apparmor-docs-3.1.7-150600.5.9.1 < > , ҄ hp9| ɷbFtpW͕WT.wooI z PӱPkX'A--bku$B R11b@Rc 9̚`sQW x?!6>7 zf, vf^%Ձ1HwZ,9E@++պ7j6^ xTBP)}И: R}Ua5L+I8 {5{Bh
?ت!WҊnd̨D > ; ? | d # B 5 I h n x
G
T @ P ` ( 8 9 l : } F I G ` H I X Y \ ] ^ b c d I e N f Q l S u h v z , 0 6 x C apparmor-docs 3.1.7 150600.5.9.1 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. hh04-ch1b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e 0- K I v ʷA큤A큤 h/h-heWeWeheWheWeWeW e18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a420 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d be26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb0 65b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c66922400 1e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.1.7-150600.5.9.1.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@d dtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h04-ch1b 1746532570
3.1.7-150600.5.9.1 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text dnB$tx( yh{+| utf-8 e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3 ? P 7zXZ
! t/Q] "k%R{_ OdT8v%l_ciSRt܀ nn __PɊM)!A~iꊩ> %) |'8Z +';|!l OcuӲkWϨk <+YgÒТ`/EzHkd Aj&B fZB[Vc 5tj-_㿎JnsN0 ߆S7 љDjX]hz˭;^:aW6Om^1_, y|:I[jk9|^s-
*CCup0K`gu5 ;;>JZƛN1je`RU
Q!g @o\MaIVB5!qE'Jh|i-@|u% 5T>C(X=LUSi5BEɨ ʮ`zb= Q} ^ P
$ct֭UI _ Z
jyze= Z]
?4Ͷ[oqSγj!+ L4eJYsT}d3k GSy&wd!ʼwOn
) f
K+PD_Qq i0j@,='÷1 y
; rt AS̩kĂPnxG #N;Y ito)Gѝ &ST ӵ.`*L
vǁDoHH=MR" Fߛɔ+]
Z nȇ8E8Θ-z.K+I1qߎ¯_
[
l)=ưcnH=q$ӤMXû442haB xL9D%|q| S` s3PE0A
Ȫ./\DE[Nz<|#1>q#@RoLqwd)g
ld*TN 3i_q8Dn^ )Ce >߰o'D .)H> OSwJh2T ڕbԛ\ f+l!aoxA*LTb`!ARwV!J.: oxY8db9" loѸn퍅Z'7ǻL0 lC*`y'9!VnuwLYƝe
գ K WNU/6חB>, 횯)V
X V ~(@WYx9U8B ]hMp i"Ҟ6v\Mkv
p!D$?'! E r_'{6d)bl NwrX55WhR'UR HRt$PH) d`Q ]%2Pɓs_:Ijxp":J`%GM/?B\vmjń[g8v$ ^qL 9L@BOP~ -Į0(rR@GEP
G`x;j2ecw邘MJ,n AtCe];Qvu} &k}
~[;Tօ8 *NTx-C6`5We
-aB
4cmȴ]Μ t\^AԤ,:# }t# >|pT96'rMw ^X^j 8r֡"ڏG';Zv\@7p`A;S r,b'rܿF,5kY'ٴ.<~`t~͂NN =}Bkru-U:>ewGvm0Ƴ2ù 3Ld/D) d؆|/"IJ9k#"kfA>3ɴu?6/+jJf.rH-{3;l|0PGb0i n玝8! vv/+;7IcE:,~>>6]jFNH+ .,> \CՄ ҍ ^XBxvJ/!"Z
ssyu*+իw+BueDCHH);T7p.Dcrklo4^pJ2>, hį @0J(EtÆ^[з*U=6~ .3W3Ф>J:i6icC ;(O*i
, Zv:dnZxM+?`7!'_/ 6f>EY
pN{_N$aTn WFc {W-q0h 2r+dC
t=fq;`zLG(X2б\ItۄFvd-GT%~s|2 cEP
N{HdpuXvNy_9Xp}&bN)ïQVi tRX%E57YC'/5N])dNB K[;0X禭LM[D^tNОhjE?Z|H\9vxZXt&eKg cvX}ȑsƈ`ojBb5ȳy$VB ɠU;?3=:"Ms5h{V0S5 /e8xxmBh_)I y k ̎|ұw 2F~6QmB ݟ.dS} \ӣ%2
;zYvxXIt[?_W=(iVv1!Q i
,3E-?=mts_:JU-8
elH3Tl:G't$NNInvNrm\h tUTU0:v]C>v+s?t-ij<km+d/ŀaR>
&pbZX F˸eGav/{cJog'FG0ɽ2ٓLaM]$< p,v{ -c|٬Nݍ mLÒIvt 'sa4A;EJw#"d( ^H%ld;5jV5x )^/m^)5 vtu;8_+k% 5!R=JJ`#Ͳ[8.lrQme|5 nH#薔 / yGA|8#
#
#0J>Df"e # ڝN/Cl#\2@Bi_0QH\U)?xro= Eq 6Fʔ8=1|`MRd l 9s[_#sD$̲^dÈIs~D[Q~Iԥy):Y~UJ` &&GiqayW2U^٩%3N$-i
4|
qǹzc?jAJ QĖLq3%7ܸWpXbnN"b n_.s[D^
Ɓ[L><|(Hr]9?C_s "K5K< i 9 ۭ8
;{́UGjKp=O(|}S.P*jCc[, 2,Wj]` R 4xKBtfp_GMG" Mu#ݲgWEvm].8k
`4sLڭvC)B) be|s.l㻅w&)ޅխ^j
% ?6(ŧ9Әa
~8 C^utJc ?$,O$3X!9 P/ EI+d^0v`.p҄7 S:}WJMlfVuWB Ň)M>L"9E}FZH6s-76v&S͉¨S,.{ Ձ? `WX\{ɂud9Y{2%Q@:7ͭʿs&HэE=hF*$kDL_ANpV̍ !\3W)}~k0) RCܓ ^^Io> m{#- w.'90qtw"vBT3'ިNF9( ѭ''L E`[ߙDz:i s=e̛9\Q`:Ek!@f,J2iD WXP 3:-"kEh ĐpIDž7v5E SE)W)ӽj#hև6UO֛+ aNj6itN|>Ar9~K[Ku &]>8 1@wqٖtTfKg ں#kEwN טjV
9{1 Hפ=H#JI24gI2a)Zg1d K)?S]/Q!Rvͯ^RDo{̺Go 4S&p2f|1T|˷~
Iu 섹Urk"x#J
Z q%ȵ %q2e[dӧ cq4y =O=z')Ja|IAgHȗBg_9
H'_.[mot KKtaJ4
NRs+e궥')\bPM gڟrI>
E}9j=X/# u;NG7!kx# I)"W9FՖ^avҳc%hD \b-u@W
pk>fDadl#!GX|q: GQEm ^ӳŭ |>dA@< `\@U2Ϋ
ih>f$q6'E6K V`N:rmEzt=O)> $O"9*?QeO ޗ䠋nݮzlfG`fi_syIQ>VՇ6_hL%k'`6$ib-KaiB*ɊU
$yv$9- &^#x ͦJY!D/4:%3oit.iG[ eKMR/&0
O2G 'Jx1I!h[kVKFdy$8{t=Ѻ7VYp mniM%[k> |ߩ]4yh^l`%^1r9 0ʀMhF(Z-n)4xk}=8}-h0s0ߓAp=SX"+H<.0A^<ߖD89Rj){]|dN9ʓ#+:t[!妮G/SXQ05
JcU Oͮ9kA%9ɳk+3h͓FY#/r~@Gg\ ƃ,`F762?(-y.N\,bũdc\3tF_n&eQR)[f}Hз/Q{0EEnjߍ\ I,l?lI\ɷ =D6WKqS`IMf8SqY̼xV b
2Qlmܡʐ2%"(~GZk.4 }ߊGh6G
+Ĕf{DlK9:H#/[ OMxa&wB6a^dWȝxߌ<
uZ2DzvwDŽ.C֢祾 DSPO]E7Rl]uj6X)rWV(; s3
r"\\[0 6l {L,^ >9-l5BlEz'bNFNGzm')w=ԥbg0kg@M ;vf(fkQZhH| d 'VnCE
rĮ,^ G|?aMgo(YKd.LO!12ml;td7〄& }KӋT{k.mf~巛 Y6;bIؘ(9ft #1 sQ^xݤ% Y}=1Z\' :{sf25Ve 99="VhO}D,QherՑ6wQ{S1\'.ybo L4$ q
b xрN(1E
`]G!1CYORp< }~-qI
·:HML jxo#ǎgbȦ<0M}쩌AGX ȎSN9y)`I yīaZϢPK\ 09}4*VU8ݩ,KMe1FlfI'# V X0A܇jiM2/Ez2OsF
s/J Be'Ƴd n/)gQ8R!b:8o.ָC -`[5
h%WDn*8~DER GF1&Bd@E!o 1eW|]rV.v GuO%XN4f-r
/6,+O}E{v8˟ަi3~2\F^:7 D
oo!c-^J
G +MݠK
ϖ?2 a p{wLFBxXÊgv"m|T;x " T6#5OQ
4k) ps h3m
Ѐ?VdH2^W
ni6_1 PC\$خ)k>tpjXexM HBB x,X!N0ZXI.gcM؞ ~L|e^VuCU] eFy+e"ڱ~sPk $x50V JҺX8M !obcf# xm ya2N8DI> x[V\ XE a:m Udc1;vNoi<nV̯}(|XS C
\X4hBF \m0=ؓmphqϙ9fLf +B8*W~ NCa3?E_Ckd=qs7/9ۨTvE;ZN qPU\ ' ?fRAdf4L==ks"ľpPg(W%:;rO߈Sr 8ɿ%+;bCb@2䡢R-=H&%a] B+M}5g)Ű1e?0[ؿэLOɱvksùTfL;/E˦( ]b;&]E}g"|(%Nn؏\D&*PYY7cT msհA 0Jy3t+LNNƬrv!i:h"%J@Qc& \JJ "~' ى up%s ^M]GhC.=4!f 3!@TB
'R*
ӧħlPg6]^}T˲,O-T~.:7(t݆$5J>G
MuF45p c&QHft-< DE~FyvuJ2, n .YSf>US:]T Nn}u' Z~y\iG̾}Kx){љLI{$][snT Ɵ
_GFf?T$zj& >TWRRX,qꖄQD2\ |4DOv-ATGfBͱcUfSs^$4(V&oRQ
%40'$ D:ʹ[@۰ȴM+mے:|5x3(#~<5d.|Z*]Y |=#`?D]Hu͌YcqO+^uT! a Kx7_#Bg$*HcYL^u _L,D()!#KV衪0!)CyM7OFznv. &Fz#ᜯʻ"LZ *wG>ۢL8/ !Z/? jq͚ԭM a"2gAT :pM`PjeBZz-4nY;Jw!HZn{.jHZY.s;C*BÞZ|[؏ڒ&+fv8"
bus^MsnSqɨsɕvMo$^ΰCRSY[gcFS@#5h_^-5LZ
kqОR :$zb-2l%}&_̿ FrӘ nƉ 9Pk;Թf e|]jlIp@ Fij>ڨԻM&eG>z@ўMYV33<ރ!2O]T]HG7H:';T7Z̨ȠTmq#PӴwhz)힍SQIH1 kzE! )Ts\d: &V6*S+
ǣ}Zۅ )m,
a}u%yUz1}X¶XNucݺԨ'"I~{EԠ"Bfb_nrBuC͋~@ wxC'A:$o{N!d OJ'aUjc5GG5EU\P_ IG`,z wm!Oɤ8Dژ#fc*g/wϣSo
r%* `{lzE uD#QMYoBUyxgO=fVE>{{H鉫5.WT 7j'n(m%տ Oa{lx=89L(8S=Z?^J4 C̏i|E5oD()L j(8;f ijwV-yA9\YPF@DVPӗ\Zؼ+}8*' u Cc03W%UYŃZٺh+6Gd?ǜCct~k}ˆ/ro
TVgϠ %0XYWd
Lu,g,m ,
E`iDTK:V3ryU <+tFQ3/嵾t+c\^Qu*-0۬:!P̠gr_\o_izR֣8ށgopf(41mY> \Xe,U4N5RnַoVJ\*H.;s P%16/ Y}GUϊ$0g=R6Qe8:T-!? a~ .@=C ʅ_xY k9ӍQ u-M1E c }~.鴝Mc5WVqJo[z{R#BU9$렀S>#.*ډb$bbb0Qktu." .2˕8,|^\Z_Ӫ3\ O ꀬY>O/˕$,&FSD!KX #*sr89.oX6ّ|"YKK\1;$lj=b(bK<1q [NQ
Vk-YQm%0~/z+9n`F ɻyE1aiɕp u^7DL~/$meT7==Ë-v.=ǔ֒Y A.+r
sF? I Fj9}_v?:Q) m6' ]qimLM4vA DA=})Ų;"J8gawז< i0 D %(.K-:h٘y
t>r-`5Ȁ:ֱs>
*ċt\:I-}x$-]6OYK c#·?MJ>?f Y< <(<IC7O|vo~'N"QQKmVah1" OWO#T1տ9_Q'Ar1L쪓K 0f?.P_%I&U^䒹62k+S"3҉p`?ʮ]Z`BϢ*wϥUpRYEbKߨ /Ιӛo
g' J
[)Ƹ-Eډ4$=#'G4i i
3 6p*n)0!QwOzuh
Z+,NjY,>z m46ZT]G_y/&{5=r(@y$EGNwirSʀ'<*]ddz:~mi&D Հ
էZ!u1d8%/ N35J5bFN l,$@ `ʌNt}#- !+8U.uSw.W^ |<~Q@ ] tP(*C33J
m0.F-aIz yW-HX{p,j$75BϏ,k L WTh @Z2# 3m{X5I|08̾CJՅ?VC9p$! `3I-|veUwq] NXhйdb87'M2%_+gO9"wwDLTX,Bcw8Yll?b1V^q P&REJ# g/Ӂ]D&N9]jG ˯4v?2=m٩Yt[h| &+j 3+
-K7&{f7LdoGS5g5lN=]3/.dזUuWy58%J<>PȦN{yYF
y8Wh?8}?`Lj* ֻ
TAk +#15:\>2T%f82:(#}jjkcM1?ED]B= Wfb
֢ȫbznK UЊz-DδdN% .Қ'Lc vTSj,Ei-ΨFoϰ}S 0+دt8g@Պ瓦Sv
]w_vΐ )'U;Yh9*0g**lX/!M!alV*>.Ĉ,m!Sܵ5@2l&WE(} *c`С*CXƖ*h,0*yv!⋰/Ln1SR#@/)rGPf./xd꺸 iPGاc5ffﺶNm屪neQ,INGPvfW"kz~F!p 艀,0VUUMn^?IQlZ㸹-C/ApIel#WU5E({Ρ7brE%d
<T{NKesR6er^=YA|UH]/,hc:J-m7Vte8ى 7jQ'@v Lm 5I } ̞xS1Mi_O_3- Ҹܰ=YV*e}0XH{+}"p#B_cӲLYx?@鰮#g P: jqοZBU
tAu^րDfҨ~nqwm5Ok ["+J%W }> ѕ[sjw dB'7u[|t}b u:
igzZNp~IBa?Z@ͻ'[o"G!K(=^qcoPiJN le=Azⅈ7x'k ѯ u98Eʱ}sw&.
EH* MR˘4KE3 6
W G~ i~,qtQ ̘,|da
962 Zܝn.A#NTu6Uyua-5eHUڢ%P 9_ER D1I X /QϋǺ7y7N7̇0gC
GӵJan6 *ogi~ wCf(ܗF
-^Hy&iln_UXؑ>&Zo XkQ˰e 9rY}.ˬTh,"cc|aÐ h+gS C>#dn4j40-8A5 O4므 LASL?i9. al<6?tr { ]s ,ۍ; d \`D쨒Mj'
UId)b pf2M Չ3qզcH sC'?
oѓNrn Yp (q5 {
ap碿ex|.O@mW k.S y&7:-b +_Qܫچ$Wgv) Mit
@9EYKhhݸk dQAn`]A+z`JK*>fv=Aq"&to3%|o
B.![ʩZZzA!%+?/Ғ R )G>PkX \w1y*W ^'>w@UO[ !3UC!TZ\l};\']=IvʮBU@v2-`/S*Ō1 ;>f'kj, Cq>)gܯXGpD?6~e0JmGѾ)Kn[T6_-yPаC%}ʙb\9p]7>2pLrGC˼e+5p%(Znqɍ 2o6D.<)\W4w?x&rM2=@g?0萛H;y+1,7)7$kSg`YYhLڹW*cs Y BR;Ur1Z*gʃD^ o1cyxwdˣg
+7߃d d % iC]a ~b-2`e -!oLkG&
E? aL'?$%p=#? b2/cc&/ T)x (}3EŶM[q҂iXڣ?M?J:
V Y 6k6+Jr{iu]& _{eK;Ku.1sc=vHΟ@=
x߁)Z|k`]_%] օh;o1(?[my/#7KhS G
eKKfUQv0CH*J _ڵ=?ӊ{:Cl|-VT\0/f:)AL<'gR
ID
,(Lz`Q?Ur64#BȲ̰m/\Gd}Gș`LS "gr /z+QfǮ՚Uyۜa/Xܝ"c3'"Au'yŻfyze{ڣf ͆yov,
dTFEbaLO"O I>^ץ oOb?r֎\6@&hnfz谔Jy;WcL5Z,VVη @ ~= d9l ^Nģק# mY^O+%@]T.qi A t
^W{ YĂB4 josS7DWUY%SڄչjM0k7`8 O`OEZ^[b n>J&EςÅ>]0N ZPA *ٚi,6(
\S$bץ!rx'
@nHn X$) F5nT&B-2l ȦѾ Ik x cIw*2n'8JGog˯M/U^ W.eVcُ Vڈ#YU$I. #]P֩i(}wi-Byo, 7]hA!P߉8_v*ײn.wJ*(V;h1!辤i \#?ؼ= OgعFb٭V}(L33MYY>|@-C_ʻ`=6 G#.
>(^
v 7<7cOtIY< AVKWfu3 _@莩?uE,H+2}wh?Y"K4
zv
9
Z iRfфDOb^*"u)928O<; $re8Sz*IN -'DA߆dFZ1HZ: 53* AEB!^Oq mr
ۿ8p3Kf=Ġ%31"Nu cb?/W7IԨ7"7ȣK.CSц\q+$22㾇~>oo?cٰee [";zNDbY)y˪8lW90 q<1ۉ7Gb= *=_p"|4d N
On#J!
'~{շ#`4/A's ~$&
Li}tYQ곗?6f1(#Ty aO=6d&K2_
*"?}岕)-[pqpNT&%2
>I G<{$DxP'-{O &o#c/_HCibglߌ@1AF-Y8=(:|ha1!$2eŢOM
b\y|J&4RHt㍠d2:
|Z-/SΡI>rEO%nڨ 鮉k,0 C Ƭ~O¬K+!~@n:CaQ1 $7wZZ$2>Oi c~E[h/8ҕ+ 8 K3+舐j+X${e _šdR ֬ QHE5]U2l-vE.яr[V: ;6Yob ,ʃtLI hK*,6 Q b_Bfƴ>*p [k{~1[|R6pՁې R/gFшGVC &6u$m'.7x>TA^ʯѓ
ֱS
9hi$]/v+&W|Pp yڃO=mfՋ/E*Hyh0-Z2)$Ygm?Я-z8Hb= I/ ͒ r>pyݏ
#(JKsF,#щ-jFGW$j/[`xՋ;ۯ5XY!^f'_౫^bzSַNb 40+ k-J3H 1H:U0 5d s)#;2C fZQ' w2(/:ϢvM7GSr3E >DLg&.!U^]ЫB7Yc UUdޚ,do3S ?ezBxJnAQ:= ;juԤ ZDJmuJ>g'.`A0 ْ{""@I(o;5,dr0ZH0 TrVLul=JCtkuxT[ W(]Q%
)NлWo2ƪlyDY\WH%+%TIc J>tn*&;qxwy D} kh~nlhWeA'j)E@:;HSzOR[.իd= V7GTZ^5K⚿!,8 ` ,)cVrqG@#,}HdVU ]G~l %_*k @9
tt X*f$v"0եkA
l~LDz[mT%s?
!dKg4I;8~7T^s})
~7Y%kF_9ۮӮC>!&~S%fi:}!>PJ'I%Y\|\l@ w`]WPv
77C14k6b~d2uQpc$[>fo";Y!U{5{Yp D]d"#Wn?3O?@TY֛`tJ\TCTмXZ: 몖 N0#6$ŴC8ڴu7,!P^c97@|ϕ#-#a$J̳f d7p=ya Յ/o&NBuvǾ.c2h'S(aD9zk j^" E5vS{?K#^unzQct~7"O[K`>kiբQlPKavBJ-:ZVԘ@z uhBftG3rtv.8r80Y*K'pS!Իr1uM6pWJ9=bTP$Pݱ0nzj?B0u!`bMm#=%*YKx@xz 68#A(fҋM3-I?lᇎhS ZUF µϵ$8x_ l@\NE{>í
*jy'"zgH^[A r o)z!rTOt=*iD u|c
2?n 2b+, SokSqr^WӽI"C #jd'1PAHL;¸m^ ^L^1nL C7KiFy nWߡF'4*!.qֻMS4wQs.h-SPb; t ?qg{ If@!ܚ +0_/9q7Han ߪu^ +3f5H=#
aI ?~(Hb}~v"Qtƛόq D]
Iwg]ֹg@\Z|b ,_f` \c:U/K!v hˣ.:rD
[֢jqmbBp/fTbʬVw:AnJnyToFfYpEg 'tߔp>;8R1rܹ`8s`@mvw;^`?r%[KzuF\(xЁ'ͫۨjL%]&!b"9Jdl[+ID O}/<4gꈓ 4ςfgl]0ڗ K8 . a\D<08 -46Ԃ& fzXMM1I MWX,b9DjX=m"Efi߸&9CTrZ6VIN.o3 ֤ N]!pg57xP iPBS nHfH/lJLĸ9b %0BV3wֆJтC/>}bn=/ȯ0.Y
SA뫢Oc]n8(A#FzF败"!cyzN3̷*bEh D NKdϾjHWgvǖEO7/
K+#͖Iqɗ*hst,IjO~IQX [rӒdgfT_Q
2D=ȇZtr8݀]Ƀm^eڻnlii|)ӥi+AΏ l'
2usN*05~yI9knS1B-舠.gG|;1'%t 2F)7<-bI'cK'[J/Ȏp3I\nJ RjЀWA09P\m\_h#1T45#d!o* z 台n6͇cO۞5Z_.UH:2h&Z;de #j:U '0!VyKA~^M%7l]ͧ&D?*$0 *bV? eLC/-X OI,͂1n; β]Ewhnq-9Gy7<#Co5E Wm]%ͯT ??Cw YLjB H` wΜ/f ++ғ5jΰi14o` c,7uihL0;iˡ7 \f?>g
Cg֏&CpX-2A; P"YDE)V(b xV=0N+};Ml zyɘ}<4LVrU(1MP\drNO$dôÔ)~COjɰ~Y/v* K0K /H}Ȑ,; \䮻1hQRb!s_$N1FP/5ULr7'@˘A
4ja8řw*#kDksRE8y]vQ3WxlL|Z]1}]ם.*P"% 7A خ;"0w3ŝ9Uז_ xҨO BN5Xa;?A3 #}
WWJkAZk &(u6JbpJo)/zCi7 ̓,L@g>YאZ Rtw`t)SzRU@#P(bj@S Q@So0
9x~YPIo$ a)W
Ԝ*>1!4gbs'!Y715ǧS>7U*ZdiX2`w϶u3 0Hf[m !0Hԏwc&S\%7㛬wtآ?t.29-aCV}]$R G,5橐l)i!umZK*2)Fwh|!Yn.ffPS7 .S'.Z!AXh<:^ T6-'+9_- ckiZᐁUvGt!G\v~AL
r 1
JL/ KwIJZ[pR3 y 땅Iڔ&p*Bp)mC]yOe*54 [@/Yu;Y0rlϫ30dta _4(VFR$o[QoURӰi8KJ) ~5Iʭ *l=ޫ|'_
PB `g5h\Ou2vbi -ꇇ+Ag fyCWxs ?@ED i< };)ntʮ0& vG;G{2DFf
z|+`e}>XjRs~{KmHBD{֗dQ]5@cgOH"vhY4R""Es0fȅДɑd$zB.rU {E{b{f;ĴW32: K2:78x2`C= p~ ȍ;` 7@_"Q?ODz},s]$EhK=`J[;=K'rGR t3
@iM^&VőY"R/}`m>
LۼbȣUDXTUPY#W&0ߣR2
Uq7 BKk[r؎E&A% Cm%PPQ#<Ǐs{Zѥ1 d*EP565g2OA?ڼ>k2W=?9Q2Mᇝj!ybѥ 0^^nUƕ΅,RQU Dlt62d
A9/UɭIvfw2/ 4"]DL}ؙ\czi,<)okK4KK.PM0A8$o%!]k2nv iq2.ʬ9C.T'O>ײeeLow1* wjoN7 mh$ІbΥpVC}{Aj)ܝs @%. O{&h . *c"¹k7A>Y*Kp(g?Ёtu\!ڐĦj%ixBrW
0mMݶW _nEw q2$_/ȄyI r="EѧҐBE u>ml[ЫTH3v"|x3EE\R#2G } FjOd!:|;Q`$jg_uqmؑ-wziU݈]1\SOn`W |}_/Eg/T#,$# ؗ{ ?,B8abʋWXA䖞6%&k |{l8ΪBhMٴ-0ߨp3MO Q vKm92ygu`l 1fXŴa9Ii)^n^:!m̜c艹(IV@ʿ*T@ *bBH[XdUئ*Y,6(p>~eq6GœQ6d|3H`U%7-;%iA=WcU/Ì+Q1ǪfaS Hpx{S۟o?$Sfx֑ 䯛|T B9K15 MC(=_MT yRSl>>nt6++3䵁\✧ |%ɢq:KLFًA-LM.HI+J. \8 a#WfTvWV\
(: C!> ) `!WfԮK2/4mKCiHct2{{
63Tw|wCU$Bîً JJc2x( r376z|Nv%Y[)Q1UmjXp٣KZVil i/` ʱ 4K/
C8[Pg)T{dt
%^>WX5|]l-h?K)_O9r)DA_Ij3]WBYoO$4 ?{ˌD% >*M4]
GTFm _4( 0HSY[t>cPu^z8O< 4
D) 2<-ʦPʜcN㷓%9Wc6 r$gv?.$70d..u
&:@7N9+HӨ}@-Z'r/9b]w!np
nე+j!儝+OJi)~-VmHt+qqnQNuV )YN$M;416P!i#J.,5&"+y30 ~+Ahԥ5 Ԉ(Hɦ=82<~xLo)N)kW*~גێOni*GzD\Ή2Ap yH]Tyv,o8v{j9ARqs[Ӄgƍ6ST>e3CB#Y Ny߷\Dꝣf y6Z Ș]0蓈x?KX2ض!T1n\OyĦ;A
KwVIJȌAU_L=ņv(rxs8vK@U~Wd13Y]sF,-%qv^Q[ I(@iO֘ kA~%Bdv&7WCt (b{[
^=QbNBSΪ9\v^D 8[v ": ~+d
8oM G.'vKhɪI-VӐݑE,ƾXDřMU["+`TmHZV
F!>緜dvK6wJT6m>Zb1qLvBz#5jّ%K5,-8f
eY2;c# .A;7HpϒSPw(R iA-%eFWjʉs~S!x V?[Ӕ)^Sm:LΏ)P;
maßD7
4H
pʨ&+dW1MSa'/Dw C zTZ ZRB
$e pFЕ)LT^ `1s2y G^ ,BtB ӕo )gi'ub/MRNӷvqJͧ(>/|hƐ+ݎ<-=R^B %
MuVtq- }Ŷ|ؐ F~G>g z"u-mEi\PA"<[X>fhzȩlUFEf&OC&mдmR"BZr_[c҂ y_A{z{R-mxu/<}IjS NM+Q2ʢ}RwRǣ5ٮ5 D}y){c{NsGUbw0p)HスBIhL 0gTb&q"),E J2^za=%Ȥ Z}qW>Vq
7-Mn!?l}i?6ZO'}) mTWx\2hI0 c»5}~Kp9 &HӫF]Ĺ!b|*S$N'ka:G63F2<q1%F/"Kz&愼_&1:#G*`/, 8o_bH0 c[r y>::Be W'G=Lb a٬Ҝހ;!j=Zkk jI>V ']ׅL8У ٻRh]<> ,}Lj] -*!/tҢ"? }OM*\lޞw \ ;˾9
?~&"m:MGDpz] VCafj&/%ŰڔSS) xmU =,yQdJ_W Jv&7:*Vj1N8dh(g
e R |MmE-% HX/a <Tw8ÒNX
Az*柔mhn}PHG]qrLcxau{iA(}߭g'&{ѥ ޗ5E*\.Yl$,X:Yм0pbfZ\ʿ a*եwL b!'9p!jڜג ?d#oʥUK
K)=~ײP-aH$Bdz\3 GWh 9䇃>4( 5$mYK&.Q`
(Fetyp\=ٿOF ?!2p8 Paqs͚gkP,e",08dZC11hX o8LU~ fB'fe<>ds*\ dCX2b #!Gx _ C fNU ,lXP)neTbͱ(:'bo̯ ^Q5Lpatw=MXnWZ5q}LKq ᬌL Ґ
`L)M2 ==' MES& M>N$뷱jB&%;-\ZJBVZ'$TP* )F{; 6W#hO$@ )tE{i}PDŽNTg0ࠩԌNXeb6H2x0lv: 28 !mGUDhU: .vq5n'~Sfz oxqŇ^St{, \5
Sܙ osE1)O5Vy_:Ee!(_ b?K(ɜ)`qߑ'a~yD/V?Dm=moNJ\~&"O;] )@)K2y.%' t8C8Aoh2[
82_ۥe8fo
v!-2
0O9ږPځB )4ϖ=#"_c`'@R9+=.eP5=e1G|&/B*YFЎtrƚljL5,WKصCE+ޮl=ŭn4ee`pԮڐWT BV= JFvκ*#'aknX KM+7[Vqc }0 _]^SϺ噸<y E^ݤx&Y+(#RڶIsۯ)$V}[(%B2a5ioҰ(Zi
AY%VN)x`J+%uIBU4܂;pYo[߂K^N4zm *EHn\9@G^b _FF~$ -pwYE?rbZ XjF;̳VcWYޮ[ 6H ;t47LrI-vPc]om;4bI}1%e(nHwvWS3&( WC-Qɖ+N'\ ~֯g!!|by/Y=sbsV?R>gOQ| a^Ŝv:p NH꼈e Lo' qw~ro,wsbǟu|TJ2@Ҧ^t扼y_eIcf)9y >IXئ4% KmzAR3sI`5,g5 ۠WGJG+HOc2uIyiu0w|풊6<:e͠0.+%/Ս_d1ө}\ml9S}%fv3\Ӣ@r:W&Y;QF^'ݕ6F6,Ii _P~H}~/M `1d;שpZq_ Qn!71*Cs^'cv%a^|wI3z
b=ѳ F;IC -csV#$DZ\[V&l~|Ey=Ĉ`(j?0v Mmw$b1e^t.yE7+
mٹXgXHE pF}(` m[AZ @[HW0"> \՟7A(ϭ/]WFy'S ~~>:wV-/䎹y= y ӑBb:/xƴLDXCC\uy5Rp |Y;7f(nULjR}psӃⴞKn/ 6yU}2MVӈ"% Ʀfa4v :!F`1""*Xy``NXj"%>(ߙvPlZf42 Z
%6"IRR ǡڣ||!iPTs}+u<,% E`0"]d@aѢbVROfrPS}:6})\q``uEU)s-hr.Lgaң!y% [[@ԣ8YYΗ@fsxXsA.(]| tW)õ%Y8*]"Mz"-R/2A"/tt5I>E3Ef
PtC 2%|I^%.;x u;
5V&JNH.JF +FWz@RlYuwf\v Ya Z+HXgHiO
/ 1$ #v/2S ALfM)oתGR(4 E4"l ֯/ɯ˼?g&:D%FɽB {֫Sx`jh;a@)Tr.i~ln_2BL()vbMyS
;wcG%mX8^FUOd(*5_? c!s.i.6$'4jwtcc3Žk7?)bF4fKi;lP?dfpQ+KI_n:x})K*v-D'MCz SZf $*"L ;`BwZ U8}eqeu/~e.]2aZA M=jS{vUI@5w;2bs]e19/x3zV<~>>z$)գm"-D.v'8S$~>\x^=n8ة͋/b[3<}]=Gb( mxgI(+2sV'tCEK;E6]fK [쀑r^`z :X HW{DE<;B/8oy(MQ]xd4y0/ ؘP5ĝU~>}2LB-[8 f Tx Q"o 2+/ѣvSi o3`k3tP|\I͘IƊ*/D9=)@ ~~}㗜{ڎi̠>tXIgJ
l28 nJ sJR7y8ȸ 9 E|[ YE9Mb}_qt8hD}~gK)>L.;! phAPCt(H
r 9
j 6ZV oREF.ok`l}p?:dC[RM^xqlHJ dpjcmՑuMת=xu6\g@\3Bzht
7:Ӭq_sUdPPqGgST1NFcDiݓuG TTo2W`!
*BE8R9џ=~fE@6`
?'m\:#^
PՔf ~-{è<teINgWb),Vlb'6KQ'-Ę^Ǻ3iȌf*x%iU4 tt恝XT2r; FUD-FCi}C0%t7WZVl,%=OegS{ɏ;UhI}G<`1 Р@G>eXĥ4?y)=Ol>G_`([-'FXӰmm$]^^ +l2D8n0l, 7s4h_u
\Q0 &U2hrNY}H:5яSOsx? + UPtvmȌnS* rQ%vCjtH#= kz'̈h ^h)WDD.1e@Qate VCٳnIhHdiW C?6)-֪V뉚k<#> 9x @BИaa '=[oǥh^@JzA7YCK Y u)gΌ}`n _$x}Xثu<P kŹ)9kͶ6Z Dzɡ8wy0 ّ&V ݡ{`uN]D+牚s̩^5-OǢ
9iP Up3/y-ǿS .`m}O;;za H, Y{}I+|_NcdXl/L< {#OU*Q{eEXge&6n8.a գ9`Qt 4\E':Z oMXF F?ι@I4T!l\f.Hd 059JJ}(
m n ^r
Ш]UfN}3AT ɭaL^r]Mn/J֒"xwQyC\bK:KuSK 7>:GD9wl Wx_ '%|K
t6AAwA%+b~EklZ$Bz@q.Po XމbkзC4 lO&j8%!tSQ_MULGA;OX(kꭵx[ 3T,!)=| {D[ o\O*ΐ
%|EWͬvU?&-UB/Vm81(In
3Βbʺ, X:=s )LcY)U.9HmXՌ q|$8/a@ Gqs$oP
nWmn9, xK]
GFﺪ8 8C;L*Y~k>_XI8ĔHD e̎CAbVmջs-3FϨ'
1"$^
"b{S`W~Gc| Xk̎ދ2+x%ɩ §T!-sBu3ґ1BwE79WW:4Jn=xpFj^`#ρeӉ"ÆYEG0%|kBA!{%#S]F8Jr&3{g'p'oXx{ۍ71M1\ C(Lu[e!y= ! dF["ܺ+7ʛVDfג0|Rj,
[^FjУK9] P]У=2 w L YBo!`uta ''_ YzggRp]Iwm9s13C ֍ڞ 7:qIvi,YpzL R"V O{^){ g'$? AF
^WLXW0RaS2G:!eK5说9֙6Mrw
.ɨ+0;Mؤ|#Ԕc&cr\;gL/ф M 6%7 H9m)F>uB
2=`.(Z~TlЃN[觰pWJ9`wRh% 4K&xaE2$ 8PQ21Sk\U}_v;mFw}e8eUbbF|ޕEEpD&(0Ǣ3Tg/r)DL [N,uq$Ę>k&ɖVkΦiDSj9լB܂M`vybj HdD4zdFaĝt7xF6d>7P-ntDö]/1wsqaN#Yg?xm !ލF=xܹDog '~GW1KBN D zNƅ!!Z!e0C ͞jr` *l?0OI=^;^ܜs~*U̱L?\ |TUz#-u>GޅJx NxMP Dg0'3uҰ MTp]SpM_W6CNi QrBRޚcQФ͊
r ee#˼%ѯگtM : {уIp2lg G\[,;\k/ }eyQ\gQZ;Y;^#WL+A-$WXĺ^EeS;h94 s:'¥oc-o1s5irQ9!ߖ`V;<%6 $A_w ɝM!z 8ܢ~`ZIq3+hˡ &cd5hYDˣP)5/] < ^M7be,,>yYo P" oa[yvPhӶ%= BWJ#FO̥eBxگWZaMm>d$;+",L,/
ٮTZ =R {4> kYȋClQ>V'.zV u6Tä_.О4*\c"D0NkZM"DNܧA0;EMٖd 2m
_g cr/ܮ" +n~$ZPv"
UO;6%Y5,`2:@́'mQ
2m[nM|ƼI,qٯӾ}R
A[.w#a"]oAmK = q&ʼZe}ɾaqB;j_z,U.چ| (_:, OvV*N .Kt|~n$P6CVz ܿf37'~;-^Py+}//HrBVn:eIs -uMO;CvӮF2E@y ݅xCH`V(
J 獘k+`5vh ldh<~H=NM*= h_8W_w'(XQ;AH]MB >ꎔBAGvh"|uO3 luzy =8Z2
}+9`YeBHr.&j#dEBmzQδ檟*Qoeע [9hm._ ;\5_A5`<;FٌC&
%!c |hur
zG{
zN^':UsMyN.+ԁN>p&|Hh$
%m}loh$h F@MoӯV3|8xF;GlUqS.&mϐO$13-ZSX+2hg%SDkcFFObNJoԭZd{cY6 l4C d@3]0О9Wxvf @?Fj T,;~JZ*UR]ܦ?QԬ Qr"Xvjv|CPy
4hBg3ud1Q sOoRЎɴ9l=_RHDy AB&6pV7hVaw@78v&%5HGOA 3A^j pOfkEb1粿04̷14V7OO[0ÍRӔ@ET@7:VixnI|j e
Gt- C4v
.\ c6®7=(2
%;) rM牍s =_-Oi 1ֈۂΔ:/{P\CQPG$ TT\w &$BU@K2`@bP_A)z3)R39Rʘ6NOWYB|{Ϟ-uYW.jL#~n_yG_(1z[45y^dWm/5>L3M9 Txl}gkǨ[缘+Md^-;U+B@?[s:QteytU)"i H*'S\< TQgc+դ *j0N MVtfRݑ\.z8H'0>[ jPP7#F>n'9*fQG19#CMzKG8NH\B#/ Ҫ+ŷz)Y((ТVVС@R?DgmVnWc}.Gx:n [1U Z70ʤ8$/3YQZyb` '0/(XhV?Qb,t=Ze lQ*lサQGY^9VyU2[]HsOx~_^r@K~e >"7vI2uxDm(k%ϐE 1T`Aȋ =W(0K=湝
ɍ6ߩzХODY=};Hn"XXFUJq fK-LG̏u>ng
UJ(> uRx4L8;aީZ aEM\
.r38mxhr`g~O@k bReY EkIS%MKX ?* $"-Tg{ ا#Y#䃎N yᓷCZ?_#fp꧷v=LUL
Q&B2AMtYj Q⽸B{sl-:ZC~9z[,kP<_NbwH 2 kPlqY Y*ߝ4A&G?MgW9\ (O4Tz $ .f4H#ğR 0$%IhvOA DVg&/JRaB&Mf͂k3-zzW^k
tNwG;
# " ]Νt o7l.q*#ŭْ/PS
U6bT z<1rͱ6)Jȸ<@Ȑ jUя+R,|<ť #<.^
,B2L(iVDa% *f]۞Y9+1]{S;Y'p!V4Fah3ro-vs;N7 l ɦ581Ԟrc8\0zoh\chJ-"eeBV.(tl%ɗ,L2}sҍ:(WB|5K
i~Ӥ3_H_`R9w'dD&6V{YXݛ¢z˄0̈́0Tr$:pnWFVOL(TYɐLXsbMiH&` ܿ}@I<oZo: J
EQ uYB\ב?\2Gl7\f
5EM]Gq;7pi,& (&k9pS(M {IM}'\Y?zm7.1"w#JCFm mwDkr04_⯠
uSHMJ*yp*ĞӰvޠ`^숃 }0ኴ]0
6^ē 44^A,N-- ^`/\ hzcw\?LNߡFGddK
Q3<EE7AHy9 ~F`JqU`(l 0wJz(g@v߈इYmI3A `htי ,8ve~% _壀ݿZ`Oe⤃ʮP]24sSp9
VQ{&[Ojj.ulȻ[Qd zkvbVP#j).+ m4)/R7ʕ}Q P +mS%'(Zv\
՟~4,e?vqSbVޗm¡"ˈ/XI9xOeE (9i{tOP,EY6"$(/
^扜-j <>Z!w 69
P m =!SXCk*}ꔍwv]
ǻcߢC
"%Hԝ|V
tզm!Y灸˧MܕIlOR2@_ޤC@CW|
u$2"}߈L2O ᰿:wt{ݥFɤ*r/M`u^Si{U-/ؠfebѪפiV7cLV 5uز]~.m1ϴ"xIe[⻰@}3UNLId[樣h
W,g5LFܭ$Ijķ|%|Uݦ\4ӕ!b>,\rVSOG@k]YxAD+\
CV7uhyyL)xP* >,~bET5պl|Dcl<\M =,=g%#x-)-\l E2k.M/<"RetAWM;'+UxI{m`8 '- J4UG믶I͒̍A4N0;0P" L`US
4!r
kodM(*LE'\ xhdewO rSru9۟_
l8}1u(NʈElahb&, ܹ\pa(J 6!s'X ykm
i3&ne,NLVMϐ1A+x?v~ ZN
+}m^R4bˏ 7fY%*S1F896 GEzJr>wìXbL"& )qi9Z4 f[6^8ԍ8 ;C}>uPt6zEe ~LGnNYx;@bg,ZPWIiԓSslu]هT f`5Kh2l4ADzȂk(
.w O\mYUo0Xp?P
p=ڳh"8 Y {Z6+¼b,x{ ru&795^"6
㪰iH uij:Ir2
CIrEdÅjMMSG Q"ߚ^%Bv~ȪH`˼CǠp T7(}c2 pq2/4>1] !\GGGѩ&MRVC G^XX0qoĆ-k>{Mymkt,; lZQ?Aq ^>_5c?|K
a 61C㋩YIͮ:;7%mvy4[G,3#Mh_
倧lI@#3Vi[L2 eu$Wu\#v~ HǪQP&ATtrhICR Vh+ 9J+lz\ U屘R#oynsonYku eL#j8RE"VVp8Ġ [҉ M.0 d`Go`zkWF| y)OF '_(N9d5iJ8ѻ)FNJqܺa9#LlIk'QF@H܂8
*U GF ,t.d;ゥ܄ZcߘYCU4YtPT @ҡbVtqݓz9~v[ABU_ oL k&t-/0~H 9| VnL^C}C[ TӕVfh^i[Tn~ۚCMܷ\TR. Z#"'Y qZQ%g@-SnV 4A
B =D~y~?!i~['#ְf,b0dmZ:QLʗt^ 7~e5W1#6M.\
_Owb{EVQBLRۺg˥9`8J"snh)9OԞe`8u>뀓‟Eb} DerGŴMQ 1E`[ p& .q;
]m^qlHxC4" n2DDrqffA.6Ű
3lT/"l64'7-7{BݶI"Zf >&+~qp*Gj,|V@/͉~j` gRVu# ":Zݨ'0QqXqtlhEϜ8ݧ88zǴEGPttBӕʚRxMϬi7}Nī`fdp ńtl(1yg zlU
T_M˸Gh/?Յ k_;߸ٰf
S;9 Ȓ?J+bp[tlC
chua7?)'*C':zK`^ mOjLoe,/1˪OB
$zQ@ WɊ7Eotnz1jz$t}m$e?u sq ^v VoC2W6^cۇ+P1;K9G#=o!*v#A 2Ѡy%ƞȊӓy$S1n5$ǚZz0."&腣ԨpI\+䟕O |i˟=m6M3 G ̱ ͜Y#&
NMl$~0/Ta>
gF$x
kLj+c_ߋn'įݜdQQ!-tHέxW51KJ#HATW"C ak tѻi$[<;oG
IR^Za[r,K>фu`y?XCW6.xYLDOuNiXP '}#~MĠxMfC. oMl 3l1
ajQ9psպJVsߴ/~;*&A "_؝gxH5ry>kE~- 9|
' } 0L?SƐD2N~3/Su(K tlnŠ"oN1hM
SgW/B ^v:?@
'(zv_9[#_y
7A=FLXm3M֫'ieѯ#Cr}Tdb-݉7T 7xl6nEx[pG MDgY(}FZ=3FZ.6p\MA^RlT? J ,]hO|/
n9!eȣoy;(l9|M J&xkm4dY4-; |=; (4۱k&PY2f(O4
-*[Ԁ r=YøMd끹sDlKyӾɅ!5*G? r3Gp fVo+v'a5z ɠ@i> 8|} :q"9e<МZŖC|0LV0ۦa٧hGF?N4鼹o4a}{"Ad̅H5Zd-!5 uJO7OQv>r fNϧQ6fv3:'#؏PmFXzY4ZĹ^3\S"3\r\)Z]ADa2^Ώ`JWc?DԨzv|.YX7P&jm6s=|0ˮ1A#S}7CI]zC,$HFo0a2g4YKRLo { qzJTmW(lX\S0:M:dP E2@*І֤ 3cvYjNRģi j K݅lB. 0a5oc)W"qB܃[s3c_>FT>ڒ Dm4@2rvd@^lyc {inc E5X v^Q
E,ts}f딾4镸IJ̷Sxꅆ
.ZCDυlFjU=O7|C+YGwhB> ^;LI7.]=\/ʣ|&
B8^#\Y)ZK65WG\o_@lJtD|$|@YZ\d/J^IaMs2tLw]-O[^S2p=:] d}DM&Ce_/ IT*qB?5\+VNe Z<{b[?J>dy1,!AfdVp|VWSARLU4gaW4+R'n I1%1aULa3M dY8s4C3: 5;>1 HdE$Z:T!W{4[<t[AeCq{X$\:=J|ٲlπ?+-5] )V'p$9%a@b 3lb?A)m{ wcEmA &]mgDgSBkrEy]@SMc
ɊqE&Xޅ;/_%t$Dxg_bDo1ۅ!+0}ědI}kVFBR,[<I)l{
K ,lMc8a,^hr\o2@Kil](b2AInB1&xulE>W5d,xR( PXM W01a!Dn d Qnyܦ =q; uP 턑PVnZp $^.فv q
08(+d]Q
^E!'čA3 T4d˞#ߺI55lǘM*8v?Gy#4\*
Z[|ͯ2&1\r8k<cEHE@YSʅbZM ƞ2~%B>>.gݯ*' nbD:_S6h4*@HLRUO uC%LLIJ=S "HX6O` +$6,ȕ;{Cx%A}{7_i)%NW5 ڵss˷ JI }sp')&$鍬4R{
zt/{$B=##3_or^` љCpL1'V.gK2X]j» %un4IId8̅1U| ڶO*~1(=f@ZBj)Dgp
B /ܬPJ;Ŋ~ Ple!d3w71) `U f˪(79ڗKƛ#zccKB<)6ߘha~@B?NQ" $vIx_tP0+J\zXΑC9 U./WBcIu@r0ՒC諊b_NY lNڒoιfIriHB6a< rOIt0;{:,gN ; 7x 7=c
jpGVCҗ:B W֫s*.=©5?f >-I"=@7iԈxC2Ĩ[*6al]I댼@7 x+Wy""9:@ -*x*t`ֿW
L@*
_ rUjt` Gu;>#a=ؑ WWaebm*,x*
>8o\u%) $Z.w6ix1ҴS CcH@FaT5͌9_ə! x ,4 16[` x*TLւt~l>tL(
)EN%4kAa$ [s Ю&5#,O Jfi'k DzOʪ!-*gҠT<kIlZWn4Еz%}_Db]7ICaf^QB'. Al^ S$) nԽ49{f:*<[Pkg^P_
6d`Ţ$_.v`r,tfecbȲ*
G4S<0*}u 8``$9 _ȚOk >Ak7baJ9إDȁ<l+S5gVΦ,;CQ~&o9˸-H`40=6XŶG: QJ3화~Q])ś!#ꮠ':c)Xޔ%{ƂrcH@"yKɷdwq*#FE`G$<ꥺUD5'4x],2MsfW&ɾ1XJwۘ~Ϟַ;"BI6$ᡀbr: i{8̈́ E<#ۜ}m'=pNdCgb\3\CnfS$YgI4p$/=]8tv
.;=~_CL|}sN/M ihk`Cr&,3cS ZV~jWC-g_FEQ@Щ?Cqq_ƽR g l쾽Ʉ1Qd
SI;UePN GJL@8:0 \#{В&idgxcѽf
;w<|Cb:I:6ƜVQ)>|c 7*> ;$3VN҄0K='Z
q~ BQlq,Ԋ]Z/J `?lJ99Ԏ(ga;{?t^ãVB60Ap4r4H+BYDlW%g
c GyY
+PF253y͕6axA# v3ʰqW0_5 sv hስ2r۾{!1/7+ C0?J
s(` \L{/
OA>oxe7#PŧZ.@V]M n9Ji&OA벟ӌ ON cEDtP@o'VX(~V*iv` hB5^Bت،d6͈$nafe-OR3 Uv όδ&CN (cPXyT#4:ZĻYOb w-Mjlβ~=f]>Cn8 NzGo\l Frdxz,ص?妴t:=?8\] ؟>.qI
%
PubgDxuX%d?|QR9;qMG!Vg
(S 'SG,;)pMդs6ԊAJljfՉ֝%m'a7]E &}0zm [-ZbVAִ](+NjG3x3'Kq0Sn"Tۛl$eBOzy[xH(f &D=%$C83=^,1=vT_2<;-Qќp"{AwTG,8t Xu TFnjNn
AU X .q/1r2A"iAgPBF *A+ Uy+6]<8^:gʎ_J|hmtY鿧+ZJ/k7?JZi'0`WpFjA[MLWfAz=ĩ2u3
eb2nzyAp_n#S_%t%2҇>R*OXתc~=F\tjt~yW}Ϫמbv cDV- mݮ o c8NgpFlqfdKjMSX-
-ñY
wH)-A۾z(,UWG?VY6{ F/UĖ B&a/&Qs;vw5|^[uMjØx]%LuUc\
Jb*
U/Z&} 1@ Uhoz[Qd0 ;L}
4?ߵ wZ{hdz_崧 @ef2ޑmN4tv
Ȣ_GfʠsV:\ڱ
rJlHc)>
s3g5
C5BKvCMXDɆ` %Luk+q Hd`nhZE74Um?$~8o| #Uڨx fNW.)%Ha*KٶS MښJZ8ocoT,R6r _soo2^R#E=7`a#U/Mg`^Jb-I+ )-6)b-͛-20 -ߛ j=>" HiĭAӣ *WaJˠ~ƫ>ڸ
?gRJ{L7Hq C
x lg'tKϑN,`$@az6Ą5PWC_3P'ކyGin@Qg.ŵtoR)xFb`t_y)~
gvva6١aG
Ne ɟ" -͇"G`=[ r KG@*Dvq~^v&{KA@>0gcT^A>hȇ /f E<
'6NP4F'xkN0Y|/gM$(EM/sM:fΧ&6ț\:=}j9J_wwRax3Xy*5[H!ءD[\O3i?}
?6Yk@T֢4oIIyБIz $x!@hgY/?
TE/ p5t -/^-1i@ Ȱk4d˙<1CJ^[(0@5;_HN2Z8^+B˂) NRn7U IGv$o?ɢs2 zCY "zSbd64AJUE' =xy'2'z ^[=9bFq E˯TR&(HǷ4!J3I:izHnR#62 2jG?*P\nBrSm/__ Axi?3t զt7i|nw3drxWl=ǜ=~y,[s Z&H{<>oJT;H
&KMHUnȫDq cu,Lh
$[[8oJP@O9Ҟch{j(V#,q%.yǃ |,".oU %
=_Y4`y@ P7S ]ij!Y)m`AnX ̨^<}BڼR7< Qk}q{NO^Usy% .=~5cte+h ϬZ_{i1-$5 "yJͯ/)Nf4G} ᆓ`blݔ;xjD|V|{ /A|lȍF |U3AE]M;Y @@%]V `EH!Dy٧bL(> *MO HmjZS
D5趾c?]-$4raFFI*0酴#qKD*,n!Sy]M|H2RV [P^ՓсO-w0ڍGa. Wr"AikW}Qoվ)L +[NJn"z $E#v )^ch _ 7Q24QA_Wfx:57ոLD qhz M z
{4R XO7{Ky >Kh1rT2с,f6G{H;%s)mܷDqx`2pH&] 7Nd =sV'pf#yOfFVt) hCaǭ
g ~Rz^ i<@0=\Tq<OR2"P-tqFY ]$!|f5>~`1bGWXcCt Js8URI,*"VG1p~ -õ`-4̬[hSGZvj',FIH$
Idu-2O\]8W61w 1 @ᡍ-3"&B6Ate ?".~ӌqw8v&6>Gɡn(!"B q)xCp3 o@&FV3 4:UGnMv3ۈJ
hڤdm0tխq+gZ\-&V?S ɨ~EA
b [`6v!5DZm8zb)trTs $~&'L3R %Ka(5D}#K$4SL zbaa}Ms9 16P m#7b>z[w AB/[bϻqgDƨ1'Jra;4 )b9 ;S{E/==,Yܻ9l
A lH TpUtpiڂ7h1o n>Y j9$ <2(
v bgu0n< F)-3a ) ~1k6XsA.P
n2h[[btb#lcE%Mt:f?F&ڀ'7nbGi/tӵ;r'%(tvfOlS'y\>NSPܰ]m]èAA ifٮJ]c
#w@&OOzZxlUz@ m}Vnm8in+l|쫯R+ݙ8dG`#PV~)~NӍSyj&/LW2vQzz'wW|ǠL0 ;r QC Pu?j}B czT[hG@ݢq%(%q={}XXT>L>}Z4* epv R*S[yBC eǺh0=i V-A d_ %b@.Oމxu3z=ڬ9QbiUwx},rOvV)su,Zr)
0Цf )d^]Cд^Q-Q{g8 %T?)U62F k"L$cKORp]T3ݹ7t_\[hG lww~ \6*xx"b[OC_։m03"xU4XD2
¬p UDq_ ef2XTy%ͨg P[A(z.fs;6"
;TJFj; FGZxEgyOo(`GW?/%l>XqDhXN |)={|Ês]Ӂ-RW$XHv{Y1N l[ [R;sGY 52QbpTTFTV0cGj\:ķN lTIhjŮ+T`O4h':`%
zarۏ"T,?2+'%f[l}vVLN]/ w߫]S7r ;s9Fӟv"1 `5D;Ipl?H"e[Tw:Bx&rS9R`7bSF1(bOMZ/oWr8 4ä輍4?GQ߭Ox FmѶ;ffjQ=m"Zb֘ >ؠfi%ITtA!4v#~C{ Cjq OMiqF% T?lu1~he_'4RZX^]!B)7"&b4 =@AD
p?z4Q/ 喈u$ka/9 8Zk sdZ]pDYDd%DwM
gyT(Op .-0WcpeP o"0tӥ,J7\Q\bk3ݯ~TXlÎ"L|.{-,gWDsW%ϐk|jMKD6e1 w^cIZ^0_=Y?z idMkM)X;R`29֓.$mzGxKwXBoR u0 AP*5Cqrh]hG{$_e=ٯ5t @ Ah" f?mH?k3諐Gز֕Ō3sd~{VGv1 Jg>"_}9^ -p~ sEEUe ^m I\N ;Z%AzG
oq[Yqb>k<.
L"kBi֦TZ{/*z$/~ӊ7XSAu#+-MK ^"ai |m ?;e%2*/9nIhwHJ/7 GCRT!N]nf#\ UC 3
s3k\
h w$sUT(?c) v))="5 V0HmoD+ wLEU uwxemp! xqQMfC n*`
povok 4E
ɭ~iZcbW"M?ٕ@Z/vۼkɃ暩V
oAt1~ @&55Ki O3փ' oevR6 y ]A $жU9H%w؞^ [7#P9%iYIV8kL;@wXc HGqVfKubUZ8_ɺZ'{~<*{x4_tER/eҕݕ[.3L jT߫!@=k5j YME81B 0sb).
_-|>%$g9Q)P]&-'
ݏs[Aѝ:1>+Ja_nq`y0^]v'iqb6?f@^<
Q; 0֧U0^/Z^ea N7}<9xi; Gf&@fG=4Nė1 OyR$<%:A,J Y 4|ڲ Y9 bF1Q $(c(Edwv g)}HKGQ "ep+=)@*f V Xp0KJ+Tnٸx|% %e}_bD j oaVt.Fj~XOe
FN vIi]dF]|-2oFTES@~\b ߂ 06ƕ!K$km 3Uzl
uD='xT"+>C @'{^Jr${S+ s[$MC 1ៈ"{bMYIJ :.u 0!)۰iO͓k!{!wԅɻ
u}z-\T5V E%_HK5&(r^:Nn1hU)'nm-T)wƻȡSRClS!;bX1Q[K(fHC n/ٱ7[~USX+~;𧵡 7a v~Z
h_]$B L<5ѪԌeV 3AɟB1
Tj`YW^-I)YuvMӄq`e;]%/\*eB\(߁ʔK8b/OUGc(܊|v t%IoB+B{M] 7E/~^ ~2ܒոIPt80Z k 5ʇѝy}8U S`߹*ZoGxfwȯ ̇N; $)<@u%8a8:?/M0NMϝ`)g^ AK#y&taU Ox~>Xáit;@P5`솶ͱB5E|ܫ2[\}x+
~ΟC|< zX?kz$코On\NF*MX@{p7 藐,1zWijkebRi(LV]O30[fMF jQ̉#U {ic.=iCYnʴO6*2tCp
%bBT(TU>CQ;&74[n3ƱUaX:ПH8+Tfʖ], ^Y"_qq&8as$Brbips\yBO×Z
_B LXjv]![W 7M, T#m8
A͌kM̑mKL%> @s(@6U;N(uZ+gc5NAy3ʐ:v<N+GR
M/.<Fp}GOJH (>y:?*l!1q͔ڼ 0o~ ZF~|bC!˝قRۄj.ƹ]+8N
AX.G y w=p:~m# /1. ˂T.z a'a) "