apparmor-docs-3.1.7-150600.5.9.1<>,hp9|Bx0S[C1A)b3_Ul7uMr\a3ɀV@v1w$ R>/HBCO`yvD8 _1ԇļmD'uf;?|d # B 5Ihnx         G  T    @P`(89l:}FIG` H I XY\ ] ^bcdIeNfQlSuh vz,06xCapparmor-docs3.1.7150600.5.9.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤h/h-heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1746532570 3.1.7-150600.5.9.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textdnB$tx( yh{+|utf-8e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3?P7zXZ !t/R]"k%nCQZuǡjע|{9[Wp G’1 N\oڐQ͙xq5]^0ftcBna{Dl o&8={IK!4ۍ5|HpX<Fg a[ͨKE+q1 Aps9\ Dt/2nf-+ҋPwHM'c]PuS5񼰴'J}ZPM(2&!],<+sW e}ѷ`\u9xT̩hH^נ [[%t?la:(S[ AcxX5a&4= +AGR70z98V^$J=4v2(ܦ[y2 e0:|jPBYu%/_K냅֠q*"KmP9q-$ʺ9" ݅`b;.Fɾ t<4='bF/VXUɹuan pMΛ %5!C;ҡ5:Tyِ>/x-ЛK[i'W<ҷw񵳉sgVU|cyTQ&D,M_ <cêoX7'qR~CjgxY,sK֊Ҕ50݌]]Jcib7E::V %s4.Z{,' :PJӈCO aN;oL'2e+08|:FZƘ)흟bp d!(>Z}(:_>hвۇ#Y\l#@r)Җ }fM`t B(Tc^@z_BMjY?2 {9Sΐ8"A[˧>-KdhbOR'kL<SƺMB3qnê#_\0SAT/FY( [&S.?k+<'erMIlAabGU\Xl}Mb*}8{í G*ok|\/vuS/Fg3= 6b"צz@3 C\SlQ:o<@SX%4ܸ{2lWe1*qQ#wm 0U h,J]Q-/$Ո^y6X<9w.V{ ۇOjJ{֝ Um}UPH&{ĕGn8z{ھ&`O~zΆ2_Va mJ~sEǵCy'`|Pfۍ\\y/ej)Fu!";*TteP_5PUO !!!3*s^_Ѻcr.d|'{s@`m~sF:_ۜuK}/[hXm9;Wj8 NRz'lM mj(bK{tQz-Q>GbG1`~>V 5vh,̤4S?'E׃䣳;vk ‘WF{n0ލ.IUfyV8?ɬ~W=9{Ǻm'y!Q0O ,.Ja1Ԇm,q inp߈NJYԦwز R]\9o{JJ].YCf!h>~;Zέ^$kIub֏wsˡ)]`K Zj6}/v] [֤džIaw@Nݳ"NlLuyGM&i50c1O }{G:H̶Ij)_FI?ʘtx1To<|,.) Jؕ V-H7[c1#*XSp +33]dLJ} 9dѭ*.2l%i;W c X*dW 2ua}p[Ò~q˶D5E|Wzu98L_죒OE>;;a)DSC6"gѯ-H!g9v7ٞm~ >ҴWP+6kϬ~'<,ϯ@x%GER:wT憄de6 ," zn9 yH`ck98 e"d"\~tҪO>dco(}:HLJ9F6@mvsg}FPg{hh]{#* f1~9JC~ƔADBsM-ݺv4\b`b&} 5Sv, <"{\A/C^FN ޲+{Ti i@=!n/ Q,ᦍ7 1ܓZ &@~ۚ`|vpC_B0Ej^Gs_3Jx"F(<'inΉd Lve.$4:ym8d(qKKX-W+^rF #DЊbw^*rj8M74vζ]t~*k]"$ve"rw\A[,()wS@ ç OjVςCm`oN+Y8`bQ!O+8:D ҍ{q) glWˈʛ A94!K`ц/zݵƦteZnDEr!3 oQMqZ˳{0x/u]Uw/<^gzOL4O( }9WO΃8TJ@dh#~VUP4c^uNa/LB|F֚ wJɑt,ՖH7=v+,3{3ePIZbJS6_c JPRݘi|UÕjIQ"p ] ˽-)VJ&M67,$u\$GZZ{" '{u>fB|aՐ{hvK9vц 9li dn*/V5g +L Cbb۵odeTտeLRiT޾ٯOx4X]/˼퍶|3UT6c6~票j8MV 7&5Ϫ7 !\gkgnO؋&[d='J)u@i?+x_'`$(5&!]$r$YK}Z];eʯwHk9f"Ԉ,&h=rJ;mBd\!)#k]SZk((ذf{hFfLkAƻ##%s\R|c4OJK)=z5,dCҼw78P5ОP]_=  xA ~{S3s?2vg 5МCd?J 3FAvBDc.+@c~Ag5$| LueZI{ zEn! UGи * 7J}߅:a1TjfVi %і弦{'0#1@ Ky$n o-l~9k&s /JF\|OỹXSJKwD /9Hvl7a;|VDZYmO~tN(=\$LP<{z~j#lVctf0=(`O(W+EE {!Ic̮*yfO9bBӷ4sK*Jo9a}l!N~¦h>Fuh ֝U,ByNmplh"bჾAFTF R9h3clX0>sjK2YLb *LY"kWY,IA`c(.m"Yד){1!'n 8c\ROY<MFXMy9rӺe$ ;=F 8"=GgOWbK;@^ G=$-ByD@! ք.ޑ\T[T)n@e%Z_lt`[.sg,'b&96 '\].RQ|d&+av`=>L Eoa^uh0GW{IY^@7{!hF ZZ %C =c3k>bAi:^M.3# v!~ "%t,RVdɹ9C>owt.X;QL*X,yKw tSY!j  X, ;z bd?%X <ěp1\5i)7%2C)"% Su\ :ԫ$w;=($_ ֌v{giCz EEQorvEbQ8c!@8/*5sڿQ$Ɉ"U^;.dZ)h)7";EԡKq&cRPz._PmTLk\w;8|H^ EݴyOR+vaCm}Dg /f8J%˘$RӢ´ȊL3n嗢T*YE5^0KPéT]+d0gQ웶Y'UGq0QSAd'C`>YE0Rze%>iᵖ|-3!璃פp}$6S[Ӷ)J /4hs0a"n'jƂ f(pP¬V$`n!.Q(p0Ĵ*zoN/M0}w yVrKzU Lc~^_=qI 3 뎛4Siٝ,,錙ӱRa0Ls *:z }qhll)WPPw!wf͢aȪ̳5H=re)V"'Zmܳ4]Atח\HVCwB]vGB[2޵OEԉqҜ R^)r)P~Um:t0ԏ%+9iu2*ym&h 3GDVirc,jXu& /7Dp-vUDYZfD@MJ'W9eXr-H#w{Ϗ9{ жSt΁J 4-[0,9AjU6BpyDW2M&V+!# jw`[7T'uq'*rSفh~~x gpf-7nLzǥؗI,'wԲF*Š.蠢im Q=N5<:L!!k՗BU,Ql+k{ "ong2z`"yBѿݳ ?h@,?D@#*`Y +_&y:OLԟ>j`KOmvor)۝R7&/h#Gcag3_t{"%˼pDڹ1J Za6:!m fn"jHTYntf16M"VG3*YnRC=`Fn 8&ͪ;Yń+e˭]l\䞵Jul@bgM6ôa AxY,A!HRMSBW#ܰ"0eevFҪJ堈?"`~Fkͅ,8a+Y]PHdDtc[^+8~9g>qTB(9:?:XL u@iU5bhTb+覸HSƭ,*:m$'DC5RQ'ɐ~ãmJuacacJ30O֋f) =@ft/M O a ,g>y`y}f7QsG!IKIſp~lMB1#ZnC['~zG*b/>I?!-!Cv"P#vQB5Pq^vB>Y6`6jTEw(>R61~l+ae6ʴV%;84D4 PWضtLg,3D؃ȂˌsI+'Hls9KT,m§Ǻ {}$!j*ҩX=zpJU:bBݾ3@\~ʅ =YC9;40fNe "f(D8ife,J[,G=nԹQFXUE Rjh?\o`{_p;M3½.ꁰv0DYR G9ݪbA^ /_λ/?2 kXUVѬ;QܸI`N[FBkX1Ɓ. 5JI>qS!d/KF V^f'٢uXchG": rXJd C@ Shd,L` F#VUީm%.>#y*pLFN*g]!szTA a!_؎WXm;{S9ЕғbY)$db滚j8#^5z53|>no _o,zb%ne3p *(Hn 'i-mU0G̃}'[cm*{rucJuK[ ?Ρ2'1KfBV>[ɒ}QdrTve~.w .hP=mO /;8fc>siisшⰌ3}T.k8DouĝgBf#Jv{68̀zVGZ1 !ç&q`N opd})j!KXSr,]ǣ'XA%QN?dRɩz/zqHz#~VJE~،k'wD!9;NoQ #^JQ(Y~F33h%|*&r9'6:awzNUFL/0[n@UCE՚H(mtWj g6FOJ }Iˀw#-Ƽm~5a-%^avsIS Ow*~ ,rno*>\%-17#jAXO )D:mF" $l]7INRxo ʙpbA+Oxn_t T#zMA=uѰXq;RS3 ؏H$ݑU*ħ).(Č;'hNr {8kS|r5֭{wt@\lr0)3y4SWNw 6bع6UʔQYf_p !VE"QJUo+8wB[Aiczš$4̻,:fҔ˖RJoya*8viZi;:Td*4*u)u~,ptWVanO^Z!F0#9'ԝ-5nq:RGZՌisS ߹!(n>%ECy"d#߇Cm`^\wygƺ^%@UOynkuԠS{?cJyAF?h1ʰܔ>#MD2<:9"D>|$ZLz/ ;*NHS\m &#n͕Q+nlC3Y \ n{Vʁ81}*:l1-u$d!(˃G QPrj`I?mJU!vz 1ek|>Ux-YО: uX 1Kr+414!=7 g>i0.Y7r2yKfgp٭N#%O5kEޣ Mu%.)! 2BSWԟb 9AMajhK6 Y w\QCJ$!XA7nO_J`lcuĩWqlaÌstrJN6-CO5$p =ą[$2cT[U xΞ)*2um\ "pD j!q&yNڙ`&+!IV0Q[b=!] H4D<+ bE*pM3)Aey $onBS*K9-6Kn@0n{QkB`p֤0Q;ޔD>< 9cw,v޲O8e}%Mq/~cCe(9 d4NGhRB65p˦A^t|uYBL UWMGY>.[{ߕx$ a7$;Rjy'w*3n.LhX`̙Ԗ/VD!`Sj첲 "Ӥ`~VD`[%7-LJkOL\+xճ_&t7ц YT3pw&ģS#K` m/;<]0 SimI4D{g*9#~Nw b|1òI | 7en֞.lKݗS& #OF<|%ЮVKѴX^)dysF P n*',+[JmaU2q5 ͮ|2)%=q./ pd?y\\JeI; DP*`Ai|uT[[l]>f7\P>@i SA݌6zFmjPRFN3kឝF='J{V%9;`&\$=.l:27@n.f _j[5[T,SPB#T\Oӡ#q7'-~u YPٶM|X6H6PƵ芘=үA(MgzJ˘Q~17s/"G>H,Z'erғ/ MY8\ $DnݾZSNwS!NAlGq_м^FpI&@ "AZ;vWg^`΅9'+Tv ܅y6Cx9/h2:¿J\"\^l8@^̎c c6tJM/5~ 6JdS~5Ug0C0Ln8㏗hH`7j!EWF.=_[H-̝_gx%k?KOfNY^2BXKr'=l6BCom/sus\s " l+0Tc{ _S2k `oLjWB!'J<-6ǐq,\W]1\WdʿKp-磘T"WPY)ƊJ#sIU _B|mbpp H}vqjrK V !¨%"?/wzi Wt9887u S&JCd鱓ÉKp\Ƭ~ǧ֝[1 B,`ي EDSYm4 1&~D@~j,'tTY筆ԍs Jq@*6X {튨l#!YVS֣4yyQG{^ n1LV ZJX@,`a@>MAP~;%Hhk ƺ 2%;ɼ^; xǰ4oe=B|GGNvZC`i 3T8. 7!OVbE-kY֊A@dQ%NwN͖SaT> x kgToɥ5J@$<68~CW%<1^d𶽋QbƄ~ =ɸTyQӪp.Thb̜#,v}Xp+AӋn~HWjw{bv!/몕z*ۉ:0ܤS( OgAzODj%ޝ&\{ӄc`2!!Ldbnnlkw턫ziaUkEc#yNѼ', =9&O'?-LP$IܶHKSӈ_c%4m:آrGhB&'X56 JSVök_ ?P,g}EheɩXL~uڏ=0.*}q=To3Ҳ̲ #B9~-G$i!ġTCT7۱wzѻu0LW9d2OKSҬ^C/C_܄ӢrbDKz Aƌ yeQtټEx',W攥?^nd#6v;`f{a|zi9d.)b*qzíe~azB =hrٺ@<[3+9S& M&noODc^WwOKiFDG \Qr{}L?у8u\)r{u~`E>q?bw&Jv'Jෝdx'Wݗu qpti)!7ntO9Gи~=~ٕ4 L:L,}ږq~ϣ~mB ^~J.$2v3 N_s:`YfP#[A )JKm9ۄ@o5' oܿv ~C"<]w[Z.ʇ8} !{Kh\Q8a.8~BXWE(, oVxb%Al|wYP#3xzmq}]r7Q M.d797wh&oq}ѱwO(?Fk*t]6Kzj$:dٵ{px\pO6Z& ν5H gЂZI rVp8z=%~j£AQFPч4_,rys+bN7 gtQ7k!2;jm1'rUnBz\aQyq.՛@؃xd 3+/!mxFt~.J 𴤪ѩmY o7oO=ӷ0N!QϯQR27񶺔038wm@n U9xͰ}3P+D6nÌk||ms܍=fd<(!Uj6qrem}^t_lO iGЙәVjG2C,vpNFY4 ލjѭ:]i8z[Q(@71qU<-#DZO,srRĨ"4= f2Չ;Ś}IK-ӶAY5[ ¡`: qdIꎕ,R2OAك<0(`w CH X5?ٕnO<)X>-W&s i䯄VwRThxžb0^T~hۦF$\`C W>{j~g3UiBEi?]LAG2 :a넻1)yAqY BykZ+8`eF&ϺI?lq*ONHT6Bݒë|4j<avA=F3v8M6u>IPN# ,ץW눸 3uΈ_]_֯`[WdHu!f4 /SaX#$RZﵡmrВ}S_[D.NsKv]ωlf}h@ҥDŽ{ :kE1 (CQiWFwwL+KkRE]SYj ӧ088:*kMgKv!?ow>x(9@!#$MϛBf̓g,9sxG.L'iE0Q$B ~`Qa.Z˫ 8ccx@3H^Ckx,'.ovIl.@-)FP](G"Лv՛vT},"6K&ޑ~`DSkсKڹ+fK)_4v׷Uߌ ;km3hXުN {ݞ yΖ@ߚH60QD wx@t**/S?qpm= jRݍrRվMj!?+ %pTR]*d{![eG^^15b$&$v[)vif)a"aWS>Ռ4(5and]y㸤cK;CtmujC)M*SndiKYP|ḱY)>R;Ӟj;Dۿԥhl,w>/2u搘ʵQdkAW lͩ {{w$u):9r^Rg8si~Pip HIFs%PV/d.<ˇHo\6-GdfHF6tO#X/m}Y/7zN5w܁t7 y2EA)bB'ZzDۓ͟FFHK(4|q$Rֻ، iӦ9^ ywMSU=s[ ݔ6CJK} sP&EIɧED7Ys:BZl@%u|X.c3O'kɍʳqt\Hd\~z'\Ds\.^; 4~Vj m  ?7,y/l0SvӏwQvz{*w*eL"lQ|5WӚ$ͳ3fy#a֛7Sbb/'U4 m73uK3Q#ۍf- J(n\W_>sR_߼ dNUƓJ3݆+Y!$/Mn݁F* Q̢ WJkqFHhna-Zz4T YERIǃhf*ȤlpW'DaweBx;J}PePUDU |bT}*X!]j"B.IS_Ye=">f1R}A^ {zǣ8p5^T<;CM{P(ԘE@/Bz0gUk (&%z,mya|2?6>vG͆撀0^Ý{qF~8L/ [Fj@=*FƬ.,;L"t[CF;KsP`6wTan0V_ۅuj]x;FlLXUAِ2KX|'WS"ȑNW+}E y9EUeTi-'r@w$Ƒ3= x6N.w#dҐoP} 14ѐ^Emdɹ}Ljrۃ)NV. }5N]#S-3>1DDz״ޢ>Bg_g;}c69LL)m:.N:ΐ{93a]i"'&vn] |E`j͞h8OR~f!(8h&A(q_< @dgh/)>(WKᜎŦ @xx $kQȌԭV=F ^F4ʄ*iv = WB?l>6CaQUsżv5A˨SOt_Hu%) 98ZZ~= ;7$ef 3ѯGXmO".:3i$8a6!6qcKyo@_۝?pҋMm X4礈\'S-K.u=h61ɫ+)HOzuCA6&&dZ8EX]4TvKS5B7{˦K0*(IGE@騅z4srLFr|ln۴ zLy2* [aUf%Wo*[LHiU7V;%}t`nei{ o Ř63N~wqakKlV@x 1.~12cj^'}&j[5Y$L^[ "9 UI-0di32w0Om]' DA8LӎD9"QmW툪0Oﺤ6PU"~2Z3 pSڇ@]s~: FۻrHw>؟'NiC$4t9ƊB(s*, ^!VN;tpg#`8d?b|43![:W+M 㷏X^AȽ^Ie}c9 8aK6+D^$gLb{}T-BP̀P8jt&sg~. ^ޜܤЮNQ?VN4rӛkQ91}$cb @E[^Zb|Bbvw\;ʉDTYXC캩M2 hL5AY[N2j8,V6%w7Tm SHW8$*ڰ䣐L9V&Tͭ8X-_tVVP@E 4Y^\9w}m1Ϻ֎yY;7i[%uYuO) /: <"|Zvj5J4K xoʭ/ҘDB #~,Zb:Iҫ_=ȑ\E=Lչr5 buiuTZWh|>PJG7FU|rCO@~\XyT|tCR֭(6k[Ēi _v%ƅMHS).̋H[,o!..5p<-mPw}!AVROAy qWל^6 <+^"r"XDyq Y +Lm A^:Tl4ܰ% yTE?ЍzO=D| R$Z;!ֳ{]Ynix㍜t!gY7=)PzEb٧P.=f#&^1{ u-'6ʭmS/='!'-)A0EKn[2քV#Z'KybՔ#6WHCJ}lFrbSn#X7SH\ }(' .嗱wHnhz? V !uQtK.NQ A֊px;U45C*3af*EHiњdm>fV EhZ,zgpe&07pC\HRU;Ȝ%Oh2Tq8m9.wqmuM*J٢} "nm=As[{9$6 gd~YrV>mtl9c ` &Cf"¿M,uJ@M,s(l=[،AΩD72j-)fƹ=R邏m+m,oY_.;r-mYO/Ai } %ƴzS3(Z_ mQ)qڔ\ ;?2d*Ye:ۖ3E.xnx;!0QJo]cuu"!s[d, 9i!Ėp?b?QQм~Thi9.Ju}<h ϕo֨muN¥ [ y΂*-VcQRau"V2]"43?S5~'4hY\ϻ*hvm_JKA(9dSxt秊3F.iY;&dM V77g]90Ka ){<5b˹]͜m./8o(>(rדJֱHEUm&Q2l4jo$.`5#w^lvP-]t<2fދj; \~3UDsh~LU+aO_f}a}85A֭yM\pʝ4VEU4!˿;A. =YKiFjC<*y,ZQ:>cu/:~zUѱS_v.|׵A݋BSVL'n@`ݙlm%I11G%0Ո3 86?7 4>[}z{aX4Utt]YN8ms#@tNy]s=`ld_T5F|MlyK͘*f)(*'vx3sS|K%оT[!yv ! 0h7 UUHCK=iaVW dV=0#꣊sRtiX|¿ȯ%i쪹Bz (?f~RCFqxOk!8"FY6xJ1Tx1kEMM +4,=uϷkVȬK];%G{/%1,qPTi08ST\S+ O6]`SxSI#>Ǝ 2ҦQ.]&@ۭhM}& wKP(d#Ρjz')\i}1ǫRIa&&G[;2hр%ͼAb{"<ϭ=]0HCG/gs@]&됒M*zU8wQZeL2 oֵ9}?+>O1n,Sa>d0vAmo7K l[o|Nu ۚ^'@"#Z<jOJ0@屶}]_&2[9*~3 tp:B-&( 1IT]8"CQnQ:Re;g X#&[IqqB|`RDrg4᚝1ܐE'vB^͗`D͌'(#3jm-!4 6q[:>0 s5(M(˃gmT*hS畨uɻmZsìTJg/W6DM{;"k>dfoP)emqnK߯g Ϣ^1F# 0_؇ph4 F]7+N?S-aGlny }AY __[ޒK DYGٿ^~o&]uAr#mnsQPVbNʹ?MA> 50(L5' ޚ%;[sHֿs׆5BQ`~D RoBSL%CB}洪w6MɁRXY(v)BְqOB{ Jѻ8O8ͣm(PV s3UCN$v>a~$-@/g9+!#gKF-z5f/rB.!)o/(٤gUIp|%ݮAL/@se.dOa2壤<+wC&hq;XUYa B4Qow'0 +ӪǦ"EEp4\J`:/IK+aadw9Y'!J!!cU N:wg-O4{v3ܓ0̔|bؔ 3xo!iQv-oc*9FȨ6 ~m8 b̂ɿ_ϠjH .A3Z2ƱZ9* irCx'x9L Ӽf47!ߩs*z3U:%;98cw-qУ'PZ! 79%-`u~2Js !~:,+  F;WR$32]EXaUkxftnIHUkѝmq0&RͼhoI9]1[Oa vNTN1UA %7]̐j٭E[tryrNhB,sg㇜Im`UzӏK9e}m!L Dw1E1R Rѣ΄FA \/j: 35KK$SY}-t+cGCIJXƜaDnVݶ |ƜK'S +~@bӉ7+ 4B z>k#L|%iBc3hIahwBsJPY5fq`amondQUģ<&WV$rLn[x̵Jd/J'Xn\:_#y$]N +8-UHZ5k&ü[ZEYttF~4=-.PIO^ZjErs #}_Qt)d'{JmH%Bu:%sS[0t+fŭdO#r-dgrIEG{cSE 4\cE<-!v |vTkl1\z*m+?+3omDǾЌ#QwALn 893LJFy||ej E ZSJ%%Ťz'Ǎl^˼Dy%ܣ:*/nQߙlcw%M `k D ņr8;Bۥ;h yfsm6X`Sϔ ~ӣ?d0dĴ#vFg%hک_/m.CNr띑,Sb#])'O"?TfsRVㅅ:(Z 3(3aLE'۳B@y maT3%AI6 ;C{l;- &c"pF½F\Is׶LJ9rpWt?c|)tXAE3?$CeQH4H“zqE#$9NG%Uw7ұHN <t'Hόi(j С?<CnbKe@%oy{ pI[-8w!KPŌx7< rj友5pjl>GlQꎔ)AchS"9(>6BVP_;j]^1!ISu Kȷ$5i-sebCV $v*3]&($HAAc&0h; k;z濢ܫ*cNe?)tʐwyo} mdr,R-ٕ8vê'T𸸯:K0-.(5{C;GP1oJ\{WqǓX l/2SZ ]i\e&5ׂKش=z'Jhkr = Q.^E ">}wgn֬b'0S8Z?MfsBTL)`L~< \˰7 d i2#h=¯U7faYˁ8}x͇ VnD(vC;(cԻBt{HKrG jGd[2Ve#ӴU^Ul8ҏ~ک=q"lfM7Kז0l z;/O { #"Smym aɞ e85Sp"_׉Wp̽zRCc|&,SpdS vݯĈ] JқZt^xj'~ v+q _e Ea|P~u!4yq9B=!_'URm~dŢsv\l=dZ$J$k1V_v^`ESGS#km2ŠeaÚ:T_:@$\=@Mΐobv1M8hۅ i'JVtiAM(6\K)k&KYǷ0%xX3]Q@f{((6'(u)ǃFr@V{!GteN_ J~YI3.?z`@' Q6^~1F6<Æ$s&uvld>zl{ۖ:iuMyy=%.ksWPO73Ȃ 3KHs 'q5߁OR=_'Q?Y9)5s ~}#N㓜}Ywqυ] L:28(2_)$7«VڍQ7sƁe uE=uҚ (dc/ j禈#f5MvY1t!ay;7CSz?ΫF[YXt8$f[+$i35U>{ 1[sm̶vc3qIYO^Xw[JO.TlW5%n-=.C#O͎=8$~&i { 7xU1QDoSEv]}ŷL;gd[xnA O@!GmwmNؙ9cKXD4b0,&sH2f\s2) S\b^uY՟uڑB&|oO(+qL5 $v&#MoM5Qf z/x`f"ޟBtϽ^7Ž z;\|`wJ3%Sw¯'Sg{ fr·9w}ͺEr zrMx$#+o΅\x]t? :)刑tyvpF+^ C HADZ+-fxm{f[0WI57AH"Œ.EL>qZ>c+f'&/BR^gnu2Kp>!!i 8.)x ax/^P@[,)PC@4.شP{/O+3-RfvWr{yR[[&{\{ -І{16$]l68*-l~ ПW yh~19!O)DsKbqAv ~%)D^ ԥ-c~d2s@w!kkrxQ3]IM쿽p((b}lqXӼP%2y:9/ JoAk2 e~)yS/v-4ٸWQ8V xzBء L_jKK+͏ nQ"g"]+Uo]خ@zvKX3<-TEjT_raBuB  AK~*#5*Z$"9R-XNHPD3NAKϲ:vy,!сzC{B];z^n2 ;_?h{7jSp`X 04!bXr>uxϱ4fZ]>ql5ulO':IGkY8 >ϔgZPTŊypyjϗVd*~pY .(FWc4:QA|cyh_Bٓm,Ʀ'c͚NO)v?ݢ,@+6ME/ 1/i-PʸbPdQ1d5t63bHԘU4p)zAgf~) q* hD*em th6aA;BNV9< K{Qģ^>bV&\e*V,CŬ_ jUe;,ջr  ]U{gW(nx{@3$@+}zvb4U )nt]Z:` >4ug۽/n(?RkTHYW("kҚrN`1iM*T~v Wgp{;RJ/llp]nL qDH>\`rM7F|24NQgkdʲ~Q=a#wٱSڍMPU KvPA' CцFh_+d7X;+$Yz D"žwEPHEXG\A9JF14Nu^³ ,eI~CRfœ 1z({|@׼}.)29(!hV ͓,9 3&6+aj$}Ȩ_#Cq9XZCd IMpY ^]tƙ7=v2LGQu+;0tB߭vXSnb]innvٱ fc>ȕ"Í=ٻ zV?EG(/3v!ń>r#Y!iȕx[i%-!C!RBxb]A6bh-ˈ4 6ȼW"XSq( !`Ց? R'dt:E] !ec N;őc "E>d1Ir[sC{5ܞ86YdL}ϺHG1gBt4,UIFtII:1fa"W.zoӉXzɫIlT@6Ǒv.SU&55Oܼƨ.%Sz4NUϒEn&a zQC=ϢcX"uZ =*͉A ΃0wxG,±fZ h/yجkC@tmA=y-55)KwNˀu7ޣ+g2.:Ԩ +$YL}q5iax*DiXP0uc9qqZ!ec$l]Cɏl\Ov!ǃQYyт+*RR-R|d=oib5t1"ýѮEƃZj?Փ@A:үGcp:8 2 M}/k'ٖ ;eq`.47qR)-vopu(QT?^@/I/kHު#5}xJΥtt-FҏB-jpP_z.uSه,M4^wbLP^ĤChꅭo5̈́I^lR9Wj,GC[e̲D,L`6t9bT"zH=]GsD4*h5 ͙`@`HN"mؐPx̸XD,gyR[S6ݭӌWdK‡+,tWW^.OUALd~OAf =њYSAUN+&s9w`N,uUe"ПqeTl;U5X8nqUߠr!Vk}%B@hCD楊io׾Wܾ#zr 6.bPMYsI;"]z:ٳ3arߨe;&5t0x.s+h"X%/ HǯE)ux$:yI[L2FWcѰ"QTUBbSGdwH g6jՀ04y[!sLkp[L5=e+~/; /LnSrz)vѲ -M fb37E De<>t 1MeţsYnfoi 4)~?\~z5^v$wsv2>[f] KH6 tn@%EՏ{UqxW;cr {NСفφ<SYMyVG*.KtLQ{ۺ4JLO9zt j/G# S Y-tώ^+Sh(eY+ن#ߘGCRBN7ikROi0MlǏCCT{R뱾=,*`K m6Y;9F@v EcM7CI4gs B?,4(7zu}^sMWl?ΗW h; ,X4O7pR*ϛrfw[qCI 8R.jH'A$1vEAnp09RRE.:zܳpfh!*Rh ;m9'{kL&'hї$u+ё>rIw8/]"vqIGr{Y,G Un6=ԯmc~rE}Ȧ!BᘵIaUS*sUgrU0ctdV@!Ϛ|'8K72# [\{QHj:{ gT9sLD]Dc&r­K5 c6Lѧ588AMu9!6xtWvb9F &Tyy}oQT3U`EYlj73@?{nCU ^:sNs 1n֟~O8%cBup ߭rVn0tm."ݙˮ~(α>OwI )LI;(#-&'b ЎسRi-}SGa {Z(tE-B滻5@4vlU?JF.C^U/b Z#ҘL}:e1C -x]KSБcz31`{.j I)R3bMnbO|ӭwZXW+S d } ^ɋ/Sr nCDPi`4jыB bNH{MgPTxp[01 ?eoJ@ji|T#@<_pJ a]ݮ o.WJ(nFoETBI$_ptsg9 )v/f2"+\p~KGίSDl<tEB26!q"O~VI$歘yØ1(f_pmSN.퇴l} d_h-w$U0H#\s,l Fw#vyw3a:6ha9o֑2|=JBt>EVM5q:k{ӤwETBoR*զE+8pLP^d E*4{cNQ""8VjM,K«<Sl-Jp6faqPɥ;7e^Dt= ;&CwPM؜U5pfU`"KYPX]CBKf·9Xh,+̴!bH, Z({C4a;vP)A:Ҿ:D]k]h$n1F+bv'zYFڭ C"qCYsmLtA%64#!47GZ>~p|V 6@AEp>,`|K{b*f',*#E'6"*5-lُAuHTP1EImZ `zN7X[& ^"3(7K>3F{ \Qr:MPo|P }R ֡o>J=H0GwPYJszIg0Zf Sk} a˖t*.Q -1`ۘ0u9Q }N@mHyS;㒰/t\ßT<:DS&v3!7۳ؑ1w_^[>;i2g쪺>x9/8A{7i{Iy^6%*I^<=dqda&T ,3`vP2PTl(]yONga,:|~m%;.NJs34ieφ^sEhFlCx{OW1Y*^2atLo,lzÆ7q ]c ʨQդUjos[ES_0H9c9([D({ZmV)!VN&WNM]f/zmj?3V(eg]YYfCw)Y8vbߺNҳ2C wRc݈S?& |ۄ6 ${'̾jHH޷+ZUp%~BP0axDq꼼`%,8Xnz*LW:C}% GG`g7ojH;osD_wܿB@>k4F$ٯ#!Le)whzrZbFr#X]JJ-j CB˻VԿ+}#ʴ֘ us 36.4_ 5ԲT1٨Q*PbΜ͢[qEFv=?"Étg HL*\1l`!(YL?C, 0?Q~K60 u~ti3F0@wGKswFZX%4N3RKIJ.<(lȻlA Bg3e $AR Mx7&^y|o xܺG`"Eqd8ܡ$ț yfg5xQ>̄kf;,Ek|x6x6vՎonvFr> ~U1*$N jIS z^P_m=6fes;덩k xgX17m=؎3}Yn*akJJhpŦ[j8Nvpɜռh5J nϤk1h0Ӊ0QṉRm"~u\ne$DX5> .~8:|ddQo$vG~_!~YA=)GSVVH.q1 LCLwK fBߠǩc E:#j$,tc! %I@WKtҧTP/.d)BT!yѠyE@[1ޖZ,{Tᚢem!BNWյqm} kNFZ(ۀjuR̄64WFBlEX^UkxmgtNNհ*}r WoEtrYٓdtS{ b $ \Gg]!iLJuKW]Yї\4 y y>d ޙHclpbK4þؔnQJU0ތТ0q[X`7b .h?RQO!AƁ#];3['{\47JjDHLnܭ<@"x2Jy(8 pl(xO\oz GL34j*3YzvL֡q_5:$N7( :|92" MO-jl% q 'pRUV߭ lB} k^?iv%a_4'\wr_y,H|.2i;7I3T|-JѶ<ל#XR(q4-p]:6@T!;o{W6lEF`t2YR3"ڛ m:PdCQ'dZv:ul!+uNB}d,'^ <$ǯNx $YV7DsMc܍[ڱ9@y~Bާı1@bv> U(x ڑJ'/(zBMc}~up"0v>w[: A:J)ܮ&>ԇ,* u ls깥GV\p-H @ Nт]3A:ZYe0xϊJխĠR^Ym*(wpLbj`H 8[ %s倁vQL&d$*'y"48WQfXi"E'Cfj`= Oircpd0 D.c6% nx'q; Iif"潳*<`,6uf1z8"Oi>r# IeFP2 '@zGl+X]yv*N?E|;tV,3ת:wj;deU_=Z"ޮ7̦Na18=!,5'2w5?>-RwҀ;ЄB/9\bnQ[<\ NI'" "Ъ4Ye`k8ROZFθJ:f5:$اa Ÿ~^A&_r&0szSf˷ (2!ӴG-ʮ=SǤBƮA,|'vC6qz鲗x;HB<4;T=H*Q>ֳ_BqPG@$OZT&gT7k+5oE+ݶ+;C^%be2T% w╅aZ|Xÿ ]'ڒQ=Px?qG$$2@L('q 1q]FDSFGSԳIQ5 !\~.B7g=瓱b{i|kƚtdW*LzdWHݻ?M:V J+}3 54SK9:G5G93 ` 49,,%3YrS}~C߆ݹW虘CUhUw>Ǥ$Mh5' M1#;\TA37j';$O:mkiYʜ;Br·N"5ZVrc~e ; PJ2{5'lO2/ "DgqmSTm0; yGMS7nyRG".`2+7fh¥$>Vzw0sԅY}RKO(Jfɪ&@RuHGqO{#JXP[]n rlTg9>>Y? X *?<+ K -ӔeaS}ŪJdD6-Y" WJ|hb{us&g}\pq|YsZ7-4 UlQJIՖ%>XVsI'?;qxGD hMNӻpʯ۝n_I0MU˃3g#aʮ.UTN6vI&z>4^";"B-Y^a֓ _=BI?Q68!<]H&wף;5npPJTG5potk RHJTxg6VG*ҀSx#ucTz"xdY><f4p~n.5Ĭ)86,6@uh>*G%ttW" q = f?iIZ()YX>@ĥKh]&$̹5uɞ-?yz jaW  Ȥɾ5>aROa_nY4DyeÜB/r :!`BSTHpCɮ%Ƹ!Iz>g)S^^j110R=u>Qabn[ } X(@纯2{E]Ml\p 0ŸE^AN2m=tlEP㱘WP# N u.J*Ǜ`lgbc/.[=Ա{0õVgcQWِFzՠ1)Kjxwy-r&GG3 Fk*O=+4[4p2sD7ioOP+z#5 xW`>.$Epd8i ?2!2 AS7 '&PWB잰c$CBG=&FwBV-%*EIK(C6~Q$n|u~k|@ǬANX܅_({RzBSX6loidyB2K堀)Ӵ-ވpQKDZ#=kXS'p%k=K-|`:E|1เfdm!.ЙKr O +. q~HtrLl!=B.NOo뢹Ǘ6Crv]#Y%Ҭ ÷g7ouph#11 (N*a oݥfE}nVHW viq<LO'6M3 RνD.1|C%IUX){g1M>Upv)$DZc,"s] VA;_B#'mpSFv'YFb ]]욉X|NqjQ ֟p)Yg,m%F-akr|w~ c5]ln/) 1\k9f&'BUi6nKk eCCo94\<^5]A>޶Q~oiyHe9XaBOLˎ]>r6ƦNI$4l;_cldSч'cdQi ?grP۩ $MHej1\ jZMBiȒSK-B96i<))Tng]n*PCtXjaaHmD7d<~wχocɇN>=$%c$LfeN/?k)&N2GEX>ك %OH' fmȵkjb&e0Mk\M#l?IŒ`t_`D\a>֕w.)/C:RԄEފ~bn<|KD5H4}Ưc5N\įɊ76uD|:q/CR$D݁8xoGH5Q:Zy@6!9w;'au'JJ;[ ~!w~Ke+ob>s˴w9Дl).%|QB΍m*aG\5Qn2i "(Rߓ&c҃׮Ko=#i9?S&Mf"dMH|g”ZnYC1n MmkDDmku¥&RRmY UM#l5*2hAdfle*QT aCRYqxе"IiyqFyf\h*qͲGӐ@}7qI#xgNFu:/TvcFVhgMp_QܠʗfREYQ3e?W01V0kl3yr /oNi!\G#`fRa1*& W92V/XQv#@ȖoG2`VCAB_vMĩ9k͘+rw0&{H?J{l27{*EV@O_3^J>L;\ #Yz \)5wzJYҽxDhC&j4d#`?^] Dƞ CRPn3E~k;pΉ `zJdT-Ήƭ:i\KY;a%rC Lͥ+c,qܾ&beR9HvN?ZFKKFanxA|#OD<${j`Z7% #`m1/ /RHV'C!n?8g5[EHH</yxg܅]׬X%fFἓ$<LTj6== vN? @*GD7|@ )!2Au [<hNq׾qFNřKlsh"bVQ >Rg \-vSܿ R)cQ 6+21ppc#>F=qE l0 fÌtT~lL$Yw\5p)֤L6Ik7Kb}I3hS<4VIǒ=Jy 9 `E̋]#&b-o^Gʺ'ZY++,֗-3dj*eXCAeGűsA0[V9m e7OE)EǢ6f:O$Ә8xCV1;[ǸSoahUҞt:H`m=Ͼ;M:D hKmGASTIcX2BFg_z췸 Vnfdkd^w|frKHL6zkgJTh]Co!+v|!(Mm3臬@K -BM+Gc,N^3UU߉`<6hX7ja^{IC^U %Aߠo0l;p=zh`}-x4/7]%U0ke݀͆H*z)>VD]CYiwteodÔe.]X`a&F՛rHƶ=$Uҫi<Ǘ飄M?[L0Ͳ3Qrc].hT@+. ę9;J7c'S:xӹy)TSz]pY `ݲxH,rn,!˺W11)WmJ]ȻdC\pQ/ ]A͛XᰳhSYFG!44A~ˡwI'cPLj|9ۚC0I}?jw ᬏ4J,Ƹ6ԙ3{ݕ.:T#g9zI'J(⨔mt_' r1>~Mux c ɫ 6,zae8d*B Cf뤖poO\@w(VM)g!GrqN|?ϩ1QMh۪LTa^-1LǞDfj 9xNE߂sazڎh$|: lcNc6SLenYzҞC˷e٧)# %npqhc|}>~ܰ86IC~/M#1d:N<p]$jYfh- 8dmC3?{~osPzX-087Cj_=^{|]=MYEFJY^Og3WX;{QNC&^n]DƋ K Pr ohV\Nl 0”:`~+IJ 2j 2oEKԢ/b-5X.m|bI Ŗ5k ze^28)j j.`n{.˦)eo {\ m J @gN2I9"!XKc !幧):ØӷG57U P21>0i@kk){ !م@xOޥLM!x`Pp{9hCWb5ۍ +$IJD@ m $a~yQkAX=IȔt H ?lJ2T_&W[apGn1h"s%Dv`phFl y.Èr[Vv,h6͊=JjZO1!د@v\~B~zr?hWg8_εg $3Vp:p4ro払{2]z_q' zٕ7 ;z6dyu߶jTť1H> .2w>\0PTˮ$^1ʋQ8Pُ?ZUr 4H+YeWH&ʌ3o*@+>rUvC4ux}* b La.C9:}j4 ݔZxhv?B"'AhB?@ fYWm7-e;IXG?͖hn F1r顿8!镄Ax&N#JZݽ~}:2> ?et-u}&PFcAʸqcz_(o]j<*a <"߫y~}mh7;񙞿BEh}=q|+6"Iǣ'|je.[C uCH]UTd-NG1+=֠^(bAYkDӲ 'hS[6^W EFk]Pp,[T%YI5hcBxsjZ.ZrLq̭+Uy7wj-qFX*fF=pn^L .!ZGVVۓI"4 [&j} |5]$vdȤUQ!9#a68pJ'=Sl4o^iPgm 7)sruN` j(ҌvFՁj %MbYsl7Q:ﺟ,tmM8L*5 iuЂ)~.pޡ"գ +hG2޾ga;R͙/W/!coQ!ŊlEx46pE6n{b\_&g'\8y(UbO}@A>A_\ъh'52/.j?zޣ?Zf@ +3+ pMc@(7+0 & DDbJy YDd.ָu62\npXTmu }Ghx5{nbaƽ܃6Nk+(򗦛GPq_jrELDá)]\dywL7_$qx~5;wVNP:&k<2 ] =׭|sayۭ@{Aɋ!yаw%=>{euĖ h,v"=NB2 A 1`8GߜwQ҈i.*0aY沔uĻ#3YIJ#3enby?\3F"[Lü ز<)=I ~ \ڷo~{Ya[HWʔU2xz4Yv-ǓB5!?=oj3MWl& dH*|s! [x_;& I1?mي``}CN"RH_8*Nu#UH-iw{3kXȬ1 0 T֮;VWЀ]t[l|~Ǝc(&/Nڤx+Ykgbc R?0pS/2@ǎYfݽMrVJDMEfC?nGLA5[GBL/x"ũyC8A:Sےw39k͆"mXM[#2cЩN=ꓪXpqf!M pt<%Zh٦(x9$N制A60eD(Jo&̀\ ND9`QW#ki.N]3*z#*hx}B!L4*p)剱%CYh]$D?:vU(#{s^L?aE9HY d5 ;eLQ B9\&*MUP61|i kK|>ʵ$[ɞq|IV79@!U Sa(?,5 +^^܃!JQ`ZU_8#ww&Gbl٪w%9*t >Uu-O}w8D{~ffEy{܌ED"b5*&EtRH`7ӊNw oS݃zv+i c8H%?66 ~lL/.s6'D68_[ZBHZ iQDrS޼Luv,"2dV47<_ *$Mg K bqa]kJ;8lcfCBN9Oʮ~u)w($*iv_bF +a`nlGw@}5 \piWpyj"Pp_[/DBI}IpGV{ d'mvc5~-`N˧ Xf ~{{x].5B'ݳhNAzk ujE2c Zη*~:ķNh0뛊 l=IږrwóUlLvn2;>nm(U#83e^>twF֝N=[,1:kk{Dȝ ṈC2)ϫQdNUDpΜN|roP жd \ſ;9V %>a;NNMu&N6]g.lsr x;fCxn5Y/am?pM$Z>Qm m}'=:Wh ߚ̨<qYnLK5tELPz$eLaaܢ8iQWϥ#9QB@v ڜѷ'̓\++DՇೃbϣOT2EdYN@ɯP>.+_lN &-B7D_ꣅUk ֢f.:49>t\%F3 5zc*rzy0#;-ٛVؼXgC)p1Y q"8w_O3Wi#VњaՖ,}GJ89< S;ݕ}pP^˝x$z\rOTD|phmK$(jjmY{ף99 WGh\*"cִ5J:R&~JLsuA{Jd§ c籽(ȵ_Av`u6wְeAfNC5ӣf$RGx 䆤U7(Ȱ=)m^]LbщwX%HZ26V=ub6~GLw_ hc\q^pd[kHѸQa>4}c iv j䘸U\&]݄;h[lu8)۝-U^Q>JӒ.:s$O92q,^cʢ@sDjb#:k:ɠ:41@(N /˘߇DKL( |̎ƀ~fUJ焫̛u&}w~+.M |[!b ,Ĩ`SM:˕KQ Rc%`p ??(ؓ0lN,@eE'Xe\H!3ߠ5I߆mdQ9ɫw'|Vw Uf<9"lm)XbaQIz% g26 9}H#B̘T^vb^z<}luqc{=6쇩"¶[r2AC35* 8EŁ;M\c>C~.Dc j-.X{g;9(W-l弣+ zx!}MR#w&q}}s0 ^DlCR45 AHN4xg EjIS[ \tҞ-GSѯ<6rS=>d=6[[ $x{pm&~ョ ط?=@ɄyDx1-cYSwV1gS Иr@mA&B\`UJWy,ώD!9@ VX߮N\_Avߴ(?ʥxiH2 }duX5E]9K4K5؁r|_ 10U|sW{fMtNo476l?PQBظ3 bg`jML )A\t QwpMܔMzeo̶ w'7S <6>t'Q2+DO抶qh dg CN=b߀??̻2r휍[%A~ 3X#슒7{w˯RO/7Ձܴ5 wUe.]ǿf^_̨4!IJjM#aX ?3˥ʥtoS $sWrKa>¥#XhX]G-cUp4ܷZqP1WFZ礢WY3E<?R>"gtH h9E؛)O eaq!0O=\o n~yxO@тw;b%2VS쥪JaV]z~bk, )n&/w 87Џټ E>NL4AeV#P[B2;$-)xq7ԩ"Ƞ~U (AE :Edx#]~L{~%;s9#r{ ;(ײG5>,BJ҇ XPp|E06^&ԫ>[]1ྗ+ `vO+{.~_ :Z.A $#HimFs%kfTwzA$AZ**mXf.BY8aͼ@VVqg42Bz\ƭ uRa`͸%_xq QyO?' 3\m5I ;P%'zUOJ-4H*c!t~tB%8 2}M%tۉ%1\^P5xz¢x>ĸrS䱝l+&[XRO;:5up\iC,ˈ=^rB=prBƗ'W CKg\.zl(Pc0{c )q@~0/dJbaN'@7?V5{i=DgA=,dLgsE%'3$dw_œfd}ࠁkr^cmbZ%strM_|3gTgo}Yȁ)sέ{_)úr <)˶@mna0fnəzZ |漧k[ȱj,Z);p*d#EȖ{t}c,&8Ino臔-<>󊄭ˬ-6b'iV@7#և "__k=)tB&kE.V7%C@'b5d;uFaF vz\z*cn7h3Q3[Ȭ Jsr,;j-Jjvs9 oN8e%BkXٶ!򯌜DŽ#jQ|6AQ#n6z}4#R\X49WdzII\P/4oMp\RIsW"LEE 0w3 %yY~xn^cCL z;L?`{lq['528E1/ K q6a)ΤaBk$FB e9@ʮ2a _%>ƐD-B?|xn.+yVJ Z#$'z+bnǫE`8c6a sQƘz!ՀjX8`SoA!67Ht+J_ؼ6d16ev}PM/ [r9$:H׼-ibI^1ID 6,D?K84Tt~Q q/j݀=$XFYtŽfe}#ٍK-A659v3i+llZx,4agm(2;lvd7IR4%+iZk, b^Jt{Qؘ{/p_GcR#&/7[ۖT]^ZK(4Z pߤ"@Ş6', \sN0Vz!K(#c m1??L cѵ}~9~!еSLZ ko.w]R m&Զ-u>aQۜiʐOpTI_×v]7+X&@^E.$RtJ~y #θSw+/_A~jEKZrϔt[B &w_5XQfC: -Y)oCW[8h\̩7FD!3:zdC5SͧN\9UxX ~ TER҆?BE2dI'4Ǟ joV7Z%-B%_6:tt |zb&yHLKu"p?{\\[5d-ہ/o|JL.y{Q^*2:qb85^@Zo$J0]U ^z3}wgL3'FS_QImG [ӊgzS TqB-؝fZ\5nn)UuP>ruY{惤Ɔ/]~"|:ⳕSraߺek3:?ZČPQ Q\/`8΋lGp (= 0l"CF.6*)kZgF{_9pAڰ|"X~lwt.'yjq Lӎm4b2iewMWB>#2iwݳ*"5h"x' ۬hBLK\(>vN'zȺz(QGuZj+*EON4|6 u\e` 'J^#KCvQ 5=hdd6gwB\Xv|PsA8;i:1i5O]"=!TG|LVuer@YA9Я|1Ƨޞ* X (w?$q XwHb6)YiDg+LAgEzƨ1c8e:1:PNɂ\Fm gf1!]Yn"V6:T=º1Ԩ$qVEԒON @ uAȺ oXTӋ%YdSHOA'.d)=ϓvn[϶$@a_%=)MzzC%,1jXdbm3C+qۗS.R:wP|9@g 2$ Sl- pC24(гm @6xOKt=v գy譿N_d2jvx/Hj`gbExhV*iS;C٢uc$4YѤY^f㚍`#b8cwOsY'Վ?Wь0_}uӽ'=0q|OK#/\Yo24;#UP Mzq "=5zDzp7УS'jtđpͿ^rڬ|1|| /9 ~0z~K"m%o@gL3s/8"DBx߻l8aKŘ0W;bJc"A1 Y6bqf9r4bU9xɩIh!DW"}JC@Uyss!5”[@^SνFY6B0gֈMЭiE>Vx-WnB,$DQ}*OƺLQHYI⿮+G& <1KQ,<ҥYI;)8gX$No;Dy=>NAo mm]r[?7+*cY[Pzzad .NRj-G&!|Ac޹rx'b8)ֲSrq-nƗe =?VI͊ -YϘ[ۯj+Eěalv|㎚kz|oR=5 kL OVۇo'icמGphRQ5.iZY{NM |(*Uc 8AR>1L>MTMU-2R?fWsXAӫGF?x 5X9`lS$k>Хwď>#ϓjS-I11UmojQwԂ&>H;tPfEmzx*o6BpK[m(i=Gd n}QR/鸝-VBQQ/@qVV?Á64-iP"=&ʞl!ҿd:MOH0:J3=$@a[+VqPwLj[GՆecݗ]3EE˛- YA?xJsϨsU &Î6_i3d[%7Mn [Zy jNǰTեG+H>aN\7$q2Î#2}S F~-tODq& ~Pd @˴|\ xV="᷒ԧ/.g+ ?QI@@3.oIO]V{4\)M 2e=̶x7Ť JI4#OQ"=L5M"gzJskKDjqVmʛF!u9 ]s @srHr> *N>Qne V$d Y ЋD'B ԮF^QĚ6I/I}-3ˆc9 yO.x/p7^R"$(8Ws65=~trpgŅCf uFuv((y=aEgy83@ņʹid81z,AF Q݊7{0 A~Ƥa ,y 0ڔCn>h h]63fҔ? nAk 7@1yIw. z Gߖ.\)K_Ȼföo|eFo`, M v6eBl-lȨoA\ mͅ[$`ȣ/Bulp y߂pkNi$ ZK@O!Fzl= +tѧgUU{sky*][Qz2E\0p+CqK@=cQ ^> m햒1 er?)RkN7vä LZ>wU`?^}:i\9h"|El{^հ)˱lFUn(hrVq[vUq25Q"Ha&v= dɑ@o*5aa5Dqx^X/y[nA{'{$$g{];f g! iÏuGWZBsJBCLݜIS68H23F3 0י op|OmGWM%sԫϙb&ΩX} k&ۯ枟P \uShtH+ALrO3FH]o isŒ&S}fyB5[)C\Ētq.WpDח%G.^. *3+̩B-OFt h-^[< zJJy~{WfWvqh]w /sыNd\ <Qv:]r]`0\"EgYw3Q}0O2mui?بFw~u 2pof:{UjPLL2WUKMvQF4qe&kpP?3Ξ3!œgBU4rpa΀⥄W#Y|ݒ5h4b鄄^yn:Seɗ]a%Z8GuaKΥpJӥ@:0&U{ŴDM]n1s}ܕ}bNu53oC|5m,B@Kmw' +RVvҝPְ6~FjOwa&S1w읊QXL]h3OM6ս9HA 6sQL% C fuR%_kXhmiM0i2\9 FG ԇOXrtvݠ "mԬ>ӧd=?gTFhЙ%QǘH8%+tq,UOe,x6J3ӜY*Mb3θ2|y_E |H#v+jwj-+uʝI9#f|vtX.Y3KfF\nr1CBK'I?H X]o$eE,hڷnh#r3;ꄖ"07N+_|ӡΕWh}mǝU;0ui0:@sp=$$ ޢ\MQb6ː\9DC1"iw7+MBR}ՠr*]Sױfheϰ{nSUT帎2s(Sל20=1rI$s[k6x3)Urqہ?L4jLvWeD۶"B̕-BL9!ծP4lqJ%V<{CRd? (DQzd Sr?{v"772|iF?)pxw. 'J㛕 W%O Md|/vLV9fެn ֔6B1߀Ҏ}.ܯvYy)jjm!6i *8 E՟RV[MIٓ%'wUBW)m )DzIs!EŢ<'ߞGsO'2:0tbkdǤSv$ʃd3Bs+ =AtE#M9B ,\{RZ j0>h 4¤]<5R/\ :}oϬ8d.Y5[Qp~82Gd0i13Rx*nAհ@4`k\.KN1[6(|i|jcR̊ro&8loʌ)q\3@Rk{]rwY ?^|$-0ZysъrX nL]#o>r]6#U !CU%WL݁ޚX4Guɇ0TN{Fo e7cd$0WNjŒRCZw!>3G~ .XUO*^Vww- aPikze{~RhCl S՟U|?}Nba!bO&hUTUo8WAJ,ļZױj]c:r\.-0K,.aTjh@tbkъS9%NBec"pNH`…yme!yR>{\|= l叭rl,2ň(KF/a)2 SB@m FM_]s3KRH>q$n5%3+@ '#HRUA78Bb|7Mbj<b4Nx$X<+- YZ