apparmor-parser-3.1.7-150600.5.9.1<>,RĉhTp9|/ʮҴI2v##ιgTd{͉~7]k'<)"&$#XwǾ/nmB13pW dIGﹳsQݹhQ~[cOg~Ԃk~j׼-kVǘGᑓd,} +o*#G0yer5t`#Kۭ `!^@u;xi4JT3}6$s]>=Q2v?%BܶL_IsXJ>R?xd % G $=^o 9 ><'' &' t' ' ' '('''p @[(89 H:,Y=%>-?5@=BEFеG'Hh'I'X, YT ZҴ[\']Ӏ'^Ղbcהdefl!u4'v wݨ'xD'y@z$,2tCapparmor-parser3.1.7150600.5.9.1AppArmor userlevel parser utilityThe AppArmor Parser is a userlevel program that is used to load in program profiles to the AppArmor Security kernel module. This package is part of a suite of tools that used to be named SubDomain.hTs390zp33'SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Productivity/Networking/Securityhttps://launchpad.net/apparmorlinuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in apparmor.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in apparmor.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable apparmor.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop apparmor.service ) || : fi# bnc#853019 aka boo#853019 is still a thing, but in the meantime apparmor.service has ExecStop=/bin/true (= do nothing), # which means that 'systemctl restart apparmor' is safe now test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in apparmor.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart apparmor.service ) || : fi fi \#hxyipx  0F v ^ W6 AAA큤A큤A큤AAAhyh~h~h}hyhyhyhyhyh}hyh|h|h|hyh}hyhuh~hyhQehhQehhuhuhuh}hyhthyhyhuhyhyh}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-status../bin/aa-execaa-statusaa-exec.1.gzaa-status.8.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.1.7-150600.5.9.1.src.rpmapparmor-parserapparmor-parser(CAP_SYSLOG)apparmor-parser(s390-64)config(apparmor-parser)libimnxcertsubdomain-leaf-certsubdomain-parsersubdomain-parser-commonsubdomain-parser-demosubdomain_parser @@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(apparmor-parser)ld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.7-150600.5.9.13.0.4-14.6.0-14.0-15.2-1apparmor-utils3.04.14.3h@hg@e@ee}@eԔ@eԔ@e@ee@eKx@eKx@ev@d@d7d@ddtdS@cccױ@c@c@c|c@c Xcb{@bb@bޅbVb@b@b{@bwbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diff/bin/sh/bin/sh/bin/sh/bin/shlibimnxcertsubdomain-leaf-certsubdomain-parsersubdomain-parser-commonsubdomain-parser-demosubdomain_parsers390zp33 1746532948  !"#$%&'3.1.7-150600.5.9.13.1.7-150600.5.9.13.1.7-150600.5.9.13.1.73.1.73.1.73.1.73.1.73.1.72.92.92.92.92.92.9 apparmorapparmor.dcachecache.dparser.confapparmorapparmor.systemdprofile-loadrc.apparmor.functionsapparmor_parserrcapparmoraa-enabledaa-execaa-features-abiapparmor.serviceaa-statusaa-teardownapparmor_statusexecstatusapparmor-parserREADMEapparmor-parserCOPYING.GPLaa-enabled.1.gzaa-exec.1.gzaa-features-abi.1.gzexec.1.gzapparmor.d.5.gzapparmor.vim.5.gzapparmor.7.gzapparmor_xattrs.7.gzaa-status.8.gzaa-teardown.8.gzapparmor_parser.8.gzapparmor_status.8.gzapparmorapparmorcache/etc//etc/apparmor.d//etc/apparmor//lib//lib/apparmor//sbin//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/apparmor-parser//usr/share/licenses//usr/share/licenses/apparmor-parser//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//var/cache//var/lib//var/lib/apparmor/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38596/SUSE_SLE-15-SP6_Update/fe6ee36e86e31c498ac28105dadbffba-apparmor.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux  directoryASCII textPOSIX shell script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (GNU/Linux), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=4374a8479a9070b8bff47f3eef817cf6882fe2b8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=56649e4f7015bbf8e210d844b3956068242db30d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=f590b2ba31d2c2ede511aeb587fe9209579575b8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=72c104f79fae9119223c7cabcfe34da64a31f5e4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=c70e06c89c403240ecd5aae1d090346341b90922, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) *4? RRRRRRR R RRR RR RRRRRR RRRRRRR RR RRR RRRRRR RR RR RRRRRRR R RR RRRRRR RR RRR RR1BK+6;$?ksystemdsystemdsystemd-sysvcompatutf-8a4dd5d6b2115cd01544103480067702547b593b7e639ca00b61a4d765fce3956?7zXZ !t/c]"k%dRB& Bdufly뮏i'#nWdG#Ja wPrVq tO]d._LetMx¢ cx?;m1w@ nSMU߃0j->8cg6s@>`&~3+&yjj_j7!1>'B|CL'-j1 [iu_/B%xDcXTv|C0'NžPV%;a C fe?thYF }Ȯ"& YO ;YD2AZ20RZ9W{mx@IPI'%9P+*uL$Yc{ZD:z8QLSؑ|I m]:?oːD^gD1%oTP'L/(\S+Ϗ &&-18c3?rĔM-^%v8ɨ'>ȦFS Jj!(%gSVX5C1S:A>/u=X@eTEիsҺU9P7O OW4DC s! E169<_-f|Ǥ0 {I))>ǖv2 t)셺AСIQC-4S w;Pu=FiVp f34\LJP5΅<:spI=h Z8lu y((Wft. R[`7j6vzB]HڸlzuO()$"iU]nθNp$-Hc /Z9;\.}<{jѣ?8ByGZɰ#M\h1ycwolf&'unk>x@Ú\H?v*7d#w;%ӳlyףNznh4G1?Rv  Ÿ.@2\rO=:FĶd6k@N4%Ǝ_7kҼZu$6/ v怽T654gL[1->`9Jja5㽺R "$xۘi\aB@P%mh#8MFN 9ptKmWK) wΤ(Ej5Yal\>ݎ%U!޿gKm+xAYRWmV--{Tf{?AVvk+ܺCp Щ;e'@:*&VEDrKiS(.~iaO{NJ՘)Iӿׂ]N:?T`+ɩs[S [Y_sŭ0 vC{CRVHDoaMx<]~oۀV8"Hazɹ[L2ta1^B$%uSFTr3ah>2/BXS(hor[a0a2G(PA Diɮ2DVF%Ekv P s\dQx`.#}X`XCL+aaMs2- iYp´*H4Npx0~/uVogD=} s0T ozP\jL69a3tcH|cW sHM\u-DŽc$Q8Hv3Vly v6hQcǞE] g7 hs=lXɣˏI6EtKx/(9`<[861Z6,cƵprˬ}RWF7c\\(8{@^>e&NHg.L[qJz,v*Od;"GO%X~DOC ,Xߺd?ʾ.) X)a)Ywa#P6煾 A+'!tP3Җ1[fxtYQ^̚dVcO2[)w]|h,? <ھi2JƯ=ɐ}Uy6U?y>D.8C&FKj ԇxא&rl-ar=ialz1tvq3M;`Z! `fׅ#EoSy HZP-Çpgմ/ &{ՎT}a9I liףWlZ`P6XmYSG f.1isJ o i,B=G*;BٲVY1&Ac/8踱̃.VJ,8NHa̱+鞇GHr !,yI;;X#u6IokX4iC7Bk-`I~䛇@BQZ+Cb>j/]>, 0fo Q.4`qxw C ,~%.dWZ+VG$pʥF[p{MIc\>V'M֛y"%as 7ݹWz;m" eSah:fO!=+9[IFK)-mD!̢R&mBeT-SC TeIz!t82$NGms=gg-BMkY*$AarϲL;lua<[MK3j +i TG*ki p%@r9iq &|kr^pJD GMk'n[L^wPhOȭQYe71 Hk)f'6q+J /heCDKsB[|@Fj9bó?/Bb]IyHS7rP`ڸ V(/fŶaԠI694U0fDgZ^C0VB\EAaoԃBjS9󻴭t(T}] :bYp{yP5S#9> ,:I, x3Uq}<}nͭQcVByQuS4E6ۛ%َS=2*`!G] gp`&4͈*Yĉc"׉-lK.e5T.fKr<&P8irĭ_~A<%YѢ ,σ$5mk Zr'$s{$=3Z] A43/N}aL ΝYrFB 8X憔"7j@fXd<3ڴjg[]eN#M*R-BAzAKetvsҝĿ? 6RlrAΛ{>Ydтvf-_@MFBKPdէj +e'p蛯T54QWW|o:{JB=j^0+r2%H &Bhɔf+)H=h8ZTm=MV@>KZM7}IFJ-74 {1JyCG İwD$sZV돜HwCx,)c^ =p69p^X9{M:% GKb`hׇGO, yv3L<0<tNu'\&[wOĚfkB yP;FQ=#&[kV dSKAmGBzKs)8:%񲶘H Vh95# s.|1%Et>qvW/LMhW0@ЗEF .> ^ukM7puJ@q웖bqtuE}OT7^5~ϪF)l!) @4S%VdvT*ͺ;^ޓxnVD[)91䩑QS2++?$hSki,l.-5N+Dr(?-D#MjZv v}njzVϦFhDHSiڢg](clDoQ;gVC4_G'Al̴,qYXEu%ʄYq#^~JThWPYo$WgjFm1Lۭ1;p.@|$|A*&)p !igKy)$ kN?a rhfGheE3 AHel7YmZ{2BƒfbpZK_ZaASKa뾄M@A2F,D\e1}@r4WBv\KJBG5v#}u7|/v*ry\r{Nަ= +2K |a<ސۍ=>*15iY7-ժ55~7  i#\-r{2$.dؘs0)":g$erI]/՟>> 4 7jS*ȑ)&9֠Mlo [b!yʞA7K~I˄cɠ>>+4ag?JA4{ dvٜB OKx@E,.[bϛLjK__q}ܳܝՏFXfc$ltZv[̢B7rc[pWÆ" j[4p>]O_4ǟO4z\hlAtlu+041.-s̓GKQUBܖLʓd"j%H .0D̎X#zB = (GFE\y¿_ʊRn-K$ ~3ոD\鐞J}1b5v3{͆'oUXJ*ۦF6~MuVydPnX'ND>Lxh J#bV".k1KcncaiBXBvx*Ŭt/m[ R3afAG]+ &5hW,uAJQ?7k$k2F( /ݙk\y)̍r;MhǬH }g4kjAS\1\tHp (5ew9tÿ 2|ڍZܿ*orR7|}LYmeCxg$>(,P~gIh]܄&u0 e&)U ՝Tɤpc8jӺg?}aZnPA7Z-I`Dѣ{#!+%?ge$#&]NU]43ȅd}GHDeK"52 "m>C1Zm#@бL+ov |UW t;YP 6"%6ױiY5U[mCC<8GZ"v1J03֌뽌f{ hK'C:*  {o*&5i袋^&:PD"2ߒ2rOzm8i0dv.S°`Yb Hؔ,FS3/{$NuJVOOy'2m'"/GģhV~4g|0g+ԅ ۿa'XY\wBìarX&iCLfE [ft3|K{8kqihUus{gQfjAv}]cwӔE#)KҫSVp? ˡ37yu?xLV*3DͿEjRbB&{u쁛BousNcłf<(5Ù_2#ӲR{ 4!^йQ!ϊd-G t 2U5wA-ff&+R'cvǙ肀e G0-[ބ'(w:Q7y /ZKW91ND+%'12ヂ=d}P^^h[-.;S42 @w66|ΧYV;δ1FsUIO23(h:'1 'jND9߯l}4bЮpGⓂ/8ҚVepuo岙u'2ϺTbpRE^opR J=]>Kd'>GyqFy4L |^2؀Pe.`gOHS{rn31qq6r(\@fjaaF?~F M+1'F?Wh7ޝ]=CH2Fg#a 2e=E75"5rtQH(IH;T-uv:=Bd7\yxAAF0J:/*:p8Bux68>^>רd+7}o[DDdׂ8~uqQj6v;׼۞);/XGѕ:eQ8n4M&}P\Gl%Eh>t/=uE^zު/eqz}נRI޿l^" ?I4<]=TNŸK{8TΝoxV2()յ˯rZViG 2 [Vp奔\" SqV'l~__ #Zʠķܙls] I#x缒!m޶beaޭ* [iTn$ V.G?Vx7/ү?ָS*kvh^w]K~wW>Y}bɎM X 1szsZ'PK)PUڃ\&;%KCtfL"zOl49%yY5  Y G9_oz_uяLs+kvX-EEZC萈rq:cOQ^9ݘ,#;pN)93]|!h 9|n ړ^U]%Ml#>z!u}0as <&+W\ω_tD9T*1Tq:޿C>HGYg@J*`q|V+0i\{Eb[@4jTCxOH+\[(F A:Z&M+E:HhB^&ﬗK:rəV,q8@dQִNYLbx"hV^ p.{ʜ+Z1vNމ ) 5"H 7T)IRA_Տۜؕd֎l1= ƫ$Ҡ2&]-Q}k}Qppf*u_VA&H~y ^=8|0p׶1+a◷j־j+ k˅yl HpN?BfP[3Lݴr]s3cpcx:S=4rPEq#(˭8yT r!)+e JC~Ņx+8K"#+X@4,Ij3a&;D/sQDv>.zb(yp%HOaӅC3b͇cQRfշ+DUCm+kXlPx2H]t&@C2s@x;RR1DK 8y8n?nɏ,So69gH`. {"uLőb泼$$+̰_gE>h7b"+f/_h]#M{%XvkY/g2Aq${KՎ Sm7:`U ;tD~kh_oK*) 髑ՓiTS0CD{ 8> X?no7Sy碖~ 0Hm^֩FZ/՟ SiWmM\ KQwo\\$l)ۨcʤ8fzOKxy:sѽl(J^#CpJ0*U0?kup,5-[._4ad”8+Nd|\551$I+^T2e߫g#@Ik|D "_Zmw"/ (e +$+DS8 gWW }@v+ZbȄ] 4@G-/O~o=t O<ɘ ?fR9PQ[ζ|mRJ+?m#սm@)MOCFT=L/ k3U¡G5~Is5eY)Y/[Mm>J[aPSX6mPdK XDP-˹8H:tM ]DJn-ԬNa#lZ݇sZd-y9g-M<#|!I ϤPmՕˉ{*RVӑ]%̘ɎesTddlpLt/;eboš HqB6x6ɻv=)sq^^5}ҽiNȀNhp"?AB]nͪ~B(ؠ2ƚ!2JDfIV[*,*E*mfK*|=l;o* dte+%+.ͶYGyoj=k:aL_R;?|fZ5AKԶG mk[`w^kxLqA'͢مh>g= |I6kH?"(&Vm0ם^= &gkw=XT63~1[. aTӴYDY}V Q{pCmfO`v Z*Hл1ੲ\?HްWs 퓃QpЄSW)=}F| $2£)n=y u,X-Dѥȿ{66̻ G v0 ǘ JAb蓙T"Mjk+ҭ z }3?}4yyRBr×6oW/Fe !TEYF4xk,XO9|8he XYAۜ˼Qw0Gro1W)m6i5ٮz5Ĉ:0^yUg?3U]eN_e20;Y'&>-rej}uhCAdNbMo$7i7f)"SsOBjh˿!gyFN=MV$4s}!?-@Gx]QqǠ'DPLGK~~dL 0b!3f!q100[|5tExm2om|BP4mF0QRŸ\ȪS쌄Jo;%.usNhӗDny둓ȿdhPY mt_i5Ly)Sh|ʅJWZ2dUd,K+wK*[,]% x#BP-EAfG[o-sݙgxNJ羧n1 ]O5@we-\Ul^B l~3X$4gV_XP[YhY]7[PMJT$dAVP4oJ/\Ɣ^b^ !p kߓ_p&6J.ԾYl1Q{B3d,`[a^hۧE:IM#<g/T41b1جrYmS:wiyr0@}dd ҹ1+FP' m6^\ ^\k]5G38"-,-*kf"*3%b! :ݾm4t2Dߣj3D>"Q <ٳ)޵̗ݜ,L ] V&R vSwyA)d*_V_4!O(ɘR: %#A<Q*(uz> V_stz?e+ٔjǨl'&P5Xk@NNމ+/k̜IHoy6Zxjbh I1X}sw J?d=~ vƟͨGk·sI[w%SmDLh1E <19LFw+u0.L5D:ȳ,`L^TZ$Sayhp~+4|5ިP%B6.9~ߎ0#銥tD#q쩑zQ4**5Yr@8}#6ॉamZ4/) BUWLݧ&pއjM(Qva] I/|*W#|\i/%xF@HdRSVbݽo!ULN̔VT1K&X%Չ':5ټUqyfq-0\TP1ߴiz Ǣa_if``}]QrDלM|0Cp)ry-TI6֕^!6sUjipJQ@ƮJt|O3H{ʃM* qI acQdHyRp]XM+gIm ݮفدkr5㱏dq{ q[@'w_ ]FD~, e)e9ٚ5S]պx9S9TjG WCY*oO0]]&E_ XXm#Ѣaq*i])Vыcb~X&/:ꯣ=|m%}܏$ȹeg~%Ucћ>?[yz!j 2R+z,Ցx_7閨ʖ\0ecqNJpײ.L*ƈmFb]~.4*F_ oO&5Rz|8?&A h8J='Ϝ#>w swsUVɊ#I'rLpQp@nlUHD"^HVc; 9*NjDFJ$;4`V).9_ eDk sv.TӋWrsdXAU`3keI}}h# Q\)٨s ]-PXEuz#5‘}*Z%2w"^jW+ߪǞmlR:}IE0Fоv=.?SDYu_59);°糍VF,UpjLsCl\&Y 8iv|CUt*0^a0f1PiD`PxqUrDk\Z\p,K' [Acw 5$Ҭ4 ĺAB_*!Ƚ\dm7tJvmJĉF~-O|*5kafu%xkMf،H/ғC@ntTmC%am I"@_u ԵKͣS6ŭ?ǚzrf 8ćgr@j0XE.")X@9R`,HZŗ#6IN[5X-0媚 e-p6\5;ՄS 2a]:gV4Q5Y)5)VXjsq蓆\C&SzC Apڐ"`ry1Tt{-*!(b7M`5k6{޺h#:T0Tšʟ:W` ތa06AM S-aRīrk'vu!pP՚((&3e({AS3n4ni;݄wCOU+KKuur)^"k!Xmqޞ.o,V}_lj=OIF;^G<3!y>Iy~9d]VcIxRe2&B @t%N%ou  B`y擜aVy[#eĆOZ:>)C DBc_B Jl纩ܨOZ1~FbULQIX:ChyDr NFv4mgK0Fք#q' Pe+OW_%L<P0q^9v˙hY>}&L U~s6aHzd4AXږ~k{;3< i1}$ RLfPe|e# 9mjֽ,R<n{MIK"x]ȈOYlGI0:ťWώReG^E׺<\l.\7ボ_sR3gU+{Z] ![Ra^51?u6!ֽ0^"`\ EY/¢%=S]{8j߱-[Vge]djZ~_lG1HڲߕcJɠOMԹ%ĂQ|dExlbYִYY"֘qٌ+=VK;IE:4_sv'\gS.Y^r~&ӳf^S^_W7@~|=5q;bkS+Q–;yF<~'{jөWb,>ulhK*"eЩۿTi3\kz&#ǃyRN4%יGmnf`7 l66I8:`$#7"[}P/b|B6X8pa9)wS.;pdyݸS]TWQ֡]hф^k~fyY<T99NjPË3W]wyWqؓLB%.F(5@LėʇG 9;}r0k,(t tA8,c 74]HR{pFA+**SxICyvjoLmxQΌ1aMh^<@ĩlgΥ>k F;4]묎<ٜhj}bT$;7O±\_auMXBA&#|ܢ{/K*xh9E" zX&baǐ1VFH=0;vU/,(F8/NJJjMR"YŔ9ua9RFPj^Fz5FrM!`V UO(c^w"pF,g08/"+ DEcv9B:%yXq\+Pj˲Yjk6hd͐+jb^mVlozϷ _q`}?pjEqEJ "PJq.=CocQ/̰K]~F Mnl+Xi hZ d=]FNi8_dȝ6+hޥ$h|?YdOԅ%5X ِs Y f02gNEu0ub`5BXq,aSH:,?Y#LJu*iu;#-g @:sώp/wv{4O}c%Tw,VL)NϠ?܁vŕw/WS/sX3T+G*JcxPX'eTQY[μP `SVb5q$mڞ{Kw<^`TtŖ׮؃ӡˢEٖF&BzQ5tNzu<`MT͒ФODd).XJf{FR* -DA1rtZ)7k6^`OօY1Hb ߛ߁R8[{4VٸMyz_4YfnP>CjHU+"-P;>Npjx(3IIf%]?M*Wͦs,㗦 hUx {˹oAʻ*X7C8ՓCI J4]>GZKxV?Gfl(`%j5R~Tkqc'5"X|0P&1ٳs_Pz|Qiq:L7cshGI]NT.3`ΗJ7c4r!f:f645YDۦX >!v }OңbbiJT4:c7 ;8 }_ cS/2HPJ:Bt[;a|*q(/nr#w@1{vqAC{OU.N޳1FrcNjHE;7tdfyyR277' o5&m6L{`MXczZ$tyܔ5p *v*V23 \\e jG]6h*sz޷+Dw(ΰsW O[tU;:y0ʹ~c!AjH,q>= <~dؾ5䫐TW3*A[ڟ^ﳓl+%zEvb觻4ܬ"5͏zv茐+#F8.l~}ҨH^J\wEoM@Цs@tL<./m.5fW4oM(1[qn[)}[C J={\>rI\ta"'(%gSX8&јLwm8eUzHޱs{Q_[TS7aa ySG"WjcgRX!a6|J:NW?jRmиS%HI*5p $b3ڮ@y| w` DiJYKد%,GlrZ4 gXkBM.9Ʀ؅C b$VH6"\L}qUJf?Gv;Zdul5~;ԏ7jM=N@jZBWZT5ߏ&~LO9t%@C\59OEή ^|y/GK8i=$YίRLGwhY+.+UPLQbsh8&HS;O,&cV4BX QRUaD,#Ӱm(qdS,EՔSJ%[MDXT~#75:K.8xKh`j_H ,=]}Og)&T 8Bk&WJ;%Ӵ%3g?kth&o#/oX)s @**ֳ@eixl.q(hnqmY2)~e )Xf,}CQhC:\N#|AЂe%8rL%)+%ta#x :gK/E}h(} zqsd SWWKށ/n6PM7"wSE:#ln@0 XcLja8G-?'^*ﮪ5#`SdU-zsc`ǎ:*tBL $AaA N0m %I-ӹ'l!ZQTE赵9KvѤ'*l9)6GՄ5]1;DI9MDTlwL'YW@7_ ٲ.A6`ɖM k" _d7Nc,Į6l=վ5uNcwuL,"!Gqt7aLR2G}XQ:ڹF#dZ'* rhGgS%7CE"9q;I?_=QD[`^>be);;m6c9;^#-_dqKD Wop#rˉp_'`,Lhb?]L ,BHgiF;ʧguu PveڮuA7oTYQ7F51rbJnVqkvsӓዽm+ɉ&!΋ws?@mFۇyLS,,xEU}n)䱛9YyTe=vnhC:+.X# %L1~d"*\W%~# )׉D$zz"Ga,bYP/ݤ}{Ok7 Uh>{8kq@cѮ n~\!j&=BlRP_΂I^vV 1iVəiMuu(AT> дtJC J'!x|7%܊+Z[ԢkOyQ#D\&y@?s?Oq۹vvw_0gW]V@AEJͤC̨Idp!f@EOI<?Y~9GyItX?lUv ےkkbo[܃(|/Z3)f:M !{q}FzY"avЈ\oDUo\5i x'+Aq !_)cӚ}lN5uȹ&Rr. _w_(ȴ{O;PW=wF(xfTb6vBH4IQYIJ *t4\+$iEqī(8g3vPVlcˈ/FeɂJm`$aA{#[ō?K1iO0)7 |UP!lb_&j@7~X4AeVq~Bܯn1ŗ""k \ŋF h AE:'z`π"-$ l}XˣC:U{ oB̦I/dzee8%Mjir'2~8D8s/D-#A Qhg6 ˎXFuR| ^d# jR4!zȀ49wȺPjeS.¬apv$gDe `--_GV`Y5A$8QrNG-)24 ɏ[Te2r]^#©.ӽ AiCb#yCj!&fHG;@( ITz 6aa رsj!L lKiyd2 <qVD~VsU1:ŷ6 [x/%E0= BaZO,J7(RBQݤ;,S7ζ .dwwdȸB/aQ9s=EM/޳$.0gD}qf_hzAfXgo"e3&X8t%]-TtLecx5 =l5Q'%b%/|C;"cQ]C7ޝAr+hsFx$8;I@I5æSZTmP^Y-Z'Ie$l5tY͒CYZ($0UƫE>9MC#eZ9bVt3ruF0Ld< | SK+;e%]%{7R C+ 9[hҔ,e|mn@GߜY`[NsK]:H&34⌔,ܠGgOlΧZMUV*~u1x(n{| eP@8/&{ ~<8'PXp{;˞uܴP _)c5ErdNߐsv˶rD4ÂMG`YX>oʝsBqIs\@J?CBt$sykCo.!ո^V+C(h_? R%CfذX[9P59mmSjMX"Ej:Wpr,mO.Ybkdb1i3>UqIAA&a=hmcn Maɪz\#- ;.?C7UԽ'AIkjut>_]_\ A\fXE[ 9`w\ćBE͏! {*JkB5Ƕi"H8I{<\s z.% |74ZPV]S22&#{۳څͬ4wekt;:V[/Kŋ>"\1J/CVUHslھ7nϼaK|DjNPEA qM:?GQ rgzCo |mr}]wZ I;= '^F)uh.ʌRj[{V+CyVևozeJSPwuؼ3ZTx)tT "iVMk6xkWKMڜnt+<^}$c$n#?讯jW$6|coUML9gG :l9)#;d7U#` qkhQԛCʉ˷_| 3+ZSgL `)M]PLfˏ.N]bYAdvnZόmhxdk@vffW'_ӷPqŞ2|LPD}nTtxl& pbuTPEֱu Xzht +wЍG"5 ]낇NͫY cA0+Cȅ38 Bm,0y 1u8)\#Si[pm)BV0#E.cWyDa+Ư%Z)p]`[2ޑ 9 + \?c\O2WKBǹɦT z:ތnY//J|s4 I;* ̾N(|ٚN3xr1YPЯB_O|$󎤪=6VA ~[Ah'5pqnp]bN]hwJKSlx{#"(-t`>>-_6V~%E\ESĠ$ick ޸r!'~ V%I&qiLiZ;hV [F*Y > 4},xάǸ_)0Eb3/st *U~yaag @V8b1yl (dQk|"d·GL%C >oBʹZ1iEMSLzQD^.jx<PikQSW À)E:(?SD"aZMs܁W ,RMnV>l0ay|f;6כU;abd/q9??lR /l%g1PlA0bV>dLJft}ȕLHti<6Zip[2+dOGJZ;#Z%) 1;͆Mt(Q<-> W1~+.VnۺoNOߑ 珧ʆyO/uHC,m.!ޝ߻ 3y`QM̧rR76]i!u\+uP83VyʮHe7Rs~oץe<`Hx@+qDAZ!:ҚO7x.T۠<PKTTy*Fax}]v[f-{o+HJmGZtG q5^)|SB<8|3Ok's{hC2Bݾ =*_U' @U^2gU+ J6=XVD1$'7S1PJ2Wy~@,3y8K8@[Nr6U-2G4/Mަ4^2BR8_aVQ${}: (Xp =FoJs0dGNҊI 46KHw")c\zڠB̊υ`Ơ 8C~.bfG8c]tt/s FnF# CBO@+~~TC M#ktvbG:p¨vmd;y`yFFUU[6(ͷ њwir3ddSJHٜE+zQPĘ%}M#vxC)N7>֔I)XWV7\ ͓bLݘf:#q&)A eyͿڳPOwpwZ%~Zd.2 (KEw,i7/ čGߊ<ꍢ {Y7t*x—W7m&_-AŔ;?`en1njq68Ѻ5˓8֫ʸ;IdEZdlYYN XGOXqv$D!"IrW@WZꂸmRRqHFj$u^T˙;#*p=',@؁.%HZK>)bD|O(#m{0}P'8bH'J^Y1leTs0^JpOEm F ,~QFy"DI?\{m =ҶP4Z+C[JW3.*#v ibrX5dxoV3rC]8(ɷnZDqf9M(c00Ap"{m Z$SIF+IA.g gQ$5A bV @UF1[$`hj6v5lZba(8+WVeU||tdDJy-J,;qk#7652,UWIXQ0Go_T0D7 2i.JO97'<]j_ɈE? sDeףKy]ٟa0\3,M&g3}#?Nw[,[X>wSK)TJQj7j]XDNo$CZ "8:!t=0*96nPhQ5,Q*QJ5;7[1Dq0diyYmeW+D%/XSA:K;VH=DkOF\2_OߨDЯ TeDau&8Fy>s`r2 1 M1W"tp!io;@ BjsL-\sd_Lκվݐr2Ɔl&{KT 9 W/~H|X)r1GIv5 " <ȿCm8CdWA6~Hrm"bsdvs_nZoʏd\*$ٝt+-v SRv$#$:Xr_'.@PrτD( wn*HzT% {ix2:BU^!o&. v`n. :N'!qftk>i GABZ4B]K2A@h׾ŀ!̝lhXfܶ X YtQj(t6%DQNH!sVyn !)\uE"e\!@ݐƮ2yHȵ+mEjyFM; ,VV0(!TF7^9r"[?˟;N,C/Yc6T#]7.I7סOt7V HڔT)=e9Ba/9mw]0Mo`7+:aVyjr8V`CAȏ^K h$M}_Z / R{%"+o)_>ى^q:Z>Mcj[V -=څ%X]}\*1x?Ju_Sʾ PHQ*Z\:؀gWyavWDbe"}SU>ކn6VEeʹ4@r$M9￑,TA !]ܧl}W]I Knzj%?;%@"Ã(aրÿ=PkPNgkۋ($_P95Q1M;T&edS:^F5K4kpH(uIIS(HK$Fknk d9>4jufx"IVw'󠬡,3;L(7Bk}?뮘/:CNO*{MξGÑm̆Bܸ=hA$~yeߨ=gIҊ\/|cm^#zT[i𜻢X7cyzMW0PY؞{z3Sկd 7' Hq$g(GK,ˬT3=#Bmb%: :b:f8\}Dwbi|WreRA0]hb}]D1B`GNo!L-4CxԱlTbZؿ 3QJyOfb'يd֪K,E:H-w=s1 ]}RG;:~Bp"IÛ~3 N(~acc}i%}O%聴,CL+Q̂YUkv[6Nkj2F&u@'`2tnn⮼Uy nnR#MJԌrVC8sˑԵjęY@'I%6l:!-πu)L!u/@+g#&TA=-lХO^G={}NP.YnnLhqcaY٩ R|؏D#-.<e8* hyS9M&BGSa??3.Q?jvp~0MEI#d|g\mG3!0~l`RZ?)p+]RRtB;S$ qrH ~۔D0N7(uGӎ#5;A{~{88# 3$)DnΛև#nO(ԩ?!zMض;˟Pzg&6O}x?oKPV7j>_@GU!S>o&zyopons-xQd}iCBr>H^4%Dh71k9-t;}Zy8O/D QCnU{O+<r7f!xnQtg!όTvO_ { I 9e'q<"ĞsA :J쭜jau ;Ra`$תNl50}# FTNsZ+8h8UÔOX V7Us ,Qg HDnݢTCEE>c/E, ]KaۛHoHb2>i«tQq<޲.X i>{]цF7z) t:zlB E4-pqfKfݱ-^,ٛ8F"AC>i*ƐӿG(Bn9X.3yUv(d?1P|e)E%+=lR5i!on΀.TPF(Y"8?g̶LgQW{t}niRON;FrjEݫ!ƾc"ڏ~ 3!;aĭ ß^0hw0e@DB":ݽ(ۯ!MWYBr*!Z& l 3Q}/QwU;"iV4%Ӄ|86nKmĢ4+1ދֲ|:Q\<n\$ޮ*r۲y$ȖMFD8_)߇`y*vIjKG\cu=Rg"1KжӼܝl]jdzG¥qp k0پANsTh>9KW69 9B6H{h|o/ɛ}^uͦgkF*R2KїxpAN*xgI-ϼ6uaщ {ɳVEfN}RuXylLNs8(~pRGc";*C ^ Xp+]Ftz"5F5`62 4D 1ww+0Z|j v IB tO_Pv7v()" ^vmwaa'mY"n+D 1Qu<Ӕ^X2ހrݼ1h߇uNDaf`s0߯@’#x KLW;F>љa++s;ЅGVKLDr6]8gAT[d۲ H!fsj,Z0Gddvwt Kd?4Ǧ񹉒( 4kEo +|}ZST$R?W$+g&7ω2ף{9H|1# po[î+eGMܸIs9(slݗ&[ֺLꮑz[o!\_&Ɲò#:IMv7p"Ja{L1ثugyPY`9ԦEFst?01XXmoV.Vc"QW6(0XHrGXﺜcߎ3&'VXKkc0>R ڒlH,v#:9qB{Cb83׉΢64%,+y̍n/g%8'C4rt}R=pB+ŞÒ;jþf%Mps؛̋iC{Vy3j)E-o}V0 WGg/άFvlI" U= V, t;QB̮ YuE~v{_%"vCi"]M\}UrV>Msg _`!C3s![4?Ќˎ z[_ZV<\F<OhpZMXi%2 fр cLJTHʕ]ͥT;owu]ۇHP#C e>J?IJLVh+`3@~6-wH Ҿ"$#K"2͹t}/GB)m*RŢ+m+j=2!#W1R6h!c`J< @erS[S /rʯ'^qu[ $C>P>h(G}A~O92=},q|0ͦﯢ͘v m ^mdž䡙L6cݨXߓЁR;_<"|p.ÄXq Rdڭ1A~#|(PRBQ4gY芍dc?+ߺpq+_E߂UGB'H^BǻƊ"r:kZ>S]2kN쐓{q@+A_ENyfy~@m.)+pOOe%"=~A~¿R%Eb&h^dxwa2TgQ֯-M|*be;ۦK@&!B;!7Ri>іEBtJ(q8e<hQ\_p݉*c'/Xy\FX0pךi;qsJF*o>p_6zxNg:<HK *׵htbҡWRա\9e1И{Ч|3Z< KQAYVΌrw S KD) 9æRKCzvZbEc;% }YH Rl_^j(1#4Z-$<,Eۼd%r}]F%mY(=7_0l[~wDk|3auոv}_y:\~_)ŋS?,$_}DB93R 7趒/jf]hUiG`ך*m^:}^A,Vɐ h ];x1-,,z6p0%Y$xV bEH\e{YިԼv~:ViVrW]pYV/'c0.w&%(v\NjG>7DNxKcgu>8&l #_=LK}&kbm $_Pu>m-86;[ԷU!7](OMKJAyݛP_`jˋ>2ݵÁ!'&xP{hr㺺IX&ӡ3Tݪ.mpqP}EWC &͞j/[9n[&`<%Z٨#Un (MΕq2w:MS yvMtyI)Pmv\r8 Nʻo=\= 8S4Dsl}Kc(D ؞>">se~a 5PS x0 mb6QҠ31 𱲆A*ٌf4HƔA٬F@6"+d <1\rmxGYeOAcr7h/;2Q2MRf 97~ٖCwzDF3S8P<>cG^XվlcaEZ3I}gVv G]f-,r{sk [3gˇ0b.A<>ZFC?zA% 0|?hWp)<ՒĚp@ Pf|B{?gN=Mf#U 7 &Wos%kW! wFEb)@ځEmeTJav7zV6-."+5bwش1s$OL P#q9}݇uRx.`}viw@ ! :3xa>|Ւi+֍.c$ 9*Dd^[J\f!.R|+83@Sj*͈&*I4 ltaJi_5bhPrlCϡ57 r-'Y F '3-0%ˤzٗ!C0kT(;蝆4:31nwM:VO#/.OM&}UEi`E^nl.\0q_Xp[cSVrlx;ecA)݆$Y$7n>ޚKS!kꏽ"޾,k.o  U \@ȶc:i9B2s/Z^_pZƯ`\jkoM{U'Plq+k\kE@uV"R.aZ+_Kds+cL-X;ƥn%UƗn24E^wGS*$4@x]̡rmH;-AYvjGg"l̝5PF2$5O ˺78ĤT3 _qPKiZB:%qstHr0zXHVES!DY|+X%S>𨙸ͰG'*Đj+3_cwip4Gwϳ!3M{uZuo$50a#R:ݗ H2A<ə`yJK] :"s@;9-/'R _gTzW(|*&R[`#* ]uhmPDm\-k\;:KR+$Ƽ8-FAMdq|bRG+`nꁺZx9tҊ3^ȣA&Ec>/iݧp#h:Ln|0ͧb`*WKg40sXR*^2<xL$^DT1 6F%1VyCW';M Xk/ERa:E뚄,+M-͚'[%x(ulLְܝs xpITCH^EYWp @=vCeLim3 6)z'h3D$&_^+E},Sy2Ttc-1Ӯc9 *s ,r?7xS7 5WWٞE F5g={2~J-<{؟ҞHTqwn߾QCn >Dmq2v}z =@ן)4&!FhX@^ϝfkax?&Hw4Cr-M<"U BN\a`ʑU p5!5 ٷT6~۫|I8ߓ3iֶ"Ewe6@6E?w0r+b[?TChJJ">![m*N;◊`agj8jo&J՘im.'i|jRF{@4gqGdVdZ_+YJCy)?a%VFP@K26p1֍~%㹡)(ԇ۳ee`Ccwޣ ]J'`Am[r%3㞴]$<*K]Cј^ 2xgo4U?^ݐyEhLY^A1m@jn\}1r#[S2'20V)Gmz(qTѱK krErJmI=f/PFF+ـ\K^z Fge:Z9$C{xGȺ\b04a%p<}UН +sU|?lMu K`5{o`ű2Cy?`hpHGv? @~!S˚O8RgJ#9~J`O5HnR` T n|o:gL3.u s nZt1<|rMQ[[ȩA2`Ǩq/ h$Bw*zyTC\XGBk+ k k敥| ζx,RMnu1f-Y/ءfLJ|gL!dDN1c W߀] H Ṃ͉8ԊH_Op@Uyr ZfbQzr%^$8|H eYC{xu:L4H#[ڂUuزh:ke<npRc̣Y`i' {=r(a-ù|!Aa?boxң*G%w ]¿['uP h͆7eRC凪]q1n3tgU>dgF^񕏛p7aS!L,ҹGxx%;g%ƍuTH hcy?A cSPjCߤ0l'B3ߙ؍.<ƹ* Hv7Qq`:=Kzӛ&Z)0u%q„tz^BSR׎s ya`S16b.Xff],0D3 >ۥ0FRz\IbJofj=;eQh!xDkk~6z)i+AAS 4E?PXlBF󌈼"t=|7>Nyi E:I2YˠP5CZJ0Nv f [`)&);1z'As9P'Tf@h($UΥÄqQqTx]j`do&اfa,Q@6)$t[@`o5+=]jΚ} [!B5^(Lfg11}.`A)K *"J!K'z&߷@#r96W+%n~C+ <{MNPz,Ңb`%nCUiS2 } N#N^$)o.wi "(d̰l1#7Ҷ>w"3t,iq #!EnK(BW'9 [_Zd[3C5E'-9ۤtya6g@Ьx_-#8<=#9B{7ę %SC91U!iJbtA0j-?pT55&'ca*\XQ86G0Qzx Di`2)f,eBKH-V Bյ6w~cȸۘ$4Ձ}ρOd}v8w]~,>ޟ\f,-Bv {X:f= bc VA*mV_G46!X% bWݍz˔I1}:Pf`C[fg#'Ub kl?9Z`ɫ~gyw#yH)] mF/foX87MJ)zjq~/~jCGRNj[As,>Pszhq^"s6>n/0:zw2SpGt؄ fs >j5 䂴=u˒'RZ>qY"](1q^FadKƲ;bS Pl{u_=h az?5dϯ1 9'I6}aJsu6 I8,Nc -܆r=]] k?/FGto6;#KQpS 4ކ&PE*|E}V^7I[QmW* oΠpsզ$g@W ]wrf됮b"SޘZ9Ku_LښAB6p5EFE~o%wk?YDWKH'U,Z L*O[r]sOBpTSҒ vHDžn35^ ƃE(gOy0Tz)61Vg>n9A$:G&kQND+H7冏S?y"< x0&etUfzlON;&Om}{vxxs {N?ZzsjQ4j5DλcW|."xNh]MF ژ.ҩTl @؟r`mhFm,.SFEQ<1\LTܳIlJ Cc@~*sdz5:nwX1ml# \^ }TMhOMPӍ`A94'h[UȸwP8qz`SRFY1GRy-/ұ;UAX 0Q;}ЋE|  U@bUt:WVz=P?ɏTYS/qCu# o\+X✬g׻OIM빒2{hKB~ܧiH$d R'9bk {^zV|S) ځFě,*sGOZ Nubuh}DQoD6)K!\x:ŰRo|g Gj=//4nEUQڅx (88 ߩ@Ze!2yWQHH?r$l-bkғWĉ)Y`bà|@ zN0Obջb` hZ;H؞MمP]xhy^y0ˢ{ _H!ɏ &/%Ň/S;ַsUH!)Ac=T|UrKru )}#$K7y5ٰ?0b2]U꒭]>0z1rmO s2,'Ͽ95? GahL̵w;+m`}A3LݸR RZ LEz r-T;fCXÒȕO%!!ňFӮ;d뻽ʝ`X-9f%ȍVEq夊i@˟Մi1@G"%Zi wJv +%yɗgV31yhEec=r3ɫFCj$@p/y* 0޵N(rJd=*z.XnâLE O qX4hwۏRN*ݬE^D y}n[NI G"J(es! zZb5 f'1mj7`ais؝vsS ՛k$0>~M#dVHCaH8jw ĩBPO|A7~izV3/bl^=C^}M:ujDM|R67uvs| t#q%o.H06K頱`mѼe뗭5s%*80kךpyK7ŒmKn2A\)NbEOD(@:څ8e5Pg-YyO\?ٴ&)杘 cge+6<+Mi"Y/r" 'c?>r§y'[ pvJ/ܚ3ȐC>=nT7*U sN~a6D=_`vd{~ U̲5oPXM 1GaPBZʶYusm17!κDfbr)X-p{kޟ1]'BG z&?~0skiº'hW\c$h%rQ0fM`췡cK1O= wSpr >)2qL:_ygh|_7w+D':BM ɃGtf"s3q0?U%I(i$!p~}].&ebP@ms/>d3"9/D5eR+=Lݜu0BoGf]֡JjOD׹2y/)?L[$i0;dQA'y&^5,baNsHWp:,.ZBIRV̽.%7?ezMI\e $iیdpđx^OɬHY!q=䕘 l~1 +nU ]o!(ǒfz^aY; avq24y%/~?m7L<1ˣ'i.R9`/)0̒ qM^%ap`K#.,mm s7iOЄq?FA{;! zN[c,^=JѝoYH}GNbxeLȒ|; s!Г-B1mEX'lgS%&1(u>uv0 7Mbw,5DUbIP)B W8I IZx J#pq CVZW5lOW #c '@jU:VXzQpC,gWuP̎W?"X<8p6Q3D>}0 f x$"rc$z:5aD;,3efNUZE:w"t9mvk*}Ħ@Emn(fL}l`㣑h.u"|FKT`(dBkw3-^/rψr}%r<Ό9[;MԷϏyj*q:Hȅl?JNq(ϰ~f`f`H1P*Yѝ%t]*x]bRx6R<,9-~"gChԅÃ%1` 5͚bxDrC5kz7,ΎEPQT9nnF9E5}SBbI$-c&_ VQn-݂{R\ΰ .8q@Wqg'Aom~.`cI)X&_`57d̋l4̰s`d%)RxXd܄חsAg{E\RPY7.œv 3Z7f d _84ӗAڷȃ>s-ڦO\Mף-Z b8s?SVf" ͙2jq/F:P@o(}D*cd j+o/}x 0cw)5Cd:]pp`f(PSP}X}*v'ӥ#zPs/Um߽;)˟I۷5mDTIW EĐ8i5f{Bߗ)5ha`ȸ+@hy\4C }5NmgkՏcJS WxLEy*{qI#gg8PC t Y袪j yn iX Ep!MT$ !ӹ}!yv3u/'5ڂ#Z;6T=.KɿBOM`oOS`'`  @Du CYi>XR,)3К@EpA",گb>ʹ.ԃ(kҋPPw'u4kT$`(+tXFV; ;UXF $ \YC`H6 z˚t-?](ʼnnv8Xk}PE1{y-@ZlEv16qM#Θ8+2 3,M~+at͵Uԏ?.݂RوJ^2- ekDX u{ GsL|1eXly>1&C`,{qE#{cpd* c#mU:riU¨Vfل~Rˆ dOJw@O 'G[3.Kr:gyHv~BƫF}|ABj·wc ݘ Zs(z=L@C.~Xhvy J1VKHWz` ]$W$ ݺc.EN 8_3K%by%VJOl\)21p'b@I\sλGP*T4=΃)u? 5nSh'7[)zu #^-(xp G]NOj$D#5s`SY4+b#Xqd%-hjZ&P: &<֒M7sɻ SV 2O . EN_MAdPlďM̉ni$Z\y0[Fh~A-B)p[ \͚a==)\#Z `R*Q!V7?2ZMϸU8T n wT?P9BVJu>:#¼PV9\]v-z 5I~uhnLFtN^dДnT[=³p钗y%N50YB3Pa3OUW[F4! DUiMAɄz0%wѷ$ 6C5!}yB Pejp2[a=hA#eTsRE%^HsTjStxN"IH<+rG&i/{&aŸB ሖ;B~k,($@k[jz*KJ;fDoߢJO4F- PEŝm $! ^rLĔc;r?}_euM:OQ[*)l{)|<˟)*5qWŪom2nB1HVPEMYW~Q6a -,IχyDw5kh||F̚n l_PΘ숙;V\\%71$o ˭ tW/%[o yj@`ۣx `5rH^ dy;b,` sa.Lƈ8 "Woix k ;p ۋ@N#pwկro[T$W0.v+0XeH^ͩ@NSAfDXsZlpg+T{]XN!Ep1q k='GLM޳/6dF`Ho,x+DS&9h~c g]bE\j֘Te4DB~A0DP ]XD8R!ftu⸻\34cu2t7k7L xX^C5g0iZ&B9|av20#v'O#yxwLHpE> $$ad~}Dm^&BZٮw J|AC=oV%[++Нg&pT +O3\; wb ĀQsq^h{HODV Lc[sx@bIdj1(6u*Z#Cm',Sˡf\>풉4ź )֪ STƐr_0cԓq*>ڑ b;cż ڃK)\Ҭ 1ׂYB:%E¤64~a?aU:?@Iz(U9lԮ--0풍wI8lGh.uv1 Pwm:6aer{2jȶİ!ODdb'9H(z`VovL9w * :ɗq[BcV~zow;詨W;1`X%\JB2{?u]TNg{ |e&2buCk hߝ(fYfhzkB@eۖS2/uZ "+]7bD tU W{>dha=)>GpT~F]=.Ta -Z.\FSW(N9~"GjE˻f*Z^nQ/g:zV\~h-9iTަ3bwY<,#68o>]4W S;_ ִ5lŒZ2\1l4Cq|pӟDUŋ%Bq2{yr9!O`%obe-,L^a}9F-g2sRAw^={-橖}cHX׻;ķEP7f_2LyN!\¼WoIX%e6Dt.ai1@ 33vꀆc?JIPp\ 3 Gp9bpf0DM;[&.>Z@o^A?Eֆ48:՘ScCL,:W {E4ÊBX$6W\ +8ft3ؾ׌݄8Hq;`Ctr%T5M#vuIQBfQ*0oL]..UyU3~:A >A[.(ʒ(NUKΨCg6!M <2W岠QZ7̕/]#IaAW4$I4; T 9paߟ+ּ.S, !0i(];+b{ r!hV6x9NS/5zAtG몢.M.҉ƪ?C~}}TusvYLÖ=¦t,ټArfX&r`KgNTd`8Ni !:Em/&b_iyp tjE/GŮ)9+L+̐2x*4 G~n:}}mY_fp?Ju<9a _=ؓ,Juۅi7C<` |!+xvvk; ;@Jqԡ$gh}_#{&>pl2Z3(#?4'(O UB@ެr!=LJ)Mo3GRrɨr3mz (!8 LQ8^5C;Ӄ|w Gy8) @^{ U^rY*pYNfcyi [ M~O Lsd[quw ^oٶ#[*|ĸ*`mkIP"{p)Cװ^rA-:+vߛ'T>B{}\.ARjxྡྷ y!1ir>%wfFAA(ǐ<0 6Ttk-iOHӟ6)!1=Ĝ`8"w?IְEI%bw.d &)Wb$KempĐ38o20Yus?L>1#9p|2t1X9Ҧj{,%[,#aа{ߐuPY0rU.)!A"8~"M}jrhP9^40 S6rh]cr6Vқ@ FG N,įP_&cT B 8 Z7cn' N`CN{zISkԕ*)SGOnR U "a@P j3J ,->23JkGvZG5KXG3)"Mqm! x4"`c[ z o='?s dmk%bwBK:Bz  U}PeU)݃T-k7-_QMڡ5JƬO &ƓWEIUɭicȒ (./ הIS2q+.>qN&"TW8 f:*J+[bR_W`҇WaptQob?)tI:R"\uX Xȶ"7ӓ$sT PlM.~(:)v_Ӎp_KG2э?zš\Gm"Dm@Qrѭ/}9^`^ԚP}p\ G )K˘beHQ`Ky{cR3G;*zK/}p) ޢ8tڡyk;+j뤤GmnvZ !!2cCKr:nO7lY d0[QP /R~+}Jl~zNU)Vm#HLap~XƑh_/^?}4Cm.͙C@KebwEtuS-,B0$\螛uϑY9_! ķrɎwF=7X\0UHAt@EXP RRrKAPw|N;d%YL g/WEi\.#XT/"G*vCmR%&Cv1Id~tmvKaO`'b L4Zp_xH!d! x0A2e{Lv ~8B%s^'k)}TVپ*H@~#؂*yL)?]Sefx{\ K9Kȸ{5;4N֭1) ACɖsW}e54zі2A=z\z5lvia.r˔&5rxdG@޴1q rlDIdCVqAW׺. j5;xn¸RبTaׄ+!uC8OP:(` tyMs\.mSM]`U{qfcf/)b\)\ &?. Om鼅o%&]S_z+̷=4rlņ7K5xWbmʮ)iVɮv2AN{rR]zcVX~T,| /ho1 4Wac{*%-]Qt5UZkbLK+rjq,S~ 4xvYc1Ug\-$C'f I=Sm&t) '0^vOP`h~oM$[A\Z XU[N׿kT]24gǟ 1fi/Vu8^]#KGAa}?/WH#;C7pDH7 n'P9I0=5G* uIϭO~FpYZȥ?NBFUuHU,G)w~^6c0V8Jb""q{Q͢pcjʔ*cHqy 6iymLx#piq t .4F]vP*X[t L/☨5MAo|B46d}L4E/bK9]9Yvc?sSmFBe/SˢD할{Xby3?,>@$doEgr'D`aaEۅ7NGϊʸiWiT%. /^q0k6"6lQLs^YG h^ęAJo{~>ro]oTϯR"bj6|bub{XWsɁ._Sp{ / )dcSeM5LGތ,O ~Y=$π|Xrg11]G'IAl(yZJv<_\7V{|8C'j@FQT7= IVWY${5գ!;oK#ߪ]v!ZWy|JGOEl!h8˚Ĩy(>fh4hث 7ZTs=RV.,vI  2TU m/ChB'3*IqpϯS*PͶ,9?(/n_5R>yB>}TWKlFJ] +;^^aj]ZD>/ L) a{‣zCk;mtZwQI ;mWyokBm-A vKQ`N4{Yz^&e\s7ׯf%sS-tzOП,ӦOBZ@#qPԿ,A??oS?}T]$lz f4%@uo|>]<C"PP4h1O VP< )"()Mc4]Ԁ--zU~ ,ܤ+(#>{p2j 6qDpe?{/nkY.&Y%#B`< ]Oq{e4"6N_K+˚3I}ȰƳ7Xbd}=pe@~W/"]*g뙕1Uqģ]BJ\nZR{^|,ފysWI6MK$G'=s̺Pyzatָ-du'N{J׉32U-aWVJUߢpp -e޶ ڍTZ"ʼnֈ_ߖ{켃SGa~fw <钌h?Qˀ1tx$xhCTd6KBJy`Sy;Q2@V} `0e0APu6i6n5~q^F圦2Be@b#|.W,FdzZsk 8oޠ9nG5ɄA!;ي*{8|UV|lOO}j1|bnJ/vuT*WHoG= znvH|5=f _qusyxCw\B-!Sn=Z?:qe3fr&X$XY.zW5U|' T \;E^~\^Vof#/K,̀Y!4D +uzP+puJ]"T" ok8z ɓ8PkK:뭩! OIr|rqdpacpeEE2ڇW6ξ gu:6 WҿnI,~ DK6wçS<7L_ÂW>wts,f<TsG X&c{;)Xo?^8NO@*/䂺EF*U!Y:|$:4:p5P2K 9߯K;u)\L8< x$z8^7O.c] yY͘Ct*'[*iU[A䗅Lc9(-AcSFlԵtp_56rh8@9~@ʦ1뷢KOnA/T'uLcٯbR<t @}v O@RyZ\ cZ&A3Κ~4qU >3.R8 V#/Y-dXۧ6~$qوy6ȅ Mt$vO+Jc[ꥺqu gI_Q^O*7O9ev/c|A+_|P?A|k쮤n]2| aAHS>lb? 熄HM_}e}BP,Y5sӀ&]X@F1zsPj} W ώ:'tI,>P'5k'e=)5k&=;YQݡ_~_c~_J1PQMdpy=ݍ\R!;R~`QxH.ayz"ۃ*Q}ZdːSgWI|IП`RՅQT6pwF,dgix'P6p-R2%FUF A$z΢;`Բ|i7 Cj4|DHX,[hӣnƶ#)$5OG'IM@ewzg@%,A 2q=f8#>c8~AqD1 e(gyQ]\}H/k4hBD̕ 5)ƻIx;|XӛQ ;ҠaԪ^2Sh"H/kAH$LP RCD:,0dᬨ#f= d<cV!?!J^nh` H:\F svY1 Go v.P=g tH@{[ `3< Ӏ>y 8 sxgh/BSQOZEآoal3 wAF*0! C}mcgL~Enf'l GW FCӉ}.ҋnQ au C9lQNzD4'0C9: A}JVM6rU$YIQ.Lϸ g ~Or;! 1&&TL8hvyxLgTb hia|$ha$.2|"1~Q'?v ắЕuox='))D_'.C^z^y|V4Xgpp'yDkE!SlX5:Z|D`hSǶi:s,AY&y5wZ#+h+;ZO'7&N"<n)nZ oF/ؚHi3#_ ;Ķve+]FX ":zZ}q]?^~\d^)w?;c{啻B9qTW>9ZV@8K [GN^fӄZ­MFUX&yK =È)V"'Y9v$4; X^ m`k]9}2r ,j]f7ߞ4 ݗ*"Z<eI>t@TS 3[oL^}BE0-_sWՒ+ Ƹ&p15[>A2.ay9sjcMt͹ɣ$5-|T^M=(B;7tS%RH="hA)vd=_ZޖnǗ8z =,HNhP++!yZ__H>\IGKD[d;b sc'n 6' +*o]Ӷ ~GEu~q#uqoY%qc$GJ#@F_fKdn(j%0RROc)2j\b{8 M8 {Ndl(7l50_s[Ɵ- O+φ=Mn^Ns;:k-|GUbq}x0wqi 4_gT#x@;@$5 OԦ@qh~K92g)sk]~65S[<IGXZǧ}z/:8Neޒm[@\GZcOY D1㺥~/\q5NXL`+aخ Gؒ\ZBI `S Bg?qQ18SI7uS⇌F+,Op1%&4GXP9UK5EFZ@EIGⶓ0)5`' ޮ75 䤊( \OA+pG?jQJa+jlZ\\ $FuZJ5p謂@sQ4_jPtoq6!|~;w9ߕ{K^HIo FfjH"zy&81F;LX])%BϘ-ɰP;u/.?KJe;'9'xbN#(%97 RcGSiq\= '?bjU At &!-. nxPMXSgREKguu"Yi&f(a խ17iW;x=1X; =[9˒}JAAnDpԐᗯK%(r"ӑPM)$f#]{ٞ(6/oUSEZJ-~'ԁ] L+2׹u[̹93 !.V*WGvv,/CW-| Vॻ;R}lT##@dy&H`dXt:* s.vfP&4b(<8=B c L}υCg[]qBt)YTAX ROcًh)/z^Po!cjfȌU=ғ\Rjm C"0}#= &_@&Sn$sU ik@Ye6 _/PT7$qল Uײ%: NnvӴ1; \zbP$qėfڇo)?l%9W0KhxP0]5\)gI H(`\-ǰȸ{P@MX8mOyap ۇR.L`:Ďeg7 yN6ુ~=iL-B"IS\MO>  |IRyrtMH1MAHu51 Phɭ]mP@S/Bk",}Ǿa?a l s`Cx/'ˎz`%e9]JF"qRMrr7Q2u57g2%/r)E6viT=\ "v4YDd}܍>GV4h%q;R=`q,v۩l9_C _Q;~%ueLߓ3XEq?e״"ѓQ`QzQހ/(!CUsqm9 hȅO ҏnzԡVLS~#|;3e{lͰQ!.[2MnJUzA.~{xӋ'> mEխr`ɘFdRLrQ7)7/Y'5RaC!sZv|Tp6S }^sU,u'/5/ HxբNl50&d%nNMI ղep"y{@J/b; Un9Kz(t? G$eAoH"5h(QE,mSG-!L0Ѱ4cBQU{h+)*4:0]jNtM"*e\2@m.]; &k@KdIs(AyXEm"Gb)٤@ՙ;&YK<2S9 qٓYK/<9 f-7dT؞ g[]1%ZoiRs=;`kYBTmb*Unup_# iyg)‚ID/Zp?ǚ%AUUov%QhEdXeW~2@_l!N/f)I~ʝgh4K0tag5Er*L~eNбuGt .@YI|X H9B7a-CCzݝ[V LY݆VV E b Qh" L78giLs2&AK`Lu!>\{E~!5#fsmWI@4|+z)˚|hD-*/6;v=MGڣ ?a9{ē#z{qV2֓\Vyx rr,Cۅ"'i[M5ٷ,GgջC.[ZAihSYB͘--@$"w<nqOŲg@ i kYW504:ÔɻF9qHAyдkjqC;Fa]p괪v4wģ]ս BI2y/,]Oj0{/z6\6`qD2,\p*<>#Mf[յGS5%.2  G!Ev{E 3EOw<3% ^^T~/;ӱC<έCo U $wp XD i]>b-<Nd|90tLX|f.ornn%QH;.ΨbgGt'yܡHG3萝b3:&69k~9`@L  -3h31g7@RxMtuyApXh^lzΥ1"/[&j˩Jj0`LLXɤbT õyzR6\BhmL(`I:\dcQ)-2 16 ͣQlr-at%RەcغVSdF]5>=}rɑs"4"['!yaSVXX0 ML]w-M$^a!SZYp>Vzd|! ƧL[SV^eV]#ݫce3*/ "ضK-cWhh nc!e!Ul(v+uF܉sӇ t-`Nn#@N I>`睙i'6 =7FY Ln갇J;M %PI`*h M#\lƲ5q /׉grdt{;Jʂr"GT"ݔOKsjhM;M1|BxJ Xݖcp òUGs=87{W^I%ŀɮkz}&;U$猓pt&=C;֭A/0th#p8iO7ᎁ%Cdn!@N.ct-`Ǎّg 9%bx'/~`Jtr6j=` cйU5M Mђ~Q$L)2!W̻m~nm/A&' X%9UĔIHhagP}HҴ VL 4-@jdTC9&VXVкER <4񜄡#/4 7/~*:ඉk 6lmQL@ǵH3!G V|E, CF*/lGWE Vx5_4Qu!3D^!rqokneμp G7Z%+KjϠR3?D7vfF^iO*8co!kaDߦb#bC${E,7_i0-.F1!\C۬ƫ}lHMdPY8@n%"Z-/@IeABUJ-։sV'aDZP֦P s}RK6W~j``;$m)";@mYF5ky.I 3YZNvbJz3LCD[=Rz 3>v>~F]=uLJE{7"wϔ3[njM%T7zA3yjS7ǒzyFIyC$oX4Ŝ!SY"'v>܀@v3M;ɥ>Rc"$qiM@Jcy:2>Dr3+I,֏l2xt^rQyGhVђac =LU DmJBF3JboݗȘ2Ae>GAB+[vʀ~%Iٙj偆yrj޴knG8W+@O^f$ZKyCÏ adU vs].dSYT;10j(rzc<ơ2$Dh+g[B?ypY*[![Y/9SPPi vQA20r%7ۈFxAƄjhC3g^Bmï5N}z}|; +1޵mUW}3=ty_iS13ʮ.L_K)KHJ/ݝyM9F<ڲhzJ=wN:]@4]k_\ ]#0EkMco?e.8C9Q' hW-d; Es>2$Q.q 0w6DƉBS^@Hkk=He e0WeRx?u8>DY ]tW(̶X96>o^υ~*n]Eؔhi5pKuʦjjGrNկ?{&Y= ؒ D `4<ꈉ1]t~D.u|;b& =Z41X`R- 3R9- pg׬T=-b,r\oALdg & ?1JKUs| v*u \#DXP]bݢT}W mma1gբd6h&|m^ڄ©:)YlQ{NQxvaKw6 ?#1̏%|&h)*-cdGDS9Ƣ!AsmF޸wB&|ÌvS} Mc#1E^֠ƀ.K-kt=K;ҥd |/GX2hB+}Vrn dsjL=Uaky:R mxdX=U?/>`5mܥjwKvzcs;|3!"gyt})Giԝkڶds$ٓG^9x"sXD̀[Yߖ*t~星ϛ@'ZE-5ld-q]NpuhQ&n|>3(rX%7BᨏHTYE:VSCgҕ'QeLq>gFlH )1 vC98ퟸbu;%vY=LV@'F:Cwn Ev4͙@\)Y x1ju+SS]d> 1@vzO@Wv>0)I/>.T ^J m'7wq>AAfJb +yx $4eUuW?U_ߎi`Y סo@1Z&dm&\2m tӚ[4Q{€Hق^ɩV0EwEX1u(ׅ~F]R$Z`E/{I0Rv@:G f폵}gFRl'Go*oiyku2}췉A~vu 6,bzi|,e"0?ЂEb3j'q7g,w ٝosv< l/i0_yGT Β >{]R%Ea@f~P o26Fr/y?d~>pbW{=zTc`>੘*$w,Q@ַ |OzrU%>/@.)rs1QUm Ʉv+t~S;Zs"\Vg+3k653l,*x]jW\]6 1X DmR"Ǚ9zҊ>Z -Y2NW4gVf|#/Tr%M-颧c*<=l1Pvx?qEv0Ɵ %@ HH۪] X?ychuѴ_ 2if +~p dR=7N0'8 L;*WCJ x 2"o.WMIKb3x_տױH* ¯$zvwCCZ"Dl@ k%8NWXlY h~qSIŘ_;sz1AI!ЫElgr۸v + {)jAC}=i{s ۡ-a?^o ~';L*(M;7rؤC3criSf_CR4l)# >CѰ^e2^OJTi\EZ' {T^tT}|fݑ2urOa j g$xqTyNrpqt4S˦5רS1֪a}Xn;T}PB D:iKiu*b^;?Mjgip7)Xp'##/q1kd~M ZalGㇺ,n;H f/TO_d@p8% uBծm}q8Njqæ 0wZj7;#:M%-d\$,3qewx t2GO"XXJ3R3Y])T? g\- *Kh<(oyN *$$՝P{cĴq(Ua (5]1g~)5Τ.GHnF]\Q*^o 0Bmv ݾu1 P>:&^skT̲wMS;:%w\XS ܻ_Ap,9wZXy eCbEނdo d׍5Pʦ/EB?}#K ǛK 9K,>Ig-~y{\9[r~҃4öWUKwnR3t /=eop_-ElhؠFBb; /W鎎1nիj( Ra?WCr2 bϰk *^˯nMAft :לH^>#d>J+D{Pw*B @C=y t!"CLj%Anjx`rz#) pPyt р0}O9J]0P)F'/n[ǵà}5:PV3JD؎ c+C⺆iļ8"u)boq N%A:\)x~lcp55R.P[y9S$C3=YQTEvnOٶ]hphF$`G5ii,2,O*mq"M:Ķ\K٭fDžoIOMMY +$|q2\[ gXe `l ^ NfTqYkS2I8^o՝MnJW,RuRW-崵Xpo/S}Irkd\/ّnz_={pҗBOvIF'|A/[v%(~ LC:&:_ll 3):2`ަ(|E70_zz*^sZd1UQU ^޷o-e.ːBon]}LCU)S\eAVB3inl%9JYeH1WcΤ=$he`8@" ɴt5y2 Yi nB;$snzE@c +Նiܬ} /1.)BP9ɚҥ4$ E}<]4 v~1I팒5 l]zPAƒ/pC?lˀv+ofbs.@9qWuO _(yH*8԰4L+0 :K? CzhA_[Rr:GVdXa)r!xvcYi=_Am|5ӍAEr%xmH>7M@w$maoanEP!=* tB6dN~PA hʎXa\/vhτjc@mgFe֑yoZ1R`x 5{ 26,0Xf!OtN~]RVX0: (p&|YŲrgV\,Bq>V).Q*k5lA|lb0xk["^g%{8ӕ<=Cn@qm ;L}{ >/RV΃#Ux?+I_O;6Z=q͛($T:OoC>-So+1#"&f.={7vrz_Se5V#*;2<ƛeUC M,0q 2"ވtzۿH]UƖ_ y!뱼 2r*D5'~wͱbу^8*"k[#c5$?#(}W dBa*aHY_)`N G'ڹVVT ~I-ҵ(=:>Ws>XO7glt%9}" bhf^/G]+T~$5NIV6!DNy%+kcpRfr CRKl fVU:&+ŠC0(wĢ;jtmEΏFWU2D.} lۈ76pTTMxTC./LZn8agabS4qP$,q+:ihÆOKtfJ3u 7!.E?s%f{<ixVqm\eک74 GE9}B1Z7 `J fcΕ0Y)I3XNV2)l<=u;7v\I5|*Ү7"ѷ%-4yC\Ɠ>* |،>ﲜ{|ϓfizLhcUǪ miԱ D<H ZOX7!rqN#.W?7NُI}|k;Բ}..)yKȉY.s[,Ͷ_n=vE;UȇnE/>Ch2SLg߇ȅg˾p/;{@UHΥ@~m@;"7&9I`R^7Fqݩo_d~ Bx 怦ݕZX["9g"k $c'|8 Nq#0 X6 Xӏ T-u,-c vM(;bș} D:Vfvo.#O?$Y.='aʌNKhYݸ ^Eԥ{g\u@F=K*٠5IYd l;TMꍧ=>C+i9E0@ 7ᘅ,ØFvͿ8>ilS}A#!@_!}bi:goCNml=Ah:(Y#!,>׼+/O>z#4Xƒn4s ^qܮVPK݂y݃l;dx:*H~#\v+i&(%61Am;5}U1@J"rA$0.ċd#Md2/TG]fV0ɖ4fߞDVU$ώ:l[qdGt&kVӚWWtƠ(q`I-zޏIG=I@hr*XYLw}n.W"e\/-] CFh>Z =hni}mq.ȳH7\'˵s\ɥtu'[N\y5*ܺ0y3Ra"~Z4f h WU:8ktM2盟oLz·"ήH8$%+PdKI=  KKG2qF g$,fJ@څA:N\h3+$ +xfñr*kj'/Z1˽ 8d?ݘOF~ 'XWIdȎZ0zd!ݣѦp$ ݾN !]SSh"W-<yg Q`.D ҉Wgɲc;6$$9fb:;zgmQ^M!:U㧹m|=sTCGwfԯ3ηAsĩՔj] = -{fuq #Ow) 30{-M;0*~8xWh$WCsYUjd \m*dz8VwP.t]]!S˖@z 0[:OsUdTf62#o3!'`) 3:9k ܝDw8"k$).ږr=Y6 enYI2/;k"8npa` mR, 76%wmGJ"t:> ] 1]GLU.7֍) [?T"Z&n.e<9<'RǗ#oW'n0hQYezy"<v6uZz?Á3>VFg(y[Ѝi*@#q}A7K}_O }t-n`?i{2 ]R *h-L/QQ%?qev~tzޞ3W{6mHkLۉ|\/nQɅ"o<4io>p Gګ<,g4G:[hO7#|+C3bAњ!u&B@bk9PRW9O—(s :InC?>_ D1cUKc2Q.l|yCIu6xW+ķ-~ء~V %}u-e>`tHP7 q[J6=[y};7?2jh ҉ZI慒B#{B OV^5ޞz>y_c0hY&?MX!^uQ` k3  }#);Džh3 MDbjn5&&L$Zo7Pzn|)qBQFLQޠ= 2lS/`ߒG9{UԆW1+?T{[Ѻ4J>T%Vۄb Gn-1%]⡮º\)HOVP#bYJK @`4 x?e 3eԗʻUONkpRD45/S1P$fˇW$th{*n{>)d=O"FC BVd~Mfj]c"%[?*P;GFpӷcA;Pgsqz!bI0z ֣|'L3EE(jqR)Fr\& KUۯM-EDKn^|AUz 8_3{zJ6zS_/.yL@^$4XvquovQlHڢډѐ>dA5? J;~VрޑbcsSt:IjY߇HjoȮFOe#E0W,^;X䠴5 I{{wnz)yS噂;xR6Aq4 f" 9{r.t&2xnPg/̛Pxsr]zRۑk"jG:X!t̾O _4:m[;8=˯*F0FpC >?!ԝó84P՘Y$0p`P'ϡa%LY˳ae|[z.E"*T*z ٠^BVl`@R(;'T#C+h_ N Tj6ǘ>M^'V @|x+#T/nMeP?qHfX촘ϴ$:6mS:;@ae?YT }Q槊tPH&j;_4}x/F_Eg|k w0 !`<ݟK#݊Gh8J2U -~%\u2j~8Hl5Œ9W D;wCֈ6{y/?<^j?L ՗{6Z0EJnb{fq`KV4/Duy6&Z+qNϕa[tH]b6fą{xx:h (ƽL2J3ߒi>>oEwږ!*hj7Hi $guY@XvW^k9",M15p.C7$CQ6֜|Q̣\eޚtbAX_0F ڿ;4q~(n^\lJPT{,VtBSno]0B+yupdD3={p7D(=>\YPߺ H+!u]YUk{_Y8u,+eIф֦ }Od̗D>Б*Mtf3GEFɊ_r'C[_^G^0m&="CR.XOtJJFB~fИ=BfZ(M'Z^ fA PX+_(қRї\8 $s.\2YA#b4lN|Ru?"SB(G 9XA $ofvsԏ^D}uR> P 4PS^ԎR\źP q Sq`t ÄA*q5PZ*@C:Pf -rwXl!9?cw1qaRϜcƁc r2 ,7&8ll=XApQSř bqŌWHEuįPc;.~ydCsDK1e1 d[ ,hSx9 V` PJ y(+ԫKg-yqτDȬ8Uyo5~ V2~,hKHn9v)d@ݳ:nM=%,Tڐ4yJE4TY_v `-DSoX׾ %o :ds?\/WbB}EѻPVΖF/p#.kYU""Qj-)\Qֿ^%9jyd'fRg[>?X)!,l_͓\T-/B>ZRcaja<Ĉp<i(֘N~\b:hu{Nr^@nY!(mD3yRTqZi7h1s~pH0PX;ǂuTqt|u0ulƯ\ZPpo?YUW25Xb=z'U5VǍjؒK7j"m@ѡX4p{~;5ݬJ\oX6C@h}6g9I6lWcX4ؿF7< HL+$ܐ0@E ᎐#a'ؼwG&_l*FI'ܬi\,nU('jKWlopOW2ky\Jyq⼉fߔז!*A1H.,69O;K<*͊wcOzBmH ȖIMfoUAV@~xšјsm^ڪ1mRGVp[÷or:egg6a> de#V _LC,UEb-su.kHj y[Z|/ "t 'PPsWmo.k|d=*hAQe)”tWQnL04-UI>)R1q͹ODr0ajӾ r$z4 aKmbјY2c{ ؑB4,YP6]*̚LbazyCh` t'.v+k:$szb;-W 7ݲП=~?kk٨4':zʣ]:ݏzW`QɜwJᰒ:zHIf}W V9dd%.VpRuH@Ab".^>*^\ݼPs^w9%%1Ȧ"y܃B=hD3?ۡ~jU9"rro+lwRi0-wK%w !#vIW=放Zҭi16FH[=T}0d$$T=rWΨ/Jf4Q2n)r?ahX  W xhr"%0#1+Ah/(|z84-cLЈLJKu87q2[ىɗjQlRv جpf2տ'ۛ*'׳)zit6 Ef|[HxW l{%ȟ39b<39G>q9N:vZ+/)/WoJ! P)PV̜S(oNcyWxy!NO7Ծ]!f]J֪[Cpw좠8 THLL"0K糜I"D?~g].#^V,/@#i]e`ً'F(ْcZD^*}r(&@ Q>6G8X]\~e9pzp!5蚫6n/SJ}r^gםz>Ar`-ho1n"^,>phۦ~LCYTrjEsiZn_S QJ»;X[x2 -D,sb@s-;f;nle\nP IΥ,(AcUwY蹳aO^L57~S֮{<5ZdF~\ 4:tPyXT [-/V=۷_CDkwXحwPx|NN!G=PBDhyMƕfDֻJ Z.vR#+]$tY\Ia2Pr7=L~tTr&طe&fs";O 6y=`cx>SU BO8jugC/,񞃪lJ2nl68*J x4KM༡vcаkl, 燄+<0MFf|5rOb LjegM¸VH[XD.bn+)A|]>`| 9B#,GdO?\c|g^pm;3fmʘQI@EurȽ)38Pj):,#Ezl|GxJ40CUcACtȊ,j@:|>a&聸6Tn/GaJZp6WM35 ~ٴ5)|YS ?UN&4{y~^:Z(ICvV:lso&si6P P3XV>y6X7#+iڙ&ÊXv:n[qX'"%N wQ ZSF+,,t(^NAIf@k4]Gef6:b:La)d{L}> 4ppBJ %f=5g8H\\ KکmC%//#m KR~ءw x+hK `p+6 P̠Ln Wsy˂>ԙz] =ͺ6ܽyD3ߩ5|⛶T+'sRx]Ы" O)ȕ2E)BC ,z)ɊgKa+~z3ओ $5$rpojٷ3v^\/'e?ތ6cϷZ $XZZlD}'M?Mq!@7Zd/0 g%ܷ0#'. Fg%[VQm3v%D O~E /vK'] $g'*lBtܽUfaN`sDI$QO- j33U#f(qj ez)}LիKV^@ϴ̠2w ӫo"&,,]ng?b[)C)rROb73"2W7qPJ(1drtx,kCJA75kT o|b|mU9;!;8h,Yqy$]Z:m$KYZ?yWj짺{Ʀ{iwq4#*E7)b['o[u㠣(H3#*O6&pkՀO S"Ǚo-}o}ֵ: IESx'Agw]m!Y~x`K+WTY:>6n+Eae-XXX9K+ DQIe)YbWb_5I&{bg-M>S֘Pe^-?Nm?֚F;%֘$x[C̚DLr!ofQ 8&ڀr=(}# Ybm_ "j` -Ťx7m {:6Z!v6Pf>W~~{DDl T]I<:~D 3^)zl1\h"{ dT#%0/vA")~?($a$#^ZHNN#!̊^ ULbhો*~>2n&-KoKjOԻhkw~[q|,SR)~X\ ,tk~Ƹi:$sQ]ѭI(j>O]_qKGkͳa¬7edT~-C&KE'GKj|nY]MQlrB\]c20ldN$^\y+enL4R!nQcfbRW]MN񁯧'x nuŔkɬDD:+]@r!FX_DŽӔpt(KDk2 F\ (U rp=j[X6k٢ AFls{#ǻZ3gΪ W0b7x҃Ye &;ӠYЍK `A[7}a~j(P\9X(›D 4:0QO@^5 YZ