python3-apparmor-3.0.4-150400.5.9.1<>,8da p9|ltB(J|q\Xsѷ@OU!Hp;+ …5ozP^1A^^NU@2%bdkx2ݴ1d%b0Kg| T tpUN̜,yHp kDɡ 6zOTDc3 #nA N4*7t=^ۼO߄MR0[!|lOH{E@ZUY !ꭲ2Q^}7A>>ʔ?ʄd & S= SpUU U DU U -U UUU*PU 4"("8#~9$~:.P~FGUH$UIxUXY\U]TU^ bcªd-e2f5l7uLUvĠ w$UxxUyVz$48>ʀCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.da h01-ch4d SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh01-ch4d 1694064909  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=344ef28ac1645276be8b658523737b9c74bcc413, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR%Y/'ގutf-8d5b06eed0fb6d5cca56a4466137c804b1f61c5881a8c3f06a09f21112c9b57b9? 7zXZ !t/![]"k%%) `=l.Xv;2v4V8ݜ<_S1YylW Ty.}ILmb;:\WH+ok_`hr!dn*mZLc|0>M[t=%?; uK3Ș~pAAP\D+0V$B1F =$RCIt¸EX& h"%^h2|6~^ ew)A[́ʰ<Uq]=|8^T jXN;ySyO􅑞Xy oG(Jc|-&+(Qُރ?yE_'#4mJS,^))~;>)_aq>6<#l++mʴ2e$['O x,t&/][" є0gǙXH_J7h5,Vʓ$v,&Z!.@acڧ_7_[΀L Db:tppR^lLEz1`p@yOY+Ҏ9G|9Di>axFbt; 2vu<ՠ3p{d[rleYέyjFslY%3 gHjA t*+ٟ'[5u&cR *۲(X,- G/ cjY/&vT ^:OsX3{^ -g NKkѕ>CYQuXBA.cc*2r]3G8V'oG:}-:పՠ(,:9eާ2vˋLuUóX׷[:⥦1|p-V붢w>!c)()IEvoq/Bgdq_bD[uj@tySmm&@ۣǕ>$CqLf_({Su WO\=J;<3<%|ll6ڒ ?Ö.jmi>M i TCzQ/ߌp&TPnsU]#@#hEKm߲""|F)H+P`S?!ށTCL닕@,b 6#-EB>`">Uc]}Z_t;r$dY[B٭b^!R|ofՏ"u m`dcrb裍/.M&?A* )0 {q{kW;־Gv-m`V1df:4CbY\e|S=Sv,2  r!-f;oOU^tT:dbq+F9'н(2< H`UDۅI`G Oa_T G'jpɵTZ%gCC{IJ;Sę2:]RU43ItuHx`Vj.H>j0K1Ϫtӿ"{4[5!gE}ןM"B>5bLQ i41W͂4m3 ,lr{Gssպ5FQ]7ta>|#F 3졿\Ub7K`d⥑QzSFd^ ?kU۷HRH9P`e(s:V&kKMv}p!$ ^Fh/JOh%n>>j-*K92+=N5Fka5 djb-LZ˄FFڨOX{ovHqpGAw@xE-$IX+fK$Yޥ :Iqe${{d]2 fCHUxqyrS$p:dN[ۆu_S=}#MLu YWd*9-1/B!GnK ?!U|]l?sJ Q;anFͳ+5t[*.U΄_T} _rP&[5c ސަ^_6|oej.$4rZ6NǦIᓴWK7u+E̙bDuiL,1i DDz,ȬjJ@{mFhѹNMܐ6GTԯtB{REEUu"N\\kL){:%PP=OR^V*+M޸ ]򇻸0Y~<8~:oqTh~;}Vt;BRn7U?669D9uݟ$Jd5:v3g`9heI6u0*N7CU!vlɸq/xMB;A-W5h+_YB0Bn(eN"Әӎ"UaQZ`оu`(Ћ$=𒁻[[j^2tgIZ'+ӱeeoddb]TЭFGUŬߨћ}ӗr j#*f&WT{8q9{Q"B},_6 (,&XZ,_z,v( +')wD$8Y OhJ=ae+mj _9q.)$u"}*t;t1U{^`=ݣ~עyk`v8$cN?+jρs݋wJw;1r" FִPsw%]PS\3=3 <ϒA7Of1hAq0\< ]Pͬ';h{TQ?Z3sH΅,%hb#5;)@4Ml:A/ @#pTd4#jb6wG9-'So+X9|,I1LRQ|E"H'~dXiތ.Y1a5:MWE9 "{ s7'\Yt?{9Du/3TD$[*89`Q:R[ t[h3%=> i>}9[ '>*vQ|V7=}8 fTNs9 BAL[x7@ ɣ"zEpy-w ׇ3 3aIgTrE 8íP췽HU5(QEfh+nWamwM)Sgc"?Y="^E}&z3eV$|YPm !ڠ0 ͽ!8NeΜD҂Ņ.#sܒP`;03݀ٽU6\Ar _ Q,/ |e! v+!" -9hlQ.G ^I!Vu'H]tҗ `?5ȃ񛆨#\Ec) VȉnȠ@51nxy=ra[Fn!yW96ʃxJ.y7?Ƭ9{I;EM( ԓwcUmї ^Ѯ头[gVEqk$rZ= "ҏO"%KQ߼jK@Cy<%_;n)GuYYb<-n:'.F(d7R{áT?אq6TDޖV%KKy /d }Hl,Q?[0NW^ O?Z)3ÇQC_=Ukr(b' IJKr h]׎h4JCDU*fI"$ CL L绝!Q̃Ž XqeHT7 EZg8N/OSMVV <)鄁\a={Cs0l3S͍vNPؒ.5wxX|*=bl8z,XԽر9z<%U.ӊfGC>8^I>1*Ly+M9(c RX_yuz1Ľۏ6:/g5y:f k(=Y52UUӶ 'vb@LVx '>% 8gUq(y}('#vh7?ƙ쫈PגXq#HvNIܔT?7(T?Sث.H&a$DGȧ@a 7~xs%ĐFj( S6H2TkMkmM6{L*c>>rE:5QY\SH =$^WCH+P0O7"6 y?eGpA%+ R7yHM²)@^D@'x^ b| G\~gpa<]G57Mczcn ztTCמ> RdSq/!!kgԬ: $)4P(̼et3]I+BL[ԅzlp414Lǃ4Rƽ/{x8m4|t%5H>s]%X!wWվ z V)쥳wy^T}e!I^ncq E+Vy%~dt㮽Xc^8t14)>P-qmSר;,"X/U~QJ{~'>)oa$Ҿ*YGU0 VZ[ޖx[ ݩ =@G !48' !|nF`n{q[A|jNp6T$|֚e"h^SJ.r{ʙҊh0;01V['͎g R2`~󈃭6+Wwp{tfuPc~]jrbU!_`-Au}؆J .98)2$!wf< Ř[C,hqBV7A y90ZEG@F%Pӧb$PŭSE< K~# f]%ո'ZBa0`F1PJY/$-$;łUӈRN$Hy:>W"ii(w=j%=yxݏ619a [dVn2gDbȪ:V{iPox^|%E.wio#r5& ~m(t-ѻMr= ]ՄDΒ6OC=Iʢd V 㶉:UHKQ\05%d4y@3[%#BrORiC^u%ó ؤ{Y n[g `a]GJ="c>#QZ'5|dnQ=`K~#|Yid+ڿܺz*4la:!`:KTuLL[W -N(s8%'.ۅŃݐBQ,Ж $6@waxIC?FBX8Ki9u[ onɲ|°) ^sijI#څ×UAǜ,#Bk"x5YtQJ JT3$N\%oچmb-_ПZiCZ1ٞS_J3稡URةm,̷a=؛3&>&Lk,4ܔ|ɶQ<$iBW9* , 4T v.ԑp2:kHJsG{!-es9km݇ 8 ލmNY-i?ijVkcPǯV\a3oX-g$tRZX)8kaPK,Y:۝ ڿQ޷0#VQ`o'X7) fy9Q9kDNHQ/7@V4f|å*O4,.fe͸*%)|͆ڛdmJ+c.s~yh|tʙraj" lO9ɉ:="dfㅯ G'HI˩30 4+Џ yz 6'l$!ޡپo5z"Si̞5F0|H\`,J(r_.gv~4$厪sR0\UŧI_JyĘbws&PYtrI%8"iʹrvxX58hL 2Co{>SD1c^ej%09$^"O "@|Mexyh^p]+ІqRxoV2`EC.6Z/YׅBAgȬ?MjQ43.&1=:o֒?BN`%`0j׆?ځ%r"%~@ xK኉$8,Yϵ-۟/ K@啱NM{^F;+.[7iRo#&*$+Z[|ڪZ[-!TH5s}MmFt~cټS"5F:T a'o>!H{|DcWʓ^NL31X \@g[`ڡۘrf O*L!'sgEd8ukđ27k ہOUe\fN\!# 7=jW%PQiV#Aq~#ҵEQ/&̀4Fਘ-n-3&3UC׋95! ?>{S6SV)+ʰRթnj<rQ/es[_lUB2̓l"QV;$*\;,좥n3pj,>**ǁpZ0ʅϒL&* kU?^m EHÍs&Zh$=D ¸X$&Eѓ8naJxY+WHeH5f4HG03C$4T{"6C M ؑ`M }"c<@=܌vkclH\k~ҌqJ<<}>:L_[|UExEl x.G|8k55h0N)&'m{XdC^#l:Ȳ&ؓ}0(ٴ#g ^1o@0Ctz9@/ϪU=ڠ$V*OUiՠwmĘ 9.u^yWWRQDNAAIȬ0J9CF: ߴnUd[ZµŽu~etk5vgwLV4 &?*K[0X/9P_d~,{dm}7p@\; ^_xoЛݣ=l*eRO7SBDpsOFb)ޜu!Z]C(U$z4F,Io&kyUA(PM|f0zgQ~3ďWxO#/Zt\aVD9&]> mfXge!!ڊi&+J$(LpxKo"*6zL;Mlq_DEiKJL}YfHR5Tc6j PuBqqxx4"7%]/S1F DR~pGb <mE<U#S*qGv,lRٙ3F{ke4N`%7v%@?# {=S!u젧# =4HQK@q1 LBX3;qDhX@'g*%zs䵰v |}q|lQ[\O*7X_hB+밐ع.:b퟇4 <*IQnmX$w;$•oSfT󅣋.֚CH+6C>>AlC3FVI >`e[b98,Ke 8BtTU|f2ؤ`u`A1/;T5(͌G{[+M]@je+SYĕS9#zu?N#Ir41KᄾQumZH} {\25ٯ6aaNa'뙗׽1&c? 3Dzx>z=k> iV $E%M9Raznl&Q$}ǚ)DoX:e~XyM7ELZ `oEUp7ަ0Ӭ?|M{<)Yhejq&FhI8t. o3@سPSv|i΍$p)zy"P%Iأz*!~kaҟB 9V5 D∻݁]|%\dhD (^SFA|F[ D&&Y &{Ia%nLt"xP$3v gEGj>@Gm,ώf60|ρ_{X)vzg ZSwԫ3=O65Z"-#$fLih6fGouZB>`~ ,!WdS1.Z \?h. &` ^Ɯ"l:@Kv2f'ri>ۨUG]nec''ٝ󷒝X=I!qOČ=՞ nEX#ʂ"ԠTJPӉ{D ja1Yu9{]p*})K|i}f(E\nbsİ jLܢ<έ]1SiuDwVS|dt4qkyie#3K5[65Z"DRx{^ލ98!"[ m( ,nt͘\oP5$(0YŒ{ aiqLygqU3%`;NVŗVJjP.+1;9\/@?]*G/WL8p="_i1iFcEc0Yټj]hΑGP? Y-j3=Ǡ(ް-/䡨c)3KËau # XPRT-O F*A #"α Wo: B3wĂ#dҋ5-P^ȳʛ9;!0~vg0IoT0[K? /dج C[vl^TDSqf>VA8)HaB!2aj1B6B&̴ WCsC`hFꊣ.<@Ta)XImå\+ xd+򉁋> HAN_<3 {J8) xkLB`߶>N$urNm^(fZer 2sO~/ >Gq`<8@Cmi39?bѝ(CqfFBl(A[xnHJə;zk2͌*%\ۑ5>mmC:ET]\g2T_}F V(RFyI4eoS[w<]KS\2,R(g¼N}GA4iNIL>EIwSД/q5fgekI)'ۗM8-GW_Z@qjO_ְ3Hh~-{π$qtKf'`+ /EޛY~mhy)z~íBGk-ߣUA$[Y?7[ }1 P9ܬj0XԩA97cyRomUWCQ3F_kZ$Ĉff#Xreb(ϒ!Cr08N^%-a tFIYY ̙6=B)!\5V%3FحHz# Utl(512TFp+9$3D|Li*s!=ȰX|u} GʧgGD|®u;M_Ta-=L\ |bCLL5RT^ijR|x.li$HbE L=!Ip KLcp^fnP3# wM+V#wa_4o5p5hco֯+%x-o sw;'g߭ee1'BF+V2CyѶvˀиSN\`Hݻm.7鏑D%)];"^1O]l̅egUϜ3?;Wqo6B729fh75a1Gp_d2y3-'96 C!9IX$6ci>:i+S:zLg)J\iƳ >Gwt VU,?oRhT=w[2WGvŃ޲A2Lլ@.L,2,( (mĢ֖mN@앰&~!nqPhk\:wӔp11ߓ-#(g-}@EX ~c7/֚cDe^A޳FYDd5)q<ZAJLD5s9s>{ڙ\դއj\-" 87O A)"h߅$]T/vK'#$?fp/)LцAQuOwِa/UsJ'[APgne{D0$y9aU.봹 1Aγ ri~#|zZMGkFaLPNP,vn1ղ0"p4yf7yA{tI *C/ :\)]i k!ֽg IR pI1 B,5 s-ڪ}B'cywRfu /Q?Ls olP. "%dDf_EGAD`~V㽺w*ٟ=Ub}D3OA78Kw?ĺXzb=%+hdxŭ9k-{g5V|c5(bLJ;!vWc\^C^t -^?VhZ=MSk}}i7Ǵxg:m{#hm-0)?k0pUh,uKݪ(+4O!JowKfsRT||aMt(Л16bogFL~tx_[Lm].s ~)"(BbT#69Jfh40UX7GƜӰ]9d(?2pWw>B:JI&P-Pw Pd%O@ȥ J׮[H'3z PM9 2pjj$6:7KՍʺ:4*+ۀl 3 j7iw e>u(Lx Ʀ_k6W"4f79q$RT]-~T)1`3$Fm=Nu(>R-i 4BA. viSAќ &3B'Yrz}Z4fjA~E/x}b<gJSm@-0є!JoAa^qfa dch,Sz[bJaܨ968 ;&HV`^,4/rx3(hG` æ~hNj- 8Yxv•wDj;%-kgQJ }R"7v|dcx_T[0&83NJ5|VΗ1G4͡ ePc> 5` Qbh:`(d|t)r*w52p5C% "30 B圓`ues=Hg2\[^,^r9k3o)cKk!7͕h uV'%oT2+V7d]Ff_,^'| Q2fiϩr !p-ј{b<5ڀ3Ӣg*Jny!\_"}8/`b~m'"E,g| ?WtۘuB`ytgr-7d^KF'V$ b:~}sgb_ϱnjܱS{ݸ f{-]6 >|!  r+-C\hß ;DH+ wQ 1zvܞT=-Y8z0J(K!Iz*t&/naXXH6a-=1CiBp~Hƥa:=yۉeAϜ|Mi3 OV9ŶFu+rWp\qY̹%E+ǭ.$\~ [MoJE HwUθ(}Rc`l%Ewo8ӁTݘdS$5SXs+RKoF~;KxL\^ MT^P|B+?xH.'pS+vsxnG"rF&`]`{Wl 8x%K]oԋ|T(WӀPnOfRkh_4]2TȦigw#SU&– pSb%k璬6~9L,vM;}6;R{pt5%l8~ƣٶA4 M{{0͗V8 Nhz{6tlۗe9g73L(UyŶˉ>-H$~wP_{kI~J0H$-]R-4+THjdyVswYA>ŤxB嶬ul moPVPh~E0 s7"4 .iL%D#MTS,qC{hXO3Vdt}sTO|Lag@X,s˫y=cL@z}kҺ X 4n ;-?TN?}'Q I6 |:E"ޒF+ ٻH[XJ\#*a Q+V"_\[}.9#L'F+ dJ Wm"rRxʙ|,?lVG *O4vK8_9$b03i$*]s=K%'h-`'-]#!- e4rk>2&p׶(ua0!geJnXh| byq+%_m/{F/ @5-;z7qiN8T +UUDCp(M" &1*މjoJz'X>#!XEW(#QQuNb%[o#wWDӺʇ0rf_7? 2>PfN RV=#+tKzy^ܼdoPd&iG(Ľ@\g=a~;#Βg1 t8t1oJ ͚7Оcn>'͹&#Fé"cmm4 oDź393_TZN7]8Xf`ns[I̴y'z| EWM#-B%_ߟd):fUr0| .D:8eOiveQ~[uld #t3QA:eC6G^ؿ";E Wı"Xm%"yBm=Y2yz gVz}N~?ڶ%iv.z`5s'Ruɦ >=ō_-?AwZ٥y~eԯƝ lrww؆[=dP@>h6ydc [1ygȬb>`H|ώKUqtԁP<20Mr(fD&:X)7=\IMD9cAF tMxKV;z jؾ P!.#F$NF< Xzh#wC3#F2=y];qdVw8A56L\ux>cL\R.u{2y xFd~q9-v\>iԊuĭTD;es7>#FCzi2f/6EF  DK'&8W;*i4"=,p8d;J…GuV`2K#Rg<&²P_\?H1OCj445߹WX+ډ ř?~ wK$aWT.0 r7_q[ bf98t6BQm@~ "\8NGOH@W m*ë>^ 6L¸5;} W\hxb]@'YrXs?O?O-"POFn5L3rҘ%.eL`5 sh2d\(LڍN i8еﱓ4]dK0=0w[Kq뼼"vHm-:ͦzCY*(IyĞ)"!.}̘ **]񃔦ljH;Cj}9~4{4fr#ȗbEY@I @2*Z>[_z]("]rM6z2@QIzCTXJf'Lmr`A~rWv* Pcg^-Ûaߡ5M1x"Ri~8DH=A$ȹN'}tv*ډ.-4WSJPc-T=pA4ԍ-QG >QڬZrNICT>L p|1ʤ.^kPOɽ^4 syN}H> RpyC(Dg+̫Iar4%8s*i~R(@d*PSf_KLb~mlo¶d+u{*Zl5F Q:dYն!=vGcOsIG!-/U5JFݭGWtEXL# qSБ}Щ&1!maW˸&\J{+݃,bM^ynʗd;n2f,'d5Ax26]|>xUS)'THIj[kӪxjgJ:E,hk?ջzLw5i?6Dا>"jO!4%01k̳rC7Sd)0 G;:GKrc-KeVaCDdV;'&7zO}4j+ (L@jX>YaXG/$?ӣ=LK2cߟEb۱͞]㡑4CS9 cYcr$t61\Y@:*XspkGyfgvs+^"~I"GLzEvd˕OAAi=>q 7X5QAj^,@_S붩IO侍`AltRx{eV-Ro7QJ,#<$e2Sx^q}o +Xt9d|F5 uCΛ7Zk"4]>lARL%DԆRrc6m& Eq\tp˄s ;vyjC cp &W[uS)m^ GK QīdCuiGtdBU"7 8 yyܵǫFUҡ-GϹyԌO#6_+l,dzj6v_L3WˇXix: +K469{Md{oZĸkߏe6=s0R+`,&VSҝ*k~MsA0rPҊL QKJ:?j0-LS[І]A)H~ZԨ9M^,Mu}z KRuO!`[3o3k7^YiԺr25KU[{dl!r7mj3uz74stfxR[4zv\ H=&cԔrn bPQF8<[\Ig.4sߒnk٤rx,#*֕bjh8J@<0,Y>M? {Wx d8~fKePs??hQIT @PAOp퀽0~dܓ)SFV2i^1ܞUZ aqH|묐S8kMQSLP9=/tG=:Ç7M:9/z5r*syl&ǰ`֫$tzCӟ ʁ8wt˶T]Lh- /#}e/'dfqܐEV+t"e+`("ѱdL*@ou4;zFX 巵04 !f)|#PIZ`e2~4BYAGP KrNTC< ʪrIu.}bzmH݃r# ed1F8 x5Ef%HQFl$t\] Om»R#Y5I #%7tg.2_[y>PiQ*.rV(}\l:ν@ <"'>$%ۛF @wF޷S@I3e|7פS!C00p@sHv}~,^HW^[͐Kgit;6H9ޫ7?O,ˎDq֩l%ds!3g@Ms.5c0S'"P'ntuSCU-NFh }( 5vU hME)jxB@,A_*Li[ "_dOiQ(} ^Ţ$n#^d "k]p"h9{I9V|X͎F3,†8$jZ/PAք}`@y Һ~Q{0o*g>у1JaQ0fm7Mq+KKi;~uK3l+ROs8#2|60|nR,U۠ f"<`Tȡ`E;^Xx®I)O,30C,՜ LJq.|Yx|SڮCBJɭj5}K;z(Pq`4R%Sv/drl8_AO' SA{Gepmc{_ALcsXI:ICUW=h*1i+BдkB vBY|<;@dhOѠޞP1_Q= ~FDt:4%3 Qo)dWZ "*H|tEk BT2+o[ww~"*x_ Cێ&.]>z8B&OjpG CWGT5+bE߆{P ERz_P}L$ Lrr싉Sd4``\/CVo*fyRIQW(S@gµy1(<ƍY.KĺNpC #LJhBH5XzYexFT(#z30tYO qaHM*`ʭM`X_m?D>Q;40<*U+ V¤OYx´O awp:MkgZ损T-TA;^kc`aXؘ盞fpʊlf\)wɯ]?ɴ(m1䓗<۲x R/j! קo]Փ%O*M;H Y7W8|=&/ LS|on\0+}ChEA RIcm&X%h Z6"Mt|(vmI8_.u 2ƪɞu%CQKq{Q[}8^@L,M{x`؇|9-|$O/lFެ| ȸZᓔnޑʷf`VNC%_Rer^~cxu7iϚ⿠+/tCNp/I?⧢ҽD ț͛V;bBϡlhQN翛rV9WGsAm֛j&v'1h3u i-s[v]uᰬ?quɉUCeE 6 QUy(w\.@J6 k93wUː9\ّ$6? (nz+-c1\G#?!&:T@ˠW.'4*y ^gsZ?"7=x+1p&KͿ y 2 9$4~#(\DGqibcI6$WjY3 eǦ48M qr[Qzjd4)l"M-vlM&HVXvڜs\9$$`D&)ُ |9'^Myc^YjNSyaUǽsX`k/`7|S`0r?\Fld?qDi!Ny՜Pw+%)} 07mR t`W? < 5%tnH${dקpά*6u^v?<6a&Ox0ԆG%䱙2Wp*muta'Fm%dNHli\KNdx=6ZdAONsAa 0iX>L 3ڦԜ+4݀òP ڂ֩zw]\>bK=4 zmlI y5jO9')4sOr̰^ zd\}~BY]3=P#L 4@8 86eWwy@=\$衫-+$>-/nY6R ^ 9خ16g)NQbJ8)$v!JA{y/2Ua_;uf:ŜDDWlL#j%$n! UAh:$ذY#}oYR;#&13K\#c W!)/̑I準PipdP {,o8 *LXާIwmjͣkۙDcJlro{(h&wҴ*wQ<}Ÿ]fʗ#j\qp ܑ#%=x%u4`uGD X˒x6 !)ڇ?;m->]EҧOΒZz^(D$˾nh6`3?2;oڐF t3L{SKh$ܓ\$)GOqkN`5\ܠ %0^O2"Fi 4Y? :L&8nͻa8YSpaQVk]o>%}(߭}"^X4v,$ѝ5*O֨n&%^q&qLccSGC]WHy[r.0B Tnˋ[7A 3wbmcÆxЏ*3>1В'Sjp e!y=GpeKc\EaأeIulC^GڃX 6cGr`[ՖVD\p]\r1PA_|&m ?}8eHOG8晣MJPgD^",TO p"o؀dNǷB+vm_*|0Nnu)gfE1t%H-I%!>n% JvuTu3US4Zb7|<K!sV&QA)cDk*q}2z^I'*8i\P˗cw+q%>J)y! ]!!t;a}Z*ۦK݈?7&4nEUE5A)`Id=G$Pbk~2p%;ɗ)kiLܙ Nܪ3I >N>h^L,Ƕɉe*mDtPR1z_C3\Ԯ !`8Ũ _SK.;{8wԂ'"vt^)E&Զ:aۘA2~BU"= %Bz ;y-/&AK6E叚OQ^[0w%*…T f']\ ȶtyyR0t"OTyΉ?38)b3 D6P}|ivouLDMo]REyl(May'0U~uip0+N~IT}I28Ph9sgdw>GBdFd)JH|\c`󬭻TX0N()/|GluNLn=%M*m`WIXLJתُbyyܺ^<3#tRS1G lO;(+YX)BIx=[:jSK-Ď\5_`E⻭(ev+?3^y.Kӂgj*-B~(}+p}LZviIIVUOvL: CjGcٗprg| V 'N$rM=X7xVTT덂#&I´/o"I"O{Ҭ”"(#Ҭa5:WuhXXY/y" `A:-|>iP:>o/5T`RٺSFO+C:kdX -.kEz/ Xu a{+|-뷘aj(ʇ"BC>OsVlEgz9!uP4IF>8gd5nQ! 6 (( {AGۛHPc"bUdt)(a y("EayDžTe?[sv*+@- x]aA+)25rnH*+j\r3by }z Y3 |?h¦sF:WVDU'Wxu`yZy/_cMJ3QsGq*2pg_@F $`B^UQ7&X >j/6FχNo/L+uv^]|5Kv! MG+8zTlBU(P羴.M⃳ <ˎ-H*M%Y&:n/ѷ-B9:펛>tIxHOGh!%X Hɜ;LS"v'*I2KWfܸ!3(0햓ȒUtZ7#+ #$`'vͰtCyhȡ8A.%/$'˪R֍ܾ9@&qS<(^_MNМOymfs\RRABa]?_9" !KGPWTwɼui(@NM݊%#M8%@wx@un[Qnݞ+}hecLxoRVȌ`OCo Igѕ{@if %0(:w7P 4 %;S--\q]RbYεv˭ui[:AvUu 5~|6B٪j6kJ|EDOh&cHvnВC?{JYHlڶIozPg6kXW`0/@+],#<6TҘ42ldޣT8Rz6Ǵey' " Jj#]BY6K޸G{m0`Tt)yq7V #TA X6%R o4uN϶n.5Շ,(i|s=XckC~G}`Mgb <[jI`d8 ϪD=KN1^ Ms$\2qb2lX%,NPC|(]]Z絖15gO~0vхvd=OI[MoARQu~b.%RZXѬ(_72r,`s:~4_ZM{!LԵbj`ŨhTj7!I])X={MSޯN1mqc7'SB6; ̨vLrԡ "FN*a&HY'ݤT(sIw*:=L[bb Ndݭhq bϤ 5<%hUlA 5jAvw02&IV A?}N}ښ`0dGB5DStU3mLy0/:_0Z,y=SݔI/^PzTuzoRfQ {Øu @"cqٚ7?tKMXh*2=g@8Qv<؂${hXQyq:{q}7_rpT,E 2TJD\cT -g,Y ãʔ^^y.vT"&cx-U-TfӘ f"E=v{Ms5?v( 餩徖V2o +߆#Scvf?*]'Zx}]ʏ#j1̱^zb4r5o=7Nb\|q`N?fX%U1$CH7xƘH{!4AfyvKN$x-BOrIqem;WɦN+1dުoX?Td*#(.!s\Q`)@B@>HUάcٷ|fC,w9/V+g#=G{>_|8MP]㻕lMz#`˜5=em:RZ!wKeld^ifB "p˅lKT{2&nG"p\]Wlx޸ڈ?JdWͲ^i ip\oo3Zj7@K6{Oz@0dথ3H})fI ,Mگ+d+5*Sļn8m>K2VUFzbpQːK-:E a!X={~?7X? ?鎘,PǠhHQ;WR83 |ܚ d˄["]Hkd1+ H(5>KfN2i:pg\՗h \p@[+ǖP:՛ԕa-߄[n4v4oSw:q1w@,:hh\ ZR ;#{u\Uڍ!h-#|iJ0å"uX05Ϥv/%lrNn)-Y;ӧ0=^.YJÇEps j/ ߻;qra_C"(13iQX>#|62;mPx> [X6ge9:Юr7^ȩ2ֈ{UВE:B|0~:ʔ|h8 g" 5!1G wo'NT51͌\,`;H;♺;E HfɃ OǢP\72IVx]:9κYE'B2V5A1 u n?p-<]3.cÛRͮirťMr>䓒] Ի"Y9G\1&6GzGdI=yg!h88'i4?W2kb||;űMCnhq38^JUH)0;q8="ji -or>MDƆSU(Fpǧ>@?uRO;k?ӟ_`I,;Z7TC5tfQS|=Bg'kNk߻5`yMQw6 kOǮOZumc`%P?It[F ,9B;*B[u\z+7B堠 02%H&$e r) 4TQ5j8ԩxCcaF|4./Yi1z_盟̾Yu/ *p%Zh`Rq\a,"%03_@=Te2O{JH%#fF2Ր{3{f] P1hSbgzx䡅HVءCt(/kŒ:l p9%T1Z2JC9>K\nBl-44pInj0Z <,  OI[lO`M1EG59q ̞V%L9(|s3UZ tkLQ*.u'ϵ9ތry&g |C>TL)C~`#_8 r 󫞏h6:*f4pin}w"?L( Hx6HBxw'OWխ=^٬]nwj"O٣fwCi;Lת>+.ksI_Z]-_QV[[,VSGkQɚE`I4ڧ(ބY#I`#G:xl-dU/,%$D ځ}?$idŀ'f :x~.)UIŷzbA}ޫbvxk:zF1s!exs!l-".9mvf>&3ag2JGͱzeeߟCC e7[IJ hAԮf݂Ct(>LkBHf.G.vNG+ô-2O>MܳUq^osEOgXf{hF "o ŽxbDHjs) wR)nz ApYNʨۄppYg}uB>oCZ.:)]-͊I$wB_Yghiyzm=E!2y JeH.߽ޝU-!Sݲ]q75Oy+'>,tf hI*ݕrDM]Tz&R9W(mʞc,s aDhPBx0Ӫũ4:-tk?3WBBcq8^vŸ>FYx/%sVO2 $msDwv"dferSC)AR*rŸn68g*WI#vDWuc|LSpȒ;ZpFB?~ۆX,7C<5Ѥ}V]̤j2Pw?435ϮJly,f[:]1CUt?QJa!XlEFg }nշlȧBcFѩ MF 8} j-2kRI̱7Xj73̀L.2u}3B{Ae4QNU̥PJDM= vav(6AMz5- m8e/҅O;lqc-G[ڀE.ƒJR 4 l 5`vRQJ]"%͞7ꪐ1M'EvU֖E~yb >`T5T*%ROpw(BSؖun`QY1Cax"_?#3C wnu-@B,Aba~ / T6_܋,MOa]JuX#t遞Ԥ*?gH=h,/ec5eMݜLdԽ',qrJ0gWۣ"1mMnepJj |-bS6Ip-7* xV Ylic)RP nzfx- jPrAp i`9RIɱvP SQwAʚcDZw>J@ YYcz%|.RAȴ*HkrrfhT|wgWXvڳT7.Y"2sVnNwnDFȠ>CcYBJ[Z=OnTAxI2lQ B+pװ .44ʂRE,E'TXmρ6TE\֮؇Zکm =c2~^ 97p )6YXFŖQӾ֜m\O_]4^ #8*/ zr/bSIzT7WE]PB:j{մ0n2塾ڻcfOo ګYZ&Cc&p+^|yK/ρ}83mצ̘XXGR߳S-lQYoR otʮ\_r8Uw=QTЛyKر!t2גHv(C:c_`*\h((B5R*Zgׁ7Gd?G4AkgPf%v $Jxa-MOfX}Yijlܠk0)?Rb3H,Xd(Hf,`C \Ev8Ljb۾<{v}:.ʽ" 1fS828Va\^S|7O(Es/V?Ԯ~zH`K1F:ڱַʾaC\68Xq/՞j5: P85xc:xN9H<^-uns[DhJ9<Ԇ _aRSZ*Η׆/HBdp3BBw \.Z6Y|CM=B+Ҁ&`#j=  2)_Cv% ꜩ Ktk*? 7Aߚof "鎳X,J gRgV_|,>1kl'/2y);s3rPdRi)PL D/zcyX6bt{0`X3 y+$۰fڮ޹%7$lFE}ql-RxJ8 JvVܔJ;HuY*U8 &U*{Yh`2( U8i9TwUv{a-6]A=X~G0=98;tQczogUIBʆJW 'z& ӬO6JB0U=iՄ͐U|’pV9`;pھyYV)ubctFTleoL&HcYdP-PAFI\c&,;KU#˧c{>ҋ_.pHAS5fyU_C7:/\υuEFEZ7 |8"l-lOSok%wBAJ8^ZC_6,!ALkYN4RFBCʃGYDg]}왧A%vS-E7 jDzNP)/52U`At_0\M \k$٨_ߍQOg]!Zy\DBNW1P /)0( 9ܜsa)rBC5ŴD!ڄX݁]d"-4:da^ss'QMa׉roأT^u.ζ}.i5Q[o|/h~)9;6QIl(AB< -dciH[_-5V6y q 5O`s_F` 6}О,rZy߅&0^gM<} X7t[dơ3Ĩa۔CWя$?ԇ>k2?}g} K`Wn-"){'Mh3Z`HBjp*ARUxWm‹W6ZB;5Wو^_Ay1^4i6tk8oBN# gdJ\W ܲb𸡰85Ƌ3.xtIUkB˝0%+oe}2ր!]:tϕhG0T^./ 1jSFL<Ԍ *k.I .Zx {v; Ϊ? fȺEG:[ /':w+ OhiVX|F֌cq8/j};s?8˃NF>ҧr! uf+/Uę(Mї<9G,أ'Z@{N>#Ms&NbWe֡#@);4?i=(8m2L\ U'=`)B)ȝ-OJ%ے߾Զ7IiEok6edVqe&7:G!NuH {=@u1hE6헧:0Xcb$?# Ҕ[7Q65VƦ]LplG]QkE+׷Q")>MkC '\d }EoJl:rgn9tJ+|vA zԢɮ#X'ZFN_VY֏GX64 /Sn&7l[`vL.bīeCI* q[e|ɭP2sEuduH 85uB,FZ tm"'BIw+ - džI' %RoBHA'v)Ws \߾V5Ym2 l`v`MGaԣf2q.!8X,f- QCJO[I8O)57l>zqIi N 3/ʍ8ltA;#i)W"d~Z#8z [HMR ~%rwktI'}B.v,:faȹ]WTߟx$, [w HDktdunB*B{cm3oH"tATvvQB4j*wLV >K]Q׈oNִhVli>^“l"yCU[TD"si+72 O5?w`hjz{7Fb/fWBgypN@9w5&EȄ"\pύI\Ia&>lE1uu-lׁlϼM6UlFn7ᄹ]5sa˾L(4[ W ӍtPBՙӷ 5͑!v̈u+`JBF( ^Fu"}wn)w0'lۤ)[QzSŕ"pX lY?ʤ:.y3tKP,Z؎'|=09-*ffscx1IdfiuÈNI$ Lܞ@'l qu*y+r_ UEO~*$^7f]cnk>}=jttS "vCZطY|ߠ(.mK=CmχLQ"t5\͚7"^Cr1-J|O$Ž6p1c6*,npl X"%Y:Lov@z 5w`FٟPkF7e{a60gO9Xcb.$)‰g AV]Z3DNqxLMԹs 58!+[E׸=Ub2)j,&5oYiڴZ^OΏ5=/d~-\ ,x_sx!{̝ &؛o$5Av#^9eI.Ŏr9}qX@U5wۭ\\ys.MOmU]gaV5]XGs&w f2t1dz)/TQ{'2/ɫu:T' X*:Dޅҽɺ8Uqٍ."WUDCi2VU2n52Adc=/P7.Ψ+n_uL9tvČes3beكJYJqd'R?0Bb ێlU'4%DڳֿtnήJ_^?ǡSʃ_`sNDQ];{j }$-Ɏ)q}i(XֵR;@Kʰ%XLP=ՠe 5 yHRd5/]3]5KV~.jG` TI, H"hovޢD6?z4& Fe"c]$b9xH t ]_1* Rt2ZLc.%F% ԕ @\< =Bj8sWo%}V JˈeؙADg,aL+J3L]GX {Q\^j2Zs N6n=!lylڛUˢ PaM4NN;:f-Hk{#T!QK´F;ae; Y}odD?i#>Zݜ{0pQi'JI7BPMd =|$x9%t"+6"Q*uL6¨z~"򒴫9<,7 {ۍ@!dJ!)7^4G#yhԔ"Z_nG_{|J,aW:)j|I!'E^4Ruioԗi[ƬXE-AW ,&ۑ]$1N=5Đe8ݫ\Y5=U|k jit~\G(}?)0(S7c߇8nbrs7&':)P砽֢fL``Dch#ߓLL.QƬ7Vl o\BcDfO/G<:f^;hB9hPjW68`*km FeDl;+nCXR@}&L#R@;Eh2fO0zza-D[AE8i}:!:9nĸs"FXe($R)7ȊUp]IOYĹ+4]sm9re^s2̍8(bӢ*ͬ-fr6f 4-'|dfuTI"jŸ"LbSˇ+c_vYU`P?jO[)H'<*0؊BL&\цG5j,)Ј餹 vA:r1+mw;P/ylp)0 oLiRRe~a)4*J߂L2#gy}mbH:/&mhR~̆U;`!,1|s`PN>9rCoSR<~B|VŬ<8)u}WtpaVBkE2^f Q=uXiݼ38lDduKI GN-lWpjqlAѲqU6U-GV6H*U_v?R9R):íB>QW^!81>j3/zAv]aJտ{5ӫ`I܆3{~/ $n|Mr(xI,qʃXljK6 ~`Qy ζn#YHfWU?V85~x t/"*{jp;&ںWא 4.LxذY$tXHG"̞Rm<cXp?sm+)dLkbt?̓.u{CD 2Vf`ND7+ON=ݣ1}rXߒInHG&V 'r^G)H!yRG<8Il1d#ϋ X3^D[eM7Ip7ֲL݆ oF*ª_];P8"Zle$ږ$[PLDj?Oޜ#Fr"!m2@3đ As9ݎBk-TLEv;4E-g-]tHE4}VDHf<i[`${@iBH+ѫ! OT&%~~>1Dx,:qgԯѢZf6jP RAN*=bSEt4%syLޟ.$:x9%QVD4 C\ 1~U~v 10L99]*8tȝH1c+?EB8?Jt3ICA75BLJ)gIq:_(M?I(|pJGnQYm[=6/5Ұ>zɕ8s{l)H7[{ă3+0 Dmz(0%WOtc\@a0d.ɩ0[GX"(%R<,y418L.=+_S8{Ž.a~&"_m_SD#X r<<45ʟ'712= ae ӽ,m5繋bzU~Ƥe(mt3np Dڨh4Fr0/# wXbR&>L;} ۄ nX_:'ȿ2&>6o;fRޛ jBcT|6&.# Q~`:8Dj豩kLo/rпW1n0 /!0Dȩ/t n͍^c&=iq65u6 ] { ''!"E}]>~E>63f,3^`Xa/kV#-_~ؑxR(>u2ޗÉ}-/U ة]G\δ>Ρ`[ٖ@Ќ/ Op-tH)x$⮆m?U97Is5s]vFSˡSJ\{{e }1|">HKIymJ Q F߷Qv^!z'4TpmnȔR-',4mnOK*h*ʸD`7>]]s4S%INiuQ D"9$"{z4Oct7HT:LFgxCg6J1 ;U<&cUŷ5v KLn`Dju= [١gH0EȓEg}c [ϧ@s6{dwYc_ҧy."%%sfA//d&;RC! 3GKlÈy1seZqxG̍e?7JwnؔP($7J4U{r o| S0c#t`D́H?QM9G9cuNCxr}1lSiGeZuv;GK,ڦҖs gC/c,|Sz1k-qsYrJ/njV5EaFWrZ`ؖ5,._OΛk_>.\yͅ#PaCMI@>1%YRzm]F_W/̞&UPo08^޵Kz& ,B1/Tg V/28F[ .J]SU;0A-(k JV^C#w듖̂AI䷮9g@n ;G1P \duiꏝ,2{0]N-y )li3P|K!(NE2M2,\zKl8oVgzeL\BGj wJ̷%,n)<x!q1K,,;aef"9}l/"#Q-TUFJzr^AYM#1AɅĪ'{J-t0jVm$CƪȀ$gLhWeҔxT_c }5af:g vsob\Cf7vV1F4YMf5~OsAH 3J ݗ>{txǀ~; ṕl\_ŗP^ZlLe"ֈAwϾsO8V.@mvJNpH]W4}0%f PqJt6帽ueK9sa(kYzV6|IY]N]) y4l#b{~\v fM/ǝPfe &]~%M^şXos1hG>WGú<C w&mCAB#bt̵ 4]\f(u&O}6nL< ~G_}z q\u&4,ֵt$J XP +݅eczГ3$sFblx&Պ+φ݄0ez=mLU K yO} iՄTݻk_:ծM Pd ׮'Ý̾>J'4}c-#UWF.L_/{z= C\Q?8q2{BBq9 T 1e4;‡1Jm%u1%SB48 $n a?1sUTɃ'3G!!/J_!X$ K)|I'Nf1W``Ffɗ#Q@HpǖZ-I'zg]5]|d$.DDmX7aʗkƌ_Y^?s)6qGǨp tp0.V> 'X|{s O|'zۓ g8U i!H:=\ J._8nCcc^3-|1n3SCӮWܳQ _BB !–Wh2}cȞQ!br+UHL߇>,yE@N:*rSUZ;"-w7(0Sᒦ PTb/Doة<~|!7߰M!D 4`LlyR"pٌL#PF>uXo[h|ss?yiRI Pq`zܥPVk s\ k~q9蜑#b׆XrTOLAY`B yɩY³7AD}qvR9 u]kQ׉;ge|c f]:ˑ ,y؏c`΁+?qRӵXgZ,'`+RjSO4> ݌,467>-"L]6&)p[ ݇ F(tX&;6*"ڧ#(#:l!4-o&)-&LSMb2Im\Vh5 -Q1"[5QŞ"]d-qTqtltNug3 .A_G⿏mgȶ%+:~4?^ήfpQ]=ӰTq. >j~tZ}A>'uq )pgؒh/XhghN'18#ʀ})c2 luְÒT$7 ܂]t@L2jpac2U `klilesK@P bY*j]X;-(pT=T9PE> Μؙs%*&|RѲ_Xb_l#] f1$*ͭw$y.Х#p]g=߾N5&c3{S␷SI]+"aMu`@gC=>Rm;CG<=;6bq!{, y(tfsA"qbN3~y0LjuH*S@NÝF_ eᝠ}2=$Nw\1g׸q"I>@B𥞮q1\O'%_P(d@L[,Ar^9N t~@x_B˪$kt,Y4LhS?u_?1u 3~NDu c")d%ٯM?9O*NÁ༽|Yos7T|PJ(6{^&V,HGNhK :Z&< z<:Qxn}+Xq7>IFF`$>*#3fp0`%"qBr]1a5}vHdL ug IJ|_\ .bJ-2 U_5X$sTzڣG1ߋjvOՙ}oWo Pܔ j@\⻹S k&þ Q\TFP59y>O+>5{du8v {@u6LZyZ"Pmyca4y1x-GL.DvGts5jbKȹ34:Z'r, oE2G @Ob:PqSmp?c s nKpZ7v`JpJd"Rћd7IH7o7˞ &T)l*%Z?tnA_+R4Zˡ(#/7I%]^ / 5,0_]|FY z=.A^ǥQ6JJIRtcP%@fŠO/d}mQ}kx(okS?v]X鉐L|UyiiaH*>UK{dQ̴Y/3$g)u;cn!9z7ƣ`@L%3D/!fF_Y' YZ