apparmor-parser-3.1.7-150600.5.6.1<>,Hĉhp9|Ձd&L/?h)@_'7,ٹ,JĔf>RӚC0ɫ)ZtaW6D0eʣ9bx%з SsuO5Vx/̭lf糰L^I%ݬSbȌvݐՊUa (U/۹Jh ^<b]1<y#\ݴv i !cKvrV"}^1~pqk3KQ:on.h`]LYWA>R߄?td % G $=^o 9 ><'' &' t' ' ' '('''p @[(89 D:,:=#>+?3@;BCFϳG'Hd'I'X( YP ZѰ[\']|'^~bc֐deflu0'v wܤ'x@'y@z (.pCapparmor-parser3.1.7150600.5.6.1AppArmor userlevel parser utilityThe AppArmor Parser is a userlevel program that is used to load in program profiles to the AppArmor Security kernel module. This package is part of a suite of tools that used to be named SubDomain.hs390zp39'SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Productivity/Networking/Securityhttps://launchpad.net/apparmorlinuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in apparmor.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in apparmor.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable apparmor.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop apparmor.service ) || : fi# bnc#853019 aka boo#853019 is still a thing, but in the meantime apparmor.service has ExecStop=/bin/true (= do nothing), # which means that 'systemctl restart apparmor' is safe now test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in apparmor.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart apparmor.service ) || : fi fi \#hxyipx  0F v ^ W6 AAA큤A큤A큤AAAh*h-h-h-h*h*h*h*h*h,h*h,h,h,h*h,h*h'h-h*hehhehh'h'h'h,h*h&h*h*h'h*h*h-h*h*h*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-status../bin/aa-execaa-statusaa-exec.1.gzaa-status.8.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.6.1.src.rpmapparmor-parserapparmor-parser(CAP_SYSLOG)apparmor-parser(s390-64)config(apparmor-parser)libimnxcertsubdomain-leaf-certsubdomain-parsersubdomain-parser-commonsubdomain-parser-demosubdomain_parser @@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(apparmor-parser)ld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.7-150600.5.6.13.0.4-14.6.0-14.0-15.2-1apparmor-utils3.04.14.3hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diff/bin/sh/bin/sh/bin/sh/bin/shlibimnxcertsubdomain-leaf-certsubdomain-parsersubdomain-parser-commonsubdomain-parser-demosubdomain_parsers390zp39 1745392524  !"#$%&'3.1.7-150600.5.6.13.1.7-150600.5.6.13.1.7-150600.5.6.13.1.73.1.73.1.73.1.73.1.73.1.72.92.92.92.92.92.9 apparmorapparmor.dcachecache.dparser.confapparmorapparmor.systemdprofile-loadrc.apparmor.functionsapparmor_parserrcapparmoraa-enabledaa-execaa-features-abiapparmor.serviceaa-statusaa-teardownapparmor_statusexecstatusapparmor-parserREADMEapparmor-parserCOPYING.GPLaa-enabled.1.gzaa-exec.1.gzaa-features-abi.1.gzexec.1.gzapparmor.d.5.gzapparmor.vim.5.gzapparmor.7.gzapparmor_xattrs.7.gzaa-status.8.gzaa-teardown.8.gzapparmor_parser.8.gzapparmor_status.8.gzapparmorapparmorcache/etc//etc/apparmor.d//etc/apparmor//lib//lib/apparmor//sbin//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/apparmor-parser//usr/share/licenses//usr/share/licenses/apparmor-parser//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//var/cache//var/lib//var/lib/apparmor/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38382/SUSE_SLE-15-SP6_Update/108ff988527a5e410ebf430fd63f6431-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux  directoryASCII textPOSIX shell script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (GNU/Linux), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=fcbd624a036e4776412676ef64871b82600ae6e8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=2c6f48968824f7b91ecf4d29bbfa0130368ee530, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=d7934a5cb64160f8bea0baf3f0c4686e146d360a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=3ca1a2e48715ed4eb9d7a70f781b43d0d7628b7a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=49102c0cf63670078f6ec31402e6c857a5d6f31f, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) *4? RRRRRRR R RRR RR RRRRRR RRRRRRR RR RRR RRRRRR RR RR RRRRRRR R RR RRRRRR RR RRR RRq6RsVDhL;#systemdsystemdsystemd-sysvcompatutf-8992cdabe1288bd82e4cc8a9a53f36cb070cf89d6bf09e5c64087b1dd79a2e084?7zXZ !t/e]"k%dRB& Bdufly뮏i'#nWdGMšח׆ę/Xzƞ.b\b %|GLơ^X !.Qͣ `+:d3{v!!ϫQ^pό_1.Wh(Ū\K`Eb/'HWj :ɸCR02&$*|#^C5>F$; $4֦FTGNk(v+Cb4W}[\w^.K?mvofPJSDzqK*jp鹩zQȴu~L"#*na\AQ p]UR :&69]"}O-ݍl.ZlS/<š&q4IC~ qus49a|P:̸_=vẇ(PЃAz(Hu "*Z+e܏?  7Ք e0ƒeՌ@=/2`t-GB Z73ޮ_rb8@J8ۦ*ԾtL\Tc 5aq>"N<&h]Q%?9 s,l!?; ]c9/{@ 9L^Gt ^xDٯޓΰ',p@AS+~Ae'qP-4ӳ+X! %-zڡ K[\voyed*V"pSAs2J(רi~4Ζfc. LQI +F5]s"#ԹAK4B$ =:{*򯾼۲'6lF#֋unj" Lj g،`٤O,NT5&eNc( |4w-pJ9f{sʄiu@OEymUƕӥ|&hOo2 ey^K`7#>hA)UXhEݜd*&f #ٱ4D]bgE^6#( 3ml] {&߻J 5ͻsNMȴPRzw8{ԩTZܮd VhMI]%C+8A]4¹T]("vH.o\a1>[eŲ4 mVJ:N}Dy-4]tt_|\"!ThLX'xb?_7&e]fGqH0{w-ݓdz('AMթ\ WEc'Om\Hm4|IҕcXz%XҫN<TYn.],dCK0m<@ [b%R𮌑8YzE-k`( !2Yansϸ\2n=gHf3HG!sp`/w0Fj@!Y-7oNSmhNqq”T.S6:ϯ(As ?pni Z/0g@CNUZuY]aGb5[ߒ$.FỊv.6c bQЪU6h}TVǶնoW#QQ8ܽd^pHr, hwg27lLGC kvC{V쪓VCw<.$Yh^v re:> B}j8VkBj= Xύyţ;<3ݿZRQ,u\]2H7ȸv$; y%>Q4i}2URQE[ysHL5NRrvO=Ç lo#J4ś*"4[d@HdmڜHu~r,EHC_uܵ%]G37{[!E1F'FL?.I[tJ,%ˑ"hX*Q<3=k]ϼsIqKN&V2l6m%w$!%Lv}/?wRӻYi!*Tc|wOb+OKJ-3);rG-~W$^ /@  < P9 8Fh ia=B:OU_CUA E1ܭVZ_̷kg~K#ޢ6 \$`o ~7L\Dʳ߀ H}YZeamW3tP]_oyS-fO >{khy*ZKi#i۰f-! 0kaٞ&cɼT e<>|J`(;k;EsVk86]h d`m9?j /W0 u r>f ?(<@mOR)QZÿG/驎HX"ٶ_f&$+ܝڮb׃ꊞ>YaNAfȒ$7g^&8/;t8\33fL \ cHM׫ >^I"|mƻ,J9Kgj.CYG ٍK9FEj`HVDz#(HFТ]Oyqj4%lF=W&]NSBl3Ǵm1cfҏ/w2zPzՍ~=nkU\tJe8މTZdfu߯HD cu͋kR7C[ZnClvrELVT[erb\{6&kU.E3xpT<`vXN=IˬC9OO'>Xxґ.*,Ԅ':WYAԇ34L<&a9Jv+erIL7wbsI(j7a۷~" f^C ~%v!s |"2 Me=nC]ԙp@HYn}M:́*bI9anI?f4Ԡ\U+&@lm]v)X/؞rlnHO3͙>kj+D j1{A 9bT ~L-ބohfKi i<<2|7w0Xc[-NJy6:[q3$9>i2`Ua(l6:ȁ^2Wwi=D2X?Rr'莱\w {5/BVn*ߎ~tPL}ehB& wE|2FWR]Ղ&uQM\>$Cĉ =gƘUd#e;F݋fi -hmQ'(Nn_Ő'3d/6jԢ}ij٠'6ۿ25<uBQ D/P&GIk nl%{ie3ּ'Eӑ 4~ri}O%#o'b>9ɪJv9GPeB|V"7U HZx9H [$M7(~˕ SiΫqlJ㎧} J.$P3ѐuY}vBr kA X[Uf&.mo '}- C X\af_s .p ۰Y;r8]GҋM]Pi#ALޒe_2ƞ}1IE" 00SUҪUݎ^ _̋՚3hK,rGYTm,K{LT"_o1h/Fj<%an4'r%gmKR3ܚ^s5EA_[NX9-.k{5d7p>3og촙q!pHjxg˘g"29"JU`^2(Ǝ,Ϥ'Ic(w;Q:& df\xĉqвp* [Yi'mew-sDީ!YїA)YcqED#( g15Et.d*v|:NyR0I@i(,M 27t֠7jjnQqt 3ޏ/0IrV, Gߴ"ˍվ̐sMܪ5N3"˔  "m8tT  E =7H wwO4x2IisV-4{gu>}PixȇdLʃK D*2%.ki^<}L+݂:P:s3iXpgjJReuTD>1+ c M<&OA$+l,G VqR~~E,BGm.gcߡ|)GȟK ZZ`nP' 1o<=|tJA֫c4D{-VPX/'Oxf 9([{YPza_KB `LW<8N#JjFPD7ѽQjLX#ӡ8!rȭs3z :7  {/Eu6go66N}C 30ݜي2NdgJd4r_^'ԋ d*-E$Sc@GwKb7 WBC>uekϾ- k99n[zUh#o 1"NVQE7[;>>a/^cӫ(E!1^uHk3EwEmL!s nC9+vtq7qqmmRJl)a>fzsc%G[`83-|&^#w!0`lҙ̖"Jzǎy xzzn)rM}cXGLL^;< l]p\j_NJα@ Ձ ;QNd˦ ƏYLK)tzAO :v),vGksUK;ZFqtҸvU 46:ڟNn!piYrR84{AjFNSG{OyUi Wl W>b͐G4iCe0 8_5l^| b-4҈H̀G*©זZc>_pkKH/N'``dqcdE>x xlb5LĐ/]־X(fMF9o;HVCQ o;@5Vݐxl .j`WgPswy(Pbn\Kr%Ӗ豣/If67(JCXF1 8 [CțfxqHo7)0~]%~OA̐u9ϕhA=X}hCLJ+V{ D@⪛n9HRj~e?F5?.wf}?#C>pViSdZzMlyf$$\pl ';5 opwOXjN!\10ty_\|8y D.cʚs>;AO\ 5tt * VF5G.DPog<|LL1sDJCK6t{ &ؐ@ߎrQ'_<k3AɮD -̳ʈ-o3S'l@oGVAu)zWtuF9>}.g ~vP"BSTr2&B&o8! J] KAO-~s_'hEmzkZz$@}T}ӀpS>k0s5tj LcC=~L c.E4@_L'gOx\W|@@$S]%%YT->;r&=`oC}0w:n29E>D3}kPMq[ t' Y>g,-l7UϏ\.!ņnI˩iG !.k^$_5:B5hDjeQBT.t%͹fgB!!brs/8bt9ް-]Us=ɿI= +#-R`S[,icB>'쨚/Ah3ƒ(RJ:/Je~_X'&ZH䩠{E~_6 [$zh̋WykQKO,uI%P8ʇN}dtG? RژэisT<,r{!W6e;lx#k,"Hd@peHolw75TXKFNl6878Au:`}!31mV7*kj L s\1v~,!:*M #;{H/Mt5H0'BSj/zjZAbhK^pLw5j-^Pm:_E c;aC(XҘI@i=1:DF ߈̤`5|PQC#u6cP!.B]YA10xp\qyC10Ҷ1P0xUQX c}NRH?@W8# :'No ֲ lX)҂܀L֥tK':`)O#:7KС X]vl}vc2-6 N#B3m7Z\hܓ}OB6̣q@E{gAQ.ɬ~3QSl,!H`At Pb7gp}?e*쉹HgDe 0j>`3SZ-W q MuKlG{+n%pT0c>o4/\exC A#8>Z*5KkWִ;c/obW~UKt*[3lVN"y.fO((eI"BmӗvSYiWɪO@ɴYl~]C'9M`%[rfLgؑ?";˸$q{Hg#IS@ץ;YghʫKё%^25yM 1Fz{9ߪ@Re$*r hY)p#vpD2$2ߦx>N ], ]Y3gըcP3Q=P'jԖDJ- P)T4)aH(G˽[,~% mfLՈsu.=6|Po${+ 3tѶsT*l22X9GH2儼@\򻧥>b7BZ)j].:o`kwCr`N6ˋ!nd;aGff@pR& O$ Q5D> meyؒBيdz{P1nHw_h 0QivEׯ0saF`7 .@ʰǭ!rW."Egg/^ "O pQrJ 颫QRAib{;򣴇x |9-^C ᠍q`NEʫpo=@ X^azt%2֎26{r5 oOs G?Jڇ(%Yz6&MxJK/S|w/̈;c:Ry_̀ ןJ1*o 'dI B\p)? stJUގe+sTza/(]#K5$9|aV `ӛ7{X[Kb,a!p>R]ĸ*}ze@k/*mewdkQf41eʴ4;~T$_@ëBֵk&kc,.nxe1e6@k@q ܟ9,Э 5l6z#Eݧ<Bw N)sTS$w+)Z<[#˶$40K;JHh͓ui[wlV0Rk ]F w]bwFZL -2T(ie90#\˄[9]ο{\HV6+gɒDם P xu|'z]!zpĎ؛q"Pb;*忝'YtW?a7 Ѭ L|1Š@ qʳed=K6LNno?LQ+T@!$?ߐTwF a:Ӛ!J@ng |͹꒪DS?L?n } geDlk,r0yb'd#$>UN(?"RUQ%NxK Zj8@fSㆎqmz]8,:@AHK0PS,B9a 5t6"I(J&^?"GkMϾ јcGUgV//S{Rځ:z#KAD9{4/Fq\eA'XPS(1XH "Ԭ~1We0ǧ r's$IoT [+)lb&kdL-D 9C9^r4n00'(slϺ_<;ǡC*[K@ VD/ <7ҬG|b%d˥o-ȐTb;´4ٱL@a:r Bk2v^qrzI vOB "|6 ጛLTzY\R}ۑp,Oއw^EhO$4DrմSf27r D,H k' Z h-j~ݴ׽$E>e/yГHA4/L!I2^<*NG$x~ b] 6ɍMX'7O9&k8,_A䛸o{߭h{:*|2r?{I/W ;◯Ҟ=͂N"6 D8b*!uSZ7%) ܁m[l/yR|\ruGDR]RgPPCoAD~jrm&Ѡb?Pre&'ŷ-M`Q k?1 }B"q"\ cN^xN@Lg\l/%.T5|M2Q5z&s5Nj] kB(K¤09!T0&m.>xŘ@f މb@$C CCZ ]=짱}P'rx~?C{F6O&GLdE>_̶' 27˖m7VpvH#Z ×ګvʋ4'OJٻ H+l@ K \ǗgIxXQن{q5>5 cbƼ{LЮ} ,6{؀22GzJnr{>{./ؑ=a.8VO(kZw겁VCâ[;9\VŐOs}4JY~6]1Y~Tty?*]s5E"e@^:-7ԛ**(dصO/8wq(džfD8䲽Eb y g+l^8^@h`o>fPN-ZI !M=KTE6< d=*P6m(.v;b/rv>փ5cSRMx25 KG-n+X 7NZ-9jmrm= 1:tG, 0*'jD=M˱m ӽ$TBPl ]Yi$*''¡&.5.0GJOԎahfX+ lyh@z~БEIIExA:a+"1a||.l;Z!%%KrFlM_*xSEVyde %ÁR_zEs߈lY3iF kcךV/|uy ,Byjv"Ϣ|ExcR_ ?䌃"nC$-yyT.lAB66{ȝ |k G#8ϺKCUt9 _: m$r1enl FUc>&k_FDXhWb ]iɬַLa_bik9єw;s=_p{5)m~i"3MQrBBǭ.b–k9ݯ8!}H`Uˤ?"F;FAFes;Q1;>jF%AF<2Vo /-EJ|䍞,^>dv~K#hd4|QRl7K5:nyJ"8 1b퓰aBfXdBGc8Yf诮ӖTDks^DZ;zTu%8U&Ow Ѧ%JHjH7Exf3R]~\XE<7we]Oy%Wt q,U,(e*ş)[n2әPm ڲpX2t%l&Lx:g uIa{#{&t痪|CuOrdUk߻S8+搘<=0*1䢏a2d״Q|p9Wqlħ9bG(`ίQ_eDC`|GN;IAl H4x@'4@#;s Oi]O6 %ĖIz]hG*څz'}\0ip?0% _`V߸[ wKjrpw جDA@6j yGM VWԒJ5+-Q79(FGC_"8ipD%e&$J sH%~1^6E9;]NdN>%#UjErϾ'+û/,%EΗ Osلb6<ž;!YϿX{HmDԖ> f`V`}];Cv\ N[z-wl)Y<Đ2^,]`q6ԭ_}$~̇Ыqj|9)Uxp @LE4$+Sb3q {)|a{+76c1~C.1~e*tG@FAwwW5Ȏ@G3#1 \W X l z_),֙94qR ^4m@Ԛ.1ŰRRx_0GPPډ+EplO~l^9 %8>+Zma iR}Ǒh^"u܉fUq [mYp6wrdoXZd/.U&ܥ1\3nbIxʯP!173AqZ H#4 *nަajR#Uٵ̱߱Ij|z#a/)pڵ$uh)9B)wCژdmD&NVŊAInL8K`D=̈́s殶厼s<(];]2/y̓oFεWko =I!JEP?]M7ޠRqZQ RIkcrHeV<匨D | F߃Gbg.jDr6ވF|QR{ۉߛr~ͤ@^Qn o w^`W!V o<)%5 448*j T`[ 3s ͱYx0!0 =*MQup4=$*z+A{đlHPvk?3daO-.sꚼR|흗;1ft_2^cR[ڍG(p8eM.Spo0{y$跺kw>L]{>lS )b_|Q:8a=+6z?S uUr%;OVkzi>S6\]iqU4r 9dEǍ9G ?-aYj}nFrlD2-(y%D'>ε>.1Fy|+cI-3spY8|3)Jt?Q>OtX>W_0 ]F|d|^B2s[5$]*Q ;:.,bOZ+I ˞9V])?P;P @Tr@ܜq! m~03| (6H|©qLS%>[89lD*cwNHOx3+}BBkz_lT72m:MjˌК22EI{ΨTM}ﷵ~,1WxDO3&ր?OUF-ƫkvғwl᭫=ce=ꒁiBs4ULO/:\4\^Ysx̺=Y L Jq,ET-*TB|g66r~@p?XČغ&e3`QPZU:5оw7;N 40K,!=2r9QB1U]]rQhv rGp3N GE$W30__n噂3ô i-NgǦeϩpyZ\<+G`Z09 Z!ytYxl_K9s|.ax!,>P.6NqZɦ8JatԸ$_jo@Bj u2E&Ek|A}RC[F^, ;ժu:pÁ?@4C3ID5J( J[sb[)[p~1t_*"w{|B-op wh>,W\BJ& &1 QUt|};n+pd+Icd1NLo^(^Z3SM*}kX$ ٖjΒXg yĀ=tsgf#lF {xjN٧ۻxȮϞk,(45 b@7U#DC@U<9ٿlihkn9|0V4VpUv1:w|l^H;grN~9}9{Z@.IJdn=jؿ#WXRQ.޷`A k]#B)xD[-ן1Y0R>.BvtPHE΋9+$w~I+kyuq)7AO͡I"/vj`2P ].>CNs(zґ0ku!}X o1wpy _DXX+ >Ԓ-ˤXN_xCaiUpkA#kOyI>+hfRfVla-(^1C%7YvSF'9bdhH BN[B`jl;L:thl_;%^μ F#T EEZ~w%\"',5P^&˸ZtZ=)_t>:'EHg7r>x05}vqd"̒,9=Zq]E gb߃krAq`J*2E;Vw+3 bHNK$_,jO4>cMx Y:BFˤ]E"tqQʕ/NpDH 3;LV#hأ"TnB w Ȥm[nNH xrf391Y_BMҁ 4LCcV0սUL\ *^߭iGN@.CbnzoywrIb3:h41S0.U+: %U3yYs EB{XЎ>n V qROXd}Z}h2t"pF +BAEr|m-$_eq'V aZQɔG̪)\vm-_Wx$ti)M\lluX&Sr3w8wJsnA*&.cjC\ &i[>ۇ<^xb`%4rM8oNaDńYUB?(WJOCWGaG ?ɬorDW8VD*)˅mM+1YWٞ\W<*H\Z0h'+9H]yY €Z4M3X`:x~,8TZ"⊿_Iأ0JiNn)]ޣ!ZQ7|" ?ok87m2C)jaX}e"mOg~8;o:u.cwVB P1e50T;iS몶/G.>4=cHRT,}= Gm]3@]I!pwR߹NlW5֓H [GX5tEu 8 f ;sUΈť.%J1ٝ#d_/248E.MC1CxPLpo*މikdF~<|`"v!A<;2P;c; 9yq<|ݔ2%\b3uR1_YM: @氏i@)InbZ gO;,],jHpMN)_y ^}[QE>'92Y]1z/+C8N'G>Lp|xS}Vz.x~K`ߤ?)2澟WNca @Wj2okOdWr|wG(9gr}Mb;z6kDnԄ |9%FqE: M݃"uz2+nP*fU(S7U[ )E^N_S/`0p;v߅Q;z3{T d WD! VIďcSMHʥ I6`PvNlCX$Efn4rv ;H7SH~+L/cs#O~@.R>rýq[b/b˕Ќ+A3+49YS7tHޏom<6LC Ce@u& 9l>oή@i"nT?0b(2*J\,sgy9Js:ƬkA-oOJCS;ǣT@o,N{A T|_6 v.8W9;b%?Eg!6߃[;U+1F z!g Zg#t$V^9XF3K}/Q Oq9HlPtӻ+F|0@XIv gp}j^,Q3DGυli/$UJw&V!J-iffv(:J'8|sO6|!0dk/֣P$:0g嘌d\bw`{n2K&,vf_4wz]/sY+#ͧ6ywXt)ܹvTo![_>b%-Fsf]d0Q%so˩ir.Q*+|Ys]x6UXX\;s/|)>quJ!\8B xc[}:0uV0axU/A„~|wCzH D:X'i8UEGζU 3_Tzw6U,t6=JzNd%qU?;}燵C݁iOsn&%lUVOljcS\cY 1s !c>@|X9^/`Oa{itY~=_WwfP7zP(2V?l߫qHCj dH^D^d3&)m..!r3enΊ+fh!%D-jf~R"qF*gPwy(-Yq]Bfώ;rM"?Nd c, In=;g٥S˗{Yu)ȵI,Yn^ٔ ?FrSR42¥(EEGBH1 `U!R\"O6ò7R}\@ ۿu xwD: ꧒u+EG"oڷ:Pp\\> #1*l.S_d@ڠ7RNE@mfN~ 1gƺ` O<< i.gA+tD&+ ~VɲUtxD m Bv N8ۿk:j.)ALg9?)a}3\'4bksLƥɽvXbpl9t[*ESngr6xϔÓ$biy=M0kAvuc兦fy7{OU5# 7q43|b"%mVmU@`}ɷclfiЕ yZRh7k=`&UFY<]<'{9,҉ߎ+L KX fgoLwщ-klsӳ;ltru@X֕Lt+7 Zkv;)\ 6pXL ]!>}s'G'-m)i.qO~uFMbo3fhxVb ^jWR܎aM3;1kߘkM\mu rWB|ٛJr P@u "H~xU0 o'kJMĘNq۸C&$&VW!'Z%`쎌?_$=Pl|4 k/vyBԈYɯD2D\$NAb,vU8F\@6"z*\ hmp$R{%ED3>%e-Jݹhh a!Skf$\6MS&~*ӗ!HUnJ~HN,E} oDSS")A@x~2 s4pMd-3XtA4K*VSBT l62̢;Gt gR3 pDݟˏLwٛK}_Ҿ odU%`Q&9~pԿDR.s3qnfO!,'gd=(2AbLI-U-!w^mjk?FB,J1kmϻԄ5==~@UVVD~B񡾬ށ^1g@: @uJ+cN'iϓi7G&tG7 Oˆ~4݂}ohXXzv^ڽFC&Wi2 lRi8_2+ h1ǔ Sg }Aq ʄ r%>vUg*HeQ2:wkv47Z _(z=uIq%`$Aw流Yos81iHt1a!Y7P k@$ܣKoН"2gƸm;J!YCk&WZ#|&ABHm5=rYd®&&ӥM+>7aadR5ˣgHPnӾʴv∩ETqZ0<˼Xsm"a68ejԵyk\&/'Է]9aGm]8C 1U-V*OO$fK y. '`NL  "6*4T8?c(.~S:g dKX!$U]4^B B񵟖a[8gG#&Y[?/1*j"zftd4XU<ߒ K+?kb3 GVo+u2cb T<=}rlq⃤13H7iuS[s \=]M"L*VR"J YǗ c$&ZuLW ŔECbZFҘ|! ֑Y#+G`fϷ{uLR/h h/ .hs)"0BJ'}fW2_b_LE^G`&@> qUE> i筜(D5Y6з UdNKz"$|ןWwqb6%dz{:-NIBIi>3:*3oс||idM} ƨkWG_/Q4 Ynyyp;\m+;b6&2A [}=P7߿dsՁ¦ gO:OeF ODiA) (an\Z6TJ]hCB6qMNi?_3ZDH_։J|G%˗m i+GY2@@z%[6/#ieg#q&,R).*RaR()ΆdᖉsPB]b>Sї//>LBũZ컛72EDEi^ItB_ey%ԁD.F.oPj6)A({xLE=HT0XS *K5` zVLsӬCD0ij-iz,#Seg{ ;c, L? u{"Sqws7tWBD?i7ٲ,;Y-5YOL5zuN]jd3i B}zV~p?~XK&c u7[ňF4% =zPUbRu9%|h SJ2pq3uS] Z"3"Hf8M+b[`v=sn٦/zTCt0` %_vdoHH֡\zK"\JϾ՚.:r-=Ԥr݇A"\9ka@q0ˊr%P8)}Hf$! ]$3o:ⳑVv;be߯:ֲRlckcݷ.ϲˏdGVXZ) AW<& g2DNؙѸ"Q?>eX4 mw?{@vTL0J6FJ@HRQe8uG{ϝeIGukWL"¬X춒/2ݍTP#]rm׾} 927፮+$ّG鑻}r/yŔS g̚M T`s(fIsƹUS=fT>ajC&z [cٓ˚ <ɮ_cR p)0 qգŚ"'x!&^q34 xp`縳 #*Dr˲;c %zOV&f7hsJBUy1Ʃ?9$MǦq9i(F b63O\>DC[ =6y'@^ٰqhJ.Vg]/S#1ƾc ^$sxG,n+P=/Hh1ޝ}N9fl[S%N:ŒDQ }Dkv#2ap, ~y/  khG}RbV鎡?}uqx3BP?ǥO4~֋, or?G,PG,k /H bߊڗ6 ߳Y%/ҿ]|{>^Xz>>?O{3޲BP?W7.vl_H^(b=09.!^渨 6llK,У|-Z(«h">-b )Zc.]igJю|NBۍl0$6.{_ϵOdCW#D}Dd5VD/ ߄υ|:~٢ث#J@~=|ql?tV jò !.\رkI* )^Ѵ^AB޴׉Ft9wxoewMGIJ g;ĸ*dž<g9;YM(+u[K Qa~ުݕϷ0#w/klS&xFOӫ.~#4G:^d0*76lF"zFEA>+ u!y׵Ǥ {݅K(.+GXC•~vY&}&sq2ɡ0o re Q-C˔,.n'߼#Tb6>Ō6tYfHuۚL5>fʷҡWpfQU6;)rt9ܚ(aO.YJY6?X W`4޸ , Ko&@ɱJ} G^0}{wxrR~%:J<@;>dg=^:Rk jI3iMe*Z(vvf.]:OD{#X 5e:s=7Ž-zmPq9>GG?c;nH1&_nA{1S%l`,pіAȃpEgHlKJmy -Zyf8)8@={ĥSoTm0q/0RO@Di&A(P1vo2 8Y8*6'@3Xd#?WYRmNaPxdJE8Pһ(AپZ_2'mosy"aѐ[m,M} ]VR.,v4NZK9fq"(<\V@Hϸzٮ6E-Kts:<10 FrgE}a y5Ԝ>(|:>_]>{e=CfwU! 9LUʏ6d O 򂑆r+JWTgPe${;$TذR.ti8*y&1QL1D3ݥ\fa2gژ^HI(/1טLc&_ G_օ!HӠ+66ߞ݇0KHXMNb$=_d%H()Q00v;&[.v0WD0oDOcfwh-=)^%7VcnVZ6hjl0tٕdi 1L]}}? KgAIn R|LQI^C(P lte7&0Ao:,qrQ@wc&zL%hԌ"ffCu7>D'/) ~6ØxA׸S%O'['tȸ4\'҄ĔU-6z*?=zn{y^yBR Ӥ'*OåV2nNyڧa4]7TjB("-wJ'+f<\?,yBU.[=%j UrxQ^Ӄp6vUwgW`RpU5)N'DQiJbteny@cfPWFb^'iE~DCVZD`r{?r5f K_L{ K54aGbg6#$i+~͗ XƠK==[A[uY,uan]J1\r9M.YSVY wGt&&1?ߺ~<jBMlqO;2Ѡm_}wmȊ֡IB,ꃑ.sea6Tև6"__ 9\…7_{#ћTjitvmJ@xtWQ" ;Nt8))ڮ:"dV0B&8;@a=!I3$ڊN8 L~qeoi j|"(` Tr] ܨY,eFy *B f/hp^B(j폿ͥ\F'-vJh$a]R+zhl>@뮙[N`gөzy-Jƫ]H^PKisV?Z}`@.[eZh?}lcٰV15xEoo&pE|dh$Yd xu/qgmrdlo_N@w*K+qۛ])뿠(Gֻ#"^CpI-1RNG=[ˋ.#*m"3w#T~`)8ڷ,z=KOv*a sht=J z}/WfH^Ix2,%;Ɔ;:[Y{VKuvW#;߼)'3IWJ) Rd U5!'—, jY%%X`2ۮt<:!84#Fe;'Z(|C(s&E1jEn ": ;hdM0q(IkfQ+PUgc.#6"F*6C29e~fstZiS '+ڪeq1ܷ\+Gv* H]~ }H*k_w2$7OΞi>y+6mpW ^59d'|#/ViP{TCCx:7ZQˢ^*^ʕ(G9pC. D UqjT/kf !%̂n'AErq  ]~j /=Er4rћK"-qǹ7vXLҪ`x"ZTZ3 є6RٰR^E-圝p?Qu]=BdDNFGZr0*!j f2;i0 F3,}O=L3(Se j6^@Hq PJ|]}+ނ(a2t\뿥^A}#$9i}N-3/I$o 'İ OP :hJmq-z]B@Y)e1oT;ld&hZT1,36ڲ3\''*Kżj`ȯl:`dbTfQp`GHo,w:ur;Rm7cA/h'DfJ՘ [x;{`p"7d )kjG($UM1n ų1%ᓜz5~|NH#UN>|ԜXL˗USS3OS!JFJE@w>_&2kٮa zYV X[f4@zK )'cu읝vzTӔ[z=~MH,wnbʹc&ɺzk~7v7ءu%LP-v Y,?$z 9.Ff 86O([dF!f^؋u [I[x.&аnACPuJvmuTp¢sƛ>Z""1)gewU)1cXpb A[ 7ǼQN-?'s:7"o)F[;_-ED@ {mK:lHU#_e~0dU`\ iuGwm Acuۼ[s b`Jxeو7Ei.%d M0AMW̬3)JSߕ#NE9OFu 9!VG3fB'?G["Dr<Fٯ(nlΪ}jh辶U PrG)5Pk|'_T\1%C:ԽLgѕ?*5%S \\@H.09o/msd'4%?"5TyH7py=*/a?JPV"eUO2%KҁV'yZzl7K@7 rh}FȞ.s*E;I4vT{%c9תmIdX#o:m]p:"`EUوuP;!?g=lnvrr#ϧTG*Qg_:-H .ߜ)uDirض͓x:A-+_v#qK@ӽc^O‰cEјI8wIx?ل'F{P0(1oMΤuP*i4#2a8T!W +%eG/CN6p!>-==.Wm5u#Y :!|2w&$EXǕЂ4 zX-ܦdx $5gy纓3ʮ`ӎ誑HRfa &jj`Fa SalO&}ؓ2PwNN˜`{{ގ}Fś<ҢBaKR#%(mU<ط7(H`:N}|Q'`rn3BpURһ'QPJJQqa3w9W/OtCq^|8Qio^Jb\7ݸ>m]`P47lDTl{v#H!69: w n@|[&,CFD{^釐mS4!ї 1϶X_dh]*Q-{19sa"1Fu:~أ?u^@L#$QBdXoXY[~Ԝ=[R^4ɺ (4 73:ES ,ͭsj4Pⶇ Mb+%8E1Һ-<5ZTwPݓg,9>W#f{ÿg?x,S.G,T?@7a1M _ U$g88X' J33O'd /e` 2LliHX:7ǞO<*X'F#KYo۱ ԡC^HVc.=竱k:j[ I0"S;Z)/9s4 ZC_&&NBw$tEdKjH)8 4]=fTLN6Y-RT\~2ܝ;-8Q՞Xhz>Oq^ۿavLE-ԕ8wBNTzۚEl7 xQccixjo:@fpn殉;|ztL߯ºQ z*gӅ~*5)\wxhaYJ_C#f[˚ NjJ Ejϧ٠Av;S[,kX'CWzO #̉L 7*. )svW|r `;VJa&6TBO=7@4c іZF"3=%@?9{OI73PJQ*:qz WnqtˏI"6 cptnʰƃh0bQ\/}(~WoA܋y Zyɰ9OtX+miW^kP*یR _[ řPS|ںUOnT hm I='zetџ3҆i>XV4I^D6^2 ,!~'7YeS~we-PUJLN9AҮ} *?oK[h`j NN}b^3ndIPN=:Bl[ Wm߅ go#sbtLKG˲BCp^cSui7*Sa |,)HHy&eޙD#e2K{twKQW,VۧZEjuukrPd kL$]`LniG Ǘ^ev>6G{ p$i|U'6)$89 `2ӻot7Cw Ł[NaFi7NЫtO0Sʲ->}Mp3SB{[y:vaҜ, h/a ӧ-L^tedf*& <'p-Ln2M.<CM;|F}bLk3ufK T@%0CޒFU~|:cKEok{N 7ԓ X"Cu2S'!E87JZt rWWM"Y$ēyFO@oe8ux*i2ݑM_Ѵ-ЇpU>X-JO͔s#yv43KK, eR}x ?O~^osnW1T؝Y+bݔxJEfPʚ|eq |܁{I9rr&^Rs6U_!SFDJГO =0+)  uN98chB5,`1M\jZ{t7CbVi{:]ku`Y&]a摜I'Fl*p9cGB{/)a}(V^B"nBPKS7-W nٚԽh+iR';#&dݫDy$񲸾j(,I#xG!d0FHѽ-!цJ}%lw)Xb^C6paK-WdW+m rYi2UãZIwwѤ74fRDJu7䱑HxrϬG0 Md Ĺ 3%b;ɫ g ea)p.;>ЉCȢ>/>>zJO-u|֯n[? 0^Up j$mvRZ=Z1EUxܔ *a3D;ƯCEjGҀo+mȥgQ1$trgDh~6,Bg a!cxH۰rrpڱ)dhv{y96c=Pm:֓i[} d;8bsP gJˏVWHg/:틢Tf2_C4B'< M6̍f BVkyPtFU hTX f =aGc׮"q+ejF աI:3'ȣ05GrK/iMy8ycX/<gP}L?3MρrK䜠WTIw , _I8e&JAbGGeeЉ7P5u#H/Ĵ@cEYeF{Ҍ4B8OΙmxCщg6.Sz oL' A9Av vT›mb!hK9V/4w48uLpbJ#|{!+Ǭ5f`6Ý\6@@seDpkg-Œ;=KwQ_E&R|on&bT/$;_ ;ȇfL.QE@,' T f*_Q mQ!j7#asӐcՑaSs pB=wՍˮK69#^ZxIwXoY͔a;=6g{Fn?thRzr$7үy3Wgsz/%{j:bb)fo6seL:G>|&mruf (I]r=@Ⱡ}4LАT wsO_ b1ފZ#0S>t3hYc~@AӰd*Bf*q4r~c'9OƵ-i G`x2 \F9y51u }ڝDh"`n2aaiZv/MCoC:ŭی a&>,i/xܓVRQg+EI;oXBg@O [AEB a$qs Z0)M [i4Trh&\ 0 *YY 1t!gMRAO\0xW:)IqYm- %U`Ծ WcZ {Ez{5a S"ziaT+G|UmI˱:M񁨀n4&^w]/̉(wݿ>ޑ;ŕ]k,^PUgfd! UGVϯRy0r(?7J7} K̲#ѤrG;qۮ|M0:!+9P%=&ZO:v鑀RyHg>+IXǢ5>PM[{Q@emH&h`$336@*CڬAK=$W>cLʢ"^ZD;5C|laߍֈ{DYm\]XF9'W٣A}L:8kMĚJ3vZenOGN1aX hUT%1h*IX:ݮ5WTOk𪂯s* =X2Vx%Xbc@3%X u"X#L I:;ÐnŦCR[ndSƦ/ԱWM*}rR\4Z(rsPeC*L.%Uh) R?4\)61F c}rhrOB gYìU4ڌBN &#̶F4\8 ?k_,C_"Zke#]zQ$ڲ ]U#ӃGk$-dxp @N1YD";l[`l4ɾY=r}.E)FsJ3}M a! cKn)LX7'2>SK0/vK{6_nciҬo8,'; j,P)2X0|ɢe |{:еbp qΏWE:h0lP[7acZ-iP{!ERpO?;M.ŕΤR랕(V!(h %?h)qm4S nA=7 KYOՈܺxAʞ첾X'[uK+S86?yRBCT6-KQTiLƺc ^'v+emŁ1:@AH3.VM)ߟIt兎u|>b+Q^ap6m}T\6 ޅCe.P+g/q2ֽd`XCM TJaW1,bW+Cf\bc_^9 RJ'K&%|]-r7V/+NRAxҚLà6*ty} ~5ڈjVTW5>Gڏj0R5#6m$@Թ^x)3V2kJStJl5p\MVVo䏦@ Ry: a?i/q&>RH?pQ^|Maн@ =ЉM<Ʋ%=ܵ$E_r`@o?WSi$waw{w)HcU8ނB 2o&iJzj@ E;IN+~6sM^TgUDeF>7*B\bȎ/vR'dq?3ak$̐c*The#IOUWNyZ9 G|z8"1OPrH/Lm-jdNt`{^?VwL}juPHfS$[{oh}MEMX7Ryv\h~K,Z G4?z% +p/E),̎ʔiY"9M'?w%0]RoLZ_nMO@Cc˸ Z:~I{mAvuث[!vHQLuîO$/6DK8?[Y >Y;e0R**]} iq(t5dfEȟC~94KL1¥T.!%yf^RV=7fyD9 4$6g>JluvJwfͭE4 R[5//埀|BP񑺾*u-A&vם-s@t3;; pu#ԯ_˧(FA&v/0|>Q7gx`xlX9_/TN*@)#Ŋ#tDExDl'mBVٻֻΎ米JnosgMrzݩtVM_G{"X&0s2.[̶@8%}έY ԣ f'E௩ڛ$L$%emj9lM=oжAy=8lk\V,Zln_׾W)h{u?h_XH 󨥡 %,9Kcu]l9!Q& ]^4DN)Fp`j?WmA†iοQȺu2RBLF\$☈=:5-azM IcaȦfvjhUBcPwPu^Tyu*?bx4lj+dQ+]X}t3*ōXY%feEh'յUGfH",3nw6,v.ʭ !nq[/YfQw9X{=Lb*b! p\VCگ/:˥ \&Qͩv-!66R+ڮo;WF0 LR^rK*ee=q \&* pSd y>Bz7@#NaHeJV;&HdB yƃjoAip) ( ;[_1B>;bc^wO ,BhXa2v󞗔lqfcj߆wIdzztصe U ,u?% e?k3e5fRk`sKbm7aIJدox0HD˺EA;+/BjHTG_8@|N{ϩS-s }Ⱦ_RAWUwxt\Α7i̎/ sfpZ2>8YbHVez*athٵ?BQɜDR$k_ziזOVr=~*|{e4ծ#o- qpKa6rW\̀ehn~گ׺Pr wr" a2+%2qJ. 5|݆7}h ~!th18Oeޔ \6b._+!9#dQ&߳ΓdG-sYbUE8D zJ$m0sUXC/R!1SI0{6"t?.,S :]>* 3\̓>-V= pk]2eVA ֘.͘T\K1} jq koj`DJǸu!Ї(1qKjU#FTcYC$戆?l=νክs=?Wʾ슕SZޖ5Ԃ3Lwx0v֣T(#nQE $ͱbi/v{/]j"ə@?)ٰ75/ftc'CwBϲRcK'oQ!o*|XW|;#PvI0AGm ߐ0\#EXZt3usҞ<6BԊzX֮D7ACB jr1~{z7yZ@8'cxL?O*> aH ':+G/Z\wmAnlǽonOٻYMH^~H=v/SԁHHΰkVHTiJZO2/R]{xSzXiH*25p7&兔G_[ՋS4L+ӓk ~~R̙@BERۅ xu'r):XWE.9\"٩Τ2𙢐Jv/XqMnt,Q7 mc PN8B,&"nF)soGqhde"sW]Y#}Kv}#D!,mG Dx_Οrt0 Mn2JXt;J")lGD>o[ZD6 Iy^O?[?6ƔC(*w"k`QQswG 's\KQuЌJ3Qyzu+,w$`(Oh=ˉy+ *¯Wb ~Pv}́c,x/X27ɮ( P ,{hɲb! Tk](ILnuѸCPr꼼ln3C@"88 ;ڔ%gR˷" "ULuI$@y^CHF[.J̲zPl_N+nV~B+i8QaF*XmGna[1eyHq:HsYE`(G- 7MW]hJj'FΡ7%"亄77͂Qm٥?$ۿ7ajkOHLPx}Wb(V.YD#Ui?\Pb/c/)yEzۿ׿ÿ~YSE)rڼeOQc愊/ʝX7Pw~.Jڋa*C *[qj6WJY^۫)l^:Gk 8*b4g)O"r'>1.U5M[w_[niI<=P3Ihr“][HYpdfz:0Ļc1XK.[-uK1b\6E^ڍ|Ϧ@n'!5kdb$d.흕Z4 rń`_K I%Ut+s q]7soM,6}faЄEf$WuY}"c50D :Htv ԋg|Jweіcc#!hZ__n**,~bFy$eRƕ [^W*1_5K&B ە}c @5uG60Y-G9nPB8 h g |m5(.(G~ ݠ\un4 "uTUI1^^j3.K%g™,40ex41u:VstĀs 뽘~~[ɧf;ԥTD6H^N҅htD7WDHw1>n)![q  VT!&Kih]\[_f:FS@!}7x1dSpWC4BPQ=)l `ޟ01wF% NxtTfDyʱj<&;(KkӰ֑XU{%]vRwYp=cɅ{J?Z/i31d6PN[µa X0XDoJi)-Z#ܸx~.TIx)qFQ4eEBq+j>Ъہ'›ߐAjԘ6lY[גΗndҾ,Fغ5Ƽ}MSѤ+G5ȓ r _JLuh8c@ݢ̦$ z~ZK3cf10 >CƄtfN:?FMp"94FGHD|;A(eT̅SZ5)Zy<}T`i`u=Ò'%dûY;bm׬s4y 9ĵ+F:Fou2*ՙ*eȬF*˦3̅$1A74y?0@Pi}GXD6YoVoM+и"rGK ;\j&7$e7]gYgkǾcCwFN>kg]OU܀A8iC,Hr~\c%=:~k_HO5cxB`8A%!6J1 B 8nuQ\3iR)%Nu {d}>0{Fj]-gI4q 2'BYȣ66N~:ʝ5sa!`*ZEQi&X Y6MTװz6KQw×yTiU̫]833`l\uTn@Q'}w?+cK4gVc;duly Lc dͳ\ W @ĿMcIXS4T ez[M+:nq(Ʃe]*4ӒGBe>9Z T9^aL#3<:p>$bFc˶1i`T  ~LCs08+ڊ#jcX0B{Nݑ6ű؍($ \"!Àn뱞[ &VqD8/B)tfn'?W[;qCOj7UF~މ׺~42ށd![;=hʼn%)wės}GRd$NNdZc^"I̖lp~eG,v,^CCǢQMajZ0SZcNY}Aps*uTqwڲڶ8[AH ̑Ho_DŽ0*WSOv^zx#r90#2S2lBii h(ĸf '5+CK [0Ii/@Cq!;Z{Q,x!B|6dA#M"[HY 3b=8E*Na홃1W3Q%Iu>Ga/a2<򁭈}#(U,!y8sV7X \ jN ![Fq`ׄuhY֣MZ>M22IS6g7l f$Jx| S*OfO[4QauhN1M%t 1Jcb#cJoO=nX~_tɞXF:.,olF9{~v /2'K=8vO84w]ĠӁ%Yi> FI<3HQ$D +8a># Ծ]C7DPRa%A 9shc1֎ bHZ_3DmJ<ˑA;f.y7^Ķ,8d-xpi˙"R-swF2|#eiYcB`>ud0#[="̫A Ԁ&ǢipދZ>ڐySd;FA8CޞULIasIMOCY7BklZ6T#S@Xa6WHi8 =.Qw) fo&:hWE3/%ۉ, OHtEM+&Jm|7,hYM"dgꁧ]% v;XfI?Jl&׍XѷiSW[ Pu$#<bg\XlPuNrohsPzegȟKmΉ]=y_QTª8jpTj]v=ݱeS`M`N6*LQ"">n ,7v`j=8o?݉|/L)J|G2ygmBQ}^Fc`bZJ-CJ) ȼ*X1hCZ(̮ "t 'w%M_}qљsz] *xo|ő{^b7.aղv-tvP%a|GKvfE {7ı7u]pAD!~+A+84+,څ(3m),g⥕+Atg<- 85|t-X WA<<]-}DlC mJcKEqQ"il+.y,Q-g(#$EMϚ4 ׹:Pi9()*I/Wi!s 5s/V$9Uּ4!$3sH"d29iRc?t2dK٩Hl€͗Z[ CWM`ou$¾hr-fD5-Xj&NF@vj]/R:` ͍ .eKTI:/f{9KtG|j}G\P>AeZJF#),)~(\h"[(Z M.xrxŽf \F*>*U He2EXa0l0&u }bPiMz3(T=mnS阺w3^A\ɟy~^ǁ-o(J~|v=tDC8M"3i{>%u3ahZvZ 믳 os(4 Vz~wL4 _?IsMJnP]qrmJjjw5 KUou-p!.,<L#@LT!|A*YϻQ,ĸf1`"e1|bv*SCmNc;@E#P1 /&%owVKv iۮ*M Uy&0[#&骵Q"mZM'v XjArol)rLτR1wYKLx#*FiPe! oo;9^L]&;Ōy<,-j⃮,=Pp^y' &bg4S{Eߴ_AЌ}󹖰aQ>KnEɄ4؄d/ N]IcM*=^/2 g[D>;o-&ts^(nKB.B>0Vќm>Abr|&YB dž{}RާC;o:U8>㴅Ќ ]b~ksq̚'IjAذ*>seḢdJ^lЖ5XuKxy_Gzs7,)CP ֋#Ru&_nA^D E?ܖA }R^ uzX \=-^:{hJP(g)ث|@˜pLDI))vvtT&SX'W0 <Ѡ]I+#Lݯc`z _T,K0<9c%bUD|1'@xtnСQS`EdYGRoKwM lگ.dWYzQ@f 0(;޶\ ҋ) M n J¯ سJƪQa,n= orٵD;2%wrΎS0QGnчe =~vmcMWKu is;"6n,pVN ݇JC=aUXw{#Dzj.3M8V)2.0b'RCVģ }o5F>NALe?I+.(R"1Uaz0i#!D7"]&=7~n7!wՃt̙V&~.3\{dKQ6!ά<ǣ:|Y4PBƆj/C琕0Ƅ1ñ(ſ!E*%ik(J5OS~wJR6uO*g+}uoxW5a1~*}Uiח?4C0ſ~5œ + Hhto8ߒSSp,k̏ kw+*g?KC>lD\oP/ mT*-Ak' 3:G)"xGaz\gta/IB/;;[zPJ+: -fA6d"#* E,'L8lޏh [f/Ck.g|8.7G3C/yZhr~!GGD &<iLǽ8 83꞉$,Di vӌBOFǍ0Ew#^Iڼ'cջqp0䍴767I+Cӟ> yBgW1L?=K7~pP*)_&5/^>R{1M3r?Rݸ!)+(Ɋ!x723j[?34fޕ΀ (N.P:!29tȗO*ln~,]6霤mI3'k ! {h!2 yGc\ HrXAqS`{pUV"#K9f!#uB!,Q yYNtoSjFq;Dynv9s S[~E8 5tUxcmU ܅dD@o8݌Dͯ,`̲/@"PEPrsx#M\_pDz6F÷ KPzVxN SVvFva\JUj{%Y)}FJW+ |b }zV_Z,-q] Ej)Fa4gd.auQ|Χ# ChUg).H-Ĭ4#bHŅb+L>Qlhyu\FP Al貎|N}P+ j&v2/v.mG*5ϗn}]ʿ,,4}_w_f) $!oW>}cC;͢ WIEŜ7* ʺ?Wwl=Y=['PqlϏLKQ9%| G u|" }d.APFcڹF;wnKݬY~BofN@7ćgl'M]xprU94yHkM#y_?W,/PV̊hlGH=h]H4Pwm&1"do{*xƐMa.0dH5ewIOEZ?$nԚ%1vZՄIm>da_WR]&UuIWyhKT8bВ[iG\,ia h#R.oMm繉XnG& )aAPzBjyC 銰vP׿-e(B(Ӌ4puYRuƁRUzk[1JA3ox%)0=s%7N%&6`%F@ k1 'k'd1._OwQe,#6MAZەmclS1%h Xwzj j#Dbw{l^2]`vɟÝ{2J仙7mR8EW;UncN4>ez*)ڇޛ*I$+Kb!"cM^s\,6ƕC2N4nF^!Jb)L:"C]u ;R<-1ʃ G%Z-LQWfoc"8u`Q@kYFz=':߸ڢb>Y>ԇN[΋szG)`G箐 30"ߘkZ hn-K(FgO܆6͎-b?*Jꔮ5c>`#K\qHO@f"/>غcD>sU7ktus."v|J큎QÎx3vZ4oasd'`Y.*]TiO=zaEb%kK B4PwcW[ q4Cqۗ H`UkL*E*(p僠&AM;jk#v =>REcnM?.`pؔ;41s ,{D'3Sg2mV#qIf"%ܗ|+0{?CS!aG=doj_hs|ы&iTbL|9 9X⍤506\Z% )YY}Yo&s=B/PPuSj дwG 8(b->6Tz`kTN JO2Xk?l[7ി72Js"˹}~*Vx9ۖ6|7" Dy3iFƘ=ě?{ģ<NDbJfna z }Y1Oxm8vQUsUϜ ÅlDK?Bbc 6$~؞1? 0I/W=O%4/x i{BS ׁ+%5`p*V*D"=Ggm _زPfç)֕Vˉ9Aּ ^,VxoP*"':\w/b]FAW{#\a{),N&)c΃M|}=g}jP&ֹn [>[xcm<`DDpkv6sT\+zc? `v.}O!wf_i)"T8r)6\W`JH2`:]=;*6zOj᫙XRo- ԬnYI7{1+%׏6 5J[ni }]L]6n]t"/4'z7W_)[yAT(^rCbJ#zc.[CD㴀oc8+/`up!0xPUbqLuD5`X[ |kV*+1lW仓j⼱=& A|HvU6S0X`Фh.=:-?5 8V(_(1Ϯe#Q;A~fq]'ش!ѐWb^I0ûhEDCdLlFl:vXݴf#L,$Ulدg`ۏRf]G`Gb/]iH,xvAˣ9 dyj} rxݤAJ㼢_.{? `؎53'^U?{Yt`5hg[+${hqUO(l`&z/[utS!@>VZ [H0_θ79}5/xFi~ʻ`m#?T@Uͦ ܇tسwbdx]Vr5E[?!ZmG0@HD'B/:-9U !1th6:~}uNRTPKc(9$3JH]gُhÉÃtsRr|4ߜ0eKG7c<€ܻY_5^wIw A: Y&| 跪bw~~,cN?s8y9 : הPP8i- ds"Q[f,-Ew&WptF-̡O6T )B3 ̂;o/'Nz2(hOt\ז9Hzsomɰ?(N̿'PB2Od=Ou [D`hGbTwm(?b!UW[BS=k_d4]gfX|kdR'ӊf@v H.߯1R$YϤTpuZsxZq]o|{M0J Fڂ l؉=S1kLZ-_&L4H͜q 1ic68b)Zd$69 [zڻ*c-,C:/OnJ}K iZ@WI0LF1v`vQk%h&~0qHn5ʧxO{Ge;4aR;JeoF>W"jm Rƚj[bf٨?ٻmFF,ygnxq2"d?g$\n4Gtu!s'jefۮ /SXjN<ۂ61Rd?qK/{lҺZpO&JLS4#E\>BH iZ7"jƥ us`xzBCp#9MO܊Xu6j$Ԓ-ߑkIT!Aț3c.B1K ډp~*Bg4KYsjޖA#t{"? #h`dTG[*5KMSecE̢O#iffN{6ƥч&pAaե6pΔ{썮]B=s CńX.4Z.B䌞DZVnKu#_-<@KdMB]tOQdvldf*׹Zս/X&JaRfiD : h5x&MMzj*Z5t{AﵕD>CГЇ]"hBQlO]_]< Ss)ksHe,CYcu%<><ʞJ\QDvMzhl/vvzp~rQ'u7T-9e"N֎u[rܱ+qx_@{|ᱚ]PIA<'snN&. \ԣ5'}OF"t]fqp%[%|Hw=quozO@ }@-J)2yu3cJ*ṵsA?sQ{*f]Loa`ct,XHs\l%1㬲>NWc\ܘw)"tj<9JB;$ t8l 1Y&!g=$n~ IѐEh w}[מϕ>TN(b])iǎ0 <7٣̠q&͏;={5H6Bː2dNKLXhPBVx k+oʧ-FLfu2,@bS> 㡀&'9c<֦$,`aIږWLuџE6-!0k%7T"DS *eDzڦO9*+9]5 åh3Z2lph2οy10^׽5BPG! TV} `i]a4- ,GC_rnggP,iImbg.!Ex,SC25hUώgNF_{_A,U/yh4H9ja( 1Aa٧I9RȘK 9uF@W-bvlslɖC1TY,Ñ,|G^9߲Xf? Wפ/}q 9\Lר$LzJ@~1 @#1upTK`I_Qsf1TLl;Yl]|(sm;E_چiA%TT>|aJ6+DyFQQG?ֈ11YMz38FvAN=zCޘȔ')ƺLmsyWY`w끒 POno5g|Am,K:i?Ol`D"2g!/EJ t/=ţ)5ͮk5 L#"۬uP12 gm"?QWƅVvPj{N;S,51BREjGQZIbv[vaSY]2uM,ƟUxe*q"g3;PH=E .s&=|ӰS'ypv4H-ɜE4: 9B|/]aK}pb\D{`t]-@A9 *%VPfRE[5 cCS,'㞚jEy & C}c}+|(^|U8ZXt~*kbj/̘g`.ƴ[ٳqx3L%t,ߣvL~ f = U:m̷P)/IslJ7'07xU"x?^#8']AqmoSxr;Oʼn{j?6طf:M,tʿx=@U1N1h]g`EUڣ)&cfئǍrEh鸂.5fkl vAJ^qn";~%]x8@3$ ̅/n/ؒD7h9ѰAd#\Xj,lnzRB~j S^y^tD\x%+{Հ ?`qcmi 9;6}|ͭu~#DstQi-{!hߞʮԖr%:~Bj/-X<ƧHdg劖!0>?s2K u: So}P<9. =еڳ!&^ic z)[q7[&0Z6~wi' 4ބS'~;<s5o-Qą?9Mh6ݧUT\]kD2l/aj6{9%Trelw p7ebIM #\R_><%݆S̍ocF;'~ee?\lJӈDd'?M><4>*]W 3wOxk@mzqyF:}5XHU֑t)//r7?aHݲXo(oY TD7,sp~mEA0p{sC b5}ɒkPBI_BT1^x5u&r~h˄Ux>%78'):GO^2jҚyqoLо'!ϒ$N9)ݜ뵱qyXrmh,"y~en@ c>Hmia7ȋiSLm-r-q9y~8$lZrE Wr&iI^oCnox(`|$cWEkb`% RF1V&j 8tE'*"IY^&tXZjE=.ڊ|G q- F m@WfHݵ KHm5d/;gj^! }y fgo=/Gj7 ],ZL$Zv0dB~qv 18i4/#d#!2;r EOU}=/bqa#pR~|/c8HX6ܠh;+vVcБ olulKd>e* HpN3_4CD* Q~(Y )C:G07 + 6&J!kdMY6GE6 jh3#K=GK?ڽjzBNX]ťAIpoAD [Bv!hVҙF)M.56iˮ7cڅnelOǻ`-V ck.v|%3LQ kc:F8YL=%6MB0bU\^u3kVb bz4a=DZ8ѷx{Q#>T?Lڡ&䶰@ ?uXC9(=/vikzOtZ^nJ•BMмy=/,7"g~ pc?Ͷ7{o{ /U}ꬓrg쩴2ycFqeC-&G|h=hg@g+b{[K~ӀoOy'J|75V%ecmFM ACɎœ6>HLtĹw.'*xIn%%0(Oysm̿JdF E6>C|q?6%.iScF~ %ܸfSX* \aygw/:MyBr9cM/ʓ]Vn}r*^"j\KM Y r&5nx Đ(OG&ov|M&OPH3 #!7f|~%HC1Ng> o> ٖpLqS !ȱfRA%^Tyɵf!_I${lH4" @vT>Z L&M"†aޒiL%xQ; +'onZ,qOv41O|:-1f7QiXvu3aB/\ŐncITBKf{r~:L:\pT, li DxL'q4 32.aK-;ɤˢ 'LQ2ؚ/W0>DRRWExg\a/,4s# e /JnOwZ ubnÛ~5JP4+%Cq΢*oHW˞b WVt<`+sv !ڒjL51P,2$ _`٩6Zzf/wn); :P[@jQ@پZw00e9FʊSC&['߉/*raABM]j kdjqd}΍QJX2JX2nr7tg}(lZ-%u<|Efr+Ie]9F>-%.[ $fJ|`K%KM)H2PcA=2[83J 䩻aJָW OU!УQr1濻%BάSgSoU JZdco0`WWR|{B#Y mLwGٔx sB Sck*ٰk$T6jG8,w v|x25-oEe^)R~T1ԂȺ@#Qɥ"ة/N2RJH sq"+u`<׽ի 2D+-4hoKx5.?<A>]F=ƹ8IhJ3GUe* y}lq63'4)\>N02fe -T "kREMUvztDŽ@k^L@{&+4Rm̚O/1PeSSWOd/99lDOͮ@Hq_G_.êGpix],CàT*& O2晀H* R Q>,:5H M"ݎ5ۆ\܌T(Lo"{kiL5 ӠXDphnqKR"/[?b>h QYQy~Rl%Ӭ|}Njdp6hi\(lχ8E3K|O4.,i'lݩ>& SsGczח' M'$$RB 9(.qXdB:Y5X7e'h#ߚO6sJ]o\=Ѿps1 [+DnEkF$cbnȄ|UTڅso/H%;x6grw_)M-{AMp)v6Պv.7zM:'E5ظPvu3ӃeATM#Z8X`0xTh~ NC՜-=d) ث4txXy $ ( 7S,-+ w G@X c!|qON+HxWhMm{R}0na wѣ㾩Ge#&>Ԑ(VQJaK!@y+)&|E,&(+\$!ͫFh1,'|^~,.i0(-*6r&+:c O\fRC DTu i?&m6iəTLD#V1WLCwy;ǻH#+;>pt5Vy1L\Tޗno!5kEHkikW#r0HuL`8l>#!q&-QG~O a-I6O>:MKd lyWJ)ЦXz9K_aTDP9(=qd'}l Β%i#=emI@a=<-@.ٱe^݁Ŗkυ=Co@@v)!L2 z9Wq!TYJ5-Z\^QjM'q7a.3BLZ!i P&+.O܈|h/#V$bYj/|&C!W%g5Bi<4wKN_$`\*Z`ghO.YMkipq~XQH3m^{r +._Ϫz%5uĹ焇*Y}Pꥲbi*Ao8kz(q)##$#QrC- ɛpؔT 0 ۅntEAu4jF!E|79}xy#%+L砣l.,mz/A]- ;PN/u:Uƒl#aWθpk:TEtaQaޖgT 3>J7ENsȁ_V|#MáHy țFXַ}7$@;hs0l-(Φ*!b &嵲"^fX]*H6[۟yC9דŴ2TD7BL*'kW~r:eZ:@V!Zp8Z/IXgTu'3 _(˴[;e=K:0_ Cj93H"VW9{)8Rg *@ޝH>k^ɸ3sQi)J =]K %QCq~Iҫ̀e,r^eBI>^ScںC7d Gi9Ot*hɱ-WiQ*.> -B>>AxJ՜FBPUdY_}Jm@tm3.ɩX,$64rZ`i·#Q6KT4; CbU`Ac'Uɿ AeZ qjk#݁- UьPrgapH]L׍ ݄Te )>K0(ppp`S_Hy;65># 2A'Ͳ\4J(ݩ{/mwRtOJmnDBDg NQ{y`s6 uy A6\J'tVѢ X@J4sR7hz+8ԥ ‹Җ*tjYDΣ},V.2?B~Uq:@j$ qd DAhQ@Q>apC:*FNX+/p2mto!څ (5kTU^gd B|zŴ p&k *4FHC~>j>49e\k\[[&% K0w gZőn}k:[|pre%@zv-ŁDW_Kx~T ef}@. H, VAjKP@puq<؆)p}8S{>CdUa"m Dݺ-3df8B'\-奯HpCtN_~sgi BwhXDS7>CWFrڣfC&IlGY鳫&__+굇5\a_Rwo l}Võ0 u [HJ]ZPv%ÿR7mw){lMLl\*d&|&ɗaO=h`FȨv[B$ m[5VPeb8Ms{e9x6Dݘy 0%NtfEZ%-/f3/ ޣGMGda?ȣV>x}>[V؍e傗"Ei_>E @;f݅0ó JCZցѧ_֖!&)%x&@b\Oy!|եAIF?[H%4p8>tWgg3~09A^fEm=n3S?X:vaqFQcσy39 TIkdr}#e豰GկD!(xR@nC$vV2v6 wȡh6bdCaӖkLj_1E«$_B*8<Դ :.d0Ryiͺ;C2o[N_t&$MC0hCW"|z^bp7 wcً՚` p&z&pɅ2yYOG%aŗc?'ӑCBgɨ0[ah𶜩\ǁ`aj3'rMihZd)իI 15BVTlдeRqo!m|VWUkcNÀ;n[E/IO;s Q;Գ^wY1ŷWRVCh#́[M~7ɂn2~7^j(~.KX)>6fJ@"s !'aϊoMH%#B(C X?iTP }lO  9ƒGSS,mGj^Z GLʸ'kh3T rIkBϏ¦*(1)r=T7賈',4>:&K*.oO厭RYPwJsPЁ\ <5rgBJ_5Vf@mjUղ/ q9n4s"pPQ.';/͖V K^T J=Gmؽ SwWX ^-:{4=6a(B<8H4B0^ _߬''CB Z=+GKcq(` xY}T,j 0ӂm_]-pI!TY(hJ/B/_\6w-:[;8C[\0 rc3li!+h)S/&<=Ne@"}>b#g3]}^t ;D,ƒ.ꈪ4Ą=]:[ KA))=cM-/'vs5P"7_&9<\BS^b8+MVZ8 7e[\x? 8wk[)@E)_zl2Sk6c6pmG;d~~ I̪GTo̿ۅ0"R}XtIQNܧ=7O݇yHeE9ёCf8$0oI}MIjXwodO"b衁dgnW},7X:" پcw26KW6e?yd.kmcnLݮiSWakk$ѩ&wl͘՜>w 0,w !Tkз\s?1uvƎ8>,Z,f(Ly_goꭷۨʼ*BzS 48x"IRcuJD) &G0^yb~$=):wđOjA4QQ,>Vzs(LJ @']HoYФ,y,9w\,yۉna=HM6kYjXA(f)|jVw٧'֊̞٦$%UCNUDk߀I@:j¨ _Q1l_i=FHՉx:;u {ȱswX7~]f5ٙL1wA@J˰|dLlg)q *ʣk+vS01n`0+C\=tE)eo(/KOىdo.<#6m'*Tu,֬S񋂥x$3΁ zYLs-'hۤo6#CڈFwsGdBFb-XX[B)ImaH']PlAZe]dV^Z_dêo Gƍ mAB"hĬ(ErM@O%39P #;դ tA@_TqAIմ%LwV'AXa+my*5^_ݽF {=AHt yUpx/J\LD]ɎɫziX}`¤fSӎx4߬CoZ_nћlik'U@T,>p.bHrpVFcKx\5:UTuqR#Hab=F }#e{̶eMD : o.<X>wt|5oɋnOPٕ CC͝!gykR=~Q9YDBDdˀx_Iǎ$)^p@L^X%Fˈ:%V/rU\)69XL^MMagޑq|U2Bd4HpM Zܩ]Ca{ Nf)jrX3׊%ۄKl:^"#BRXVm0\W54hee񍣼a>e<`vSO\lfֱMp_RX@c>do]Ttw~71{Sܶ6@O8S䅬 5 %1@oGNQC)SD :߰P1 ]h EH% !r78 /P=N7/ x.90#|!Jmn?9&@e[DoI j|~;KBmRb:5hcY=DҫTW^ SNIq5Ah 04X*Oݦ#ڙ4[ T=(7&1 edMҪaPD_߼@4P7U+L,#qV!$a);t` S+_.*@4(`n.EZ]T&%I=s [dn(k(*C3V4bf2܄ X%X". & TbqS8:6d퀛'2q< b8ӱ*Bsʊ5bH'aNVHa!!# $&'M|sɲ9"5q6bC9a՚> ig<$dn8Y6|8p^ot>&p`T\}A!F Bx4 ps_ŐܝsZ8C^^^y& I.;L ~o_{ 묳}#D!@z uU".NAGDRͲQ𓱐L8 \,Wfw{b-Wqfx)ZV,OgZnۅK;*̢~[0"<`TU]MCkN]NAw_v=ā%]λl7?5I[L׮n=Q"}2LSmh٘5؍+4rEBA~x,P0FAh)UVwJ$?M,bߟohpE4Stpw5/2y{4ރԻpLv2zF}L?|%09H2lrI)9Զ<ֳ{޼$ 9E]= <F6&So杁猖>qgi C z1lٗ݀ݮDBg\MGe A ˞&f'///Y4ztM[wN}g!|z_ן`_{^svLK繧C*[͆w"r-i׹H2)9wb7~R.՘fmϵJZ@g*h/4v<1o[V3 D(oNE 4Gv+ R;P6fRS}ĺ\ATV"J ִ]T.{H~vcK3>ՓzZF6|#l쟣mz@uCS ,!4P_( ؔ-I)l4 kλ8ݦCR/Iܵa;Ȥ嗛(dHp{ߵ5Zok䗩Rc>;b%rjl`$zMůM \߼1.+WST^n.M]cB~{KAH 3ك5OI]Y؀Wq|6j&Nyʩd&;pӻkgR#KjX;/؄ͶGS8~I],(>c^r zVS.JuX2Nퟳ{Bu* =.d~?N}F_-K&SϽǢ dECp (T9;lL̸d&mi}(n!gh=mkgZq/1Ju/yZjDAZ ߗ:Z;H@[AX_<[*뭸zqSJ*QCW[G%9\eu´laЯ~>{ox@΀v4r?S1s8TlnJHFiP/ HZu׺"+i› gtp$7 g~)~Q~8ԗs産*MQj36:/bۗZf fR "|4j*m'{)J*J8~ce$ʂJ6ֲK> Fز˭}X=nB*{!Bz?p=hYr՗>3_\N|~KKMnDu%ӱ䝦QXhwtD`nl'LhJbƲ"bǀ[[5~VhrÞݹ}5ܫP ]&?%qs{KXC$e"wKQ!rLF5 x6t?F4a:P@ctwD 1s%Ùo{/ $IҒ,D+ҳXݜa-եeCo.ԗe6ӛ6I_ӽ,Egu*tN]Q^z}t|]뛰?JSj;Rp##X3v pP@ [C@Qp1YTMIR:X(aJ3`=R.w3~*IExvD'ݎeEYp:k^`&SU]iZm,kir؍c82Ҙ0-Xhv6~SO*[`>P} {櫢H13٢z#HMvҳ6xs4Тۂ?YJ%>cqx^sao{NNoEp;L^kɪ8uؚNDSAm{ڰsX̄ hf%J0n3udEc:'/ݡұF2'c5Hmp)zs'_v/ewGϋąsdaA|ܘqcU`k2~XAau- 1v5(S?XJ`͖b .9I{pҚ-αsS{@оWq-b53t0j/)f/͂ R]Kr;1l @1'8m(%jF5Z#d.f"t4b 62zBZ84^7R=bU3: MO $(8/O K{Xv%xTƆ%vvz<9]OCӋ~p>9UL vҗ`MmUO@ȬՈ[oWn֭=v5u#B7JDWBdAefp-wZ~wu9.EGK!Ӽ෉ꤋ@:՝ 1RAr&г\ntdz c#ǀ#J_:-{9B2,d;*eR-շ; vO[na6. q̚5R*+^Σ2롵2~k(&hX}aАO-/|’qC?\ѷM}V/S  /eBKO2 m2h$ ^S6Ihykܩ#DNW nLJk'xbj?"nz-!Ipُ`ԚgȮECp5$ߎvSB)̂JPQ硙72ס/ƣ$@!<"̋N• B7v$L(Y yoٮmw%uW11g9gy> u[M@H`[c*HOFYY=c|`nr!NL1>s}pG-5TLSG-+4 E9JP(H`/7\ S:_t_R8#pÆƘ9RRb,ΪnEKi%x 4zZc,^PDed'׊sy"iɞT;P*B`> Kn]ui֏5i%vzGo+;]DA=$1h=xkh잱v7YZqsQ!Xry`b`֕(pڰ]2(00 $7ޓF3:t5 kW@ͪbo=yA <|jn[ SV/wfX6.IgRa_q&L HA*I4чv(in>.UvRu vNTKg]_O̐{@! lM5iX7TYdEá=zAch~6ݶ^Cijy?}hݩ<5;uMn~Y:#NԊm\΢NƖAN-qlgR|{XCgg&΀KYk!c k`e?v~g.>fdj ,6"JJ `5Hq/KSdmT uu R,KHNpݲieH܄S3/S|IEbn -7fZVԨGPx-9Zyȅso +nQU~UM# դHZ\Z5NH- Fʔ\Y=W}+nx"RWLO)2I\M& ~L39DHhH[#njst ~_:l slB`I [RXrvLvb 4o@Qm}j~e'OLି>@;&HaD<™Z5AI{bszgփz7v rmBe2CǴDM 4|65Ӣ_=woSλBeB3 f#(oRzLnD&K/1,b)akh {1~.FN !пNT)`ʗ -,Т`'ؒ9 ]]z\*[?κ0۶:{Di5M/wT[\MDsŴ-(` |&/WSih@"~5ﭯf1`?oqI(l*۴qEČ`@~dx$K1%@x0Eu #nnXZ*9Z?t@"k7TsfuJ.ȗ<;~ɦӣB5\0IBul/)d29K,\Oy5^t~+SD1o" z:'}b <5ZócE@E= 923&!)^^Mg#1(vy`ԙ\ Kw2,@ R0 \61~CcA HpVV^ADahԟXj7Hi(c]%c1oԉPA.`]COc\Y"YϟheR_skWT7űM~ 3o U>B̘}r4fnuʓuQ(7JrI>ITׁ[E,x;Z ۊu{y$쭟"=63:/59x2%gšSFIw&w6Pްxvc1D2{?p$!B4%H]OEzMAzT`Ayw G;/D5{鵟%Q\Dpڢgޞ>OKrvTP$s*II|} F /QAGkQsM %š6sK*W=I셉T u4&ˋy!XE &^mtϊ\`gg=&?ry %f*yNi7e8MȋN+^c_]XÀD~eCsVNj KՆN;\Id%9M{Ka4;3gIz+N'=cp:+thH!V#6WOiC?"kzx h\`dg`.rcЭNvJ5 fnNBܳkz;`"3!1'\ 7Ov \''$ O^Se%Z/K+Dԟ[79x*?,\|U/2L?5P#ЫL;s~ZyQ ۥ ޱsϳB6ETUh߫L(nX^f(KÆFlDݦC{dae@!\{3m$*k[# H04[˺| AtOB |ůD2 @zT,'= ͫSA81!|PW>h0^<|O~72Sr l@"O'ppb}%0Fnݪ8*(fX~9}o@(Hɑuwg3n]G @?e!%lEOCH\%yp6Zcݎ23vJ8Y 07 9Cіv>%K@ ϴbRJn(!Ϧ_߷)Hwaw=dy-MpuCa7y3BVQV)PKfƺM^qWɣ:I)s+bZH`0Y 'ܴpn0$/EU(UKڄ"KceFF6:!a|dewuO]ot(AP c)D!,*}}IjcSv>Џ~MN46`2يWVSu5A){@z-ޘ\/?Ɓ^uȎ.GXލ3"P61v.FB;I,oI=nzIh -Q4tEf5%P"#E˖fxCц=۶B&>tiݫsQ)F;jA~7ev`w$^Qh%B쒫pOFgy! qp?OHKЃO8ݵk{i/G3*%raZ #1E~wQ1prQ XP$)y5woPSZa,^UqsH/$BqHOwIpLk)|TØF}VF#H6-J`h,C(:BfRJbi~{!#iIBCJ%5!XFpju@q s"܈>Ecz[+veZh \(pֽ"w{P^M<F@Ȍ6?5k5O)E_'uėS -HhiBoB̚1w:jr_k1˟zt'o Fc (q@!r|Q!C쓢7+ 6;_=}ZD~<}O͓{UA 3仵->OAܟ)g9b^v-pEh@sP"`:Dκ}2iBIS,+8Ĩ %|?L[gi[ٖրP`_>guwzC݄Ħ2е)1Td%y!yteu۽ 7_QDC־>_b:Ȏ{Gn:E[p |^M,F(Vm7g[pEv)aB? $u mqAq)qdb[:DU3: "Ca=c tʗquc5Gʪce^ [BjRfȝ] rS݆n4\?Wd5 =UMEնgA{AE˖DM)B[Mm5`w5,%ÃBxtr)QTw{,5tSKj\pALE>JU'WVPټ2 ;T_A"5P R?Zҷd.Rw5]/O} on`VE i̗z|T&HK\;]CA_Վv(/yG>Rn$L, f9 XWM;N48)֛fbd7Nko\8|@A yVU=J8WGКT3=؈h%Ar(KX&GAܰ"tʂNs@C5݊'R3ly%m97Pa|yzgIh1-U)c5m19~;D5֑u1C8f -[sgtS1cZ:.ive ӹP 6G+%1_!\Sy Sg~s*Űނ*Xc8Do]@?ehY8޸$-*䐟u|"i6>!+9ptRg?".N:y0zxT Y|;gLz5q\\@u^6v:)5R-nLSG * UI+ Μ9C3S j>rp9BޚdcQ!;!*6l=j%+!D?+)G`ñMԏHf+ Ɇ>dvddv\Vw]ܢEÃP`pGc_ LǑ6ѷj3 & }9m>z£q9y/%g=0bz-'_;|L^.ry:_Jup佑hz4#jKW&j * QDD&aCP&_e5 B?6Xϯ*Vp UJh \ӳPݑ 24|B5"ޡnxm DXqVsw!683SY1`^\: &F66K:H3d=v+vl-Dj>jhN!=nB9Ex=o+r uQYf^)c:zbؙAQ#K?MgȡB|~;+6ǸEM{ 5;&SHz:Ú@L T2B!6AxlHo^CZUiUBV4%yķielSjnx+ie9 &Px,6@!;rI&Fy?ڼYLcy ٵ:< YZ