apparmor-parser-3.1.7-150600.5.9.1<>,5hp9|ק,Q&"p9j y8찜 6:5WP12copɊII PhcVK\~24l2fPhL'h'&9ȳ"\dw'l>RD?4d % G $=^o ; @<'' &' t' ' ' '('''p @.lp(89:+!=>?@B F}Gϔ'H0'I'X Y Z|[є\Ѭ']H'^Jbճc\deflu'vט wܴ'xP'y,zޜެް޸޼0Capparmor-parser3.1.7150600.5.9.1AppArmor userlevel parser utilityThe AppArmor Parser is a userlevel program that is used to load in program profiles to the AppArmor Security kernel module. This package is part of a suite of tools that used to be named SubDomain.hh04-armsrv2׶SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Productivity/Networking/Securityhttps://launchpad.net/apparmorlinuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in apparmor.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in apparmor.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable apparmor.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop apparmor.service ) || : fi# bnc#853019 aka boo#853019 is still a thing, but in the meantime apparmor.service has ExecStop=/bin/true (= do nothing), # which means that 'systemctl restart apparmor' is safe now test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in apparmor.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart apparmor.service ) || : fi fi \#\p  p x  0F v ^ W6 AAA큤A큤A큤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-status../bin/aa-execaa-statusaa-exec.1.gzaa-status.8.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-parserapparmor-parser(CAP_SYSLOG)apparmor-parser(aarch-64)config(apparmor-parser)libimnxcertsubdomain-leaf-certsubdomain-parsersubdomain-parser-commonsubdomain-parser-demosubdomain_parser @@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(apparmor-parser)ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libm.so.6()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.7-150600.5.9.13.0.4-14.6.0-14.0-15.2-1apparmor-utils3.04.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diff/bin/sh/bin/sh/bin/sh/bin/shlibimnxcertsubdomain-leaf-certsubdomain-parsersubdomain-parser-commonsubdomain-parser-demosubdomain_parserh04-armsrv2 1746532637  !"#$%&'3.1.7-150600.5.9.13.1.7-150600.5.9.13.1.7-150600.5.9.13.1.73.1.73.1.73.1.73.1.73.1.72.92.92.92.92.92.9 apparmorapparmor.dcachecache.dparser.confapparmorapparmor.systemdprofile-loadrc.apparmor.functionsapparmor_parserrcapparmoraa-enabledaa-execaa-features-abiapparmor.serviceaa-statusaa-teardownapparmor_statusexecstatusapparmor-parserREADMEapparmor-parserCOPYING.GPLaa-enabled.1.gzaa-exec.1.gzaa-features-abi.1.gzexec.1.gzapparmor.d.5.gzapparmor.vim.5.gzapparmor.7.gzapparmor_xattrs.7.gzaa-status.8.gzaa-teardown.8.gzapparmor_parser.8.gzapparmor_status.8.gzapparmorapparmorcache/etc//etc/apparmor.d//etc/apparmor//lib//lib/apparmor//sbin//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/apparmor-parser//usr/share/licenses//usr/share/licenses/apparmor-parser//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//var/cache//var/lib//var/lib/apparmor/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux  directoryASCII textPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (GNU/Linux), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=c7937c2a4806093ceb6c57a6d19fc46e11c9f13c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=fa7c117f0bf230c745dd599b52dbe5572866deb8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=bd95f77518c12ceeb433439c8e9c3f4abbe4918d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=0043be38ebccee2ff21e28a8c97c266eefabafdc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=38feb42116fea754b5ccee52b094a4180da15787, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) #+ RRRRR R R R R RRRRR R R R R RRRR R R R R RRRR R R R RRRR R R R R RRR ̱P$-?/p&T\ݽ+ I7Ȑen^ pk˰)_ 9tCnYXkGw3Bj%3:nB |IfkSL.Z4Jn:tT3^*\:bS4G5G՘{oc^Oe̞U"L(z_*|_u0Dx׸7v6 0_t$MŤIKḛf-ÆݕWw@& %FKUsгz,t4+2%_)7cQuaw]DJr~wQ`X솊ee@/$iÚaǠ1xD@ZXy0ͳIFH>_axbi%kZWfi Li'=<8LМ I}u?EYpR!&?n,;,y%72p[̉6< 5 ѧ_zQkG`:"N4m$eM1UEǏuXDlЋs˪4OQKr-~ϊ6}Wc >_=dPu,\HuaxCWx?>`+w\cj2M|7EJگf56k% "g{ cMKFM"!o|>3Aq9x]aPW?Tn)a="S"7op:I8a9Aqs0rhqpj:W34;zŇ_jUD~'>7JP1G'+>8@)J''=L\=&eӖ/[+wTugVsm99l;:+w?N» [:c)ήgFsǖ_Qy,]~XϿv=Yeȷq= ŪlFkʅ(/aHo|Ts"k m^WdnD#^`wNRY3Ɣ]Wg&־L\Pa ӗX8 M6ת둚=~Ul"x86-GrS@m +1e#db ~'z^AWL֘H$Z&Rzf=w 5x&dFAFqpZs8{ns41[AJњ| $u-7`&(S3_E CZKrm.f/XSҲkm3 {d;gUܷE: o ]V(-~._1lGprmluÓ feeC{kiz[H3`Wzd2>x3v]Q.U$ՖCt5 bG=M ϻhEni9s<Ӕ>JJQ" (Z>`]BoX֜4jo&.b0Y3s7FtPX`Rbۺ`˲N*lI@9vo4҈e=~Jr,y҉ GpgbÕm:<#191tC6GmT*Qk(Ʌ+$G!O,TA>i4zó0P =t?9QfHepL~ H+H1k0y@,A"B9(if*2WwV'iKq"Jk䖶N8=Ō>MKmEb (o" ~P G:nܶ0GgKG R_/o.H3!A8_]"m@ /fJmt4k\/ԠFÍa3_VG, ͳ""T>԰wUh~tAx/C  j> 5Pqn=āKс~pEt7jMHbx#*mn u.40SqӛH.kt5)e.~In s T@cH嚒z׀כ dOU}Zz,?b0 ~] PD6HAFYo{&-A˙,u(|*dUev(` R5@\BƦog6Ct7kUPyifTko!RufUplGpT8yO@e_gj\ee` ٚxc8)==ß <$D4')ZT`hPȪu!y# 3}nLvќ" zE.ߟG0wHWˆ-*WZ'Z>)Ťp+xE֢]V6 F ":oU_޺?I՟֮%-pv@\.!8*ZJaє@l⑼ ZYg\!α|UK9rĸ3Tt<!\>+w^-`1&Eh.l1oW){mʼnR~uєe(ru{K¿Ϗqy95~dC[0X|?*BKosoYoa9BA?]lxPhC ]%vLfmVu,[V*#1zƻx-ոWyL7{AWے~q~TRVӂ99[| '"*O)˧v.>'Et(`!Eq~w=Q[lxoi","aF++3m 2aϲI|!eaGo@99&M#ʅj.Y)N7cVXAoOuǺ*&"4Er)F ] m6̩.on.Z@p|PHK0r˯R73*֎ ;lTo/蜉ŇEJ{ v=~O|FjӕTN84Y gs%A16=y@x66ػEV KfIIĐfu({4k38kEloj,NW'{I~zè0@J9QUDЂ͞( _O.)8Yo:pV.id P⮽RD 60W MlГ<(zsDjG k%Fǚ!:[+gR^7ֻeaE[HAHX l'`'X< c>%;ڔ6ElB:6C&jpF^4G@kYBQ9 026IԻx)B7=I=vM#{ɀ!WEvH;E5~gq}R;!]rs|(O"ߠ^w%g²+?d(-m0c ,>$ ҋDKN5ݒNjgfnsX.TUmMդȜWHJy_ZRz. Nzn1sݨl-NAћⰭ~]Ѝ uK6F@M&2H1d P"$8Gw3wMY1 ne&É`Ke"1MrxKaaZlxIi8-CqQ/o= q}d.Hϑv_;(`M麟"Fzҝ蔑7um[BIق5h}&Z 8b~:0AFDhL&}.cq3*Ռ*81/Fith? լC˪VΫ_rdsh Hbjf;k[S 5$堶Xʱʣ&hOPas 3oB d5AM^l@;^QLGV;8C~ʕpuv*g{7|ؚM@d/Ӂ٩rM}8K_W.qe!YԈQC%v/cx<9iz{uxf-x3ƿQMDŽwL1GlJ.פ1]8wLxs;ʧ~VW5DfXx$o?$2N-I>4E :-7lTQTJ%UX/cC 6/%.TN[Ǻ}Ң mCEae`A\bnHr pݒ uR0irT؛Z9*l*c?wG!Ĵ׈:G}#]Zp#Y lx YJ4PWԱusR^?VƂC / ufg'PfB ~1f#9ŷG1d 3[yuӣ%ao[/4 U(j2!?ALDZޚeOw(C.NW#_vWm^$Qwo'4w g *HMVda^ѣ\_u8Pw6[c还vwlw'bc#Rmyu"7\1aLc& 9ߺWCOǯrI 00fFɈԼP: :o[fcU0tQ(5n50y0bm'Ugpa;C] U{*(NPif{mk}ג+9C_ 3Eu؀s)gM FLq{ }8l[:X)٢@_VY&B1˕8P!AꋦއӚzcB<~&#XZQ.>aBb( Dꄢ W^"3wͰu &xaȪ;vToJ!.Bt?F0)a7}obH+URCXҰ[?YH>Tg_RD.1D}se<۟Yt߳E6{xI,}hΧ~㜐9+2+Aѽ1HF#nzYomm2c[[WZYk#[: =Bql8 I2Z_H(%.R:0򥢺~5W 'q\tQKUc*#)Y٪`s BJ"΂!'=Mn=T! ըcNBJ G%Qi^jWP9Hs~jN ,fJ,@U9ʜp Auxt'u\t2R<75]rP(LYŒ 7MFTa(hT]03nhA IF[[S"q91oN[)5Fgٶm_!"$>Z:v) IUE[4Ն `S2؉^L5!mi\ǃDZC#u om=AG!'2YCWJ !wv-;^FŰuY_A?:#rzL?x9sh@n'K*" j1K4c63Ep>CkUOL.rD7f.< ŊM[A:8tߚtPbN7p{VS^[-3 6m U1\~Jr0OqUL u5d FKȈƳʯZI*Ah~T[503 AyHoom["?͉֎GXZK;\^Q0Xm|x)` tU)3 .f458a?]s<j98=6 OT|Xd.p:fk.'Dޝ¦? 2;jmVq'"C,~0GrliL˩ɳbWԸ7\zTY"y SrC pܕj6~ ނ?V{%ҘJ.h Fd9. ֯EY:hzm XIC] ;IaYBoj:?ltrMF[218Ɉ#N%2M\+zuKr5#o"kRf`XXt?Kb/V):[g?GGAZ~),^1Gա$*_d%{E?'*1{8o?BaٷRVbμ//sO Ew Sg-b R0w0!| OE9÷Z)R84OZv:9bZ؟Nl.I$~>-NTQIA$6v38(F#j:Jj^q .)So5qpN$> wB* rqJ]n5N}90x218P12r^h #8WkQ2>=FYI + a%rf2 6*lR57a͙.e.467r3rp|!Վֽ"4käd_kh-#! Mx`xr]떫! z2LuMI. O0B kT`?֦nC>A in-`foMpXݶ72t$A.kKdOt}fr|qQ?܁Y V2FAYAĢ~|+n,_)vKo3zR!wI]Km69,hCthhY2.tu)`;c}v?7Ç8s^^p5Pܥ'%FB*,6$0[%f2z#BLQ$vZ{+^_+O}n0xmDuv3 XoZ:o^TnUBсrRrv'k"( YJJO>kapMiO𶨨Wa{wJ;l"$Sa}t`LA)Ά3cx<8K8 ?Th(x(. z\Cga +5wUL?pxg./>4RktYlU"9D() `b P!&*f1!:4Ij9!ЙL{X1$4aNtUÔK|1xhk3$tܩc n3 (ůBu{1kMGn7Ih[uƮ3Žz;"s&3 >©vL F83`! D8pz58`<weh5bpǻs5/'@*QM\e>v?纇N$dbr lyw='*Y3 @I!j"Ƕ|[H+ͅ{X}k6/z'|q$w[Q(y,5 Tf%-)(DUhX;>. x#ݽYˏN2̫),@&̓h%|yV>_ S=_Sz1vsi^\c=+[+VRت>\(ƢC! }eOy) 5م()*Yvbg1BV5ks3eNIǏ2jfR8 ( 昢/UNÕ S6Ek5˚FGbC3!3~+|FԌ^J RI ľ}i Pmo%'\|G M1-zٴ$-!Il~Ql|m&J6N`vοעOj|-d@_b* G:e}F ,1&Θ|ۙvSh8rıtF*ÛcrŭKsİ'ȰFoI9_WW]A26sCCc̳PT×)ÐpPMrkHT!pZwJԅiyu!xCAh4)|J sb'IܲK[P:soIНyjbF }I^ͭ?/UQWGCY ɡG@tZi.P9g!<9|[1;af2YZbn}=HNHVSe[!-u&)^%Re5B g?XpUn\?O\EPk#ΏB#B;!|I8)*6\\.ӭKkwqa,W.e;K+VhׯP}l(ʃҀ h9_Yn5 q6/*μ5ezyeK,lY|S%XH" ~tg${ _J.D?ׇ#?~E wk}7)<&#KҬ èn uUBz3oh޸WG}f_SE'Cx^c022?!/B˗R xj~RȑMRpn+Y q@=o:xNQ)B~90Z V8X:& :BXuGwp8L\.W5u cM=S1(*U̦'0a-[޳}s* Y`? k0dFXJ ֡̂BV8;6kQ$Y1Ȳ.(/V XʁW*& 'nJ:~OI`L"2ܔ*''ˤq-AA`ޛS|SЃ{'G|b*/:_qQU\%CGQa9|` u'N/%S F. 2l2.YKdFir-r<4op*tpdjURã+'ZAT+w@_ = gd}Y; @)dhVf>}{nɊW$ ʗR/)b4`>WT(~fՊn܎?5pL w IMʒT"D ɍbPD&Α>mdUS30JbJ'/ ] p!c1qlJ!Ru䙆i&UՏ13տhu0߉^m(KN~.Ʈeine}aǪADjg|ȭH`$o36O]c-n^73uVB؞YrF9 v}행0LL^DWGgp3Nn]?AN &󤣨 蜥U.nc&1*З5S`CRURFɭ"ܮMR3캌bH-425 ]܋RoL ={/2D4Cfvǜh!$B ./%^Yg"``?@R\VFӱ)`<ą`)};ʝ?c O1%-eZQ/ Qxm!JO*X 'i=;2$pP4D9[1ڬ- éIƿ{B <Y<}bږx!i1d"g=nls *#D/S]m(Q^՝s6#bF5(`!{I)vu Pr(_NL1engd={9|snA3a cQP5oq+%kf8O9_Z9m&fNz$Ȟ ( ß^hiN&[R.rcK}n604w1Q*_qkihӓ`X DcPtJg~nB||F +B"/. qBSi({3׳L(eo_VdhnT6416e P>/},jQS\Ѻ|ީwZDjwѨy%cWsaq+3thZO/S5ޝj\ɷq\5W0gDt#!amim赊>O@0T&*D:t_x*0ϱ'A Tn}QKa>3'nxy+x٪E.@:M|ן7J 6$$~fx88 觜k2o}XIп3!5=lLQpWvu"/,R 44' gZ="P9]iɷQF2'({any-t 4!oň-\sg5"R*M%"u<ʉRA- /򹨉2! { fw983<{(9Eg/B4gfц0\h~1mHӨY:VVveSyd4@–@XNxҊe"`fE|VgUaH A0pJm!rsIJ8*5l^)W;ϟ9V3pG~-y5`.zvn7D~woP8h0'!H1fgf~o0$a 'Xn*ՇCZoHȱrUXEhkTc`Q@p7"r)!m4\:2 ^?5HSAݒ.Z_ K9pE+wta~r ȘEnS>XmRF`5 杉24=Wo5\^&?>BVjB|?!ϰGYj+@I G zM Kxז @R"b Q$EDTB=_y yӺY [A5;/OMV\hd]QmMgi]as݈-7X;%|JRW;Ij,|, ?6Y@C_SI>sih1>GyHbE~ PRk-`j%JSV]5/O t>eyЙfIסu>bV=Ɋ8n$94N P&l{oVsl$6='kt㚺yd&+8g#I Vjk4@qy%G-z9ĘV9| qxHN,yhK>^A +={*Ghʹ$p]G?XvlOqO8H'.[9t3a%JdB% n\WsQ6}HpG^~t&D%/KBrWz$3Q0,R\/ >oׄXoE ހqcnu vK|}K#Jf)NxR]S=:x[PMq|D?&k)XtOQ>5m0m| ^JCڑ>eSdQrJZsdO,e\8%KUE/%ecwFN!52S3v[ R4i(W8.âdx,Yq|SU;d!.3XȡV"?+qrN?h'Xv`RK>sBnCBd*IrA|zқuh# Itz2CXJ{Y$]VEO8}^y@ݍ/|8T[öE'H\C<b/=R+?"iQ"oǟ*LJlBN"ѵ'ZJqW f& ͳ0m!f}焪=yyn;UMb&q?o$}Ċ/ETd5if%E&aRcrHD@B ukАd\ zU#L4Pn c&" ;ma"Rb8lE fUJק.`ZJGo_^T-80Z{TR򣾲qac0 zTdN'èWQaa_<GF=te=-q%s0^fPN\)Ҿ`B'&I.TVdlQq+!GSZX4m8)>Qq_Hfҕ$涻fni@ ⡆<-b.a y֡QD(k!G'W=9XvɫCލtAv[{)mNftRKDMF+FB΋lȁ}4 w C :[:G472+I]'᪦†\&6l(Gո2WCq8'yiWB&WwRUf[0uJEzZW^I1֏|[i0^-ihC )ޝpxsaC?#/j&f;1ǘK(mK5;9%濻tнFRjbf ǽ.RG2]1}6ӇwlWF(#/DH~Ddnyʹ7?XMs"Bt1"M?=z{6i`, Jl2-0`mw4C$[zw]IVҒ½}?@ZFSG#*XS׺9Z#j;<-A6eF%qskDXZF𨕣onk>*mԎ3~e[# یASMn`~qsYM ֧h߿#:]IFi7U1Bw3jL"〹\' vuR(ݘ|Jyi1_I80^NSU]d/~sk&`X<0d&==jrmO)ڢ=VYIY&Π4r$APpϰҹ&NyYHV=s_bY@4gW?n8*7R^_ @e$ȡ,e;CYGtʾ0N=X~%Mʈ?ը+mm3$7G3A3"Ovv!ٓdpP=c; B @oN9S^bw,\{'q-{NX0NR(z~lqswBNJ bSc,QwboȔâGEDn0cBMÙ$IjS ;lr8ˑy.3OΞ<ؐ䵩씫u(I4>ŀ"ө؃l2[jmG"JUbyDm"kvt%] I }JaвʎsﮕRd+f67if~INk_"%A/1?1"k&|SEx>1&0bTT;vuu*@D;5?dw*c\ @'Ho1k&֐ .1He1Y _%}ba]ib}@kԧҊ+x4FϏY-*wQ LFPG4[%L93Hkd0T2 $EAqAN҉ʧ`k `@6Akoz׷0Ԛ#Gѻ;r__k8i1N9t!7H,MS\ t¹D WwP,jr \\hIe MM O ޕ*rCCL z9~tgR$=L6܀UWU TR8™g2]ب-W79/\^hbyP>v)@}Ν( hɩ HbG We~Sq8iD΍'V0=, y '߭^0fb Tf?J{lǧ\R{[9"ti:MMҋY|.a3/~rrbL'n19LH2=?-}^"Ўo31Q"K*C AͫE\%@+}JT/8Zuo!f$tG߀9iIK)8b*"^f9"54FdTq \sc^Rt˒zƍc5O n/!YSSM{x J G{W G³zAe5D )']t^,n$/d{WV<8ٚ[=t,Z7|.".FZUTT} |"סJY8fäu'<hб}Z=yӝ(S1R[Zi|Lc4 3xHI<>D8g½,-W5nq6Q&>XͿtmD'%q-asToavڎ`}nLȝBǥ`HI5w9%(&+7a?FnnˊnTBÛ-F"8nB}xm ^p)&ɇJ="㹩 ɖF?̺].>ďw[h}:*54`\jN~cp_4[֑65Č!]?;$iwP1Fwc{VBe'0.UTVA5-h4\_aPd=U*=gn`VO*IAUD QQOlbWQn IabJL]`:=HMmը'~f*[ Pn)P OIaO2s3530C@_C H׮յs.8sA ׳7|dH`tyS.{of}b9$KeAl;E ܻעgT܅c|V(CS,)|h74qmaX? r8b]McNR@(竗U9@6ʍp\rLc)ʿ0c@IN:Y4)L\   ,ݷEgԼ}K]6BF_KdMaL5-cdf 4pREsDzؤR^:*zRʒ9wk.\ee3V؂ŅAϚYKh`aC>N4r@3R[D+,9=I54چO{Gp)c8|NF{sa ĜO%ۑ6j9u5a*fLUH|sv<0ns? Xp~V ΀|=n#M@GU) )a.(\Hgg^"Kt'U?Ap$IJww+6ή"={xPf[ra"\H;SBvV.>n5)@kq 5B {wk{ݬ*uq/ţ0V͆_vztcjC(y϶%&2W4U UKv+_Ig&Uvt’ў @/X7L8.|]xaZio!+T<*#P\OD }(ˀVa&Xʉ\IroliP"҇icqNf5fjQOPϛvеB?Peސc3qyO^$Z 8c(ˍ`A ,~#uRnSq@i+6V,CFMrq~r}f$尊XquR9G ILlj&뜡Q /?0+PzeS0q ?eYGfE_$3Hsiﮌ^IʤCC@O) XEKx`_׺/N aC` 45̧vS\3btAs.nH@C;j@g9+Ĉwxٕ٘PF;8/ZQ-q 31Kv"Vu، ٚ[Bi,M>X(f m$հ8pd& %iv=%`a虜{s;'} _Ǒ>s|̖R%3(86!'3FmF{LĥJ39{`#i 5S4D~{„>i\#LɟSM+xө͇Ȃ\N^iC$e%kzs㲪w!P&&VkdoW*jO2Q۷ǐ%nY U ) p)ھ⠲h:ڌ5,oqeh+mu6ooƎڻo߿1z׋2E-#pc,pV r>¨'QwԮno?ދ+0!'`e/SYi (Sz arQ$A=?—=ܔ6ڿ2;WPi,vLj!c 8 wq8] HQ'!u /kЎ ;?} VF%PvtУ`1 e&} JG8+Vkw yfѹ9ڒE &+c+LG7Qwd&&9{ϯo 7P `1a>%P1,L'o"{xA%ߚn].~i6dK',X#[:A]3Qv1@к>YJ%oc@Z_gkCYeCE4[OF,[?Ԥ>%ϛp31y͞8˼m'9b_PվҤVJiT0gΦxJ鋰|ܓ{-2$x<@lGIlNp79H2PG&m:XK*crADsG >bq8Y~|ȋ,AZT_IG^QalϤ>1Nbg:sմj<hGPԅhjtR~sbHYt<8ėwj! #,K> f`bQ2erzCD)$\uvC_b7 U} mj WWRKeYniˇxhh[]W6-cnp!UW"̚9_ )D*h9L}P/r<[ w"+ފ}uxKkjOw#rg+8d(_֊960:B&\ZτfN3py(AK. wp 5UO: S| 1>dfZOMtꏝdř:F~*07Cpi1|k:~NzG76OM ]BqPUngk^O(Rib΍qgHF&c'yɋH'{&aL@S**èrMqOהԾߗY1#h;(Ml[49!|^xyj-X/l(bZ*mRmFq85]xSheF,;>N>SY FͬWOϮYQ9^T:([w N㗥~ï. DTuZMQ2R% NALKI$9ڃ_@,+*ކ7_fppeZ 3XHg?R$66bUJ0lHtS;)OlB=Xҕc;L:3C?ݥt~ːz y{&xWg-ri{2<^Dv\q p@x!D:⯏{L};C|*M5z[nQlxϫy 72` ^Dxzp`-( I XF/OUيҺwE0HNQ*AVM`gA~1 HuWBqׂ%'9}2d/9DPE"LMiΘ,弟s [#,卐\jE+_=Oտ. ub^n8?g)f1ݷ3!LJSSKР-CX8[PTZ/Ǽ"t='WP@}يTA%7wԃ+u+p wzI:ӊxmr /$E([+G ؋FS;OU Ѓ%&ȗS:~ͅ_R:k)TUi@a()}_k}ObZ;Y!&,~>,|YNunC@:>b 6.h6%UN[!p.ckj 6\*{&|Oz=o+=*F `.~- )+Ϥ((awZ _,'.;h㇞\wjÁGvb>Bz10Txfag?o8+ѮvB(Z^k:6iVUaH:J(+c"2r8%ҫK7\# \*]J+r .Q#Et>pM*(j ~]q <\ib߭Vae̷-;GRKTRsB*M(]䋮Mj"VpAQcЍ؊U1_ω2{]hnlp(M\\cx+͓4< 6i2Ug\r렸W%ݓ'FB.ũ_5D-t:S S31_cԤ$A skvzzVxgn$]{*w0`cN oÎz 61iZ%M/xٯQL互48JJi[[eZU"\ݷt|pEb U!:=&ӌX5Cדl KeV` şlV2TN(45k܃,ʋ bGi;99IQ zё^o]I--C'%ZD:ʰ{H*_0g5i|mvk?uW3+(gsi:'>44e^2Z6ioǕPxK8Cٴ׊{:n:֫ ~%]sk; Kѕl,*37da`(ǝ杠?Sg-fxH` oNFX2DCpVǡJ\))rU%G^:)y) }(IfpThv1PD !]kZrq|X{%Y%c8/w-CD0ΊҚQSl M\Lv[%/L@; ܀mO{DLReJCGhڬ# Bex;tH> y!6)>ui[p@,S@<_e8 U0w@v/x1yt+QrFhIA0SVZ!蛩R?F-2 N{=]-SCͻIh$j vQ4EG *5 նيI=x/A+x9m6r] @6z%)M?Fz*jdv <.4jB6 -LrfeCj;۩Eĵ[bȲf)嶮t=(7+l縘ĕӾ ]Zg)tC*gtx3v` )]= E_,T#)h!H GsS[>L|g?`cG_]Fl+8|/5kJ9zf5@+!=Ѳ,o'4;FсEq<07jOE{U^\k7@ao~캳+8錙Hc gx4x=ʼnwectEud:̈́ {L![G ݽwG&#桑&H A6E =Ta;gzݡ#1 ,pk(tQˢZ@L367MWrq/"RBhyt(Jvp:g53JWZo Yo'']K]x4N [t5}ȠXHΔ0E~`R>NЕzllW@2OX5]GйX"ZK|l4 L -Ӹ,Q]5o#;ўqƺd"L`Ɓ V@,Z]3YܐGC|yghVkGˮيL2S"/PFT`[2זT5U"d`d&M)7OUN]'mZ`*n0mCVWͱ{m|Z?a*iX nW6g K5B3\SƉS>rv{-ipOVʤ+fX~52rFv=P.$K/e [46o&)?77צ@"1Wc6 bаVTQ'0_#&@$F}Cɂ PٺX^}&(yg -t"b݄^F3`Hj3vn99`@NXbͮ=hab S@Ш[e [LRr;ܨ5}cY8Ҫm v&!p>nQ`3ͅ;k(ix$JSyv"IbNwu~ϓWQ9n`|SB)DH9We^MIP*/KNݓ.AEԫ0TbЋa$0g{(ai爞> ⠏c) 񣄇WgwQKul ՉkBhe=ĊEfub`>e]赃UA;PH-ds#hǢ'rI{1i3#Úc@qv OV]곕qJ]=f{1WOMD]ٓU*>gyM#d}%*u W) ރr Csg[D^Nsj6[\AAå. [~`@RZHP&.9"i=e o=4ȳdlYYڻs%h6EOҙ#}HvtXv/a4QPY([mnT[72ݥf7IGg*: ATc CIbX_$ >-i8l.ZK[` ;<'5z-̠pC8wTol#GQJ{XV:P:EWU"KKJ,K9n7.U;cDʥ<;Zut0p<<$gaXHLY}¬2Xr82ej:Y'cK"BkZ2÷DLn98}]M%py[g1Q<*N84a >A&eL~JO4 kq8B@E_l7Dq A ]9a jƥ:j]- Dl_>P0l@>NbH‹fa%EbDpҒ15N Ռ6K?:s[vRkX*~/pRSmpgN" ÜDLMoGU$` g[ q>Pg&-J7>:[\ݺo*4E-L6vRui>nא"I;9-N]OvI%r2ى@Pʤiv0̱#B<'}bb2$kYim r@wB^i;昲䭤$zG6@V 铎v_ӹm2:lmKDkv{g!v!࿲,{279F 'R>EBVO`w0bV(Xt^T¦*L !vB՝ŧ ҁQ]?@e#b-g]dw4nFlͽY_gE*7ّ)AfgEE:HXbDDG0+ bqmj"2BˮH?B(x5+(I{7e]ޚ633r HO![OuS{5˨#=-&Dݱj`&<H#X^.U@XfqM`p V!GCXɝnq^)?,J1 Xˎ u6}(!`URc׺%q;ZzrH}?Rho0['T~ޑPU@>\farR.ތC rZ-2{dEi(eW_á5h u5՗)~-$hW&sNЂ: U|ڎ3!y?cHwNE\/w9oO29O^ƕ˃}] hV<`PktZy+&w-yd 8 \j*YRtvEw4 (F{s#CAIx^8c¸D*c4L[|#Z j4Xj O}IO9|֎NfU޸-K5>p׺zo6=;LP]CB9 p.<ޚlU,^ i !KkcrtpC)]8_+> #g̨RZn6lrDx i"I(ȱ2џF"]Sq"%N㸊 y@ʬ =eUnUZKNC5w8ZO|7Յ0_]TIJdOcy"v3$5д$xk-ˊTh W$ }>dOd<ɵ6H#P`B{ވ/ -|H=RVvjT * !l~PId68&i- Bo%eIUkXnנDl9:, BVQG+} .y3 nwy{~::i%l(QEx.TS)N,1-'Q߇P?z;wEyL;~84Aj8A*6M,7KӗR'ia6mɬ2NzG:K˂HQ":#էSslBb};G4⳥n%y{hGMS:7l/Mi2U؇jں RRhAa i䒽2I#kXNC]Kȹytkj uu rͬ1-1z-xN?4nxևUZ"?+A:O*xbi|qniʂp5s(i ^#;).*lse=齳 S+tN^dZr^ >B9!T<^[a>\KK y(A!@gxyj]Ug *:uϲ(젌Q*OҰFJ%*Gݢ}zro5t pp:ʤQutA+" hɞ~&FCnK>ġj*+X팽;÷j氧Q'9Y\zx?J:x&Î+Hy'GP\HZx@WOf@au.26]Њes 4?D`972SD=bۭ v ZCw5_i1,}+L-N[wD@G$A<y4c69:x ]mX /YY ӻg5 Эgk_S4w] w `Rߟ9)a^`L`TZԥ2*Qi"Q:fۍX%66ܐU0>"/Summn`QMSєr@~M MrJh8hbVo jQuywT%nͱhOzlgˇZ``mzs6!򛻝zf)>l\`4>&3CCWab_mF(uE[!0I|PպsOЭ>xG::,Y?J{  cG<8\{xkK`iT+>jN{ęۇo5"p~)AUt$ $1F)/Vqkr@h&CϘx5dq3!EgY20}Vۧj ݵ!Oч>R؟Y9Х@9nLe{N6D#[Ҭ}ϼ$ Jt*%X/`-/n|جRݚ mr"v/XR9H xF p DyJ%)N{C˔Q<7X\VЪMKѧ=< oȘɌS*ݨ >9u`ݧvcσ/mo-\s뤶;+eb;֑+b3 \t60DhnQy:n5[an@ YQ~B[K08Eq-) M'Гa Oq oK']F o8[q"9bsIaDō H&1(ՋLJD5s1eqVt{^P^Kvϥܜ )ON{(IK;J .>*{P 7mAH5Ӛ4f%J*L k56t:55`b_&cZw J5/C3"DkUjL'tm,S \#`MXr̻QrYB(dgvI1WN~^_*FZ8Y`EV>Eu,[3 "4s;'V*N1s.DZU_LqlB(w5=|9]a+C^~[-WYm-y+RsVlX-e$3f;rzj}#tdHw$-yXg+i5EGp1Sqt[n\{V [\JI8I{ #=L-7G}C/&~0',>寥YRgϺpu-3с 3zA7U\ Q;w)+k*PX(nK]`-Vt3.oI.\> _ e Y~A'phsCU|ӻ aMRtWc?$U&Lh|_OɌ?48fIG= AݖǵU0Y3F<8PHu0{ݾ?VD.+;L ÄpHC}+yP7' QTJ4TX[: 7uV!۷>Bw]$KJr h=a&;Mpop,ԥ]7r5jfv]0p.zlSOtb3|ΪXÃaCNInV C/b֋&'j%Xͺ0;]j̮X)?y!^"@*D5yg_. zk9 6epm懨-!v -@SbVFA!'#ِ.xwkS'aZ0!.V.ܭ WD>an7Jފ:Ύ e%$r*Hy ˻1!!AKZ*L3 9`Ijf8hsP351@ $酪nx@hl1Ov%h#1O{.DHzIK@(T'(J-73"2E=_Z7w^*op76B6YW5M#ʤߦIG%aֵ4<@6]O1(g`ro:2h5ܸ+.:B+˄e'ϵzoOdvGi~K94Aˊh!K6M"p_4\DǸ)-Xilvɜ!/ge"ÍtfZ_tR2,,){n4"/~poL_@bB/E70}SEQTk'oql=eZ}w[ S7޷|N<ŴҬP@Uت˳ +8}HVN}2fekN/aoy5[qlYGSx,=|/ _=`  b'<%_FH&O0-"9BoR:u^luۛZ% ~_u,!3獠ߟ}J9{Fnn p%eخ5 `%SVJBgKwjG!b&~8(XG&ѝ >Zժy*9z"X_+8_v6"Κ\X'G 5 iTYU6ah$;bt1mU`J')f1Wx3n>;4 aPl",eB=baGNX/] ';@jZ9Uh*f,ƆF֟b6++? <ˇ`s$%B:p.tf@}Vmyj0Cܘ Ekr%.ёFlH*mO!7͠yyBMDrTxURc ҍu&&a/F l?>sўVMe*F]Rr}?ld.}da[ N/g2^NDaPZjV$aj҄{8(cԽ2葓/0BU;j1%&R2v E;cSc6_]b_Ozo `ՔEK\oI6ʲVOjd6r \n¬yTӱ 14vC1ԄuGla@gFD%I9z!߱Ȥ{O h~Aii1T[ݗNʃ_ CD'?ewROA8a+sʛz(s:Ae ?dNSm¤0s'iCK\g6LEJvwŴW pGpM[lS0/]밬= ?/S\^AS0'h*rg\Y7jcKڃ+Q:10Ԗ Tʈ:3u=|t`k@G7ilj8pFl`x\lgړ]tcR/`OI|S/f^=5o٪w~\v,ɸ_B3qѼ]^P~aZ/{:T|K DP",V)?˭*Oe%fsG4 iEI0VfTE݄(&~tӈM({gӍ$2tz[#+4,>jC> ߬&*Dk{3* Z$G=P\ROh;?m =y?dkrDQ j]-V4髄٤7B'.VeLѰˇ万6Rh.dyq4kjpՔ$;SLUM4Lߨdm.Ko1wXx a 5- DLWD̐q>}l{*nVnyu*A]lHo׶ $03 Ht:!0'`KNnKO+١#i觱9ܲyK.Lk!U,G25 ԫ` #:6eHZkg ՛@h ȋ1!*wV< Y\zJGkRV*GrR4#%s62ZA/I =SXԀg3.|t4$ni=s1KHF8:AWyoh1 :zKKua}HY(+ )30;_|w!LJ%,qZcxr(͘!'#E< r|!CV B2l863 Cm*{ʂA[B@fq !y_vaP޾:ۄH T?%*>Wʚa0l;9WxG9)*i{K^śTr_蠨L0;t|(@=i&)5BFu fQG0{zt{?ҺR!N E}d߬LBdJ(hqc<e?SCUS+Z]JHcc&{!#ɴOKYÛ6rr.GW7XҼ4ܞ]4iZ(p~`؅W& .֠4izG`3*W,U)(P^ l7Ēm=> <؎6Wn4 ?#plC-jiO2IO߶K҇YP\RܾvГw)sn(h't?l~GeKZz:EIiˇkWֿ=ӈ# ,tr' ts Cx{[ 5VUtt=ad{AjwѹG_ QR/ҍM;wGL!x"[sU/"hc<%tRz+ y7;}~ey23ޡJ^*/0v@1hn!f!7X,V`T%Ď:!;Zӛ@ȲTp7)hj %T|L6y?8pj80L\ڏQܐLn0|5OjkUoQbhwzŖ} <дDa|6>ANϢwO^]Xǚ"D1 "Lcq}M+%ħSO4ט<ͲkWN!B;?LQHg9M[ͫ#Ppe)e lXuSĈՉq.0_i5t7ǚ}$#ty[++$Sw]nҳmWSO=hkqMj(J.x6.}R;Gyl fBd7ĕ91>JlAoE9$.ZR7Uyڨt9ZyV2Zđa^0Qk2FhV#[X_넴L?0o[%1ʒŵ!S<"qدt߭(PY״|֣5!dnoqCt_+G'Z1!@.}4@@< ֣rQt&cu6)/C&ǝāL"n+SP't/FH:=8O29ZK,~車(Ym^IW!5}e/O~8]څ)3NP_S&^])Y}m8@Y/7bá1j7|ؓ#,=>RLx^Gc _ f&0W!;3&!~ދi ?i>wD{ɶEF'-(踨$33oŹ_:LUrXR8~Yd-A ݷ.|e+Si^Qϛ _.5sxRBgAF:msXnP0Z= jk+5Sf?;,wߝp} NIjEY@|tHQw|ǣb_1nq*{gr*b !VoG9Ī$dyq>dph$֩f"Suq",{Ѧl2Y%:Z##mqpJb'XHXRRTQGw,=79Ð2o}rz(b42dqVhjޘ!$fW)<'ՅgRb^T=9G߰c,Ow NN[AF!(KJ}G!p'Vw|lȥCnaYՋdwLfZ N;hIPVuPuƙ jyA`-@?8%MF}[&JQ}{Ȯ-,7r:p˸v46L\مĦϚÿ?^B ҕR vaspl X^:GDo[(@WHz #N! (< 1ufEO\ y Ѥ`$뤂gUaH &ƞ(mx.^UC*o9R%8+$-RH=Gvk tJ%䡪󨷉 39(Gug6*/ވ8?iP~ jv@Ge gkry}|!8l`h; ,L'K3z & Z6hB)Nң>/`9M \~'.[^jKGT2hu.=`ۥ* /&~ >JT>&Hu dd8zΦ?s b k[(' ێ7K`3d;KŤ ų9M~RY Pw囁fԏO`d! FBCdcN*F.(m|><˰Ӥ*B{[FҮ+yRwۗtf/Y4Je@K@(r՛ِ|u:aQE=-AԊHM8GUݺҐo;:ՙܨE}| Zd H@Q`CjIL9||0AޑP4EWj}*$("ڇzݿ ,L@v}GP)!kt䊸BK!Ea#pGn=ٽ3TDF2M?wk98kzV?O-M{ œi<NR +ŕq>&Զk%d"$ OIr fhOα*a,̬Wk){',p_yN"Rg_1|Gias&+| f?j\>I[Kx]!.DçH !T׋;&{:o{n){( p=\ sB.t׷f+Cvn81 jv%3@?ȡ^m>aeIdnqK*oaC0GX[]ȒERvKQcѽQZPSU:9b t%Fb T|G5t?ZAȰiic^L}E!˥i1M ~4*Z!5i4ssg-qFYpX?ҟZQU|wea{譔FNMm01Wl:`7Rc65t @pcN_;^ NW3I^w\"~ f}' bp$C9]['{ $BDy3:eGO|r 0@ `[*XR~by6f] \}W#JRX'%~}ko#ڿ̺ZXݼe!ݻdkKLr{zMCL Sm2EG,?-'7þ8T6ϑӣ9 4`9酶]5$j#~/d!yG&5'WTJm~Q^'*Nb4;AJ!Д85Q[Z%8ѭ/gJW/'?D6~Gl%ˣ{1YA,C mZȼx락j-##2dDEx젔LgѤNb R$ &, ^bDCbAe^+!<|BJ&(~G>H,6שA1Ɲ)&GCgPY_m0ugda:gjk ɤBlK8w-0_Iw^jmZ_ Zxy.;oU'(Jȕ2МDg|~_nKW1򔫼V78f*zP|cggX -(/hJ8zD90`t$@&q%Pɖy$Ǟ;,*i"`:n˻"'/8_gtaNvSC֋$ Oq1ͨNx(AxǵZivHwZ%ցdn>îϧ T|_\rQ^VN\ ,35}QϦt AI@(q ]* | ]C(͊e/\: z g~%Shp2?䅤 ίKsEc;_cwkqn&P;T&Tyd"noKyѴk4V YT#Q@>cE*^nQMuQ綿(WZqI$|V?!ar&'h}tY'zf7ߣvwqrWV;:q?T 3U2$nAAGR^JbFW;h& ˜Ftr~-3U#~'zBklgl y T݀!,]HsaMBb f~ V!Jt?='[u_$B~D߃NOAp@|zc`![zz\)qe-C Ljmܙ%cZeK!3HrydY9a";0pz+cg *hΟT0UҼ8*4s6YV V`1|C2vZ}A 5W:\g41+CWi@yarj|t{wP 7/3GP~IŚFgJ%0Woכk7]b) Nُ`2M>au~BEYvDX7ۃsc.*nIz5)NXka?~#.$f%; ZRnN 9{fey4T22jѬ]:ЖfRcӉ [P'⎿H.bmNW`WxK9U'U'Uc%yc%X<[ ƆlYT\5 =X)!88I'P6b*r)KW.[~WMQMG#8&iNEOÇ 8\#\h3a!jk b8YSarDۿz.+_rCYw6d| )9‹+.˚0~PqaRO$Pl s8 `.M*A>>Lڌhrsjiz%#q4 9.'YwhK6͸xgufkH;OmW(0fH: U(2s4%Veyn]0iQf5kȷXx (Qib?Hwնj֌+yr"d|XTmFoEveGuUa ZJH%8r%ODQ, b%D$'bs܀wc(M=RL)G&@AINc d)HJXK&7).jB}JڝA2x(n[AL<(*@bV:eh#[zL`EގmBW;p06';0yGݪ]#hws_ar[#.&M|'uE̷T)?8 aD;FJց@+4һyOʼnz~{}jm ^iU0/tl(UuGCbKy[Vf5 ABzh(M}93]c'CyY9vj+nP%hg $t8Iw;7VJb6&#i?vX}̷1:%=Ґ Z`e`9Y`j !2'7nsH@%l}>ʏޝǡLIO d؁%yy+yHa&Q9V>X)&rqnQ=*y]d4ZQJ9w\h7\g(حhʧ';sJbѾvpLuI"X O.t606l9i=ò92:΢Mu>άʯKk#AjTkbS@$MUlC򔓴[5Լ-~H+t\_D8ݼg-e2(a$#R;nd@OCC}+&uJCQ`uQWz|a4B%$?U9yJxTdWOH!<2J.]OQ;Rls_;j{A/O!u'2iu} f93'`Dt9UZ7\23CT@]UI'NQf7vEc7\I~窼79FF0gUz2ꋺj/G}3\8@gU7ܐjri=/I{,4+,2=*&y']TrQAd n;(n=jKr"Þ{"?wj< J)S׊7ZvX_2 L) 3,ٻF1ޥQ% _K0?+61}| X J(0:ԓ[H+'uLD7[ΉV7= rIt `rX0AN] ,gXn4e]wp1J r0A }]OpK“Z~|R^*,ƍAdi^D B~%Xة ЈQʰ|\c۲m->e[F}GB'lq{z^P !3[3Ů939zs  h9pzݧj+ NLTF R ^: GtN˪ yU**Br)v =o~V F-):2^#- (<)ZhGa/Hq:\P`d(CWƮN>D@d6o8W$]LKrQ} ~(سMw(fgDYhOe(¼_|A[d:bL"Nb ϊ:TófMU4*/EU ϩ^%/KapM2˥1W\=q4S\ Pq}3^Gw6#l$q;BwS܅~z%W2u0-}z9blޣr,B1|i3PY^T}o"ڋ e㔑Xn1ְqfjR~6n=*"o< &nNm~trqҲvXb0e(yEu,0Zj9UbLoxSa3vwS^ P?bǏcjB diw)ֱ?7U/磣NopuS+*K^FŋcA{c<,[>SFp!yn[H()ٞd5kʒ5hxv>М3oFǛϵ6GKTwX1-nl&/iHǍ*:}sndH\WZ;:pjrt<(_k2s?@ȉ`9'.nvT.npJ J3gs7Ĥҟ_p. '*Oa wE9z Adp%lw~u~ Ee\?%]ÍT?;c3~Enf&(qdwܯ.3_C43rUE3UnY1y|Gm݁XU?WhX<x0Rȡ\ VSj7KF?݈ta$$]HAsJ/5f)&B_2JD1r~yvĈX\XPOWz1k؜CWǁ~1{ >UuSJ7,bUʗm-7U@Քa lڱg2sY(8?VEpy$h֙9 ]R`qS}T$S{Exey $Evd膘Zʥz~P\ aK_yR=T(:B$s()F|lT+"RqTc8 v([НgG2h(CjOݿdU==0blHCv4¨q-*<+C<[h=$V6đ$n)dc'"#/ m@[g*6p/@r2b#w}7>usc5ٽ@>Ѡ OԗwȑK  4oߡ5i 83`=LKwÏZEq#h]NXϬs G4/AP.zn\31!tohe><[25ݚ@|0:yTl@IZIt .K$nQpWwDnVҼУO6Ȗ_qܺMh ?@5MR:9E4h]7յ$_BDq-b]¯ wVP*n_\˺we#nZ/]fϽ-#Up Ua(ֹ/{{]41T0c}Ho$g+A\}\ݣX0F"k3GOs$M=7)«6|)mf;86d-5c`9Ψ߬ /? t3k7~Iq3Mz4\-AJbw9*l4T5c"0_݄?푂v.IɊ ֈ |"c_ ,?xmZ?4xl'Ib-8>a,Usu!^'\V%+ tXF8"kk`aҮε6ޞ@,j$kXCϙ ) Mo#dO~;XF Vs$5fA (M+4{W38{/lW@Y9QliVn,5H5=vۚC;nd@o{Rϕ NO)Bv͹:H,Ewjg9軳=7;']aGr,r)&Ae9kK(Xܑ84u|Ie+S0>z .M6a 'OhYN;D{=mwQ)@ >@Xq{niNpەyTꄲ05kWt7|9A$Ej'يJXl~&[k\7I6,1iv 8ɑoՏ=RQ&P#U~IC99V_cg&) LO?~W6M3Ia >oPf1m(/ekuf445/z5u \ElΚN< UǶtNRBe;|?!7c1'+1ʾ=do 7“J3I>/Y8:񌑗4 8ͳ^N6/vʹ#?}E^˓HXI.1BҜV.lP][,x3XM䡜 sej)7}0 s :#>pi7DnC_x#fb:#yn+mXZR3{f %3ޥPb ;_* >Q a 0P z C(jƂ WS=- _ 8eRۚB<=`:;ZeCXٷ=[/|2d&""q_Adb?#esC& r!)ybz?_B9k'<l+<|#rѻHUf`!=v;H9b]*sgt0od6<=-j~|J'@DczLS{/Hx}ap [e{Bgo+;8&Ƣd1^i|ou Cr'/MGȂus-?KjK!h*NnNkݟ~~ɪa@4gdX`yg@E쟇wL?sXs/!~JkwS/_n@ki/O g̳Rx;BMIzZ 0*IQ7Br8*&HS z|E9B},AKʻǴ [vJ\u(>%dMg^Dp-5"]\oy6k7o.S=TZ,;~EYl!pՏh[h5987OVD+%$(1L~p8b@ھ4fߌF1cBO!fii je3\a\\u>(OBP;2/Q, Իʟ.M6ZCg6XFd)r9]\ !r{^Ӣ`a3RT 4wC@msOXODe= c rU y~O̗Jn*8?a@"#:[̷A`"|ٶO4JD?vkHױ;SKgc{vO X 4yX=z!_{#ϜQ+ٚ킃g&%"UbscD^pB ߴO;cŀ r5h@NFgRq,A+촶 uĄb $ X`~0TcPHi#E k ,n.Y;$$}t딫&2Q_V:wRX^b]6O4`FP1{g,Gj$3=3RNH:\X o@kC|P9]}Kb? wٓՉd[PIąv<˓lr'{8IL&.U_uWC i679:&Hc2w\ѹp(60%b'yg}0rhf&'_&M?ЯiUkBH8Z5wٍ)Jocyi0'3/6s1JШTEROJ1ϓG%Oغ5}:DRHV'ԑSbo4:Bu 1$Ad)< > /טw?Zm8eup\Ň fvuV%+$|}Asq<**gwDǹJ?$x-[18¯O]ƀ'ucBANQA]Bw $6P?)Gp[l= 9RT;%va;t%|7ᢥl4"4H_/UWP2in12qAUm nq/^r>L/RV=A$#GW2jI&Ċȡe`\+&]_ץzL84$å@0v~1zL(ZD8_9rx nНMp6gz(^N=y2 +}8rϣO^-\{]+YE $\ʲ-+U^O'C ^2@ 0T(c7aw:L֊nw€hbX!Qbñ&Vxwq_ӫZ.-T/`F6S㜵+s;'B.8  d_!mԁ^/Jαc0əiVqu da%NZܮ>,}UQ~fѿj3am^WfIM _w t(~F80"A7#N,'/Z:ށ{ M wVm5xHɴO4Y*w3`u3XI!j2|>)|-嵂CsD`it^½1y ڜҏh<_Yui< |Jb{"M0oM٧M;A|*<6QbU`i[.x]=?>_77:[ΏdV)qte}dWy-*/܎p7o>=\)䅙3@&.$򬨎Xj~O֞zjd.C\qK5WZ\o}bmc;匪lⰲ@M`lIs$ \@;_Kou'fu;\-Ņ8xpT?D)hbswO>f o)[=0 hXFYco[3,Bwʓ30hC|o/$f<{O 0`U%h  % fG鲓# $wð^ HXT.V?R. Q7|[]{KbOzхU)J:AxQߝ9/ VAxh! TمG){~^ 8g3rKq סӟVم&8.CA=dc1v3߈ ,6әuH"Vc#;)dIv=8tqF_aP6t 8Ъ 82<q = -Wj'kl'-R_/]G =L#/~P)RX}CƎuߦ[a:BwzX^3?A/G;E;6ǦJHտ+U?QHձ1B̾.hr_|;c 6$;{/Ž:bPw>ܸP$9@ =(yr_Q[b,>[`u5瀣tn. tW]ڸ|rl3T h}ؾ𡞘rpϳPd.`oȽ1lNtBO)_Ek&zj{R79RA{Cylw}$Avs(t W"wöy,|I6`Y I:7ɻfkWVIdIP\qC#NY\i$9s1ibzKAbLX K)0jCSY=T 5, č标V[#)ߋ9'RT6L1JJQ84'UyTaHT+ p {_ΛaxY: Mtme7R Mx)|aiNi! ZkoT""qI5$}~ϝG66}.< ús%uG @[G?.2 d,˼J3f)Բ@=f=t2V2fߑbB@qLQS!';I80Q!C p*#/~ 9^dĔBΌO]oCgJت 3`CO֎ZΧu?eiu J$sX)a^Llg{6B{gAc:в4C8O\GM,@&O|GuEg,*6PW`P$9zy4GEh%Z nfٻzo$/SMO˖)|ld/T k=UЂ \I㺢 Y%LcG0|^sBJN {8Y4j(uLI< v)BU $x'JU_n0Atg_ur9>ـǼF[ Ae,)FQxx͏.{Ii #B }'zb80 Y= 3k7Ut)}jڋF#J* E&hTk}Գh[r @ -慝iq]e;Y͡KQ_^#"^33].m[Tb]"0)m`ӋjJFXEQɣ{8{߿[a=Njy"sJG%8};7FC;ТF T+'3>mWWYY#NYX,1Va˦L u6@n Q4h/omս)=a;1x{X+?^`ΩꋓN26K*@sΫ}ʄՉ p0L[lC:\UO ۦJhfxER'PwH\}QLK:wtZHarPө%izC"T.kchD2娈Ait OO[p)Ry=ݐ=I@&([3e0KTy5tYqm}39x82W3&qYkHBRDtYrTcț>l#(?[teQJ =드'#}AA@ iPL,cy|-&7%2X348%dv%%n X?q wtYW!rk~Pw}גn%i$ks*">qLlYU]Iѯ{U')dyCUDν(v`$pq#u﹀N]1x~h)DYH8W;k\i\@9p>F85W& 8zk bd^W"PUWѰγefۧ.7^OеW3g9Hkͫ1sԉ#_@'AUs)67C!44-q|*\N0/y!1B?)ROZa7Fw1W\~9Uox<Ll[xRKwSmD@&IX4e;ᘏz-PӷfU?(%8 1OYUGKUTLA51TEmH\ɫS.-STj,Km3ß""B֐S/4ecwfv*ʼ*dcQE{Z,Qtz6,kv5 BEyd}5Ǟ.'Ni *Vy.!AeN>1~Qu#Ρ,aEh\e+HՁK zar;YD^w-bjjGT_EIxIR rH*:r"jgttTqJӿڝe\gQ*w\Ge1[*:Cq]uaҙ aT:\iZw/jm4Rdo,xJ mެv\y"P:c}' rqv='΅8G0 ~,mâ^,l6v|A5!ҽ+>~QMZy,q Y>o!4PJA܈V':V gF(3Q |`r Wjeeu[DdiOwaW>uat OE?CfO&]=U,`)N$qh9Dֳ'Ϳ81{#')g0p#_*ҏ2eA oĈ2e㞑r Y$!9%K!Y ~LJ|,oC)S5΋gx`Llek@֤Pgޒ&vud=_+Cj]xK\8;'z eOrUx[p5!3㹛D|&c{\ Ѣ3NXF;{ o]f-ȵuzr(|ipfjuȬ*c({㑺kxW5B!yנzYR6XA\϶;8)Ui]K[)3 yM UMn3OHʗz4hዌDgDt %3,.J;EzkLQh*-O:)t=PŒ#w7G#$솞sIӕ]k+t{?z@Hs!{E(S3E_~w•Ҽmh[sfkkU 6ޮ3[7P}npCM*x,`K#altQ^H}PXTD7lrg#B1,q4(7 }LX8$ =d(ϫO@kmO81`slK}2#nZDd Ҏܩ Fd͂B .Bˋ/ |mj暇8Ր>%ꢢ~Pr >~ jԔ %7TSj1xcxhmSG\$uZ3zAIorus .~=FdtI1{F0SdM4#fr[9D+O4PWF8.BhҔ޼uCvtgy =c#ʟ]J63|9z.蓯h}ߐpBt(jZ\~ް|[cSV"N2|Ųej87kv{ݮrzP/qe|[|x zQQך:}wP%d-+\J3u?qiT߸,3nghV-O (TZP`0p>?̢*V*xa}Q6lLu\d3w`*zҏjXxOxHtm35Wc(U-#OSi/\]m|[Y~ nR?rgQuU Jrgf)+imƒOfm7iX̌)$tF b o,7jl:f4& BȺaå)I53:3#pXv!ƃ۪oįy y|{;x`-&na@]M /xn\6.Qm /itY.R2]%ӫ0mOPO7H(ba th"dECg;R%gNA) -ZoӋ{m%AXm`2cZ"e>j*_7tdsn$t:?\]$_;G'9Cū!}2U+fLVYN * 7uX#hKFX}э(]. #wY]u:u/QNjj$MT %"-l| muԲ&[!N!U;Q@)GsTmriJקm9E: 9p&ƎYAB|*8 zX҇~g_3P3nR+Q C'ƳZ+2e`:*6]E9J1vWR6$s[k >'Qg/smĐzw:p_Auf9yEX_򡥽+PZu ss o"rjmE0h⡓cTN*,oFeึ ]9`4{k[HT3jf䱶3v)P= ZV^<< =*Ih3BHa|~;NR/,F&ͷi>PxcɟDF+vH7@O9Y7H>O1 pFI4ҩB$2Lxm71%bǎRkIa:.*ikgAvł!@r8rӐ95'aE_0: 7z{lGC Sk zaͮ S@T"JzLZWY__a܄9\Ό .VC62bܤ?R$ -  g2S}5؍*TG'ؐH+/hvGH 9߽Ɣ%DAi@R*jAgd'}cv=nLr7)o<mӇ3:c'k`B+ӔK^vy ꕮXV"Dc7=w4QPTE-|{RE&nR& q=v*VG}ig HBKCDv "jUw|``iX1BCX mb{<'7Qc^fQ.? hYd6@5TU|^3ݹ(aOD4zkC<]dHiܪ.7]J+Y 0'ضE On QGǵ-eD'M*e8$oOO6cRA ֪/rQn}َ ԼshZƒI?mV +Q:Qt Dس8^xA,k1:V暰FGUq=t` I%8G_ZEvn4(3UlBmJhɇI)v<5+?KHSU;we*Nǐ?;[&,}|Aű9E`o::)V~iu2+~{ 2n1\;`6 i? T{%yS,l+ah%QNer7KC 9笻k}rT_xپ>P:t5lu9]i wwg;# `:Q+GG:'>g>?p)*H[BX&E(=bE?Wcw䝖bAׅKޖ녵ˢ֝3Y_ı$Gn!%3|9B֛ǟWi㣿*4-?gLh]hdsuP +[oX>l[G֔?EAv2r .3D+W\]Js??ݟMLV*D,^Y*h}2nUHoXdt9g-Y%o m8+v Kơ{uX7Ng< 5Ss5W,@QJiHh=4.,IԙS.7/8?QcJ~4rqMr>㍽fΎ g2K`?o4A]OJ<%05c/wjaeԙzP*8w]+siE'(^KעF D^)&sΆ!"C\K(K^v#`QY },a'@ \n.y!p؍E0>C~i,Ͳap1P8j6SBFɂu?8іo גgL\l\4q83^J=tbu! Ԣk.(;RlPi/CGn>9.0[U=@'+vQobg˅8ds7Ŗ :AwL`XHݬ rO̭=L3ɍɳ! 1.tO625En`NֈF3zc8-= d3o`zE LT ;UFu?@@P_>]^p !A1zj~9&;4qRrke讃7hr,*ʻŢdOԄ){-<~\fβEO*Á1Ue )=ySBE}S?N0r Gǒe+^noT-f@(h1@lcq幖) doO%T29hFP6mxAj.]hLpYNlsZa. ȧ}0?*%+|QGӐ8=TЂҶm޿'DGǃo\q:Al@RR;Ѧ)3k?cҌeo3FQjtLn} 6tV? |G E(-mY^|0u N$w}zCӠ &v, ( 9ݱAanxͩ& ='A~h)HW}ag8閌LgSMELمA SZ[ [λ=[Ew% ڮɌ9e8Pa:HmEU@QwQB%RF;e{J@ШtG_ӽEhA+}v:<,GJf!l즫xIOܘq6~zOhpP6o>P9E%hYUC?gJ e`˘FvxhIAˌ5u^ȣٰU/AoMPr&>b/x!+_X!}sh[Rdb7^7fT'?y=hV9\4 q}(o:9NMGYQb3/\Rn#$v縆Am#$L1rihd溶 } F'$no4Y _pQ|7 x1UVgܡ,Endx ]˔Z0 rki\(Rob ,Y׏qR qt1, !gD=A6JZDW]Ԁv.p'IJ7oget\ c, Ҳ',c 3Dos t5(uT%$5`\z<҈#GSjҴ?&Gs#dRqւ;n Fi],(uԺՕTT_T1ef{fpksXuc.wG4ʄR-t"2従{= YMZdvBï.E =]QS_F;'3-i31竌!G'yI|0+(f^V^m^XݒTDO ׫32!0%³dP1ܔ$Й}b>gbKaX?RJbgWaY/NEaV Gklʰ$fԦ }=ΌW9U&:=U67`ן3؊g>jŷwB'S3 zPNZoҊ~y'F'%tS*zM)EIc~6B|/ er;SҀh+t2gy `z/Zbo8.+JӁnʖ0 b}r0Rp#9?Rfi9ɞ$2^ FN7DRKԛSvǵl90IȜTi~A9@4C,Б* h߽mJ  ؟o$#nzP#+*)'Y}*5|`]:bx^gh-!7u.*jkʻ"@F ЩmaI}?ַ L&~[׈W|wXW?PSgUR$Hn/YU~k6ّ@qfs55Z A{˽XOX~騰FC,<:ˬПjS CSǒ_]7J1(Y,T6:e{AQ OÃDtiUcD2!Z(tcB{WZ;֔% Vf, e u%|NH3^$`[ '/HZ­:cnpW@y0YQ?| ;*I5eZ2|BCzS6ZW6mxRe2|t_R妬ɽCjKh_s-ST^o*'&k~r#RWp׽ Ky5~JbtY̍!JgptDsY:?i41zb)W/y] Oh>:UˇwyG*yYu̞vC!6.2:fCQTG[qv¼P"Hisĺ$=0_U,glISlNy DgF\E{^o [͢8GkiA7/i-1prL (0 <~P՜d@̣l ڼo/np~%-,qa%7y{uYS\uuH?6Q^ڀ{onz2aCMz[{4'F^KPHpHӋfs|L5(qprŷ!j#ԧG A>D< t݌̼Pe,Os0 -BF8ߦ}1RM2Qi)&CWRSXTuxP'VvP)4~tL7^P{d#uɤLzJpFrǼb,۫ðr PRk?d4#=X rXF$*Vj&_ u;.vşOVByeۻ\Dq ~'Pf < /˘żsɩ: MKt*7 jno(%!zƶf=oӶIP#J#jJNjh1ty>I*NqGKaX?"S`5&G<'opd]Qi.WxpL*[vONz.E:p&b[fD^G@%dv^`SeH|~sǽ_[}凌򔄂y?~) ]@ᏗEoSm0ܺ9բ`,*U0zt\^vc)5F4Nmx Ϡ}YdcвlD4 ( (ܝmj7T$$NFaԎ^Vn&:jU;m$Z|Bqn4=N˕ӟ,D+WW"^LʴLdeHt,yx OD #/EZo Sc5E)$|R|Ͻ1j?|zn0:kTz}@!H{הf=59!X%;%.[wϡ;́]-ħb LX|}jЖ+~'.:{9#@DN[}69ӎN0# >^h d#MjLe*R*;/'.ݻuK"0[X);Ń]k$$O|Biq UkZ=S&q0j&܎?PQ&2yrREOX6S[ VeH&: jۏEfju(q)d^Z߭ 7/A ցѨLVŭ'0Wl<<җjz9jjOz1wmnmD@W `B"k ZNp8(0_PC;/)§X8Jx +k|9*Tr29z{s#KPO1+Ra,+h,cr]]>Ħ7i[v$"SbHM.)\RgpW9 ̞E*4RNw"=jӓMQL 90:F'aVRGuqAmڏ=_@-v; S,5%n?Sgp3וo劷uLG+Lƛ۞"&&vi&Hҿq{~u=XcU 4=s&?S?NAFu}=%N. &aHU>:"$<e)熎vXF#5C]<7?+zt yH۠0@tǁdU^z}ѹ#jN9x6絑8ۏV%BCkVa^p3Ti"P!RmG^iaR\զAjOIsLW,{ermG!ۆ>tQ9XjG,$:)RFJ׽ `YLDcʌȳo+ [(!DꦃğѼri-9{X<"6 ˜ GOmutڎZǙBSޓw'%cH߾,+o)(ڝAri +['v[?@`*3V/<!߀ꪻ۱i^ C-/\X%Ja0u,ڒRa=6IMR6jXHYr -| xJ#;=7G]CO=PfjJ6N$6i!!tpcJ͆jCM9$xJ2W.1)~#`u|UxZV'\5m0ogЫo\!pIcNJRcOQu@}|r} xRqm̛5%nLM3#˵N-w+$/.ǴUvvԢ# _JÜѢv?g=.EFTIpG;EkMCE?-`HnR ؆=FyR,&ÙuLy]wU֌Y'I}lj2Ҋ5,Z? N=n,ŀwE &VI.w,!KǧS'Lkk,艟 :LU4b>\0 җk|&@`Gzy Khhm`X/drc4eX0/**SRnB6 nC\X-G=K%_ݻ?H9嚢eբD('ɞϨ?0ɂ'kvZnJٟ6*E5%¹71UTIdmnw~fvBj@l~?$edUXp5de{ F0`#fcF8'"L.eK0@jnҽ"F.qg) BKVGlUux%4Kddf.UͪclӨʦ,Vs[LaYzZZ7V("sR5E b1ҶUB#y+" @e*=S- 5-̷o_2%2[wj}mԁk!RoWxI+GhY㽥^D|}Qը>=}iiN+EŪ0+]:m8Xb[j ~[oK\|)hj ƏHsEw`rtГF~iļn S Ljf &M0S*"@m1i\Sv_~ߝ^T&6$i[3ޡ"A/Տ4{tP`pM"@o9xStB.gA\E|ɘl*Ah]mڭZNy=HI'0/Ө wW*Ȋ.d7}JACAEx~"oG "\G{(҅9jY'2}inϙM8ߐ#],dVb2 Flڍ9rK~RU/gӻWGJױ:՝j Q:m7P_3h)FNlVPNq E, t3}NW+[?(Bx<^ .OSYITA?'k_wKR$ ifQ:i/$VZ:d94+k(@a0clsdĈF!~'l nz.ɵ!]wKa1uo^+{ >'\>K"LWQ|񨻲2'TQam.4R(UT&NFIMpE}@;*giUu0ނʝ'2F"눀8V;X|,=DE?{COl2a ?`EӪ;s:RaWSyyE76i\e_-淢É:^;9 VzNQZ1Whw(09hR>B-悜9mdv-ʃSB0C k?3N5OM8@ŠD=>K UjfGNK_Zbؠ'sBp .Ї ݹyl8iG));38~5?{̙4@} |Xa#4_M cZ#È-#$r:Xz?zP3J/ZvL d5>[$1sx1[cBcB( '$Rk IS0d !<>aæ\ÁJrw!xˮGz[i,1퉓fӭRgskte7@|+7WXo^/ &1kHoJ=fM2\%hw#"IFFYVvvÅY~WP@_g^65ڙƪ~-5yaRe?; "Bn(%3m"'Nj8$Z`gA]D!Pn9縶@مu)]OEPSi`aCN22TQX}?6 C_ )]5Y9dVu u4RZ2Nz-4 mS|Cs oD@AsHu5(HiXAMn~ ~ ŋ=eY{Błwؽ_zsI`Tqs_vYJF|t9^.N`ES!wv 1>g{ B<FÏX=7&ԉM, ?}ְ <  ,ͤ {Ơ0`* 5ʛ \w <;kt8EJ$bl$VZ$&'ʺPS!](k:;3/G8GlF  zK 0J66 .fxfRXuGE|曅@G1C!Y ZQեzV߿Lrs_ڛN9q_7&S `?1*Њ= zmFn8w_/[Ͻnc~|+= }9}Aa.VI@9X=j!v::5#lޮn=xO`>4dVDhN%4aD{=jb2FYĀۢV`5|3AHS+VHqr1Nɷ<DU5.Sظ ў&;a!@A72ťe" < gqjQk-xzb&Ď5FL߳uGt]06PI섌;h n?vwk-݀\ NE/g0AP_F_J1*Um#)#|Ji D m[=f`Prb\h7\*d~l/ux0ܞ}uÓZVekufZ"HDX |L 1hI2)>\$DJUKÆ`xf+}0k~tѐy 7' %%o1և(.M% L%%v5b]8pצ],v)PD@5Jc& WQ5,ޡLQEWsǔ|yŰӣHҀ?MIy5qvX'.ٛJ$ "5+GXKS 0%Μz{qHhS5Wî=}53l4XɎjX IʕI#0DB>Qoۄ@i rOIA2]Sg,Eov$;+u t,l9Bkj=cz>& |Ăԃ?]՘xo[9{y|VĊXV_Q1)#,QuGkOUiMtɦM$A@TMoSUUzpqµRLP4ZTjz?mN&{iP5B0]}0'hɆ=tITR@uڒk [(@|hK2秌$~"؊B^ׄ'м)*Ӆ9l"Q I1 LI ! W[smsTI$)idr-C%b̍2F~Ty2':}ŒNYPo.N*r^8{d #1:Rq_ŚqaoG4RyHQ] 8вW@!yDE6,'G97&&VX U\4Fӟ/`?އ>TKzKﺡHO?uG.RvN"teu $U.Ju [x"kmݚYϭMzL@\5.!?)rH#mÈ:"t}KMuo$oSM 0͕HkuDW$c簵I/nb9|Tl iBǕ^FJsf;1K[TQ iR`jcOj]*F:ZbQC|;9t]}:6Dk-.t2ʿHmf7{Dm(aP2uẼTNĖLsApNP/5K,ΎO'lbmfiZY@4ۨ8FI4 ӜJǁoZ"f|X`dgx#lս?{gۊHӧbRҋeNmHK= `Yg Y|ΎD(huǝ>_M)])0k&*$Q"W`p rt1}{l&W\QGq3aa8AwψHh_!hgs\ҠػJ(ރCAw^(ÕAVQq#mO%Wx*5+g!FH5o6 30'O[~ZSAe:f¹ ;s(K <&G44_Bv||NTǫDS,T7LW0%!U^z<*u[ve@Hq*8 AFFT D؃F0Y>pi`p4c[J6gŕk5Z3\hP v,l)&dt7ݽ zc< yٓu% !Ѫ%W^+P,FBHZHDtҏ\:͸X׹‰ސɖ݈Mj)Z^',8c?̜q}`Hr$3,<&lj~˘\iL0"a>VJ˽w|P2 Zլ%Bsm 6'PMn0\#%e]%'wӷgf(lw)ee{OKtcTF܎( z΅U6B3E7~s, %,W(*&1o+{6~xP#> JތP/<\H..RYל0~ґ*3HKDfY:N bջFmÜM]r3$gcܜƅ#s'zzzS7 Z[v53zحH?~EB8\pQB-:Ɔ"(Jiy}Ln&m,C;k72)_N8H?9E1aM#6=*ۧ& \$ ?*#d?Xwy[kM- kVG>cĶfe13~}o$9$`$+@r"Փi h t"YcMzBZDL~1OeVy{ա;<=ty3 Exc֘+zߊsLQ[HGb]6hZn-*9SF]|{]M/qHQCΨ0n{wac do)@gnv)%[4Ce|M.jK"M wFgFk[N㎨N^Ъ=fsXkYVq. !˗S -uq=& K[G[х'͑{q@19B2v@]Wr~p*rlBLPDNgN$K$&#}pE`G."ǰȐ8nX"mr$q~h-zf'ڢ;Ui^#QEse%NlJU{-tdi:9Qf/ \=1'qCWs #94Ndm[*\-l`*ڄP<&d鎸Kxl#Wfyօ<*և}*s( wS_G?sw43ц0+ Z0>ne%tp4e 0wxv0{|qHۀn.)*FHQr¹ÑxY(GY[Հ,2I5Y<0T# >HxLW5GHI >Fjk뢎 Z(/2#=. [Wc?=dt98uWoLKb2Mz ( YC/DDfX9Z4y%1ȵ/?t2± ,bދG)Rb6ǧc b#/bAAb&jNڔyI团%4ѺZnEe=Gwˈeyde,ڑcqsI9[i<8mɫ5.UXO s,빇9)s$V eբ׹RVѧM|5d: Rw6M3(n f5 z;af#JO/z _6;f&w.hHˁj3Kd8j7lλû,OjW=WZCFz8է UJufԞ5HU6R6ht5϶j(ž ,`I(M@³.PLD\lVb&:lE9l#n-He/;w YZ