apparmor-docs-3.1.7-150600.5.6.1<>,thp9|/;/b%XY#~Q,"qt׽qz\nar7otwT *idxR:E>@*ǎOBϦ̅3GeͲL)Dr͟gojd-m-kBP"xv*$z_W[ey2 s'ڴMHT=2 U&b6Da7bNl؃=04^F>V,RdVSE|>;?xd # B 5Ihnx         G  T    @P`(89h:^FGG\ H I XY\ ] ^bcdEeJfMlOud vz(,2tCapparmor-docs3.1.7150600.5.6.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤hh heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.6.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1745392364 3.1.7-150600.5.6.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38382/SUSE_SLE-15-SP6_Update/108ff988527a5e410ebf430fd63f6431-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII text*"sO˻Putf-8938bdf407102b7ef40452fadc9b567f46eabc24fb1849fb036ac59b1988d6e82?P7zXZ !t/Q]"k%rNCQZuǡjע|{EC6=)tgs 7 e=(}xeXb8@ 5n  4:\Iii20$m3Ipw-*|@'^%#Kvc, Fn˥j UJ,n42d<\. 7^{Fk?yw0 @;;/c&9f"zG HGZ\#[YO],?c_xЍ4 rּ,[q2!U|K fDkG&f94,:d $p;^InBP!o+9kUsJt( ]3[/l#bhDx& dOv;=JɻIKl3>܊@ *,E4|dUYHLjUl^WX2&0c+q}]~+3)?1}T+ٳ 0ЮGŜ|ɋHwBw`=09>5p!t8S;)cvcG0`޾W( ^9kta?#Nl '>VJ\Ndxw}~g~N"*^Uڃ:z%1u=DLr+ q)C*aдE]7IIR )v27L-4k1h(~Ǭf-}7gh}x-^fȾ8ͨ"ә$%s \lyNtQև2J *ɼNVXJQ}qm,0yNp.t0p'9EL*Y Ruf6VPØKצHdOʆ8yf2*HZʆM.G7j5"-a|+gZ BD򒤚 ÕNL;nܮ)N&m,muj*7?N \vEaܺ@b](J0l)vv-{\ӭw&h#ˉN!اn )k IAܔ\@knb(uPuxQ0FjM;~dO'D-; j(B .q2358p0wTAQt훼P}VŵAfM7M ܃2>enuQz0LX11&9f>8 Pt'6Μ2R.vmqwZԩ!Ks !֕so]:cuU;Tal D 4&PZ LڍS7 CdZ2;۴5ݙH 2[hӣe|YH2&)vLW:x:pHtR:{mokH>k ytѣp8Zڶ#/6J TlȠXJkk@bty acݣi-hee@.t$E%yxͲA$;cCZUn,^#:S?0 "Ѐ4fY3Oz`PXGyʰw>7{Usu#ZߖQ6J>XUpBp?rknL7Ql#m1eE_\̖t;wݾ;ᱪL׮Zď8A$%JU|&DcIQfeb;::$-9)hne fU{S[Ȓ% R>לV =7g ?=$ }o¬ć'uG# I{?bth'UeQ~ns]"6g^,AH4K =))ݕuo'H?=4̶ N7jtEb) `_oe/u:$dD,X?_Bmϋkt[+ARK-n(Bԝ)ex?5o}9%}"-xi^%̖B+ƀ8H\ɜuQ /ԙAۅz#/:7U׍UA!P-O]ߜqRj] ߋw^91p|ٝFڷhewQ8}Xj{V`뽌zU )^,^~s;:GȒ90:ئ~ 'J,!HW(M%MO'"sgxbIWۅl8qHq}7UAQCi;:mgїdŶR}88d58?4(FFXį9ȿGֽHK$DB8ጹ#;ּ|WQh`U|A7e\ˏPUjV,;lmh,-oF"t@ؙw BZZ2=Ճk{ }RkM ~e QjjE5Ckqepx!ԽJksrYҬ E `}JDcAih~&3! fn=8fkKlZ{ԏNy gs]Vtg5Hٜ}:]2n DnHTr?4ZK@=&Ԑl8z._o6zycR _9YBx +!q@h=#ci\X9 Yq{ɢTҎMm)F(`="C(ׇmcl78:XWH ť eUc[Dru7 RŲ)EczDzF!>FM$Qb;ܰ5̾-8[4ꦐ&{4/{71hQė6#_=MiGSt>:[Jnr2ӧvejE-a։,דݰwf6^9 :s D\H؋7CalCLC7q MSbKP,K ϸ29sw2Dm9*=zkJVm9 pLGia^Q-Y=/sb|0fEmn `"\aؾ=.PV !"} K71&jd:s/<>~{8X54p>?E3Z֛n= U O>/0<#ԛOwi`z@H??rgS#J??$9ZKC`+PQq⩨wйd*ncϝ*r)/kI9' %-Ɇe3W% 1z- I#,ZDcoQ8`4Pag97.P€ b{q,WG < oUzAYlFΤnw !&A]n>6FFEǵkJ\]k魘ؚ?HE*qP3qeG (CYf{" oPfsӰ 2'Jÿ un h{,Pso?"S <IEhvwaw@ޱ}Y>zb+_=ßO[,m֑ vVy`HA@?d8-j$_N8v2X6<Ng@?=Oc*oB6nk;/G2~FK}Oe+Ec6Ij\Ed9gNXq/ 8ddu"_cۇ|e 9ܶff}] T֥ %Nk09YB&mŹ~b"yƒ<&b=,73@~iw 3Er)-L0b'7^ofZ~y*6YK?^v!`a6:"#UfcX }I/P0Eh_4mk q&ۯDx$fsh.""͂fV=G f YݍE%N~PŖ*q{3"@d^@-lntjod4s,[&ԙIj$?_9UmvOhzCG+}ӟ]P 4Cn,c gPG2ۃ+44CJԏ0i+kԬlbF+ylc8hԳe̎3\\ ("J*pH'Z iOFp{h+' A4iQ5CC)ebgj刭~?HC#yY6g@ӻpuA{֪2ϲāp!A1:RжM.[vƹC Qq!18+D$>o^gX"yGvB7K.Lgss~e:qTpj",o! dX۞{h9tSW^)K7돰\J՞ܬC'Nּ|?aI D{݀k9̟zS\+s6Qv\*[.P<)=罷-NHUceunHqCSlW`Q X(hXVB{LQs1bW1TtReoN->c9k>>uM9+?gSK0>b<пZ}<} A=k=`8eA~U e u6 YXZ5U_r{"&6ϪeIHJ4V_ GdwZJ]pNJAB-(糞6Mq%S Ako,3kE~CI]!BG"`asBR\kѹ}ɼ 25ɌZDj5`ٴOhHu9 HοoU3̢KGIӝB\Rn3M%g W2X~J@99\aIŏ,r,͚Uͺ+Jb2LSA3)S`OB\% yyt v1wd߿J II4K]((bbK`OOD+%#~6@>EpL  )G ֵ-A9]aޯk_XnskMO8mp ~#g(oO{4rIsMG0OQ A #B}x)ޤ<)w`q9d$+8pBS 8 gv@4@;zm 9Jy-~H0] U 1elo0X]?ݭMdśzJu|ܟsUdԸδ,S7m@?^jSǥp0'gȨvkQ [aTB2Jl-H8h":U}6U2-ӌnE#\_W 7:Ē=۬Xݟ~Jk_\jlc LWpF T" Cf_D:-T@bNrQHOgo>`u@0R+n\̭#s$z7ԝſ99mJOrbV5! kiQN uV ״j{`)Hnxh}W:V]=q-9<5MH?5|/(^/uޓP)lL:藱$mݦ K-rOS4CUDu eq ktbQm2YoXɹR44F6CIR ^<&bdI"ڼ׆L~vƯyJU_OPV}Z5iƆ$8^q\@ڬ˳Kxsڀ.3eО- ~@('03ۖTN=~g}O/:Ԝ>,}VEX@G!l"DIO cUA%,oubrӽto [762EI|"YDI՘d42cL ~fkv+]\P<9r@`k%N(f4{epܨ-QGpeWX eBL3P6R9[ ֹv=ڦYT9xq]؀k6ױgr0liKT -oD_EUiO-;S|ѨHsIJ,o^e'M`M=ZUzʨk\bLRZ wUrRo^zL W>AViQm~eUߠ[#_Mߥ諻mXqȂ >ײ(?]Z9j@YǪRcW[?찬Nl,H91VF6VCAP >=}G HKj7o$jNLf'p77bf_D?P1CdpuGU6oX6+R}hDm+T~ TL(;&O$t]~%q0n-%FOn..Zq<,#JC*KLS>l wLQ\!^;+;x;D ӛsƚ۸컛E蚜%f~;xR7%pn4W?/'WT@=ŷ]'=ևС]] ʄqô/{.شthbt3Oڽ+hͺ%FvQpHr16>m^8$AUXgJ2bk,^'NܲMy 7T/t@ 0|HBt00~*r"9Ў,_ls4-,I׆Vp86V:s ֲH*8ǯ7"NٟϳO"ÙjQ!A1tt(lG.ȟŒ92Ȗ^]Q”ض⧑OAwh.sA\&tU[".vdžHͦ3 ;PDA&AkU y"PR2"-3e}7DpKPepչfQ+m3_[d> l:MX)KҙL}>I2+^PWq]X˳-~O8ײ N[]g%2vN&;3;$8*Aؓ]Mmz3n .hPZ`,d\G?3Q啾'C* :uX5=p|U Qʸ1/豺d\ꝕnI0G9Gۤ;߹. &Zu̧8:Me'%DџK goN9󨚔_+}Ȏѷ~r fNZ)s{7+,h?³pƋ/CZ ng &n[N,2lۿo򷹈)$c:sC =kIRwC^1 ]ZoݸPmnw6\t;F) WbN{~Ũw᫣3ՖiM@k\F&%P2Ai6B6Ȍ'҄=Hr-,pX a< )'B@|@r{z+{K,g_ q8Q;p5DCndhJV ? M+r[S!8Q>BaA yQ?Ɨ@Cw%+vcunU-D/H]i/yl܌ȈBt%*sjQ#+͜qޥtr[3-OKe_t݀ wmY lܩh5@)0wՖL70G VgQ`'K|7} zf '}?i:GyXרzSZ׉C ҷ>Ud^2.@* !aͽKJG}x&/}pѸFJك(ݺ!l\WOmj.TI8I ޣxwˇRAu #( )%0ȶyCػ?_LLhUwvRAu>vP+WМ8G&s>O~LģBt[~)Yd̳?~:h8ìZy~@+S0 7/>m8AxWݶ nbR6mmHVJOk$=Ee {'l:pu%kxnU`{pu|e:y5f:҇Ȍ Ϡ9UUɢIu3'G$czUCWqm 2Eaݰ  0Z`سБҹapfĒGee~n,iDqF 0EnE{_dYD LԱb'[,CRJg*]e~l JW MK;(xI.4 U&jsHƮX1 ]n{*I]zE e1ˋmo*mTJZeX6 c*!Ok,YA\  ,v[}|L>s-ă^^=!T(eN YmTRNͪv;:A:m^+ :>`YjW14k/~7)]ePgg+`k"cq~j}HB/h370NrmWKN]1Νe!|XNw$L}Jt1@^]<*m4υ3Υ_#u9aFy{P`}U/C6!Ҭ~J49W_W@A?96|Y`c"6pO Gctl0Gk-+ FY\(QssC=%ޝd6WJ>LI>];w4Nfuzֲu64%H7=fz,qN h(ۓmw7bBu9Kv\<5A7G\P >7{Q.|};B<>RC)ޯ  $["̏ E Z~!*v#5 Pᇄ,Y#QQ=)#HG8o Ұkd YZk2eL@i][+2%"/@t ,;S06i2Evh! ۤېUיDbȦB`]o3owhиQt $Y=l{;)PȖ{0ǽM?v./wì ȕUX)>5I%쏓^a+**j Cgq?^d2FO\E 7H<`UmѨuytR;Ҵ=z~#(6ZBS/?}u!hM ԭdKiw4o Bjj,p,״Aڌى]{WitՏ=Ǵ\Ӭ M"HOF3Jm~=ͣ "t:_\|өGkOU}/ hݏInkJ'@N|7fH EȴOttNn[7Rod' Hyf|xhdy1R.yn>\{rAsi$T)0dZMVktyMn怇嶙vo+b;|]1q&"7NS%+y\v=Kyļ+s#N5Rjt5f- ]o )J!w pEȓ\բw1(L Kn ~JOmʟC,LU7Z#"2T:M+`<=gAbR`:( f1es|1ڔv ڭJ1\U+VhH%QY.W&Ch6ZKZ̧UW P ?VCrrEmZPʱˬGc0c/"\~}AR zZ[G<-ocZ:ILn0Q7kmk|^Vu6۸܏Hb3_]T}/2Ħ jJᦲi2CiF1%;jӤ&0*YR'Ao[OOOb`cQ,v/:A2^Nx=.05ra@- 5%LHƒ"M^hi7}Ki_lc!7ECdĴUJ)In[ @;CÐ5Tkffb oS - wV;`%WNn%?RD[oOTeIER}|daߺec;QH1rɾcweji/{mɑu7@Iޭ,Ѩ} ^iA5l}9޴O%zs zǴ֮@4H~%?5ٯߢ~CYvXo^7f.,#D H'^ 292똻 ON^w/şv;&2ZX^78XSHnd zλscps&>!>~ZCEI51kH=qyz٪?0"} aD}tpo%1ņ^"Lu Vb4e{! ;fķ 6ܩơŲPC%ψ(fEC@Ԛevr6Hw% (9j:~|@d!QDkVm%d#}_Jthc+=996I.ld^,'uĵElBkU!,˾\6Y ?TpG@@ z>d6c\;8 Ri\Y.ܵX3Y/!L*V*쭿N kI~jvDq[[A. 3t4HھFC[lJyFԣmR2U~M!n42$ۑ+^Wǰ _q8ciSZ,tynPoZlȔ oJsQr'Ry@,U~bovT:v)"頇ʦ:`BԕFxw/)YhV˻a K)ETAmN^Oʹ崴,HU`omv;015+} pisqܩ\^&>4gln0R[*S/W MAj3h[cSqM Yxs& Ɏf߬5 l3j":$<)[gm1 3l)VPIϱO_PlLd<d/aWYdgDl"DcJX ($z'^g榦f ܨQq$ >ql8iAN=:h)qBVP/Z*'#ǹNUW:'F.y~.ocǯT>mxZ\^Nun+/1u&~"K?ls]2Ϙn6T`IeN#)R/f5>#l*T*/p"+֋n o$) k4UHK5ǨtD)-K0Ցd\P"x:}XbS8f_ >72BEK4kyR؄-@3[ULj ‘Hg=uԟT1Yo\ûC߳Ry֓?pͲ⨘bZ4-M6sN Idaixm$<#9c7ׇG2$γM ^&g 4.ndߊ38zv , `WSY?Qv%Ƌ_&ܒ{Y+tBd9$r{UQ"fE+ӵϒ|aHYEN=o9ѓj*#&;BiD f"8[ ٧~瞅)s?s$S0=?DnZoTЁA?̏=Z7ن;'p;]J ,Eo. ǬPqz჏p&yh(B/5cZљ2tmP 5銲U`c d% /X₊2Xq9tVsZ:rÔ`+ exƓ#uy|xE c3%A #1G\kEb\9FN*ltwE9CMakLiN GrT#l k'3ow_꣟셉tet܃b !R4 f ] 4 ([~' tk"W2[ieo?/] xof>,CTa = zGg~u8 hڊ%h9\A@ʥI$PY1VP + "s0&Ay8/}$`.$dC!P|ĪpȠ\+0@uojC@ehXϠ.ҷ]I % k EFNN+ g؅OXؑGU(ϛ5ܭSfS<9h/Db9s /|,R'Wnۗ] DxEG&X4m0qx~k U*.n?'nGrBU)%(O3Xq2;b'.lok2s _iU-1}ai$IY xFg߁Vpў$ne@5o$uGyzEGWn`m˿򨉶U =n;Alkzkm|yͺrzUF[i y=K´!F;O 8UTN1ѿ%ȕti>UOeUbPP2iMH4?OWnAt<"5j0?mKl!h&hQ_)*W<-rK2 OGDBnW("[!$#vJS:TٗbaS%7g"0C5%|[p S8&qe^(&PVc00&?a8qan4׫pGn)m`CACrY;BY/Zi~ɽ?R)? .ou_?^#׬3cBԯH.РhXJi 9`7s/!bQF#̱H3 R{,kbNd Rub~[#U +MyZ{To&,`[ֵK~w16χ9Ôpq~w\bn! *>!J'ݴNh|ڦKH[~XWaYVQ!VYjR\-qJLl!.bט:ߦHaf"7P [Bv$Ua.Fp>Rb%{WkE,ECHi8ƅت0 ﰧDLͨ|31]aTjQI a 4g⴯.a%I&>1n/z`תD5 + OQ Ig b܀.;TgR6T3מY!O^ xY<[#Wl#O g(uC_>s.ĖG ;(B9\۲[j2wB0SufGq4}-׌$PyPJ&JXnP: C؅kb8!WX!!GؐE2EGη,fӂ7CQ(hx͊34^RC[D9Zl@ ƻ4,@s@0=`7[nM_)+:Rs`:=Mn^nnz -ik _,f% (\qV3<¾pZxt>|]C|LM$f8Q+W8'`Ȏ%w$ܲVTҽr9㙳M: KW& yiSWz`iũ_Fw49"&)JwT4! ,w42=5O e}} ߼&XP: t6OEֽ0ۙuaV\([& `4}IHXղȅ ȵz<|_J|&fhܝ Ix\'-f1chw(W@i?1PeV_/K 96%ٛk/4)5k¥Bc@6աlpkߖ(Ts&8kX YأZN!'.帿Ѧ}Td*%?C1 Y,}kj5"W2GeT]{76ni Zsy5 /^W}P ǂ8GVW{v1x!ڢЌwhb{`ϟEK7Y6vH̢crE5NlV>xêe=Wn>K}Fe |,/*M_q3OJ_+@)8%3˨ű?Il0rPv<:=#D9%.k3c(=dD75;^,XI5~) #'j,)vGAkPW\u"ˣz I1TXEEJw5LMb|`}{vx1wlAq-[P6Y+F*ZC;Q_*h~,\b@6F%[f !_l'OC9z/|/1JwvuRklaWuO@E% s%`ӹ )I.MMfSu 3BU6E: 'z-{t+ \uDs0ViV:t5DK,=%R$)lA-FXD;71rb'P1t1x6n꙳O xD$(Lj,j;)0,d#y=!h7NE q)9 k` D)-,8&|O1mZ;JQ{;0H< ոO7զw1GG;?zmySNV0"c7A@H8Dvk|q=9d! ?)(_4:IVi2}=Q\ *[! )Ԓ[AkYw8y8$2U-lcj~ޛSt|#c#uҠڏ? X_:[ Wx1 Ǿ߉@dSNv4X> ëAŖnO丵 f\mK ^fjɐ^ĝW ?npVlEZQSn!3(IaR3 zHô-yTXE}PqW^veXMXAQ<4WٸCmNʁ=NݳQ毚rMF;1'CP LkX;3Y9ZIs%SȒ IûRQ] ".pSc WV.VıPvLRO:!EZ'gh 7N&?$KpKpI .Zd͏|H!S9iʯs `. Kr '2<Z!Wll]ㆾ8[wܨیCS'kaGv`~Kz +z|-#]N~+"__{R>U#ZmrkbX:a"i=Y-Ak^GZjDF?m5CPn90]rt,y=-+M]8m|m[oBՓ `LJ4+~N3[% L6B! U+X Wt҂H!§wXc.k-CX%PhnWm~3,$bR%UdԇJ#x,Mu6 ^ ;QU9gK$!rX^;i9F$ù ] PB`$týT? bD˰0 ~@=֚ids1Y`~YP\k*LlLvDE!ƥ"R$#P닸lO 5SRa ":n:3nqo&Hrqވ[`Ȃ%uoA%{!aQ^@ y"&QEeI J}׊n HM `>w_@4oŸ`c$z1 ާ WDE'ƾ_\^A??<2j$=':1cbko6 k5ȔC&Uʵu<NFb?ଗesN:N, 52=A{hjþ'bkpT8% T-y je(s4%pYIRM^ _:6bQWE#@VӤFBR7w'lfMFr(MO~3^ ‘Ž]cr-vEDe(p#$k,_Ŝfvއx IoPXj݈McP:HN*Y" a:ӢĮԷjf{0zaږ7aq~T9c#z x;Ή5w Yxeyrm:Zo% z3!%V^wɾ G 53߾a\!eJGo9p^'Lj[X -hQvkgJ*S\gih $DE EO[\&nS.iՏȑ6IO >×U͘I_}3,Snf[DZŒFlf!L-]YeR,J9}"kDUWUԴ~[cI?PB\ryWMtZj9ƻՐmrbY&"w[E;3y:Xm×jP LNG+3OLʹfhZd,*$cipF88'W61 &~ ubh:Ȱ6Gw-8 P85H]WFbd4q,ߜŔhί0z== `~JN0Z;׹ܸEB-U3U*M=An֝מֺx \Dقp^2бZ࢈͈MDӆJd:\mf흀sFb#?WJ_d:#!{k8sl)Ve|'5:ɟy|T'7KAk>WFyߵo\0ךo} P`nĩ25tی7vŠ`1]|@H*v4{;t(ԭ+`uGA#*\bPpdwH4:z70QS6Y=lf!"FϴR4e.R3߬siC X2$6Z*!8 leKqbڮngN6EETe.X/n”-5:1WR ̀NBR&A-Qgl ukə=`x{BeE>9N A>*qt}լa5}OX:$tIH ;^+] oF }2k JױQEY{..\bY3}: JSAY)NtiKc>^ɒaz%L6FJf4aQ*t eCyԼ fcL/'Jiܺ{Dw_~@:82%:j3_ؒw'lfeFVyL2&` rEws465|̂?9jF;6R1gN#1מ:gcKiM[\.0Pj dna΄͹rśR֊Sc-ДtvY9`ԭ^tlS_5QMxv+mRWG8;4.[lӨ3!EnFVև?Jwmw~DS$ mT Bcpsj}_W#ӚIǘVR `};z/1v"{W_HnWCBkp5?Ajl?i ax_ZUDz_>HWCۨK~4NWRK.99zZn8E);QUĺ17}A{z#"^c5+' V#yFٙtvchώ2q(gT֧uɁA׋;jFe,e#}D+Y>24FKTiy{I M6N&+GK7T&i>aQ+ M٭eZp#bgB)j]=kBo-@":O*+N#{餜 c?O2Wbs=@cdyӂ pcSW~T2V7fmws\ #Mc;Ѽ)'&kUgƳݐhcGP= < ]Ln޹ 7m":U2 DmܲG'tpk I,`Y ݌ё0.F4Zo1Rr<)Gx.#bLd[8&tQxO׺=`/f@ys":ɭcdMJQ$$8Cd@7}()xU%4- LBOBj1,kĺt?)^} ,$ Q?>+%0bG~hk+[+FhixK(UߑEass* ՐsIfXϥ3HmnA#bRr)N WEYAzu}iUYȏTZ'8Izg&\6&o{mA P!7e "eR ]y=u9y_b|Sj7|J63 EhX2, pYKVO5 xnG@ aA{ r@v&#[%@7(Fwc"!Ey;D OH)+UN3bUOewN_kDfHĵ[%rc4 ԍ1-"(yrwvEEv_7Q|,Up)<%~x!oIVa0iO LLW4ojK~7y.go5dM-?ۀEpa_ &_8/$`ukf4 с+CKNn9N>5Rm0D,\^x춼z68gvjxSw̍W8˷Qj="ծ*j?&.?e c3:j:Tvt[v]%g^V+Z4f2?KhoP2*/}Rl՚6 L xiCNUf.쭠34H?5vU"B Q/l_8.*Co v EuSѬ}nՕl]ڀiÂ,Rg8"dՐn 832;48lrOۿmm?HC%;kqL[嚤>x7;A}w#R$䢷1Y~7#Me#Rï澢! W7A-]WMdKfdF^_Zfn1%k&Aozڡ#Aܻvۡ@'"xAf.0ԕ1/tc$fB: k{ -b0aXT/-ފmbw2tu+:Q`$LaKR%P#m{0n𯬀MuE+ق1 VVjZyٸ]ڍb, cDxSBZYˊy7m_ bUTd]cj&ǽ/x-IDLfR3å61kߨ0>'JjYAZ̳[E]D()Nfse@L+7%xKDvyEͶlW$L8Av` w\LM@x񒍘(p%2ȐM slOBܲz)b Qf\Az*y~kh<|ITa.?1Ov‡?A ( $Zd.4nK(W 4& PH BŞ B;UZ_~m4֝%}#b:h1 @`GZޓ4~ j`'ҔZ Tq &W=B[!I"0L>PӾ}ÈhGyP'-7neCIPG=!)qSu@vL}5f 9oU-^hgxyjmE$+X|5|qbUl+]7AbKvf(0^tKDPL^| ˄\rrOɉEqv5&{KLj|',wš,.iwkz\A([sV5}OTe KmZ؉SdAK ̻)"㳠O,m51Yk!PMiba3>Fa=Z>Yc>5tEORȀRߕ~`Np "Sց+|^Oz8j}H3=gZ6(CSB">lD0*-m9>4Y3VW7ѭt`UN/@h."#{$y΁ VH}da1u[Tb'1.rMS1C6dΧMN2/`1LQBH0)ˍ;E+)1EU;[u8S8̡zF\^N j.>M*C=ҹ2(TQ0Q+>XPp`7~ *Prպz$ HW@I;æ)U'fېRoZiT)KvpW % &zb^ɥK^4]M|BR{n@\J0<@w3 2H^R(|sH#F-'(fVR"[ӎLq! qoe=eYOhJh' "ʉl*=nAP"\OR6/k<]'f pyk5\.l̅dX!w( .Fh{vrZ}[DĮ#fDĥ4n@d_N?XQNa wvj l|G/Äj:,8}^vİykdoߓd;1?SURu$2`L/ΗKı Bk,f* X0&c췜ثXLOEpI :~dRGȼ8؀49[s3dר;n٭Z9~X"5ZѦ;w+WC) EֲJ: s >"Yx5Ľ>bt? ktɫFi0爬,;[Vi `|{(!l?}p~}XDRgX.: ۛ~ gЛ] EUJNMC5kZ;>II·({B3 c|%}Eaq{ߐvNqn[蝌 JJ=Ԡ21(6X)<({ vaMyR#"Fd oD' @IuvsdwdLT?Tv^JtdЦ46:Zr-d靰 mXvLh.[8*WOOe_^ <0Gbx;9|3r޴XylU#u8 cO#uFL~[.߅ջ:*,rυO0nPׇN u,eo>,=}^6e;Jj@ >_a̭p/6.q.5fyyOI~®cdsVP2K52Cw꺄eqG%U\ _ў9\$?6 VB~0IoDxΈ|˦JΛ;bl_܍zϏ❹?҄>1?mRwR C;h\xsL »ڈfQ=`z;iq.n>+k1l1&F< GgeVs:Hi@98k5oKbTӃrQHdU96Urzb\RWYkͪ"OF7mȄs;2> ¥Y VQN'Nd*]^QWHUYoXlcNKҩ>29k2Ч[zH{` ި {XXů ^͍N]M6 ṝ]-i5?]ra`~ lϯ7!?<2iYIkVs:h2x䃄rK0bp_(d4>6Mp7]pve`)h>B1 L<٢8 "~ZֽʹF+:|_2~%*vsޜA+,ӣxJTwM %6Al52dW˶đܻΝ垗boȀ5I-wI8/Q 0} g x+2^)!p8 j}Y/gn1=A1~$8MpSd= *J3 :BF% W,3!UbY_=ھeuT8g+q`>[z,::b} N]36b78錱bRdX #Rug<krbu( d$y_XyOW)/pR?dP"x (t`h~@X$ݰw5LF!D2}\n唪ڟ](SZL Vo|g[lOASF%?-fyO+v}aں4vQT*&{M:fگr!6ixb4 GUu0<8J;NH|r@<Գi.+@c5qk9!wZV*3;W%_}ÖgVJʪ9@D\֒` 4etۄX[`Vk=6>۲m XN&)S|T#2 ve u^V}ȍHu^ `:|^Hڟk [8 a _q돽J^`(ì=Q)P{ƋoDtB;,U_@h N1l&&{u(?gC=sv/|F lt vGVS\<xZ?Hd}`Z6F )| /H:0)(ǥ#t!eqC(vu-+SbTii{ L܇Di %ʇޅ벨+ l7* v%7}VEl?7Z'8rDU% s=Bkh@$asF#:hG8~,s8G٫הWxi%%ljHY:AnX9wBS0fS h:tB%y^CƳC گ 75Tڔ&MF9Gv" fCIAu_9 u5ʈdPs[Q^mM\+[g;߉gҴQ<)g@֏ŇC55I>J]6Ԥ><q/?^~uGT&nͣ(-kB: ꔻ "XZA~v(_P%/uAq.hnsWJ Q_)'pu5UrBnN_YpPӑ (J ~Ds}yTp0xMa fm~0,gIsA N llm3(ě,Ļr*<80 Ճʼnї~by(oϹp-htsאMv{ddc^B@brK`?SO}S]|a"^iM''נH3#]g~G%) yF`c[Rxc45iq JzZv^HiIN?[J>CsYlqH#ʻ8_zXQ:Fy٥^P} :jL d墻xLËsϢra!Y۹W!kɗ!KIX8yy9nU`:],E{" :W9_+(K_=O44sX]x4ѪQjѐm@.EIܵvjש"+5Vx~ &q-j=\>)9@2 @c=N8ErSj26h-1 I q2a+Ky&mW209]9'vd9B`3- fKx2Āhj:ܐB澎OhlK"X3%9A MM3k8?V`U cPU%mx&^ԋ 3xNpx!ՑR3D\JkXa}L7I(@b(@I5\S+1ۍ7ok LY Lm@C-V|(hT2jq#ᜲs<"=gR=GAbP/PiE8x7zJ㔷TΖW4&ns@fe2owJ[+lH,)\Y)f|N?&8̣zc@0,?5=+s zbbn+0DHN=\cHE2Ӟa'ϖ!ƚǣ0\ȩ@v hv]m!"oSfKF*Un$^qz3+h1+E:v>[*i!mg ұ'd`s,ճ430fk\Q?~wU-K;7°7, a#SEguH S [ R{)M74*=S\"Π9+as }p5\ssxDJ'C;V]ۛ=9o?O#)4Y4M.9ЀǚkmHq Q% oMVGyd|>" hBy?Q<_s}Wxf:h< TWOЄMH6XUgwMа`*pnbIR4oܸ)rm9&-~}f.J 70^㡠3sp}wr/"; }CtĆHKi/Zjhl4'.\WM>V D,IhjҘT^V4mVK.Q`h/Vޟ'iy j8 KUQgg0v"K.JS@"@ӄ>dhOS}kga7 Te3\5%^NAǐګRK$̆M}/Q)hEMӪF}gr`tAVp _wU@L3 4I7fiiԡݒXviy)H+uiSkk(@nTA)mDΜpM=+} g07gůlg Ee g!?Pܚ􊕤x'l;N^g+G&.vj89ۦj ( ,jW raLe@IQL 9;t_ HBuzY!A~d:\fTT2;IZ?2P4-;жBxƕn3iHvC u[Urbԁ,umLPL=ڥ$֑E!Ax^#h{2A0'#q| Zl-V9ޜ+#aпEkP&!S).w(7JPķp Ǝ`P.yڨu }j7R6MHv>\סP=ŷ, uhr:o{l ?aN-0<Ɛ)WP~o#gybR" Q\u(TLFNX.+Yh2i&ro֠džeڮ&Ti/Ӕ)9,o=+y<: |p-h #G`s(T*c7ys.W6R7x/gh!`.c{ *[VHf#Դb2Vc)JyJxc#;ɜ4Yç|TAFvay{ v=^pXCr k_lm0_|Q}VQa4gMiQ?#RZEt(e8ŏ16"%rCBHov\uXa hSp ŕ TuI;&z;;5W"n1¸h[Ich(޽fǷB#7~0Wل7^ܱ BԶ8:H/5YSN TF}@GS R;Sl. wL猌?U4:^x沊p)M{쾶*-$1:L[爍VUUu%@yk9n{JD㡏ɨ+ʫYzc*SN3ao8wpP񷝡"fЧ@Ay-}<+@=Gr]BY7oiEa? b쪕"ky4RzTzSӲ<0) e=}tY7Wߖq,zW{tGrDXG0 o0%9(ibR=@8>7-9ubO7W$jáZhznmtq4کnv) h]dLCTMu>C F[gv>`Z-<6ofiڶ߆|@=IvU ] 1 TY2uo?i0̑8`kZ1_V=ţްHS^ |!$-RC;K=ոqՂ.kSۛBXn{1%NfDav}hei^ե)#ͼx@sV8u- 1$} 1qA" B&ܵ9YDLd*җ/Z?@*g;[m!>7Eبw\`U;$ԝ7I1T䚏 Ju˸$ط@Dm?',Q"RXgPDCnuHTڴ<%_V5%wQ5Fye[d{x.)k{= Gk?Q7%6~I;4(QE7!>Gl()o#lQL yQW$i6s}NQ s'U/l4w'`b딭.(dQJh?L@ҙ*oP@9|J?84Nt$Vlmɳ(m( 8 AYKv.oِob0h+c0W,χ7dl#giA $ٍ~/bchnyʶ99zHBշ@xLN3@[d+P<荂3 ŅRw|j+IDK=0@64:Y%(%ZjOto O!J yq=r|_h%W5r)3lJ 7"``uoK)7Vx-S7uQFD :tk4HVpB(ot@ĢSK;}=(|h[Qfc:Zv50] AL~0HĚVOlބ2ۭ4^R":"׋a" CMD?-?O))/S 6l(ϣ NgW[_ljB@r c[;I \0r?R $ 'T5煟aO~ęS[94#a<$麉Ș>wE1?/)uOɂ6 Hxr~\> 7 їټNir>-hbN Ǘ?pbarwZX0ĘOq6#^0ڌwvoLЯ^LJt`Iuʕ vtbWkLT-Q[ӉdIuuq'v(I;o"vzu Fk77,&=u|jWGX,w`uPB{V vmrO6g[f]2=DqBϪc.V({7AAÇ޵%Jٰ/Z*Ss7+oѠNny#No]S5bNs6](3(x V?XϤg1u߼mʺN9R:g~kC8;ozJ`XT/,"K H^ [!-;(`4zM~؊B̂xIt2?V _LF~Hv\#F&SWG]?'u/ ؗGx|nŹBK*{-لp@jQT64&XR{G٪V{Ӊ81ICԈ3h&Zb9sfoϒ6e[tJndlYX9?9ځ_h^Sln^/% Myg#7Z+6 tDHt obWP/O?=k:M|M?k9K%mΠ״~=c&].)Au)k bZ;"b$aejNJ0/2/ߏ.= V_jd[$iD)LRhτrrӗL}̥Eg]R@!AAWjM5yKǔ@+ӓBG* 0)v`캘2&?M(x;x,Z87( 2&bB2鞷`zX\bOꐦp``-˽sbɕ0(]q=y.{:|)zCmrHHG)hrbŒ㳫kl ?UXiuXy 8j]3_GCيR6 /7!9,L VRWDVO.0?PN@YƻX89;޲r @(tP/"]hS/鐸GU`Pa_$M,/c%WG$ >cNE;MX}8S_D"W7 G=&rfMٟW# ٦-˓ 8ˈCe/ⳆVn"Zx4ٿ_ݱp XKK@.1 DYe-7ۓo^d !j햞6h&^z$P,ṕ3,kE'P >˅f je[W|7Dcvv3qJ7sٱ',R5tbfcr*H\ٜd o'&"j!+Cov#tP_qle^n0.v)HD X3\8"YJ">I*E7#hV@shBd :WWZbDfV:3!wޒ 'aIY<(z}^zp/%<7gqˁjy EOSew?IpG֫{SD0Ov/) {]]hʭobԨ{QA3$YIH>g*ɹ )Cܐz~x8¯+tϊEd{m9}+#1GRY5kiuRaCAjlVla2̺2(8?@EˆqHq OF1 jF_ӺLmE4C}#BaӋ& zC{ĨqMKg}e SilPVuvo'Dnk`C'ܩ;߂bݚWm׮:Qn$ck$p-R11wk0*H#Z,2O[Vc:x.;9>ڄ~6.bH^]jeFJ g nqt("4k Y1:oƥ 4ougV]7t^#VCL72Ѝ^Ic>I#wu}>^Vo:9ËXU>'}g=NLTH(F{>ѹS\ .poc7Å[ cpgO$֖Shrh :x k!f=跥tpfA̯C} CQK)_Gf#G;Kn  1TM?J }G>Dք!)*ZVV䃀 ƱUp meՕz }gTbJ]>!9'UbQv Plgys!;[ˎ zk"5+7)8U͊*kAm,!feȐ騉#!>ŗ)n잆 aZX Y,G=iz=9~ ӭWx)f&s:ŀvpxcs_H9j?:29o?aā2 REp$*5C_:AUCtxPei沄lljߪqVL|B榩Xwl E ! k0 !M5rW}(w_uEYKz,U(!+7D̸.9b7t zb-wN_-/(vۣSqyq7lϝC1\p_(m02p= ?t*klj\Ī+c{;EMFGf2\ǤGmk'~`hyr'*( l%W t /wRܨO^G*ZYQhj5{+9d !qԀ$yٚDoM2 _w/CTyz+J.dݪ=\L[W3&sv%9{9$KH.X*VMLDؾS'Tg vyr_"Gq"CfS#W# ݾ8:J?J0{ +o0>o~:O"^|hB(%D-X *']ob~kJָDجVW?zb5Zf)S%BG6E,|"%3$R@m`pi q8G5?k:<EX%޼Bze([zoI i~x2 ==XYd0.JdՋ 쩡)N{u$V#2R!`4IjnUEdU"MLzk.4{aR4^\b1e4鎭3T3n]L WI,G0ͩk[fJ\* {)'zB xD|KZՙ#$QMpQ(PQ:xb zpݛ5"ϣ;]{ad` 6&FcE֩:ڏS5Rm ȔTtSw(SW QH2-d]5˦ DhΑ䦓mWo/T5ccxrW7j&}ߗBJ(o2ѐQ۠U|;6B)BmU.#r|R&];zf 73*9: cMV4PMTTiXBqH&C j9Q0#-/]>`3{RC "ɭPm-jZ9hY'>JL Ȗ 9}0Kv|KhLÄ67s89ILrX~p TV%xcM3f;'B|M'n4XVz>L Sk>"N7! ,.n9 hU$ZAb+ pgh(O'~VTb̲zSTs3uqn9~FKkT%gWYo%$ 0Ɨ yfM6!AEP{_"%%~r#s Պ";QrV(ǘ[WYFw8zQ`֯;e Z7GpVi.|cA,I>^/0{1ܧ-ι2}O{݁HbE$1yp4[e` YlRԛVNZ\9z$}6}~J :J}Y[hvnfM=` Ѹ|nI߇d*DpT߬KOm %|HwB`F Zag&,tMD'@FU51VS Lǀ?0&'ackzJ_Նrx&zfTCǭKIgw/<fz8z\5xn\N5=EiI[nR^hாԖo)d1o^6FvdBP'Za)=MEձͥ:q|%Uج>)Xs ׅ2<!-ow1r#"<. yЭx[FF(J`$U)Ԑ'KX6QY7N<>WZKϪ/YE+-̎l&%S[ۯDK2/Hb&JTn[H{tUy\~Y7n|mNw o2Nw-o֭TTxKogԩiw+J) BRk]Iaźwuvu_ .M)7iޣ4kũ Y{N!%* UFȻS-iF`nY$cK#gt7;;J_Gq!i}R3!c/1Qs!S|e<\q`9UoOCrjv/m!s=u (FyWb, *sПɜA!\ޗ%=Q2Yfاb X}-;A5waanr7/ _(U ,T~WaN뢊קVMc N'+28?6*j:=ƾ-AHb7V9&źѠc31\ Q&OܱW.+@ Vit.h{mF!ȹ>.^6 Yt3fӾ:7FD:DD2 z>Lcw"Zu"v av Ma Q@M0=lZwXAȴQmw?`4\JiZt怔 s~ͤ5"DÉˀGXw# aǤMPA4#lydV1v+\P?Rڨa@v gߜ4UXoRc-ܐ5[s&HQ;bOSVMk<႞zfn;cȧ:/z/LS*oT uC=@@9n楗z HF/4"MCK{OQ8BI%Fk&SQx4-v8W&c:ιEoğ$2bVmEɠ)hJ 1Dg3_J>tCd)îee*@rC=D1 z`쎾or>湫QwKP9LF۰#ȹ#[{o}ӈӝ1n|@&''K10_`Hc:/I(F]@ YnQ g#ّlIv4XV㐿_8Ĕ!M3uKn?[c]mMUQ^n%B#E}PuoHT _L㰦v.yl7/[mgixv[疪[%sڔt,0hlN,h59K$7H4vrY1T,)Fh9 fo5>) ='J`$ؗ~Q ̈Le#fv#8o*sdq3 &Ibz1_^[ikoq fTPCf|Ge) Ɂ^6΍Pwj[J< Otci].pݏHތx,z s6KUS}_a1#Ayc`T 2A*6geW&!g)p5/ǩ:uTڣ>cy1}ص#"'1}CzeH_^#ag . %xF5]3>. c41}PIOqxF޳צzj_Rr[’$E{"*p4!3K ɄC\JQ6S:]I=15 5K%IQvZ–زpjk>~ѯDG$膾H%QHB 4 {@-(`yfߗߞ#OR , = 0QSx.x7%ZaU@k'hb?Doޡn~DԈ) >EАH~y4~Dxo2P8*Ridi] -f #?e5pR=x$3A󈼜Jmy,e9} *s>rԝQL" qg < 'RUż}'~f^ȓmzc뼙CxJ!>z^~#eU*| *: I^_&(ޠY@wwX° qTMͣ0.ډlcpyxҳ }%EneEw#!1ʫxO zj2\k"W~ah$we]^¥4XN&qdcΐLg^5ct:9$5Oo.is-Qz&p_# Qr`tٶF&w3FNR.umPgTU*u~hoVU v-W kFtPPU$ӮE0;s!{F`AwN i렚-^S?4Bc\N>YNqu*i1cm݆/F ;w~ڿ|=U7,?4`G͆6sTymٓnHO5k ~mHWPؕFxh(Q_rvc&s| w H:_Km7-w1}")׹9tXjk8jҤ3{4+߷^pM C'Z25UhSPr왔;j7ѠlcHUGNhT.uaLm~%.;*{WEyp#rϧ{%5\/%ǒGN r(a0Wk0 =;3 .̻\pV,{߳b!4]kfs@Br0mGE}z R R>sp6-施LXG5f\̵CXw(~UʭE?7/ jkBV^ȢEJFLJ ~(ǯZp:.Uj*F@ h,!K[l ws02\ ĕ;@At7bfk@RCۡ<,T Q*P9{D'=' +fϼǨ1>qC7ay>V~͐Ѧ0P'ka|dgEgW%NnG]U!4W@!SHo>D SM}ʅalX4Ngyýr -god$=m2˙ˢ0KywAדu`h1TL 9<O+FbLْuGљbطρI2ٍޡ u>Z4#m-q񆫟NˣS+'%gZ} !_ Ҏ8M HWu.ts**dz9ck5:[>S|?G/[؀{ v2o6IG[mSZ-y, ֘~֥zX1 70HxG(%tcN'pn# >=TK577=M//ټz|G$6"Icl[T;TSqd;>}t@^LsoC[*Lqz#Bo 3cZ)wшxm'mxMS`k'~z8g!0ܜDKN8Kc93]b59YV&'xNɅ .(:CCXE*\!QvMjyE6w aªxٳx{4!̡Zv6-E.($X.VsK5{rL׶n2 ,1"7̉6Dyx@ ϛ1=tDUʚ\B$,CKdu`[㌟5M磝K"@)j}(^X2)ՔH-h$3ƅ;yxe!ekDckפּCjG}<,BY7c~g~R&8Wlyy-jzǦ%2o^q>cяJ^aYyV1A*ރN'y(T'f[ބ'OGݐd DC *_hJ}E46٠S&;KO\+V"f"7J~9yqP3zqC˚<^^Yrg?|D(UD^TcKE4xK55=5F#yuleäIt;Ϋngq!˻ T bLI{vT9dI/f9COI ZtوrGurzgsw;zz9 _:»i; yI-S9Z'5WwRs iYbHn.߰Qe` |t`"ܖlbdgS*aEf(aȼ4ω9hN$0~}^V[Rtq gj,OVLsHdx,4u7pQsyb UR>Mrz׹>\>F^Ck>5r:|#/G9DE /Ȟ+ Fz++kue1nH=̒ d?to,ML˯z{a? ӤÉuп)Ɏ,-sTŪG)|2j9$5}e_YQIolZ+Td3) Jn>)j¿7U[Jap#uA߇\}$>)s.O[W?z޾l(o=-s̖F'hd`MR: ~[~c $%vU0]drM+xW[O KUDI)U&y/%9 r5{~'!2ncr0E3`>ҥ5o w@n*%.,bgJUjJor%=,vЉPyJS +nUJcC=ͷA(}W.gpDPmAԤ~T*|@AC{gl?Zi+2tU#A^іwhwy[_;hS!kL-יI(7UeѥgF g`u2qM! g>xidQ ̃-CtkjRҏ@Y7x|CXpM;s*NB"QQ0lu;q<ƨ۳[<JAU0=u|ONE7b:G_+j dlvcycpHVafW'=9`1 YS 5׊K|ZBrqD 07z%,S摂ɩ=Ў׃~{Z?h8\;֫Cno ժ:YcɅYkyMxU_|Y 4 E nڠEb˭k#XCfJ~J슠lB>vd*l KcPà[4 &o 𞙷fD=bZzrkGv@k˦fq ðцu~ˮ9@%o(ҽ)3ƹ3aꈉ l rvI]Uy4V`*f3Q1٠W!0T2gw磔qwwy%tẇ=CݼK돪uTf=1(@"fGe9;ĹmhΑj'oӹd z0l,ù8*z<(L)䃁4:;m[&\7Sȯvk*J)=zgSCD}\-"$O5@pBNiA폎umL=ph!;>h{$mM ʶ~τ?JHy1IaSUNqo}0cu!\*97#ФmB 8>r&r Hp s-e E&gzФu[n>Md0@|ǥa% v ca *H, Aie&-1pp> ~ѓxYv\a N/j.T@[:e6aW11h\A^hSn#՚6PȐͶJw v8h=MkP,q3γ½jc@ O׬𜺕b1u+9|ym n[ e3Wz5Nx"]u֝,' I`8vFCHxc >aY6"I)2+ArmyyjUJtd鴩+G0-sxV3fzn)| }.7* PU}Rp íB7e̟dJ!!p;_SvAm ߑ\ .][S}熴 K/ncLxױ~UvvH7y<єY6(>ԯc"FP9̝q8ǞYrI=3?c#i^7U6B^Qlznam=O9#_ `L)D`L#"懧_b5d ǝ8D@h = JJXn'@VJy('}e Z.tHD߂TЅ:?ws!t'99FhR<4C4VY)xek&7yEP^9<g/-+tVxa &#O ^αBCO!ߖGhD9]pyM. ;WVlxhPuy4#SZw ʄR~٪3lrOK* !xVA'Ǎss$C$^fw9zh49vODJqSJx,1TzQ MSW^ G[bڗ]Tng kcɏ^2g|^ȫ{zSwh-4n'KߺnN%8EMS<SuTGJx?q΍fDJIbckhГDZ~q4Բ>E=MuT a9Zx Mm~KMkA:ll @\Z0d#3QSϫ*s;vr;p?L'JbMesu|s5;9xspuOwzU<;M PI)!M]Ǵe'r3IHs1OQz-&ѓ4ˮT?zӘBDxwmy>Xs4Ͱ,Hkq<,`qBlaCemb8H8}Q'+i\dƤi k;滆@Uo[_(à&EDCC'Js8"e(|,u G)ȷȜGi"U +O捬x&ƤT~s&қq)6mt6Z̐c0k'?UtDSqM%MüGX>ͧ\w/pv"R '#$[ǒڜOuŌONcu 1H[{ɒJkB'seXیOCny㞀9ALyL;Kd6 xݯϧ&O{j92Y8.`>gJDh>1Y~z'[˚/"RomExE贮{,G8CuUe*Z0\~WY4X5 w%E:₷(\lt$K (&)^hiz$*mU(x opyJT+Gʼ&(n1-*'g@m0Z[r׵YB;E/q@)E$ܳ"yC=$ ވ cv `rU;6NJ;FG+U6qڣJ5 '|4㲛{e@[Ǩoomj$frg-uLe(EWnnX|ɝx|t S8oK3= :I^޻4&j8kJ:q]`ccJ{:Gjº *- I5rzWD!%M+㓎䯊+JeX_rZ2ʥ }V^g&.ޮdT)ej0-ub7r&O3Zb}No|qBMaY2V,PD*>eq -6IZ_[s 2 ;5ۚ2D9IF:0' 32@~od`Yxjp΀n%Ȕӊ'pNg? .]Л. ٙPԝy9 Bʉ&h Qٷ RÐ U$ LGH ƈHu(A9 Bg\+#(C0 {ބ&U&ߦcM"AoOO cQxT @UlhivȄ%b.oD=$/.١gi^veÐtllUuu4Č%P-Ѥw'S#k3HzX`CT>\sQMI`JڌM}yj& `i%0 AtK; ɒcj?6# KNMD >?`j?`(Դ"uЎޱM<:Dmqz%at[V'6(+$jr1Լ9n">4y7XBΎ[]P9l3 \/ D^dK՟76aֈQ1y4qxt}2☣[cH%JT+aL*; G`Q=Gg蟋\63$y[Aۦ`Inݟ#>y_X ƅ َjݙCl;IyWRX-|I1 l9~ek_}R@:,e5CyH , C4 gWQǁԗbŐiuAŵT=W dY 4=S2Gcojdq~tKT4j ]^(XDlLL!ݜ3νt%ĥ%tˋz)Z>OtC}hNY @j(gXwj7JJ~UDYS 4G qa. 'mFωuG\Vze-K8K_ <\;5KnxgO]u|o|2āZO~l` g E>=T}LKhV+K`LUQ0H݌  nB59t bǨ[/?fHX֜я`=;̖ i)H@@qsMxb 68"Qo0MւLO!=z*S2\{ 槠鋚h)> kD9ZjѰ-8~a% ї{2q'ϳ _ƨZE"0Nb(E?`!@@Y(PZ{{iظ{w 1ࢋcWP?!B OEc7]+}tf7`̮bWqj`56 F>WD\{$R"tNl;Iq$Ʉ^TbͭqSL %M{7T)QݨZ.8QžF@.~1umwk] 2BLϫ/q O?% 3?eMi̘Y+U^ ̫U 72ːb}Eٰlf6FDabyAJf1x5?`qpLTD"mxp~ e;3>ΰ9qwݺne;hB R}O4NYddy|l*,%TE͜s#ݹ23Cv|U80Ve9i468@ShJ8ⶁ#-jQtu/ff_Siܾ̐|/>up.V~pFSwXa<8mF kAXF4@}Q:6i%Dud<^`K do߃!nAc;V `e @3&\Zd1^$71ff`DiADm;wv*^ZoƆ1}R5QzsS4:ۈb,SKX(/`P{Fp?F.֋TZ\(* wxd$;358f \dp@Pì"infws>BwcpIpɰ!!ǒ-{pԑӨ`I?Ҷ…yvkyz,|brQ]mqj⭑ǶىlBdmǩJ>y˞Zʶdc#`'/ON_l jjΠa:gt V09XI/#<]Oߥ#2-jX vޝ?·N+*S) Aij^O:0%>KbDdʀFΫu0؛s{>F%-ie=8L}/X/_s/ڌ.>q,dŎp7EEvtA7}zvYKC C7V.*yVv`Ȯy\L+4Lja,$(rsp]9(^ch040d=v w&cHf5/Ap.T~ Y[ڬyLLΏUSuō/D#P`V0/6Z-vY4 e6,2c&ܩG"˘D3|g DTRj;m4DwrLYLhu! E 2L~Y8C-N(9x,{ Y*79Tuh1iG͂Vo}D{8ϡ&H.u@DKNDIӎ>kM>;cw3t0C''?a.wZ ظ4R6D=d78bU5"wROU ,:ΎIǴ)^#6T[)VЃ:8rw2e!rMl+3OX(H5jceZ34؛lDQY##nB@$YkuW-5AFdQ-c`9`ÿ)mִOf*pr6\<ޢ0OL A^J}SqMDo q/]x[C@C1R ҽ$SĞuOU.a3RskS߰QY`|Jbu2+Gt<08C4o8KԊȕ]ŞBlnw1nBSUaEd*ՒLG#`hH ?%ZWs\r5h^%AG6A8bwJLeӢVyt^HFbF:}J'?y~Icջ>8ᢞҋ/ oXz_z>rvd_i9go*,YQ97>#eډ ,gRmo'>-݆i[E499SՍ[edT[c6_R딹4 f. `E:>ފ.LuQQ3H LgovtkU؃*'ÜYn:& M'HB H\,]GG 8Rao8bUukQ|.C57w֫]v QRղ6=!KHq*#D@Ag'{R51r5dg6*wc!<-u!ه-Qr/E;G}Yq F!0 D)KådL-=Vv)@a3艂_-x\,ro<&:VB[HX9 t`u"㿝FK-*_YtǏs0< deҠ"#(k[g=~21,78?id9t''(:xknG$.>z{1,؟^l]u|G }tMY(( zLg4>/#ߪ 7;]J#cS2D uēU`4.ZP+)X=wqYH# 5y)4S4k󘻃V °)F슔7Jsv;m>Zh&b>AE^4N ZCnMOyJy`̠3 B_N{g;n'u{wO[hJJ*VIUu\A̶,P+LG!gFCicoHO~_/}0Uuiy !R+飏\ulW . c^ 9ղsuW$_z\(캇ˍV#5Zx\@q0S )d𮯩=G%O?2j~/lcYtAp9&{ tc_ w" 6\;yw]9}Cle:!)y.WJI$=קIȫE