apparmor-docs-3.1.7-150600.5.9.1<>,܉hp9|J!k%]*$xc1MP&gjrnr^-B)ځ^4' tL0]ԁ wj"ۭ#L?Ik?&min1d?Γ\O8SlM1Yjzor0m=|rsۥ*[>;?|d # B 5Ihnx         G  T    @P`(89l:}FIG` H I XY\ ] ^bcdIeNfQlSuh vz,06xCapparmor-docs3.1.7150600.5.9.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤h/h-heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1746532570 3.1.7-150600.5.9.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textdnB$tx( yh{+|utf-8e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3?P7zXZ !t/&]"k%R{_Odn-)pP~e$S5Dk.#HVfɏlj}Ɵo@wyvcq9겸,#&l6y ̽ፉ)wvoY_ }^N)%4#Pxn e6X'-n 7pf#*ʽ!+o*ђ{FeT5lAʺ}ީNBj/ VRmeXq]pJ%c|M'"}$[g3/{UQ$G>@ޒ2|o'˙H`$+հk8GHr༄T C R>кa >u]IQ*h=ӓ@C I}%W[{ޣyuS?hQuj+# {5IsM뺙m L-/1yهW?ΟQS?i޻ܬN3Όq\F²R6S0rWH)[Ӫ(QЎh)НwV86ߥIn_TWS{;|F^.`,c_-;"aG7 JL&=_s0Ck^!Wm)~U&x?4QJCBϏۮd5y@@1ہFwH%]uք]`M'/q:ٸ>G a~ϗX|)WJp!k<_U4.;!lo`:/IL,XD,P,[M%.v_!dye4ۦNJVFTugyQ",[,{N1>f0@ک^ ~h^_āX{lo,("2ON 7c1ٯb i˦w_E6$tѶY%<{VɛX MEA]hYtynFf%;CB-SH34AT)DH\P/xPv4 fݐ!}̛.e씙`UVt7.$oݓU!φcm^ݭ(Om4д1bpO>lR2!`R NoQ5`c~~:mCk+ F'u3*g2uY7x(ƹ+. doNCdFbF~L$c p5sǁfB˥;.7#$?xcDBWF/ZFpW VS)^9yh'L(pF0 <ݪ|VxsI𣬝=g_^C J9c{ `BQk2ljO E4iv'nPY^^U!F|LGs4', CPnjME(fdؘC,>pˑ/mJ)"^Z>–rJyNy鏈w R!`__L=T+q9tklg @&!'0wKH%bc* +: G\MdO+A-/}YN%JZ\#:="U$q(X˨J1kѴ!摁M ]q_ "E>Ζ=8~TEѩq>Ô˂t${tdETVE/mWxׂQr "0dJ7-E0pEI\9BrNˎ^NjBxf؍&w4Iů2/\Z(걈rQ$oqĩr˸^zĘ٪:Z]z>,ӕ66{hv/ue1*wJ {1+gH]j `fFi$F+@q,6"mdg9gs8AMi#JA B-|hYӘX Pml4-cUaVA WgҤ%tbH@$fETZFE|bZdhmߦa<~ykJyHK ݧF[CQ΀#d iҟgF #NjU6%//hXd_L;2lZe1>4&W6wMle, Ntkq[ "A[m~*ƚD{}T7t[Yw&sž.X'1N!j( W! c@0?垪I=10+e^왩qQ:p>,L\!/eyWZZݧ [~&r>h2W_I?<2G;iy.4/77A5wJ/ (G|,iU{j^YO__7PX~ar "f!TBBGVFuB5e4s8rCluե4/?buqa(/$m6*MfMiSL,=theQHHg;f+ =a@o-Afi"QXьJj3'-OKǧ'Ds󋅦کDqV"Ct50,>V+w' 㔷q^(৵f5 <#1 RAN ;`gF;l#f$'}ȇ[*~vC]+ p;kźNxc(95Qko%{x>v/wӒ9)bjZ&6ĿK%`L&U%aRԒ:HEiX%Qb'e MƈVQ鮰HKZMudi'Uh#+Gm[[ƆOMP*XvUvFo1 U,ֺ}ۡj<4T4BOY웭|1[(M>),W/ʞŚ&_畁v5?%9XC=܁m֛3'\pםwǪ/01Dc i湆5o;@K6}&4Ԋf[Kz9/L:h+L#"Ph;+>Mg{1~&3s/2&<@4:2|ɯ *ه3|Ed/r9 D' eʅHy@ cK[؊h$w| L  u݀nXz7Jٱ5 `?Y1_Iqa>X2d'.Zl5f )Mt= ~^Ӷd5:=SVusm¬=:W k!ƯVĉ>f0:?D)Ͻ:49ȃaT 5:U5ȋ",4|eh.#gnb%x\4} ś% Grd M̅U{3J^ j6QƒY8 V>N7B.4@ɬM>IW)?;(2OM,>۷B1yNzcYoNƚSBzY${84`$LHwOXBu2d9VmlˉJcY~fu!TBՔDUH DBXnZۦ6l&! m@'*VF&j[|%rȠ چ+L}D30 +.iq <+Қx*bYa &.fm kdHAeí.$3!G;Z&nfXf% 7#^l<*|cIgHnwFݤryx(g( T}Md,br·xZonA6+57)jTq2&YKVzނFYx4H. ri;4`8mdg$X^Og:oUKؿ!&&E~*EȸW =yNVG38ں*iuyQd)\gšE}`PY3h"݌>* 39V?]~>2 *EkK~t"FU\G lZ992K@|QoW XA+\̀d `ذ"Q}оj]̹6 !>JWik`=LAkv ,a1ΫZvBR8y 6FU! t'JX$3ݚ5b:>t nA"ɒkUM|Sn;*^\i'w\g8щN IW f3oqv֭@{R+Gge K?( ʀ:ƀ +;CFK7T3(iց4@^O%2223L+08ocVpWx(d=[[Cu[/ia?v7r3`Mӿ(oEyoM2JXE8( AmN4.Xz\EOkj|\O<߬ DzUdr \2ʫ+?!oJ8=v GnI7yy&JZ1I)Mc5/1fyÆەĜF2L,iD qOY2_ 9 `8fZ#¦ )} s|Q6\s|>/kVt-urkUmȂ1C(ΐq'R&uyClɵȼ]?9\$}&Ȩ@?YB)DnYhv3%Ђrk`ptbb]dy?ȈGxwւAg%(j{ :nI< pI ĴvY[ #J NxUo>=&]@v7;zV/!Fzd|PW%2ur$}1 ď:⢟HL~ Wo]N %N.{qN K#J]&=x\!e=gulS`Qb z55O`s=U(-5mc6l5FKj:D;@ gBkIMJ,7DB2h@,0]ퟟW]9sD>#x !JHϑ9/ϗTc qoX] #q(/\%B:^AKl|.`&+54j>:Cvc. Pb~rT**GZogN/EHƗ8Pՙ詥|އ5xEI wApYy<}m.mܒUoꞆRнp!wC:}*oJ w#m Y șIWWȨ [ƛӁ<Ӛ<ؿÊrMNg5u@.$Op̪y}34ܳ(,q.?ɉVj#[37+A-4y@Og>Qu}VE?.;ރ',LG0boD漩1 JN\+gi#VSx9w  j7;( >>q3bs[%di“˺$LpKA kgi8[$zn&H2Ss L{5]bdOXxV5gg6=j7o'@Ê2Y(P /傰 [ģ}msWLsjT&`ӒѾ X .d/"}E z~Aao @3噲.Oz/0<.<ٺ/j(|?'â:"Q }9U2|xh o/8wÒPwlc.g@ fE<LUerp}o/k2E^Nsw1zi9XD3U/QGK|e 6v±.:# GZ[Y}mΨmxގ䛣TenMi _xmtsEPJt%&,ɴvܰrazCvb>`!d+A7CPENn iYK/2%MzP]>' =%e3m;a.81e􌸓%8 .1i+1oKϗ5* !qIKG퍉ms?cxO7[<?96-Ug82k}&n݉hx@f+_%Mn+>[36a&',+iﰒ[T",_ WҨl_5/ 7Qּ6DHv6{*eXo@.uW'm%{C*kҭSIiICFnh"ظ@b7&C=TsU78Z.s Bw2QUE (o%Ŭs@4Tq~1:fy,HV5Igx(}7J!0 QL٠9䗵^ohb(/W f3,/bpY;\-:TMaSɳQ/vH7;fDN 0l8%Z;D7Dju-fGrk*3cc\>7pwmʐkrVSoGn;_Ln80:Zv0jsf#Ny`shOalfF"1;mkwN `OZsch O'G_~D 0oW  Oq2¼_<:^aKZkƀun yAm`c0/cD-^*ֳ0PDtUs^IXO㘰//ÑS<#wK/2edqѱKF2镻(b][{=,w+<2_I_L 9THF'd\3wϪWsgf}wϐq0R]7SYf:}bk oɨ \`S&H~L^^Ќlh.8a*|oXJӠZ!0)'H:j7Ott.62|˶1 {\3hc52a?,k'R x˱ 6hP,2.Z=Y|jJg73P`X\zS`%i/g ?cIwӹvk:rr` i _6ȝ%?n˱<Q]S|q;ٚad1/h=R4cZpkf/ 4-(nGypwKYyMS: 2U7ؐʢ9"Ws&\,fLU5 yv(D\yW!n2OF UMO{<_BWq !`/,:\1˧NV"Kv =-jIҹg5lSc#/0LOBMR>}TT50G 8?G_{B uZ7Ʃrъ RgUu4Mi|iI$P~>3MVAɋjAuѝÖ+>rP4NklwGlm2v͋h;YYq!)Yz鰮ު{6p#W'G)!=ϐS(q.B!=pw&C:[qě^o5$[ǹ[zv!l?up2Nx9?1KrQ0WcNB ZBPFu@%X$@S w;&PA0:U\W90Zչk )L[^VA:MݲAw:N4lW,vݢ grˡ i^M~xdjPߏUybS]ןȻgQI0E~'H3Ađ9ejC;"4`ؕ˫d2wyZ_&`_8HvҰcۤ,M&tCts9sy)z[aՊck~G'ā^*-L2=nf˓R ڈ<ŏ&!a8\SRNF Tk`Êurs\nY\S4oRhcDO,aQ*>x '5ftw%-Ҵ: e@vzQAmkV#ULs7TKmDcj(K@jaO: !45NUó33ݞIn`!md`5@4?iÖpJǩD>+e7)􋮲Ï(^6)GK.g+0*L&XCPViȿ/֩2|.U{1N8q'AϽr).]#VdП TcWyycuE)tMw=չAKC;q4wT)]k5!ϝް\>.S'**BnZ=LP0v!GVϱ,O-4fQ6Vz XE*8 b@'i B3E~eK)\e*QC+x #sNf=EL4&6BDo1<lk!qn5 Hk*"wԂt}림CCVơ( [$\#_ ͥmUwpI%Ϯ34D*YI=|p4q l B>G8C EKzV $UoG AzR5D뫡sFtx{E53ЇR%?vset@ I}>ֈAEa f|]Tge`!_bZG(rQ㲳E'" ERb"6r]|?`MǑ?,aX+&j7cZD Lpݽ X<`v㭏рF31'V9r7p,L1gՖwD|C}PE[mhBO|n8VTw;hQ 7> M BXfpHNWOV0P#p8}%MKc}NCI;E狴:6uNJ `5IWoLF1OaQ<[q~zoe`?9K\1!$b Ћ@871hBSy ^4(][ѱB9Q7V4| ӊqL%XQ<ϢwFУdwDFT\S9dgmNiMa~6/ں':D=G4Jf;&yB q~4܊;%cXڤVD2]wCnvA)hu ":3PQi6HA)]BGA@!Dd H_(f$uo[<on0P dKTyѣÛ+cQlO(4J|SFvq%-piN0`U+O&~v}5Ҏ"{or]RumaV{G8yi=; BAf>mrz7Ч)9M`dܭG7>CG¬ u֙ڤq=" UҺYyE:z Sh>>Y Z#r7|G{x@6VaQ«?3h󹎲D7^)O1VG/!*Z\05KmEh\[ts(BSٜ /_rfv]cT4 U헦҂Ɯ27l=[H%#p۟|SioS?9e;/&[dr ) xP8\3ed[[2 d 1WZly؋c荛ݞpڠSx/&O3@cvUDΛm=9r;u ^ Eoh襺 =ǀƳ s$G41SpeʀSEӣ02A?u)t ?s[Go"BJ:IS)iPc8m|wgdM |KUx0G(C\3uWͮO ?m+G CJnSgKI`oS=T2iK=,i6N$GCTj^yNRר nʩ *: $+\:[ŧij~XSez%(Ve&!P(ia&~IRO%DzVϷ+FJVm:NY$CʖeJw?oN?ܳweIOa?r4qejÒvA{"k S?Z;& ;]X sZS]hn TwOGϩA,GDV=ReY"kv+[nvnxAZ'?$.ڻs?E=ƒ#NxQÀ^H*PxXQ,ާ׆_[`;'¸}ލ9?/\`|\FKF'S׃hǕp":=R ̎} fp>PE#=3ˉa&rˑEU3t50~2(:g%:#F_Gz~:5 m4kh ė]0pa0RUmi\LyXd&z>t3J$ h q=[٘Fttg-jg" )x4$JxIڿGni TaFdp:xKg2O:6yY^D0A1;D@=ߗ_~쉙ڜJAݷ!r#pW3NLHچyIDoMa/{g5L6ѣv{0FQ0P'NlŇZz6f^U*f iK".zqkxƃm){zV+;^|.I:ۥJ7@Ԯ bfN^0˻NkyraυxzXFs &Ql^^٬O&CFi\lNSg Hx|*'dWP m6-{Xz&$UnrTt䳰3*n4S΄V\:D~3AXWp4[.EhUMiamyIjHֺB`h +'< I$1~I9>.DŽOM 5q6uɗsoU&2!ɪ0n;fKQ l>15*Ֆ1q\xaux/'Րgm}G늉qDZn:Kuw.ao.@I2 {We#Fg?&uՉYB#?|8HkB%u//(Fv$x+'/oQK&QLR췹j7CQufV>&?jZ܋%^q_]ULGT\lU =7lc9qJLTh8!(0\%-Qݘ[P_&㻄 Vn>ڕ,hRlhњϷ ,+)R^ѸEӵk\"<4=5(O#̻ !ڃ婮8Y'BmbE7'p>BU۫ٳ,)Mވ4qe Y&Y*7hA"7D e=RSl)CЦ~<J䏫nJD%D_[F\Us裹9XgaEg.5jE7m6l6CFŌh )Kq>0p{8#Dmb՗Utr"LfDž5x✘ED"vLe m.^[րLzu׻ST޾D &QvAeu=C)XDãK!ԭju-"gi>">N/-̚'^a;(֨bmv <\ -~і@ODϪ42&%Gp3 <&CQWjגOld[ Ol8okΆICs@Y0R p7`~؎Sx=Fw9HƼ3f|-GU}oMH\{{[fX#W_KEy *ܣ:Yd- fOƌI# PB᜗':kt Cm O;@kH$J<5Yj h[[B$yNSnE,Lr\!yً~JS%t~RuXQۥsj#!$-R9lI/ԉw3(ƠXc yO( @#w j%v䠖TԁɈ*=s0BN֬t# ykU$bf:?ǗkW>}Q)Å8tܙ; $tMQokp`v]-Z|k"VC: |K6M}E9 ߚNE!Cלf\PpuJDžwe ?'>0]{RqaQ rƊs&7IqސpBf$|LyHgۻأR3x%k} NK򌬋v0J⦤4ئӁV .(y (p79\Gaek}F}:c <y1$9h2xٿI`Y8~A&%D>c$~P9uK)11A/ wiҵo̗yc%PiƍOA%U&͋|E{с9m߸G UǞ0-tʹ#T,:`#Y{BQNJ.v0>XYkQ/HP=|TfYN7+> |CwOe|A ]kۨz bͧJIȳT0⋐wDt؝& \0US|y]I˔K-?2.L:S)$['q?u7Vۧ)}MŹB礰nm>Wh 8*}[Sq usnSyeCgwdd{YmEgHPH'<;sM\)RS6fctܩ`0)ElO@[!4jR,9Iwظ lHdSC$աG; 锐Ir(a(id0؎}g(mq'`l8lB\|3 `b\DЛM>#!ʬ+ߵE"sBw4p\'/03[bn/CŐ_?Ԕ fZjb'#k&xb"Wa Y6 : Y{vAv)3/ t`W2w`G,dC+@+wIWNP}Ho2. <tn0eΆ}Z"%ek`ϕE&m,W wn&pɨ aƜhj RW!.Ҹ˘IpXV;Z?d6] H_+EvބPhc\2(/ܙ7)%Z mgRqk )~vY?Evvzi?0-c,)Iݐ!<|F cmBpifH=Z O;1f85FvţF,*8ԵIXe'.+Yg/\<+ I+| FUE QMּ2 ܳrjgP%}Akl))8Ņ|fi\7ݡ2$nn _{IUvSDI A ?V7AW] Owyݸ9fB}J`(~IpJ46"J d}6q&;ܢNLH C*QHU4W.*ǩ[+dsOSOOc WhrWuF5sm&N[E%'l VB=Tge~sTCFUdmL@w&J0ng2^%4mh71=دgS6(W̒SBq8}Yy -88DMm:A@o/UBay~5NL)7uņey}8P؏FMX}#haYԐSurz&6X-~ucs|f1b(7LDBن@s Ӯ.N aUBr<(l&@~(S>wenDPOU>_;!dQOPjSZ]@T2ږI2SnDj<\$]pZ0) R@#=smiCjޝ}o)!W3&G}K m㢡U_iS^s%Rq?x}Ingp?>k5"s88T '2-3o B`gkB/ B4wL9s0u=5\ 4W$v ?`vtâO"$ހ^] V, K5Rd͆$!kzny<'(JDI|N 8h w^Vd:Їsh0lG/.n*0+ԩDO.JO7h`+r&3= z/O^kܭ0͛Zb=nbd8ȧ#Yz1@41PxY`t5GkV5f{錭YT+ ӱS%FY)/Z9fʅfL2,1{uڗS2I?fzogؐvt(0|>А\ 7oKڰτy4*B4w.Dgsa{ ΈuMlu?"?Ƃ! 9҃kL!5z3/aeaNVvS}%ET9ͮp Ǖµ]X5A / f;7+p=VWvQJG33$ !c"Ga5&IdWC$}eg5 ޤ3 ! [Z(29W[X fy-c䛠`sݘ5]{_o9aq/f$-,)ŧAby '5reC2Xs&ݗA 9G ?1c,!EKs ^끀|*t5<$@ iK~(,ܾT[4ol*2>~<`$_Tθ1Fx l/ݑuCb$aR^whde. 4Ar9ƅwq^UČ{3_"eŶ$@c)T+|_Vv",cG>*kd}K:U+&ۛзGqs) % z.: z1un[tʗ jo2*qx_5 rZ ۶t.ScrUؾ4 hX1G8_'3v_ѱ};ۻ{/C¢i6J׵݀!ӣ1bݷpZNS9F&Ru$ K6'rZg]<(%tu\xGVPc$@%Ef&f>ٗKy˄;DAC nGkg=o~ ˆ+{}̲Ӛ p@3V#6 &,j<ɀzi&AP:gIF_Ř!% fL#YV6 Q/{a'F]j tKL0tR1[jWND3Rɪ_9~9%LT|3Trvc=A#v{;L@A=ׇ)%layP"SS1OQ Ka\O+|>Strl4w,\ ɱz6Įd  r"jBmݰ)WjU֔پ`̟[{Q/|^OrP$Fz~d4 t14JYb_7. yOlF7!QϥOsQ:qsQj,|]yaUT ɑA!n󏴤MEa$r#p) p6if%$&&Ҁu6 !\! }_(@ǘO'&`#1&Sd=[Sc L \cdU:㺀fQ^j-Tut{C-"c BRڍiɴbQtq1O`Pot꼖oz8`]jrX$s /o#n8IۿWg$Íɺf*ė {J8őOԦ #FwYL`!įW&L[|C>uSa(pKWBifY_! m&g:z̍Wnm@Dɽ.2pua'66l6*z`-Veb./`VԝH70=rW}c'TkϡBBn! PSd<^UXz34oD2sZ"V" .g Bn/KrS0Sz:ʺv(>6FJwڣ 14¡gFe\t+ g=@!ҠnXx/^  5mf rl sYC\|srR5b;#?šZi =~fN la;k؉l'5íyXS;MnU\g#̸]b 40Vb(1g-XUPahC!5 y1X$|0R0a$cI⍗_}S#|($B8G-XJm\ ;gzl @{c-W28VI #hz@)E { sm-)mAb$cjQ}tc>+5}OPG߮.ڧ 2 *,6͘/ܤ8vf+ e}F׉fB'GF?O4'9b ӥK&)u \hs"[ M?08%)Ty6GȢ&n58Yx  m F1U)L7`Wz@H-癫$XrHYGR2j ߱Qk?ň;λbw++[c&wMtb\,r 'q$h)6 8ejB ͂C& jG7T)h95zmpI܂\98L+/ ϣ3|. #sa P_Y+<1ڏgBAV@RVľ?k6Fou\c3m&Zc&d!<ѠwmΖ@%4K;b@* uS-|Ak*v:QP-=mj5A[^'G)<k8wVHi6pZ}^TŁapvo]mo!Iϰ%q1;ӤޚWL%K'nWn?ByyWd y̖脻|KAx܃Wi^>oD#\S9bEReQ4Ú驌V?hr{(oQa)=SZր1c<Q ̹S$AT pDP3@9 ."MS2! a U/5}\FHXP: &x>(%utG֏Nك{=dtbH6%@ÛGx%khg ]`(L* "> )X6lj7 1֦zҕ 2^-||pPODd3_9~Zk:Ɗy'[PaԿxj?(WF!XS{h 2lV@6E6 n~HWt bKgX\ԟ gbKKL?UryL=q}b7C&_khI땷*''sEc@n]K =t0յTb<ٟR]O<iEJ9׹oiE1xʝ>Meh%g:ЦJG{)AQ2UZ \CNS(dMh\.Igp#}n33'Bteɂ_eț=hzBnE,KԚ~,3~a8GdXY\# vRGck#̳*clQ;/+W1=X22]Tp=#U t!yxkk_*_Ui(tbjvch_x~"bd;n! hZO)Iɉܶ,D+[F~Օ%z`7A~: R|BO#?"ɪt_X^Qey0z"qQܙ <[ݳF-YRPӸ*ȶ2Q@|T*=momL Y O Nnc -lS0\s ky0$7cE . ʂ~^$@.B;Jkv 9CVVT b? 3uneҺU4 2}KU8%`-f^KdX H^PJ:a"lRB :sHyEb0oYGb;#8 I D[; OQҟ`!HgI5Y 3WCf$a[d0}LtVu.4/ F{:2`ڷlYk̟ua5Z^ZRF~լC46|VwtjN|[L_8Q"Vt\aJ1q'o Oi2ծYfZhL;̓}tt&n`Y f3 A@k2SD([{'yDOv1ԟFJipva,`>ZDQکeE`(#ogTeo骧E>'{>iE.w= t x-~XO&ք-rV5TA`yT82He4@bcDDA .9.TN3xX=buyO՞}G;F TE<ë98 7]^T A&kc BO1?ڂ#x" %L|QaYd!QY EkA~ > Ǜ02o[^Ay5 =6$vw7k)Mc  ǨIiʔA <)CU|;XƁTphƲ tMѝfU$W@PM%Q"i}FRt1KW\r?UH{8PVX]SS /"q" }[!%s 58jlSqf;&S 2+ `aќ(q_7- %"3j,&@WSdߡ>\~ 8KD~lluS]N̉II06@F[䵵ؚ. eta<, `D)EZ;`)W׀vGV#ȺomQnL*2tD>͇ZO> ?6C/axܫT̺LVf=lP*_oQh9{ `gVMuC)\)V5?EpWf v^RP# QY>o777t>+[_E)Spz'6v _:1 9 OAebuИwN(=-Ky՚cFyO~,gxFI!"9d|.d6JdQ{cO>RG%{O܈p6i LSibdDd%Z`@47RzxZ2kqk:zmi6<~z+_v$1RPqe2u磁VGC6eIWc̫^#d‡sFAlAmKD,|2:$$vnf P;W]s 4+K^[V@5TVkb2L|<aWZD$G4#y]h'ɘ`*t`sچL{nBRð񩕁a72W7z Cվh!̿IHhqCmWkV[T-)b:d까 `PZo!1{Al2c[HD@m6 >_0>J%-">㈻4-`&ݱFrlqM7WLz 2D&ͤ}w8u{'m$X(Gfs`a!ؓ,'s^o tY x.gp,Wnx D=])vЗ{53ULq2/,B%2)(Si+\>%6;#1 qjiЎ8FMw2+N,~#ڻ0^Ikbw-.8.3C}YzcIjR'92At_"=40em-0-TNU n !)HTjKM2J_F/jD4 xR['h-D'bT&W݅!\Վ*װ-Mj[8X_u)ÇGS㛇/MHX#TP3&84Xwd+~|\$_h/RtjHf//7$X].& *x55Fj$qqO;WdE7w9 _-o#,ea v\B}4nh"`pxXӻA] yaE+W$i dz1Qj-ӨiІ.[ ~ ?u% QC`zL"f\/^RȂ1˺}0ˡ΅xhѯ(&T< ?:gM"]{%i"Ts:Bh0֝IK(ox}}iBO&1pypʍ?RL-_WI{'#f!zrݦaZ²FPSsʭwFqH+c  i .X ECtzNpV}BejCdIgyl"yRO*Nf4?qU KE ^֢Z0ȊƜVշQA4Y=2Eu@sCLZwAI ڲ)ˊe+2wa)Gc]bN 7y \)uOAy$gz1hHnEFG¢J^UTL~ɮ-TgFߗ,G)߼X[AhF zwiQ2CZ0~p ɹ]} 3[ϓJvLJVA:"OO |;"V~kƠf5ۯv[%4XAsp+%BfftTTvƙRH(g/>J?9oW~@+@ , ,3l; 9N]&}b M@uW.ƍd.A P Rdz4ŎZ1| /s  ~uU#.sYIOa k؃Sf eB~=~ǘ8 Q\nRĦ9r]}aŸ ۈYP/[`Xv)LJ^cjJt p?m-=qh( t1ɔv̼*S8wC2$[ .w!Cud 'rG)tD'CP:8LVpu8 d9AoJ7RoI#xW\g-x1WI 8w[)U)d \JvWiq`~ףJ߂p%LiF?YBF,$!R8!'zq#z޳+q7o;;C8$t6+[⸌Ad(ՠpwgT8,T*1yM@SM[JѪ𡐊ӹX:Sl'\X;&hCź(*0neuz0\<+{:-1@*;[FN5V6٠qf Ky@TC@ j^|?(@^"ϥRKJ݇OB|Z* S!e$l-Y*EѮ(]*w 6v@E`EרmGeyBЖcPe ix KXv]0RŨwP&~V@;FZ*&q><%ҷ0qy'יg5Jh#T HCO:AJĉ R(mq$wnM,UP֠BU䘲Џo4rA\HeV!mN4U0Uō?nU"Rwzbd4 ΂qo葼/acb7ܐ3YtDɡ-с+ȇJ1vQoo !4ۛ)6gE/a#(J6V ۰L&TT=/mRާn j.MdͣIV}@X~L)&Y"SےαϹ.[,w1끦&Q6ǭ%oAS0C'{k #-XDo!i& o?RcpSH26RHpln_]ISوχ&1M4H#i6om< DAސw;,,d0C<m-%pJTA0v)õ#@8IbEK_WC\[ I*jA0(N0;xZː- @hHNX~;?B*@>.wgr- ֊- fX W._D3ˣt;~۶V7aֲD(dc5r=h7|[}fv\)! {y44K" ` JRFh/CɞFAڨ30(C%,e| V8wAĔ?H. dP3:{ |oZpyd8 z~F/[Y+ g5}=K/1ee4aAE00Dl/V{Lj>_! *q_DKrɭCL5eN”1KCm,m9X?OOfQ6g27ɸTZ 5|su,jKGw4h/c2"erጊ%4Ԅ!t3l3QѿT·§`(xGr }^Tl=KY(Z/'"n,Z`惀'/ΐAiX8F Qo ?`a)nP/lw! No,QIaR #}ř$R 0]?ٚܘ]#r߳6wN"FI'uӚ$+)`h%#O*voOI-.s$ [m_ȼ+GPGs~u'+>' si>$^8DЯ+sMwJR@sBۯY4 WC/,nfu*woj?hmP/dj;9_/m,J GZYbAFUеi\7q++e}ᒶ`d?YWk)0>"񰥀@{:m (VdO}Fx#=yڤW u:u7ջgv1 YX?8ĆDߌsv6 FQH(*E߫[$$eQhRi a 9oLJ]؛n1*6 /&B44_1{ФHặɑ2gY&q]Ku%pL{qA^˶[K"ys԰2^(k`v%Z>4Bm0(d4WwSQax|0{3^ˉ5SeCyY*#Hrњҗ4IQR~g2t޾OWŲ:9̵ wp }4Hܻh$3?:hzw1&ϓs *Rb|c #;z(A ({6pF =R[&QpoI0mTj':K(z37+TDzjb6Ì3a2bvqc |> NVklM)zNzt, R_ز:+ᱶs܂O!ݒgrG'bHwsZ @xJ`h|uPWvNvίܹ0 Է 1,:zO"D^}MYhBx=QͽEk xȌ@.;P\UhBDw 3qKcsD >šNSۚEk^>bc=>mhT.M&;*'>F>XKN )S3=d?M;a07B#,bPTŽQ{׆gV,vTPܯyJ*w]IEiMiߊC&x8P(,KIH;(}l0o` h) |Di䬚%!ᙬH#YݏGU"BASor~óJ7EQ}d#Cd9fh@gOEkorR.6Ki&ΖU#o(=7|uO=[UB˸@&[?tyfX%A=cdة3lApHIDfeȜ e\\8{k7ֺ ϥtn+~wQǷ rWlwJ ?\DsU+fS ̐93ܤu`JCr)iXfLgv"5@i*x6ۭў8+f*=I5hoZu`UB:u;bwPIpW&U@ѻ?ЕZX(qzO5nv/3D0A5蒚%F31iGUcf$/9&^bا " Ԫ'zHT۲U,0>u~|ڮ֑3R!LP{! p v,#5"+ z.UQ s{3||x(87Y 2IHQ\ɪxvΐ!>,KKd!aHeqO8O5 Q R/)Vc]p̨ 62&c+uim|䕧FR&N֫эcM? x-Fǧp?%& LD>EVd֭k'e>L6x_:xwczCgU\vA0 !c5ċ< ekը4!zj7!'^QtIΔ̺Y 2mz/Ym/(K'HS:%iTi>Y@#0.8Rl &e0YC+/Y`s7(m-'%O52-hT4X㓛1¶9m q(sxє9>*_G_]\+ λ{Ll7J% 7Ђs!|.r %qz 6QbףX_g !UX@ E9C}r !9aTc iĂRFVxbvSWќo2?E'qc?ŶnkWyffK3zh-BE!m) h R`_`f_ntoJUڧcOa6 < C,R_ƿr@!AQh9:Mj<*4b?R H6B4&'4GvnNl[rK3!RT˺O;BVeVĘö۾Uwhf&*cz۴_Ŷ\]+u1&ICP)C?블Jd,2,!亅6&n 32ի7m9Mc 2!BW*q M:W_֡@qK:~~)!fb윘;75кt<feDX?>ѭ5fQ25(5phoLӮzmK#p0ۍ,72~ٙCeQu4ZmxUCMcjsdݞiKTkZر,B5F}ՀN:Qn,d3+kzlvwMlı-'w'%PzWhIx'C6n'S?VTaN*@h t3v),´vw͎fFLxUДWc+]|0N%.V+Eg8(&fxGI%@vbQ+Ќs97֛w]ހC瀩jϩ4nnˑ ,dz>,.;dFkW͒7Gպq*߽~&_F]LBr8,XMDP\p56l5S_ljZ$,Oڞ3&ǔ г,C>K8 |9BP \=-Q;Lv¡+(c¾\O4S &\\Rs{}NTɜct哄Lvr0$Tx>}rWtfxOu4lX!%<RzyT^GoX38ݜ/#@lWa%9dGg_5ސvy@9okR(=SbhsŢı+S9B87ebA$¨|ĠZە ^,A%nxgzW7)˩DPKfa/`ob' R"io?Klb ޞuNƫjV3%=yP02QKDW wFI8śeFq#WԾcV'%:|n'fY,P4&G"2z}]s/]AY?),uyd[M/U{RHT3cV^(vD!1B V.5_oD٤mI!kc 4pYiZ x9XuE6*i BAmJӵf-L--hXW/kThbv/Ә~9 on85Ʃ pa6Efڱ.1;3\xu$ýO!,J'=5/=ew2C7o0w \-(1B9-!)eNǻ(|Qi&pM 6SaȷNVCQّm ƫPJ$",vM?9aGN0|Cr*huatn .CKۉv|ys \cBW"(𘧼-{'bQ1+*m(q:\2CKhO$&O~I|(~%e%7w6b:{ na*(__>; `sz)HN7X"}2Kr0a(e`R.bmlqE#b/𶐺U3-h"ÞLΊh-Z4m2Ψ(%]a_0Q8E%1U]OPgXDxcDT9"i# [J] Yx$?:MpaR,?%V}bJ)/䣳!gΌr) L Z푘ܜ^'ns'go~1ԯ;7άV0hMob@\0*S20ia#geF#.+w默I8썗N2;ߡ 7b,E^ [4#6 <loOwBO.84*Cm3h#v;c8!O/]BJ%hv᳴iQu6ma[*t聀7#|60 h9lO+ŝv@>&M<TcdQV^hc#bNfU.D7?ue@XIk+i1ր<fsI6:3v8/+`06!X ]7T@FQOo8|S\Bg`/.w-8S2.(߲â~A;g У>¥bau09$ZMw Q)xSS+dEjSZ c|sG@ nM^@|VK=f,#gB0P>cAc t#:1U^_^XyWe/]밲2.Ny_' ݌C LicRF]-xPlz=64SR)!YE%TB<[7$ JFd00ADNKҬ-(:Mbi@~yvB?<+:YFvc5÷QМtz\EAIGtQmKgUZM0]| h *Lhh7,יDM9j6CڔcnZYxocEa"ʁpUNRNٖ(Ь-9,TV|)J\^?ozwtŠUDGI-#f{Ӎc[r>+) :h58A+NCdq)%EV 7/GZD@A8/Ĭ QpA2mTCO@$c>jSXծG}2Khf+?מt9eŘ1TdOVp8P ~A ێůiɪNO<'.x !KuԆ @ok} -f^v%ETa]Z!鈘,N,{ 㗿&O̵℞ Z!c|Lf+{a Rd3ҤND&Y,"%23uTK!-WVɈ;׏[/JB޼۲l<dv%iNzvVfmy;W뤰.G$z4zάͱtI)I Txޢ4wq"q^g-t `%c-r㜾Y@s. ,^E/(F(LEZ\Y3tU\p:¸52#C(lK=tоGkQ!VHAM!iN*n[);=PݯbVoyѹ)Ģ3MG|cnm¨oO!iX Iv'jj#J{TXbF;_7I8(iv7x ve9CHnSgG-sXD|.;ôܾ`W` hO.njy8@pWSq*#Kyu-;5?;e@ yAD6Y9 T .◯iuRBgw 𖦞x-iJsÝS~nS7AØtˆ g"JJ]:/ bKxAxB'ۛĚC4GnU!4_c=MMRqPVat a<b+~{Eo}D;f5.T׀+>\{--<*zԎޥ`d#SBmC߾TSJ{]<Udc ݱN\Kĭ O |7w&k\|Tuԧ 3P†tq"Ud&j1>knպ*Xb"H!¤k;n`D9 ̱eaGs9{6J:}5SBl_u#W)kjg1j1Pz!00: s}%$o찗40ag!nd PI,e".LKضilWp LAdwsK܃_;8E}YssxR$V/pKp\bi։V yˠ{B!|=PJ(Z!z;@ؙC4th.Hw~&%1YΣr^Hl8hޱVbt##a3vTm oɦE跧a5@zgOCu4,&&p3*KT^bUз؞cYo P'w*R3b4 WhG |Nefw`Jqt[WPM @ФE}/jPˇafo J!SQHDs\4p3i:>4\:U+\.-0R!J\39ݹ휮ضeG \)؛`Twe58Be :"{8! %63Zޣ&\Jܛ"5Fde,WfMZpvdeNRgo2[{j7̀/&"N-fy){n+*s1;#4PYO #ux:ND %,Zzx?ڀ֪. ̞HD-1XVZkNxc՞;13trMI 9@l?ѠK qcD6rvDn9Y_V&d‡Ή)C{z^Jd}I)w\V~ ϔKdb`&aE^!EsJNv;q-I| bTN/Aɚ(ר*Y O [n-AǴﺕj&ʳj ِG\%L\Ol H=AOgQej%ӫ'%R$ fc/_KdW9ME@B R]6h0wS^_ziRfˢ_s/oI|D{BJNU鱗Brɦا_J-M(,V . 4FDgaV[c*Z!o]%W"C菢\~KN+}{;0 \W,-1!_3?|}(]gd {܃[x.q|Х:2GcWǥ6miHCo$.NQTÞͮe=s*[UY[qۯ6L9 J+PSit ogG`F>V֎=X+Q}Ԩ hJtAHcse\;iii6LԨDz%I8HjPYckW {F*9QGl55EzlNPQecd_T( Ͻw!Qߠ-tU#񷃯I|cmMjb ]^B|*iOd$ O;"q+Zaۻcs9Rߴ^.OO~YPuNhZ @6\^rKnn ]8#F|ClG,[ "e]EtbزCnX[5>dQujqKjK[ܭ nI1V{8FddRjm̒><'>5wubλ2Rr^}( (ulLw2jc'DqF Tr#L-,_>%de?I /ه2agOuY)q[[T 4>$@IY^/~&AIdڻP{ Š1Wv Ac*`ah ԎB0pZAΒOVT%e*D@-O/mh @~_Hg|0Ksɝ?Wv}s G\;>7'+Qn: [vxB&m=De);vYCm~:fOlw ]k[J0$u\NF0t:PNVXqv 録z8a ti,-{2`{aq6(bMEBոOblU6:w:idX)%][}hFK~BNah s19!2I|7oyr0ubn8 ?CБEfw?u)$ŬBG.MO*=]Sr`/(I}y?.ZJ~iI>Xoj[{9z:S;>d7# gMk8jNVdk@^j??P2.+,@2zdQ$yct2!ӴRy$l @E#%Pwꮶ:al<@qzT&b%8o7 &XC4" ^N2@෷adbQa/O8}4-;qJAF5K4zeJo&XȞc d EYT6ABtaNV!@9}Δ܍oRnYetCztiSiNǡ+ۨlp!H*8P,`"Ȗ`;3\ysaʎynQC+LZTd#9wKh4u<5bǵ[4>qsx00ި= \ dhH nO jL!@pEhßv?\ ۈ?phGj%DXYipd6sEU(+*vuCkϾ~ /ph|Q9<v.Ww,i$ 1Ԃ1 D`w. =g#h^Lz6Ok+bCbzǥWЀ1mbC{j拁ČvA1IV8uA3[=79ƹ́e ԀS|EPu(J1§ivg^H?#!NƆgp2O8 ݴ_fXcLys/߈Z;cT& `w'%# ӣ%YGD|K(ΘlK\%;nu4.^X=hdxxR,"D2e&ݧW]RN0 o~#3}g(~IAr"Ⱦdx돳x}Zi|'3L4JH{߾NB읝!0'"p{'s n/O | :JbīH(o`IT/XK[/gP8V]N4#) ~k3U:)bq} Ҷv&? /5Oj#2,>Gt&:уgHuetp;;~+OpAC{qdzv!%pOE;DbkrhCHWQ ɉA~[Qےb.#sdJzKsɗ-! Ԅ۝bN?Crp*|}!($U [!|a0}5YU\zX'TP%BrIHk#{oA06k K؈hb EcA@i D36O_s1#dnu9{-xU[ŭ / H0l^P'cCA5\x[}Y)K&Ql-^&bC6}M٘(qB=f2!u@%_x"7|lïwVnZk^Vm̦|Q 8 sԉu|ϰR(rd9ͩ]5Z`Kc&n!tAȏ+Le6e2(E)[(w`ϖOSf',Z>9G8! D[u_zѸ뙫t<-=0?K8E7+LV=зUeD&3Fc`Ikor㏴1&DgƬs]:Er KWqRYS'5/A%dQ|-| u'iNہdPsAUx:H~mIсGw& ?D+ ]gpR1ǿu9[JYY0tޔ+/?KL\kUeBY pt*BgHC͈f'=!i]ՆH*&^W3(qn|L˱6GERs%lUwnF.Wgٮ'yO qCUj(6鞀C?VJA`yNڕ9J%j${QDFW#cwCHzPC]ũTA\4WAr86짧mJm RN~0ٿ X ;9,:)MkxrsRu#_cK-Jy!&6fi{2OV*2*ez["ey&8  oH<"A2;̏;D{=ycrӎc핀lfHycڙ5TDm~e;J?s aH.0wz{%V/p~640mbsbyPҴ@^:2͙ Cup9hcqN|(?E%"@5cZ)6#{R'YBD":qUJ$c"k]1>c40H`23;MX=bC(Aq+ ìQE6r4| Gjgy5xǥU`D @:o9w9RK{`/2d0AOOݦRUr@O2Miߺ򧕪w#o:݊:☗T {<";HKSݟ֦5&1aɽ>D (#Jn0XhںfFD2! cOVT\NbKm/~Q~*F$%7ĆE4m۸aNz0q1BZbs’ (_7(cz2@7VlZG,Oد1{O`w3wPHB eSCtEµm=NTbBb]gMVkv"Fg5oi9 3LYeT?= \'}2*!tj|߮,eROyεBd + J5<GH~ܧZ=M8oCN="Q4z%na u@'0JMq7FI3= K,!BC;8 VCOyПR=e#i0MtGfyi +YpnY''eՅL.F9cX k44Dc%3UY!ɴ%\p/˧!n3cK!3%]i]y5'อ5O3eT\#ল1CnNmA>o z!_+(mLB0HrCObI.ܖ,qW兙3V`O%ƴ T5q01 H h*Q@.,gBSHtEZ agŒQ UCC`'Lgm=-cs XlY1Gb?ʭET [DHVS%8wM5"mehD{H-j9$Js[a_Dzx%+P\F0b{L.ܠ,;j0Cjt[v}cs=Cۛ ҇EGS%:|~ǂY` ;|͈?0y@Ꮿb~lG?a q.~ I,%#Q̸T C>sFs[81-pC9I~V \pE;k SŴjP_Ρӻk V<9CpCIlǼcA 5侚ql Rú^qMx:%w=2=Ʊxcnb՜+iܴ;pf{7ւ'UجVVrFB&ٻxt19оI"=D(g"rhWz+0պ;M:)5I/Bo~.QS޷wp,kTx d[a4tV>0+oƒAZЙ#m月u'J`*֑m)AiDzŪD](+`/_u:#O-q^mE8 Њj/MDoT4IOD*f>H" |q9s% R_L},g&Jv.K\L>o*(McR l`:8"~S7 Ti(>Axa-Ѣַ~LUpXΦc,y_2k頤4,N$:Z%I@QF$ܫ'i#>}ՍVCur*deipXOnq[)(zʕ(5'D@ X% _ 9_Ht Qí6C߯PYZ0(}I q˾]+|bq_. [;^Zǣ>s_: k1IHQykz뤼.7}!}|'&(z[=wC}{r E)PpAT 17-Ƥ=n/ $I}o)ݨtrPIIT5znAڸZZ1v#51kU:_4_@Zhn=#}q#l %HEV `Ahz |ЄnE*IX."Hf-Q?a=GלFg^ܥ6wCP)пǎȱ7e3e׷D~QN9 $q{CCt-#9öV"CRO%wyARvd`pS-3?wfnQ*)E FAqఘ袀ơؚ=hT]:{p!/ @]R6"Xݺ}Mۙa Oʉ0ۤGtvHE$ tnbpk P )ACW ~\dxwWv9;Jy},Ǯ>M12Pp(sOŧ~~ GAğ;}k&EO^0~ w@u+OAll+}dCC[~<ջp\zR .pݎ (%PM(vFa A 4 vQң?rXNgEu-h৚E7.Sh' *,US;ρ3喆T@ӽ=nJeOr{3륅On[~{J3 0L{mZ/Euo])Gu;;5?BCW:rUj[,f454QWxv'BmKZU<364; zxf5sI}]L:S>nT74vp<Ǣͷw ~Dl۫>})6NMXaa;1?,ܔ*+nv"({ lU7,uг)bse.5,ELS}O%V!vD'Q#H)Y6%f]YE,[TܝMfLdÒz_< Ǽ'bA(ܵ͏_]pۻα'.u+u{5I=4ac,ߨ-OgJz.[nQ>nzEy?B籌 9/oI73 nOG4Iڦ9Yp~ 4;WF6[YD $40bPF.tRP~YDbS wT%>k^!  #@b"k]<ǽK+{[-פI ~;Qؖhgxr~O|$!oR\*y L614wKCJ)O1Q4tSЄx/ٶ/|ӈ\EVL glxp,k/L4=E!V A(\ó6ZrZQZ0|Ej1tϼ~Kf"g/eF5|T>ߟ%jv8Q RoRz{6`x[)2+Y{;pD:!ޫȯ a#tVM61+G亿ac*b*BP+M:a 8~/qTtYᯆWnވb.)n-8;O| kM>9^xѴܬ[M5hҍqʹG_8֎|GB <Ǐ;AӓѓoB ֣0Wz--6Ь'p݇JgcD[eou[cT|Fxaԥ!M`´_֌A9&+TF-vmGfՊY.fx&_dR_>| YΒݶ9mo'S-xշoI?u hJLՍ:89љJ%]iyFGI0 h%½90z"+Ț䬲nC]5TݓTԴ.Xl%׀vWW|lGk|X^5 FNՠdQVy#˖7`d~ =FX@8c8X5|_^_Փ&ؿPBTuY1B%.vZؑt,moK?\*$3zW;ݥS[F;,߮o_Agl轮x{HNopSE;Bފ`%E`ãf^F1 Kb)/wDNw0|j'.s .ߜE_[\qj̰fX?$ + )H>}"swOWÍ!Z.Qol4ogQ)ڝHb[}: I&㜰)$& ګXvٛ/3R sQAbϭs{z><Oa2r☋j LrWRl7-ZP\|q@Z1W^0xfm%Ü(HU²xS_YBNC[o~a¶Q7pw^0|]r$чA>@1RqNbY+ !5}@ >VM|q`Dko̔e5d_Wev~ACE֟fN(u \FBᶼ-鈃pN u !ִ^J))j=MI2[O&B4av1_/"lu3SỌq<3>زcך s6*}A50c4j7.N_phyؑ u]WQ~[u 9!LUBɳ[%*|StOv徝NrQsy̙Urtg' 7 ZpQ6=r76'OH\QÝxDLtzX@&Si./0J&Qy='yqoS   hpKlJfHOL e0V͔,7kLV`F50e2L`' _ Ws&d!3ڷHbP/ py)]`42К0B({'tT}6y@V7=UG<+8ښ؇ Oǭ2\gNg)t}GD %(#Bh0}^Pp1!UNlC;4eGV< l_>g@/Աh}#,#zLrkgRMHN[S hbnRPe'.=3 ;;%aM/%i"}ry=$I 0 #CqUË_uMJu|Ma0>)-N xρs˙ "*uDk[ڻgZO`ް_kN YWTA0 ɻ紆?~q?̤HguެJX1BX3dS'_>"'".CԢ xll)wԆGa4ݵBDFɺ6/zN"7K`pxYɚMhL,:ACڨdn_}Vv D]W`:!̳a"ekWIȑ;ڨc3 x$JC>BE x ꄻ G(J|x%͌g! ʗ5QX;eL8bm(VCt (?w]ؤmgVIx߸(-|=`nM>CϮ{NFS0W+B tcdܯaZfi2~O'-<)0J:ui'r-,/qĿ{UZ]KD0=^|QC٬ 첼7T( os[ƹvī DŽgw;_)jh+2UN5$(HuGOcSrMgayF!t4@Վ ֔.2$.J}Y`T޷47&ͧ:0FG&*krU>/ݚLbDc6.M,@jVog8nK1(=R(.*p!M]x~!ieGF? AYVFc/B}ZDBI1fuC]#i9V./"#76h%cpupkEo^y)eU,du01" \m*MeKv#Z;Ԍ/+c˿!*KfW(3#a쑮Yc[¡o+140*@4>Y;o*b~&E6)=h7 +yn(}! y>HmU:5uufK%kO[$D;uy^~sے vP^*h dWJ.=/P ʮ;9eNr22R2Y%=5=w>*@Y!d?NʣJuZge0HOv)6RrYXCUH,|,( c%3yZgiUa:)4Ot@{CxG▝,Brnchֱ4&S ƪDwlNSz\CJ^u73%۱"gX37!DvbCx A!HG{8l495]?*֟ѿF끣!DhO3]k]L;k SK=!|F&OlB,ܫ$P3kճOgVƧ9l7(GUʘ< U˰{lE_>>u݄*]`lr)fmf‹uStەTUtuք˱烮[7|J= 7|΍*AF1$L}NA ;A_ic:XS3ث\u"ėbAp"A uOZ.sAK^WB`xN}rjױw|@/"[2 q5oM_{Wm e|Q6SjQ<'Dg`(1sfRyBwDžjDv_^KccW~[Y]AˢTxP%!azNΜ೻uQ on5'J|'>YXEwX|9cdh9xjzV%3ĝ0|iik {%|Vx̂IAje1#Ò/O%@\tϠbp,u4sz'՞OD 0pmF7Dڍ7`P2:_Av6]AE$솢릝PS?6vG+/ʻ.,bIv}UFBug2]&uLǽ[be3LJZ7pKʔ[xُ4ȭ ]X/lҽ֩7z_b>x?pǯػTQ9JZx7G{w0kv%YDWjKI^zqR4ަV+yk3*y" @CƨXoBJ8چgɓ~Oa{_77i!}\!EcOf}\ aށY?)=Ԅ1p璯W rg)H3xGyrmw?3sq1Mg EXAihy^d:TcؚP1e !W fT1ԭ#;k- õ Q6 [QLyg:;1]`6maK3[|Tm~PRF ycB/j)-RAf<շ jwOd &R906+]PwNvA2?> p# צl|O?yTLc[5id ߟc{K% ZU26d~pK߱zA7A~nXVedlL d,>Pu_$"{J<b1QHbze"T/lAAXLP{i+X!25g_4@Ug W?_a\yI-r2_hD}G^U(hAFF^G+3 v` oB*өzGCM⑴^|,im<+y/]e6׫2%&[uA ׃񤣋^ئ\8r*FGASBN}"Τ'ضmgK14{ E<&"`ڟkowo DMH0:=vr;Gxq"ht4ʳ-HBc1ߡxHX J\ we Glr(6O"U@bg&7s2CUxKىVN#zKORR"6wsf1g9}KjWf,G!lGu p/NjR /C/`M×y1GK`{TKEfwA_d o[e(KrqOJ1 4 ~ =AlCRR1ax5PI%CEv5 4Dmdz4e`$gl~iS(8G<@~+ |d N4\:k%Y9chd4D)B~/cW̴UʿX aBCY "'yхKLÅ^)l v-z)Lٕy'&,to|u ÄP2[ 2A2Ux=@ Y~9aqWf(z0 2iHB> ܯIlY}f>jq :It(6\11]6ȷbOo f>!u?2a^g2nJO; YZ