apparmor-docs-3.1.7-150600.5.9.1<>,hp9|L;^Sm>ge4hXaKI=:M:DC;KXhhÃo|ezr8713g"3: w8b*fi9AdЂIR\oj-m@=|C*h罢7ve LrK+`ZrƃwJtS!,3* f!z VBCc-' D9V(EMѕ)DG'NDqE^6+F,m@>;?|d # B 5Ihnx         G  T    @P`(89l:}FIG` H I XY\ ] ^bcdIeNfQlSuh vz,06xCapparmor-docs3.1.7150600.5.9.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤h/h-heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1746532570 3.1.7-150600.5.9.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textdnB$tx( yh{+|utf-8e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3?P7zXZ !t/^]"k%fnCQZuǡjע|sjdBC0Dj'D_n@/|[檿5s`r(~#M"Ϙ7VB$KpԀPJƅIʺOY\Rqb)A"UVg+FK@^.nfٍ=݊ ,Ⱥ MS /r*GN(hzDz 錁=xƆ )a O;A9Qֺ WvptnIL+ #fG^\a9~ k;-⢽.S 3](+Ii9{CC`޶%FQc,מ,R-Y%Rz޽.7C  { {Y3]*4u(R k#aGJlL.02" ^:hj'+Y3#z!مAKR-_tVǘj_žnv77vl½ܚ?tH,!Ӱ-P؞zyAp\݅r vF:ZW'{@I .:epJAͿfTBjf`g6AئL CfM@Ho/[kd.Rg W <̒].HqHqI#7<3F`&^9]pBD`N.V:7yFQVE%@t-iM1^pSFz4#@RTiXiFPn>}REj~q(.] FiL[jp؃T>mKN ewa6`"<;k`pXS3on{ L6].~]T∱#tɃZ!yA.jBwWo:-]ѻ+gvw\4N". 03:S%kn6]4ƭ;Q.͍پ˟&^6Be}9l" fol>5_[9^IBZ'Co[ha?s彏Ujoah4|2=n >:F!RʌkΔssI!%Ds0S+%ދu_2s % |ܲ*bZWa ~莳X0;Il9HVG.TтlQz_7傿&‹V^|.ʺ0#t>tkOw(04cg)w?Hj##sU& IMz"S9j賤[5S;A 7WLgXhp 0l5=97N 8NDtgw^?峓}&LDm-|@c{''7}nRk3RwE[q703fF wM*JW$j&s~?mZD[ 񯴲68$5N%]';)KX7ʫsZ:Y.LƥU0O_T'Lg^5-l[&֢e׼HPvhV<Clh8s|D!+OXr4ޜWYϢ*8*l9A 0x v)ns(up r:'Yjw!Sᆆu&vIBěP+\ЁȾt2tUO9<3gµ1X5T-/Gkc2C$&9M+;)נ^A=MҸ,/z}J@U4 2Hr*άoDzx*C|47.9,k[S1|">ܲ=Ve< U`J)\kPywJgD?3 ?Q9sT0‘hvjc] q+!zFM{Vp3JP儲fΡxR6AU3m21p}.Xx u`GV8c. 6W#$87lQ=yuyB/5(8h.[q|eBR<ފnS “4A'B*IbGFZ_: }+VTwDkOǸcXlAWg/oB3- -C1ka5 `n ekVhT"vxv  DBM:cQ6]*"u}52Ct"i,nVK[)"ྈ%< &:z .!~ DO/W@MI"9)U~v!Btʧ.s9śZw8ta]u`$P"?\>$ a_o^! sGHMDHMER仙"=,}[F&Y҄y13IQ8۔~z?W3ВjޖL&;S-\=jɣ&29f+hmrI>)XxAhP<[N@ȐU⪏G8 )+r-gz۽]J?_X. g_ lf_kP{mR;O]6Q4ڣ3;i)rҦ?U2AoK4 Qf_ns: ʖHQ*Se Y\ٴQM/_jXG ,G9{d6iZ;{WCP^(NDbWx~㦸wgqi=1σn>,ɼ"éoql PI6G{صj&)* ⦐W:f@ʎwodS4Yֱ|##il14<]%ޕ$-KO~`iWhlx  AgNgؐcϷ+Օ5/=}Ƥ/Ẹ|d6Zѩ˔fOY9sG>DK&Ϛ9,Ͳ*1EErМ4(ފDJ$=Z뤂K4)z }Uw';-ouIRĽZܢXRAqsm6uLu&_xn |^9JW`e"fp=1:d<}6'K3^DX2eeNBww*пϿ:l?[R4TTN +&p2m25 i/1o"LD`QeC#@p9J rf}uhJ@i #'鄅CQh53b=ِDP^#iZ!>%t$/MϮDwk<߼"9LckwEԖ?%?+AΫ=dapxϪefdčzQ>}l/H6|,vAk*fb "}vȕKlC+P5ݸ ^E.gqܛH趂{7D5?oaC\ 8i2TN=y^n('J:E&jKhZ-½]arqsnn<0,ebt+_+oJ+w\ׯ&g =D6C hM#X\zN[Yh(N!q`*zZ d*W4A-68i X"DjsrٓLNDv2ZJ0FiIMrkp4Gy(Mr=ny 0)ֶG_ͻeh03%nu(xqYǨ^B æqb?[ CUͽk2ÖICBa_:j]0t" .rs Pl#VX\ʨ4Fj"Weыڦw%\ b5S\7ћIU\xmb({r"|ɼeP6v?ߞg )63)'w@%ׂvgS(B#je49EN+[3pYE>OclH c"nӐbCw`Q@n!j\3~-tx T&UY+jPLtB릥ױ'8"?[fLf3D*n29d%ֶG<ثL۱r !VN@9R[0[FY}ՙ̐{1Պ=U4P_=1ڼQeW*$a ] [X "[v'qN8 tƗbk@%>3< EfZ`h0̽W" ? 2  P* lG ] -b&~7u \I"! O܎W)xy''dȱn|]~܏:W;^˟I ?K C9M5yxU h24p_;Rm)~K #  _(! E7=z Jԧv 0PBq.{>_6-3YԳ$c{ִ"Dt0ʾjݳd ݊dp %y,H',1|K"1̫레$| !՞V#stЄG*ڇ>Dӹi:/|f ^RqoG,:5[鯝uT}#BZU$5 S}|Nr(L"4-٨W䃀P};_-'g5I$ԍ"T}\5;%5`Sb3`=>6ÜTWUzQ2r\28pQ`sn;!ɲ̓dO0Pu|?􄚍˒!x6;zeQn%'aba4Zͷ)RioPK܉$InlQghl9#PXW% +ajfFBP(zpݕs6 "d% mc&X#=Lמ<'`U'%ij"&!̂A*y!Z%J^M꣑Cgc뤚. h-+{*)௄ӐKJI^ _E $aw&dP ht) $mO/R7DǸp误F =04XtzK{Eq u+miU rk柦tR%#wW=AqK4NV-8q|9w1u==ijī *4eoMC6<:Hn>a@Š 56y^QzEU+󋑨9b4˖f.!,}UK~KxrU'F}8,ؓjvX& Li=,n${Z5nڎM ~@mV뒒,~;ۍ`exuc׫Zo,<[HɾځG,Ӈ嚊WXl՟S2qŅL#vd9F ~W3u M,7؂W >XJqwwro>E 5a' ]Y'S R?ޣ쇽G7a7Qxj  +&j'*г>n\PrV0pQUbN9 8)U{I [KroHwYLJpJCy@+3FMap3Gk+'lS'Y!S;YΏ/f0X r GnXFTXCV(Y ř8=Mj< :?N\5.|HLɒ:7'ܮ[!jk]kb\A4=quGdg?p6S}y⪍@|O8C|v3~>-PW<==kFTuSݬfvwb}`OQJmU;hNI K :EL^X+* u_t=Zt 6_p(cل0XiwDUk0Cws,SDy^"I~g~U>%SMeӮp;'$qBhxU$h f<)RBsA)*]f䋲ni5N/~66+ V}TT,|CdTpQCvkgs3!!DU# yn׌h*4:-抉^(^q< A3rB_1Luayrt3bM+A`sy(Ĝ4-o)5 P {J6xOH 8ɒ{KŮa &\l=ٖ6di&f5m3ףH4eB·#˞Uޭzo11g~yV>S/J|gc!7ad6A)89>{,dSKδ_kꓙbf# ೴۰M%]' b5`x3DٖXJD l)' *c5&*wҬ...)P-ءNcM~CfS0\ OIPZ_[QB$bR5=/̿c+{ TŻȨe3NQy)[;6O?e١`ruG;,yˤTi/ HT9P5X*$e᷑\!l8rqzhZF3+'Z_Wt0ݏ@r˓X-b6 q=/'(QhEЅ]>[$`wi,IT5d5j *(Z%}hcUȤ4 ZLW_XnM*3@E([bDIvWRY\94iMʏoE2c!"/:V_/-)iE` Zt j3 cE>e?_Ϝ&JW6X% A5@5_U 0 HfJZ5ͭJ5[5{ /TK~ ;+_g#2iI}cTiz" )$A~ex)Y~)GIm~f_8AgdXJw.Q;7XMJA)WO2Wa=;Dͅ:nf8[f~&c˰%H^L8{|I?V芎 '`,) AGFjV}.%4.r010|ϧ/<;C oB*$[1λ0/աb>v!$%j,O3+'E<<Ҩ^y#&v[oG`c阑R~+8 '>>A@SЖ]Pf,u2h:Ԇ~Шvy7QgʿP8R{o:`w5<oE"ީ%(:AQ篥`5a nZ;BJzxCi0u*XHPܑgm >b,.ksU*A[.*|4+[\GG>eI$=]tǠ(`H NcJ< ݼ;t?`f ؇jĈNYĈpbSצ?^ENNAޑVw]~y;ȇlsUHzUO,eC @G֌ճRL8JT֠LؽU P(g|`JӸm[ k8Fc{vNw9D`;rg yνzyOKde#$AiM9v2}gI|fJmR \\?5,&r+U_b+9_Ej]Wlm?nz2`us[ =D I];:63uB#p;e]ڹ}G:uOIrb 9 F# V\u6 ;!Fm*W⑗Of%.گ\--]cSXH"ǍEE%qm"0.޽30c!,jj.Q$ @v< U~*;~UuIq ŗ E`kw <{%h"[~1w3BΞ6/-b^+TҎ+L :$D8s 9?ƸK`鍽S,V-]>Nb#OwKM=N}t34.Ie>+eW2OVQf>-B ||p/MQKkV0^nW۾5۩W(d՟Aϐ(mDޣoAz`kff1@ky+I%`{(Z7 ܆4c={˙,퐓Q5){d0V!͉64W٩r tz@xTkraB~[*4tv( fۇ=ϫx6hPؽ#auj&?Im$թ릛'kA"R2bE %l.1˛⪼ !)ZO3V=SkfXc1LQQ&fF%Ls\O l-`q zB'Xm#hO\^_9CO]`6J_Lf.Cv3Vc.RN]-\ S u8(Q@u j#&K@]E{k6 P[۴"92~[dXWNG7b]ZP7sA|:uwGqy݈2o˛W"nk,JvX T ?'O}e/y39p+%XYYx$TspO`vq/^lqcgHo!ʼn j4ӢVaB%A'H5rtDo|0lL$3o8"gIR}GO}jLhOEbT/u7U=E曕akw tQ;.bbY`ŤNW\)?t2Vv2s?ԢL 9CgQR=| kOH&M[;*oq ^Y.RDGmuf$0mĺX .]tTtMئBQ!9EoRV5oVb"ji=:CƐPqW=ǜZ1hcs1)8"-=+}bC^:d>zfcjo7ߧ,5Ǭ@ ۊt6@uZ:_v5:}ELq ǠڔPwXJku'.&[.;x6i qt0Bf"RWRDI1 Ѭ әc "& {mUy/e5"*CM E(տ'c,R҆ Znhzѱ9/+})(c"GTSpҧ݋I^Hrѱ?U0 T# #S|=w;.S ̤y4H{i3|JP)'u;=~K;Qi^2tF#lJ"c -!l) 9$d;L_6EhA4T[2FMa7^%E}\yqkŬU4"dR$S\-Ihv4OB _GtGN,P=!3o]T7P[|bo0'78Wj_~_dG0e`t ;9œOFjl9/ִ!YʉT"f⏃gUD R8.^FSM勭eYVѦWvRm85db$wiB4~y(5qy1;د(eĘU^_=iӐS*a U_W _zrlkUAjaPѼfFB++){5)+qd~ (g!S\~2Ԥ.i Xu\!$P`|N,fe 4w,(1U?+Fu|{@Ȉk;"q  Mc> CqU?dmQq=/Q#z8^NݯQWĩ*0Z؈k-:51N}I=SZHtkhcn<:C N/Fr# MhH [_}-v?DZ%XQLD$ጟ?cy ٗ6!H|z݋}}Tx- ⶱVf]N%d9Y7q6뚱7ᜳ$!>"> k^ѐlFnLNJ R걐?3+]4ָ,oH;p+F-%텽2](Su'mtޠ슻QAl:xUlƎ+yz`'( c#Vcx1Xc>1]8H Z]{-ClJw?kek=AuƦ|-w 0w` Tߠ8@[_ &im,!DحҦ̳Ie_ &h$,~b:"LgCj<108s6BsKZXXN>ӍStIM09Ta':%FНQS|ޖ|6'64" _{t{b#ıѽc(boi) F}W~L'3+Y^/sa őɹ/]G/7NVF3FЅ/KL=Rv{l;8ѤYJT1Z:$4|F"/mF+!t ׯ =-x =SQ:b 0 qLe ^qB9h J;2?ܣT:2ÿStlhʙc"BX$Ĕt;ʀL7O2SUcm)lCCakۇ?#c +rR`4dA2󵻘F EqСE#z@tƅL2~b!3Lz6Y53 HiǺC'x\ʻ./usxu®igԧ9>48k(/Ҷs%T&qT ۲f 1~fq p&T -NkHre#D '{gjELL9dj(Ę͈Rl*cZ7Z )hIsX.SY&җV(hd׾a~'#]:mgJBL o3/._?a& K،Ix^Oڲ v̒\ Brٴdl})bK%§nVp3YG+E {DZBL=F<,7"v81\R5.fo~4fQuΩfz4DbpD*dռ[_9v%" p ;˲q!Sl< ,C-BHnz&L ]iCvRY`: (tϤ$kO؄U1#9.;lf AZG*;j1F}4vQŰgOC,0?e!~}|G-,gV_obvu/?yYN,ɭ c>:LIqH_}Y0\@|#X,Wڨn\\^#:3 ƲSH#^"6p$#%+[4O1|YQ[_O+xzo=ٓ8FVL7n!@MݼY8Y=]°\&IQ4ЎА ! 4.c>d$t\-ˈ(*棪)Yz3O[})8s1yIֽqO3^Z fxA"-mnDiAУKA5R4Cwbv q~]tn(KFxDmfJ =zFnP8KY_]`ң [gceU\:+;&8R*kcu"$TIh?-{⾲%GaE^xY\@;DyY^Pa}>,x6VN] BZKHOKu'ggZ(Q]:H!.|68S|7Q ;+\ Br5hProM $ ^ z X1b=5CNmIԕS$v<:#0vư$p8E r'obLWw=+hLxΰN{@2\=ap&nw(ss.OY왖+%^[`T drLNp;E+*\Pvt,bb&okhCX[Q~Ƨf6Ex+],v ,}:s b^@7b B `|@7%)pa0}X*&eK9MP3_捀lO^TA4jKprQc͝ |=,M.sn|fNu(c]3M≞@ 3ʼ5`pߠ ;4]7=i"#1V9oTuVe4mKPs HlvuSB+%4Q3*8if \7!UdnzX6#tjsɹg Ó&saGtG!KMT5Ӧ2=m}8,z2%ɷPië OX4IynlԃV;xƼ5I#7O&74%mRq Vrd񂒡!v& 69*C +&-~,'85Uź6~ -_DO700 Q[Cryk n#4lw S[l'D>1nj,r/y˾mec>jf47*0)^0c-y{6V&h>Q;j|{qE%:L1eɬ]a*E$M{;P1. 1'Lmzd5 wG-,j33frŋLWVM5jG $=ǧnܕut'<ˁP(L`$CGF*깫->$nQGL@wwžCrǔVO{*c}4QZgb#%7+P?wՔ KZGPqv䦩DB; 8{o MJ>B diڅw)rvر峊@QH2Oaj P2fpc\$^jrW-,:B^`6ze V  _ǭ$eSu˷j1pKP_ կ)+o6F M 0N vm+͠I3K^&yYXr|uNIL i8?Q;j4ge;lb_@9L4V1%Od?M%'NN>.n'#d.Ƽ^!AfmqVoA:llw91]Ԫ? =kg_`AT]ߊWw[[(rP 80qwZ UXs^B'}ϺapR܏ :5aC$;]4%s;jC@K-UEqt6]%wV44*>gof:Sq)-.bi5&LvXqUs5!sK0' ޅ2թ%qIL;d$4x׊L)<%HEv.[&1)1f8oC h!m㊢NN~/}>f ,R29v0Sg>EvVI\{ހb}aܗK4 zkz&-R#>de̽-IW }mnʨ];9m"-~ÀVTN績>,bɀJeɚ8bWI ^i`c< YGj+C !yz䯓zJ]"/aX̲)N1nz?e0mg͵V)1vF ֝6 VixxːVw/o/yPZ94,O *Q'G_vuW@[-$Gg1Im}%#FxBSFR<⣨H'.jG p52|BDڜ!DQe|Lt=݈Y>V-Sʐb=޹<uL}:?aalGfJ^s*0So/+́4B@T(:ISvǃ'Z`[񔯕y;k%~o [zQ\wMPa&b)dl=& / ̼Z'7sho# }#P.0ǬT) -RmU68Fxr63Ԕ8Ж}JoY|"=^wlv_mE 0"͢%er&d%}N$;1S[GƵ(IZgiEBqr !ܞUK+%XՄUcbA{ Uu@wcviPകȞH:5iE6?@ԃ̙VAEz vYnܲflȕڛ㖆4lxĆ*ůQ'YWJOjFI׀u3mȗ?"v6U\؜Zng._ ׵29, K:oُ@㸬Ⱐ`q2~ŹASCMDWǾjMUVvlbuLCPN~#VB\Q8HxQk' Yn!ue"V [ iozO[X4~fJ:JLԩ{AvAY"N.:!qoa#PzA]7Kb1%T5o5 F3!H$1RwW&l߰9*RRVɾp.ݔShBa?gG/.;Vi)f-G{+LJ^KEVCER@$͟2;ڦM&j7sjk6{I,Gb!4ς%?+wzm'Ղ yj +E5nDc{)۔sΡӥ3EaNNUL'_'v{ӌ,k0KN{'&$Bײ=,M77pJ6a$%"[*XCoz̊_"菵.&dFHXlGir|3yíBQ0Ÿs#}ݙ`Z!`(' 0klɎ$"qfJ5 CGV}ړ أJkKi@Oi72]0lL ju[1si#:nN +63Eތȳy"] ?,?04(r*88V2O4t!R'lJ9ᵡ#qgxM&sཎV(n*ۻ!`K _pw'rHݎM"}l%%Og!U*~N5}zL-םO6Өlao0jU}@+ 4`-"~CgvԐg.P Z雛 ʮS{8l9r^}я})H%Թ~Rs T~A . ۦ)ҽzj&O*0ǑlEhjÆUnttyzR47PML ҌB|vMӮFuV,/8z= οTnY5sJV&smֿc:bTG͂<];0r|jV'E"F5NC2{;%D0k[Y-n /h3}@fGȒQX h c1 +b}/'|Xj3҃M6d =(5^HIP `! ZEi`j8@afk̖.JKg{ AQjJ_dɺo],(B;$3 3T#ˢdgގ+QoTaD[;_dda-K0d㦰^@ets}C (=wY*$\E(6Ǧ+{aŶ.Rk2\ rN Լ#<#OK/xԉ?V T,Ͳ͜kXADFAӤ!bOA͍N"YH֬sF؃h[.$H~> G\|,˿Vc-t OB 闎rgqU3VLpиCxxLmʳN軹tlXZ| QmVݹ4%~x~R:)03p͏&l)n~[+KPf驧2fdGsddH5k :* Cڽ5.JԄcj:~h|p4jױ'm.ٷzp JAҝ7M i.'PxlZˉCIR.?fo=? i{Ɏmx|;J9O~R}*n9"KW۝yqfxDan(Y Y3[uc4%i pGG0wOϵ}V!sktB/"J4$\jT"p#CWe'y2a>'D7eW+~_ 9k.o*&y'Bj"HV~7Ij&&}Ҍ'/2(W% *é\hٻ&O،+lNXͨ^ӾUMtPW-'2?WG W Tqxtĥq^ {P5EgxRkFVn vu_=:L["k%olYq9kG@{9[\r]`06ړRi}w7|F[O[*V(y.rvFIGp !WDMaG{cQ_-d[Ríɑ0<!Z '#Fg䬽:hqCY+Tv4~2&%;G uGOܵ@g-9饓TjMߴaY*=S1&ni=ӯ@aB߫1lݴ$d;"RLO<ɳ `nh50/Q[O.-s*oY]{mVz_~ [iW}t}٪A?]G=<~zi-IWn3OMՆX2׷*e@'jr& Xbw5oirX[(շh!>bS`84;Q'ؓQjkL''̃:Lié:"=.QJredd&%!^l0 iq0üwg1/C{LԭEZ<Og/X21e[>7U0Z02sqٸ%OsGpA/4 ] JpI7 cc.[槔Ho?r31|\+o4ѓr&>d`y-a u6ܤ̊#V̟yv G-5pzAqpNm,: VŇQ}7E!Yr`5Y]<&QA!߱ c6XD)ɟ"*/zs.10{rPwz2?!.|8YK F2o (*n#MY9޼Bto8o_lpK!1~OV\.^,KٺXG;n3 ^!u|Kwr\%)yIbڕU&5d6έ|bIؘS, u:Ię8ҊgE1s  q֊d[@Zb GnkIat 2\G]SyǑB 0b U[xi(Lg.tc|vkӗP#oe F(ÈII~@6K@kbOz?ƧAn`> :,V+qp 4)bEes1*[X}9:>>O z`7XStjY T wԫaѹ G36nM|p&B-Deb:HoՋ*^Fef5֑j%𤧊pT=[7k\w oSBam؃yՓ3WRY+aX9.f {F6/)+v({dS1Z-FrZx:'㟳CEj6Kn46bB* mj{c/eJC}8q͈+`ٍ Z;; cV  ғsM+fxd4/0\7r(X|7[hbqaՅS 6={yks04%qVKQ'| l P~ iT:ZJ:"(Ɔ}okOj'arJ/[@[bn!:;g lE]M6m`'rU͊\t^T@-WGϮڊݩ`8R;UUr %lԾ*ӄϥ{Atj N`rAEhl&Dk7!K~Y8ɺ˚d0]Z5Q-h S3/Eo-hMY ?a=>Ot& `9;Xd.*Yc8hNPC'W\&:|u٘QEDݗo &ݹ%3r$|vh^M@Mx" asTpB:z4=XJh֍Ƽs|_lu(6l35KJ#H_42bFe|rdtY3Uu R>IjxÙL{uwOfj:)b ஑vOrBO؁4OJ7 u(mc2VӘ_ ܗ`kbS9FbȃLH4EPzᚕo‘m8 rcoMCR X\h1F$^qAm>u$oI2׾bE mּn.ЦU?p_f k]n?}]HZS<~LegSDrRT$y6= ׇ~@ʶ* v fDG,t\ D5!;'_]q-cYy= +$sCF?WϷD =Su0!ڂj3@PJG_(f%wKTiZ&ڻ$B=cp-0{O_DyV;Faf\j ƅycyExlHپI+2AU|6̀q8,2j9漡)EAۤm$5S(JB!v7v8\rN7z([A&G' '^^dB'ZG .k-BNtBN0 jr)YUr!T$UӇҝ26&Nw {X\ T=|2 ՒD6"4ލ갍rAt!׊)'bĈs֕ eaYE\RWp8}w2!<  ;^MB 7Oh+z.( kĤbyxPUJ(uL l&Ʀی#xR|'8ǒebB2 pn`ͫ 6Em?1H2!<\(=OB{_mZ@܋!J~V9J.?;7@a"$/B}Ju-E^קzn4alu/+VHHg+[3GR[xAhY/JXRmU4xORxp a$iT_©,c"$^XQzUirReE *mM ߝe \ {p=G4k/=%%ZF0=zb1 1@N؉m9JYDH׎8Yd;-"ta^-UEd֣d[WFbm]oA>Gs5'F&XMǮd h $B^5ֵODh)627; }qV~UN{}ЬrjL}GMo@+\ =24TsL3Wo,,AFZ:ݳMTZ ?;TYqmhҖ9/x w.moXnU5a r67妩kt*i$1! kT͢ڂU'4ťwDL]unW=UOD_LGjMkg#)D :R߼i,P1z~ݜȏӹ|G3ݐWT\9NMIk$ocV*MOm PzJjMP'A|(xwodk=;_ Y7Kfkj 1_oXe0-x2<0-H~i.iT ܃S#xYB!+H)0[gloNۋB2Ykf~@I )'?*!0iP=ɈoaZ-#+!Sa V ayn<ۖdZVקcUEfZ|%:Dld!m;]Cײcݍ~!UՔN`ގۡ9GcZ]:^(6f*:]R+# R0x\P'ݦ;F<-*Io-u7MVWQ)u@%@-B (zVmZ~7ޒ/ɶۍe$[2ٔMcOWV!Fզ&,SoD*yP=vIXHZ)A0F* #,84m~$9dZ{98}f>2-a0(#2(W7= .REpS64DHyh>a3%5xc !!0=VC^Dx%;m9dQ&1ڙO7 ѱzف3᠑GG%}-^|)DIjDAR:2嶒XOt)NynI5S`ZB26 OK'9-*c%e㧨Vy0?j5rhvcMrH)Q^a}"II6\Q^frk&29[Әe6;wU!I?FV-1"(G)}=Q6S50"/7+Ƒ- !ܹsqv9?yX3( еɥJ/l ɔK˾aT2 /%&!Ȉi k(MVm 7iE}r5PmOla]e>'hH塤/!Ϣqre~j:t/%tnz{!1EQ gu4k/Y$8{pu/HG *ۊ gKgQ + KqnbGa_,bcc|f& .s@r`^g<$w0mEbi8gT"SEu[o01AFžAz2;Ij(#*k=b o9ϕr=K^ t7fKҁGn~o q飕rryT敜BfJ#r4m_) fZzsd3#Ξ4!Z1S(d|=H)3,"d{S<C@'nNm0^< Nt (̙N$x76Ҩx]Bsp^Ćb6.pp 8G4eY[o&ct+8,;M` Y]ƐxBCOHi 5I[Sl5;GRCaylLLdw%NdCl'& ? )>UqsKxۑ6XR2P2 Jrx2,Әt$]{"u| BJ=…Ux~n=+3UGϏW|P@A(i LlK22^n#y=sU }mR`t쬥18Ӻڙ!!KB?Fks~6ҡ{,$kw 4[Q]aU*b 3y,@Ba|DαeMZlOPku\s-tv%֫Ht[fO2SPZ\DXrvT:Raw4uwYIYkfIMپ ؝kT||fA .~kIȌ3gZb?|>Pڨ^~|`2b*@a8l<&V,%eZ4u!EuBO!٨Omz!975y?dnB/ht^uY͜‹6as~'t8 1RsD̑% "SYrbx? َD{ |a[\ű٨J\**L*h;DUvGMK$bh+79BhDnH$oS{7T3J9pi읺f ($dR"Yiݫa1uw ڞ+Ip ߶w9Iw\F06䓯C@6 ,$ۺxS\׼d:s fc@pzSg,@L'-ȼu9`}-e4KdRܧCKMc^a֪2`?Nt3F{ZH5(}0pt0iIMڐCJ {3Q/Ő( @D٦ɹ Rzȥs~x0Nze6詟4޵IO4KywB>^l2..Y ϥR@F:mAly.BE.0leާŸm+4z7UjvҙX[[迮2c@I!go/&B~лz il%`Ty,#XPĐd!3FYﴄiCx=V痿N^Qrb\LZV,kÄ-6w&\ Om= ŹyYΠ Z&_Ψn|72Q^<|~fwq%-*rIdbnT=:@koJHo5æs~S,\=Gh9'\LjǪ0X h"Ihq}R/j#RRoհyr}u &P+2u5iV^A ($v Qg-f{fQZc '-u(k}ylJ퇝^1LaxK+RC0*f,I#<4B쭣վd ~Md %]۰r4 7lMx-5pˍn?`*鰂 yYV>Or/ۅ5pWg\Ia<= C w:hV$ g5涶?h$lIۀ?ecoFO+hV>izf/ꎶ53 |N 8PfSbo#B񝕜 daK6EO-52L&͖vt~A1УyПjHAgv曊 0׌0{p 4M{6+zOف g~||&D|ƶrNu"/w:TI5zu("ev:VG\ftBb^Q J;Z%G`T҉ݳ<B:_jyƺQ>PwOVx8H?λR"cԹ% uB#7-ȓ⪃O!`E[x܉:#v&}޳뾄eRk*Msؗ ;OWP]ND,!(m0 _!Ql@ĺ/{;_T),:jHO8 -};F"Ȝ#Xr8 [rsM¶<+kBؗlЩR1o1q;xG2_U"Ot$Y/LMꋻІ6Cld4u CJC\Oi1Er N~i l ]pJep W+̊:䂤_FGW)+&œfv>-f$b &'Hd@DgQ0H{ݡV!]bG8; mCUF3Ⱦ(!y$f薮XS?N7hjnߙ|qԄ[aڝjt!`QS@be\4EzRxRyAL.kd%^c >mВM|69 0 IpSZԡKx>_0^>Hjjkt c`b|Gv/u!,.϶/ qZ$ & '-Ko6>gR!3"%nF͓QDx=RS2l !lґ\+j-\;̐W{: NBPu)^) B m_Y$.iCG!4X_ ’/퇗XxHJl%9KEm; Ӳ-ׇ -bʴ բ)̪t7O?bl@/>nW VgU3>*BΔȤ(bcN yV[W⢐CXkpEIS~1GwARaA2I)G2a3G|}>< a$11$ʤ|o_pnugS,A_ x>M+?& i aeWZ ̳1rM+/Ig.|B<:|0C89@ї%| ŶGtoJɜ2,L?+8}箇=gfBSCW*^F<f5 S7B"[>]5BN^^+=DZ2Rvęvgtùp-.d*ԊG5h(BtAf: %\,T*&2Fsض ᆂqp)&tȥU'(\U**9v{Ta4vkynʰybtG'ߎ&XiV Hy[x>bz}bGT+q.EHP Vl.׵ML8!FVk \jI(Ko|"4 Xr%qj3x(D~ unx2RC])-o|EX#>!ۏ|/,0-'$UV4,;0kty;ʴpN=7j=RSF<|*Ҭ,-(X˞̓v_TP6D3<3*pz5/ƥ43Rx)G#^SxhhiR_ Xr7U9"[~sdZذtĵ>z\Cm)Utf V}EE<9Wm=,T-"HX޹ m*Pj $'?.M0N@1%t QH; 2}i?@x"J!я;QSgT}.gk8*dk>ls_'xI'XOV酗P>c^&0a6ΓUJ3IT0`RZTyǁ!U1Vt;Y̐\鴼MCJGWzހM3ޔ+z!#*D4l0j?I|0 |-"|]`Bt}@K4-|1^C 2 [ }P ݅Ԇ ۃQ̢z7U3E=]W=.FѸD $KU] էdz4Ȧ5xǖ/˸8eR" NKLPѮD.@:SkV3\/蝂Bq] 674O+VS\SDgxN.BB}nE+E !vQq҇9j}jƶ8ǽ+<tFnYʻ+K DL K="NU4fQ^ i9KſW>eą{uX_F 3XSyL V5 FypC"L3;O 2ΰp!*T( e4XqY>c<݀:^(d Hk9.hUt/yzg8Z"UZ) nMCe9$ˬNC+)2󳶑5rA~Y|\mFK`< 5F>t5Z-/8>K6_a| k|'~[`PXORf| SC|.kO Z廙|+)l0xO:si'>.86UQbO$`]<?>'kB>ApOĒ4 j(4J&0R.,b??Ts$Yx/~ykj5(b#>Q13 J9f٫1ܗYv[Qo͐dzvL3Rhhaf"I)J|XKW0q2HO))o #[f.M3}w.l2 . vC c հyŽ%_O$`G0=l6$s ݲt ,,z f&ɣ վ-+5E{507-AU3XQ)zl^-]N$h+X/.q釣K(x>6+b]raό?2^n՛+w_ȈmMʉM29Qvl98sID+ d@ cMpo#B0#qyĥ]y{U(ͦbw4y-Bu|CIr-jp 8sj]0Xhn\DęWZn3t.wX bf'3eʁ|rSmn8~ɊXT7v} e1d+TἇCtrX9R}Na0$|v6K %x6yi$fǶ'&/]OgV/}S9ab_&)'GB7lX:mS?{~yS]9 IuqY*Yۭ$B}evLcVk tRp&TgߥK{2 dﲒGt#Rk&K|μBrٸVLJ;C򑛛Y=*Tkt{w4sȘPI{5 'Y]{[T+ؑ"hwvT?vG41,4J؎MT]Ӓ`I-[=n&zAt,,~1IU|E(#r dʾ^'x@j\e9%!.ltq 5SˌVUbِ_wwޢBf|B\ϊYq {C[Uν-e8&+owy K*ȴ1( QĈI.WXV٧yz\P..-;;m`%txO _B=[ `=7a1nXNW zGR+iCRX1Uhsf#LFU~ŒZ҈J vΐ%b,jp 8k^bfi1$˕ RE3jls1d\v>c;v goΉ3-DjMHq'vÙ:ص~ᶏAf>oran(L$QO:3.?ஐ$2[&aEI.T,1}&7ejS<ύs pݨծml.iԒ߇sjk _3>qkǰNTF>88`C1:,?y'8y{O<= Urg bTLECc]Oof[PN֒˒EGJjZ=K^E=3C- 9]Ji + p-]Wm$sh|'TÄ mQl2p(mz+]v#si_ 7'|b-9s2.&LfYD?F?2m8_ڝTnq"W,K3X Qoށl،hUĖ45Du0 |Y5oiY,O D[Y?9+3Q A1&6.CgJmpt8F݅TG$l1d$6עY$T m%X-ie苫AP l+D0;npƆ4 q\8KıYS9(z1 [Y폭a!uM[4jYD/S߳q 1>@y!pPu7L cH=3]Rz}%f(ҞuLb LM2~ғ&'hlpnnC8J0P>>&Pm=1v#4&a6y\A7 9ڬ棿tv"@|WȧRX\DMô@eGP1٬=Ҵ)}>nanfGV|AT1K^9(In_v4Q$C0eNiYOXkep(}B)DɄ,yX/L{(jԜ ;< nf7H,";Q)҉Uz2`=q8VQXVU Ч'$8Q ߉> 0,W#VK^*"ۥ9,`S$zYe8FNG|RB3|k]'a;k{7=!}ag$(@eDGHwyUMt Kcp%%{oD70@<^"S[F۴st bUDZWx6NQLF`!w 9\^ޑPIAM#uR05r0HKuRgpoU">8+Kya[/ T%QTG}r]Z6iykN\0C[6YZ$lOm>Uyj\W,Ɓe=&pڹ!f؂>Zz9ߡ5 C(wZ,ʎVF,!@l()Q63`'$8Q]-Grd|ћ&\6P7dĉg*QgP{J 9fp9MbO?ZgNg=(Kk&~F"XQ<8XڛT7瘵CY_Ni`%rD+d [!hЬz׍I8_tJTA ,fiεZ}'×ȡMiӘ>R6k Ъ [,7=fD"IYjV⑁QZ+hXTҩNY6849ȕNUWŘͩ!fHypEfֹ#x\HG(I(OQ tn޳!ZLGHΰٽFdQ>Dؖ:tL*GP4TfeȜR!և)aAi[.-sxs мP d^^yL}^g<vIUTUZvbyTGO0Y`h647LE!֔iIL5J!#iuDٵ~~Z> >Eюр;}tx>nc = R#o&s1%Ǫ>AVȌ+֗K%|0%w7dX۔oߧTu?~B"!L':pd#Ų"8Cd6Ү4˧崼 üu1˓ގק/4 e}_n mH9Lv}ANNJ;.NIͧa,%;h<;g\7^\g 5nd^ fKك/)=Im5 |YɇaZwn`lA<3W P҂SJXvOY2ȸ}K}o*c@Ў06Uڠ6Kf Y=@vtNH V^D Db",{r3-7 JTN̋~XQ^?XF`Ӧ͘uAE$8+Ts&Hr;Fsn`ɎY%^cvW$;E+N{05æRCX}lOHi023u4?v^䦠K"xwN*ezWn'ǷU?׎Wڅs/8ZVgiF-mߠfh|}9%owJs[V.\ہ= Ѵ {3x(}eT*0H&̫e=W} _gXz}0V6mV{TnإW2*Z XS},(MIM}C-\XW,1Is\`+v#q#C0gEߨ\'(n,j~o'Gu7;t\TǦrͫXڼA+mMGK׹c)qiw,R3AAbmiWXRt#UAwY_Lc=֎S:čN#Ag.zВPZNI^z1I%gN[$~P1&0AOz(+fN]p:tjT#!iʒw]@Ks(|{gBZ썧 r4AYp8ƋyHU*`K DP|z%2CT<ɾ{D{ZDg<~ts )H0eܫ '\x pվ&Ϭ˭}X}}C9_(4";vØ܍^d.1̵ 0¹SV b *IXw ~e p>(h{V)e}FS҄erZU^}9d4׏9U9lT=ӿ7f˔ج#n1k1ox wL&*gxDFYHnV(u^{W>ӂ\-CS'r#Ku~:aJ²a|df(ş!1ywBWQKM?foX .$.تrF],o#%2#>c8kç .g>R~P9ܥzTk9@vcH1OM,̠h@ " Mִ-$fBмCxiCp] ԜY;ikKR ]]}2ԁ<.8/xXE'Cc?,nԯ9hwN-go,|d3')6ZV_|~qqan~Ţ^gmX -C$g^Ps;+~3Rx-0+HPDJڢeawfVᩌUv'`H`BrNGifCyE;ȯ8aYxXjepۋt|ιz ڈ$91?9 Xԫ i k $[UL[᫯z'؄lWDl՘rk=7FXw2cO4ޗ[d6a.[住bW;?73si?S}bqvn ^x gUL겟N$9[ Gͭ U?䢭diAqzŴ!n!{sD 7sφ"3 ӼTdwEXEbz 1ڦXxjTmBy<}+`58&duƄ> Sn"2e; 6eӽivyWֆ,E_Q\ A:) 0uCEu*L$Rq:Na ^Hu dq(#햳CqAZt8; 4R*4+s?z>ǷPO7r;mhhyFr`򜝖-kO ݖ#Ms9 aJĢŗ.>`q<4${xVb%1k* D/7Țyh:>ޜd=%6l",g1x;L>&%fܩb}P*qCD,MXFg:/}I̱{Kxh,@@/6U*`[~;[| y0?G *%1Y57[H}pF/;Q݇q4boOGy(+~KQ8ĵ5%٥pG֯30`qcB'*RffJ:6Ƀ8+r>-搝3/x˙*yT=eh+سs'Qۋ7{~u&Z(!˒v($Z8a=cX")M;Y"@Vyv_\cbn4вG`@0V$9[cBr3xPCOyY@Y*m jќ:5b3l2 ܺ̾iD0oa9'&S@z3*j^[7O:(;H-{i4m;/T&[ پCq'Z.XK"j/!\=\Rxg21vz,cزۗ_lB*WZ V^V̬D u50_|/NȚY#L}V"F?d^zFIJh!>`q56x A{`<{s112#.cOTn[|ŘO*1H`}b<3b8G;s3N+x-1IUY"nI¿4^B4q/Seovc&bؔBXd-`kWtI]˥cQ|a[k1_"O@{)j+z $mM2ʔ'瓐+G5j]{7RXS(= Ąa/:MSIPNn \3fV"u'6ao!J%+PtՊ&f|{NՎy0W"ObU4}]i5/ޓAx&-XHpsnRQh7{I R5z=ӗ 9ӭY k !dd3G|^x~-tϜ\ uAkI>hXICw4cAXߝErFzs:2nJgʱTq?kɾFYjޠTI|e6*.,)~E6^iasD|#b-n>R4627% wP'qq=efEn#^S^'˅R&.^ jB_\(н`=էER܏Ҳ7gN eQ}Rc9M]!S#Wj (i@7e0A~k%AXv.<2{ ^bhB.i8ؑm}zc!dpSij fPJK^EֿEf`j.V=ʦ_ aɕN^gi6Ҿ]LNﶹL!bOAK8HO/L,Ɛ{;9g;TYBdUICy8 7:4 ȩ c]*eXڵ2˲ Z0&*Y@ʘ#1z[& 2RO ,GCw}zw > ]$htpri+#l"VO]K&G bwR?1$a3Rt2hax ox(K @V:S^_PmC"R?Ly\}ko2w{A IƘna˚c;F@I4mMR?Zl1LۍY-p?u?&pxQEu.]^w)j\, ƧSIq hh6Wi-E R:$MX708ȠH]֘ L=mWR3#"ul047c+ʖT鞃AVW bMŴ$?2*,(j~'52X˪*_"@Qt5[,1~BѬ޺s'Ո"]oadaa=]Z9`hG[a“=MV#.S&N]Ȗ8@T*C*ҺQ~_#y'{9ZarW=~6m,ȚBz:*3H32ς9;ˈ>Ͼa 6d:P/2 x}502&`g 8Զ7lDKC"H"Y=J>F{8s[2=/ ǁڊy$yqI$ҏ?#CՕG"ôb輔a;~MnqY l?HwΦQXכn`%*ԙb6>a8 RP)K'`Kw8ࣨӃi o|J{k svaADV3;{O N4#<|bcꓯa.!޽+EHtBBzU\V}䐯t?ŝ8eY>蚡̈;۬rb.q*ㇱ{Fؘ\$'3t@v}?"u_26Tanf:4wGps'F ^?_*#8Q5?{9DXA]c[_'j0E:thfz ,h6 T yߑc@ 9S8EMN#&EcϚC;7& | a5-o\ƫN?pCc ,XݠAcD jA4C3O(bz{{M9鼴+5Nm)gBzͪ όXn^r׎"4^ȈDktwZEXP^!SbIr_-SfHvߩLH02?=~OtJGAQdbFrd =Wfg'wT5,g['L&y3BeC*h/RYp$n>td9V f/@%j[rVS`{d-6)hX{W@6\E0vi|?^ڼڟ_uf*rOڠOR- AI޴h^1jB~3Fu6d[y=:w~ۣ?`H(?{\":;gJMu A'd-y݁ b)o<`x)jnAW1$cr,Ь)Wss?v#TMd A[_:tƕ2Yk93.9AɺOS| f%'zu[ıYGyjX@4z*iU>%[1k>(ʕI T,)T6 ,_na&h--އ=" EҤ2%neC0:wYovp0 $ilkNfEr3$ˉQaLuB]3u@ _⛃ԩ~R-1'3TLxە!7ށK:H-w5f *(Pl胷p Ln85' R kط 7Ce. <@FfIռ6-,T`Cb tJgOȧEت'.̈lj^" %r5613#r-+tHO֕}Ij)}?#FqܥsˡiU.Hzm7)uuKs F|xdh B A.jʅ~r.>gJK*.DȹCV vϽ<@\d@D.Z}%iь.ގm%Je:fnG{̪,Kc!ST ]}zDo//4/ډ\ca$6xmgCK) ch:6Nb+.r&{mIfr}e|#+QhH,#ɴLYe+%ŦŎ4dCUɐbfk Y-ua9ԛ$].9oo]KZ8S8M 3Y5u>^mx^P i{;VC 7 Hu&=FH=(ʔ0]̗CRnZ=e#]a?t^KxOx%=U\u0I!JәSLB* +) `rƲߛv?q(M0ǰd3m_9oO,}F>b00`)vGe#C3=PEN/tBX&;hcLMjFha`ǃm6nzPn&k￱a[v]_2[ [m'bfw؃J֢-CƗ#W$#ٶ.xQe xQ'fg~Y+FTQgԎz ַ)$ /?ŚJgV<( ;pfҭҼ1P7OȄ.^&2~˚ +)WF'Z&|cued&SZQ }-XED7kpxGUQV?G ˃/ɘ;8˔K[@:4'OJ =͂;F6 =dtkxhmqtUlwƄa Q X(}"chi!*W(5迎DdmWqw=is #:TP.iH83n@QDЎ6mM3ԡ[+^C ߾mZgxGuOyz\\[2ꜣYܲ:\0ȏюk_j˼##\&i2 QD-- oaXSJAYU.x~=7;I;|00.b_k}Aӂ~@!\{U;G KB..h ţ?<=r/pr?zQҼ *9qw$([~Y-oҪΰo[Bi/.>ظ9>y~B>*hA]6k;1LöPň2&7&.s΁ᾗv59 Y\S}97N|$ʤ!#Y>wUm%L(|Y P^.j.RF|H|ިp hWT?xVx6s~R}. $$YwD8@)9]]-jwmg-K<\VӀH. h͒\pCRuq#P(.G V?4WY3\LB*%!>!V0kpۍԇ>@<gHa$%MHK=<ԐC_ yMpAxS_w5b[/ Syo!VPn]h:F}t-5є_l;l~^fשpezH&rvx9[7f~ )z7Q$+s`; ӫQ`X}8N7x/;MSxHCs qiY};] [;Ɯ&蜫j(s{aw]3 -e+]_@TA^MfI(a_{_ڗ6uw;TžlOd~gMzR7}쨜(yw؈3[$y4%lV x8R ,U!ꝍ;2-k۬=Yf-p؀ݎJ1KsyKCXľM' ^Z](&ݹf*EYbZ)k8vKAsBT5a>?MɲoԒ*ktR,؝ri556p0Y>m U](P" AhC<],eL3 ǭs4K3I$w3iWlV65(Oi;H9':q;~,γ?!1aě";Rqi0D͊pK2O=իVBܲYN_Qc n1Y89"!3,6_lI}HZ IOxE "&n3j4HM| Wy7*p͙#J̡ٞ 2r% 2UZ`'Riu(48Om$km#'ju)t;nqu9ǦK^3$Pp,nvaϗhW~ SVS'f y 55-ʏHFp 'GB {Ibn4x)[؃kF ɳ+ongBp/X'P hF!xh!4@iQ|ݔY)AX \8opFSL`|)v+ō'BfLd'ĻvumȖƘFa2 FcilV ,oV@T\2F=d{7p̃o{~bC4Ta2CX0u9֬u׋d^3x uF*n&m+*€^Ʊl$6~ȸiмlϑ+;TR}(+ 6#^u1BH';3 PGCJJ]򲟰vA#[7ק8}wDsn/{>WAG2H+~ֳFYL Fښ6;W>OO bN|ܙ\js,صfj,_RtI˂":-y(ڶi~0vwUi~Y:'J?d52QT3Nt7'V#f4? Os5U%k[=Uz2t]e[2Kv S.XaA@J5;Z$a#9E^NF(}NIX>d8JJ gn.#h D.k4e0!LWD^vλh5.A}Ac޲ ܜ =Қ$Nmxnq?@?Њ,*?lmGCWbp|I fJvɎG,g4ur{J죶FSf2_B4wR`*OX{zr ]=|D*,J6e^ S<`S@¹HԎX㷔tj@ FEb \i4zLuSsz; m`hXYe#P[I"s۲wZl8[G9܍ANJsZꬩU>^^\.Ėz(<!xj'>x3漧PA ʺ0."^ D:Y_IS>kɸ#~㑩S1Պ$!2q8(d)*wU<>&%ZS:3 yOliVD_[i[f ՌAo<Xdwvi%RьF@)S>{x[{( aH-s<[oҵp'M is˦j6WxnGKpU6&h;h}5DENA Y\fk[M%;Xi{a2S+Ai1*MդSu^fnmfzaw7*'d\+O΋U[SR 3c#!xc}}Vacŭ 420ڇ(LW! i#:[ӋE!gVO4yN6[]{ƽ'^vV`gp3>䠄XLS+%ND!L:+m2nH1O'FTzYks.$dVGܠe"\d7GT3rM)"@Z xZ }ɞ8ݤ4a R0m)%2s7-8Y^"P aň 睮데NAQQш&c_D[V}-c$0Y(HYVIK?۝zJhZݵ98zdo) ‚eeyiMa^cQ zcbcRt+.2I#M]J'Tʹ,3a~ߺf~Ya٦#,45lO4S/ϊ^J× ,8Jżh1xJΐFL{]ڷrC $-5OO!P.`[ڱ2&bU)cfLDLRwRߔt?YOފ3 Қe_z};/Nd'BZtdFjadn@MNa!:u6gLjOX'5q v5(ilC̲9j&ϠQ&AY6 Uֱ{== >}xO:V9ED  vJkF 0Qsځ@]N_~i~o:"@5+y䔐6=|f{`#;a}׌4FP!FٝZS}Lc5iӨy dcTk2Rjq@{U~ȻC]%@.;oQ\"AyKz=hIl~}ůL"o.-@ddJ)lqUI8MK3yU8gD)!{$LR)()b?"GfW|bA V1O7WSFe 3珧P_< Qlo \(c7fn~PlO_uT&_`8'ye&Plj͘'j2c}_ꙧND].Bƅt$qP%Z*eJMUXȒP:8 J-,J0 tIh.S:aSw4&pncb>ӑIZ!V[hTg+a]Qm7R3r[[D ;!,gbxLd4R=%3RyeV\i.n2(]]}ASOҕN V,b}UY=y4J+vi:CaJBLOy0])XMgF!}Ð'xL)V4)6~q) ⢅XIHnWǃBȻk^ԇ0| woьzLJd򙨰E{q9֎x\Ev?t p|eljubD!nc@XW;L<)c1mq;Cug/e?^hN5HϵhP &ͮ*e&ؑ9@L;V%]ؙ9#̂lSda[Q=NW )%LSz!:^|ji67`HQO OxUwsp\(T?w$\ZlZts8 }s }w!o#7Th= 'g«d3S^5/k":V5>K.Xg?rŔe"2UMGpgv޶`+ `Ć-%wA8#~g޴2ˣxbyF¶rKym\wA6N T WKN$ OU:Jh9~?w.͢ioPT]oeȼh[yCBU~@gL}>OR[>~~CiN,egi G+d- eKs^yB&/KE$'DRz =AUE"ZQx`\&. ~rN7A\R:ZyO_t4Ǘ#²YX> R SM6S|D$6)( 6 WCm+J-\vI*s{ei_vT'RVb`E~SBC?㞔r[ *]T:?ݟZzS_WyutÐDUv (#Hc)[#,7',Ƶ/ wD)re#Ry!8Jܺˬ|qۗ~1';#Eep ]/Xm  A$H;ыqp*PtU5p>cVhzT)Vus 8r%\!Τ$2fl25ذp*-~A_R'XJTgy"K:=T(bnt%^,Jٺ^3]OM$k@FR+22V?P8x AzZfgֽZR{4Ɋ\H`ԃ~€¦E ~ݲ1KU9Ee gPR % ohԚIxuY\ k A:^K x)\<h#r,: `8 \>a`܄i\eWj~1'-[S;f? iwp%TӍqR'kgIfl+a`*ȂsZ{"_|fHSZЫjx30pʬ{u^+{)]{avǂ+;ބ,g@JQ6t!Jb*I,-8| qiya" ސaIͼ9b!NۊyxD_fy(w^ƆS~K-?Q/؈H@ vG1n.b'`3&r0X/ '"Unn]Z9;O?kA LX\U?YQ 7rۏV*w#/{[I5}d ֑t 3/k߼ 8Q3Q]d'7nWExʤz!JɽX/b!%iOI@!|Sf P:QEj3- TԜ^˸i+3 SsBу-#EpӵF)}8)A@bw"8K}EH"w~qm&I:ufmIQ=يjui0\;ܓ)7 v-T7pbԻX_,z!ҼD:\b(#2)':5i p.ye!CNS[2lxT8d>^_p9w>aCMJySAClyqo&n(d(6Ưj*x":hz֦ƕD8ˠ 9b E&(+ƘNbXy|f[حA r%ZI$\NOZg k##HKozrG&5*R=/D&W}=y(UIic{II†6, ь(R?pg9V=;LY7sf|e^>fPe/mXܺz 3ut~iNmnғ5L{7Lx*%o b2 BE-FFg, Ro"NFH5^Ns:I@lǦc}_ud [;Da3bJd\ y{p8}ݤx1p}tQ7{KnL쀜oXوf2Ps*Pu1<ɰ(t{ltpTID0]L0fCfʃV&=$1<h5yMt)~tGJ3Aq;[MIȨPڠR|&B`Lorarl+uBH"ѱe+*@2&k5D Oq.Uz4:rH)m}]K0)$~c#:rtBQ1X L2YM2/(oR'ҙޏ̄giosviL26嵶:stU!ՙW8㼇4 VM<-`PD:1qZ|D2C@':snHNӶҋJGIdh*Zd($dfVBYxeqْ\/3\ِm0,5Wa 25oCC9}bVFE_ER2#}NQBze׳kiF]u}VM VB1& cɛXw 8Q(_}Jqclv?nRbilcNJTolhI8 Q=j#:ˊwCOdZڢF͚f`S*t[] ?zëpk> Hxܢh,u!(i^2smBVCq~\!p\'65Dn@EoxQXr,5KL더}HYxХ\=~+!ev&+UImSpG73K7^?cXHYGOs'#.%l2 C m҄rx{@VX;HT/zB1ގGƗou%XO)̈́V A׆Bbvp DxRm SqnbsS"rEwgcO,"I{iOdOVIH h6drYMΓ,g:c†]Z.tɅȸwx_{xx6R %w)ݻ'Fj!(buXϸVljq&Ȱ > s`K `dF3) y|[a@e߸eȧ:s+UǤЕ4~ &* \vIAwqtF^u)ν_kO-Q@{%YK&=P[鰴҃FZ1ᤇ$6w?Yh[WV5V7 b$L"E .ypi olTF׍Thߟ!8K_0}||/\j3vԊTa,@k !J\&!Ƒ\twĚ`SGX/Op4E+Q OD֗ OhoMfRrSePtS*!!fV$",hҥ́ع72܅uޒmpk&m/L0  ZY·Ew& kJVՀٙ`̏ݦ º{ $(SU,s@q _}l >p {ڲ<>dW2/2]#mH E)SZDoN,TlT$i"V2&df_9x&bMЦx;=Mh&7!SbK=q<6LؓpQ% Bz%SaL>Z7k }dհ3qQuJSe5h>ℳ(H&ZuMac/eÑjlG;hd%y/smM7s?F:fE¤VB'I#H꬏$s4c‹1.֓8O2FFIvGNc#>f؋b\X6xP`C:{.-z{zJ/ە@E16,9fõ[:Dqxoa{j42>Mh$:^oHk̆Q={=dp?%Е%'0lC̋ _CG tb깩CH ,E1EX1Gw n<P4lc"?i%g$e 00%2Wsb䑾z-=6G( b:?$b*Z% *yR@H{~}z7I&skpK hH!Uz{WY5IVI 'G7R^#Y$ FG|%kKFÎ}\pc~bO_f2,acДP,Jf@# p-/NqO.ɗz ժW"{vdG^%QK08ihYc¯S)GX'>irڞpY(}›B%d"";2p<7wSa= 9Ѫm[#lRim,;<[ZOk.K}D'T=UiuX@r/uPa|-\f&_0o>s.ŽUp(_Tc̑VECy p}Zvc~j(=%ZLBa͋eʱVZI m5OD\es ʱr~ P}S&V+ 47GG8B5UK|u#. '0/qjymA}ExB ĩKMåg鰶bOq%:*&%[:)3cEg`SRƻWR=AIuAËl)L]c'co!pw5;Ŀi窍SyH:a78w_YCrq5+&{.[ 6u OOiT\/1C$`1 һ6}TxPc|ep̨٫)ԡ${wH ^vR{"C'?9\üt%oj9ĝT˖2!RU2# xR+BYԒ`wV O?t֎J%/wR^`Q%!Ns2I< 0=.Gx\Bk,DE,un:(D-KF!ܔ᷑8}쨳:|NoݙN-Of7=h+B/cڍÏ\vVJHi&#Cyk Dm5v7[EN@ +gb.xDa\vu_QF%(6(`,Y'yM{_ 8qmV6 Űզŷʼ鱗I 6Dc`OBPt2͕3*(j@`pnx0ջLnoY 6my/\g+|~wtJ2֩u_Mo<_ᝇNU\gSFwSf\VLomy5~KiVv lkX XkCCn-Rg8w#h, @(+"j8[ZK685_#gV|<.lBZx%Hԋ5RdӿzޙLk.,ܝ{ ZIwza :bDkZ<@ RA$UeǤ@I%><|sp){.F>@  .Ԇ".ltQY|#qxIJ7}[ˊKՉ4zpU {odgFC;kyE> m[ P#AK#Zfh/WߌV3ۮED!B@ Ժ)% &9=OLM|@&~pLaDj>'9$U~@~fɁ"R2ԇ^rX^Aׄ]5'";>KJ!ٞ*cpYYvJeYj^n M'a ݄]Y: 5>nS&՞*AZ͕<ƭ;BiTVY`݉v"uJ%ܐO꜖Yۋ GC>-#Z;űئ7n %D{F&(w]K@\yגS;CJA`>{ֽ#x@BG;Xg ]qc^di:Sz2Gi^wq&=Mm. ?:"YbKK0Vv;] 0Ekk% >oOrTZs+$}M` ቕ.˜n'鸋U;\sl'׵w*?Y䉡G464:j\:2Qע.a-׹R+3ҙV?A zLp pGAG,v8qޫ؟x'?/R?QDb?ORVAB=94ض. uD\, t$ Qp0~\eȘ<b~r'Y>AR-՚7۵Gm(< -UIAR/B+NSYOP#ҨvW9C1O-UM2/ж\#C ~̈́igYJ۝fP0Ҏ^ͮՠaW?Zygy :FfH{ޜ I5T3tlg9yX)R]!t,&gO(d;ćh{Ɏ㦆x.7{w9'/JH$wsT0HوU Wx=$P 4!b٤km!A4336wnN]v)n2Nc8blZ€ aOKĽ\U[Jy!J>Xn rGmO b('k,8|@Ҽ,Syv뽧0zpnvPEYJZUY#@i/'gH/0d1gzq"1yBHNEGW{뚰ֵ:d; !}jΗgɟ=Aڗ{~ۢSWi㶮~/ o;G)ܾG3h_;'T0R_$*#{ B /č.sKבcnaaKwsu⤙cd.L%I7spW%kRT8 i y񁶨w<QV8E3݉&즅zQ&ߠ'C+I67=~x t4vic 1'ѾٹϬ 5^O17:P Vܾ,c3̲烬M} YVUL(#'ם^z"|S﯂!U<'\pۀx%cX]3Clv0֖vƹoP|S@Ϋl,wۮm? V+-"dJDJS,xHǬ{>!2\\ACo c&qX=|#n,a[0|GY!ZF??a(Nj ݃wϜ%$^Z t=} &Pw4YnwC;/HAag܇Z $bugc8[ 4< !cW EH6?iF?* :Up`գ=YZVgH3 VǮ2~9`M.q L8+[@N /a/Agqiox?mh5NRۉrld?(hb/kk6bcR-gcj ",ڎxUc _*&𹥸|Y6ڮ6 @h@ JtR-1Wl mzGN6~F>J&cD,7d xͻ3vP9:sQm*E0}|fbKK',u0 :5_*$\rk' 58D;a +W=ʝ  `ZyTFfXPv۱gր9UsQ(Sf;Eý|o}{C.5>Z!@o 3B:`O~ ̘-Ld:bo&>wsu:8 5&gpIDP|L?xXZ"`$\PuljmNOi@BQ&0]Lߚaas8q#K)T!_6~l!0NagJ ΫYM}p0σM)a̟U) YZ