbU |FP'XXXmy~gYPdg."4|bKG8| OMH<<4!)+bQ0 uD?Ez1J7ϒc".70S8 LM]j%F-% Z>RoULmt-ur+T5X-All7\/Ŝ0#v_@1\\]LF\ ɟYbg$x?ߛmT: ۚx!DPF&mVR.Է9I ICY#V/v3E?Ҝ<~&ayيHCǎ&`eq؟h{}Aaq7B>Y;UhB jӃ؜p5 dQ މ|ɖUsiկFFBRObT>D{ZKQ&'%jА278"w*mKszCpK.PQϟpМ:wjwHW3y2YeָyQ# nxEvL7ez2kvu%}Юa>=ի旦 &EߙҨI[}6q؈DC7wQY*^]8 |"6sK@|0i,.d A^,,}4 hXj&T>aA3#nG&z#tOo28:izza['{!i#t{7xLD6qүloQƤc[iJ~*65V+KpoM ?*YlSbD/,ڋ~/}κ\}P9M!msE׶‰F$jW4dG0۵."$]4d1RWL(boG(vm񤧕;ǚ-26ddk?F bVX%Lh2H@VC骼1A!ybIRb9Z r]_]eLzH^RfO'fra$àX(w$<5sT<4WcG0+)g}`mLa>j-G.\s22ټ]HbF]t3rN?`\Wc dž)IQ8}qȜ []zm,~sYPB2JU1[}1en$l6`AGI6/ ubvba&{pxN"U.E)ӦyW(Q1i3ٶDq!9ix떷w-`Vѧa ~ع]v*bTy W>@RXD@ T'T#x7 bzF9l4(Ѐ-:$ ,H Zw y5=( bCv=7BKjIIluPAB9 e`'\8nשaC\㏝N R>SjԧJbczE%;ڞ8\o-v>1fJ|9+8d}Px;8"l؁%6nHq/LtZڌ:!T=?tluFʘieܣ3ΫIHͿ{^>ǫ? 'kHI=k ^J%Zay=VE2oW>%w~6I{qċ8-'!˞$\S(w0Qj{ѺbW|QV}ͰE'`=#*ߢn=p4I^϶+էy~+uq$TS:.ҬN+.9}JHۉI[Erm[V[}+\ m 0x^|& "v@&FƋ]ő=.pW \m+%s[c/WKE{GxhmUg\$; ٿfaA }>۴.)m\Di7NkT Zx@&<.UB?4톈mKHBK 2ZP""i4,yDwN/8\b?NHWց Z T2 #6~ZVQ( ێ&=8h2UD|A) _y_Hz뉌I9EJg1X./ p.вރ2T6}Ht9$ <K[nsw2Y%@s}"#E.UFr,W`qC]a9Erk&{xr|]6.яX=;}!&}Fejv ݟpdp~κ;a`2e Y&XuĽBcB;FOCƢB;]6&C%Ƶbd(Usc)"Xf(&qa5h :%3-=Jb]'[2ƥCĮY؊pp<$rDm%l-a*/wcU*gZ $nq Zu#Y\\/BueI&Vck{UA(qm!JD O5,^ME".mbtN~#XT vg&sξ孌v e"禙-F a0 2|yav!LoDJeu6D5ys ;"ӷSn)7ț+ B&\g[pn&e򥌅 AO >g-(Ͼ r؀IP= c^4PZo@v]XX,Ͽ^UtQaUOI"4@@QyHd/) Jb"LjR!4']zQiaGUZkX ^ t4cotFbtc~d' '[An Y{mD , oOFg :I cC|+_wі  7k1̳K) vLIU38oZϖJE*/rGinkM9xS.$Y~ݱ"Tf4MѮ([m?x|}!^ FZ