apparmor-docs-3.1.7-150600.5.9.1 < > , Љ hp9|5/ Zs0 }>[Z˿txgwhgpxtY84m{ymV7+Vp.ed tj'ǭ: ཨАC㊒= ^(ed uvkIV K *S5PuX50kr;Huқ=ry3"זZϙacca܍<&ڝFm gM
B*rhEψĸ-#e% > ; ? | d # B 5 I h n x
G
T @ P ` ( 8 9 l : } F I G ` H I X Y \ ] ^ b c d I e N f Q l S u h v z , 0 6 x C apparmor-docs 3.1.7 150600.5.9.1 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. hh04-ch1b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e 0- K I v ʷA큤A큤 h/h-heWeWeheWheWeWeW e18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a420 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d be26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb0 65b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c66922400 1e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.1.7-150600.5.9.1.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@d dtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h04-ch1b 1746532570
3.1.7-150600.5.9.1 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text dnB$tx( yh{+| utf-8 e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3 ? P 7zXZ
! t/&] "k%nCQZuǡjע4dGb`
sH;4 H wpcd6В@1q ̶]kÿkȒ Z S3!l<) ku4wͧy٪OOQn=/`C-70:vYrf M6f
FcQaVGI)Tp })SN(`& 'hI2 iDe\ |y N eQ=K&@KM@ӲI.ԝ#Y^V@^T]Pnܿ# L g6SPlkf;E Q굒R'/hofD-[|mG
z"fX_v)[jtz!d<02^! 9
B5J2=,\f)U`& [+a>|?hB
3'0ۖV@I, '@OwjP/hBS?ke5pqofy !2ߤ및ccC. g}&w*1A4LrO@1^ON9: Y
fIq-*vHR
%tS'0d;9^_n%;NkK[_oF(n`i\6Y01sK Ei'I (1HڣaC0ԉxĞy@l[T`ByK]@Ϳr®cJwOۑ|Ck 0p`Edz
)ƄQ5kdYiа@b;b@6NoD]gw& EgB 62デKρ -cӉ :q`u
<"; ki@7=i+ fcT:.W\Pig L7\58 @a1 uT(GAZoy}-d5 ;j
pM~~
kaXgw14>r(k-rl 룷CNNliy
vtc{Gӂvl=H 5@ cg{\q,Po4YS3BwC|Pbj7s4IBQ\A]4/!vEZ!iZ7_eG(E ^Ofp` a6lEh
o:sQ5+ױϜ2d+$pQ)䒱!
G3jwjZ:r'IN
k AX ZMi9.n֍Q!9-#ȇq~br__<++R۞TVˑ,cRXb2 y$X =kNYՈHՉyBQEZ"sRa|CqK7 ^jBkܖ_觳cX3.. O}6Mߧ- nR.h x_1?i;ˎ qireZW3 Vpo4BR>]gx mޟ
7;eڐr( #˶NIuW{W9rl< 4vnK$EqƓŎ;;od& 3ѿ*hV"\T KdjR߄ QpƽBK^z $Y7|쌂ԍ NS=wR5 jGX"*jV2`ƃ/ @m7@AB&x i/qS{]$O&C LdEF{ \kz3ִ6+m PU; ٔ|Tn ZjNi.6,T|y_Rje#&v}'o "珚D J>h"[$ ʯK>Ľ-èW Rc[ >YQoRm "_7H"1I{꿆\=0!@DƩB*ʖ7Z[ ]} Ê h /`I4쀓-,apbKzO]pa\k-ġy8$(P&lWa쏿CG>:Uރ,F "M9 \!<Σ;% hC0jߒCM- gV 0_B-+"^,;A[qtc[ښRIn 쒵ē}J4W 1?d%q9Lŭ? |nB8%/ɕЮ*F~_[(b&\\;D w B(SA78FL{B6H"`b#k)b
IJ-Qk ʬ|JNÚdEkdLng}V I9AZ'aM0CnV{D$aW+7\IUL^x
`tC/ͨ
К'hk ބO{
f\ђD4uT@Է*+ܩcQ]'+syރ pEQ oi>Sl2_qi$H9Z9 ^PpSL .'5M)=gA榩S'^#NǧCjakd@˚Zb
哭i lkEJ#۩3{:Zdۛuo ZE,7ʖCoިz [weZ#rڨ7 MZ^0 qKpG> ^t M Iq`U vU
J;yCRܺRbK
&R sGfuJyBi#N&*g%
Ӯ
=x 0J Ⱍ |Dd% @c hgo v֞)0 |ԓ{DTFo/U +N3qg'+̘ ?goq"ٽ4vbA7`d%*5;X+e {E} anQ>N.6-)m;4¬K -grmlwdǦa+|l'Ac
U4L̪_A
29J4 Crc[\wwHMsIc: }a-\ttI;c0Y!'yaoZ Qn4-Q!=(5Q<8_N%Ya5`;]FNaHGy+bX돸<}mMPM7KYeMm˭B} L9Ux
5EAS1 -eծG SmˊGӧ2[2
_Ȭ] <.q]HHKve]EzɋCvCm WQ_ZGDF$-ͺa)˭.;M: 2@qd_"ϏTgw[hx3$)! [T{*FA9[$J O.R1w0mgy/JZ@BKu~0 ꍍ~aLЈb9(V'`VrQw j{1o# \u+㛡*
`?Qx%dw|xVlP@tq Ԟ#/4EQ9#ZW, >nX gP74Ϫ
,i[`L.)o kZQ9:hCd5~?Cw}^0u6eNIwڠYpZE M,t Q5v]P ""nO7:9Sj2serSj%;0o4'DVxd"-!i22}b< qܒJn&#! ]&D檒-tcdPZ[
QQ(C~% `4rY' m!d1bҋʼmdP
~^7+3 ;nt!Bxlf Hz}wlv/Eјw26QnAw\"JM/V!R*8>q- @_%j8y
>PQr3\Xa;8h&S*WRqh.>N{(dX^Ѷ}^f>-7wd"nz
RD\7'Hzتfs 7Սńۗ)!{
F#SQЪݲ3I3 1]P3jK'=.+`_7 Q4߅#!FNP)˦n/K>,"[kK:Z9nAKfl sTph蔠bج'Ɨ}]q4D֧ G+d˻%Z̑>xL{ xn W`*0FRE継, "Vw6mH4JR"sYѬ $R
R|,hW7pSle8-& :o]g`3pE=Ŝ5#h@A\I*|c#)K [ r'fE&%S=,<}q{Q v~yc FڇԤO0@Fz[Ul s8|G&lB<}*ixl 158 aoyK Jjޥ2_&9 eJ;!0jyF.o,qQDK)߂wAUx u/0tqo
l ЈHj\ϒG[Xի*%j>><,UU! ^2 @E(34IF[W оWZ~p-#%+ >EN-MC Ҿ&$ nG<;IamSQg? #T>5+5O87PkJT
jrC0T[>x Ȕ;xL+#YoFх&%TDy`Whx{qx>e wE7|"8"ڰ:QDAF lc9
x SU- 9y=Ou*l ]ۚ+ b+V[.,! nUŠ葮mWC #@5oqeF" njC'Z\DyF?fS#oN.:aEmDyu[|E
2ZFU^ȑGo9_j>h!N>I{W
0SpޠW YЗIc\f3{T$݆b8,r0Spu2
.Ӓ@h. ȊU! ϋMKYf7'nP8Q/gOѳD=prH3$632V~>7'KzpмO>Yx|U2*fђ5t] Art/M=r {9y h"(5 OٴwX;o8G[F:1N`fxt3"bh\"ȋY/; %_W3 4k7$U#4ZtSyhJK2KUk'IqYi]PQS$xn,ð;ɮk7_W9=pt4sc7v1) V$^JrP { zsu;xm#}D5ip]ؾugFZs;h YGp%\)O,!E v된 L\>9m㻉4;?+y]=qRdGduMj`2kzs>Jkr:`T
~+0yVrbyul]!KȨX̲6ިkb0 B4tlXoJVq+N, HldZMn8$Ǜ]wթEIr>t,q|ZyǏYea"յ9
T cyR%6^eTŴ=c albҎx'pahF+'ֵ@UDma_pJ|1*KW'Y3=
;ԯ4P,|5{ C.n1A ?T[Z ]o-=HG hU蔳AUmf1'ǭ 8!{2 k#gG3iJC .!A6_pj.Ĩ`M kdTx`[|`g:g@dHlwr@:|I5ɡdz]e1!)M8`B "f#
ʹt+E 4x_נ
|r/Ԃy8?=aAۦse~ <SexA-5̱"lP}}|/ ٦0(S;昘W@c._:X[rl!'DmOr(^
`-? R4r3_h{ #*[i76\0X_f4\! ްle ue^.[Ehl^ܴ QRFa/Uo}ʣ4Z:JRi%JfD "!- )_T5ȱGMMR]bF&gftX7'1c :]"RCT~KtӮ 's
-FA8GA.>
CJ"cM8kU Ic멿cW}OpWDQ?m2o 4Wc 92I'Qh/tP$P˃DA``!Ƅ^@)k~ij-b+46Y,GEoWEP&Omo*::QNag(C!K16{?UB$NQ_Ddc]yA o-awRUv`"9MTՠ]oG$X+15IMd2Xx$ә[¡{
)煪Ҝ!nc)duoStDUy-}vkFd4@3vh ½Ki\-!%zY16E+ڢ^}
%tne%unh4S4/8ERM7aރ@V5!
>@H\` ߃eUHk1Ju $#}CB*(xh }&l0uXMM
Y4pL',r[6UMY$ʞg2/NN
D.vo T̓r4jX&@Ң dKSF~{Mr
P,K]f~;>ozZ\261]t\2 AIN=˵ Z#R01[j :m4ďqâwWoz5!)R=} =M 3!zA?>Egp't0i> OπA
%% B
U:n|;Ub { +
9W=Џn+wlS'F;1+1ǙJ&,mf w1ã%zt4twwqr{]$t[>X[2 ۄIJYeI2RLIV.+GR ŚƔ)K[+v\63d_5{d.FHb/6*Y.̴ '[o=ʪk?hu<s~nF *ȥg@@^J$K9-X|!*iU>XuRDfp0KcP)V*N @,";DEGBӹtn[WrL[Hh$hyNM͕ 3?L@ tŗ9,
+!BM_Q]*EFL6lgSVS'/vֱ%i2STquluH95RS09 0A`7K.MG|b"ϭ#tifv|BeD rƋQ+c6r
IDDL۾x
w*L T In_o<ߦozz]}3r尡2$Kpbb$[tﲁ ?D=i vOd遖n+8Vr+ٓ"+f8ȌRŷujrD:8:=0hŐy2sJT*`~:GAI aKO}V*`Ά=qk!.~~B Љiqr7@|TLrS##{Ym OY=vm3('[Br6E2p,կsQ#DŽ9wTX$\eg||]lAjis@X]k>?5bY䴎ž7]^g571!ȁ{<
/C8t9*l\Fv/prϡlgW9|:Ezk-w3Q$p3 y|"'L.Ȗg Pm
hx
Fs_CJ0ʹ\t&\
3pXPՍ8|:ɹG.AP& %& xV]_?rw- 7[(bWjwy b
Y*5"X2f~"A{A.*Mjcao d(OEF
O4~t%$}utkR@=ơ\|ҔLN7FV j:b֠_- .?B`c=0iAۑaR9;L_9 yǸͅ/D=q1QKB9Fn2(z1Q֎S РZ-뙏I` 7-:jW7XnS-&;\'~Z/&>kAh+T ~<'rE\BO(Pyj m`\_K %GȬ,Q4߲c)g&SP}J/> XWv~%?aކq(J3Y.dcq.,BXWvxQdHr f W2ORS2k Ѱ|~u J8Z'w7^'C | Pjlw5Hۅ-ofof|N }8@#d\Lc3rybd/P;@N4j[a&zE߬ER3z.bަ>ϰژ0ޙCמ6SFoi/ Ioʁ>Ǝؓ%x{Hh-H`ᥧ
f`<캟Ȥ P|N=O8 XfrVkZ5HVݜˌ4%pɤ ]1 qs} [>ܤlxɆ,g*[N̍7HMv!Vv_Ц%=AMŹY5iԅ4JԀzVǴsa<[z9
@L;=Vj> M m^ #f-IG]f!qx}
ا F6ԋɻDH}%T CS-9Y9ر$/YA̫1s1T`>6iCfDtq1^^59]Ooam12e(ۏ((~
Mr/'mWR>뻷dKԼ,U']I a&Grv=5O6Ȇb "Gr!Xm oꨨLuuRcZrV%=L _dqC 5Y9z atU KKq^z {pۥ B&bt;5IE^I')
k 8"^ku`
P_D ^sQDm}U!Ihv$D|ݚl9BwY,?Ҏd6Mm7dz174Piltoj'(eowb(9Y/]}|`さ|p"+ t2_
Df+T&nm )>vghȶe dWBv)
7ulb&$mRE 5K=>BșR@)B;ca# .XǖN c\r6ɏFOH+l68a4q H G[WoK`P3fMC@oye% g(*vS1vz~HX zPS?=gTd'/`07cu VlfGMl 3TK , \` -l$gByWG.FrMqUdWtg6_6;7V
+{2Y. M^,Rˇ+k^Y{ roO]L83 Ѡ'!W a
_DԒ<*ܕf 9_ݿ܁ih(yU]"kbp
ِQ- tsY ɼ1ɷp,N_C`D3z
9W*t7RCޛ; H @{ַY>ih;ŬE V& JoKA,. ],(ŀL\eq)z.Å5p i}x<(R¶'u+@빺 Cǭ5(ܘU9* UKe b#ݑz"5ig 8H ݞy$E L&|"~g5vcՔiwó7$ J]U$" )my1
ABڢo p3(:ޯN,Ǜ9qB5ߕ7? h*G sR2PQ!˲|xh|8sE d] = $ǀ.Y\Zp%Y$?y (8{ WxlZ c"Wu⠞:J}%A2?AŤ|{_Π:dq±u,@ ~lèE #{ۻu ~U|FtQŷ;i7hZwpX츲 QoܣBmF6Eu
}3ړ-jzIǎnF0 bbu,sÜG,
b6zI)xcʟ.|# On㳡@qI=O\ /I( t2ME&(3{gYĚ)9*}KC2 <E4aM'RШiIpwݖ!YEsv uq" mմKHšK4"DJ/T
ﻕѸ,#8v,ϻ3IAo
Jz] Qᲄ\Ng qJ?!s"+4z5y\yH=n#$\ Uu'`η rkmMN; մS % z8ii8 Ap)jnO@
m_3qOu ]R`ԘA!UO4$/^"^:XEaI\D-IC;RS9$3*!erbK dPd56~ tP@lDJ7C" _\kbЫ!TK@tQ߉+oGU
cZ(A!,cEh45'
wD XO g:dgwNw$9
$Yb6XB{8sBx*An{
hFZJdyKCt -Cԝc虮Fˠժި^XY\f|R:7{ a݇KzG;v(Zm#nv Ta ^
/
U~W2 % MDv/3m$lNX̀]
,PHi:pj9(5bNt7lyf3%
^5*zfg#`|OT
UNcr,"9}E/ym547u4l
ƨ'KJo /E{
e0 7,Etq ; X
K >hRZ5d x#ZIbgtfmB$&rH
WK
c67"PV] l6m!G 5cN*键BL
@.@=(5̑u lS;{Z3J 9 1T2ߊ
}9w]oW&ۺ/!I5wmJ! ɆlsBno;LN ۓMBZ%YP-K1]t& .7;L.
?X%2 iG&غUHF%bl }q9r\!os 3$K⍤Akh#"tLC9]*J 6XlVCX{Yisty4F!'V Hql :QbNs\WZZ
?1W[-5'{ 8_VBI}k8&3z_xkYjמ28NUՙ9|+Yjf 7IIlE I' 1ZUY<,9zrJJ3E
3Hc#o%Sk>~EctL1(*4A
!
i PA^aUi^BNMK~qe.A,SI]A; >^] (v )^2nIc&XR fntIp8iW58}w_BYO %ᆅi'tNro
FzO:3LH{j$CSkqR"5}ݥ
2F )I~b?ҕ7h*~j'0fu@ /MZoqjvDD6AOAU IN;]R&J \ +ՠFٌC\L=ъ@ee:q Kх S x^<3ຎ{:ze6yOk1{V ]'
Zm0P pSD_vqm \ 3Ԫvk-8A l2CQ♞_0aڸS*T[V=!}3÷/c?,e7"`p73džksr4ہsT'Dhb^ a7+`8bO]2>"1?:CE^Ѳɼ0G rufvZ:LBϲYgcS-c5NK;FuJA6Bh{:| A\E@hx" yl; `%w4/t+Wp,Kk!9OƇ!'O29Ԁ-1 uQrn,[p$ Y-ڙ~ 9?l<;m epgŸϗg
Lj0UH=\ d`90Wh7w>qf p]%9Ct$e=ٮ`&\h+_jd. oߢS"\:Bw :DK=Es՚.T|{m'\M=JПVcO7;M|* ޕСm2_^ LJ+{ 7=Jq [O)p J5XRȕăXK a8f". P]t̔c7rM<27[aH ~dp[ "xAi|M
| !P@ݵe%E hqJpL&gp"o<3@M.:J{O:V?qv߰87[2iE)^Ѡ}2;THAm
JT"^1B
lJ&*Zl"gCǍQU(x}Wż?Ul++ vh!/Gy}6 +Exr^՞Ő5rOz$$sb, PW4Ot9jC 4wNIi膈$YL kSȄ|yĞp"!M}oM!į(@L &Id/e$`k+P @wl8/qc+N ɪ3?>ۯ@
Ҹ2uբ
ۃrj}m}!1Iv&ydlZK ВT]ЛݟzJ)=B^# jcp %`C2=
@|؟{'\ pgTzYZ!KHyUJ,I^Kz&rD(<rDg OM j5O<_de6 /lo_gR1{MQ-M&<^3[t}G2R hnٲ0l4 =);xʴ6˽.. =At$L#0>}= M*`.M5UF%(Zel繷;t9M;B SErs8!ҬntF5RgL88|Ƌ3̊jC87 oUV *( 8Oi9'X-q~\*VJ=.Hzs <(#fKa0}Qt/xf%~7fa KJK;p'O[;^{ `4+*
xTE9%ږ~2k[R CzKtCSx!<ɉƯr0zX.T>h&/d\ ' ".BT4g1 &vh䛢4 +uuP|շvFK!I=thtzqt D7r|֏s< >-jvjN`@Q(0G?7/ 1cG.4*\l[>\d j[p(z-ݪv:; p5T TlzBgG J4cRu:Q>~-uk_7t{55:bgUàӹF
) p%F8BaG+9K\YJcǤ#p\w<@&c$@^z7-@447i^HC, ֑Egn;ܵ,+ZIbw 0'G 3qIʠ[*)a7j|̻oq@:pv@C( TT|U_ \rD-|%
/OAš:9cRd({b#[]Zx6,Vj9G(c N[2[>]MvVMu'?C=ҧkjP 9y8HdAs }e*8}8ޢk2o3kG$ک7{ G"@U:M:q(sxv=ŸUg:NX!
51Q7K< hYʩ.TzA-
\ 1C 5o|&-i2;Nrg 4UZ'\b.58A
\`FGH_NUKUղcABGgs-N_upTs:Bd va~_DQ싎%]~AS! Z*xLyy͉
}d۠A(aH#0tas Rrvan! ?gjlCGLIzГXcZ? 7 =5%TwXՍ=: > ]1q
h'n·@"b%^9-.i (0TɽgY]e& 8B L !iK57QYGOSKLY.9Ƌ YcKU0a '33
qѲK{"ت`HIf7@?#tqOBQ:ԇV㹑/h+a47n+SNu@#rȒj9(cA9TLg"ԋ(,(DSo[y /_WNaqb |d':[ 4VbuJ3
7*M8TERd vb5BNBeot+[6v>e%L =82[=qǖ//)i(|TE%iu a}4Kr+_[.>`cUE,a꼂{T$d&5 W|[Z'ށ;S6+ anuj &nnͪ'IiL v;
}K:
ڐEzSjdbӝ\ ٷ&>ՀR2
~8 D({<5u+Sri~h5nmKbcGUq)6SrM|Ja mE1IA@.R|Bn&}}IgR4/붜;0UԓԟQ3a9Ft;}21؊ A ޔ ~!"Rr9vpJ3mToz B,rC̠F# eq_.eNVk TԪrUyxyuI(1o(R*8*ڪn@^xQdʣF@OF٣-R}Yr=b9YZm- TBi%u+*F-{/t*CE^[dHIZ6| F/}{nyi1e/zXsf\V6W|럻T2sV#*)GX ֮d[F , >,ӹ!?eRH@Hn8T$VQ .^pr~VX
j orOb?{ƺ R{i$/ rל'
}e}^Xsd IFmkԬԗ[f AUR3'7&IR+1rFRݠn3G։-ӡuyzX5K^R!+ŻC"w|[)rJߦ^OTqhXJ^) uDy+j;}^OFfW:y&.A}
oSOG=h,ITzOڇ=s^ P)ݎfISn_]&ؖv5:H?[JFlfM;&kͷ(DE`u
w" IɃw x?&d>i~8sH븙GQ>jC$wT!$<Ěme)MO m@q,|dVt[-JaAJ^n5nQ"km.,Y9Pq²eU3*[O|.r:쳥 pXHVv?S M
~ϒ?<OYITZA.0(ҚF܇zh9`u2d@D._A ƪL4 M'$ԣ'NvGy(2uE8`GcxUΧPwNN$]Lf\<`#`r'?*hiW3N+ù ,hgKy^Eo:[HO0d ;
*QӌB+xjV,HM`1ZB=#_ezA*Ppd KgT2-y`m3yɺWZKԘ:ӸZ5d͐$N)m$)D:ZdܒS-,ގc8%mt7_Pvˠ^)HS-6Ma:豿c||o*ɅgRl;
C~J^g!wY:OE(`unnS}IJH;;=ڶ*90#&*j ެ|Sw |vDxeG6Yń.9Ⳳ(쒠ގ ՌHwgĠ?soq?ww7&ŋo+=g
n,0<ރmrNPbYʘ
KhÈKx]j0*>$8!-Z HY b3K 0y ʓ2:AH A쯚 \M /wuzY !t;q$%f m@{:Y
/v.%_`J8M
uv9DveÏ =X|ȕOćlidйyVǩS11:"
I^;!|=3k4jc嶫Mү$Z*}9 ͞H1W]4 mEK7L}fnw Vc[Э8ȍ>X4*
U@
@ BgIm72.ۤŽd0 Aa=n~sՀ6w#O Lf`K0 ߳Kjc=|2kEt'+ݖ/0x+NKb,6;xs+ҫF1m%kW
9i\.SxxG`ѥo.ObPiuɇ O~! DL
ɣWU` ?FϿ
\Ob]ԙ *ut^h]vP#ɹXӘ?ē baZ*43Y8
T%?ȫK: 8wnݞ RU`ܹqs@J,FB='Z#N7Nk!&Zf8 #B#E?:;=*b`
g'J1W<7!]mgtvQͅki8^#X9 `t#zD^u6f7d);q@G d \,`;U{<&2";Cd)1k Yd&v[sCl+s褧 CI0gJxv9h(_z(/~#$0@Xt*5w>Gt7|~8E`$B&:\O#mM:cҸF6z
zCTO5,f%:v!*֒&--
[fyO] UɥŁ>xĐOCN"rK)ʇ@Z?Q tWVA+(<$ƈ8Uӗcj5 ѦT-]i5n͘0OxZ}LD@cћ!Zc|FRnmJC>۔_Ѱ !_>M sD S^dJ1y ͍XQׁUNΙ': pPCģ1+SNP2ZΩR Z?&ej>:}roN0ƀx6.yW,){LxխM7vii)
1ga2M*dVn`? O3 _l$*P zSyd!7IIRf,'~Aa[[
:ʒ%yxqS_ 4Vss,!ĉ*|Ej irg.i4zW&,2q|~c Ni)pڍ' #5mEOLγ-gVlq%.( ł, jŴ:r=U z6=mr\G;. (H q>FՅz/bdD3hXDsB]Gi7#CQqg}kD.K ,=#eȢDܚl+٦6]G7,\mRP7z}b`A+[(\_#cwLr]x}m-g]2Ww 2yy :gSvFLJ[7e>XaG?Cqܳl '/嬏Un}d=`|YF,=|ˆN{foP`mY^@gf2eZ8Y]犽Tw!zWIӛ^`-jȋW"i0B۪i)(QCk *~0 mQ%ƚx,)'(fpEU`ĥÙkͣ0F?/Z)gsّ0Y~vܩ' ĘSԢxK irr;8kPI
$c ȥtr&`"89nj'۟</4dU f }rg~m$(LH_=GԒ(
9|\L[SlbSʍA$f`4,Ը_@ o~=H܂:vS,q ht4,<)'O{GXs&j7jO( 6Zqx}cORj<O)zºo_a&Q!Qݟ*YmQ(,1 m]
K&2ɠ\(S%|O Ctu7!wkZi aCIF1?0ש"k9o =̻㒤^.k ҠI49Rf`}An; õtJBٚI0fc4~kxE_z%wBGj&#vi{H~`J p^!.4_fr64T>cn[gԋ`k9sI .\W쀘
ݲs]1&L^`)ᮖ'۞ܷDܢ֛ctBH)UL1j'h;lG~5!."O$ ͎ 1NypDEӼ {/[U:]1 73Z@$? wƛ\ynQao}6wI)3x@lb"1up2՟'"3LN.M{!(L VȂAsm RǍ7xwXm Ձ]3K >ËcP˃¿ɌffQ娭d 2G661 4Iט# _A8?ycdbXDztvRXKh/c 6&1SǷ{dCBPϫS.h`#d4Q}X6G;*bI{S7 C:8=J^E|@55IuI,yu(?1Bcq"d4f^x
NKvdBC8CʴP6|,) .엪hNi G3w@,&]eVN4d+R]縴uWKTsq9פZ[Ӏ7,O9 9}z# zoo/$#b ˔%؛ExavzlmU5\y1jΓt'( 4λ(-J-sTw*3%nKe ˳Es(^U Y5 aYd0WKZ+8.oNf`
lȩ|R3rgCa?JIVޗ9hiK@)T;见s{u-SPXFZju)"?(
BD?_
Ee_,`K0&6 :07/dWK |ԷG2ƙ{Gʧ.eh%5A++\)30v_GNux8r<@ K`sU3WRD8/Y$::U
F^<Ŷ*. j@S::iLT.9^2<$ (Tc=ZΖ ZU@)Ԓ2/-{6 /Еȏ <[iJR>q(渙A79#.G.r"An Yd?^b/P"Lw=~z6[x2]-k)N\F C*2#͋
<ÁN
Ua]OCGumU6q_MrltMj̳;WW
ɟsdyX p'
SvA@wr/% 쓾caFo#JGUn(^#ghjS?H4=KN5ynIn~x R&*
a>$7٢vdx pjL&|TX$pxTM߉FrM4F1GxAÊ$f&kƌ%rS#ퟭoM
lrԂeg.IDm
8p|3&٩n^mTZz|Rv5ev y/Lsz(Jԇ%Y1oŖaaL]8 }_Qf׳ #=Xz-߯G NPʺ;pڭ8_]++UJ~ٌ 9U7S9H]BVg$v{L!bu_r&_ $E]/&ӊ%u,Z@BkpsG vDMGx*+&Z |) ¡FD9˧ d|^9AU' RS1U'?.y.s "GTm ͭ|~ i?"S2D~%U+0FC_ y2 *NrMI#[aICz wVks%/(:K^y=,m=r7 ߤ1ڡ82a8sp*㈷~&vh .gZ zٮ -Z6`w5ړp5av\dzLgQf{U_]`Ycƙpc&Cd,&V2Uoǎ #l$jխ]|B4u ._ 2*ez\ ^γQ[&U28Y^gʪOsiyu-
MlW9i%rk#'uEg-!u?TPͦz7_LC_UDry}2;no AqMV䗷9*)i֡N*(E!x W7z$M`3FK:b JW h7 Uζ~dPҠ `,~_.w,?eI~?LZƌ7u
!OhUxob4㗀EЉA,D3kPR[h~.[(.JڨɉP3У|.6vs.uUI, 4nz@ѪR
Hg"* ɥ gnpL?ZKO:pPAN
V 'ɥGהoYlY0
h;M ¦kK$:1KW?O!ԂÖ Z)XJqqcDua,©վQkW0>ˁF)n?CPŶRzpO q Sg#)Sě盁}r-{#+D(2@-eP.G%-nBc?T ;{=Ͱ UVnѹ1$wq6ꐲiQO8W\wz6PԴF|sG}@T
6:ȭmGbpf[eM*,Շa|Q4U;E;XGVI\F01Ϸ*ZѰ sԠ<
֝ |+PH[6Fo#3/rF>~r Q!r
_SfaO?Ðf{k, "l3ůo=X4 kf[i:JKv'XSj)tk]gZMk}vEfmh@~MV~1}т1㳔 0-Tb(eWtEImVk#cЀ8;Ne"sV5 Y|wħ2iA {+PLmWd@V@wm֤Te \nCfՕ{7pAQV@qg ;!4/܉M wx)!3q' eϪzv-6)!uC)=/Q
ߣ-ʠxbjԪ2#rOMύÈb*b!)
}g :-O1^{v:qiHx-`0| { z)F'5a% 5"EqdEͿu$[&"=FXw? !A| HGÜ^WQ`v JϮE"_6S}b:V:2J]iFZr\9E#, _4'R(^ "dY`a[Q/RIDK\ ن3=c
V z.ưmË>.s(ӑ}낮;X)lWA3Dm[5xB dޚ^ Z{Fݺz aλI&]=gL4-F րZ,ȴ Y|< ^ 3ћgYP|̢3ˋ$%&J}g\͡"9&]2J*хh<,S6b}QOpLEnAc'f\ *.pkE''I#ziU:2! ٲ |_*6 .SnCT*Vo: / R $ȜHvh_!Ygʝê_B!n8/y!H+-ZER\v'*pD(hI!'B@#A7tH>/j-cF興hoNV=/sB,9-OWwE~F/6cf\ChMDfA76itu#kQp0RaT,'x S -q#|Z#,Kkq
C5%/Mf / 7@16ur39U= yȔޠ AY >+(#lsݥcUM6y!ۀBO/f+0 rYК ^u `FPͲZ[QlD>`ĻUTht"]qm!CцK|Zw8nqw#!u]ؾUC?iSU~a0m?(_U _Mvr/tIA(mL8[{C+
h{ʷS_ۣ/wb^(߭?6o/B̏ϾIL!)nA}ʃ;\i4?vϢ(h72C_~maM`m-zZ1 R/cW9r9Zf ;j4k
AH`Q
|?'DQZ Xi@Z$j֙ײ8iFJ?E .Z@MޥQw6&*q{
;cBR
Td[4!|[T +_Px`>%{M3fTFnU۞F:[p{4?K`%o31%q2sxF XMRXf4fTȖ}/CӍp 3P3Cz,ag#lDp6^N1\O뀣! tom]R?% CYbggox"K HHoVY7_?" 5N 1 J `=Ged %KEHWo"fM$ t QQu }ʂt a0an !ܰ,v
3`(JƱ{!uB-ZSd3ggPbi<=^?YiWgK $] @Snr}ݹKGh` xO;nk7 LB\utpKYkoN5je<`2 HS% Rcߜ2
j}*dͼA0GȨExB=ҚSN ɐ X3|}1,C2^?ĦB~/"a[Dwyp
M0~/a\jЄ}/9r>>?
LkoL]t@$xhh2J%f~< 0$5c$sWAvF6w(]e7y &4VcY&VL]z|xe{Z0zwڜ k2.tNuU;u vĩJC<=xԋ[(
M g U+ \D'ɉ\.HT
='ڎʌ]IZNc#_T4!TE$>k.+(jnq]~"&KXCʩY1{FPxpL(~ xfs6Ti"eXn`9$uUӇ8R뻥L($هP DGX> ba) zG~ }j@`B$Dɺrq+_Ɨ$
ÄXzqW
Yn
b5p0$2]![q,й;DZ#oid-]-)YՋpα MÏAoС/ 僭'cQk+RBf ݙ\53k SGG8"fwKb*}rEջqwHX0 )̦ZR|ؓNH1Rv:diZ vsD} My'r}i .zVs]b($g- e1;;M! 6EY֣__ڈVk#VQj}T39b=o rttsd?c+bvyKl|B/M;)ףNݶ+d^Fe ?om"w___ 0- E-g=6־cY hV[5j쏈ӂ,LHvL)%5|c; 7[ QM^WLtNvMa0T|Z ߍтqh #p |"Yg@O@(:XEl*ݾYp>?z& Pt/2biuE'BO?hjAWC"]T1_*D_CRm I .+Hfn>fhsuJ?e^ Zyc{_'úZH 9aG \M@)h
"03
ẗ`NJ`G7OZO!V2ln#90}
./C!X߹L- f2!fK(N(y 13\w] A Af)Nl[pT-RPm\ z^
yE='.h:zHfDC,2!BQɺ| &:>d,MZ wGϖ3'QP qU'd߸!g%tʀW'MێΥom Gr&^$:TеܧۏGΪMZ]&0!F}f`$ vDu.VήvINϊK V5% }*Vq&B=Iլ jT ^T]53mfƿM l_? 9,gt >汋ܓ
~gOHiʄ] kTI'rby\ R*g`/3A''X^1'MS:tO[11ۊ 潟> PU
4wlNrE]axׇ0TSi~y<$M D1dt& \QM-ĒMkx܁yZ(idY(Z,}#nph 0 m
YčxX*FㅤeĹޠ.7k"`~gBjD1̞ͱ/#t PJ@ۘ¥{ owLE0 xT-pD&N`2G~ 4P;1z1
PmCU/g]z"<#Tqr{#=\f!Fu w;g|_J̮:IW 4y6BL,J2]kh F#荔.}U8'塝#Lٿ 8_`mPFTƆ*`xI" qռGw䰅ii7 9zض&ʝ(_=4NO
/s@|&
wz;o@hu(`xZjf]˪w2l:bf5dr G3kk⺭b>tā,3.: <8uT
.ٷC$]^<@htnݮKF ,'WaJk3\? br8ljGQQ6Vd
>B=λM9X`$G?(ⴱ[wCo89= Bܖ{ ʀ?)o)P}")]wy Z)$Y~ԒZ};>1;%bWvZw2AsciA_rm5雛
FEXm65'I܍/"iom i*" ,6沊p|@0 'Πʅmbdo?yDIi7 mUx6UM(6b7R#OV}xĢ2zll*ןimA n!9#/9Xn>_'J[rop,7y3( ^H!/?.1A~5$і%]UM?ܛ̲7Jɭ!W*+1 0sI QZO18h{jQXJm h07K
W1*jHV_"FtGPSQp &Y,E<^iF&N{- Δf],Q
yJTLj
:@fs!b(jbNvrY~VD:٨nA_*jo¬ttS.,V\P| mE_ć_ ͔Y"IN pxk c\kV''q uȟL@,]eNȕb{DW p:GεݏNTR˗ܛHrި%VH[sU\zGy6L~OT=%v\4M,7-5b0O Uyv.nH* +Zt ջA Wr O !zPV](h'm틿(b_=aOWmZ.Bhߎ))dٷ2|9_qo 9h'ɤY:Љs,
4igñy*xw{Mr m1 UNz4)d7(HMA
Skǩt%m$j*D2rKLгAk1}fZ=ShhB~ wlYʮAG'3
\ ovw/Ň9 _" pG7oi$|ŸM+zŞ!Iv>>* UTec('JTi`0Ǵ U+-&PC?!&f@٬U:ۻpZD% c̻ѐA7bemF$I,:?/h)} =f(4g0dE`4dDKןV Y|,V 6@nxix
L$l8W^{ʬY#|[ ^Pg <3Ie}IZ"9Dã! |H 7F1F,# =!([h
)& Fw}o"7)y+J=o-ˤFox'B64(⇀[~х1* 59puvu~6Brdzt(;Knd}eذ2˚+ ;|~|v=' )0
#q$]I@ujh#{!RBnrl{2OK
ϻ}W%iW.Gph5 %}z0͉]/Wn l ̎n3Z5,J =>Qp+ mqX )!7"/:vBSøuCA_.U lwnUZ$A@\$W6V)wN Vްc!d̯ґ8W`!_Frpk-BfIY[Ú](J~|XC r 1/m-<%LO| 䙭UXH BCE!DLW-iW7);g|d»
Upt㓘.u0?J΄j)8?ӋRZ# xS> iwMeW 8nwmZ6`8885X?LBu_\ޟ4wA ^/ E
o ʼ!UhNQ
ɐ)C{ڀԎG9~Fz>uѳOL4SumlsKe{N)Kŭb|n E],?ւ)BnK{KozaXGȞň-DYŞvYف#g4^ M
b;~ϮNt ~WQoSFV@݅s#D-`P R/͓kh
DGeR[t 0+1±qo:m`rjX~Yے\N*8=R9һv P5 @[l8AXZ/* ( K5-U=&M+hduZ?ɚW0rE'Kg̍e
9M|j6R^jBYr0w5!K.O_3ْBҷ+ Yۊ䧀rw!"V7wx(
ۧBKDZ ˟
lYG66і .
u6(+jW Bм a-fuX pA:1m$ +ي$QjOdV3ޓ
@nQhc!n!!89!Z=.?FOo@eBu r7:6.ee*"} ?!+Bo~.b;O a[>.DA1B- 3 r_q^*Nbgxi}SK`2#܃@Er{9kb˖7
W R9oU DA-~ml\2S(|k˫ ha:ֵ PDmd[~ +Hjd{,gX6[m| s7cvroO4M2]vg+ʱr F7b\ƐHd/<N{TW3^PBUws%d ;]!)V/p>pdmf|y(^Y
L(ۃ6hW^e2\&n0)e܆='F> ]g/ I(rWCwׄVƃ=>\JﮑUGr. mQl
1z3ŹWRiU4kAR\ 6Г':GWu- NSo6S9 lj(g.q
xFʿRGalQ\iZs'1gjd48Ü {v)1A؝Z_uw/kl( ݛ`Rr ]C knG8tgؓQSЎ,` VfhOfo"1tIBxHl`#F :? KeDHIAD&],JBM:4wo/{Kw*N6U f]PA+/4چ`KLVco=۟r0 U"c_ {)&֓ąWn$;J<0,Zq^? >|%擪 9I,|FY2 p}q[9g 7Sfm6ܱ+Q gXr9UҌ w3QywUFy.nJUDl?Lk"vv OVo5>8 6 RA*} >JҦxl:$U;3~@kh;WyDacA@T=[XRe
h3l20w*H=EkA4C3([tZaA? ;bYwYLSN6
wYf|t HjqKMGofH(Fs.E'9ݮw%$DqBщsf_$kf G^RmKo
~k;3=,8`\bΜCcRmdc-< a#O .M5p J+VFe^UB 5Ί1
I4~ BK~o9 %fGX]HKJpTZ3GB̗2 $v67rA< )ƽ|'A$#1 k۫|D&e7x{&qYNsJ5ҋG\ 29/|ܗ[#)$p&1Rk~)rp0>sp"CG!%;g~i [6I jpFSDW5)3?Ac{UI ^Z ʚ19 Cop`-3">gdkr?Pr8~/.9 繠#d&㒽~ClW
Kw;ձ^lb{
؇K+OL[ƭfwQ @ $=SZߏGB7Ѵ^v7 N-q|%9Bn5t$_fːiɱ=5{a8B ^ S]SUA3 (E)cѺy/'} !7c<)~|R4Om. h?]rSB>"BtH G* n}ۮ_pQh{S" V` _.gW8?Y* DKqo [cPҐ2^i e';3J ? p"=5ZU(!$+%kTtVjs><~%?_'-'Lms.<&l]c\]vex!. f(yއQ`$hO+0Q'QjOA313
Y)l \'x=-Vj1u
~dA x3Pͮ83dv
7u^# x:S6WlXp\.W]m7Qf Ahhu* : UēXi;(;$2lJ ɼ%{oNMuPY?*eG|19d툐;F Z(Vאexd ?2t\VD+0ҧ6x+``!K M %(iIfuCJ㋗
C &ɴLNJR=N/D Xa
<A .$104tPL't
g͢ԧ%գu(ᡖ8i.G`- 짤2hX$
ϛؤ8 *Qф<|<33%%0@ bd0j܅@G.@EWB.(։ 3J@
ڬ@7IτOY sG9b_]ޡ0Uhrr2*&R ,T0>:
x8@}U.4=_f٩+O/Mswc%QDzzBiCkLa-w=݀3@2?
No>aäq3!,l'z УWfAoq\ߦ"Ya8m ڰK!8D߭- K9˃OƾQsmC0iz1g16)6c%l t>S@QV\dF'~HؒEO=.LxK-^% m-k'hKTU DEǐ!ijrtΤQlVj-Ϋû q}{[a%sxϤ$IccSa(I\Bs[vh*HvSvcŨtR% TIeJ&1 xqL_&n^G5 |fX=QĞl㞼.iGQA$k1FeBH
r@HМL@W8qWdhC<%lSa
4 ϭC ylm,8:$@c~cG>5Wbn^L%a,@~,$8k| 8ʀye
s FpW[yj`x 5m]25<I{CfTU7l{X C>̳
-^d
sB=&ZL0:ANgnU:bC7
!Nh{yi"`Ǔvoz6 1Tu^
H&'0?O*sĝ9j1A; ,lBa 3:Y }]TK ܆j x;B[myfzY4C̺ވ*ʰG0G,: &mAV8=k1'U
-@u ~R85zM
k~V
`CzF(jr "xxTM&,nkAL+vͯHȄAtOaR?-xW3M.Mi[ ]6 @K[͚h&U$ ;-cYAݥV-AT<_'/mo2 Q ( Ʌ9bY6^]:THKyU ( cXCda! wߍȦ]I觐s2cryNǼ ?}$; ~ЁP3䅛Jk
)M{Q DSg?1|:R$H[3\*n~4+ġAIgă#{ %:2,_k|Ў_nm:)|zNxy0o|!dd"L獓T 8@odPZ$22 *EgbV1 (55cۘ=' rVP |r7 dit 70Ӌ|.ۀWYmZ ەDCL,ӁIb1eƑaQ>taڐ7K+c|nJv`$U$2f QjG5.W8XvJ=M,o
QԾ#0~0iV\1v9B "ViNO%,ڛ'7ǰ6 "S1l>xٿk$fj8yr[z+Y/NX^+ɳRMh՞^f٘3]н:
F\0t>hM;b}tb&ݦ ؙZoy w$! Z,Ԏβ-L" 3S b4aE;YNŀMA&z'm 1ޣEڽ Ծ@~s@(
Dp| Y5 H .A˶{?>2 (~֖`%1aAJ8Dx_WOJG.NNw%OX=vxxjtYء[Cc8(!"fK|3jfpEh, HK 52
q
`=0,1՚i 1$ b+ 9b.|j>KOzX_'99`w 10ƚedq$cؽt4 2c"+DhI) -hqGb'}
_7 ]tc,&m>0X7 %,G`v? 7@Ql Lޣ;jֵn*? n *M}lQ`VK3 &xb]lcg#1`7 "X\ _՚ܓ}R}q҄Ja3Az4zbrG宿FK7v%i} =
>B*5H+#<,}wv)Qu\f,2d '/W28SksaL HukpDþ3 _53|_]P+?KktF"{*9ނ-9Ɋ$;H j%55)8HZi͵x,f#z*~aNve03;|!te 'Ϋť'BL#$yz P8?{l%ìJc q ZhҠ 09{ <;psd@E13^ϚhBZg'c/6 7, Ne%.#D !gt
NL p` i?9^ad%*// -Tԝ''s⸵$QlA^,~ʾip
5
gS7彍1/2o?hpTdQ5zՍtxQ5? Euװ g=0^ B߿[bU-JYP
_HaH';Z砘c a5lZ4C?U)wO|
r\
v-ig1I W8
͊@ <'b¢ >|C0^6kzp@*uJ.28Ȗ}Siq)]<fH U *B@XR *C霢
VK/R_[XD9m\qp7. m([; M`7\F{Fw,ֹ14 #=K-OH'lg_!~h316DT <ٙ :% I0 ,ejU0ͽ MUAF q(4yV:t$E_wD'FC^ <8ǻtί$ֿ 4|x+VJ >;iAPmT( Aq@1_
-
Z x 3AlrJ [Ruv h HfNh*~_5|i&L w\%) h&C7t
W$A>$[8 7 |c r2V0J)85.: :ȑ`1Uxps%Z@m$PÂ@n:V`Syxk=5B 22w1[9Aê Fڸ˝ʖчʚ iv %.i\ Q
aY6!IAReS505 d znC#,mR9kh=1I?v 2#zO}zQzQr^_&sJ?88AX-E Iu (TQjʊ@ݻj'bOoEjGYҩ"| bȏF\zMy/~PfJ6|Vw? (o,+ΞWbr8{+ $դ-|56d*"=-@f_oBY t ]W2൛/}6tTj" IUT%kjW)4b.}ެ몫5WT] `PRcM 5% b 'n~ϜL&.&w"3Mo},o
6rwξs[!cN)*
L1<Ʊ>$4ݨ0DL'=z w%|iF 9f[T>{ɛ$[ԭe[?< 6ҫ# Sb_\X=ꇼ.镐[#w ?v璽2t);3'hP[4ע62+֗ߴc/'wjj 쀅^\iV
Azsu/@hЦ*yӄE) !ҳ p59^lmbˡQӐu>Kz ~ ?6_5!^N# m->?Ǟ&3aTm&\*szCrxk:5 OP'thQ?E,YEVd,!] U, B%u1ZEt^CI9d#, ~PsTyQ3訲J}\p\)Ww5$F~RQ ˁ #:U*yTQ0 x,! YIX5XFZ Pht3Cxw1G
љ#|8}j;5VHMӂtAc ' *; Px6[>:*n 4*'\;fXHf#vrf_(Z",-C6q rl"֥+9F -2*QV?H r{:ӄv,U\
PWiN "|=PS8~{T!BWS/iQ =ac_|du[aN)ߔ& igGOZ*3Z~ʆHx1
iQu:1:B>T]uX;N*fNMA\ngQUR,`iG mMuˤ ۸ͣ7 A2S4d<AΠf>-)MXe59hI,JYtb0ˬg4`ulEIrl^j`ȉH
iA2"_Q+P\ UL_W'mFՐbAa
{o
6:J~ AwIZ,Uˑ=?Sd8$k oXQGu\suAW&|QCBuoS1
FÈ=4nRC<i)МUjbyCQE<gC
@]4toT⅀(C?J 4w5π?;,!}='] ]ze֟B
0`]Ь5P=als!xH/ЖY@PZ'i(vсLq<67,6ZA$Εi/3HAh!'e4Sωn)%=*;rgRFXV< ]@ b xtW{X۽ەkTXߒBnq8hGcM;4CS6^輙!{VKbΒ#QAx;w3۪2&jQn|@KE5&x1 A4z( lo+^myX-/iU`g_댈Ol#$ b!h91JL>wY=eJ K_3b@qO61Z8< J
dI3L 8̙Lm o^CY6XqTɀG ,[2FcF/;ĖH0Q_-BE{JNanЪ % 1$[ᣮ!QzV];qyeKް nu 'AtOvwx le:j2XcI|v}ԂFP55 'nY+z/ ;yGo!4 A2geRy"( U8ICΏZc??rjE{}"P5
w9)h ,Sg,R ۶ v`f $a{ۘ[qYv3;= V+s64u{Tz߅ s 8X & vIש`oiӄ>g H\,MUwـ1+` ֿ d@Rz;YB=h*Oԍ0Ùr+V`9^ -p;T-`".p 砱tN8< BF\Pyݡ &< \9'7$
M"-r(d?Mr 5a8+܌@g;^ ]:$Bh
,p(Cl+<)*<9W@
Ŕb4 WK8p([* dZN'g @ `k48=/JRFk%wbj ;G_xM[f{yF-vTh\4,C |!̓j [i@1^C8Ũ,$ޘcXV|NNO}@dp ;zۖ ˷ [Ю s#ޯ
`C7wH}ϠKa W2Z2H.-F@$ X`U|TnW_lp]l$ }6͠S %MVaړZJؔ%-Z>708:X],ndnpj ]S`
=jI
k`>p _|b73-ɳTǐ:,j^[eV|}>!:,#-)sLXw]G2ř }qfk?}T%F+y0c(iedP^4pG-U1w+)jW#JY "o/ЪyPVo}_ B_/l넃[EEM/.`-1(?xbƌf< fDnb.zU$!_"bL|7R+=d"2=qSHRzapW}J[pC Cy=TMH> |TB漎<3np +#1H ޏD% t1T%O[ 8&wດw[m `l"O$E_A`R_30~*K 9v'Uș˖$՝H0i<&7Q a|C Y%C6EsA$уOrEHJ|fV[~F䵽<$(\z^g6yar3
wt䓔0uLBx.A!"pmLFCC !Xr ֭}8%.M$j ?m-n#V(#.lU 5.IX" qK4ݷ 3)傳.^^KHI8Vzo[OCN(g\2s?bk} Dtn͚Q\7mސ7G~@e&IK-KAhMRYˋgN}p <lV?#U)&By|ۖk!3ZڎN
IǑ+bh]/Hb:)jAv҆i7w_(k}2+wAAJLt-," 1^N,?.BpbTFzUccxsU =|y)4$ ^{6 `m)ULh-QN)~%hQޜ>FДola=P7[N yfÓH{39`/:i߶uZ}r|F6t%Y@Nb繸$4P%;ŪIZZ! i "@PiȚ[.'Ӻ±B4.iF:).i4mKreͨQjgvAw⦼Sa|EYc0|Ɋݮɉo!$y 6F][ڷY|̲B&vz_&1>O$E``rCgzbQbw HzbY{rud; ?+'3?ˀ" T x=+U azW $cV V}2C5Nd)FƷ({ W
ER/ J,aUO+pKaje6y#ii[}FPE݀"/ ' Joó ;ܽEF
GFLi0͍qVZ@>Ť29 rUلMˤI Ģ1mU!7 =Z67 $C-njp1S©pzi PB+O-Ӏ_`RĐ@49/:-cj+B|gu">SA
Z|yaXٞoݝ9ar_:iFjgB,3˚l)6+L
g2M=!3WGmĬP [A]{ 'Z$-n+CqcFGP1oD"Fi g{
Љ˒;|Nv茵?
C}3=B7j[2 VNpw0~ud\r:g|hhv
1}> i\pE嬓Oq} a>YX`W
.'5Ϊ 2z"Kp 쁠v`k+ iwMUbԟgop JƥsC("q.B+:
їMd /4ic< _kGL;IHˎéӸr. 쾸{6M2 ԅk,2f_-&+&$r)O&DGq[9V=+ЈDi?L
$QU7 tJE nnh+uPۮg 9R+ɶFg(u0!⎊Us\XC}Xj-< :cpE('aŜ6sf^B] *}쩣52dFL-ФSZ[~4ߞ^8Z*ş-Hu)4 Kk4!n t5:n,
3{!=`P8)cd S G7y 5=5+>Mi q%HH;I ÄnG\1?w ۿ+4fSl
k\
I/Pڐj H 6+ΚI}b3Lk8/b:#JkҰw>(er-Ďc5%"bS3!NCi ;i@W |ErP6QGu!hX2cUwܩ! /@c`f84Kk ^Au
}:Ey1Nm3 -y%)Z]s Fb>ӯ. ;LvQz=:Gс<5rʌ&u)kBS-6ì˨""zlPihxA)6NMQ}5r%x EJX3LyP^գJ#
*QSZ'hǺúȞ&b >ުP |NNܤFFZp<"φD N C@!ghڧL{dI08^Y 23زhf&2jJ{*d z"pP2bH /,Ud]pl k n?DA1PjXnfF H/x>Y{駽u_7E wP0έq$(E-f[8pg{"rs&] !ڪdT!P555O8M/G
C0*;8GC 4Cd(Wմ] }4Zd,Gi}@Nf̍?( (
.-¹<|L7jrEN 1ʶBW*꯳[< Z%}3;b~H{Sue/?;DI s'OQ~vqE:)G cV &,!"ryb ^T,Y ŠE' ;׆LU.'YCXl1_0%]ZBPkJ
rX *ʀZ KҬx#Eh'cP;3M ȩ F$ۜOvƥ1At̶Sk 3!!Lw(ؕd@蜶8 D
xஂȉbNc-ZRj< qx)WɊ׀ C4P\ߴ|_\F/uڔA=?ơ^'NTRgߢN!yVjTrTz!gh7NgE 55N1z=>lY mQf6$`Du)~m_ ś*/Q}X-JB`8`w2ҵ:d)hX5vZݩU Cͻ-W|;iFQ?`_}P`?pkic;a' PiY Yg&U, mX,«XA8v 掱~❜
FOg785q6Ie9_tR=:q\u AW:NqlP0J]%ZI:A:z`Qq 8,}ľ*`@syt+ =e˫-Jkkn= N_?y}{'3dM\'lU:$3lޅcؐZ}9Rav5gƥ6:`=;|Pdfdd}zy`& 3AA.)C Ixh Q-.Rg@.ĄfQp+:)Jv Q:}]R$S;Li`Ͷ1j/w
`{ qOh\/Q}"l\➋Lp#$n%߮XX*:
a0Xb\h-O[f,W{%*k&'F- }|c<vr(;9̾T}ugJ M;7Iҙwoq}5+w5iPqƭgRxZ
L= p !b[_E
qrX:QH BpR<&lYU")1()LcdVS-ɐ3Yw> cHF.A5R}K44PrṄP
k
2
]?_uwn#gf3rWπAҚ PF0TĊ"sWa_24qMOE&N6U^2} S՛0?4,i 'Jry)}#CI. @aBY]HtS5~ůl%#N-vN>`Ѹֆ N#cEY¿xmY'% - 8"Ag4T3JVGq{ea_2 ncT͘~f
e a QOǹ?
_²x8nJMxG|'g'qQ@e ǘ?;VqCLZTHņ^lrpR)n2z9jV<1xJV$kOsI?/6A+Y 7O4Kܣ!E: T%@\:`0[+B|6 #b|)b$Ol+P*?bR:x?y [s}6-.,_J( YSCDfdތOj~)$\YL"S,sM%懢}8[d8/?XNjlsO5R]RSw-ՆFҁ # buaRBMic+|91 @:ƅvJ1[S(sk[HxA|y C"i!q#mQ*FKx)1OG3+ eaOұ칈!.+z<
C?d|%zɡ(B"(~BwQ#@ts,DC}i{y |GK\E WᴏU^26C`:x%=FM\"KE xJ3\J`[ y'ڟ]9-
HUʏӟ[4.% Iu 5l94x5,-0-t}(}4|3cDNj^YGg}r9 e*}xP
k+SSjS- u(e'~sN0 5P|-Y6&-R%QdC36$Qh$O9
:X< cK_6K>2 klgu@q$;$0vBLXR&B($b0G u `8f|Vsky!j`8v@a#H j˺)#!? DS
U;;
<+p$x\s.Coo5J/rJiZ
r
uɉr3C
M"Xpqk?[]c)P"}O~eq2t>;.ŤʖW;?ߪq9=$PC`t W^Nn.ϑ⬨j*
* J`Eɺ<x}t( *Yn5mK`S7;D;@[w+!MS
mKYL{s.Mc灎36 %7«] P˓EZT@{y^X 眅zBX
~4T1 RsL(iH&>ONgRڍ5v5HΪϪFVXkeᐧdeNǔ> ȐZ ڊ|2 !u h;Mc?r~" yHp_ X
YZ