python3-apparmor-3.0.4-150400.5.9.1<>,,de>p9|!^g1}cGǭ̿\F)wQ2M*Pߺ&WĢrD0 Uqk,5faƒ4l]v͏!-alm5f?-Jap6qK؜9}|[*,B,-26s>>D?4d & S= SpUU U DU U -U UUU*PU ,"v("8"~9$~:.~FtGUHUI0UXY\U] U^ bcadefluUvT wUx0UyȄTz0Cpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.de>s390zl38 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxs390x/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤dcydcydcydcydcydcyb`%dcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcyb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%dcyb`%dcydcydcydcydcydcydcydcydcydcydcydcydcydcyb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%dcdcydcydcydcydcyd@dcb`%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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(s390-64)@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffs390zl38 1694065982  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-s390x-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4daa9d912020588b9af9f042b28b2b8586c56e0e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@AQRSRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R RRRRRRRR R RR RRRRR3?W>ɫa>?utf-87ff1fc2458ff2d17854df07636aea01aaec39577dc20e054eabb60f56c9715c9? 7zXZ !t/cŞ]"k%a D岻N91nHGˍCOo³3 (d[U 1ےr<,Y sݿP\2Oi2 h=ś}lq@ M;n;i\6F'CWd`qUf/鶖+#6_c !Y-ﭵD\:ͩNpF;Bs̶s^D-3Er0 ^lο<ݣnȼX'ڮ\֧dSJ鞎TDbW-NR #Cgx#;˜ #U'0E'-S?ގ2Ô~au{LMCGqAȀ4ڵMaTj[ .{b(JC.M!dc.D5nhsa\5f 0qTěk(7g`b<9=N?|*|tIksyoɒU6CaMzi9;~"aH6Z"_rS!uVQˋhIx u-mz3vVw-1okDm!QFS$0C60ۉLry:R,Uf^0}D҂Oy&brQn!nP9,9YU<Jki'=TGǷ&܊4~6tr\ngXַ2$jg_#VB|Jx*DdFcn[|DžCxQ*_6͡xae gOֆU'[QL d\8-FP?"@D TQ+ѡqI[E{RRpCTf[ G n$KS{W z Cr1 Mڐ.Nm#o:XfO22?r!g/4ky&SoĈ9ڢKfFؾxA6nTiOKmWvT&9kŜ?zGJ CN:o >c6u~.)gG0EZGeM`XmH*xgg ieL.k)敁RW_؈9f@Bh~݈_ S;VwH&*R4y8WUa@ԗ 9PyЏ F fhH6]FÁzd!Y "h{Bhtfgpэ9*sbjz Uu0ÔC+2F-2Wy]h  ,51V1Q(3W1}Yѯ, \r'xd:iHc{ofa5o2a *xUo^qp/'k\tXaG̪(bA^TĤ/rۚs1O^(ԛA@Ḽc O~ gB!:2Aꕥ&9۱] 폹I0F(e6v\)_!`PmvҝD 6Nt v;Lݙ8#Ek;0.^HQLs-Z["`}L1[&!]naƀT2a^wh3=׃A('A49B9$jMټL,!*&7d&tE/y惸ZH79١:y6 -8 eB=`\vcNL,1]@Tn]`}u4QȰ(y jSwbj `X]7n[v`|_IA=VukR SAĤ0 G lհ݄s8D=k"׈fY`2Hr)j:jK"Mzmol6tw 8tѕ!͒6i"g*A1eDbOm21xs9B<,PaεVoChR>9uRB4`ÆKTuKUwY6oG#1Ī<>L9쐹~wm+5T&N'e.RƋk..~n7G1V@mxZVLd"OV%:wdU?c|OZ2È^ɛ rOLtVm#"(@w,Ԥv`i ׌оdߓl/pmj_ #gV [7Q~묮YW @+Nk SBײ+U,xY@) oY-e([#olLL}(="Wz|ndǚI]ݽ{-'J^w+q&JWZ-'.6~1ps% W^!x 07}63`"TQ<~֙@UxSصnA-xGZG׻ƒeЮ¥К=Zh^ AV<ݖ t5-sXH:X2~z (X[WrMkq:&%3XD嗃c>D |u&.9e}|IQ%&IR΃,cT9e|k?Wyu̬f%yp6C|'I}?K8>l= i>ũ6u k e{ d#시!@/kK6{C fr[pcM+}yėF+4+!(05Vᇇ)^.7'vS'DumeQMc0Jok*Z2̙Yga]\oF 2Obv.$=,{|A_o5 6g TNEf_2/:@$?Wmr|g*5{]DML!G@EB!4jP[:I\>" m4 kP[+gGq\}s6y2Y\Bn-3s e(E0 y)c*lLڱ3W=z=#p=D]YUxj01&2;gpif5N#C`ހS:ςHA5eQd%HMQ>"&NJr$BqS.hg sU0Dc%1|XPOuC#ѷXR0Zá Ӥ,q`kXMny04, ڋ\ν~ Ch\ LЧ (^.qӊ?${H_o Ȝπ9E֖oӈ(uob}nWĜҫ);b0XDuIE@ ΀lVJn9#ՙdi1X?$z pv)\Ȼ yy 4U Nc5~S Wa#*f*Q}w5eeS3ZYyP5 ,<6 <) u{P/)T 3{2,/3?E[TcUGd\C8σ;Ěb .tE?48@4 )!Tϭ0~ؽh2~U=I6`yt!,.nfj?a{$K1|R|B*WEzRe'銾} yI-0UtlnT* nHѢl_p޲掺c{+s'q;IZ>E,I/df9KN qq0ta1'j0:[=::&Q-5?Lk+ ,͉42 nC暧ct+ZXU{UHN::FDHs1߰v9]NY)*ċ{f3ittg[km452:>Ta,R3"IŇiu_\hb'ŋcY3* iWG Г =Lg PwՔ $iC9cO]W=lЗb<Ḱ@Yz/ .~VOf0>+k#R.Rztڥҝպ K*M~+*[_,c-&;0wQZ*@plBmlo{9IݸsVj!l/GSE(ao?.W5zoC7J8hK'XʼT:n$gCPS?‰a"tW Q_Ǥ %k7-LwqMn ]Pf/aH,XLJ9$l`:'54/*W'y&PP½"0Wۍ֩ B65P9Ą` .&*72:Z=\m[؅,HpWYXQКWxk=-z@PdD9K+%Fn{XAVSH\湬esDA,}Ltm&Kf'&EoQ8k9Rd=/vJߝ/ -N!Yҭ8gJ<=Rеw!e`~ݒuvtbQ)Fn58cWN, 2z\U2Tvv6ʿa!($' ?,L# JwXJǥ2 'y .K+ɘ%u49Dۄ` oz7x:P:1h;![Pb:fzAps$Ƕfqh+)X 1{a̅m \UW0]o_s-J*?Q`>YHBg>#2"O1uBVhw/d`s#Ajp~k#q[D|sfcϵgr M`"!بmRbeL49;[Չm~v|1syj֧Ǣi?Wyzl̹>tǝK#!퉘(ߨlVsyP^)1V>}BNNz'$4JqA"5/ꯔJ1Pg 6n-im~rsC)SZҶv~oʙfa<7W0]X.~7Ž<ҏ&Ƒ`:|yΓWe'JWg YHHך\ &N q5'E9+eG uȖ6 nzK(-[L̖NMP|t2v^Z|+{{SO&RxqD.Tns92C RC_l,d`R\!e&?P `x@#Nz*;Qylx&+YFiϡb Z]Ӻ efx 6Ysi`@Og?KM*URa<P3yRk0ժ+x##'ʂA+Hv,(YbtB<(j]4qjȜhmHI6ܫXVD5ؿ6쎪(fF];jL;%W#9Qrд bė ܵփ6;E;XYỴ#sXH_N&+Y^): M n|#<(k;_B^|YYYw l/;*딌C&CL_`?,s[JNc(౽ƜTϮ7W) j7eTRIUR5zX1~ܚX+R7ˏ\gI@ "['֊v? kvxh/}jwbl۸63:EDgjLj2#RSU{A553j|0uFh"}{,WV2\yb&rJFjpU#5^uԞꃭa1d5Ė#*c4Q^CsONL{?"I ~V ?"JaTK 7^(IX>=]N8"')B`bA|1!c"SDaʗ⧆\#)sgRVN>د1Rl YsT뒬;XV;O1˼SsIVmk*~=F9YM5I.VMF?YG`JBTw@Qont ݂H4JVuP-bifQ$"Og![n,ƅ}Zydk2>{RI"s&N>}b0֑-@Ɗ(Bubם: :,MǛF{ #iHq~FPo9RӼߨ ]  97F? )OPB#cV|ӿq,u#.{Y#R'U(݇i&^)v-K*p|E>߱?RrI W|nSi| YJ8MITHO:w-rO4s@_pLztZ~EvTAXA_@lp Sn.UQDb0Z0xbSU<[hJRr])5Wb,ÿχ+;Z ]ZsJ 0ű}(2晙^hG:P $䕙 #eQ-6vb>`QT.9b 1qv11'̤1 РJ`xԟ03󟉺kD%73mϦKLLT7 \^v~Bi֍+D#]$8IfׯG,@ow}tRifn@(Tiƭy>%A쁹CCR1Dpvo9YSb6}Өi>D\@c؏^R\y6a6"y[WW S=W!³9F˖ \X)ϧy+!p-ȲgvY#"H?(%p@V%1Ä'09x/֨,ɋOݪ7!mN*1s"LK̄*; Zf_91SHcC"q T\xU=|ѐ=L0g(D>̳5Wb_e&D>ulj~aJ:m[dK(߃U9z";rY/›܀!h3lk' ЄM#&طjA؈[GK\'N!_ƿ8Z J!Ud: +JR=Y KVp3ݫB˖̟vnlo`ujCMUnϹ 7-eԿ,Cͥ&8ua, I 4;-/{."m`@Td[S&|p5ԉ(LW2yp(.U>*,Nc2L3ںs<5oCf{t]p!-Pf} |CtW1!)顔X/{ؐ34#*goziצmkj3ece}WuhR2+tyP2BuHs>VgԦEheoZ*xSA>1|'=(\ vy{ xyD!Z& ]ۅ G~w 2dA]`E0O-B*.6jH]pvUNk0ɏ^17l7BGbHۭ=-Ƕ T4~%Q/O_o,:!"bl@ 3@{}[]Y*Ml&V`=\TN',s[3YL)^ pt1~6'7›:u #u*TsbS u]5:*?0T|nҬ'꾕@(}O5W0%E_ )܈@eso@|  kF%A# aFST7%=NuJ6f Rbt9 AਃՐg_C UB}tkC$nصǠA<0>wA~Kƈo(Üg8.[A[P#[nVk+{f O.y!pYP!%x.@=DN1lNNݙI٢N"i)NU0Ú} w(syIt|rYl a# - ["%!sɠ/<*Ujl- E):H w!ȿ΁&<@n݋c.%$- |l"T*ؑ:Lcfb2Gfuؔy v6 7OP(' $c@AHo|CEhmE 'x8ԕuT+^iPl3[*kvFJj}&%F<n`ɾV2 DYťrp;aQw8nH'B-*K۞&ڰqo_wzK1 :5`I:e(,6Iwg <0X2i&Geó#EL( m:y-,K1!I/ Mf x'ξ=FAvq^ka~Pi"#菮z:iim4Z;wBbz< [㤣%9+Z\BsR+%sfXtJU âsbP=)bVfhTTS"o=-O?~!d~d!ve@\1T8 4$6a:ً\ c׌"ƀA d~QuQW>P?暼9߄FRc-IuS6vHqZgIfh'Q$gB)q6JVmfyH:hNCآv'GK|Qc`%WaϠDmBֳwdaO/{{oF^Y4\ IJQ$ƢQi:x2q՗׎Ik+aבlQ)E{mhRcF-zBpwip >Nft!]k@d'6rv6b<\rD V&Ӑ`h"W ix$PC+#صϼښ7oZP R z7/rdܶuVbPK:*5KqOH|?}@Rߎ*[J ?Τc{V~(E9o|/,4-8q~)>$7i)qcmV) q)4+L "`uDٶ]҅d$cV{,scZjzAdG Rz!UŐ"Th_VRR1/cʔ-6J]M-(:w|>5-Fj"N-8{fG\="YBϲRe5 #K8 oK(/ɩzgsp|:g5;ܜmcwBs6rQnFžt=&/XFOݽ2 YPT:‡=1A"U؀Chn!,oWJܡw`}FyQ>mpL6yg ᶸme>G1ZMRy1lg ق@SJ P~m20]0&''Kce׉ t~E}5ٶn\T@vd4ŗ]4E+%gB3X7[hjR|Jb̛S8+ZL1yQ0$8d7*K}%C$b5ެgH Z]d)@AC5,=“tnU@:R7D] Bj-'o˘o.!I{BpDoze~ii–$Lh{j(Gz(t8ƍVZW}_Kq2F68 ̃dysj==K:6ez&TD"XefUTDz~H*FJjѦA 9@-S/涁tH=]cH_?qQtvtPzS/ K#  1 csIҪ6Qa# T;3 r1Iúhb Q"B'*Sd2cL}NTӝ##&Uɪ\]pQM%&%XuTZG-Cgy pc*&<ZT>[ {dV"+*M_F3؊/I]^%u6)磻#$YSRK -e91d,{LrbeNɤK8+| p|ko)d͵6k##lqߠkuB^9SVR]rm}Z:9c"mVnk9N}m׌s2&߹S!EޡvW3 qT֏B2Ѧ#1v`HU#y2y\Ė1b9q[Ef+@b|.v}wkTkD|MGd h)BHXQw W;tu!ORn4_]h7k,Cj:S+1%#NZxn5{cDpF\)l h\aȑU2[ G闽`iv11NI#ZO͘ÚCf|RE7]}y`O^r8]mP74 lr]+i •DδU0xM?dܪۍS0R.sQj ^ 綣Qh RL [pP9χ,> |\.!Gzzh&+_/?0w.ҥLүHkXlOA9 H]C-j/o;Md[#_\Q@Ρ@b+;/j8yYX&W3<ބ+X+kwRpя2^G;"6,iĉAp:yiy:`.'pOHaT{,,Lxiيs wS}8`CXUʆX6]=b(̢* bVLk pdQ$RxZtPo-+TE@?A4/618nO'E`^D]5{?r& ^UIVK~THd31rtc bPai@Y+\ڙ#D':eݸ&Mxi]J[P(/[ AS7*f-̲\a:dfsv&,_F!뽩J׋]x1TړD/%v!6[Q׏p%I&%WQƒ$1 "ilvΥy1kLP^hzCrV"m3Gϫ޿Y6B>VrIļk=fRObCD;5A2qQH 7 `u@Dq% BW}50as}lqR;\ <)w5_kTs.|Agja{WҟSW66TrtP^|na'LSxPU-Q/ڴjWnfZpQ6K1}oP!p$fzٔa +m';gʀ/b*VTIԪ.|G8+QE@J\yS&|tg\]v֘b2@8|\Bn.QΘ1f*Kcȗ/4L9b+u^FEtJ[?6+y'2\{djna3A{JV.nڡ$RzUkAm暴]>k?y$7cЯ{}+/a7Rcm-H𸻳7xtU`h.)4)yZUnw}HH=J#YdϠ*In8<ݬ)Ah!< eLc`b ^?Q =UK ֦4-/ܑN7%,֬,H ׯ#5\3yaـ.@|\"5LPc[$|p`z]ʗGWNFL$]vb>xл?`S3% :T <h*i&Q*-;.܋Դ# r0Npi- * ^z}]03>dOVH#P>${)mOH4Y6[QީegvȟۓUcگxwl 7>!AbovYG'enh#?w-C7m \ 3Kaf:CgQs5.:7X+_{;GpAݹ|e[lI픊ӻY'XחXri՜ P9kTWhJ$,)5RT4ҺAyVT!9&ݖ4G8g|;zD"=7h^Sk]+}QB]m,_R5ͭpHXOe?FѪDp)=@`pKѰ瞽E+^g#]Hȯ[ PR܈ {D|#b-Ι̗F0[+}sfW*Qu,VUiݽe=8o伟z}X_O222^W/, #W`78=&3sz|hZU5m sX8dt\oc\!z'MխBg}/ʨOǷ>J`Q/ɼ\pdθԲ\"bze(i\h.3qa%@/טU_aQd{ӜcEd, A_t<$Ef@J!H/%8N׃ۻ2uUCLmJj+p& O!ɚnRLvVR%1}]byRᨪbYKܼviG'40c}9IWnBn"3]XzRt_hVŸ8ˌH5N;/V}HydlD j()GN;DKzQkzegɁ2@rPzxXP0JרSəo0%mQ['ՀUWq,oT;1?X=?O7Rnb qoa?}w#f-gPhL0mɣ iCm`{3=}dƑۣ/+=Usk^nhE. Uh7˔r|7,#\(JŊE,XdX $Sc#\0tUh\4ĕP8CtlW*&{Yl2cG.b]mc#ΎSh Z<"oj􂽆f| ǩ^̣0! *^W4X 'C[{J `;krúf=(NsIOi mxj+ DKWuSRVt9BDDo*)9l,ʊoݒԔ/=JF@u=x[38FOcc-V,`[,-g &؛q,ژ\<2FHK8{F[a4.,,7B08ӂTDrpnuv\hfqAoRcvWK N -yMqGK~ 3cc9%vg+i1SϷz/^/gjl1V<};_m#USy:U>nGy[&2EC 5w,A,͜KHTo/]@(̰ᷤ%₅}\K]Y!X&K28IV>tT=x߁L*^+ǿkrBhd= ;um*M7Z,#"]ͲZx>'-M v*,ҌJ`rJ呹 ni;g6K,F`-ziBa`h 9}c?j l.Van?ݦ?-;5WK~Fn^VfG5H՜W-u5l)i=3CYfQN "vo;0EE#mq/K]w;$Y!]KE>[;^p  E8WE\9;웪~oEc) a:tʪV& cCq+9: ʿ;{rFCJhs5m@Z{+*⋢fi5KDl8_ n,r㢧5)pԇ1WYfC_snk._1VaUGq!˵jKp=Jw}8o5 a]q.6tTП4떮-,'=>+,NdHjØG+v>Z#N_yi~>KC QHj.0N,o3GZMwpZsL1[%=]dri):U~nDO#Y-Tnn(jeMPm~#u쀒c⟵i(-J H n~C7ޜ\ڽS|Ru*`@lF~J)x㦾=`2VB4+Ͼ{V2F{⮌}Ag`5H ׸&X\?\|7I[BMu[9NUIrp9`}QD` [ӡL;Z#cmF"[ ,-F~Tg 4ˏYL :\_PW5_\cOXRwlq>8ΘۙE_%sM`*[,Oؠ(XASvw O)"3RJ[XdD L&wR8ud=?wðuObWUVh5M=8wݳfa)ycS[h O~ޘ-,ޭ2|i,:B}>>6hO4/ev2H(9_k7-Id:K0'.İm*kpIC*_TM}mb e+CoW)G%9O"L&E6=/'U;ݭx븆rWƞK[\Z5#؅" jygg}Ծ>Y_M8*vwʝD+L&jp,B yG :(ċ /"ekYW(-ճ !hpۿS ɢi .ŐQw^Z-,j^Hh]K9' _ 5cS5<yjih|G1E]UEXmB j^dFːc-{7 AUHffգoi], ݑ"X}sbk?!]14߂k~4Zҋhv4yY4GIuST䷪.'FFS/mlfsڱ'PIk`ri) :IPoM5+Fs24#41ݹa3Ϝr dه2ɂ6 }Ͼ¹ zg{ %.^l<ѰkJ2!%iP,7#+%nd4WpM#AI}y8^G| ceiq"z6k8/@)OP,ei5E M9 )'bvtͤFҰֺEWLO !FDK2ϩq yVx}r;UGJʞ ]MCUV: [ͲUA1( pU7JQV{>%8#;$ŕOqIs:`2* 17q"hq+3CZIC]j 3`*EV [bzym"m1C!K{Y$:]):\hipŕRR. <:,ˎ&ݜEl-;;L7\.~$L;k3Kd3g2=P_<^1lԹGJԹ)ɥZJZ%衙 ]q)laܖ-˰0V D÷ܥb$]zݲ*VxRWt7$xaa]1cGiÆ0Uz9l$doX.>p_lp>L .pT]`'.AtEdBh)*N_jh0fJYi8 HBldP/XnU!=BGprԕ^ Цqy7 UA[#t7]>sizfs%K}v!o8(c pOr!ӷT<|-ڜ[Fy}VhnׂJfQދ"(_ p|UYژt¶Úb]XiMOυYH4y aԝZà$.R d|;'xM6R"6c㧛1/s Ex\X  f4Ij8Rr9PfI6hXͺY_Q j&A_grN\Zb]`m6㐀Kӎ՛f9_Bm^? FV~ C~I 9xT_TWyZ0NR^7 `&d Z+e1pXBE.X6 cLOvPqB e#BsNe?+Ҝz tD\́ +5kw^\S{{†Q}ZISŠjxr _l}V?jxx!>I,c\eZ0+nY|'CMlmXv,H+Vs$A0&QI{V#ICs3tE&[Fh5 W~문k2t,zx^Gh]^Fbw=1DfT"?pãJ_:| Q@c@a4^ iVk0@x ;.D{RK,Mؿ'XcB'e}%M%&Y0Q>P60jȜmhiv=&\rEUN]C?.; ;x 8|{jDUpѤhV3p&Bu[UlQdqW?H, x[6XUobvp{{䚴%'UH"RAKAq[R#!\i8\ @.OayoQa3*rpYoReEnK-NR2P2>کaȃxnvzpv3r>un[yT)9cC- Q0ȘkϬͺXlB{T9<7IME $ͦc{伂./jr w Ja k 8"+KwsΟH&훽HGZ@Ο :nK>U6;ln:x-d_j\wCtŚYtJ&d.BdtdL@8VHYrPb~o/C;ήD" uWƋ"LX{ ŷ}@@\2( /aNR!*DڑPy;a'D(8'>UW }:[(^6 8%:X;lLT̬G]gzG+.PeBe$pByrõ8)XmM˩\&O$#mr^ؙ\i߁A0_LKe4ks ALhWbﮕPJ:$oq?*CWJ'A~yn_!}H W=|T0R^pn{ʷ' >H8Mk\ȍ;sVQB{v^vFrm */Bw;dIDt@SӶhV8kBfiI/Ͽc`ћ?H bD0s}~~,_!Ռ[Q>u<\BWU(p7OU\@Z9Rc}w-Rܬpp<Ƙz5Zq(,zu/Y, )ϛ2%/6&fwwT\׹4"%rKڌΡMr)cY&Y/Ra0,#A_ .r曂 =YBWg["@L_ ׃\ ^ +usg>1|Lᗖ];)?o#9[`uϿ" ,ʼxT51?pl؝_=KI*Ss;ޱE{`mT<^ ^N'R6aB~Z0LJqĠVx1RvpY_iPlzh'0=* ̪Mi%~Ј4*zzm၏^*:T/ X22pGit|OX#ebѬ4i{&9GaX9_f IpLJн0 vSݒ@wo[*=H2**XֈA9 ;reb-d]\\,ڨGyR=[?.4Wpj6ҏxtf=tV7a&N.,DJX:*+ڽK<~]m_|&՘vٳC{)j,<+Ez=~d~و| dPPFTb`%dx􁰐d$M#9kTHlp۟=+R^|HNC6]=ȵ_>p6>+{,{qӅ_KpPEnk" xH+)'p/2&YZϹ +׽Mbc}(`' tB=4VpV`±F8ROb``${z{$/݉vmUv>&VK}11|c4@T5tI@Q=إK*ĠětizG'?SH1ٖv:# |V$pc *'bA."hZAt OlNӈrL#>Jm{[D`5x:<(d 8-VNФM{:G'4Y abv( *vcmd0SC}qؐ-ͱ\bF,7&Qܿ|kߑ r& ܗfkܶ(iɬa'Ԩm}f7fH^+VZl=8…9zY1Ho,"#eE> +k*qrPa43)'!V[p@+IhJ{{dyfvN[г67@KkdYdhV[,4UxI4Tع{*~IߓK6 dR=ng`j[ۢbJRN#,}%my$ `]^-Sop^B䩍ƺl4cg{A9 #pbP|LѦadIzQ;Ѷs'fbJo\UTl(-~%`6 eKK"j>"%ۈ٦j>=փzDRm6MO`+l~W<qF+*-c𿩃e6 8YB 6Z7=-}{m e{9 7śF;SR>Bd1}ZF5X\Hh=ֈȎ1[xcx ">_ZCMRmCfFjCq=smD՛+c >݊5=YukW/&}Щpy"= 6?hkaC)ɴb>v$.&;LW2ݤAU؝/[kZUkuM2 řUS"{Z>j1`;^뮣ML&T?IS 5ohĿdx_,L`D]>=bx?l@,<+G_t'(._!u٣msXFi, Z.>1\K}mv7dz}|;qߤRZ,zr|_Z !=?[jP( ; $Eقď-$'Ѭ)&'vɂǂn\z`u4eFk&S`ul47U)Df% KoR`<+Bs /WI/S}We/*濪7'4_tBZh*R8*ӗOR {j(c+r'ļѤ>Q#kG%r\p#ͤ^n1~k?X , Ҏ#Xveʅ3Xخ\7AfbEE$ꡔb}c"Iq?Ie ']@!IxJƝ`Ebڭ~`Q4<|ze"Vs 4' j\!;1n)`af7zD7֬l]U'K mĎ s@䟪W+E6J.&t33X V}d"zg$:2gxW!Fm7ڃ=G Dcs):+3'gz}P%;~>w-jYtdfIErP>ЭTj^N84=J,Z%$cWF}"P^By:v2a}Z]|$mu%7ڠ\j!ZZVOAeLPHۼL4FдA5t٢pa:,6ٳ6i_[2դi]JE΋h<֭`P&5UQ/cQ0/qHįtoaR6@5&ެP:0U5||'J`C`rEȱ__Uvf.J=bh~cMieC+$t Ԕ LgS$W~ps=qș,cW%22;s|Z(*n@T]J;/bPw&5U6/ې">=n`EO]eYeE $^>-ofQ@Ah_ Φ#IS>4lԽ *zŪN " I‘=tAPCƊljgF5\ >C߲yDc{RAm?IpeKQMCJx;fDgj51__pix,Ńf/ЗZ )SkFGԱ 1O?vkv)~f11'>KQ@5oy)^ P4}DM݆Ze=)CV)v"ȦXHz?}4|dT^SJRmC7ȜF"#ȗzl4#Sfۥj'Xe +&VO(ݢ0-lz)MH P3{ѓqF#$-Vp6[fYDp'IT4%oi];2ϩpu"l!5ܬQT @9۲i\Ro0D sK 4lZenO3%']bpCwY5V\ZrNs@* <2GZUP#m  {zx65j| F*k)r |#_ƮNJ{q~w'P5<8끜t,y !_ui3&ф(ܛ#p˖/[6gN y]0+7j? =\u9LWJ'C 󚙓YrG1wc4~Zn6]hj?vf7 O*gkzŎh(OCn5#\$A!@sgf!޾quz ȱKн/'5(C/;|ZσcA#,h%;Sy\3%-{Ky.w!M|!qeAIC,|݌ӉZ$J+՛{u,𳭶D]i"qt8[? }1<1X T+l9cSfg`HZ'}9 őlA7U6йis P|}#AK@KyUfD~D3`L (A/)Z1@v)Z }h4xỴ$xDzzTټ($Ӡߗ[*YLRtX5jMd@ڤU/+zg^f16>)є Ox,/Yw F},֭o*2AٲG]!S.udRU{ wҨUⓢ,Ԑ@WUL1rlo}<6nBHDa*X%`XE@,Z S~b|ZR8Kw2yB+% $Y4O/|#ޘeW6;HN/JP!)߾sSa'$ǭcN*ot"7yVgz j.hz\P&BӸuM­W̷70T7i5O*~6g: J27 Rb`!\GJm̩niPة.Ueobl;l>fΨIŌ/rJA}kLG[Ӡ[W%7QDY4#ٝuO01X!)om|!T{N$Y򐳂PR|3ޏ@vފpU7c\nq*?T8̀_D˻t":.%E̯G(Tma^''EBgiggL1L6im&@=JȅKeasl`.ߍL A&f3 nә@p5G 닏#C|Nm[$L0C3:_PEPl[Ώ\ც :jɕ'm7nWXoӖM(†g/T3$uXtcV(_!{Fmf|/_%;xs hFZTvUr-Q)_>v3> %/X ݊RZվ0E-Eyh!g&!#3^r^ ,Mzslo8Wlj"ͤ6t4Lf^J`Y4fvdev͢x%V MbJ H!ˆRqj| (%67z');7@| ,tXb'nk<}OE¹8`'dRS_Ė'j'z}V2erU*hm:<  _@[0Da=KPP렀(UkiMQ͢(ZrFj 8)IÁqxȫ>ȃ4uӷoBURm:UVm' Fljw@Nѿ|q YF!;z*Dw@`Րnxn?J2r7੢m^0M0ZT:6%d*D_p$swRW&Њlч-YBnkX,Y`H =w:5cȢǵԉYҋqS#Ił1΅R~P\ ?$ !YgBӣ)QFi#'qֺL/2_9p;r/۞7S@ !>Ds~Ƕ W2 [ &=bͩ T38Z CZCX \Amaun 1w+}lϣ9Ai<+7 Fj5W( 鵅@ nI#-gkj|H "8pV>DY;4]Cl(Yь96=JY? V+ Actbm|=ak>F=F܌eVoxb0 Y2YG@+{ǿy 1=7'>YŠoQq̌IR84E*PJ|PT);Dhv^ίAqTa^i _H!x* -ZIƔ.u9k~h)S'ubv^"\jqz4:3/*K Zk=SqpqwA=\hH$3R"\ٞJ՟lo t{j-}3X]d_GOa_=Idl*ɔM#Q۪̈́8wjCL gO#Qb]}Z2FU t^g-rP}D"yMyf,KcRQfw:?;,uV_7AbKlRI?cJ c&p=Z?azJV0H*B?M5+Aܣ43e%Wt ;SWևQB "}(AkW`uVJ(Y] D~BsKtrch.oTu슕veMO\>Ь !7wᎽ/—M?u-uV]* &!/(JD aXwU I[=Zm+&3[ 3,.ǩB&hi_/E` )3J [i%琷{8V|5*Å\mWi_)zTYscHv\Li?@G ښLi)C3~ x; (hN K6 V}%Tቼr7﷎+ q0:"҂Nxl)∙0R)Luf] $}ꉯ.&g56әP 03;qe,OP+x9Ӏ>V6Gi L=^](@RS|#/؆qxr:kQOrL${Ƒ3,~*~~cÍ\UGLnR͒<\4i 묭Rc˹мr߅ׄ[vWH~0qlo+N1a?ȠKsߴXB P/h0Hj+(s~cyˮ-U DYP:+W[`qx,~Y zf 'G.

U C7AѭՒ5̐N+x⸆9Z!]c| ijtZef1lB4.H62MO-]D O[#bhNݙE 1¥πQ 0ܾn¹ KB "zES| z@->g|SwrVx~*6k+OSu_aDl[mD G1u_ʬwǢ ʿLX_D;QJEY%Њ4b 2l@-gq/_`CQ?clgff`h_CPJYr[ mK-sK"~SN=MYK(](%3;sQrVAk {*NW{K>ʍBFe V~ζܔ X)edm5|b d X>ְ6.[xՈ'arqa7a] ^dnFJebk1.5x'"4uVY\ 1 %ߑ= *"$%my U8!lReƓo5{gNrj拱#iݻVֱ-=g//eKnېֳˆ~gl7~c$/y6"~R@ԍhpc5\kxx5*Vi7'^sSAoi,U?}.$"yW  w?5rK:3=ڨTkfBƒT[&" uM>IcR%QGBwUmf BұO^<o>[Ɇ_Ebf_.rP}Yڦj'hRly^q؏"c3*ToRuOun9C\IJ¾u'{L,Hk`ߙ S/:38={<Ҥ-E 6&L ,4>>]eAͪ\A{8YsGCCK~F`.GT9xb=V뤸۔V>`v1ʨAǠ-D^ [@n-|gZ ;* =Yq^(~Vo5q^=&ИjNy[tCD&R& gДB:5%:7;Jr~*ś~bܿ_Χ;eb(LM5i&욽œG9ʡsP\aՄA J$#Wm1 P Lh,xi mI?lxJx" wNJHk.nI %$Lv;646hx1|j{@BłiISTU 5f_ 0[JZaɘuf8ml+B 却}g3$˟M aSP+s}팖olѕG5p)zWZ@0i;-Ϭ/:F3'G^ʏ6Tlv\6̟UɰwԼҨx8QC#߀|J6O|¬"gcg+zM(jKf:Z pn%͍GZfd~<P#MFGYScrjfak쑭ߞʙGI]&6"zA(  H6RQx(^ń<TH5 ĸ cH2,%Pgl@:uyPLʱF%{6jU^ZKps_gȈm#MqY/9ǥpՃ| 'T0h7p*A  !9fg+'xxq ZJz]Ǚg:}_'VtW5EO~} ܅GJX%aL9_Mp{#1QP?yK# 73@*>d f !V ! })o2ߧR.ԴwrF{<; aw~QmD2 dUӞ4o+ F׻IAE eKY?ef񣴻I !FZj!MNo1~oxɝQ8.Ѣt~0kCM8qr[{W]fH%YD/p#p 13f8x>}y *:z𙴩ltjo S n,-|ˇ䐰hK2C Ir@S+쪦ZM?ĶC_poxA/޸rf}QZm94do6r8gM*6ItEf;"aQRcƒZ'Zn \ҰdNUID^\Vv{[_DVR |!A=u^&a6ܸ._ɤL:΢ɿhUwfpG%9󻸺wwpj zKosѧ9!zm1cRGI)quB>nD]IyӾ8H3Evc ?+*>Ŝ8E^[iϗlRGߺ};HV_jv 'aߪ AV<0; cINLvwCpK7͜.$Z|ŝ$"YȢU%2us҅)>FЦխl:{6"FMxh1E~v4ioiywLJ+P-؃ /.K A4M qNX0OX(|f4Xi&oGI.в|K":i$t@B-GjKD?~!k(xl88gnBZ@c n'#)~ t XS+FSI{Y2ˠ--8c@J\9;7p 2Y: >м.P\x`ȡx/tǸ;̺ijZ,(鿼H ]]#ĭ4E67-SU%:= KliL݌gV웊&=3o9=/P07d>S4Zss+B*vZV3jpxҀѻA5m6`)' J.k vXC9*LdyΉuq6@7Z :ӒmuTYP(rX ˄UV|PGnZZ߻ӆkq]蘑fMZ(Fm4r wbzb̞ z&3ʕ.-42@[ ~bTĕA0SªXpiMU'ew!_jG|ᦠVIwaY6譼t YiW_F'gKflcG3V(H`34g%cOHx±"9Hog׬u bj3/gJ݃*uTZ{V>-O V[}2>Q1^%].&\r$Jf nkr9|w괆"vXXeiSD$r5]ZzԱ/ }Tb5W+,z_׈~ϾɜxU|wg~:S5nM7 otR9h5b :n xFM,,ͪ mizVB|ZC_A.Yq>XSDΫ ZPcfALH?#a vF.FТГ54FyPْi: ,r)S-wk]=ʴa[ukK҇Włi|:ዉ}?Xn4,#څ68'sF{-x]fr \\$B05wou^]aײ >}d1ӋmGs̛g(_$"a ;AҦ4 fW9}"ʀSX[3'W^&77eb+n)srLr;ϸsx|R84%2Nw`UrwB>hh3-hMqK!ef<`Ӆ(#OT`x*I*mU 1wp@IG ؁1rnu mW8Fz蔋oG5~#m e Pu0>[QU!'OżIZp^qBz*bH.9[;mJVz@u+vh~TW>I´ llN T ppj.ƫ%2yY| }WVBQ'Ac*"G"qE-E Ca9g>elEf):d HXКCU%,򵫸@sh|ɋqp;JCD7ITI=)ʹGr"x^~7%LAɦ9A7&D}م|,5U_ޛς>٩$W#YxfZ-@\4Y,1K*-U_f Z) 6e0dO12{p`D-ʁ \t5eGf,UX7~`{$͇;fޘX 2 θwW c@S5 )<1i=WRCJ~&^,Pߎ -w?6qD Ϡ1ZbSLDXRRZ+I[J"kXv4C xyj9i҉}~I x['/r[kt_ 4p~xX:nnz#g b`A{uP7=${wwpɤ?l{\ג?nj\-vǷݟV!mCBιR[.M &s;l95ǡqq `GUVLuI6;>hR,0ҽK"@Ô~kr!}qw%wjQב%Z6(,gO_=TzyͩVDߒ4kpiKIkT^hqẔ,.`9lߓ(fnsҡf!xeOk} S5m%m ~B3m+&@ںuXѣuM3F5DdzVx_LgJ!6;YF!a j0y 8t/TIJȕ${>7sԏ;BS9'SB5HV4S4f)+2 $|4f`,!sn0a?wtA*bki)D,|uD ^$ +DYU'F9K/.Y i}9\ZD-KHi$qXS'm=dAsta0>2.`MlBڊ'GgX嚽b!)p.|.5|4Yz5>|À==fr1JGq xxRH;̎0iV}Q7&fJbp{KzAw 1arF(|{U=爫jXvMX$WC<g}t&"rYo[9t.Rtcw}ڮFcڊ7(Z52扭-,9x^qq3_{1\;oOXO_]NPd[ ࢓uQBdpx" &yu#k4E++)D 1j@A4f5WXB"|,T_GY), sb x ׸Ζ@(3|xDcXAE'wj IVdi NR@U|V|3QEZFmS=FKKS8 %N^Z Ԏa͆`Zsw ,ĬnMIq$zEB 2)8,LS&!Mfv5Sx$aIituU\9oE@3氬J`?~ dx-"~(zKIG>s)J{+U6Kn D[^Cv\,%I2ŕBrPhCB'u+# bP w*[xZȆ%=yc:j( zaCx&Mnw_nP7's7 p pE7):=g hʒH&7:Ss0z6.%ʎ-I_r!6İ-)(0yk?.$;N+B3Ʃbn~/7 ^,|ba,K^_\c0>@n߸YB\kCYޢxBIY$%^- O@ I˭7PQz_gГ'ɖb+]Cfx|NГ38I.{Iq/96ؽ>7Dr+"!-P<{I sd G=d+l+#+sZIA]mrfCG CЁ1![ԄiϤTfԬ.bآ k抁E$ZXܣh\-t)*=ܣ4.J(Y\:nbHh%gd s9`[՜-kle!bceGUj,`yج͵A~> v˱ӗ<\i<;բ} ^e!qWWAe;ܛWwף&t_^,aVc&wüs Pvg+: 3/TI?@tcpu! ]=("A^Մaq:c9գZNPax!/(SG?i~Z=Z0"x7\b@*]p _^De6[udzɗr>H:ߗ&JCuJ,CwWyQb~*;#7Xp2, @5׶8%v8 W+9"qs_ :67oբ#~okNCm3-F{mciYaa#ٲׇX= LCR,0rQ2nf9Y.'[^lͲWNh B*,-$LH$D3הkrFqNtFCbBZ?/M7Ref*Tl8<2(w]H8"Fxw XE3 J\il$ f_$cbڔrpHBoEw?"22s-"U\ h$? 6l}ܹQ1v;ե]\9 oy-;uebC~ŬCV 95uO!5\j{Iexd #XdZgf8F4*2#Ȟn rHAKiyN3Rh>i `k T0/ }n 3#Hd8M.XЅ ]HOX,s T"8Ys-!K|wO.)\܁:`ncٚ{jsv&/i+%:k^5S՚qrϖ0ņS]mUVR_,ֺMpapMp 泚UR)v'9\huT->\%¦hz(\ݒܰmR.n ' lsȘ_\| In)e%" "} q6J 7߃ gO}w{= m@4 cZi,;41%\8TIߎB+?Gֻq9Ę3z1Peeݴ9}Bo>0N΍1Y-lۮlQx3 (=RwXHZh K{?r:Cl!'ٽ#̘NA߁P +auM[ｑ1>pɌ}K/dNV$w> Lԝvoٻ ""}wi װ_z8<, <Л>ѵ-Zuakm.C..?޺$/wf7RG#/ݴtX 3.1br d 5}wV3_ݜx%(>ƬYuR us| ނ47ZQh^at<ٰ2*"~z1/ iAņnwѠ ^-M}jI|ͼݿ_F58fBl4?sG[p 3?_e+[CXN#kc&_$*y'S{` A8JgzQ'F̚Ƃ ?Li 5#mDk-gbJ^bvWX[:^N~%K$[ ᄂBX. nX/po-5bw_%MA*\t: sϕ 2rѫ'L:2Aer3ia%+3a >6Ɨ\tm&$N4 ~oke9\br';:ᬘkJT{"b<2PрJJ#Hl놬8vm<ʏl'O¥LSV5%qiB )S:Yzo`i:muMPˮҋ7{" YZ