apparmor-docs-3.1.7-150600.5.9.1<>,php9|O% !sKΆyq@l:P#y3L2a~-B²lH8v8[DrX6? Omڗ~?%-[팦ZΠ( k)MmI a+no$voKNx y~q YC<^fQd96t8H:JvQ&8QT%L-w_Rr#@zQ!^)i(UX7kp\[ o#rryΘK>;?|d # B 5Ihnx         G  T    @P`(89l:}FIG` H I XY\ ] ^bcdIeNfQlSuh vz,06xCapparmor-docs3.1.7150600.5.9.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤h/h-heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1746532570 3.1.7-150600.5.9.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textdnB$tx( yh{+|utf-8e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3?P7zXZ !t/Q]"k%rNCQZuǡjע|{EC6=)tgs 7&%0[baSZ件mj޳ITlaZc-ޢz!xr8ybu$Nxo_8#ۧDbhw {HFBFm<̀iq%swVO47J|<;1ci1/=.l QL%R ɫZ ī  91GkmE-0/L]$6Q!Εɢ=DQIe=FB|o !NQ(:am*QEl0uطvNJ6}R4>rQ8XMqL1Z~!a"&* m~e-\CCSvm1 3_D<(kP uP$%&MGy+0Oz f}=dIgwtBz1u;;r׈xȽ ɳ*M˸yjPd8Iƿmꑛ߄p-ea,JJ@U%pv5_Kk 5ipV;ILgJZ,w( $gy>GlrxAahǐO`jER*+Ɔ7 A0grϿ@wwmdn bCF{{4*ZPNKog|+M:#g6ﶬ!";} ˓dFrz`1#SL6nM ;K K 6?䩡B}?|v`?o 5Bgs Ϗ g;jN+LGLihM\L/O@(63.]Ҵ̲ 9?N1%rT_.ɧ}U4{(XK)}đh aV\р}fNjP籩?bV"QԎa,y"B!E6vks-t~>nXWc\jA㣅;^\u]:-u?SGR\rvjW.{dH.W`7~[.Iάf5Tjj]^69ioOvPuWG0d9!QtfD϶ ;NrXȸܸTܶkDl0b+.aU.ɋQp9|[t">&38<gd-d;@UyT}NBW0tiapDl4Ij&R\ ;usAJď+D@Z*Aj^@&?RE'>b,[ /|QW8:#%noyq% 2-hjlFBձwB>,(C26sW5tYƿ,}G=-RxNўåϡD 2w`a%B20@AOJ/R/o+ |I6Fyb r=>{zŠ(rr6wMjsip|Tc"_Е{\dTcJ2``m+J59ք+Cկ p^OY!(  {Jc.pN巗/>}HۇQ4TbYWGh&lU}^ǘ%wɓ=ÚӠ@(\D#jB! 1 BMLWXRR& d݆`CKe..LAr&KU5hzEm1!Ljyv]8 0^7ϒVs=8iodV9$]ģ#Ӫ87Ln)1ȊG![yO^؜UyOߪّvל甏=2(M*]q[!^.kƺ;C/wC;I*\#*g6[ڟˈqr{u;Q*V_0Ė%\Ca[29POaxFcHY.FB(JD&9XeA+ۡ|ٺ$NָgJ+,qcjʬ4ff/iGgAGyrM:~ Suq w^"?0MUu4]ʮ6$IC ]o3ʣ٬'^* ;:;OWI03*y lDFgx+9zYxFgj@);dL{wA$Qw=' trKLJr$_Jh8,$&bZ%,ntP_0gnN]5*C$}SB̒vza1U0fnl $4Alck@ui{4t ׌bR ̌4oL|P0m0QBƧ"53iA ״xl SRD*pk_ 2`IV/Dz,\A 2SPDv~p40`%)X|#F yWD(C VN6Gw໔Ӕц,Frzt 3[RaNƷZ\aagy:2rC#:[i k;vcj'kk1^3}ҏT gq.R8E!r#3U&&ƺ>:OQeb@>HqdRJ1by+?d]}Τzе!C>`D _jκ-&/w ٧܀ίa~<nW ^Quu԰hSi:!(~/XoN8W՘.+T5Q8ccļ>}\*+5h?ćw_ 5ҥ7fѦbZ<--wJX::b ~_@R[jIQR zZV1^~q1h2ZPJcV=ǖ,N9UeLhbggJPf:}WB+ë_/wϑ";2d5N#I kKKYwJɪ\Š⬟]7zQ$NAɢt>{ڐF>$G侊@A>cyLdVMi'Yp[\=eyc"ެdx$?j D(-5F(\^rA4qzAVٝ5^^qY6d ?%.g:le/_W[[w0K)y\lC};s2h֕.Y8ROIF{O\a,`fDYګ$!Ju8s KZAe'~bؓy${=&ڽ0 1O4>N2ױo?0Pfxd*Z^A٩t1$01#8ck2H k,CyV`Brw0UdmK v(w<مc-0a*`p˄YF2&2iy<8}[4Om|[9y0Ϸ>?JB d EM/O8|i$y}"1IY{  uy27c zæ=/J"]Ƭ3s~-|wēg;kGhwaP?~p/>6G(Ha;R MqIvL]Aq5oF SՖ*imGiX}Irld$5bzH$(& ݼĉ 83".y }Gܼq }ѨDr됥 >ΰ ˧ɋȿ3L`^Vw K[^<%\_iP\Ha65*x0Z`'\caǛ*gc E_.Z{[S=:,iQYDwxI IDN"wI#*UdO]Fc^}b1Ae,󘸱iD}6up&vة/W3X7'er;6~hT Xc`>5kfyRr]Ec}X)|C <5{I`>/Q֎"NWit*qث%Bi X 7 L(}=K]eVPwrJn8`gU=E]1Ns )k̐4O8% ݵע1<7y!K3  pXh9%bRpl rHfq@k(P?A2/J1!w7w6ѶGb>fL'tDP= D0fO QYq׹ [}em:mU CǹOQ 쿒)v#gel6V H4 U-ɤTa#iwĎ mcB)>2NG;PkCr禮G'qE.͎O{q! 5pũg{ս}Ҽ#*s׬W98cT?&7<|ȭ9 ԚM|f~ p &7j+-k 8iU-yqF+Il%T:u~ -(⸲1\Jc%ës:K&C_@~ɒ5sRСZ}~5j+2C34!?-= [gjck8H|ůq~'r!0Mׂpw}j\ [a;qr)[sA;b0PXyx8a_maj85˞A3u590*ǑĹHToawjq䉟\=W O62@1" rO % |-m ‰| HKz$]%.v[:E.(bQ .P;'&T˅1iȥr[J/IdBd$B8aJXm˰i h;oA4.2^p.j7`FB-&VOW߼ mTG&uμ}B^ v4fh8(X|CV3(@ЦYK/+g Bd+A1Yim>KR{suTD?I%B⣽$[d=ߝz2J;8DYJ-Gk:6T%Ki: Γ?ۯg|p[QDo^ +Z <7?3ܵi"O6:^+U!8z`RkՑ" y25*]h#Şꕲ']V/:AZ| Qқ͕猓ַ R5J>z!bM:8pj ӻ^5 ;MVm0\6ư زMDejr'֤mU(qΧsDe j nIq4"y[?hɿ֝)Vbr#5nKBdlL<*h oWe,C'@=D [};s\p}N{NK!^ċXscm6VR9W12is' XFNf/5 ɔ·„й :%VV;uppU |)ڇ͊jAh#ekcq ` j5!jޯ8s3dt{[_m;`[ "(Ff|nC90hIHḦk&PǼ!f=CecoP}Ws6}XuCNŲ]\K K (cDTQBe.uL*Ϗ\ljELh]Ш>6$Xn0um+NY+l2o'7ƵmaZ/%՘܊2:܀|bÄyAB,ciQaW&¶]5C~;UhF癬jsh3W3Rr3YHU3=v\zdc})]P7tc= Lj}1[@c6_YAknݟ9Uܗ)q uR-Зw+.BQ߸؏aoX n|[z7~<"!2pa5je= ۊ'yd):=2ƕ4f7@g,bCHD2TƢȗݗ Sn8AOۜ1,}Pk=|5L8nBa.DEA,cN@/;*+ ='}Gk ;'(l:9hTMl[Ct9꺰q/r8{.tNa3&_~W,!@NMdH^*s߁9LKw _+v&/1oxDpe0e^pgP3}gW4;#Crm'e?n>!{z`W\s1CKUkQ؇OB:`w :n,*?'sQB %tanA"d6Шż`,Ed  ڛẔw-oJ@ȒZGS+ve,$wBBORY!o3,M_WP:sy9),p^+F/ boM F_s deKɼQK;[lJ 1# /$߂ ̄ṡAkEV492NZυ>}?͏%4V5)Ury Kh纷>e,:e7Kq5>aq/CήVĈfcX5X9Pd& IE[f * ?q},A;G!gs@; nהAJ]rM ͙EO94Dpl9:xz|>$a;~.l~.ޚZF?!O#_/ڟxy J6y_r$v>ؠjX+8QYZQ\*'ʉU`Oa 3y~{S%S-zO7QaқL o`&@BPRiUI.w \#❃Aٯ5:!5E>ZAlN{{C'diNHPۥO~ﱸS%.H\uż:6Q8մ-㛯 *UA>؈=3oSڊ"w!BPzb^(!ꙅd6ĶOG滧ztѬr_:[^4:'ӍQI|ˋS%Ꮥ+m:`{2 Hf~~aY6 7ɖ7LiX5k,prWli5t[Za} XhqfI, N1Xo}`[Y_w*SXmp{&ȈןY&+T|'m480@[kD陚 >QGcTl$gTkhƘی ؟N2݄ÿ6GZG)ժQd ?EN_E]Iƈ6G?trDRtgҚz^ sjO$螃`P6Df=})_EbF]<dȁGnwfv"3yI{ p/}o9! Q0F{xk,6"or2msc$X%1YfP/,5L$2tt%܅6SȖj٬L}QNJVGfʫ@Hgx4eK- a~,3eMoxEis|#yu!Rm[L$E.~ht/y`j2A=*p S kG!] R:KsN$3e|E}Φи]n$TGZgªfO/qwǥwWub,Hn 4ۨ}l4J`:ئ' w>lM?r{ wpAeqhՂx7ts/Z2 k%)gy/z~ҸNHo5awwnY_5#UpΚGVt*>w\܉\]'eS;hKĹ'@ژ%(zwmt-oԔ[Vx5/-‹% X*.5}Ic 9Љ-!A7 ȶV ʊ-&a00u x^v, .yTz<:[ bFj#)g 5'?\aғ)C'|VS&<'Ґm^5xuRhR~}s< ,*,D`MO-CL/ ,G" /)pl\DRvgQR/dBքAE4D@a'o_1ea\:kثhFOzlk[<jv} K"u\*L#kR$}钧ӱ0|j[7#ypxos)!Y 7*(q7M-E7Ɖu`P*,*z Fb'}HkOVPڜ@U PinrÔQɽA6nT)8Gᛉ\ YJH a{[*XQr2F+N];@btܖZƹRF5!'ٙn&ܩYup)뫇C3Z#:Z@O4i4htήo\uQ>D A3YұB@j>a݁!!ym@rl [fA_\k"b0~_&@gb$OIl+l$]Tΐgynh!Ͷla oO>ɵ/KC=Cpw_rt %;b,3RgDpťkͿ&DfgnKX h?ڣyLe®X}jPO\$M]m65Stzx\t`UN:&t+J->0#!7v|IA]_<>8`eKETu_6 fasmgcKstV !٭Ц?]bZFYQ yȄ}i^$DLSk?1]̹>?&ls<&cĦv~Ό“Enm74 x)? ?ǞT W>Z?;} dfyo2̕ H1 xx46<6A!eu5e^Z࣍3^hΒu*.{]ؿPWAoT?) &h[W*4"Hel=:j7^IQP@WUKV%\QZ;}ZHp6f/a%*uSd>mmZF|DSХZQq/!J6,T/Sžk5s u=+U&~ڗWE5Q@SNb@ } g [|Ze 쀛Fp2]fW}š2`&ᭊ}/ iAׄ8fṶNy1+i-#Q"¸0nHVDkG6h:~r4  "Z%[OlP\~.8 ?R~$_HfXqQ5O|&&*[ŭŀ(hlZW wXQ$ %%VRAu3nA8)*:@ƾFq 9jfv&a֚OlI~H4q&\f' X說+NT~XfG=iUf5Lcs]@S)ϲ'Y5g_[ǘѹQ/rZ < 5DBZ')B>hSd70B#r[jA.nr>*pd+]Al6Br1x~)i) SJj}4'<;7$"tFǯ>%eЂ3GIW> z14R6g GtYzznQs-?l,s'&1~PԳ S?TwmŊMkB> Rvk%ñ8duo3Wq@No=m$of[NBPfK'?mYU6EtfFf)S:"C cc[o&wzssrǓ:{ /~Xo07N;ȔJԲaK`>۳@ܝPEXM^`=hAe9- g͵:<@vOz{N+=F8ݎLF8IvӍ;܅/ ڭ$J_oEցun\ u@T׍A~Cl$nmM)-0%N?G$1MT̅Te˘4^qnjo30;Ձ!ڋ>N'Yvs.,xMBfNr%'1 mXZ6mS {#l3~v65쿉qp/|pejFnʄ~[R^n!YJ>Iq."2Y7kQ[@<5z.t%疾R=G k4@3Bz :gd's}RSN0#rFUMyW82D㷴]}5F 8s`6QhաyZJBkz?j巪ΰ8\18ԅJ2a_=itk[8:&߯LuRkra{0I xE\:vEoJgޘ@.x9Jkjjc}d_2@ F&} C1Q|LJ0h"ФEVwVk <ˌSdB鱜N&ߧM_+Z%Y]}yh!1&Cm5\ʖ\畍hȗW0$ömIal%jZ>LIx]ήyo30Z^+ ,tB!U]FDTo~< ecDMњkή|-'ˑ~7C r/x9B#Elh+{It}O&(}m"3z>u=`_l)<ZzT'xzXZ`u&RJDD ɘTZkaZ2;JQ8sxrHl)7˦4JCZf٢٪lE"BcL}iQbu>Yv^( "FWVtvaybq_UΜᖕȋ̙߶z8bJ!Pn7bX{V3kg. 9s!8*$>}f 7FDgUj@5Eh >]vh4s-6d[][c# ^Y5BA|]^]Hel~xW0~{].'{)i:1O'2C]*~/tV F3A쎾-kh.?e}g\{ujTw]e}*ӉGʜ}S`JfH<] t_pH&K!.:D "5fVP3o &;ܼK?=Lte؝uvt#"6zvH|Rg"o_P`ui3ac%A6NՖh|X b͂7$/HNc*/1˴Qjs k{u K'{$wHlQBG]6eE&i̜gu mm@=W0E8aILr_95z=f`Bdeu Ҫgѿ$.ĦۤhҐSD~SѓB`xCU+& H 5L^>iˈmUIhQ1o7iB Y~`Q66.q<sz>9tf}©;ؽ?c w}Lύh *ˠjZg$}Ņ^V}5cLyQ%SՉD&/}k@([8Zֽ3#@,.CxG-1 u@l+[{X ㊣ŌE>_Q1SřG9fF2N7vƎo͏H!?Hmf0|}O *`DU((,}>rJ 6 -]-yї5>՞{Pq8g#-aA-IW5dٶa4ynD;Ur yv`4cЇ>3C-.#K!)#R\=)%fp {)kY8R%-1> qR2#}:Mj[m̵at435\Ӭ!A&Zl6_ׯ-0JKi-dHrG#CꔮY*6:^ivmXmݖ#+Uc2" o6} ǁ$*͝#7e>Yrɐb903{4iKsY~Xx 7Х(jEo19%ụH.!&.=x@1؟WDqtTJ]:,݄N*K@ix% UPNZ!F < 2  q>UףּJ%p&' fWQ==r_4_$52- ||0g!Qm@rKSHh3-ǼWBq4ZF}Rj4[`_z둼 M)AxHn*<Ë]z mD,Ç?"?G]ZO 5y9CsS82) :5 <]W#gjkH*3 z{ߜU*|B )IsA!iISGP04dzϋ%.~#̬J4NY$ZLeDsjܛBWµfTA$-[(Љ)8E◯7+ )T࿕JiW+QhB,<%]NO=,ahT{032CZɈ$@w]XwY>~ţScBsz OCH[bi8/BW\Etmwgh6^d7|jt?`B#:{Oǟ4#3U&ٶjᒱF3ǯ7toHU߉_+4aݖ1aO'{rc~TqSY+S)mt̼x ^^e0b[=x-IGd=sSyr5~ƀ_F(#UY7mG/lJPr(4Z//p` %y8gX83\c},C,Me{h 8Wf G4]n83ZlyŲLZE$7ӬilQ(h>_}k;,`V UY4$֬S`(=wtD QWms&P1eתFd'_Lf֨Eڼ 2ym{Rvٰ";\zQ^\+h_Ol<2$tPrнsRdPh}P2Ȉמ65/϶־{F _,]hVmt:E)+!#1O{6PٿjkIom{O["D6=_^+7OFTiқF~~CL '-y@US:%$C@bkƗC' R| ~Ddzش#k> BڑgE0+Sa!LS*û_Hݭ{ΒycH 6!BQ,P͇1'% s@μ(RdT@VJjݏ 5B#&x'P֑*ͱR~۠8"ާ^^%QRjih\Xvd hr|eU[jsPnr&c3#2e$sh?7;:,wQOY, KSB1x2  sԋTr )aJB,~,(Oڔ)EDhD@h\-7 +m=t^7,Tp |׿ͯ(D>+mHmD dB sYs16i[پ3PAz51 x(Kըʏv=fn!Bp/=hK$=(4f zv뎻M!]0uD2ǹjHvQb,T~Bp mL%o+AT։?i+͵N2Ps"ݴX8v$^hU쐯1Vx:h_.qԅf7.FDJu)`T*;~96jIG[~ hC`H+o kpVTxvђn.!4g"ލV@aqo8EIRQ>}ڀPbD Tz"-$.(k&7p7: x.DE`@ Cӈ7Q:{oɚX7$% )-Yx1GE;he++;OAOB38"xzF4$h Gl7 Gr.LC}I3Q2owh|//$2"dK+]'  Th;;?Ճ5J*C5@GEv޵5$e|8 eI Ճ퓔¯t.ZlƅOvG?8:c5l:9%]ʥ|.E,P{SS^d}Q:D)d΋Y3FU>"&3RC5{|OB<*xpW=5"-ϿG˜wm -lWA%ˢV{%oRMZ c#҂bfu༗y`7; L:]|;@S es$dP 7M/|l8 ~k\X3XKjLQ '?D5Gz#mJ\RT쫽{Xe>6 h)p7 %r }4j Teqp7 u3*.WYɔ&"ŗC.T\5Vv/\HIB@Pa^ޓ<g [Cu ]ptĿ.~Z|~^i"x"oqGDnye^8ѩ=G4leNb!KJ2ԮAX\;T:mDu'ZSgqr1.g_W? Nwvvb8(X_5/hǒT0Ta$IobUquۯ񜌑C3@)!Q'SABٽ8{Ym٬2M 3 7gz (W֊}tLB$5% Rp>(ꔾ=|k8<T6H@Cs.Y,[DVK<>ΣSpVcIw2IDipV kzTs{e>m9=CO=xp@E?&:%ﶔ+ۈ꾥.'To(S(ăA>c؊C2 dSsTo ]eZjVuÆTtm}q>θ(aи :h$FљLa cO$.V8Q-q;w }H k7XK UV;+]Tm,GlcڟƯ{)\E(y?ˆ\9K)Q. uGByJnG/ WCeL_Fkc!4mN6*j&5e*w<[V`W1Ӄp4tqs.؎N}0Hz3TN=wf D%wV !bzms:L1NuB=SߊԄ!@0pɍ=ϥ"a 4@̕RQ_ɠ?xM8xה#AӞ}(u,Klp|&Ra?fg AA$#,wPS^ ZY;HyUI$rQuE &H?"f>~~< ?ip1ҟ UA)3ЅYj+ DdCJܷ5V:@\,?ɾoM@s@ E[%'s{šu1ȸ+lV5G])(<׷e&nQī<'ߵ>5q ;B҃e :SbOe2Nc&tH>5&mk( 9,NtB?g )N6u?+c\cc;2 2y 8&J/3ꌞ"O}trz3ĕ2[,~K{^ —[X 8'%Y[c#23\8gG~nKxS$ar%gy|K  `:\qBi6wYu֞MFQ& 7Md [Luz DOSw} CySsLn3gѶ ?͡F{C>)RB%Ss<<]v@!HacUϱ1A%zPV.'wpī06IVgYm@Vg ~o ɢqs̲TLŦ$ W U_b(Gn73ԤdS)]#\?A(|@5;7?2>pRpӋu'V3Q ?D/\4W$g.-(J/ /&D#Yi Wڱ@Ӝ*uH4%[.̇ot}N>'zQHL2CUdܛ҃6f 5hfg4i {j3Us]V0/濱W]/sL^y@kHzߌ(Uͩ3_f`=b(bBef+ ~&;Oi2s*M!6~W{ʰӮMծSFq>.Ycʭ>6D -daͰ"ܰ-k`q/,ی9YzڡchPkqq!ju_WkET=<489#;uk'$%1!* wyʯڼ CB֧z [ё넴J ,Bɢ_wͿ҅0E}ġcᑞ`Kq# q7~Wm}ƊOP$y*lHQ26ќ0g(w[7S2Iv<QeџUgG̿s9t ϑﯡ23PyzuLjkjA<(2!Ô'?/阣mFzqHl k?֓jlFbKmE)"@si|8&NWܚjM=જ 81;s;NŚt[{Ț֕F@, d H3Ҋ:=yjvy?z~ٻ ?[,@v7`$n5am ϰ*JɃZ,kH3 .G?dw vL0I;9 eU)DPfrA :ԓDBv~Xse+"~1~]wΉKM'k?C |Lߔ;Y;. (iuu% ,.\ٞ:~9k}AX4‰ k#rciN"=Bŋ&+h 8nO{ 8I>ˁ44# )t;~V+ԇ =ʽ|1g{. *1&Mq.$G1a*BaF{҇d@zdְdH5%ƞ-DCg@n^vE\OQ3; %,Ơ vy^-!/$s Z:ݎ+> $e*ӛ`7f8&xz uG (ϚΊSCOJ:E*ާH `L^@U!-h~F=d uƚY_36m6rx[=NHpZIp#C/v$U>/ 3m%NNViי,_e|ZWJ[$#8K}K)JBDF X,lqA9w tV a'6\Ԉ%RUٯTCadO0h*\]rR0KxŌu7hPɜ# c+NtWh P2jfCw'Y{~1y>NOCns9~;7sUg#I0{٭$<3X!|QB% >1k[N(IǝBB'(:l+ࡸ^d0`lgQ&*9ٵ4G c W _, U/u!7f7bl@>HkY?@"h׷ o?qv4QQn|MI0.+[Zttp&Rؽ6J7p(eTg'or؎8w:)_MT+ừUy,`}K;ˆ;9X]:| 8 t|3KޓޝP>)DT(VPE0Ӧ*GD@~W_O<6Ąz2_͂ZZ% .|G &:洬: Hoovݹ:ܛ_3Ub``J0)kL*|dhЂ˸N0wQU,3B}7+ Y Rgƶb&Jݩw W|XwF㫌=%@ R,c0ߖؔS*.367`oYV4;k(fɥK}$q epNkqR~{hyN"z"wr_lZpPH2 $%*8Cp>PU1)C \TŃ-H3U10rg3HVcҼA!u9y' 9h&s B*EdI, k 恚~Hw>2rm/:DTqZ͔=Sh"B7IiOB&E,g_E Z_3!\Jg>V jm811[T\2TWWHYP Ϙ%t?ٜ[CgoRMݾ:.ey+=X3Y|q~%Dv|qÄ08;]$5xGd;=W+lm\3L9?x!Л`Q'gNPm}\?TErXхœJq['T3Qc7Rwz֫3P6ݵ6u,u[IT!Wɫl:?. F2=ɟ(KWrq瞆e$A7BH:_H9u1d/t2[`:*jCxp6tw2u0AL @EM {\B_؎N6RguObF}OlmyUd2ĒSjբ7*Ml!q,MWF:|{wfǐ40 ă^j8n,]Htk=m~^uD|z9èwHWR¹q= R.򃯘:6G3#KcD6)vp%<d†__X QI(컿 f.0ț0#;WyC:gF '[= _sWpT>g* \[z" >bLP}wmŊō;RHwU)dϒ֩:q//C;CH eau̮ueEB Ii[5.˽헇P=>, H3Eujt`ph>m\o|]-T2U(h>޼ΐb7Z1hKYqԉ̜?].Kdk6b9Mq ;oHъY4fSثyl)mx26:?IYQ'>9(>,|g $6+q<՞XŪiNE w* +}bsKc<?l˫фYSÌCɏ4Sk_w9 20t$NDkU2rե#iB f G廘HFjoåE2RΚ+ȟX%C(f j y7HA!H3&<姗K?$%4V0bm lŸ=~K png|&G]nRVjK@ȢkIAf ϓ#9a2^ML/j[{\4 (/xm0ID B}Z܎C- p@lEdF;N('w2).1S΄0Zw#1pqjΉɇ|ŲsowgT$=5} LpsKCY&b90=4SynT<]}%؆)"}uToG|e_@_DWK-z AEmĔTS CK8:b´=?#ϲyޚImZC\6xs7ѱḐGB* &+ChoPg E&a?1Em[[^FCW㐸ؽ ;@Q69 K9US=?}!`rGJHuޑ$Sk"g75e~7'KS:> Uh. nϻ5&tRy׵$B M BxB F ёs9|#y&I7lY_-pPiIoCt8D*/f1D Ol5 RKdzueWgS*_i#zgŝI {Y]ǟ3у!7ȸSr@-v=5IIFkn9Lv'2NYiM j,/XkE`#槕s6 q">[.? a1nA7I;8D-&8'`SMe9z!d{~lHgfr-t@z0eMV2"VVϰ[<+N9rk dE3#ux% xziLmΓ6v/ΎMfǵ>Y4հ6K)P3m=M^pȋ|H) H]0 l6xālHV?ƛv0X}=jkTE~C>F>)%8u'Cc{Nվu)bigez'^^}2I7Dꇂ1ٽqs;?Wo :q7)UIw\%Tai=ybu:+a1pDgT/xjk$᏾mj_;A2 xz@3j_D4ɞ?y?o)i$`X6ù삟9nBp ƶ8)N5ǁ?+UkKfnS*w=gLF=24[-/k0E}s7H ԡˏ`'YքbtikStZdq42ICK3F$UH:8yCdf]I֚I>#e_b$,VGlWO^mMk&+u%G\寗Zʥ!ܕfEo(fϬqF=mǬISYj[ *.XXe{a' Cot/(*nZ{T2K#4C]0. (Ȗtck7Yt6׍#Zǁ+4 hF.3u'P#]קa݈0Y+hrH0ΠB1XUU9j+|TvF'QR0*!\ƽtT~Uk:%sgO=c޶[9zV{K~vlIxX[PxOlv2HK'ϳ-N$0O buP 2,Dgw caS4Ӵ[(4#JoirhlTǤT{)W:|4\pg8-n]Ge@߃ؠ%j1sʊMm vA 0TSkX5k0y^ƌO!1 cU֣3y腳>ryQ$His'Vy;okP`ؐYS!z{3Vp$yψ[}!{[QC=_MAijh\;]ߺWm,\逋0f%9'- fR^|i!]_dhNy} @au鳓=Pʖ< I싩/9MC,ZQbRmqwsea+}O&87 @AbwWHNK2%3"'a~m"Sn1WtH9}"\ukpl5Dcr@8)FK?lmy άBQqA. -Ԑv吂ʑH Ct@CBJ)Quݷ(3ˉ(5xDB܂df5%[7l|  /E ͪ*1{DO̊§T. =ݔĊi:oU%}+U䫠nT7;FHS|kDe{Aq0 U @ZO8 .{& <{ C^{=Yc!3?^+\Ts>"TozwpEsbY,U?yKܔ`bdzȲK:!K5~9 @Km6y_a}nI30Mh4ӃJ)klZRD3Q+OWno+Zak1d+!|uC%iZc3J}YIϹCa,f`7| /Wr{=p^u~>BMjdQЄc*PvHAKd  BV4[Qmx¹%Gx0>ՂM/ԟ!|M܄o$ ~w#xD;h@~$T:i WB,HUf}pP;Yff*:2\(7:m]ϥ9.=p@\gfɋfR Fҁe:0cOK.jBi*fF?Ƹ QNB* oư}3XA^䣳:v̟ ݵy]eC!󼥩5>w/oB2U|x2%OAKqYLc#eŸXD8s V8^ՖĕE<0^@5+)(YX2!w]Q;DDiC@6֧'c%fnJXJ){Z煾5*8Gqs8#J/{Ġu2 c`-.Ȳ1LqI5T41?'E%LO RtM*jj Y-VYeCe&J3s!`#=C1: GSez=_ 9]˚q5~hg|Y%߶xּg$d/>S7~j6AuKQ7/U!ʹ3pN:n'oôi;ZVs.t[Bj|4>q*>2SB;WhcO[u˴F[OYp͙fhYrjGqH}u+]^^/2>Ajgb0un<2*d0ur[R?e?@^͇G9O0&$ZlNjzqo mS DH>-_ \ϗ% h!֧8}wH45؃<]P/{5㪷d:ć -`P"'Pdi83crWitf呗o)Eܲ!Us˪!;R*D,?eN~T6\WW4{oR$4| u *~)+?P<^_}^zS@d pF%K!v=oA^9sT-1냝{Ow',A9/ bQ Xus;O]Gw9wiKIt -<k a70:ii/4gm MG:t"BT'3ydx3߸y8-Ƶ[BjiL'{5?A0+'e~c,f.GD$mECV:JFMtL{BJ9!eJq 縜 ByyGfd;j!'XQ/m2Յb(2nBKlmљ7 9ۇLֱ9qL'u傱5L 2?#n4vh Ut7uVGBh>RJ|-,x@0J c"6թc[  < ͍ij++i}ZMȈ8C|<^QA'G8!W5aNv6KlKfFc@iOb&K{U$s7& 鼦 \T+5:BNAƤ8syini$e@KNMW a 7IPvIdl?iW)}H ]5tXf7iyTPrATߘ# rɟ)IbƟͻP&g` -g@N>6gBҒcG0d(u$hn~3U9f|ڰ偟 utQm@Z)4y'aM_B4 E%Q땱(m!667L0%%92qzTJvpă;)Ph*8>QWSg4 yJһ͕y7&s߾`9ftXo Jg \Nw^_]NJ;۩1pxybAý4|g0W|`Ɲcm>!t\Լ Sft_^aS'F(+G@DK^<ӱrjź}*l o"h1?駳+E_d㍟L6 pV%JeO<\jefg"QJEuІ"b5A&BHCHLHYX4MB9k3 |ܰnpL1cQy]#-|"1sCƯFvHqQcnhoʄfGtraB8@@M Z@`Jiҿwz~CfYQqd`ŝGG*/Y}p4+9w/<_9bJJtaڔ1"M̦?׭dR|9X,]ϝ"ɦD7V)^ o6Nzn+౵\wwFtxbBo!fhFJӒlv:Gۅh-,ϡ@L%̌a~.p`RXd:Z aZ# '{ʡŸZf0@,"!6Q8&zn z⁹'#Η5EўCd;"+f=sIXSS0!]MoR9H"vxN s0M9\Lw[4x~,Ls1K^v0,qezvRީ~F$İs%LMvExkʕ؊Bア_tc Qz ӓDXl|9/ "TΠIE2nN8f?FF|8`Ȧ F˪#dJZ+s"U]*+j"5ӃFhgZ'2|8r#Srd' DIY-8 4TzKf0eS~j$*7G遣nS6oJHœ`Ьj/A|.ei& R-macC?(6~oW^ׁJ!~ԟs }p]#[w S0ԀMtTկ1|hLXFz~e 7!U7b>nQ}0b WyE{-Ⴙp֒)F:<^84qP e"r1lE,{>3J0\p*@ͮ4PW!m4:m$a'a[^F?)e+LA45N.V+bǡe*AGR1@Ϥd\mݗ79z^muJu,2VCey GC SOq5,B]+fj# 7[rs4L0 ȴCp̆6+}J@Y/*zdyJtBQnx ݖ8FNG\6'o7O tk*hAH&(д*{!`-ti%5x[8 hwk4,5r{u`.ø}\ h({B49g<*R mԫ/mYYF7r )n"kނ'.jve@f=Bm}׿¾/k|fUu1?oI%]S yaZB[ɽʼA- ͸tYVrv:_rS4G兠$ZiHj6ڮ.;,+"dXMg/F^:nNO/,9](lNdFn22T<>ty6iU^gvZ1t{_jyc8e%(eU xcwo,* h;DʙD_dNB 3:;byAdl =_)3yst:JQG.5Xv9塖dy}Jtԏ"ʹc PJ Sn0CqE;t xT*J 8!]Oaᆳ'?!/kzɈ9(&IDFeHL [I1 8ZIrC Kz2€؝\%Ew'9H;Ȼ)el`4qwXEjCR85;V3'V#RZ\m*]: IWю뭯_{W݌$@xg׋HlG܁ֿk@!`7; Y9Of Iu('YFkL6T#>ufQ>vۙ`ImKF$VJlf7p-9M3, r/XJ3KKLee&_ dVa۬1|54쳆1c1 `F'$m m6t/x cߤ3LҕQzN(T^mLjPR\]E7J eLL.86y]v W2]R2 1j#N (ÓZahUp[+"S.7L:)0+jw|vQG}DEhsJcEV/,8T 4w/!D.Ԡ;A>7gXj2K@vNbPv_!(@ŠӹX1;#Ư„';̀䃱>#j _~o`2[&£ÿ]%! 5xyiy<-h9&ۃJ6PU}َR%"<O(T+eWSgD>w ո'"tڱ6X z2M_qDMkg?vhrx"'oY@TLj_qYhXMHPYPtdHG޸BcK*IcͅB"Yd? f:ZYFX?wAMUСH!ʡO lX U kEYf`gpRCLYל3gqj?{*py}'EPn(z\[|vn}6?OXuMR♏RMP_Z2ѷWx˕ LY'6th|.DL[N_lJ a]+<s\:{qa,ҹ*Ǯ.3m Ϊ-BSI5ςHa=|LbV#NfK0Ì?سnn^F1)-g}hpQ6%P%'MBF%dki/]%"om71䵠+1H-tIO!/W帪F£37dG$đ جRӸl4}p-Wp#daG'PQ}^O<~O;oV &p^|`hEf}v 9S2 >\\:3WgŨS֧t%`|#h[p:0IT,?`70XS@)mj35Tw]gP+';jD"H-t%9됰_Ɂݹä] #L| Cyp!#*~-5 ۃ:[)S_ep:eWȊJ\+7s+4|-8-wcőN1Yi| &򛨲B βH $2J1c،q$aTu8OVU{fDٴ_MY Ĝ]!&[c9ukr5T6!Gn(ArLfx.2һw)ogC6qBȗӌ| ` SܦK $@Pc 2Pt!~̙RuwW]Dsy <_vD`"([dОu-qj)5b۷BZ}6K_ɧ>"X=Pu놏{x=Aw -Ro- $FPSP.[AP.Rϐ[MZP2;X5-kLGW}ymtNte5mdDuM I줺(~ʵxF +5:XRF}(}U"&RԒ ,SJ9-vr; CoOR__Y̾#!1~sžW8kOeǎ$gIg =})QS2 ^2nB FW!.WS?x/J\Io#Rֈڌ_OGulܱ]Nj >C ս|י>W٢1Qo`C⿌hAhCHV;f6p61f5KA;0>ԁ9x5 CQCh5Dz83Ϋk;߱aW pW|"w͸1`*{R43mT%La]TؑMO N=޸$k=8#3 R,\? -r^I*BH=BWvcu%A=V%DI9_ͣ@d=[ҧhB' l4^>N} G^Rz8j 㿦E\Bq NУ jXa'Y~cʾ/b1zd[ݠiCeR߂!E%a$+;ElE>؝djWԮ#CO ƼD0ںkL?$n~=kFzا+w*@]c +N~֎q(d9A}Ķs .Ga(a[yI!3?wf#;,[^VEJ5TJ?u0E.;ENB aiq)u6n!T[9'4 m\(Ree5XF[>6TɨfWSMh r+6SW >o`\i"-D g ACOQh._ը%t"4C\DZN?`GiɅod^B5ISzأgǝHϦf$RW7 ijMb(̀<+(Ecq',rԩ@A5ƥI%LFBg\ l>? ^bg.8sPnް)S*gbJk)?.;En4e&60R˯SH/ y}>ׄZuE+ꮟ:?{qJN< +'t:GIsT,@.[ ۳p-XɱEg9u)0s)R\tSZ3oF]ﲕxx"ߵ1^mˮ*:!5RX-LM2l͆hpg[AWp@cd[G46k%O,X̓_xZ [0M>eL#¯èt2Y_<[Oĩݱ!@K<{G(aa, P):sS JJg  ioGKAm;b #A.q^qenq#w֫%kZ/[&_"#B8Ɩ ܟQ}QgK&2 g ½`:K:=b]ւyAȑ5@3l\7sDW9g4}7a>L iw&O̊%k { dIN8ݬ20LcUG;zmCQ(ZQCwl8X Z1)?HLQa5߀W.iXEʝ)ga 9#w}+~q |x%>$ǏBJˋ5j剛0 HXp #惷lV| m>^'أ~qj 7U}=xTTQba9s^ 41.<Ƀ}]Q&Z u<ڈqjG2 >n[Q8?jط|a M TL;*ƑeͶ\JWo>S,`ے=长_)i!bÔ V(4mdO%"k"/ZhT GAR"2k+Z5;L.Z]ΣaD|.GO)°ޒ uFuU/DŽ̓=8kE:djWRuGD}Kdk碘[V:J BEZgOMrYT6!h-.o-_ovI/*fG.@k\ [LRgF7Bl^#akzhr=ŗ|Y@,cS^7Uԙ | z(,{*i;L!YkL>DYaxyMࡒ*?@)xL̅'?.N1EQFJ8QKxtW|k~);Dig]|rdB GO$1cf;o/k/oQl-<{4ܺ=bL! 4YR˂'9L)8%ϞNBSblk2 8XuE/q%k 9@g/;71_* 'ZD \*#*ds%U _A"Sl,IF[?.! A14ap /&I|]'gUh8lLz&!I3\pm-\fZs<G[/<QfVBhLY-rg* [%ˀ gK,f}7qCDxWb(JC:[l$ȧ̌iKsMZ"B_3ŌNuvLTmj+Z= :E/]]Y"!j9p`qI0W9̃͹PvkA+'M3-?4B _c&~mPO$uӸת!⿏d`$_EtJqEi?K3C\rNF~7i!mkf8Lx򬼉a_U~ x+[,G06KbDJyzAvT3 D 2MnT<}h|k=:3m.WEBAL2uVGH zTAF}}hg;ňza8u\QE$0ɶ?U%M*ӲPB^>~4҆)|8oHm Z$*RADKk#(ihҭQPWRVCA8dS M.ͯtZӻCQ7gKJN3MS|p=ߩ+!(Ι@zPd;_(C"$ 9)g-OQ2yS9j<r6}a.ٟEcV>b.$¾S}5#ʚ5~qD’Ӡt%OR_TD!;v30}aopOA'h㉬ c:eZ??3|Ƥ-ƧxT H2 BnwŽu.*~J`7{(E+D|k`#fhEU\_e CjUx% Yl%mZPvXyT6;cgY˫şTyxntYt37kJ|"X{ ιw̐ptg;wȦOYNYg`|j ꇨ60XVIiÃcZxӦCkC\&*ng|r,5\x*%$.&҅VDo p}=| UF}L~eQT\~Caw Z6wVx-(0G0bYu(zczL`vg>@ _RD1FPԄҝ?}i%YmQ Q] 3s*BLj9t0ܸCPs[;$-iᒦ/L WQʶ]ݗ~S CFeQ+A`-E)>=0Kty'l)ijDI15 R6G^dGq%Lp~t ((}nl~;+ZitF65컕еf+eC@uEHG:^5|s} =š4˹$*vil ڿ $m?w$A1(m8 Wsͮ5; f&I=: |'c@AGҭt7&5n)kOQi@_-u#}d"uߑ #l8TLzfyb e>&9t睄b|\0.UltXšxTjv§#07ܾ=mvJ562ьR~Kz_.wEm jO3%)gI^xZ?#y@b ڄ]qCA6$P["ҒnB[Y:*h32o'gf$R2n:Ph$/PE?ָHY14NYaxTɽHRwI4mdHyEy6m}nΒ WA,X $2z&Gh0]5,C71yl@ &%p |p'd#`ԇȲ+qxo~eK~:¬á%(̥ K^'HVjvT-ąLbDȂIJ?i?\ª ES\F w(Ts5R65!>;tfg<'uGaUr^&Jl\XGK=d`S6}{ύ=(%4Tkdl <#g!R!}zh[}U(pJV'|{8NhhpvR';l 3:a]ikěGhH4zwla.=2`p8*1{j`=4ő69gv!M  aF:!@uj'KgjV8f,,:C"16.Ǭo'{v)?ɂȡQV~+]{pc:Q!e36Ri=wP}^K-Ǧ FEYoDzU2wՔq^H?Յ,G bٽ$kZu8==B<<3Rj5:9ƕU-(p/e`J!F=N/籠-9Ky,gKMת24s[RΒ qbB؉4Xх$[8U2Gkl#Q6d NMg#*䄑qKO|.ת]Իvomj;p:R͎<^*"jkZ܎`9=gpp=`o7 kՐ  V/D9Sd?n̴- C8d_`N>82$nһ<$2|:z5܀_ɇi mnci Uu@:4b~ɬsq ဲVi$cɱ|Y&A׺J\Ԅb>ug'Y뷝k  "|*`8Kyѐ$KFÍz@3׌rcJk1l`SZ^rd j 5Cw f.BQ[FD(}a$U?,N> 7"ܲMhs @pM'%-3<Ї}4V[čI[vRHg HC6vO0.sHD6 J.^ ( {6 ˝\4 IkI4ˌǔO=(JN goM5l1v0DG8$j3Tr]E|ӱ9a@mZao(#7hv:[+f&$IMҥ?H;Ō& ZwA-Բ]):u3'%B˴HM٪aDz^^&3pwuKMF'WfR{M]PVVB$T,FfCJIC/x?,ĖDĪfk*}쫟8U%q׼}"T^R4r̽RW3u8-T󟦼^ a36¤Δͩ;v[Y1 RuИ.&[FenW&lXM8mT1"s7/x0'TZiXd%!hD/``fhغMPZ̺`?|bkUGLe yS?@ Dd_O4&"J8ݣ8?Jwo|d؝¡d46^^YޑBvGl p#!QIAa^޲ݢbPL+=فB狼}{>QBt@rr Pz"- 42l1zSWۀH+Xh rlj}!ŢU?cſ8IZCɩC}w:@m>kq-Z>N%z}pHYB)VڴHk47{jzkuBdUF5}NՍntdH}:ک~Z㯎7@6,J{L:W5мŤܱ-2\~jă7u_ɂgΜ\}nkd@yE<߱㳕:8_pP_00C|{aײ/pz_84.Z`an|vjk@B0C^0ݶ~+Dj9E$^-xQvӓDHy? WЪH_ZW^?LJaq/=h 8Gl.wmm\~bñ`\6pR6 )LAKժZ]D8\qu&L8 o]wCbhGAukr ^t,;*IIm/*k2^WW)))JЎ{>`P =*7*[O\(깫Y=℅nu{( N(V{G2PW2'*"N(I\~;uoelF=U{%J0a75N|s 1nZ+0oUDSs9f?hְ--e!z3c(jOQXkŮ  0dOXʮY%)dubX~.楴b)b%zQ[{W@g MODsơzϻ˒ȫQǝ@hawc*ZхXqŠ=L|5怔>7/1+HZb$Q a""[4% z LqȍM]:~<-Eϙ,GJ6ӿS~] ŝLC~5jB0x7XLR/;.ё9L->Ob^,=kkZO%l#BJYxJZRЂ >Ɠ2 cDZ5X7X)Z.GDYH\KdQjϙC}˱ 2P>>zqTcE -m/AGc0Rp*9NO,gJ cAVp)@Br0[W}H.+cd*TwC7Mljҭ+,l@7'>@eO.sCk76hQsZCeC.Y[NY|>@{'.iV(Ze. ~Y_,zfncQj wY[F_?ʀs)л5eCTYN=򉈡 lvUV|-CbͫYM/`q+Oi'Pk_w3Cѽ{9(@qsؤ),hx0I5ݑdV w|CpL*ZϘ7|+Vɚ$̂7a/Vq_ 봑 y| :1pX*)C*7ȧ,[EOk.g++3q2&yF4N7%ن@ ~txC*YӮ<P̔lN8ac/3Ux 58oef)(%|BóA#}JE3uw_|߉|ymґ [^nS)h.n.5iPzdߖZ:J.!c%Ӯ Qx'}UM3M^qE>34OD5eLjT ŬlpVIM9yd˘}Y&2Yzl{7IA(^qe(?3BSѫ Z{Nߞg&uzrE̬ Y!wjRΛ)KC` ]jX -C VNujn h|s ޫ1H@O ,i[xv mBP$m MW&mFՍ3RE#IxVWnu&?}gaCs-y `?ހ7V҄!>NňvtL+]oM'P70 #׊DR'~}'!BVEj e0p4&3A!0{40IR!$օJGta< T uq3P*GMC*]6yi70 "` bhP# _ڒ*06hX=Jf޸17 AzAQ{ij_+|ֶo9 e9-THtL Ga:=?J86lBSK{vK?@W%HI09Љy*uv%j?iR,T Ua#LVKvWxX%i(ЖlbT-dž9{ RnӌJ(]ITfK4Eܘͧa+B=2 Hr17u^ڱH|ߛ =A+d.m(oNgq$7pSvd.44t'AOBR ĥXkX$EP)RfO(RyD)E(Rɱo j59S]+S=6yݓ>3;nk܌}Ru rpHAmP}:3h`3eL!?T@^-XX(O[ "?`G4ۉh W +~Y+HOaa½ph#Ee>bNXO*B9]R:{,S3!:(2oQxK5IpLKR14(r ܳHJ5a3T"/OӯkJkv*~fʜ1t3!8ttc467tL莃g$Vz\sW,mH2 }cf$RfZ!<5QAFm0x:JN$LGT-7fIP`r|qwAKTآ'-(M7Yڑ/Ȥk֙\v:k,;"E_y {= ˀmXUQtEDnqtGy; nد.47!9H//?>葿F/Ep7cglrkجt0Crv5=̕k/tj",K `wNZ& h'{l/P:u⓳ͣjUKǗdn|X^1F=(&y q(Dc_7L1UiY^54U sl6?bJ{6brZ!x wP RH)1h]%wѤ(5ԱFcI9=8HkkЧ2Ļu@ M sIMQFNy;.`kQb[t:<;~3Y֡ ~vM_WDҘbSC@YE,%~Yud4Q.%KuhQRWhgxG$@DFq=,i?vz}B2_i@DzoAU;F[dDC=.1{яmn8,@SҠakJ]QWrLfPqLa4PU$ng#bg"3B3ڏHUՋ.*4Ȫ_@'Fp\2?Ň 11ɟ)4vaOr6AE;-ڥE?fi݉.`QWm]l[ZsL,xp__[B#jnB OTsg_i6\hs V-y@|ѠZDS?iUEu5qjƏ[{“ m(fb{t?f 9wڴ 5?x$}QQScATݜouTe$Diun8 j# p!Hxjf],I5F2ᩃAʽIGBN̢2<ՄEP9d+Q)A"@`JW ׽$6:t)!sspԗaFwlhelIqp`L\`i&)p..Wǯ}`iVYLȌm=y7sM󌭴> Ԇjg|$[NNF%< u  @_+['n]pj1[T ERkyWG yq!Z*'g֦3 eʴg9'#. :;J Nю\=6uMǡeE!d07Y&g;sdAe)ޞ9A56Bކ"Kkyg )9 VHǵck]9Kڬ0}"E2`2esO7¸mU(5$`FAvF#;6~MKNwY=^G@X xsIw3r#Q滿uԚ#G-+'HMf܋P[/ xMf>s'KFJ:~#$9S rQ)!޼-BYfC K)t,P^nxsdg5[&TE3MY[d9K>jJS/ "v3HUoSF|{&usl[rSZ {(b:Z 4{SD٣MPki{&b-רq8%jOM l- KW"#+t{Mw@ 7G Y[@l6t0_s+eg_UI]eCzq98 :wHkkO~!ϐ3 OON[Vj1z6A䌡SUO ;A #ԲfQw٦M$ڌ5إ3'V;ht[*,;?6bKfhVpS,2-HP3^]Y~Gքli>06"W:ٹX)\!/t=!P&C |j{mM"Ńz?ѭebs1k(J=Hy+Yzؚ~=CS#a8ILn^pJq~2>P =MpTGP;QbY4@Z|鎖%Re8>Tۜ{uI5aw+a,(Bߗ3`lrWQfoXBie-X}1~"2@9)|_!נaG@/ S&cCboE*6S8Oz&s,b旮w忾yʣ3240LCF֔(9wfnjPꝐ-sWuA/C!4bh?8[XN,B@YzzKvW7 >h>G>8ꮌ?ֈ2xfcB@3iqN={@sKBIJsi;-tUVH^GMjPjbOQw)γSi"mI& -`dAi`Tx`a8ؚDsFE79i_"vh'`o@P) ލxtY*RS`2&mdE a1e"Al/ -o(F@T KrM5SΓ{WĹDS/i<ݥUX7c!쭩Ն g憲 '5.d<ǂ']%ILJ[f\d-\('J A/pye4dhf0C;J${X"0JP{P߬X2#p6mz, pplȱW"=lFwKzshbc8?g ?RBA#;.`Ƀ?5}lkC7#0bt[`¥B sYzqv Q<[wǹ#nXڀsg8%vK;u%N[Tr(vGRRZ5U:fVQ` lhWH] Du؋֐p `~Mb[KNVHѺD^I댿qOc1wCFڷ(.`hV$ɿJ FW8q! ^k)<uE%9hW(9 IY־mޡJk_s6u(l GӴh?oO9,ct1 a*OZF7vk"[jDN)!:?`C ђ3xԿuGE 2>`H9;e=H߳_L\"c"B!^GV@>ZJ;J#v u)fxޜ?,qЎUi{ʼni6B!ͼ-"#Mv0ֿ4yLM^-8׈I_C 7 }=7^!Vˋ}PHБOM`M$Z "_TLqU٧Jws)!c*aݳ4bWVT6|l Ϸo.Y_Nke*J>s*4VmSÕNpB%_$$#tJW[Ďh$SķB7Ph&e\SяwbOh]tҴTB@IԈȗΑS>|Y$NkAxeU&|EK#)9 I˿̭b.9r>˸X jfG]z-J\\:_gZOfkS_z`4G>,/N%Թ{6DzUZdA}:Zok:2#:x+I2Fv٢ct>[,+p_sҍOZ]LJsZc|v:J"C):LvU=7:ABP,ǷEfjufF 2lNzHO[FoENCz)lXXF=G4c08[ԇ#cDbӤ uWo0m;ZUe>Q k1s&|ƺD j?GsB8{â6SA{d ٗ6h<$6I36~5'#4)r!bO?+zzb-[фAj_>&u#L`E{ggbGMf쭅AU{,Yx p]#k85G^7f?:DzZ}+b@9ZzfUMk<*c<'!XU46dV@ydL]T(}0Q ?8'ttn~?){{\HE*ҀX(a0 >)Y'L6eZ|h1 _ˊRuSJG5QIyJ3} I۞zCFnY^[O# K „!3(aጽ&3Z옏AZ6ZIڄG);}3@u&HOcAUG곀z YaQI\D V&"AĜYQsqma[ j0U}㠑 4y;x@i@u`8Ҽ.q˃1!3E6N x &fUJi7,G1kjI>vvü#8h [7Dڨ4ߢ{Ehg,Ae墽'$k [vg]Ŵ*{Yr6 uЭԧc?{D' ! $v!2Oj@~@)-DZKaRk} aDd@d)#io͙ RY͌'5qi*X`ZzJr* qmڨz*@q2l; qߜEomz}ۛB cr,ŃDwV`K58Bast8q#Zd,d:fj7P' @şgg32oqI|pRCPeևӛg a<[H{WTssيI=E՚0C:dkN{"n.?BM穦MP++la]CAr\̪g9OR9|q=sXIu?8f|AYL _)7Z<3^s fǼ9GT% M@jsWW? iFdGc 7-7ScYj_T/U)yM,}@r Mý,#_{_kȂ'UD[7@2ooy ݜg 'DnWnA19wĚ~/Yˠ$ϿNˊO!"sKm q;d @t%i#Dl-KW).Go& 7 `hܑ9G\`} ̧F=Dx:Tp`5_i@ѤAYEn爐'7Fnߵbh G6@bO b,߳\"|[߁97*@K@ըdKv ;.?}9IZwڏז\'1'oU4@C,u 'Xt & nR22-gA偑諵3;"4acWΪҺ D8YyÄ6^~ڔG)?Y)mamU)P5$ @( [uLك8])ԳY4CSxN 5םJffP>vP9i6/w3.Cڴџ!`1Mgy7!2E&zFـ@sF8BdTmޟHZ|1zoۛ z8X:!)0<`Y bUyTKj؎]wFm/ ~uv ia4e }nplybWb>*fyyvh[OHU (?䒭@t3qx"aSkgV;uf֌(^( ;9JZ+N<`x@iƾnGGbf@t򕾝Glʽ_Nد6Kx~lwWIX(3v:{T* [\ @2u㣋sN/CIyKY7'Q'ɿU_0.fZ*aTP oz߇Sy Hv[4ab7=V)yv B+kzhΤoi"u(͕ٕQ }:ijА/*mI"{VR݊IѵGs2h%3 q^rwB-FW81 hѨk׼2SSt3A{">]GDeq~>xlfǷ%Zwuc5)|)^fG49ɴ8P m7rh߽Zbƭø,ǑKGd1L{e(oCx rpb/ܑYq+IY bIxېF9JLƝ|l6̛k}N_w B(jcI?M'37]a{Q%zѮsA== ~瀔2W5)N5x $@JO(clozN1ۯ\qNt*G]b{H֔1'6?D\s'>D[u D|i+\F|F=lU?fFF=ȱˊBH KkߓOBAZ49zIm(zkd٦|3LqZWMѩ*XQ^q/^ !pao%,?Tx4^C pqa.0I zLks~2[ T0sZXB: Eq\=8=I85 @Y+Et$] Eu7HOVCnóc-gCMOi 8,sY1@ +qZ?7c{vnjibH'z?;(yلGz`xcqppuKOPs^,V-(qcҨ=9?͂/ KVl LIIr6#ޞ+7y)\РM2PL40zTqؽTS;$GDY /nZXjY-W(FމgLtF#i#>xQ'Y78VAc.ejVB mv&f(QYnRk@c͞#"thm&ȫlzs1TH;#`Wp>-h씤 9EE T?:m8y~) BҺCgO80; _Ô+]T[E6}5+n`㴵 Pzǁ,uWlΛ 5@g}'rZL b2헩OuB (9n6 @o0D]Ā /ܭ4t M x7Gs~3V[,n?ir(~ KPDrkg5r6_8N/SȌ~Nq9LB1݅>/2/$tS|F+snL=![:1P 2bX^<5 aA+4swId _zF+;Iۭ1?gvul^39`|aL7r> So"Dd\Q&M|N__븩Խ"4 }3PL#Vt'Ig.`û_)pa{k1J P=ve~T{JH˜y$-K9.:6n_ af0PBȑr>!O$ւrϞ.X ΄[t:gB^S 4\[rba Y *[)yPqhۈB{=El1Ƌ'i1l'''8TUFo6.w?0_)~wjpblZ1޶$x]*tL&<6YگTs"z:#- (H'p/!rZ~R̊ xzv1Jk~;2wvxadFzzJC1RTԏWFvc]4_|(>~ m=b}9,»ڱ@2bğN6akZ)> n✨޺6h X $M44Mo,+'D@CipueȤ&YZHu,GJ@?'t(*\V#j;m ))@R0igm-|oHp*z+oQ-:n;Evg9Pβ[8*ﱫZ- WNyhv}x zˬR!u121*dCg%:\D}RW֒K~~Zɮ4OzbO[8' cH" *xFy2I0W/^AQGWE1ȢS2EhhCP-ZgA6F>U\py<{ : AM;ûiIK ޿`Yi`P14;m|HYc ^唱sZtߧ {ߧ?;B8N_]C5A+ȄCNQ|\W q\RLȼ <<ͽR8m0YqwH9 '{b(IEqF̑{Oi;|."H/(ؑ9lYFG1ddpt݊{]N%Myrckp kzlɱlNk#}!K"W1#1a wN=\`L-#>$&*,ş;Cby.5u@i ,8|3sQ&qp&AMXsVМT-];O3#=,g=_ Pz[ۋ{x@iuc`+KXyN?Fav1Ju:}г Ai 1𴅬` =3C_>%gxh,Rn#!^rW}x)U˾6qY Qfzpc ܲ8ze1`%b5G;^-#.!Z9U-ybբ P}& g&kfYq% V: ¼2"6al'{PhL =,pSh0zZ<}!nHO^ [Aa 6~,Dhvi%x| E0XA,Ʃ˶0+,J+qK3<7i{xUy*UIZGA4I YZ