apparmor-docs-3.0.4-150500.11.9.1 < > , $ e%p9| "bm"o 468B;A&Eš+frB|"?% LYj$-~ߛG=%0NzgK!\p=1(;̭u6[(
lk`q z^О~7(=GF}̺[?g{%S`za2dQ}70'2*r+B9KJc +?6}#r2"̢yGF4Yaap+q%#3&>u2HQ%L_Qd > ; ? d $ C 5 I h n x
G
T @ P ` ( 8 9 : ` F G H I X Y \ ] @ ^ b U c d e f l u v z S d h n C apparmor-docs 3.0.4 150500.11.9.1 AppArmor Documentation package This package contains documentation for AppArmor.
This package is part of a suite of tools that used to be named
SubDomain. e%h03-ch2c عSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Documentation/Other https://launchpad.net/apparmor linux noarch e % M E. V A큤A큤 eee"b`b`b`%b`eb`b`b` c30036de8e525c68d8474622f3f6984164dc60e91670039898e5b9066ae562d6 30a0adfab04b7755e093632fab7b8ab2adea32fc2eb640ec9586faa0cd2ebbd4 bfadc5ec4cbe5c894595c52b95c516d8daa27a76a6cc356b77065592ed8a0299 d383e3f1c2fd71198fe319a325fbb9a2068dd73b2609e27db150d3aeddd9ed06 474d65c9a3464d4a98ff295211ad0f248987237746fb4491779d0d2887ebf76c 5e33ae4afd85d4e8a3a0f579068ca74e1686ba4651958a25e6792c6e1226f58d bb7e15ffdd6bd82b037c217dfac7d3cd0f310aadba0776760d1d3b73f6bb778c 6060fdf95aa753427faf0a9b7f2aca6de48d1e7e909009845d8a526d25e358a5 84c8cdc92165201b233cf1607b5c1096de663abb9ed9afc9d3e92da2db5b35c6 root root root root root root root root root root root root root root root root root root root root root root apparmor-3.0.4-150500.11.9.1.src.rpm apparmor-docs
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@a abaim@aEaaua
$@`#@`
@````_ @`% @`!'`>`
@__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\
include in apache extra profile optional to avoid problems with empty
profile directory (boo#1178527) - prepare usrmerge (boo#1029961)
* use %_pamdir - update to AppArmor 3.0.1
- minor additions to profiles and abstractions
- some bugfixes in libapparmor, apparmor_parser and the aa-* utils
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
for the detailed upstream changelog
- removed upstream(ed) patches:
- changes-since-3.0.0.diff
- extra-profiles-fix-Pux.diff
- utils-fix-hotkey-conflict.diff - Use apache provided variables for the module_directry:
+ Use %apache_libexecdir
+ Add apache-rpm-macros BuildRequires - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676) - update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig - update to AppArmor 2.13.5
- add missing permissions to several profiles and abstractions
- bugfixes in parser and tools
- fix two potential build failures in libapparmor
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
for the detailed upstream changelog
- remove upstream(ed) patches
- changes-since-2.13.4.diff
- abstractions-X-xauth-mr582.diff
- sevdb-caps-mr589.diff
- libvirt-leaseshelper.patch
- cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658) - add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
cap_checkpoint_restore.diff) - %service_del_postun_without_restart only works for Tumbleweed,
keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x - Make use of %service_del_postun_without_restart
And stop using DISABLE_RESTART_ON_UPDATE as this interface is
obsolete. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
libvirt leaseshelper script (jsc#SLE-14253) - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON
to severity.db (lp#1890547) - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
from its new sddm location (boo#1174290, boo#1174293) - add changes-since-2.13.4.diff with upstream changes and fixes
since 2.13.4 up to 5f61bd4c:
- add several abstractions related to xdg-open:
dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
kde-open5, xdg-open
- introduce @{run} variable
- update dnsmasq and winbindd profile
- update mdns, mesa and nameservice abstraction
- some bugfixes in the aa-* tools, including a remote bugfix in the
YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-fix-utils-network-test.diff
- make-4.3-network.diff
- abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff - Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
(bsc#1168306) - fix build with make 4.3 by backporting some commits from upstream
master (boo#1167953):
- make-4.3-capabilities.diff
- make-4.3-capabilities-vim.diff
- make-4.3-network.diff
- make-4.3-fix-utils-network-test.diff - update to AppArmor 2.13.4
- several abstraction updates (including boo#1153162)
- disallow writing to fontconfig cache in abstractions/fonts
- some bugfixes in the aa-* tools
- fix log parsing for logs with an embedded newline
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
for the detailed upstream changelog
- drop upstreamed patches:
- abstractions-ssl-certbot-paths.diff
- apparmor-krb5-conf-d.diff
- libapparmor-python3.8.diff
- usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff - add usr-etc-abstractions-base-nameservice.diff to adjust
abstractions/base and nameservice for /usr/etc/ (boo#1161756) - Properly pull in full python3 interpreter - add libapparmor-python3.8.diff to fix building the libapparmor python
bindings (deb#943657) - add usr-etc-abstractions-authentification.diff to allow reading
/usr/etc/pam.d/* and some other authentification-related files (boo#1153162) - add abstractions-ssl-certbot-paths.diff - add certbot paths to
abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client - update to 2.13.3
- profile updates for dnsmasq, dovecot, identd, syslog-ng
- new "lsb_release" profile (only used when using "Px -> lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- some fixes in cache handling
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- preserve errno across aa_*_unref() functions
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems
- no longer package static libapparmor.a - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - Fix RPM groups - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
with minimum BuildRequires - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff h03-ch2c 1696247589
3.0.4-150500.11.9.1 apparmor apparmor.vim apparmor-docs aa-teardown.8.html apparmor.7.html apparmor.css apparmor.d.5.html apparmor.vim.5.html apparmor_parser.8.html apparmor_xattrs.7.html techdoc.pdf /usr/share/ /usr/share/apparmor/ /usr/share/doc/packages/ /usr/share/doc/packages/apparmor-docs/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Update drpm xz 5 x86_64-suse-linux directory ASCII text, with very long lines XML 1.0 document, ASCII text XML 1.0 document, ASCII text, with very long lines ASCII text ! TN^C LA; utf-8 50983d00599eb5ae5dd72ac58428a2f176e0117e3b5ee95fde776ff1595a3402 ? P 7zXZ
! t/Ă] "k%R{_ OdT8v%l_ciSTkݫ 0kҌRbܛ7?ڳ:
Y
THw"o A[=Tz7XdI?MA+O'^ 0mƤ|tҟ$7j+G7nCCG
QPNKZ
-~WQrI ZA8T𣚜 Q6X C9^= +:B d].=ބk+B6
P /@e\-VnQv)bOVi6+VjQ;Vǽ
xN6$zmB(-8٬1|xb4
xLvr{ 7a qd[5 +"hYܞn<_X;A! W9Xb3HR #n0U[ENh ҂Hw,h4
%
g<.qSPr!p'ch~~WhD Bza ~Jj>g;HA$tDN%Z] Յ Tw Ą`Аq\͜sWAIcNI|v-eE3BJ뻕EC qS"R
lj+;Rg Y7 ]BdvR=~O~i/SO,WR{8׀]C^Fo ek|5TZqKi$̀Q,^L%W\:n_@e4fnC$r*T~tZU2:Aga*#ݜ hRҞsz J}_[rđ(z
wQ`2yr%~i[^f!Ol+ ̦pFJeҹ_)(ў u dJHqWـ"^GNVn)3k /VY2aHY$
Z"Wz J-T4>hThC>
:ʦ3 Xco !~ϵ}ѾAbs+u+8\>)Doʀ0 +sOgݞ'\^hSIgu*&H ̈́GzL105i? ^jhóhU 2~JdBrp)zVtGI$ ;N}?Rr CO%i@s52}3gB+wۙ꾹t6&JO !"
s<dRF
iI[Sݢ rGnl @ k)-8l$aqGU $[/'_5 }
;H&;(RQFA~7203ݩU'U c;u t:h!#@y9{Cl ,SUbrSBP/Yi+D$]*
*WRç{:@L1K @eb=1R'5gbM +c#`υUCdQx/æ}:5= fv (C3JG|ev4# 6fXv ShF$ৄ2)ntʝik..1G O WU | #U@{w@(KՁF+fժ\d3fn#V,"HVQY ч@u Xv 7:bP@MwF ՜.fۣ= XP p 0P+ wl2!#P*_K+>
k C !˝#u?/)pyyP^hNG̓I@eo` Ò FZU_`OF!NΝ ]1Tpԑ+Pruc Gn. j#֎/5oʡ8 +j7>eu`@\ i]h`_ (OfKFZ" ?uqIc;aƬU{oI٩f02?ɳU$ iuh8A-^ 3I>lJW]wHrL
@HOP4O(yia imH7۪w =ٔ mM?DX cB3֏*N8:B{A k#]n} Gk?}"'dwnC1;bँ ni^_~RdStrO=TND`f#^ K3ZeA}J_)wl?OM}T> rAS{[ȽF$ /EJwr:i :#Nc*m%&;.fgƛ6{A
nŹrEbPiÅ ^˿*{D1}D0!rpR#dYR iF&=*\0{#4`GO];U >LmEP
uUtYj*4Y^\Q#!nk
Ƅ[n= 4LG4Y +pmwVUӭGSf[2UR[[\*tM^}3\%P0n w/}QFKEj%Xl+T ao
b :X,
} @lXhy"JvE=aΉ=wi4=6ڕh|Á"8|Gf[|!E>oU**ShC:Ѹft؆{WvJvnwc fS- o~.
tOH;=ݙUfw2Cޥ!,PDqreJRQfq^'Jaify/$x e?\|G}Cek j0#]bX :.e!*Z#!4
n@9}u3CF |P@eYVj;3x (m&9Kp+$umjӕsCPݪ .DX{A"rV5]m9?zX;>)Ϩϫ%X5+"Kr4pS5C+Qh<P@(aVaB6>
_Pn gUP~NJ a~ϸ}X8 <֘5RIħG7 P S x_b9|Xf:@JԒKpq\/|ZbO9Z?7nJ폷"j^`.bJSrߣU.1l1NN2̦32[KL Rk23n`Y01/atԤ}_v
~Y&UgL+lm&zMhly 8 edB"]\w 0wiP #Ch2>/s۔>ui+oaȲw;:WIp FY* IYT Sx2 yC^{K:2P:1XH5X90 t̛E Y碫,6Bk b ={rŌ`P¤mS; rbQ7ƪ1m;~j#C9 ]`(̊%է mqkS32EŔ}N$:E䒙7髀,E6Y 4j݀OSvM .xI{oKgESRYtSBlK
LZ/yxρI ͫht[-uVwOƘ-Kf@ cfpwc|VpA#+
摿-eQщa 0 . .o\aZmeF}>M(^y5N =bqu$w|ML&~X= e~ @˒) b݂` }b y
#1MNs\%~5ŲEZO(NUJm㗅]s?4o/Ķ4xBsk %R,#m.M6*핥[Bw&s~zl yޕ>GNRGPD͔Z\ҋz"u/xˀXz:\f7nɎԄ1* }Y W#>!*Y"S`+WgyW'EMRy^4x>tG,#dc:O1o53)&v* Yw|9#+Ü%F\8$8ߊ{(+eK'%@aP]x\@NI/%t XQ,҃l _v-Κb>۱?to^TL'\"uvL}.9{n2<Іqqc-o)QzXyB2" ,o<͋.խ
şѣ$YE4- Rg'EDY* db ֡A27c_
é ^?XVdJa #eN_5`/D Ytqs Aa|8&(-ZG_CвFr0̕2Q'(;`: [{뤰1D USYPW|
Dn6fp=Hó{%6xA+k:Վv+Y+H'#ٝ(
YP -[?'tiV@GvmQ?IJCyo\-W BCg WwsF, ?iXFb TH%7]rO f`DŽN"\8u%4(ճmkG4Q
P-`/~8}Al"i[ -D3Fme常^n.fٹLeE \i#e{gv:o ZKȟs3P
(Tq>A6Ґ~^dй[hRfiYg(;H~-5{F:BUŻb@ &̎QAihyj1)6KY+rQѣx_U6Mg9Fju"}(P!'f!P9ad*Dp!ugy 9>&tq/\
>!bm.vd\i+T!J:lD)\fBh/kFxP[Ѐ\Д|Riέ˓]a/]҈VDž ; c܍9e\F<٧[ ̄5qm [ NG=(
qOGMDjB>b@x do {Gfw3,6H! lW7w s7j;vW;'Q*T73W Ze|ko6|k H wbLZZFUy1N3,f`d}/,lV1a[IqpX ݮt: e4&h:=e4ᖙhΌ,hd}5= ч|VmZ_ XDMKb( !'hi*j]&< 1v$pv4
XQn}v] y79B1]5rC0
H"<HxC8
&/ ΩFX9r9eXHx7%nIL*#~t>Ca
pZL]s bKD I9ټFYk9S#z E|zw}hlaΞּ+; (ˡDQLU_mb8 ǐw7P, ȜA~F(7V]>̭kݶA5p NqAv*;2[x])XQ,#*#Ty3I]cqR&vZD-ohI;
?0ۿ5g_4xh6cb R|xȵJZK~ЧYVR||m6.T.!,pAd˿(7W=c{nMz>Bs$;Ov'AX*!yx ﯘg=H뢪LXd!n;*3*K0/S0 2( %?|[. F NqZm/VUbm$z 0lj>lpۚ "`s/w4(8sY }+
W̘zv;U+bLisŴY|)K. AAW 1}G;jIɧjH hgIde]+w76Uv~w_X'0IHjk+c+"3z9SvSJ(ewm(o
ix0^gm'CjrZ;UA%]<5Nv9U8rnbb 8jS Q6h{1`k 0 NW 8L-
gngB9R ɰjLl
Zn"eߔ Kڭ@Mk ^:IDXhjrTIo 3OseuR\Z6
sBr:AW
@`P[l{tkϳDt7 Vؤy/} $5z(O1b#&JN n}v sy-]
P|'y/K >W#^4Bj௱yV
5 } ~+BA+/?#w2$NX5cOE$L
fW7{dV+2yBڜ74赬p}YO*wo>{]A#ˎvf"C
?D rPC2/dqel| Q<2;z?qChZt,8^iH^;F6?2W1ib͜f/b^r1d 0X1P_Q[ZWFhzX YC$*p_sn?$!*n3h喬Dv!4FL:nH~8L/)-; `ɐ h(Qtis`ބHS+ǟ͊{,Yc
NzͫuM?cF ;rO5
d`>aőA͖ v*lo{R0ü
_G Dz~lo~4 #G荭fqKgo= ^9ѻ̓Cy]Tf ?ez7 O?f^fg=l)چb/& /G$g:
$Wa<J_jNfF~3m&ЉnʷޯL 9B(
E֯TYtO ~ߧdLc7Z+˖,N`D
eWV~d͎xS-\f WHWKR4דpz[^Q{R24ªj6oCyN3T^ +* {jx2d0!4g]ڴdK=\fG~n͔|tm'Q0i,.&:V\<$|] 'o`_()HI-U(W F:1XzYSOM(yC2cG{,"(NۀХRv/BOauHU\P4\F
5Z[-]q!x]wjHnt'zTܿ~Цyd]NZ{S֚Z}.\ $S$}7vL\2m͇c?:2HpF* x E}ϜG'}7rSUYq϶Ѹqem Ba Z1Q4ϙ9H1w7V~p&8Ζ"Ҿb~(ͭxi@Eh±'ȯx=5~ɝ3%GVʧ6՟rPNWnZk)@ 3tN6*RPZHA4LABxlo$ihAHx*o g7L0#b]A`0ihexn*\'0f8dC_C)0om@K ͓ xl&t֝e2XtG G[pv`X '86
cQ
sÈd
Sq zkF.BH8f%w-
dwLDmtfܲbPly>BޭPZ[fKՏzpɝ 0럟hbh
BΉ\';W`B'zf[̒}2#ah+oYë$ me ?2C, `#؏i%y\`;HJF^-$ W繌6u n;[2,IP4 Tb|g;%c1ȿ 4 -\W}
Tg:=,{i22Aek\ ] Wr_9,S
H9! 59DOX_3gQ4_Gd_'讯! '"©;'Vcmhaf͢|X{ Llv{oVظdFpqaހgNHԚFpÒJ\YUy8/o[Q0i@![<*$9c7Eu7ͻV]
P%lR]ƀ;4lӪS*moHh- ,c}IϹe;{enu;Ȃhv$zE IKW(ZI0j n+[6LZ !g olcf? n`)1I75PƄAǬĽT_56XznQ\c{=x%Y#rRc PB vuFJ
r2YAq[5@!Ol!6O1TQS)!^|f| ( @2;Ȕ̓AАQ}u-L'{AC}ѸȻsdZBP;f ?|feU$Lb{vWYrbmU$4!3ngdU/>McVvxiҥ ߵp{Z7n pN3k>Ơ.-pʝy99RNu%G D*n3UJ jG5d0y_n
Amzj%Z¬˿Έzk1 g_"){Wb9Cn Dsür'j2ᯟ>(EG9/?:QV# %`D`Vf u&rp8Ժ;@m jD}K蝤j`L ;Y /kBQ|^=H3<E~4l(vv?) f˽{ F5oJT,\A\M-P>S\ EŌV%)wm2{ӹ44_%_OR#(E7i t(vYu|N(vm,Z& l@yB)rq0WeK%41{[>052!e- 'T[O,$xRμ+U)oQyzKS 8+ Vj'r#pig&l[H Y?P.[ xKuEp?qωRG$,W _ \B
"2tݵ3L&I^ ^W;c*kniBEv^IJ$(AmI:6ޱcy{ 2v|$aM|s=d(:#豹lK^zdt{Ŗ`%P嶂dsak1+x f58_^y?qw
u&F A}\NIk
G^+
yq!R۴H\5#(TD[r
^#{v˵R=CjmB0
hWT0ц996Ō\(9 :iQ\D7\pl> KGI2e?F\_}i k~ty%H~}[λc.qf|<#xcX02tRo9r?'8~ 1`(kn5( ӿ_Xf'3$ "s". s`qǺvvT軝te! 82G(4LY=[6iP'4`逅Jo'q i4#Xv B*ܶu@j^bo!T{y6kа+N 1g̝|83YG, VϔTQ
S'+p6N~! ǟj AEV|ٔۦ %BjnĴxE "
A
,j.^亓c; tuLd(O X_R ګk?l]}CQ/L/蕻!;"x@>3&J29(q R%t I ]ݩgnnJKJ=nQc",_\U o~t֎ޓS@!YP_ꆸ"urLbvfkH
w+:BuG5 }foأXceYh8P[QK(UJuqRl<4e2pSQLwʩv2(G7+|Rϳþ77Jj
@s6w-[)("WNv_Cn yf!pY?hD"q{5G̹L{Eb@0b| 3èjsNFH.녪M羕֤F2IZYH_
lO8T-iצ RZ u|ڜgjk^DJY)b: sM+=Pk f y]O̤݇ٲUULCPױo8I,J6;yS'8[{Aԧh@cpE@B HC3DZnz7nrj?fnʔ?D;uf?
]UnkbiSHz |Ja1Z48 6,}c\dvjp#3/Df_j|vc;;E84*:eN7ǡa ,zne-^M1.f]e|^ʍhۂr^<+_]#CUGV
:>tި! $VDI~D5k.1 2`vR?l6BZi;Q
2 .2>3,_IEB
TJP>࿚M6{F$yAIߓvY¥)5Ay?/ ~L5^|" HfΏ# VOZ$WLKowq>. QSaکI;E0;( c[F?(P
)6]X {d`f(<,6Hp} :!e&`YJ|-,I A eD$gG 4l\ϱ0>k9dj٧s!bэx#G{n3B;(a; RZ2H= T^\ /9f
2$&QbFQ3U}kmAj+` \2
bN>z 9:D7+
MaXpw{ n
̲'/̑7G ΔH}pAԒm>|8cĎeIy9?W/荋 2䞉3auC1_Wd Ngޝt7өKSMb[" ;`oϐYwwx$`;I6Q_)_XWˀV1b9Ď _r gIh[/Ytk 3Ӱ*_)v*Ru\xV4jaƻ/c
wZS,j=\ӆ;&At )T7Wt0zx:|H2iT `:H Hɤklfm F^9<]SgNRM ܩGms:wi|x8E5 N=#v_R[˾Q[ EuҁAi d,I= Hkfd%Gb!؋w35<BruS ;Qg9FՍ+X*䅆->f"w~*5%,Ѕ8K5-!+cOYj <$u!#=טMOL =i%<5$K獩 s&
]g*˸)c.AgP1ʟRD?Wr\< ɔeK[ X|' 4 {]v@^Ftɱ7m!rޚ]n v,wrpN/bJEdҌtC>ziBJH z㚹2QǗ1χ8 Ls&!t=xGIFxſetcNҷ-m--VQ߬A55ɱK?>oaβ;Z,Ϛ>lޮ^*& ە5HYOn :>.;Iau014%kCq
l98qj )}s
'{ Ujl^vP5ަ[b+߁led*Q#v\ m;)V%fu. ~abGSy '9Os}K~'L6~ HcXf3w:8@r>ĥd b(I S^r}E qc$֧|0J $WU ~tB%HIKuXh~[PHUGG2ᠬ_ۛ[9$5TWȣ/iMN9k01JJAWƤAB;ͱl f
ÁaL[C NriCk&F d
[*>rUC->F-iUH4!۸ӧKul]2̇_j3炐+ u"̚CܠW\KG*SVjJ 24i`
jv~N
VDOjn旡7 R3h'
Aeςziwӷ6 Iև4_ɘbqS* ɿ+o[sS77=ؗm2n0j~9X6@ ck$glq˹ v`#0-E4ݠp1ړ%HވE
ٕ}7N 5PmL.c=nsnZlY'c-(4X뇱gR %^ZvDxϦٹ ;yJ ̹?gU&sTYpC l?H40GtPʖuO2hXz%.`l'`+}gmpDLegTR4?S`LRF};tvƎX氥8VyalNVka9_1KgbRgC P#'叒Ȑ4oHKh仚/t>pǻc99@f쏣3\:>`O#ĕ,3 +MZJ}V&\ٺX'SKض6㧝nG0&Hgs\AAT9 5znT)߯l QOm[k \7,g}i!ϲ[ -R0>R; =ÑUb%DM g*`){%bMϡW!%Hg1*jd )
$ l}Y ЀbbtOYy+?(Ξ4d5Rz[9"l1fX)3$AiIʋóp:va䳆nF+UB & :\ p%[ E! yfRPvt'+X"d2 <'!4˧u!Dl'ƫ dWTC;L]~47# $
P{(aOw8] cܴ'Doͧg4I&<0`j:SGO^k E 8 n'>C E6//W=b,GTVGU\vª8T J# V%Z(4pyw쀚CH lZdMyEZC50⍭QL)LS~z&`˗s1#@T`#$W67)(\昰+hўF
g-&-tP| B5qGST.1R}FT:V7Gg=^s Y 4鰶OK]d#3 ɰo VL0TxauD;y 5ǓCд't50{TGQ=3ly3/οwV~ТE 6 "*%zTRA?ǔF
a1[6RyNXsμ8p1$qrRhLwo& ~y>ec^ _Yؼr3L 6="|1v6R])ޮYP qJ V \쭡:$]d2
O=CY[}WnAJ@㶟 Yȋ>>rePW*dݤض1[lA7w$$(la|.m䶻 N"{*tw\OgG-) &fFYXԺe* ai ?͆{ٔzR̘TUoVjarSӨM i8Um| @_@ Gl̒5A
si& $^T=$tD̔9ln L$w9$"+Ð~`&C}\
^`'p"V'wyj8o76
òV)VM k7+Y+wOSK+|mM;Ml%PxǚCkT_0'Owk {bFQ]f{~V=7 ~ w,3v35^9*A 7GW{Rpf b!fl*H; uxB9DXĩ[ < )SlFHQ`^b黺XzbG ījfp gL=OF;j?$m%7$QT}; H
Ռ#y 57@(D0] aSXӝ oPӁ5 I 5R9Xw zMEx˲
obMr 'fqZ>Lo:kTr % ب1 GA*V^f^Y=R*4Idm2 - <܆Wr#*~8
ᚇ/>V_Z7~x.:wiA1AGƈ0iLq.x۶chѡi:ȆrJn"EnTv%LJm*,!*%NWĐlw<ǦJNy̦45Bv<\ǂr@^wA6DCzjcҗ{ n ݥUDs8t <m$tH ਦ_X1%IՒE3@A"pL}ԑ#)BaM1 Xۉ.Q2E'!MX?x2⬥zP; -MqI[Ќ؎\91ZIƈrQǔ+xzxV|[V04*N|6QX
ӈn X(oqW3~?%,jMTPaӃy(,ۤQ G
_4Vc} ݡп L
;R7X2+\a{-
)x },)>o>URey@ #F߹Ҙxm/@O/\,H kN h.x7{]bY9ˮ b};:kz-veϺCR~ᢇؒ4 e. aݾ(;NQC9Ke4wjy߿˼si-| \g@Psso!F^=W)0=ߖ=5"oUc
p=
i=p̋GKY,ƱA'#R9ei47{T \}S3'3Ӭ*pQG}
Pҭ6(ĭ,XJzA-t?"_/(-sZUOr}G!-/x
P3>SsH3 lz]H1oj iKMOac+tf,eIL_!Y`E
i8hR7۰.}87a;1šQ$R?!s'^k2?Cgɬ7|r >aipH`r)zª_ۿW 7pU{(YvXōwm}g=|Y:{Av7Z_; 7kGhں* x E3P*}# %徒0W/BoZ {STUIt&L<ݘ2c1hّ*mDDk=LClﾑR_r ZhUfv̊}0 TǘY
#\>e_) a3G}OM7H
W ' M+ bz CZ9cc CJ
%:'Er+@v'Uїoh&5lͥ`nh+>^"VqP u
q
&<ȮpD\Ҙ:f۞"`k.`>: kƘ/4Q/Jf2$
Ee]E&O%ZTINҥz7mɝ/0Qˬ[+CF{rի2^[/7CN
6{o>%zwyʼn㈝q9 AUEomp?MgH.w`oY1>֧@N~.yNp$r}k,P;Gʫ T)ē<,sM"~F;:2VyA[ cgAj颋BXBGGtZP2[~ `L !ΥKbD !?[-1c5r?`
O&e[BS7\fҗtɪ)Bb~ͤ蕅lKjfkLuGW@f j?
u|j߇ܣ,q]u<+ n^1[7_ޏZs]:Ǫ:7@
LֳD573,ћ ֎"5?Ý<^p{6̩_`a <І'l. #Ket ڭHW3=O}rn"wZ:g<靋hj ywʥVXvź%b6䱍'D6
WXh~#^H:/f &Ыf?H3WQV֍YC0Fh"LZR`'H, ߌLԜ!& }-}Pdoe!-ey ߈F)zIK |ֽTz3ڮUd
>p.I#_ cW o @y 2_+OiY#䏂G n͝w89XLk bdO6Zsal7TA}W;ZOAVՌAb{x3%#lCFee^h`CQ033 ˩y p7+P+p`6cΞ
MzG0A
Lɫvu@vҷqQh2
@6MV!i6Rst
RKu ɠ&@r niH=J~ā)22'#4%m&yyҖkǸQ>=C%nb4@Y"?ag*elm*{P.o*c
)Kڄ3l<\|dz]X
"s>;ƈlY(*jКv(y3Z<ľb8sc0G3 ),PyOqϹǢN;kl'bq
hS~VY LGj">(78D ?'|LH-9.C٩K*
O6nt*Y3
{o&` ,O\y{%Jzkfry)km!4[lTIJec1WҞ_voy/!FTUtϙQ/xO4B\`hj;> $ho8,qy;\Flw[h(hBd2ct81 %/Lژ/c iυ8]A&(?~az*6$ i7
M3"j*UՀLxR&UQ #^x6+Rć&|MIOֿ-EwycҰ\S?Vx$-۬2 0qdk,Rn-f4jZ@فf
U <1[QcӪD僈'zi?VҨk2$~Ib|:8u9[@ci5#`g#KSۂiwA0X~6}ģmCKߍ Y ,ՊL ĩK }f*- xB=aҾ8^y 0o&ϷH9;&p:e>bV2q 1=eHR'z
7Ouwvۉ RXR
-|%^:i$C eR'Mhi^'u)o@.} %vιހ'M,
}ElK
_7nayq^ő9 9yK fhΰa)OT`(c=#;Og%zF*0^ ,9桞%[~9:a1lw
fڇY]/ӟvnxw%.q/:bpf 1t h/7g^vó="A/|+@k1__TqV&S qO]qڧsDLLοkS1t]壨l`JjC| Oq h}Lx(FWѿ")yA*| M N͔0Ҫ%YU,\ߵ8ߐ&=r"y|iBvn-8&tqUND#oA&@~=Ѡޭ )!ʑ|Z EDO3t0*KGDZU&EQ+qV ux9.: f.+g t
V2U X[ows={^)4\pYxi)m_5Pڄ /?)O-p㗱 l:4Ӹ 㞢lcMc4BD)SnTlW _z>|6Vkgq{;K)=: |q=_}(E <R#V=ZM/jaBwh7x' {=(<|`О~!
%:3WXYo_7}f,tOzfpץ8x|3O BzU0~։+͈ȵHX(1lƷd)JN9B鲴`cCWй*C }A6ḳM}`P`P$/
uAa|o _-|=Bae(du+z\@R
J}=ˆ Oや֔I4S 6ԶKw4D_abo+?ɆUWo{}=
f/qq(
kīWC$h r>n{:W깂:AejƔ Z!Ǯ` *:r3h4&xr1\݊n~1C X(PmW ͏t[M@SfD &{?S~0C;T'݆tu=Ƚ2}ybRTIG}KS=Hc\(XlA濵k:+`.Jұ \C
ӱ T=䋂B(A8V2g:znM׀RxN&:%Ż6d6LxF+, "+yA' wk ?0,!ѡ-><$4" tp;7B
ݻ(Tv9gZإN:Nt.MAcօ \ #D#o#=L):KK q5ϢÕ`%(#Ȱ|2-\ig\P%7dJJ_P-s>5@[۲6Odž/i d&ޕ®[*Q2 /K i9é ʿO!:DçR5K*PMr- +4o[ORp)7.N5NK5/VcuWFs)1׳?s<)}*E L,rO9j>=8+\TB { 9I ]\NeXdQEʪ6ݱJs`uKCL~5/_@wȑ1BMWC{=4 NEӃ=[TWH/;8(;l|/Ln5-
zכqy7 ]4c1n%59|RĂx J{TY
EAY*Ӛ*f{Y"nb^}ol $ ; C|7SgeZ3PE~ԏӠ1r6sܟAk #TDѪfC&
Ar(<{@]
28T&gg@b
{ ?AqHtL+i3%F-ǚ`T[0}*2
ԺZ5|`* Uƈa3Y*xFݷ;tL[G؋ZsNQإvYj[qs=dHr+ آMLkm xD1$iܹ:#iC
\+*
v5`ut<ѵjO3Ʃ\br0-
FK5=KR֢0 Qě硩+uܾB3ĠÉzҚ+7a0wcjN_-)aT(.`Af96YM USA oMQ| BL4[VHSy!_3jT"C˩1ԉ_$ (^^Z ! +y vk#lQjb SOB a ';#"*!"rh# 9Xe~ ] S}˵_
J Y,e=j
Dbz:KN K
_Yт^*'(eӌ,F,J4, WTi(Y" ,a_}b^EnF{?E51KTR ;?ECV}kVFіzJ؍m8V>CphLc_ 4m*EޱP` ̨w|o2Vr6)zF'2xuz쓿Mr8cMeZiI DŽ(?b4DmxF4rLQ+_WVP<K' kK,VOYm|jp5[e)&;YgW6 (epoR
nTZh9IyN0.HZj ١.N2 k n2qWgl_ì;Ekevc{,va#w~/hQdY*8>D&i^{Klq"GmBw~@=lom/_xꥃ
*O f4rc ĒOhl\ɤ_ld+JD%{[ל O2ʇml%C ':-t `PF_ $>f٬(U X˛N-)R]aO+ޚ[Ǽ>b\۾}n
qQ/w u:j-Hb8} #_x鑍 l&&/A}1SF}~jy*D(ZK3\4F; ?ec]Fe ڶ= 8 6,P>)?K7i U)7h ~Z ȠHeqSx `u_QW+](wP>(MΒ uＹUw⋦IH㼒d^hsȦ"OUjb? O RLT3ca("l+ 0>eT2X= 2 )ODpe I͍0ݿ
Ҝ̶eY:1ʖgw] ¾Y b )rIOE\ v}[.AZdzD .Z *0P/0SHiЙKfq^7|/-A.7iI?.!4&,\L`~H
wNӊਾ9@ QEp_=+6ɍg[_#E',f܌@U@ !qۻm4-#;t`HἘ + I惗4{*lgZ3u,ý*g! C i,` G_)iE3V Ac K]8^ ~{Z-[*
[7^|k)D>Fcmo`O%H
!. \
~V2!NR)&hU+u"Cb&oeA/nǙ< rV!Phz۠N+oTHT9;bi΄SL~`}L`zlxcMIwO&b'B\G
ܞ4/J,8 J >R[h4z~*ݞ6&.Gv !1Rmz!.-%
߶>@8Lq :u1E?:;e3(ɆL97<: ܅(
YZ