apparmor-docs-3.1.7-150600.5.9.1<>,؉hp9|ziܡR]Gь}Bș*'S-β sTc8|伸󣯭M`"LR"@gOdtMC:ZM ~;o8ldb:כfyyPI۟qɺqEII=~ui>:ފڊס) ;[$xFcX7mYìnzOp6_^x,讖VV`l>;?|d # B 5Ihnx         G  T    @P`(89l:}FIG` H I XY\ ] ^bcdIeNfQlSuh vz,06xCapparmor-docs3.1.7150600.5.9.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.hh04-ch1bSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche0-KIvʷA큤A큤h/h-heWeWeheWheWeWeWe18b7ab1776823a1e62a2d6db1bbbe51819f5732e89ca63a6dd3d540e629a42030a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4ebeac1b7aa8497a59a81c4fc342ec5666f42e2dccea0104e188935ddd2137815d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06afaf9108909890bb258f3dadbbd113fb35878c5f106a107850d33d62c851288d5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58dbe26924e382467ea63dd33229f07de8c3503ef5eac61cad007103e59e545bfb065b734a62259324cfd147c49382f1f4d2b4389cfaffbb1052eea742c669224001e91ac861de966cac00dd5711c9742ff2bfa9793a2848b5ae04c406fa888fbc6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-ch1b 1746532570 3.1.7-150600.5.9.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII textdnB$tx( yh{+|utf-8e1679cce983691ff8fa78ae4ec9ead96cf9a7ee1c8f734650a776653bb8808f3?P7zXZ !t/&]"k%nCQZuǡjע4dGb` G4YN"ۈA')"8H3a%ZD <Cb9ڡ˼r;nijx?Fy^3)tTX֧B|PhmzLt6(2G&vqɒUđԙt+ =kҠ}JGL]2\(څAu8<h(%;k<Չrښf=tZcg]M76^f[ &(WjHM2P>ٶb]!б#XrV&hWLɡa?z 3/3'cd&ʰH<v'$fo|s>٢U.h8b} Q==ԝa"bgbki߇" oMDX?ȍM c VS2p~%/6t|5v62HBpd9釟Sc}H4ɕB0κl(+|=28̟oSS~NY6.$*#ouM%bȽeU, %5cް˛ۿO#{Ls@r|mrUzj<_B\ƿ3v=_/umfX =Co|"pWڰU>@ntTcil#:L8ETh(ּ0@L<~YGJJ.-3ҶpsfG< "'Qsoj"@V0p?nZgHҿ9N\C{R%mp:oqVi[*=) Hߡ35 /J ؁aSnO~ )2^N39sI/PeB)) @5L(V\]S+,RSύR7QESƻpʵubS-Oqbs{4rіs|Qg}e+}k*Q "j.V1dY(?L+Aq>^8:ܠ1~.*(aivd^_W"}dP{1Y`3 1yyf'W:q7js AYAxQQ؄FMJW7ݳ_yLF>FyN9Ro)𷈇#HzA`QQwwVww 9@rׅlB$Cd`;AYjXqn X:<րNAYz$3qLHE_'vELzM}'D'֑K c*ǷП-9VXIo(o Fs]NoG9%q'%kx|5'^@YbI6(tlM>bm9oZ}'VoYl8M%ڒe۳,G i$T"%F0T%iNl-˱$5/ڏy+꿻MMr^ېUn 0뻣 vdtvQ豞m۲V.t(>t_=,)?s5{hF΁aiٓ GUN]c2ޡsOV/l]n:$/Èrj%SfVk˹h78?ՔVxI-W#spw bC* 7;\aꇎם/\klj$ cQȣjMYL`P)(Y7c+mbk޲aVCK<6@TBӒY9,H^ya;@FɺcFq )0yL.EoR<e.Cşk<PT(U OPe46=ӰbiV@y V 80X,kq8em/I`>G%ӳcmWF:0>{ A_YMmEKI2abz*L󋲟hd, dݹ\vК=)2fuMɵ- 2G6j'4vgA0f%8@hYn&hBrb EezHo +XE~ݙ"9-9ct<$WIN:~l."1d:'T\">wK~54\QtLMdhW+ѧڕwyr8^FtZі6E&+BbbzB r {,ɜqįƒ'5n=3=}ØLD[Am7FH c~"<4Sf=r/d9= MՌT] ۃ,5JBȊD΀Ľ 3nl}pw#x'.H_MxLJW?K+3S˷wK c`{khhdĺ?;&ȫPw>QGm~<qƬ֫3(YXKޥҲ$Gj+xbXLUR%F7Wi5oj +F}SU>ck? 7/KL4`Ӏ-Rb5RRԆRJ\sWjgc\ae{Fasעi:gpSQޡOr-˜V1yzsڧ?=y4z޽diGľuKJ-A.6o:F?RAeQ`%FV"G<P(bJ"J_L~yfӟE9}gvCWVc-WQU=*Uk5wۥV ˊ@f"*>o;No p\EiF7>Є, xoJaR$q@'ƉhYG$'-<9r6@#bDX 䝯vA|ح5ZowB̯Neb_{0zD|^z ~l0Yt$S@G#G*m*^݋J,6':F?2xLȏ .9a/"dC~<-m WiEJ*݄Df"tA5*и2,uMc2I&LBZF?SyjEAQynޔVҫ@.Q;0~0旗ۓ(`*X޸i-C ]A?epX_)LqU83%XIXɺ[\K[UiM/Dv>{i!r?Mo8eS0U5j=k5RAZR 5UfdP}'~? y);KɶQkgd\_ <}\f Xo8ř]s\FiŨI #)a1[AV|PM@ǣzT՜w)H5jej+ XfyTbyǝ# w}yfO* *O|Wi<\3 0U GwےSS~X|sZOXX3LMa5Ǭڞcn=eFTerTW P[tdO MG7NˉfLxi^;!3aHNAKB-qrx"{ݗIKk.rVNO? d\V3-·  ZzeEp+gY:JˣWK7lmR F\1 I:rpJP^.5Sf p>ww(i]Ϋqj3Zi&:)_3fwE"#_*lK m^Sg1.k\b%ndJ)ߔqcC#Nüw"dxi%Of+wzDm_JyuuwtٞmQCt= @ͱf$ $x_t2`]#1GyP}$]pL*5F0urk[V]fLq5׼#N@DqbqX>ERqӠ\prv;KD7m.;KatxMjA ~PŴĔ%׭p9t4w[FHU? B>3`R'{dJ]{9bɋ\ dMZg=D܅ i} 櫡i-"v7k$ EP1HmHh~Ey;[КI޽#2_o')= +;V8ZShh}puaFF`&yN82pa׎ja~C1M~N\ +I*MB:9%{к&-G4L`_zö& ҴQk!0?GeMNjeߧcFf$FKm$#X}s~ 1X>+ A"{_h{~LrkQ}h:&rծOz= {2i Nh:旊 ׮J*+(G^ ;{I`^`v4jcM"`۱IƏ?6{7G@z;`azGH+"jǯQ о>R]AX0bfaa0@ kb7A"ƗѠFIF֡uڮ[y0Չ$ F븨A7/J2}f.<\dƪ!?ohN6}쉺UzY+M뾂q'%ie9C'ή/EWOrP*9LOB[.D3Yc P Il~L -Q>(Λ%Ǣ}8);V7vp}KQk{pZ˃ȔbhE0#̲<bx^.=Z#ҨJ-ɂ/7CϪn-vq-lSqf gk{(?L۽\@[@ 跔1ʚx w螯 @Ukuvi]=9Pڕ8rt7 dJ"h|}ڢ6LR0elMy7̒GL4 rԬq-}yOwa!r)18<Lϗ(UR!:!w!F,jB'kdQ/l'Sdc/ۉ@f7^|P♮:E &ewHC۔?r>Oj,I.o "Rh|FvS}o3M*CFSPL|dPgZ#NA,D0 w`DcߎMۉޖ*[6_H=spE\WLh9nC8Ĩſ0 UJiI*ua)U:=ZEtO5)cԲ1Ͼh}a7xtxLac[1/% #VsHh`TGF;<}0~ MФ*H[o-|ӖĴKAx%c6a=:֒Ua"bG9`VJO[w]wd 7ܐU\"pK aDE³l0{GoJD }h2,'%ufk'rZ׊IY_V[+^)ȩkv{wF=fAmĪ;a!;` ՄoVᣏρ%9Sܟ ^ Tݰ.UkξX쟽梫q;HgoUSVk[Q.k~z {ʹHT4]c L-#T-{T b(x~SҞQé.jq#9ְ+ X;k0TCK'jvqXX(LSAه ۗ/BPd^Ml,!ILWKI=ޯ(fqyʍi a }KLݘH4 &Kc _R;t9U qh!Þ(VNٿ0 !m=,vxS+7Ì`ŶsmlC89W *bFTpuo (I9+RO_+ /$Ҏ*S3ɉ=ZhT?@Y]ZM$>Cgkf)tY]1)s[(9Y\avWjBY^ei4+SܫE!SX6U(߸mCbdҰn[ io=tIX;P C;nxĆ^e{W)GN .K-ll詬rm|z*AΊ@bJ[[zIiҭ(ux=:X|tYX9Z'{R er Lݧ UEG(y9vʉdPaG^X7m:h_gAl>T($ F.[ [Ĉ_O` &*<Г,Gn,NhEWAf0H=0QXzbV!Cmbݹh}?s/3x_NdT]|1)R$b[Q$Mؕ346 ZKg3=@kJ][f6vatSA6wdJ{4%b  ט\_UT paHUrU2.KV}aWg,M4i[: c䛂[f›yAO|$gy&}H;OXI ?!a?⼁R'e,TTW#UvJ;;><'x 2HV7@tYx49Jk;g+H,Q֠Iw!P2"bXPx7pͣow,j-;vœ`v1uA]|0<᪑6(%AƢjnUi\܇22MnaΙՅu} XL;Ѱ ݩIڝ4$d"sIQtlUuKqRBz/ǴC.z F9ibqdt.[H/N-[-o*_xfgmh^e_CMVJSK\G_2M8S tSDajnG5hhD{tS܅6~Y)G,BfrDŽJCe(wb'~mTH| ]*(I- /a /OXR7,1)' -o~pd %îBg5٘Ha|Gl&e`SqЃ/sud7Il;#0~dOؤA 5>,+/Y ĵ "d(P;َ3Xd6r^ 蒦 Oh\/T(l@>>uͤL1}Rmugbr(rhM;+f5O".RSٕ+e^*ݬoOWV+pZ㈖/]eE{eŘ -9(Ho-kmu@^(Hf pc:@N0  T@~8S LclEэZ{zx7C&'xܐpM}̄{yjRJ=rN~%8YG;GgW|!LŊtEOK11a/5࠾,N}5nBAW1ӎ樚@NNHW/:TX9? pJK MmXZSB~+?3}EdcH 6jK Z^D+rPC xZžB& &aw: y[r Lʄ>Tn<34 `4%OjXHjюzmrd:`vGa*9-SQ7FΣI CurLD9_F L$zt ?nLMdž\:E?Km$#|:W{xN&2Ϟ0^")n6ikUdSȚ$Of1ukIWL.kk M{VJƀ\Dd:} N," A&} s߲a#T?U$J 8Qm dƣ.,A)6?} !)~M+}& *Uk|~W6@i] VМ|w"YuhdL#55ĺfYFim,NgeAc3Sƈ|Dj TuzA!,(GCeF8i9QHW[51a( !79 V?M=Sit,%ܯ&vA#{}-wQr=<]*a\hJEbYVrsDhێ?y ^'6[Ҷl=ާ^W^Й0u0f )fېU!&jmj$Yvđ*Sc6'K{)缽蘳qDxB$=0x0dC_c p]FUmjJ򚨁1s *6E-*a~ Ջ^S)dtw+Ce$Bg&|K$vrgGljS|Bl{C<74$4y89U W8"(ilvEnvr)hkw~k 1V-:EߡJ&^xWm0MU{a%wy-߼n%dWPK`'~ ?=\CYKf] I a)ŏL83e?JAZU.}b2&.ST.@htC(^O$ gՆ27 Hk6l;2Iz_ʦmxFV6KQ}!roviSPo}@?;,?@ ekpwGEIԋ(T;8daO%.z\Tmܕ[Ù`~@?0ʟPJě쑫ېsq)Eű*3i_'>xx³WԔ8ao+*zªֻs gK׏dyIQ}Og>^TdT`ZTK/ĥ3 kB@Ӑdya9W@8"<]AR+0ѦuMAK1eM}}@֬'*B)Ԇ$ i$at3aD=7 @'efd7t.1"cLDqVqRW/WhKlG.ʏlB̀\Y@V.Ό:ut!hں 'Ý(&  w^Ye~kos]zAP3$\w YAwSc"Z!`nk GmmVI`Z+Y_ ix69#P2^ߨ(wCLCC n9(c>,&$ S$Z"m[ߺeZp$% 6kƃEQ%K-oI>B  ͻ;y^7<kPEPSx2?2fZ-Ua[p @~ўd,  f&`f"Fe+iHc,LIe<@2Ҟ3v[8ơ֮4)MF 2xaqʬ/ghSC|\KǎwqM $=d2 ^5Dxr2@%1*|ʂ}kW VHw(:xuKP x "kpZ_ۓrh]^ΐ vA4-2*ɞBJx5䬈e7+S1u:g.ENf!߫EA)}?g 9i2.ojDh4=\vqF7K'xes#UQx-ov4^STMY9sAz;ds!.~06 ::^؂'c+7ʹuy9OXU]В4$;G, V 4]Xb=S\?lᣕ< @wymFģtS==xL_mfpc} ѽo*-3􅐳N(aFu"H&6a䫶*u0]Gleɳ<:)0B0n)<Qs3Ų>I'ָ>n!ar>P+/bi6Fkʠ'a%){,!cm(Jc>Fƈ8N=R LegYנL9ާHs)[nz8xRpx%T͚ ~v`_Qo@~X[Vxnُ趜;M+db@` ;Ii^w? Nm;xCM(TS(_Ȅine%5&E3Y_#c96[>2aخFT) a]햵W'r֢rkB6IVy!B +IJ?Xڵ[G}8#;s<('B`{ S|[Š\Mǀ{r0.T7YGt 9$@>(ݙljeoi?ίȲ;־Iбn\o5IuxHcyv6B F3b`nJi%9ċsPKOڷ,257 wyIVd(Y[g '%zK {T{Qr lKIz  l29CBHb`ɚ9_. 0U!Ye(9'_<$hd3!ƍ6 ſ.ƃW]dmcIw*vf!iS2o+_w ?-ޱXlȚk9IPZ`ƛGէYnNƀbUߏT lV.OgR'5,u'fӳi(N-1ڼ`E&rha@뺷Fku V]J} T~$;㋘;W%vϖ.~k囜5M3 H*MSxگJ͂X|f(AF7ө,@F{2-%kdTFJ`ܾФ.):䦆3k yB2:BK9LCF{ɗK"տjuW{BA“ؗ6Q)q7[<>ט#W6T5;f{OW<ce4=~ =$D̕ZPY (7u Tཝ?B;eۜjC9)̾H'8ڊ@l,A]KPF" Wf$GCS&dpa7s)䥍d5zY)``ZF75w/+zN4lcc6S޿dR=YkpC=U:t`t8l^)~.T ?G!PU5β^{CHy4t;hT_.1 I:CWYqԪ5fH%%=C739i{8C!|)Wʷ m8\eD<m- Xj-_0]@rAV-,%Sx *hBjs\ۼ'qxK|P:e 劧h5}iBOW/ޜor(T1 V, K P;\. M'6a7^E`1HJG5}`ۖA$(%lӶvuθl=Ohi0Js{2{ GWW-!6Le@:E%mtnC=b4"~VG?+ͪ1lQ.; +P5t6VDS&Ǭ s!bnZv;I EOUق5D1tJJj 8mc*RNI|^A9Kc!]r?#kcTulI>~:LeI %Uwl U2K "o@LkѭDݜ n#MD@exB%(/vUl.S:M$>[ubZ6ܪдU-ۨ)2 S垐駽n3sA{089.3 iWtZ &- Qy33 JE{$"~&*x#i{|?Ͼ9j_Q,h$ bԦ-Hm+i*'#/e+wb*-ASMOT3"դ \NpmlfZ <7UáYt>j]ki&Z$UI1ar\s8[&>SkDQ 2 X)Dr3Y#'Nç :;;gK6!jev1Pـ)6?φ sP0dK~ "sC!B@ab]tX]9zФMUėR';爅 'n)kA2>ck߭F[BhlEBs#gon,'e9# X t*h;Zv$t;ǂϲ ~+d)G`z h3\Vbjj:KX륐 FczTN@4U1l uuY_ }hDA oJ 4F:)GdnhPb{ |!k=roF(8IlHjҟ0u$% d(T̜s':-ɗ[~lqzamMoyu|9HNX `H}~[Az0Rs>v([h}R#b6#:F{?'83GZxVҬ$aP- D Ńr?54q,B SݞفGk]'39*?ogSoZxO[̴QXEb.NzVc %Q]nRcۤ"BA- {M]LoSRc&lk6uد- #bR(֌ W%}е}ݩYX s(qxHlv#jlt?g%ӏV,Jqn\&9ͯ|.3GU!QxZ$kݶ&rQYm-IoWVMrSۚS7eY%o^|;8K%yLW2TBE=\@m8 b8|=J(U>L6TH.ͽn$c[nnq:ǢˉDzj5R,nr;A^0p,}6¢"5Mv6=Pd N|᠍h¨h~u0>6[7C8ҲB,XK@& ;.1ųKBZTlnglo5V(7ʱ#-veXF$8xqAŰ<0VҘs>kjyי^`Uʌ={j=i݆Wug"sHY+J.M>YݘHJkMe.RqQ­ }A㴅= ([SC@yV佫6LEf0(2` 0>ReVbz/;q`hw!yFiu ,@eїfGZgKP۱MUrCt+b$P. lo恸P ="fYǢy*SR"Z]ڪ/ojd%$z? <+ɋ )ΆsTb.D-BpVԺ1fy_XZR=*uΑP_M`R3LJqܩ3]zc_#HNϭv I < K`~/ٛ"д12=Ui\+Vf,Y)b*dt61X MrGbʘL2Ӿ=`" x(f8TU'Ɵ@#j?I+r4ʟ~/7 &Y^i l%ޚ\nLr5ıp6X$cu2HlPk[H$/Mi[.=^3OU =qbnI܈o mgN3585đ٦̔.QLU KwyJgwGSX;FdsKsG>_ȕG+ RMVD#Wb#<+4Q6V0_2旨瀱g:R m>)lNC&Ρ&TD׾h0Qawuq"ڵP辁#˒]gD"g^o+Lp]3JJ$1Y^}^eܥ;Ns{VKlnK8˲5iU Gk S+Յu[>1Au Hoe#ّ).`(&h :}9,Ov7移5ZD6-W]Qi' a1;\,(-ρr&}XՇZ E4d [5ZII۸;\%&R6Ӕ*Rc# ~S_Qv̫dǿޖk ֒<xIӀc>ܜMPC= T4B]+=wZ Vy 7 - ƭ_,MW69vFd|ի{)5Uִ0.JjTB\5̜$ Z%±-wehl!bH795);%+eNFNRf, !ud(Tg`\,%:$mY2.l7M-Ɓ^ Y icY'>AJoʵj_x)g84zqWqCb`Gl*=3hPl5.\'dJ_ǐ ↀigug{"mn~KQ@@i4!tYQ|#.GejJ,C,ŔL/9?{DwaĊS;Z(qbA,̃A` fƓ 0wкI}L*q>iva 4#Vf9e]^o,TM޹yQ9~9e`v?z3rRë 3_c9OHloz*1\o!]|1 LeƓg-Acj b|HY JS Vl[@Qa>EFq(_-BYǞ8P #/=vv]`+-j}ӎ|@>f, 'o?]RWɟFHjjޤ%ƿk3zixx cE²8>SL,6?_&R+KM̅gډygf-P{ȭ#DBY-t"YYbqے%>?6+5IR^=[6kAfٿUP7E-I3M}9BixQ9՝S^σ}O۾mnӟbPbrQІҝM +zo-] %8ӧfbQ 'gʢNpLzghEb ʦQ0 KJ|Q]YWHܗb⼧6d6w?PJA5Z>?S%8"leIngnR6TBN0}/_/.zf 9&w* d!UtTEV{MwIa(+j9$ j9%_%Guߕ2?OZb[3;puj㡗yQe/"HW՜p2P-\`l:αʉĘEI:?ߗ̈́E1k{ޖIɋ)'a~ڕ&H6ȨR0g #⹢O¹ٻ!1q7@NEAi5- l3`ȠAV}VdZMf3;znWU:`7WyW@v͚+ܤ`:mޒNӞk> xǭ9ͼv^*OhȞV$ko.z)xޔ C'@ͩJcSP ")(пDZM$h/+Fj6,+=Hp7`0uRT25_ЈX:HzA~Bix|/x>+SU5KnuszU 3ma{ߨKtn &:EA_K#"auUsGn ;8ބlE3ЉiAYf-.4 5ѫtn w(Hh<EOrTg NCLXb͆m @R*xN,(A8QMMk#¯vҝaWPnvj^|Sj0Ko7XXE6HAB[a⡍Ucb k)`~[<,e+Y%{ Kj2WVfDJXW/09Ino>ڞP+Qh )sTj$ݩ%_֙ ȋ*`G"CK|`DR=G1X <ƻ.eM%URCv~;bLy)_a`s죾iCB:wF=}RSp*LS0U;cW*eb#P. IX>J L ɃBvXvjIrulj"Mغ4moNͪ#/c gdٱ[ގzG%WIPh? r>t!x}Å"aL"2NO-A/#oLPt^ vxI#ʱ|;e;M;e/hBizUi1sIGO}v#ҏW<=GhEq0ϹNվ6y:vYva賮ާp mp? +Z~$G+c2(.[ױ['gًu^3Mrm/Bߢ)Pt ]|%P]yaYD~(?=K:E;Z9֯y0DpnOA/$MS̙ulK?AV I<Ў8?Uݙ߯z se3B#눰ɋ 88-jӢ5yеXr35/cG]~SF)|b:36l|L.>W놶VY2`*oUpEɹƣILvs*:y2 \SNdPw7XCByY>kD8|J,RstqXI:XiU :# q\T|*m J]=N4y⮶!aafbqu3jxkIfy^%C"u[$BbfVp6fa41*P!2BywtF#v5:zo!p$ T%E/aZ4ànԸ2Ve[S*K0\Vd,_#,91 /=?lk׷}ݷ=vqJ<"CUWMz sy–;_ 0Lq'|-<ֳ;W,#%pLhlF6U 6 x{푵G %bjHJ&p-OF}&u?dAO^ps҂">?xStkYCȃ,|!=./(5|]<T]AՍI'6xi}S噈 t/q/dimUDHTjbtI}w.^hn&o$%S~өCT N*!޼Մ'c]_$?^,6d}rg)4l[Md ?J^L +`_vS^yqͩS= 덷/rnEP̸ҋI{>~&pЅ͙ ifQ6 ߄NdsbܔjfTs]rT3tax\Ur'Ʀ!ܣ#a@;-D#v.uN ҏg:{7ϰ |j!>!^;"C]FN ,M]Ke LElSO&hB5Js>s,8=8!℈ hQ b?u 0]_6$Fӫ7@w."`&?*b j?{:0s[1B*kyP#^O(H4UjzxnE!rr2/f2B$?{UV9sa&ArvӃ(pkjE/$6PME4N/xH N%][ܒy4o$ᘍ͎&{ly%F7 TT0 {Z=&OWvD{gp'nV+[jiؾ`|3T<`Sm\13k6KoEhSCoo$3w(B K{=ltZ jb7lz_'\nl?ĝe}%(7mYmoPYu6ޡLUCs, 1`{w~ޞD;)V ka)Dx, QC9'io@t`Hr ng|s =ҽ ij\J G1 `1 0tF^%`#$wE[ W_)6[wy%_PK]V&׀‘=^/⵫''cDiTTpb+܇hR]="Hl^{$D@rp hlH%ZA=Yvs=S\2=+THA EC;K-P=Fe MRx{N;'b,rJ&9 X$ :3_~0]?/H]F$6 :tۄcH7) Ъn+PFy|m(Z|tX`)Bg)k&Se Le!Ƭ^Xe)'=]auF}uL7X#v.ꆪQdPzT'uҗ_tT{g)jW̲g+=xw_'&9vFt8'-a#{Re #릥.J%١6 @"V7O"+״RN <7E  3?3d}r@)! lvT&H{L4 ro3Iݟ&h.ru%ph=;Tk,QSZ:MecA.OJF>=;MAz%V|pݲݏX& I ?̰..ѨGxc,uN!L!8)X hb7gʱ_QQnni /nRÿc@Kao/(=_3  l5(%qXw|FY1OHţ͒ "ލq7(! |i{"S`b9Zf>|NA_ 4꣭'۳dǀL#O uN@ki2Ƈ]JlC`ڴ*MnO'nZ+[i(k<К3 q2 [&TR) wÅ4q[8}pw6t<L`$sGnDQu=?=spƱ|^GL>o #놡V4~?Zt>/z5e+H!1R?EƓq.f HqtOXkom4ªə2r δ\VurjtMƎ CiqB|}ww-Zs1Ak?:WC}17-@wh`wq1'rqyOnP;yJJ Afn'/ ٥[='B+G=j('Vx-6fH;#,5N/L }? GU7>V\8{09(BBvR@@q y3sm~f֣,H4?s:o5ד1[! sv'q7L;~dp/-k6Վ߲ԥt|YQ! -Z{bLS`3󂓔yJhޘ1Eأ 6/ޯu*4!F'diQVxk`Z#YE(ޙnષı)攙U5aQf|\f#.V3Bsf8Rd5ʴe4Kv3 RE,e( Hk|:а#@2Exʈjg٨={ׂ@\jNqw Vİxi_FYΗcy\pYc\kac,DrL:4ey fF {IlEXд r )v>Ƥ5W~&81HnXQBO'թ :Sم 2m֜b'(Jt]G C@$"*BD RtW? |ϰECuȡjYߥ ؝4?YkPm4fJاciE BQh; y<DKX;3I IcZell0rt=7<o$pW$44| "s6ݝE-8HO5 DYlDh7 A@nFbo:qqmxxe~4)`[[24hX O \R$;Ygu4_Ba wLyO됞Ng<w0) LuJm&6/M7C,+o#ʁ!:XZf]J:[L\:A'oҟOV9N4aaewM8FviC.C~L&tQ6cFARDi!> {MڛSيy{n W*=C!_Uѭ{/t0#4Ctp 06TPߌ%^A1^:;0]5`W\~LsX_i<:RmKS܋h'$’E⨨ɉ@RFqK3v8q ;|- gs#y7!'p>z&):kU'U"8Lvj[4|ڱG$KfCCՐZhZ2hԌ' L{-EXmSDոOee5ð_N C<Х0 zt ֌:3jxa+.& $ȵy|zgQ] >v0/w{CeT_p'.g_:!.ŵ>F"W"=5CTC>ikš.x;LC׾Qq}<> kvMI_L&^*~'+$xtС?dVS'rQѐm&c~}W\UQǙ "m?죷ֽLID٪3kyO>05uj ){8W<=pZuyeʯeڪ" LsroYSa:,@>rt<i^m_ $m;./Ǹ2_q'V?0B'όJؚy/ZؘĦ M!ȁ瓦N:$˱$g{]Z85H= +{-/J5V1I0[,pCIޕa̠~;>1ez"/"(~#f JwxB%Cr#C48/s!胀|}a+ l)ɂ=-;fǩ9oV'^A6+wώb2@yOE}8Ņ"0#8H3'z`JG^H>P-YDwDIÀpf -2;X? 7튺 u"z7C">Òt̓ .Ap, 7HҕL̴r-Sb2?40'Kn3i 8s5'$vt? K*Xպ [omfZ`6UrI᫬mwl"N@ ne@۶k_HվaSu̜l] qtTZ,YPgR=B []\xgҊtR< 'r< c[Ojj@ɰY [Iۓ 19nPЙS`<'J HǂA]sQȽMwBJ&M`A$0ΈK9u7i otۼ"N{DS谠u?h<gbBn2^*O PI6& =YÖƒs?f) !E[ꊉƍ]Z`|PDxNcZ t]/ Z@'%D^#2kMAg,E<rC_ړ(~< ,f\Ǟ7 ,y:.}х6TXU7,:^j<.nӾ7Ch=Cua,~4f1p]q*4,:n(B6&SxȚ〩Dd_#auwC:\;WQ*j2  B#9įNқ=\xR5O(ޖ(}E6G5x=\ח.FJɮR(c]X dE+" T`̿R0ԇ7(,ic45#f oltLXqzMDe93(Z X+JoM+R7B-yQQ*k?g%ΑUeNV}A-=M# u4{4"GAM行9OɧV(8@dkmu>l84ep?#]c' Osz7ˁ}C[3JBۡP`90z6]|Q;F&zi;Ì%G" uVOPEF6_pنE!oR'?"z d&%g0&Q-YxY9!¼B 3ԔK] P&;: GAqeue+77-=6|u̮6L/e?j{aC;~Nydh`۷lHG) krGeClK{>iqθߘ~R6ɓvTרV4,23Kj6Ɂf4z?^ 07bz78-Z9wydSm[K6WWO8JelէPoO2S*zs˼i= 0WN7ÎFjzz3//`O5wUaFQV:|x%|Ljgd6SD&yE:&Y5djAlw,7{[kL?!Ljq0@LLP#Xˆ; ٩qkÇzn`j */XpuPL_CcY;b;Z][gHe]{?EjzY$/!vS;Ĉ&.=uKxi 7\bDiھ'q^/e F4N~G :AVp6J+ޝgf8eF9qD{ZzI t˥PǷυ7aUcFwҐm#+:w]5{s/-1%J :Mbꔽ{$d]ۍ) 5)42wx~RB fr k)ᲆ@T4quԍQ0^2}`s6zއ^@.>)YO(U`[&rH>b0iVRӐ?f4隮8'д_s/0iF9?vÙtKRq"WdfH2fٻiH\Q3u-10l[%b˜!& %*I8XZ^(ӓL/jW{U-K4,yQG+د` Pбm?bAM2- C܆O=x4JomR`a"& r|hm9 a} c%JrSst6ZBFgE kȣuw)2H n+dB?v,b ghgֿGW׸h{m%rAg 儫r$X?4sz]7Z+")X, ^.m.|J_ <%7kh-wYtvXSMo:nP9 !q5m;A/<9j,έrF,LNuʨx}JA;6N-*,;Qv'e4_luU:C2tt_䨰^k̊sr誤`$C ߑCTsz\tc #pKo"?^'X꿌;i7 *s!tm+:L"BY^QMO=5F*}ߠ@<$f:=fZO&yd*tjC mM%P=O~SlwQݞbogt c6kN!}s1nVR-u [juܵ=uc8c3zJ/)xp~?7OVvb66=["A^сKu*~xyi$V̊5 x*ڻY[*zXuJ|B XD L%˾׶Mfl Fힰ"pfZ f8z+k"0$X^_hV%~ NrUVg~ cFS?o H99n rH}{. xMdtON%oUl1Ti3,%/׿%6g[ue=W~n'LMvwpx r\UY { 򐛌*_0 ]/Z.VE!ݖ 7 ڳՊq”0t=36zR[ I( 䇁4^8s1ͼ] Vʼn" -E{BEKmxP͐%^߶Chmd X+yμt0nzz2i˒œątQ [U Wc$!ozB4XTh.ia ( vCyQeGF0ٱq5W:R >[Y[F*{.ɟA&m,Q28ϑee|b*Yڲb?*WOBZ6z= TpZ7z`v NI5tђ@N/[吘iA1l>Oa#zhl d֜n51iz5N& ߣ9P*ã 䚅(#S0_\gA{lreëq\lc< 5Q͓I~r'ep7F9+@}E] 0X $gZ"F}8.ks@sO sށl⓷gzPZ <uTLDV {+'r /+Gv"og3{D+W gןw_*;-hR?#NsvƺWJyN{K}K6:5z&|>q]Jzu0ҥ< J9U}1ոkNa=&IY$%tTAqud'H] Rr`eܭߕBp ͭ2:Y/ ͗SYY كیq5B W[nc$*9r Q4v';m< 4Բ扣鱜 4κ4lCm )dαia}$tU&~' kl⪾-&Q +"B'P*r Y8@~ݖHz<x \"׳څmO?3]p$yRX i_Rܰ cJz3;@E Fc䛆> r6 ] x; % 8qxb| -)N.@")~Tbc Ӌ& 9q0^?gi$}f ,X¼W!N΍,ia [>I<51?U(p䠈ܚmqn˖-a${ԇeől۶$N|[e^TT24*idjDNz/a/hXK$.=LLX+ЯfJXX FI+eeG H:OW9Lt* _ t\&9PJ} ӢCP6q԰TA|3(9ݫ; OE /vv6JPuC~ ƚnLKU|љdEXiH5CbO ] ԐG|xO۪5 I|ysk-Y~堛1!%k]H=$TԓٮuޝFXi(US.w|%nM {?gaM"Nc46Ft ۊ^-eNb1yK2ߴ2rq6-TiicR]O& keyn.JމeEU'fO6=˨v4$(Wn~!c-FDeVo6:iϕ,b X&gi!8+rɦR1.%byDţL5ŭ1C8%'%%%H88ZAl4Sga~.tixptt^؞uzqw۞]px+6;pa\QJRY@Bb+qѨe֝^_|a\A6h|Z铒Y`S㗊u gdCVMenI#vbVƥ{ZPgBU&(ds5 9u.WR vۏl}h!7S*(7\)ӯQԪE:mRVlJdmGk-rme)*~3ٚ[KFOד W/ؒx-eg~#?+P:Oгl >AiIc\ r MgBUlO wД~/- 1fK@-.qd$qLcN1qe.m>N1m)nwj*j]쀠xT=^ tX)[CE?@$3{?: a]Dô\`Qjjg4۠, %ێh v|~X\DN~Fp'fGF\j= }o^=ߩyG̟! 'e>Bnoj)xujۆdN R5{F<<""Ot+_hǝ pq杳>I~]Ҿ{#4'4) _=R[j".pFf/"W(>s ݗ}O4=@&(^[.;uM:0t*ȪlW;s&0oc ؔq߀ r%U4yݳ>E1$D;q>4Fp- ?0 {D ʮ3?(9Fcb%xia,f5彲逕ʎq%uϡ7f ܷ4' y0cZ1n8$63j5DŽNՋOCgJ b -/ܖF( ,tF ql!XTnX&p4Ғ;M y΂K_k,n2$>Voϴ`mo^Qp\ X7dC"F,hTK{P9$vb30rEZhVξELMS,A~+|mpd(DX*Kĭ[K" TIֈ8-t- pH[,u~prH*-2r jPg-`ƈC J;݈:p B5RbG*S=V-4s5Gf#80B67ik,qNnԇx\(/$"lB; &I7$5&E7=ӭ?YoI>evUNo] a.r$ 4`tC86P οOثmtX)]T2ZDl!֒/;QNh0#ѡG"mc0$"2=oku',_/)wu^%XNaThqY1=?B_w.}}*B)i :/Nvɚ6}\xq$?j5AdB)/j¦)[vۢ×k69y<0ݐAa%eϑAj ~^z8\b0t2dZ:pO!5fr U~YOVeToQκAvYpmrIGDZω41U|!ykhDG2&i4$h]sѲ]V:Y,$v)$SWc&oR\A/lB&f?5hP D޾@d +ӓ8zƏ&8YT^d΢!R~V^_ފ{GR,QF75X[* y~>/16`GzWw*eAi1=rF?9ۿB77H*G3deGyTeB槔=7؀&|Om߉ʂX@NS }PC Gi}:RJݷf3)TtX/݁&,Pd݆E{QE?pdcm8e](Cx 1ʵ=w+~Y J /& X0BP8 C~ Ls[O8'0X&ۿbyTi(3ėp(Kak]""n{؋ܡ;bE؜S8C4/8~ _%~8usrla߲io`bJ*uf/9Z)zLr_1غJPkWdû䅞qx#%]V;In\tXumWwI~aT'WL^M ͸r40(zOܷt01@+(9PḎQ յseħ̣T{hLƀR[t+ jmx*xV.M9F9>l9D(깶/tDGm!&j){qpW[[4i]ovm6r`%cOMAi Z{ 0t[R[#bA<;au]-Eۏ^Zy݋.vڳe<+ؠ7f^gxjrʜN*Z,HO(;wu-7I ֟G8F ~G(tkkTEز Dǵq#093.b7 ~]m]k2s 5y>ps<_F _ܒL(%~CIC•zik ޴)m̝:qz 6a>Mwiΰcx hiSv{ pB{c՛_2Hhϝܳ,"h}`hYԦr+h%EHi0Qd*2z,  a1rAٹ R:) >Cﳚ;NϜURA>}YUa$c//؀p) @{M+_g=D _p B@L6UTFZq]FcLj8DGPJB/|J'^ֈH+ZN,eĥ>538=V{$dG{۷5瞸mBφD7p Pz @tM`""AZ Je!kFEbl!sg@ݪsHsT<Ԣ7[}dVyEBOoE\JH8Fl*҅u -2 ^ڟT,)sWPB3/PS'bNjIԿMk0*Rq?0MkߠA݀'TݘN-`v9AYm` L(+<"P*6XsRQ%Mϓ鞵W=Å`G^[3R(Wүrح/PR(W'cB2,Xvҕ^ K#u3]h#M5PRhFٜ5\j`^a:{@o'X>cA##w*PʜCGNMc}+Ěf|#|E)rG+^@ LQˏid_YN-IZD 6V^K!beIܲDuڐ{2 x۸`i8I*˭>ukczs"ELÃ6;Y=-q_hZ/0éX(h>д*aXq]_5SFQv+Z"2^f*:n`bhn{RhC?L߁;LDVKrgD|ƭߛ&Jڊ{DhDF_݄= TQ, {v>g-u t'5AEOnE/8)bk`Ufig/)уtjjc5r 7l* 0OM-Mec&jKPci15V4J+C xrsOE!ʏde#a=}mD!c1>X+Xkm!DW2ҽsqP4>$вjП79^A=Xn Z]ōoC +rXNMi\d[6Ol$:C -K=TJT=Wn$2WN` `*h&\BЯw~OS370 q…HMx~`^%ϴ% X^,qg."e79ԯg_<M y6:8@B7k* v Fĸ&T:wI_!xny]Ϙ6C@y}=giYF~_\j:־|"~:i9chG dBʹ)s(Eͱw"2B V@̒Q2Ty,'-%; ٳ3d#i{,Y^EЂ0B^< :0l>W}, ",81r^ fC/pB{Vv?Lɏ#瓎 Ly+,@|W") Y2)_`.=yiYȡ3k?JW'NԌQ_ᄮ@[;f g~5giI@l JUBig#\ ʝS}ycյQ{_,(_K#XП[yeA؏oX'A=L6de:}Q]^x9PhG@wͺlrdX!́7"z)5&fБS~9ŔcaJɚ krH`#H&WD\':I@1R2͇6S9)ڼ _lTb5#}.Y E;]7֌Hȥj8;4(SI-p r.^@#* A86C E}\o)xxp̥21=wz@9Tc/ύY{u^=\Aj.E]%υ]zϝl*PnE[my})`@}կ 4։5PVcS>|r i`R^{i㸊=kP`dg`%q|.MΧ|g/{),Nڪd*h,/] A^^&q_!*ĘU2Ў^H.k ~k~.?&_>p"3nE6:VS*rfr7 PahwnS BA/Fg?ȿ\l)tZ2j52 wl3w|@-v @?C1"d]x!jb.MUqie>/ ra/bё0-\#W5/bg b)k? }0 D:vz%rOn=^#S0j  jM%?"26ع0*p/jwK`q¶+}=Pfg#`jAx4)QOKDܻ|׬!׋_cc&*̳j0r}ݻ򿹄6TB!p/MYwY♆J B6?]]Լ([2N7urU=hk|N^dQ<}~m+8]GWfh6Yial.9嫳RpWPdO9K0z3dZco4uKL0,!udH'HWN-_3y >RiURm`: PYwesdږ@;8 I9^،0x'CfJ_^Xa+.mHNhj7AFW,no'ifM7z܅;rrQxy_[@jt u2J{7L˒ƹLSm? ޫRT`W5VyQu_U&v 'ԕ0)hdN0Z(#1~:՝ghf串9}JE?\^yx;-6'2<>x "Ff҂Tc6SFpw1f݊iofѓ4lS ߏ":11%T<Ӣ"`Z a Yp"J Q}Pͦ+n2%장V&̕?)0;2O-!.RE(;2^(a޹C+jE`7x߽ XG9\/R*L?%-._(&~1naSɑS"S^xMNNbLzTQ&r.\כu;} >fhYv%HC@0ߞir].Oմh_P(CUMlwƁK:v?hkoT]|fWR{T20)MRQ8=&@ȃ}h4roڼrwI_4G̰;&Qjy+N6W.B[odWV*H?ko78*}ۧ9CU;!ab{xggCd|z~M6$Js3F08RPp|rfi"8C_գl[aSo2$Agjv -|/~}87Y`ZprϋǓeL#K)sy{/[n!由D4o' =E1FQmM ް )+%gqsʮB 1:&nK#_qw*æPIј$(9LmDy+<0V uum?zB`WyOEI^~M { }pDkXϒIQ`qOl)_P?2&QC xm=CvG־Ϯ23S gb6ɯ0Kxh(*uN@)CyS7wwղga5/] 'ѱ#dU5ZAZ8?)\qI'*3'8 ;{P?,S_{akď=N . 6ӖvJoI%6;aPt ~~6 f3 y'sqJg SpJĬGWkKR)^5ǯciBZrI!:R, WXaYvPM[&OrƉ'(;&!!pG 1 sL;|wi\K?c85~G9;֍VZ QϪljy Ya)X[w-9~ ?LI>IoJ6dG-c`Zp>AM`B=5J&ShXw<-j dYo~2)'j ϕ.NͤEN p(L#ЈΡع`m. i=;)X1G_Yr:}8ce aX}q>5»HmX(x1r?dʧXFNg6>zDGDajqJʅ~Pt.V ЙTq=xRjE 2x 09.nޝH߬ Nq17¦m>$'\B%=*_`tW}dm@]" $GHwyWT"%I c8p)yp+$a0{96^۶4Y $F>e'mQ,<fJ"K0Uԥ, dQU*ne=t0Y46um<d ^7LGLq9Ƶ8?.kEѕgh4I:Ou]H"gtǖ8Qo'JMoA6i|CP_5u"c_rp 1h۫ Khڥ8NEٺf|]Icy51Ey4ֲ.tL{cvB%tިb>>.ImoyC%CfXAXAhi{^>%lL:rڟjޏc1m-D?vy ?n׳E@oe~!'oly԰foX:ʁe3짗[yͧIs.NRZXvJ;A١5;bq=ΑTµkX;րhSzۉ,a6_hR`4)3iN[bx݄ </T?F \-yVRK$ma7X#HyWs|bnSYZE𶨳b'R~(?84=m!mihA,EY1j]>d/)u.Y-͎+GkB)[ce `,(ߖU}mы^/ V$גo{܆!ObeBnd ;1;od*鐇<6^~(vOҙ(D 5@4p><>Pl/fv:u㖵SѲ02!pm"q_υnk)ilj-F6YumD' $~7dlz`˺>OT <YM գ[ru9Ѷ[Rжy?,B<Mqn;aەA$e Jڞ4Af` ]3道>S L$JO-NKT -`VFWh|78 Hf;n2W&pw p= or[6.g4w/ĆK1І^ E%|lLa/a{sI\UAysC,yNz[6K8.=ZF`YӁ֊OdLh?5*HZ'GQw@#BtOaZzxפb!CKrVV=DgkS;eC5Td8rTgrT]U7Y;Rq36 ZKsHo#`G3dXξo8hty{VGzZi;`\q=L UP6K lmTY գǴIJC4ή$yeE5G _EdF޵OC+sShMm5AQY'YR$fN]C5f-32wxбN ȷ1_("I,̐ttmoϕCLHH>3vw ƚ(Hiɖ&mȺCIV/dTiKbYlAfdy/^- 9GΙK\I Hi9TFR‚_RLyk.޸u&]F)e+f34Xߎ[*R \ s0>U2Tx7j[)eĐgIyڰ'Sp _z"ƴV{Y7kM"|Tp2K [r5ۜ~NV Vtls3KseTˌ9w}0B-B#"S_ߛ|%Zbf U2ŌzEpJ?(9"&t.PGP`H6 -db'>}:.=_kqzߗV|qVZaX u? m#swsl?F ATnjrG ne; h֏,!0R6!6LO5<\Q`2p#&:L1|l<M8Ҋ23de<7V*=X7(Zd^j"f&#;_F3$0jĹG~aX&>DBUsJ,ԕ 1-\) 1軎֤HbC,Shh}>D{Μ<`T)aJG=閹YBkzr#,ѳy@Eh Yߺ^7>ںVx kɊ{ChEic[TG5ϙn\COH>Qvj=YwB8\\1 n1Z!>TI8XE7[l;xˬ%/3sqt승?QxF&.pˊ/;ң>FEѪ|Q,ց'dd1a- 0J[1u\Gz(핞#CU_$,|an|AM$|ҭlrc0.3 %!T:Ar;$}+b+րv1kY*pVl5 w1y∣ mɴ?eRQzGbr$2P@o"}r$Xer ""]6kl@YaY樅jE_zVdK36vsW7[eb^ǖrq#xI|ɾҴKK-WT\B8K*Ll&o9t%q0O` o?7H3lHA`1Kmzi@Ɇ|lWHu+ǻ'gn>1.f է9 UJsWAuV:FȄGnud,p'DŽ8F`n4}7{/s&$d. {~' a]Wd|dvk詊nPSOz[/{rb-z?>`lKD+c;[:Jz-9!2nih%tlazPf \XXjE\֨@ cN_ݍ[ ͘^Ui.&r?z{WIʩ'eC[/Yͧng ]91۟o+4h˻czhOAl01 \.+LPdw-ػs^0I_̑o-۱nZ!U( ɨ=n@nɘQғ"gկⰺ,s𖍀0wRDak|}ֳbzE89bJAx=|yuv VzHE' {g}ElK\+0/k* H H-R 1FwMޠ؀킍Ӫ*d L}j.U,ЊɐUa/kÝI**"/+(k.ǻV+ܙs^H>٣3(V @KLظ4˦ܮ w pz[`,>YCjmac@@aץ^υ8PXrT't@OZB%%gOQz3"jӒ|*ByroڼAvHV:)UE%2@=t`L:$֗19Pw9@^ Ge": au}QpM`1(`.gKD8$Kߞd5C>/Gھo( v#l_iOu,QðlX~W[hǣ'g;Nv HqBn NƮ|ޑ3נ_`E}#17Cg r@m "m,?lSI1ҝtպú)FoWv:GlL@@XS*9A0O pҧg?&@,j&hUjTMVss3m4:[Ōoa龆ç؛:M؎eMLOpSZnVp`/Tl+£a)\(41`̣ K*Sx'1nv dIca#o#*t$U'xXY TO䚉tu gZFP2ݙds+)ծrUEtVgS7]1&JQI|Aa'ǿEN9G9KyVˉgOc qQEo=dRUØ!#aPOm& b2#jgz:v#>:ѣúJ%.@O&Ȫ@L9َa\?ԑ5@t :c*ROzN!tXʽ133Sl#gG xD p}182(쯄ʎYTbw/?76K' 50,tx=mKT@$V,!N8p&idJV@X #OI(iӬA.fph-xʮDuK0ĕ&݌gX߇ iR' BCQ5D9 93z56=Kz,/4 ǢjOKUrLӾ!J-?W6tk0@ݜ~S^bQ(T-w;i7kY`I[Mdb;_[:S3P<."(ݹ- l"{γ=WM NKXǫqDۓNMfǡ-:;n.D)93lXg-L8ʅ1]8c^ǜ0J[+ I}aT \hp p  ^ӦVycT6.Pq_yq*HM.7,DOKYX2xwBFP]@,zJI#:zmeF@LImzx6Z(p[U(,i''fR1(!+x#Fv1Ϯ owbN*:.Jĥxs.CIy`EtOc~6ˣʸco\[֝ٸ-q :bS=KPh1?f??*PD[zK vs/bd|]OPQC|{aDqB A1#S, P k20m݄ eS\@HN*|;{rib> hl[^%.>S3BVB?s 5uqU&ρ8VGIV'71,B$UBs}*<"Ě'v?r_\+p)?hrTE׫m&$$ z|1J30w!f;q!G컃oa4KmiD] p7KxQ,ጿ" '$z|#$66~Iӟqq޶| c< &6c`)\{ƶ\J!v5ڻP!X$7ӀAp\/1{nO 8ÈZCj EntwfIΑ*V&Ǽ_P=a0>`a>*2!YArI؜gEf|Ipd ;<Ԁ V2})hs<|ғ M6Y8m [7 "8[vV4O bPx ]#Zǵ K[%d!Uۗ)ks{oFw͍6\XS)r ӥ2O3ɿtM#  ~9SX3Y&X5bAsZTG+? sƲ{JPLe}BKasMZ3|ldu4#KGfL5̲S%*ʨV5)`>ǟ9)y̤ىZlȖ'CD ߅Uu<:o|Thjftc>)3jQ4 #' Is;4%x/x$%iƖc5T3"ɧxmDiJSpHWDEϣhZi N ![ c@WDl"Й(mxq^5' jqfOU^;|qhx7N3Ö1% sCc ]C{!(^Q\Ӗ(kV+ms.mQ4ҋpP'66,#OW'b t֪Xv/r-Z +O-,ןș4S T"?bQ+Sm `-MJhsf+Zұ]_(4#C HDWD#XޙcwpJ?/ %㾣+B`\@AMGe54`MZ%tGqTTU#voPrĎeDEžSsI? 1ՉuvnÀa]+II::EԚ&AV/fSl2UmK/icoCF}rEYe38ˏ€%?Z삧%ᆯߎSrdS^g^ a\SF+M<&sY.٫2U['nQ$ 5YLg]g]${,^Hs/w%ٲ1aqTk?}5ÂB>^6j@1k#C1h:YE<}s>9%dQpXm*jUr,!ȏR"+ 5U$ \Xnچ.(vRrnϔR-_->L 9y B<#3=B r2K,%;|D-=`g-`%eM*oKwj* [S{EAlߕ[QkV~/X]zZFuZH;/.anޞ@Z*kձp*D0YOeV2XXetbo4_K N.^ x%PVY5iw[+$3G[VځZ}/Pɼ=qHע=Cĸ5uaf5hi3Y.pxm~X:et_V-пG-*-WFD xK,lGsw6SH<|aHI1|P'ƃ*/UhbZlW݉11UbAmNkQw5>ީr}L`ՙh>{)`u'NZ5>oa (날B-Ȝ~6AG  "8e.@Erϱ4Kd'1(D%]o6{?|`3n*R]cyNq|СߗCI(|qh`-wi6i[HJLGdc~.ȼ,q#H^`m B*I]W2UNN+英>1A8]x`Os{ /]0Yb{3/%Xn \-Fvm6a6% =*jN;mvzR|TPi(#t`r8SIq5/b%>Vή/ J|˜k7fc!EIv`5Y! /ԡe=mshbMqk G3OwBNװ='EFͅSG}CnPp(Bܿ4Py1`ĹrΠHM 6$ k-Rg2F67c5-kRW c4D`^";g'=U8gȣq$t]oVm@:_K?XkHjX?8 p-vSp%9CY fpq|L㋴Vw59q7t60Y>$#˾<'A+M ti =@つKSwòA18e٫q_bW'}zM Sܧ "ߡ)GDjARjle!}H! ^*^kC}5+6e<%~6 (̼a2j3!'L;|^;ųƣ)ζ륏َjEI8 $yCf &l,)>,aʋSz 'I0c+5Geܥ_Y³-{[esK{!M]"vA2("r{Y(G'@O}\otj@wֆpY`tg;ԨcnsIHVRH4pj|;Z諅lkN^a95dm(!C6-8 0NYK#ԕrM#<# ?x-t6rWw p]LȗpE_{XƢ4 iPdwƤ:*&tPlnӇ]z#S9J&[4 "չ7MmëզGI{:t .lY y&5J>/;WC7(/&a988}ـ%஌SiW+6&BlܐW'߅*x}M!8.5St!ØW7J:/fD2[jΆ%/JƉe'@x1kHƽ1 ]1:dt\\\;1F]hK_C^1Ij 60:-M$uBz|nx||n:BO=EW̹ٷ.gw[| YZ