apparmor-docs-3.1.7-150600.5.9.1 < > , ؉ hp9|/ |PYl*iz>>s . >k|&; Р x~r
K|
/BթCޓ)"f:6fUW>p#7 o~lrx1]đ$~ݛ&/=Cƻ82d9$[< .e O 吾i^oZIMj pp0Uf1c6-VC
l/h YW8 c pFhCbC6ie > ; ? | d # B 5 I h n x
G
T @ P ` ( 8 9 l : } F I G ` H I X Y \ ] ^ b c d I e N f Q l S u h v z , 0 6 x C apparmor-docs 3.1.7 150600.5.9.1 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. hh04-ch1b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e 0- K I v ʷA큤A큤 h/h-heWeWeheWheWeWeW e18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a420 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d be26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb0 65b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c66922400 1e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.1.7-150600.5.9.1.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@d dtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h04-ch1b 1746532570
3.1.7-150600.5.9.1 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text dnB$tx( yh{+| utf-8 e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3 ? P 7zXZ
! t/&] "k%VR{_ Odn-)pM59$K^h'n(!gU e5 d_ ~9{T:7d>VcQ/X beY,1ۊJ3 Ҁ V&Yu(a hË`#1֗>ſ< N; Ɏ_joNvFC9QMd
-Sq '|ޣ3,80s^5ӒcYr*W=Jg2-HfL ʢRWcZ..SՌR\4
-zCl n>xF?;?c$
r ^;srk-lKS@ ?<8k>B 9j߉˿<ԃ+%-/:Zg]f-;k!x00| 8b1d-hŬh^ÑT]O ak ar{^G= 2R_F=07_: RGrD}Ѿ<22@e= Q?K=ne1 Oe]XMQZ] S+A*8-l 4DJ!2^dvƟ;
cJ]lHvmR )>
&D;@]C^oSSZ-d2d z[u#`ԗ͔F25W@%s Z"R> 7*\U#Qx>EY6UW
,5]g=Jc&k;ՔvLPPxENXu `̼fO%_7r( nضsw3w*^ܕ7
'tVN-kM0'Z˹@.hލ՟ۚȲ$u=Cij%`'e
'OO5ftkoȒ 4OGF7D8s ĤTR|D5$F'u KMq
+ϲ/XkoE>}NQ^w>~27w'~yLq98O@Fc XN:D ]S2(!Qډ#W.{zd7+}ѕE&I1
@FU;5 HƯ`[/DoHMp9"(LC8d[ q*#h
P"fs[(8$D̕b@X~7# FJaoBiPZ7V`?Y&uB =@
4 {q%h?S柪a"]<|X &m?;N/W4611.O &L;rFݙ֘if:/ J &E氡sM'? +Ot>_9t^߿, QՅ_fڋu@
EDZMgLe4wNY`9YXdR~u Z:ڿy{ Gu%^ȿD=%X2x2"htXثI L gP]WVt~+ صgYZ J:Z S| 1zKXp[7Qk_9)k=mJ]Mӏ `/|U^'(
vhckL iBnDHXn$5 _
[ښJt'JJϏqk끸 ܘB(pWbbݬ%%$sob&[Y[,Rp0cFFXovؑ`>wDÞAKMzdYyufSd3mwpXYW; 8 ZHDe4
-q;V.uݺ%xNd͗- \R]NCe\ݘшSldwߐ$Esё4 g8iH?a~`|I7Ldj-ɹc0 pP0x%\IBI
~;+rAPNda3l&f+S iR) ?wPiQ[z1^BYGpN JB! jKmE/y92eSW#rǩl0ƝK]Nj3*.>e:x L#_&pS >ebڜSv-/"Jw1[VFhzp{=m:% ۉ:^29vwJ yv>|
9R)L Go_#eZ-8]ILhQmIN[9o-S>FH7iD|} pDioaݥ]iFϘ3VUeZYQŤyU❱n*_cqF=bReu1_1QS3 ˮ[s~ɉַ<ߚ=%ٸ829xiT5&"v0KhO; g `~kI*OB FzJ-Ux 9\3ɻt67[
wI5JJX! OX,٣H$+1Ue
qepq<ÏE}Px|u^ ;JKj>hl<̚Cd.η4M1}bR*ͺ(0Y
S_e ߵt JFn;f<
Ц)g2It* #dW!#,-`kI2g>2[ weoR[H/TUگ4]Bx'tw#G !/x@~=4DS4 q1dޓ:z]GN!3 RK"𡰇 4Yd{sV-GMCȍ,#˹V5gS L͡?/ޛ, A|Sxt|++d/HPC6 !*1 ÊOoac {[_{S;$bB\ґ[ Hѷ!b#I QBhɷ(GLKsN@"̆VBtϢGEL/)awtA/Vcƕ-S.Vr{,2/R|` ]W&VIVjD FB,G 1\Lɜ\¯Wiud'OkhfVtmHcL)(j1)@Tƫc? +jN4`|lp YԅZ%b*ihy1h3[ y=zF Rns= d1@DUF #&*R?/nv͚t]W`8R(.EZ㥮.[gdWgl@m
zѬ7wa{Z 0 쇥
l&ѣSjE,"
փ O
q 'oi˳78}uBt\衱# j]e{~i>b]ee?Aˌ iq ],|A
3آf`1 Vfdf+!{_ dS-_f8* I`Ә}Rl29W,lhcR8J #NrN4}ۦܟ}a ">Xz)O Az7ρPc-(v $8vb:8|OCb-ʹ l8X}5"BySyU1w Ѐgs7H*ְ3{4XK,
tg& ZN$I
WOʐaL[7p|'V g41A]ʯ
,:!@=: }4 ! >&#ȼĉiTi+/%Dk^c]?[kfj!H ɭm!099{FdBżf Jg/ӥL)q'x0$BoTtO ՝a;~l "[H6h@AVF]9Uo 4{_FY ;8~ҽ;u4M- э5sgBoBz8dh{:YMZW wvQz=o'S r ' hӡBV4 g&Uj >)zX%Y;#iAe'̔ [._i4< :cٛd y |٧וqu69SKK
:qg4??sw\P@ ra06>A:ڄA!7Npul33m"vϗTKVm=I1Pa$#)8mZ& 0|Avns @7o"J߇Ty 7M y$q O (@}4DEj(Jl?9˘m 0^^DͰݓvgzi[eoAKJ|Mq rm#JKAl1s9s4ӂ'z&》p <%5yܧa"$|ix} e } 1 E1 f]O,`J= Cv ѯ\˦u)EkcL|v[hY#~@` wa+< vk*ɘ Iι/مWIKicml p$p
ZARIt@}1^_aQh+ZTop&\2D ON<.3LM}PX3Uu!Sӡdִ[3Q&2Zp &0I-x1/w>J\X|n8e'?W8pɋ[;&a1iT -VgoHɌ_vkU)&Ps$;13 N0H͍<`4wrnyWs[^NwY2*lr Ttlnj7>57uCڢEv}pѵl+^ZI^/k@r"cnjkȕqC`Sȍ0:! AV/vDkFew4ԧ}ms*KcР.jl"0}
iTDj2pe۰9m <kdg'Q6gRfAŶUi*{L ?4c Il
+/,iq& oNNלrqc3˿h\ ũN
~BPpQ$uxb5'l~
XHsMSuz8vCwv*Ji5: z]RZ/BPO [
% bu)5T X(Wjp X!ٜ &lX\C4pZ4҃lJ7Dq,3
9Ĺ ^MޠƇ q_1ڛzm Vck7=@+}/E'.B/QG+ _\) fK]~ȋL!s ^Ea8jT̃b&ܪ?qJSԜ&Lw 5]Ԕ!Çk͙
dD}F]zR`UI<>eY$d)»]h?¥-D,W9 hO3CůnLw5Ww^:uţL 6%LjXT`_nn_,K wL)Oȅ8ķDw?]k:J{cQF{Yۧ 0 F Zc3nYYe,YiomV>3a"$إ|*8O
ݬpJ}k]&~p ĝ%04Efp<|Y{ t0«obGE)E}q(pcD]uN
P7&I:1rl JMS*X\,}H g Zn3\`2O_+Xj.6`JjSV%qiɪ+\JF4iT9%$s\gv=F%zpƻBQ
|7Yޜn`W O5Qi`@s nG?@FKi*ly'A8EW = jb #C ʇ-'..hYnfy u4k+g6L6d ̔2A~9ص%b:Gٜx1GRZi}s6| ,(yzF!=w l엝9bmldp#]-@>Ed9S7xkwsʲ:t@× r7{})9^#_9^$P?WBίE͒; yb T]oaӫ?oFeN=4Lv#>PU m$ "@v)HB=wR
r+pF,Jb-OM SJ)WZy,/!JH))= M 2 T(m&-m ((2|UW+4^)6G(z2vHZj
` VVhp-YcA%3Β 9O*gfé6
&DrD |}>TkN=
m$ԲaH r3i!r2*DI%HDusWYu0qa{b"cTf""7\EV47,RPHE~'&|E+ ptVVdRn.4&| E8`yCt3
'9jlHB$`xF: )kL <:7L .JXE\rhx9uXxɳެ51>$CüzDL R*r߬Dzl(MNV qdF^N6ez" F_҈FNk " u
_/zyY#yQ uXPHքՋ4Ų@Yi)M `q=s2id]#.U I&fZq81s溋]X 9Y+Xgs-L-k;ޔ ӠB<=L,qB.~-=)Rtz(IsE\{Qp<۵wT/eñxG{MH1nE[6L\a٭=ʼnCUFLfo 9=.8ǿo 'h[ڈ~PR8BqD/J@&C,ОK#_( o(]P瓴I 9B`,Q7787&7LIlypl-(= cu[Eyq )/$5ć+ w! 9TR_D?q ~4[tcg{AzK
Fh% mcH\CVќ2UI`C# i88;XÌEXԓVOa>oi]"; TW'
Z7f$QxJqɃ2ܭ' ^C7SdJ /\缇AjQy?ٚk
Io 2'@6Ц/#EYBrFtj&'JjWQ0bzMnϚg7ÞІc*zP{z}rCÎW '%kJ$_UkAD#~վ
e geCj[tt7mRR"N,Ae%E"G;1bt7a 4Pn #r G,G#qLA(P7T։ȣc^KihHwI]i( ΠbB|i>DFX@f?D<Fl潲Ϛ+t.- S뱂hX
'{A2`a )0nOx2&ՙEFβ*EϬ003}8l}B{5i,q]abv'a
dY(-T4Jg~O8ݜ2cVH{(Fxf aXlх3:Χ) ~`KNfJ oJXR.YKRɍy,8:ِ A|5hn.2G'?WGԆ2QяMTK:$ƯlmꡠMyġ "m5qno/.F)98VeG R. H:3DE:XNRJna5
zn ' \|1P'^@5
>_1d*.;f|5Ӹ/ (a)ѩ#&pv-NL#{^?Q@~;Z: PܟľzROq>ш,:b*\F[L<.̥b^Em}*ϞaTNXGM)fKe2TJ0rd8}l˶R7Hs
a@\jHcn=`
vsijT]62:GkEr1rߋ R$_uo*"%#6v$: c2qkB*x|JjՉY]i aiݎHкcy5, VÜ_pUJ9xwUi t# 7IFArnF}鵰=L iѣ a\:exXiC2_7冿1 Ang$t Y1SKbb Ps>ͰT րpEUQ0G\)V̺X778A~Eq">HCZ˩$Q@uߓpb
i
BU\> gKbeY0%Et.p )^*_{D.Yt=ZP*XZK[Z{
ׁ }_*6m 6.#Kf6
k}XwL4U( ȼd#kIxjdnV߰U/ޓƚWI] 0aK̏>~ 8yE 4H~˥v%5cdNp)OQ ש{)֎ܰ#kGg~ qs]$|L+%!0ly,EPH 1{k"=y̬8Ɋj8QʍmPK4Cyzʗu#
rT X ~E4t&W#Zz@5'&ѥeb>Ѻk)pҲR ŷԶ3([ig u`m
{ F1CߖlG2pm r6u)j{s,D+^pN(hoͥ44ԕ3߄͇&46:+ VY'ڑ:56Y %s)UgB Q_nnGɇ] iCU{SXt!Y@c31lkRc$[$Kr&1?\C^ ph VJK
D#x.' `Kyӭ| Kj䏐aeg2kK 6z3ixr3/7,ypf-2bo҈cZ"PJ=9D&lwJG Wѩ~e&!,oCAtMѭrC)oJl*#b1nj% ;oZxޚg(;/2v HJLxegZfε)t=;V 'sd:keq`r,rڍ[z~h?Z% xz8(ksjC)n ~Tz6%CoXkSS^oryT] Z#Z2H
Tp$xWϨ$(
RGA mRxnsF| Sg#2R7 BE*Slt]TdwN("ҭa+71 v|ҍ]90ZKګηmxX: + 5}D7>NMԶvЌ ѣB)¤خڛف=h~ L J18м>E>:>#Y,۸ I]^?LE~3xOzfsi5.8 ECz^hk J'>:pHb_oԁ&{-Y$ Gݥ;4)37ĞI|BZ.?_I;uKa/;gkW[BW:o'zF bX8A1-1߿7rV dhcVڴJě寍`kO+Q( ^wSGFS2gz'Z ,G5әxs^ ))n0(&(caYt QK2Փ_ ӺL{+
pv@~lB} _[uY-
uf)a3]U IK&3{ޔ_k88+
i̖fDEղ5}J$fTDv1I'9$$t
2M;>+&N U uS2mK
|]sv WUv*aCvL-X]z Qi,F>3*d\ʜ2&\nXLTy1!4#R.\3&QA
P"f'>d u23xVS;& 5jtis 9s$+W҈ڡNJ0S7NIД7_7e++][]PTYevDSp&ۻ1
zpݭa9d'ا4G[_ aC-XP}e=grx645 ``VլIO;¸1 0SvGnG Z~Xqtg bwU o2]%t!艟x>MДg2WjdZbPCєbR0dH&[j
cj Ý|rFss7;
0h8x =}
IV+Ԭ(8q;8@GQ,?whǴ6ʆ\/I?G_Nj5g'Zl $c a M5ؕ%лgg(mI #~砖I/!f lc鷟g;y]J`rwڲ&JW! E
-~2;>ݍI]K
t* o-D):鯳6 % eK)G2c˅mGm5xr^Zpn0hBX'lտsAJ+Kc¨!%m%g *)|ƣ#AwoE7 , E0_M_XؕT'F1\!32i {~źzﱷ%Dc~<[合hN,ӟ1&y{v5f:L2i]BbϔTr\4$'˝(:i8zu Ţ2_qFE*vqZVdz? /a 0$Dz 63R!z҂ }E ϊ!j~+LN|0nπR( Ihz~*[B
Im87#Yq/ vRᶶ@8 X ?3+Vѧ (G/]+ ʄ/DZ%x#ԛ| Fy% ϖ A@$hz8K~V殝[}Wȼ ʉ>@ec,yAⰲ2A/!]u!{4M8s9aAMtE+Mȃ "
VV#h&1JB;h @{meKƟˌnuC)ӭ< i
F!mg|E͉ao Mbٝ"bV
~2z
} @ʹP_8i1|5FjJ o?
$KNXJ蓅 [tV[nr32ܾ1eiRg
λ|G?yW|(( w O>. [eÌ&n g)K"30^馻o6146XF{;?F\Y!u^XN%AH9M梳ǸU[ҌE ̓fv\L 8QPZU4tXeEy ZRr(>?_4cg~
\n.%؈qTZdxE #ѷԜ(M^[M5GR
(\#:'K̅CмEh
n8672+'vAjCaG~bW*m¿LΨ~' zoP'Q L
B# qZP$(U>nѕfd imlbx|nʔ[b}g o("K߿dm`;fLdm
qc\B=E?;Q3K< 匡m`^BJ@0Q Qݏ+ԐTvDYwk UM7w5WzR~`. ٔG%}_!Ȏ]"`kr
J .
lUxݱyO\UuѷC#~m#E
Wtk|5jrES.do|g1dD<.a k94C4_*k ^e;QEy"aEF ( bM> /l:lX(
cHH
\ڍȵ2vIIj 4 3[
{+N>*R ߶ ȁV0+ Hm~CegAi4@pa3GY h(ʄ4'Kl0SSux $^TX90}HxڬK?ǖ_ɚȃ* 0x
C1 r A`p1d\cmé_auKjcKKټ@$> cn=>0
|%o mʮFtN`BXzۛʼn!%ۯb'C
,q8}oL?hq I0rǒLb/f#?hDg& ;3y'-"8uhor)TI*rR ,uENY ɚ f{.hPFCC
/*Bɯ/˅e$Ե GCj&u+~o* .^0"oT0nՏ=
ޑJb%^-U2)x܇d !]V,eKXhe9;R\)k*qe-D'̺z~iNH\ٗg4J$ I L[^\%A@4S*O*cQ:8Dy*m
~=8q
:F7
pÿ
3wɤ}xrmW4/ӗ՝nԦ?Dkx/d
dla{pܼ ޟK=HZk ;r#D:Du1G4Ѡ N8u՛Yp2[>=3 ˅8$^ Y^Bg58z{b!kF^&JMx^ !vl1z,A }ȉt"B@|4hFܼ #BOV|= Opˉ:̒!r7 F@ g!?tNN#K/ɍ ]E\cVJ1:vu_#)c۰،Ͻ mQ\4F&$&f
S8ӽ8EtǫAb4=k&3&#jo<$_BeF!{>罂8~OT[#
eB<^\FQH/\CëAa
:M vELc5شHl*B`:*xJTNQ㟡l5ՁWf+Sv _ti>ͭVLq`' an(nN>5Ft`a7^xc̤tgle # &z-=E1?Tgk J vFQ<}S_úLAѦgxrأֵlP>3½_D[Ջ Iڗ>N( ĻC"
Nnc GWbᨛH WJΟ1* ?! ,O5uu0ԑ7D5B_oW6xOjFTEL5[0e /%OxxMI> 6Dӽw`8b3ړKw%s |-5 (rXYto]-c{JV=腄T)=}B
G͝GCe [ E%a\vpY7vb25GS*Z|8: R@xascq6/
]c)8Gο{|߳Ă+I;%
ZBUjf
۲9fG'" BܯGy B6ج!o3r!u}G +);U UOLc䱊3i).EQH=x߭i%H aȱ hd\F`OⰯr
r¦
RûlQ2 54sihh1oE®ARS_[?(l% K3I^kך.Xr\VTI\{c萤V*coYeU39% VLi d0ҏ*[7ZR{DX,eL KWlȈ<Iizx9Q/9N$ Nc_"܉e^ ,?]AXG}o=1(d84Y[f#xYo &I-"
u,PIBay )O u(Zr"uQ !06to>fF0ϑTۚƼ;e8ꐄhb Ȱ48t3(cŃP\Υ)Lu(sy:da8_w1xy J^RN
jv[60ƢҼHAaܙ}QݐʘC?<$GvF%iqZ( &Iʮ}`?17PbƋCOwj6yW?;I2@g s7 ASeD¸-l:P u4=`Y3j >@&QcŇN9ok~<,.:B?d&$)\5_k?lt"HV&jT6$cq7v`v qu,ơIVTq@72D=J)u ;VjWq Zy ChqutP)&ҘBP͘}{Q {y{_q\}+<GXξCdK&bx ѥ KKrgE3 !
}-y1ͭC~k˅YT5C l*?ogM H6Bl/.,'C=zJgFmoS0b^u'a#أ/lJ~A`_z/ *H,OKLC++N#S-I\NcY{N4۶K'4Y˸^њQso[ sܑ :˥oD?NtR6Vh`t
<㴡B# w{Y
yvTPF~v,leT[9
Cx4-F"]V N\r >wAyڭ?HfK$Dk}Ҏ<[=}S洔o='-ZAkE:y*\ݣmӭ|=>z7Ͱ=-I ƛ*YL Oz\1R\biu\LS>nC? TnxH?
H]mIPFMEv 9m|c mi`FٶZHBzF~ )-+БaL9fm *=qc։ώAI9{`^w_?t/$1"('C↥[+{kۤ /Ь~`6:c߽ZL :ӮuW<&{_l ľ l~50.;0,w c p*\f1&GBC\
8܃' /nCt.-c 9t+ohd{LJW`֨zօ.EǫL4|\9U ikqNzM%
s 4x})xHK>=@,EM} @j;Ch僂$?'}XgWƦYt >_;:Zfw;
ykJ%( o1 .dh.eNkJ}X_iPQ98N6`]M !$xKh~7f a:fF
IjR2 /B2H6^_6Obdq3]Z
?V!B@e/\x f[C) &" qe c ֻOc ;FT,u /EL#
5J; x8 :(otc0kVLy[.q:bJx[ BQ dpӊ³ E3[} *hޜTIhg +R^0wQ:[*qW;J EX.L ;h+]J2DƗ /xC,A n2O +xFetɳGWWAk/D y J}' qF$׳D
ϳ7Rɏ$"JS&O c=bCF{KV G
r<G1 ;dzDbW#N u8U6xpV JFpLlf#{'"%e?k@%/N:
Mxߡ R.2#ϝaOڥi 4Zct
͞M 3W(,N
7UՃ yy`YYRRHT:R_l=vs
OBRm6 l{
B#FNgp>ý 2rQe9nJ@#SUD=ٗT,zL4BG?d
ftS)x/.~m\9UZyl/=ʇ$_22T5 ق*]m29U,ʡ4
Z^}iʼnzP ˂kinM]"jGyɓ(
YuG)MiنqQ*([mTyDŽHa[=1|GLA<tX CֵؗP D{UA|l:m \xg ].cR>Hzn(Vd,*)uB}4q8TQe ._Q
iD@LɠzFF蛺y6 ='| sb=).M₦C.M. .&O4h T }rfL*1w ̡ YͲ?[_ čU {+
^xUDx!ZM0N4ڬvR\ ^ݝ)uϤEG&5 Q3,@Ҵ5^$Lzh@k`i!Q9tꢲ** ~s*pm<1WGTq g l{M̻ QHJѝEHk4]T<YRt c%Թ@} 6)P[9[`/ʍ19_ mb¶fŏ);BvU/NJB JC?" ܛJq7%*f7Yb5qi%зT GDDބߣLM;ek&y K5.+(Ѱ
e֭TMsg#9mX!_e ďT;yΫʃm,,k~'$,)~t,*f6>7>W6OCZkPqB>Ҧ#5=w?M}wJ/pUuɽՔDm)#xHi,bʮGTsZ0y(ϵ;&:?;!6i`=[nյ]k@#X(WXFm5'&@eϋu xəN %QPNhr_ h"$HS-rg,/yoI*R mCGO)䙈$"M *OxO Ё _T*hb-O' ɳ۲* >lnr6:x\#f *6ghZ7un SjZ$込/Z5ld\*zb]"ٚ\| 3V/Nuw#gz-YMqh;O o\@&^/ GR kDR' ╮EB fЛ>WB1a~0
,6 )! LC#.E:'i?--c;vGV29nxER\
w ^d,Eu. Kȹ:ёo8?dﻍ݉L/Fsפ*>aZy_ۺT'C̉_iyP<Ǩ50ҹ9Y Qѫ:Ы~pnHM0E!^ 6BdO.ZT4*bR[̝5hWN|&0InQc
*nw%Z d~klYh5ELŗIzS])| !?lrH'9_Dwl-ɚj1(STؖJ[ mi&Tvq"Lq(* @gtwB7Ü@Lx&lh}=+ب5p g*}?ҚQF3
h_e+sk? |pDŬGD㝈sNQʕ#) >0 hٳFJQG|8SH4:Vd9dH9'_ǹkqˇd`dQ/dQu5%`([&
Ea wԮNL[[6I^ºm{7F㊬Iz8 x Ge5ɿw#{ЀDv\P
qY Y`0mّgze mb5dfy]AJ(ޥYs'bl_9VW_&=j쐥NtUpOwEU
1 8r
T- 5:0.F<+>źYLkjӪXLM( ׆M9ѓsOK9OWed6O?QF Z=hg;!xA JzbNod=All,VgE~+#a['9 # RɂҾ7'>
v)5&=CHV5ocwL|1Ax X)A#λy˟lrHP{ Z]l(ʹ*Shh;[33^jQ e xoaZB>:u9F T'rV|J;Un]3HQwRq,PWכ=XItцtM =.~#RHa#5*0D
qN*saKҴ *Ohc>x>,gdwT|#ˠ[ẉ\!c9sy.<.+d[ca~ST[d>SB=ٛ."_xK^| m;ԛ}Gb N֘~:g^&t Xe^.Dakb E8\ʬoӶxoZ}S<0D чmg Socӵ-(P$1TXUS"OaMhl_e^}k)'6Of( d!e]dGd!CB{7L6uLm3-X] 韓n;j_Eʜ3 , /GԀe8huG)앵x|E7%t|p]o=t B*@?|ĸNͻBe9r7eʤu=E$' CڙC:. /@DEZkfd8miHc: RaSC$Yuiͷͱ]r ۴wN>O髆U\!\ ]o!7쿏jPm߶㩮 ds)Y 0\[\$t ^pZt0\C_ qqF`\Q N 6 Sd
:D'NȜ( iw8/!-@0G?{}>ýW\fM}0Dh s7W Nq} VNF29> Ew؋ l\36=njۙbh R`6SB=K[eNX+C=CUѯw' 7cHʥ RnZaz;<
\H`m/Wo!Ӈ9BX .xO֝t)E=Whٖ7ø7A!XBzάF an6( [~mC)vފسzoլܤGn
cȕ2[H|w.z}SCP6>˒#uEe単gXF#3~5|ayF;&_yWZéB@K A,ÆѶ_tG >7qt z=JYRj|?s0* B8\c\ M/ ^߱@+-I[ Qq@ u+t:^ݯ[L ; V908.-7G[#oȵ:*H-/UOTep]`y ,*3n|+3Ez A]FOF JG+8 k=]PQ[+O[g #X%xwfM4|3@11*5[_ΕlAPИ!R! -z-.K, u R]7;0-Jv]7J~ wX],`qAiHm879
C R#b]u*]k! $w Jk$ɗ+Q!R4S'V ƫM⻔IʯK Ms5,
`{~h>DD )
neө_33j68֬<T, aq7>>)pb{;ϙ1I7ݮ*
F `-O*yW:' @K\yUjsrQPBl[tF4fEx%U X)CՌy ͱh Y ? $\.`(ol{J$@9ę:i T&I뾫(t$p12aӛM1|1?4,A(YF\|[CNL&
5 (@yݦO,_xN O7P1/}QKaP+u`3; ź\W ]YsL# su9Js d,&.yJk-ZPZIW`E{!q^x1b19o\ Vft#eYMyXʊc*`e2>}^N"K9אkՈ}',BuR tdK9Pxvp14a{5@U3IR܂$`W TK[=nA`q7sUp SԃN 6508'z2V߁c9-
{Tُa2=ۋ>8Lo?jk$}T(I!!,UIeCXz59U@9{ LbU@;XS8RdĞ4/qKg[+% Y2`[ wY?MKs]=SDǿ[X 0/5{MvDBĩ ; K7
=[o+WRk3IY,D,[I7`41kF0}NI _5Ìglejp`igaOP|_!zvKƱ_MO pp =fb+;[B܅la=
lOթW'?M9!`KBw}T'Sr1?NLYG #-w_ ^?aEDtx6DF
>kId+\siN `.LUz gUY 3f ,m}+=v(
>!o>.s5 2u.CJpe1G좲N=q W~G-~,]RP齫I6zSQFp{o[vuXmܧS?cۼ|IU9y[ }q"B!1tDy\S_ ھS_8oU8i!b -|1rnrĵTbze6&uQ*ݶd%PXU,X yT3OGw [!S!0o[~Uu
T%!r'v`chC 0>o1U mXDU,sw]C !C;m̼!ӗAde0lοgW"4[ҢH$"h!ކjC~Ͳڢ_ :W;,mL
l,]mlD+3P
RǢHV7W! Đ^+߰?ԒP9 E TQ`BqSxpe
i9L
T+:j:J&H}SAݓ9⎭{E~f>*Iclĺ8R ?hb1 gUŞ'=Hey(O+BfG+XvجC/x& /H;$yGتrֶ3UJJ ~bz< P G;1×?1sn(ϛ+ |^ ܮ}66 J=n4ҿS.-V]r$ {h.7'X۽.˴"SF_eDm0hoB b"y`"k YJݵ;+#G
Pе1H*$MDz$nLu:[Ԙ&iy+u^ʁrd~ ԣE5AJmWS Is[(L6WPҽo߀ )P ȱՙE k˷$
[{v8H{_Z]Dv ?N{(q3[ 8RMZsɞ#|<|s,Jn' ͳ-GjLPm
J90 B hrUz/f1چ%gB
T
svߒݬ,*G䰦O[s۔n(Ԓ](v7Х06tEȔ@!fl裡 \.A&8@V>n+%ބm?ܾ Sn /JyMEg r%``f {Eu? q~
㕕j4a;f;
7䢝GX LÞcG蠢ڳ1aM h=~h7 +*0 4\ :zIZڊ _HH%yѯ6iO/63VzqG[_>"qBj~gO`wv#j.k6b,[ cRQj6^ ߒ6
ܺq*gMT{d&0ik%j8 yx~>åʛX`-E[Wa$zLD
NJ>=}#ZQvnIRK v?"]{&y8A$Z;U
٧:M> yP/t:PZ'ٺIg_nu&wϜ(,o?sD+ ~ Yk'z߽glˠeTrrCN@dݎх§1gQJY7X^6BF
7Z!rb N},yzcRa^.W|i|M]`f>Qb9"Gڕu| dk$\RN Q{Ln -@_I{#ARM
X^Yk`p}+E )ۯ\w3NO g8ЃwGRo[z+BNT.XߦKߥT+37H) ~ eEXi} ǂv}q(Cıa:2> iz|1Ǘ eޜ V2T{-7th8$P$^0b䮣`ԀjWtFw# D`T8Y[?=L% 2B]{ b[e52VZ1X/' ԧHêyL:xl
q%B" Kj P>2;'.
?jl(4I1hrrL@M
+"ghRBKoTU%.Fh \
TA^t_U|{v aU1/2S ~A?< OKx"!}V.1JqCQ=RG27e VxfŨ TwM =Vo |O_u6Cڈi\ CNC
Vl4TΗJ 6.lcYX8 t<v%FtH]Byp
Aε(r>UN^]
5!.;_פG'Ώ weFz h ^/Ļjq+x2bx |-z,1fE $2\1LjrS[+x[T*EHZ#u+tژQI
`@,k*^'bfb9Cd
,MA,Dd;`&=YkFc:=Ů@b=Mf\df,-M!wj?W.i۞]DĖmch~?S;^Evo*{ z aj.tY ڬr"b.O$]26(F?K ~\{~gH 9_TRzk*ݬ #lF>V0ȗRxɠ}KU*ʥlnAU6S?h1X~P@wчia/|fS|ڜz Ⓑ)ɅW h)w#:X= \`s
]ɘO^]&P#@i&61f4D8*
rI$!*`_ttjѐilr:45 3;, yd Wu9bs/ \ *\E)i]QJ/Kk6\gJ w#E6 "9O\xlj0;aC _hcDǓCqu8l32ׅ$§dI,>aH"- gtW]e^+w [ Kr᧵(ʆS(s4eZU-Od7lNBX}#|$>HЊ_+võXw
=`Ed·aM|9Ev0|
B?$ǀ4ک\u+'&'v_;a]9=T `*&@(l1``jJk$QYU e֨jCDV_^ 4@2 7 Jc]pGj!k}XD lM5!,qr ݢn;;3=
! v}Y>F{P aSS8kHq>
)IMݕlĜ Pw[rkÉ (L<{*ٯ\gfT
DjX&I ~eE
<>9e꽇z&Œ=6 Q#4mUY%) xq䝆(dW(rĀR}x0 q+̺`^y<!VŽ 1)ٙ{_jMyXPljޗML5 EteFLDpKdҍ6Ε>]pbzq,} (Ο`eJ~6p4pvC^0N91Pdִ''ƒ1U=
[5,Z8AbܛzIS|]=mB:
@v B
_9 ol~Q];CKm! Mo[gG_-&3 ~3w|fݴ J?V&~uaOa4P[q3opK5Õ2sq9.Tk-G(qɰ%rd %? ?ow-BaM4UNfc92xfF:vӁ-.RD}!L)!CC\93@7fSsSDPEo*.K&5?N15gFL`; Q(xL$8,ɢz4+G\E 0&
;.A"Z"6+)m ΅x#`d- ]Y_m8yexx)+]SE[|ᓷmB͕.
#fg?>Iֿ
%U邴E3K]%FcE-Fk?xw4Xpco
>P\C3 :&
H`SPM(>! hhǒ>Jd
(<صBs u=uyY}3<< v&osK~IᓌL Ȍr5Gszt g
$=>4VT4'OIƉ@cf U1r%g{ 6w=fmT )D&'*)]0 e`+Jrj*C/jt[ 6ia''?NBnB ;يg z4XMos6|$`/WKX8q ~K}q-@SB
2<vsODk zst|EP
%|MN&l#}-V / iRgIc?N02r Y
6oیԃY.+v:
Ul[BTUz
Jնܤ0Um~ Pi$Dt!"U=N
h N6IYB_DHZ|zs8OXdyT8fz$]Ђ
:7;|S>} S͟c `6-d D beAXAyX=3}O)3vpK3BaՖv4UT,˻tG=ZߺX ÃNK w,"'잛('^U\>ej2gc~͠w~W_QǢcLkf|EL @Nf xf?IRƚEE;!) ܊s@
c-=8 R⁊],G>[ttܯv"?'\3 84AFS{or6Vf@+c\ :F $.%.2"v :aQڬW8c?ʓz|O;W-LhO{Nk ߚ5E \ xZQŲ^4G߆pQ g Ԕ7 @$SO SVCt}% '<ۘfsn Ӕ Dն@Qwnڙwa: (cx&*DG
AZW'JϸPqcbso7>_j%vOF`(7F#}Yyaڵ0oӮ5-763I%.G ]L[B2.$C~g8X POHD"Ƹ^(_RsC6OS*惵Ʈ]*'[e{=kЊ!"*ܐn?M.g V9 D\!FB`TFX g`iP3pݫxawY2ZT䞜pwtS2+ s߿Kߙgl$[HyL] {dH/xF)} j% :p-ӪW{y9!.gЙ=K{"MSC`*z6搵Ifm*!i)O GdЀ]6Qm;W2M.##Vz{ze(["^Wa.`)) p<͍491lqLxG#>7wgb}n4 DE!7Z3W j䮎%5K.-efmk$vtFUw:L%6̖]0LyT첁Z_%4@)Rɚ7m)#)oڣ iEH
oP ^ Wjޖ =o]1J\8{̆e+N_FW [C?L[E. ߀3qd)0-'q,ą "k H Q-P33*.9 Iا8zư Rg, ~@I;MA*X;@.RКGj]&V.:q,StQAFl@` .Rv3W=;F|A^n* 2-Vv<$O"V(O8ǐQ8l?&#" iqBìVO᧮G 6
yH7) `V,rń_DSʈQɀ-N6L{.g1"*ir; Z&ߜ^UE3$8`rDz]6H+kY7 D'w:!/bbo.x+~_ u`H]\TzRbVNw6iՄ&k
d('Bj
Ph"lJs24Ԗ7goP:!|=Z$"Ky$ mX)ݧaO ^xj44G;r- p?3;!#+Þ~ qY⒧ hB ca1Q0B@M[Om9yrX}m3C6bIƓRP5xֽfX2J r!F[w6 ɦ/8x-3 ,5;a>:?7|dsYV6a|͑Qbt5wÄ_)iNB .qg. ͧRWJ\UEt2 Y%;:d.E J"ݘ懋+XrkX넸 x[7[嬠utp"N=!`g hk6GA#-&pY%7]q9#Q K0^F;S vf;4d+D]l c5s0hdk`. S"BNT-w~L_{uX/@v\u=YϠ'j#{Ֆ #k$Q @ZUN"ҵUErUɼdRN7<^S@VhF4ڼ%3
Hd lT-W&P h/uBjgr($zEiup
䨬VǞy:3vt5(u@[?I+8Ð( qV^5%|jV> X$$O {-i3sӛ,q -apzz x ۏ%2SEh[LiNńG0AӘB::!VZjÖᇔN<|J9 VDoL
3kz\ށ1`Іc
e6©1;:$>wyxkH(//b̀'+E&جMʭXNf%L=҂w3w_s:R6
Hs^rL4
&ݢjc>[G
2niC%CAݴEqƖH rc 9X
u͍ v ƅ$x*kKWtU% 4SؗSoxR̋JD։[Ne13zE7iӵ)Uhz_#o,Tmgs {}\ MޞN_Ym 4lY,Y9 /i'F#:Q,WٔƯEjD6
?)Hs?/kӠ9(+ZcL|: )<?уOL(6Tgu
܀s+*[3| ܥ9] ji[))S<y}ѪovfU#q]t3#̅mE/qFUiuigڦy91
@sҦVVq`
s:9:Afk٨ u!36Ɨ
<7YTow -ƕ:Xٷ~ݾ\XOv~6]YqxQ+~9h{r 0C lfi. D;H
%$d@̶o2h⣏;sh'NM
Tynw Z֥Mەv[KYl"~C
F]ΆuϴXqQCԜIH\_ A ##2LLخZyi26GIjd O-Q_aZVV
m{%XcFy; s"B先o0\
Z뗝 f{. zn;`9z7_8Zu_~ q{srMuq! kCy2}u,VxO̫*zt,=ADt9>7W))
\WwbA9ZކLn>[$xB
jփqD!$j 3 }1N* @4#[5QF+g]m@1yW\;pec.l^ ~03Of 6a,C33ls2*_8'yLͤc %Z yQ yPKT )h3[G5*j>E F 7;, f(&3g_jE:.E?9%]2
UV+^@.4K[ #H_0KP*?/%-0=xlG|%S&HFĆ(AI ( qM.9#}o5$&*o w~Zz6ȦX¦Q g@" ?fM-A[2
017ֹ@LR
Ŀ 'Zd;
/fկ1B*Q 67
Tww֞F2qRQS Hi[t"+o;8V@H}"#vYR2Z^r
@ira &wlvEo%1nnE=b& gg3恟[
1=pW2Բ! %1&
6&D??ӱ(=w r9 Ǔ:vOyen7.gj#S!Mw
9W{'dƈ
l8{ɣk3k8DpCCogbIGֵ (q}} `p *
*B>
K^
á\ QڋR#-y][%ÂARw\}#AVa E۽p}sqqﶵe5GA
0젢6Ǩ oV9AB2R2V
']yA,F^&X_jC؞q Њ.bKcߋ P /:!B>eUt
E^yqo5Dg`[IõՖZP'^r Ji#ݐXm`<ܭe<MS?>3sĜ3YĠ&4!.:ƉkK2 oWJ1?~u
.8.nNٽƓA%h uXQ cHJ%ʞ?,̮UOvSpʯ( G6ڎw"#\|G:t.qjhwkةxo^l PejCeF)g K2D!Al-(hXOra^;U}&z f_wSows(1
3K2Y({@¤S*9 zbC{" 3tG͉#.laY#b FR#s $F7 ֥+㻲2.
ʀ(`կf ;2dX$obWvrnc L>O'`փEul
d$(}[e~C kQsrցO<&!kLM=S ;'
K&; 9)
\f;b|ʳo"b3&
QHͤt]
Pz-j5eWA$#e7+_G\&85
(ARxźv oe$aFӑgU<"*G 1
Hc~/H)aYD 5]4'6 `߰ FQ~ {([*O^F7Zc輳pwD=r%Q5<e hnwys"ШyЊ):@+Ph=6y5j:J|%$[p{yI-p
ΤF( XdB*C
^icx՜б#@vOwk)նSc-R=JC2k
)yX(|ÊS˗*;eܱ\Zg*~Ro> `d04"}5,\;tdv%EX50ekIX枟N'f-ՠQ
f >4n+:{^eÔH2J M1QŹ:Μ2 ȵz`aPkw?hs??!@6VgÑX>eQDKSaESK+
gJ-! "~2(K3(z$!(a("=.Bee_ucMc̰c ߶Y[q)ny{O]/r!p*:I&9vd4w 5ᡦӌx$haW@ d:7Y ᕢi*,@Ě4Wo4uO% i; P! r-NVFZ× d*k `9j;ƛ]h惘;jkoƩ"CbvǭЌ wc])lxTP@d]I؏iX y|'IDo*Xdqd@ 3ʙJ?a}msIj p 99 m!;l8Nn !}߀xs Nxŕ4 2&-cHOykemKcܐb0_ ŀ@:"=A/*x6ŬH_6k|Vj#9z$K;LRmux=_B0:bsG40`[ .N'L)ui"V#XAmW}HjTU\侜!DŔ4g[~2˚gT'F?&P
as+KsgE'-f Ԇ-k -/q
*4ߎDױjtk X۔V#oыhOTzS5TD9ϵ͢o܅J AFF7GM\G5q ETɍWa#䱷?Az{M0nw:#
P`Sa)i=[f`n,?n"6LKRM.0m ||ҡS m$;]RNˌhC[ x'b9rX/ok68]L"ipfI햴]+:a=I?/q_y2Yʤ5sÂ
W]LwT"}i]njy ~vw"!.>u&Jc4elkCoFr:T &(e؍j킲
?.;fŬIݑjBB7̀(l4֭UxH,*YE-%! B$5. &"Q3M~*Ov8z<T@([yׯxXc} "-aXcc:f#)+3sU'gR'`KHkNs$>-㻍iDFX)=iev6-o, S!urPX DX|~'ַhw+<o Ty} e@V/N|B9a#sm)KXxX8|
2L~Qy%^no;ZZʭUk
#9B%thg#/)\
W8+_A9~)T5O.ҋRydK%0fB77ԓ7C
$Tf :ku5;BဗNGXڦ~g[uT|H-Nj)Jix Jaӗ
n䕽_Fo^Qp5+HNwǢF I7N+䍎U%-EPNj {ҌK,YdP0\Rt<:*lVFkm~7.79]pihi *0A^ھ*JiPpZ kގ:_r^nE H(i$ h ?
Γ\LWF:Y'jYP#ǴoK.d&?&
8Tk,ƙAIh&\Ԧ5I ;#?(\ӵVϗů3/2}?%Lsӽ/
.o3{
6yʠS$ߤw(#`98VC0.줿'9cbyYAMLy l.As'f~fsW魃v<[}P` ]#Tlkp&Ñ
eX}(P>ŵoR_\x>6T ܧ Y.lF]ͫυ9{vc ">p3 I2 ^,3"Htx\1,Y/@Iph֪Ь!L㡄a +N}TԺ0lנStު<*
o`>.7ZdĚ] u*$wCf*q(ty6;F\pz' khTC4uZGBЉi "?+"0-Nwݻ:c@faQ~8zI I̫9ON9Ys
y(lmS"7yW ]ť|
1C"ߤ%Q!b! J<1 bW YG@G 694LvHXdnܹ; zM~:Ү1 lԄ?BOTb&'M}#;:2U&b8YfA|)s̏#!e>x7^Qq %~b?:& qE(9fp2@jE,ҜmLS'5~1& 9M%K[p`@R7]GFݠZ}_+6w|EtS?4SA_SbQ<1swfg& v>N8|\5Ȝwb'6;iX#x,BbIE ?,tE@1è;"pXi4jҨ
f- n(Yb Ī*-1܃Ý[ֱǘ5lK dZەE fz2g\bvd4ьdeE# qg)%h&ҩnfVƵ{@eNv}{9A̞ g+#eQť(e R+dŔV;p^]Ij u \ ) 6OK_`kŮqX&憡m@_Pp ]uɭwKiN?4xNOJ;Azz0*4 do G5e%S.;44ȃ %o*0_Z> :(Hli@!9Gq~&tQ\|E EbBrbfߨ }iu~ofV >W& 2 EFoIYSk7x{0/ₔ늸dx#wjF8a)RT&:Q 1@{:S1;ЬSf Uk7WMW *0lj=xUJn%7 ۸R)"^mjc` )Y~ 70?suf(;b>Iv >yc҉ֿ&Rl`O+aN,uVX %,p^+NWϑZ1lء? i @zU\_߄3`S2Z4$QF%
us̢ Є"@Ưx֛,ToLs-O=!gE$pW.5m % ȑ V nAj٥ΐ{ϡ
Dd8ݠ'ޠ7A) 0" [b)4 88 U;u2BL ˯ sq
_5-(XzWAى 9v]biũ|)*` 5p
5u#w#>ɝ̤$'}Grj 2d: Be)ʗʦ|T\Z$"S# x}=ә U,WF,L }#gUSmvȊn2PфhJs9 :c?dqHci_yQo"8Qx<^ a?Ÿ́1 $ӣo bz
X
xн_o"l`⏞B!ˍ1OMjs:0#i/\ѩ{G^
@+ 2paQ.KNՏ־HO]̙b]/rWnK)F % wKl 7(,ԧ"9E,ԩ>ԠK_f)`Rݗ& <6({)5+D9U<Ӫ0ٖeڳ~AGu`7X[s^(Ei|p ]0̂ qzo#y /n',.Q7y=ߋё*Zd.JsZ~L 19 1N$;P)v46YLO|IOjK Iq3kE0+x ]rzJ :21 [CK; uo@X,esfoƗqZ1;86f\+D䈎/=?:,"c8%PQ1$0do`YL O ̾b c =ǫ7ʞ_-ʾF\m9oP]&YSe=QOmܯq3APȺHl 'ZǸXcE;4m6^*4=V8=q" ȝJڂ ?L&l,W8.g|6ƃ(L>Qwp
çok. G.l?챪½"|P>Wջ\ 2# 0)W6
Q"x{F ])w0BY1Vy9%ulQj|bV=pV©貅a0uhNI\!0 "V]?پOɳpM _ӒsG*Af?#&thM^ө\pC临) @JOJ۫l$ u|\zlũ7kF]"o1/|\f"LݴbɕȖI.`%ۼ3Li )Fe Q4KEt(4%]2ޗ:ätxeh
@љAv *(5mH F8{U2}O
ɯ y&]r" īY;razF.Mhx 2aaZYM
teOx2 Y(Z
zUI1I<%yB~r/{iS(gJ?
z..ar Y&K:;LИ8[ۧ h!.e 6 {elpG**Oq+I|Gݩ½D=$l 9ԹJeLq8,>F."ؔA}|r# v) ? & d u$vj YKYQ]>3|fj4I53ߡP^70~3UjP"0.#a6HM0H~˸f[|sSqLO &`xGkO×7-Tb3>Q8e0! h]"E ;lk2F0r
nn eP ]-4bs/ﳧx:ĐO n}H> b0Ih6 LJ-Qa1)w3?݊ ֆs'0;2̓[C "OuHa Colq~:?
f$v3ėmڙDzsN/8^2>z(t4逇R͢ WUbjTBN 1)!{
u2}!;9odoL)P
DN~{ͪO)IbyzC^vGZK7t(z)-rLX g_UKd |obHYڴlн`vo,.c^Pj
lWb)X0"K (epim . +\&3GI5Qcȴ'1T3ݗ'G_ƞ^jY%Wo{{T4&hA3g:{M.wD1`,DubmJXyhrfT8\AT+ ͖ [I,$KW̞m }v#ն*;$%fwF=Db E0`ekT,y^PZBƸ Aޖt]@ݍڙ~T7jWLmu(s+3@%s b[ٗw*,x"Tl%c0Ӥ.[ 6V~S@ s61\;PMҲ='8ݑS۸.KN]hM2oXgĿ}2DbEu;h1 T"G1K#αE mɧ;U.@RNs
#9zdp
m%S!,tuҵdѡA)n[ f3
rRv5B:a6h& J eC] O
Yn"kv{pj5opRJi T s~
aQh_p@մBY s*a/-|bRnk_&wZZ-G:
3/h|]뮯u0cs"NQ$2@Գbt))k%1j wRuEO'L4VD!X!¬v>b<"RLt*R|m$3tGiٴ?5k]YqO\TjٴFrsa%OD !8|n;sn Y4X"Jڲ: ] ˋ`S
7حȐ`()E! ~r] < S
^~~ϱ..}FNn,d5KRD> o|x0ؓPit5 -){=g,^nN g < >Q'4q"3p}iĠķ0h.Ĕ(wpN``pz?yxS2憥npM"/L_&[Q-\ ٵ#oh"p⡲ul'wL!XEywO,X;5Pw"Dg[P{d#" U ܁]e4} '!` \⣊ rY'k\]悈3q趀dY 醠;>"в)M@(6'bf߁T 5 < 9 L&
8"tQ}a,X [o7$ ns Z q @beb{aA(ך֒h
ZK6zx=&è~p|o.9N>0[@R` joM},\s7f s@
1 7 #=R.moF}*ֶֻ\/
1Lwm g$- =^a
x C/(Nw" fEMτ/?hv tl5 ^lժ,upI ~ tT"q)1{h=%P}?H$ŃJɥ `ޟKR
?(q%
뼵c}[cnbZ)blH&5 /E||Zۃ /:N&`DŽ<[a~{3ɔMDoyN _j\ehXb4\ zr̔iwYD
áҎ\x[ B[GFYMȫUb^KJ/y(*TxQ/I${%@=TE %v伴G6Sbu~i-VbZ_
E,/ ͦQCu0)wbȨTA/5vpyu>2/$:7 V38 p ,:c>4% Yzן=c_%A ?Szʓ=@gE?xGٕBkq_]x{ŕp ]fq_4b@n0-ZywO :7MG!)/FrtH4
(ƗVEK ?)+$f Cj폣HSiH(Ua=G\ZvC6ܐWȄ3aThq~^hL剏T|'#PuLo i]b JϒzULm)ǖ]N]%0 J}tc$NC|;a۠Ǎ.6,ܕ CrU'M/'i:G&QT+w57݃c%K!b$ы冎)Uѩj7o2ZFe"Sּ{^v.ؼ抧%hW&*|Z,!Z.KFnOoID2"+1|)M/E_\k&4so1 |S Kⵀ4s?4XmXޖ'\#XH;V#$"KIH~Ŗ ʂ"
. 4Ϣu /q=2?$ `~d+ʖ] 4: h5;ye &Y^g:{ $J<@dM0ip~:eH,ugH5,vk xHyd/Q. Lwwb>VA">
RY
=gB"\PGs~ 2%PlûLn"#`Xn<%' 9SMT %.p=V
,oPǽĸ:LW-X-ZZfgDF觖l擪VوN+U.OY]>?| LلĽ#)_ '̈́b,у I ɒ)6kR}WՐa+Jọ8/{}&xE6dD[6!/TBP큱zi*W$p*?|,=ޤ D^' 1Ar>T{VlE24~u|$E d!Mt7-/;9"QmtZ3y%^a :w:U$@ "5s|IS9Ź(U
0Dπ#El=NJ z TR> ,ӖҨ#0Vz FƟ,I<*͐icroЅhspu8DjF1XM&.
=
iSA]u]/REuܜtZztyrlj|T9S(mM>@; Jm
{Ej8N q
eۘ.ZFա~CS*yݙM{U57r[LJ= zfL~:(V
( UcocSl5ۏ
+h̽3
e lfm%?=[8j#cس]B?\/`ݜch En@1evʜsu maz>%sfc
S*R`q U݈
E^aZgտ6W3끾Xx"CT0*JKɗ=[B$,d'3 _8tW[.(ȳ쭣Hhki49P_n,CmrY kreN$cI%3M:sú8 h[, :jo픁ǿ5i͊. Q ɧ3'I@qB_g"iu F(U =Xh!RmIGfG{o b\c7*l0 F w;ts128n
IwcUp"! 7 Oy aC.]׳bST/P"10t1-ho3`ug'zC
)q{q8")qˬ2pɿz7 9 PR hGgt +dEz}pҹm/5@;
:&Kٖ/,SW B
c߰VJ
-h.p#ΐq*ѭIasVrhF" L鈼볊LM`?7:g*7JqŃJ5^aUWR s::^m}B#l)H5($ ɣ6_@ =K:d!,)t(6k%vֿ6ӡ䤐jHK. %;|̈;AOC}ƧNFnA pGc*_qwh}f:8{GS<
geQ%p_.sݫRe
qpi D,86l ۵~!Q(űXWkUΊ-Ǡ3
h o؍r6`|^ܮ8~zF\boѭBVzߐ(
j'Y])JO/nNui Lڶrޡb TD23 M5:EKX<' d5Ü DWF@_P\ѭ̶-GComil/ )D{צzISDnQ21
x %ӊ\mtۦW!zH @pfs\~pI /)װT Isp8{ɪGecX㶯k4/ELjk~{FU6o ]IP{gǛq c%OYdDpo#_e5n5%;7
-3?uw GDnX%mζZVrC0Nabr7"GalR>^"I]vXpI2$_!b:9\j,:5LMxHTY 0 8 dTLd8EbJ6͋xm+:vG%3>FD?T wfV(l<*!ۄovN4zb?=8 B)Tvn"` a}\ڸl!FWMͣWz0}?31IMh1XLs)QW1 h[`2qZv<"`h+) }|7*6;s=Ѿ%A\c^IϤA -fvt7O" !a>Q:4G Ҧ$ Ey:MPc:țg`hs% 3⨽#鰟%:M ]PUHZt,ڻw %ȴ80zɜJbq;qZ]9{M"":=:h!@1BtMDﶂ2vo͵o*=8{ ;W:ExP %LmR f؝/
LGó~\fӱBfa TӪȞc1$o?Ԑm ]YdUφǡÒVqZL4wjzMKv)# `zmo(+BOI$ !&T)kgXzPqz
_I齜ȌjHM@7kq,9Թ
{ɻY=-c 87˄ ϧ4礸U,}"{ti4@*]Psa%}d
==tWzEM{Jݏ%vdr] PЫ ܠ&I!X fY(ͪvoSQ*82 ٕ]Ob6㜒3,L;!0 X1H&s# 8i
9I4q(q)kK-k{Fu~+y W84, 0/̉@Y'9ɸDɽ+07,Yo ʋ=@vfKL_ Mؤ
PӜJQ~ UV^z07AΐdMW^xs(a01j&0!wҟD͆4qt/c}d~Pg:f(%-q
-mtZ5(
uO~RVe@}Q.690r.oKFs~:~psEe8r^؛s7pF/M.MAC̾qn,
HL)Z.3;"y:֓.@ ň8F({V inpw P J퓓kYEe'!f p<
YZ