python3-apparmor-3.0.4-150400.5.9.1<>,`da p9|T>wŁaҺ*@7ˑr"\JGCxNxp!:l+_U)S %+wWе$jd imqAdHtMM^Gin^f~)|z>ʔ?ʄd & S= SpUU U DU U -U UUU*PU 4"("8#~9$~:.P~FGUH$UIxUXY\U]TU^ bcªd-e2f5l7uLUvĠ w$UxxUyVz$48>ʀCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.da h01-ch4d SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d6181cb4eb4dd4251fd2b969922c4ff8351309e8010cf1083a56542b8e76cda84679e9f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c052d64dc0a4a269651edbb90ffe4ce78e7557a3d446a43c31af274c4d6649f8118fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh01-ch4d 1694064909  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=344ef28ac1645276be8b658523737b9c74bcc413, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR%Y/'ގutf-8d5b06eed0fb6d5cca56a4466137c804b1f61c5881a8c3f06a09f21112c9b57b9? 7zXZ !t/ V]"k%a D岻N91nHGˍCߵHG9DE7HΙ9)tVH#rE{*[NcT9$k |3|zHoU؎2ׂ~ qKG8DNBA'v`޺(t7y9R6>w6Ђٺ\7"(2k=I(u 47Wr4(JH3}eGdNbȄ+4pI&L@N/I~ykMa=_$ITYEr=.==>YؗX.)#;Tl}0l%d' $'8IJ.Khz"ؖ#HN,@ T>GWmw^!>P|^OggD[%^;E3ZL%o%ZEe h-u֠\T/[h 93Ϝ¼\}+>jY`Z3.Q?!)oyMIuL=P;腪NiBɂK}n~ڲ"SP#D~2:- ־èS[zYg=)ٛcV'嚐m]pHНǖ - JOId?Z&Z,oΌ)z 8v}D5]"b{VTƤ[d8SK L.N[Jr.#+~KWrRK=[^ =hxr{!Jd(/*VJ Vu" e$ơJw*NsP:m58Zm@d7p5pFL_ӄ?]LZShêX {^^z"Ke-UZ̟ӐV%bޯS.wCIH.ʙpy?]l~M0<'ƜC.6s(}.U^6u+vGyKk o'tAM=?0`Nz3μZ{ן7S&?ywhVj00?joZ͘%I4_C|u #@ :jyЫ"jrBN0X]D[.X²ӒonҢ^"]e}^o)U  Ո itk/9WǓdbrFbJY%TG?_ٖjv4řy!}0O4"Q{IUyls[jɯӀhxؘ0eX(NfGfuMlh$]{Y(cL|PD'"M#ZoE=vQ"|a-OEʐ7,|b$I )tޱa>D%ɹ8ւxdV`ZEOi%%J[wD컀#lFyda4o5:0@w~t8MSm8^{[5(l~}| PT kkO%2ϭno:*b5g"}PW &)UblN-mJPY:NL֔*9Rso®S} ؼLu3 o\b/c 2ɁOt)Sy(&r@ۼDsтAU; Be&ۈ)_bsFDbD\JR@J_ϖIk{Knn( Ü#_G sI`"fqN7oc~O^SITA{,#;ɭo/2m&Cϓ*nw*=B%k\74C B1>]s6~gx@κ3(*積"se. 2p-+'?,:\]v? ) ?#Zy-j/sਠOdن) oSLmm7ACwX  Z\BcCbr p2IۆU:$_58&)酉?Ep-mQM=tT(# w»$_ 'I#eP&K6+yt À!ɼZ|t֔j_| bV*gTx&. Rޑlb}k{de:%v,d#: @[#ïtHPcAޯ/ t>XN+ҋ]xIvK2dNl y lۭJ x բlX2:'pC9vTingnC5{p^ H:Sھfje?8[O+"h4>Dqዧy#J 9X˶:x'FG@Ow=G* IM.<^Ɯ6 )Lj9ʪ%jNΥ6z HrBb0oGhɑ^C^v8`VVfG@^$}^`3>.gP~DeofW~W>!AX붔s\z_56bAtf˶%hh_R38h R^>ҺMK7œlV]wTl:] TVzޕH9o{;1ɞ UEgFf;(RJĊBP"{'&6^e2l%9d 8Ü 航WU-pКЗg YbH Xzf&ʾuL3W PCyF`o p~^U}ϖqPcƲgu)g]kpe'V-!^IG/HR[%! )t{ӌ3в<"6pG$ |AYRɒֻ3)YwM }C_՘&n/aosT#ƴQEb ! _X%"5#\oY~S#@Ã. Iބl {^|zg!&)ޣY`Q>$y`+ bnWW cSsC> i0%LҮ[[ZA+KT9yp l_Tfa2`98rZPGD8rިH*OkD.Mn'Aj䖮Ҹvpl9*LP@Ԉc~HjXB#]  б(\`1ʐrhJCUa9̬=Rد&v~C$BjLw߲-QY}Cdl-0E\VKIs& ]GnѷҞa9JsO1̒J`h}K0^036ayHadX+.u >5 i V\Z#Uv!NkzSȲam5og fQ#] RNCQv7,#?aagZPTRf\legeK^^fuM‡ߤ#dJ9f şcwjzRF@ i7#KQX pYΧ-% )="5]:CWٱ').JM" ͯLPSl,^)R)O7C=rFQQ@C(A+mgz{Bl[\ïIpjt*h0hIǙkqˡ.Ew9*Wk倭S,_pZ5!LKRQRvȠ{3~XHj|H߂9[ "nF =:$['[Lj+GkpHocL#Usk(/g7񚼃,皘I&m' t3gކހЗhtVխ{? &S&":ۏ̸۲aU2Ҏ "|_\jI`2޳1lz%NA4",M+x$;CcścpD%ՙϨ [؋!vcP޾Z9}L]IɟY l߱S*%$LI,~1PJ@Hj4 xOouFbhAqΥmM;,Ҭ p3Ա=t;aYiy[kt9(+7 Ƭ%i빔hQmCSal"Lt4+oΌGfOZ!L$S? B$JNzA[R (u8|4'rp=2z6 eY{&(flFє5*/T *zG/qf9ޝ`;FO7`ɔ]Ur^H,:&,omyP3%LW3\&u=/d*K$e&kW}zǸPBEZ+)Y+ȟ@~l&{gq Owy l0lal}ið䦸174ʰ$#qIJ֨m5R F-.R5:Za„@'*a)l(gu֗h|Yav-Ӯv&]I?&I 8򥰟h N8fxx@bI*c:֑PlRsˆ}˧ȱmpTTb r-[:r|AsSx{D<k<X,s0'0dHvV \{ ungcX*C X{{xtYc7:DSlD\LZR$@Ȳ2d}s9NE0y$w. O]'8 ܛM{( G",`JS-x_F(_Bx@ϋIR0c< oeSû- mK-ߣB]ƙKy@_bx҇Vn6w:h}n1GWw×7lhT/_Y_ueIہ^UW >׵Ŭyy+1{hczwq@m8tBٳ-`KQ+ݽ]KB "C.H`sZJAG?n"!%Si쌒(oVxEk0U $_6k@$4"qfc]drj߼OZQLqDF_pr!L>T1dx!e r&F grɴt"cs.KX{,fK J8ncM-@\RȴmWR? ƭ wo;upˡ PbI{Ý˒cRFiYhv٘O ý40>Q}v'+'yBm8IJ<8A!+xz*kk+kNZADS.dW׼/6z_7;y?€jPl΅sƐ%jRre0O脂9Ք}id#Z{>)!~JЗȃ%TfSK}{GIi|!ϭur ;s!@"M;J?ɠ; O9%Gd#94S.>tUI ?z8vmE3y'd"|źnYρB@6y Z 2);1Ul d]2۲44 i!k7I`2ة?@|Ԭ_ufBi x9Ǎ2:ZfM?5CxGd8dвtPdTe'A Yp*_亪yA :36OVnG9E[&Je\i3ƻ T2,:Ϛ](=;+J@_#VJ*|#V 53}A~>ϬwIDՋ| "Gu;D Nϯ,~Qr;SnUc028#-s]Lʶ Ч(S&YV+]a7|j>` aZ=[8$QN "ozX'f2?cI+U?RMdk, +h\ѴO\ت*'n  +\&6|ҝbh]%`j}stD_ wۧ'.g"_ VR%8 ާ+p|d]ʭƸIFۇԹN1@^"tE 'EkZVi!T2 闁9*P̣vL =1G9'BvwΓEc<@NWJ9t<+dD{4)"F*RM@Z`Kt_vb,KI17.pǹSg'W-~հ2o=BWPu'1,Ed_p l&~6F@uc'TJҶuc8hFb Ufِ|^'F࿳?5e 2@M #S<x^$sqs^C2~ӡyǷV[vqM#Y1@k\k?~AJ3,H9KP|n3c-Tc5e7cg25) R k9_YlT\<3Y.̀)ky-  bOܚ&l_fl#0y\9Tsujx(T޶$nszR!+ukAatn+12jNQioOծGФ73vRٹB+FFȪ>W87Fzdʮxx?7))AȨ(nÖl& (le ϮM`I:Ӻsل,bNo|w!gU~lU7isZEӣpRsjޙ ۭn믤y\&f* [C`"zAl}pFB&, ̚>LzdS#51p=rsNIzlJh6pv.C׉ObGy8:K^ECBZ` ?Xe"g@ qlB܀n~[_rPnp"}T l('Vn fت]fNnN<-M2gŐPqcyB)IV"J+e$лĺ"~O)x}5ȱ`϶((8tA3cbBmYH#;[):1(*X#Q*ϒ=q.l11 lU@̉w1Xa!"یYB9Xp-ȎdQg3'n"++,kIX74+9! /+ԷCX uhXőDJ04NiRځ$_-Q%GGIqh 8=eVGO!ciQޛ)Or+ƃTڀuCYxF]¬ǼtB,c˅t} qِߒ>\(p4 j6{8R[`ҜE gft]_yqDr1R7G_t;PB}%,h">ʥo~Ӧ />w̒i?ZSMBG$fZ$CG;,տpa',GX))H=Z}R+X״rc/L'!mK[6`B-sw\Y'mKq-&?)HNGn(S)ddžS= eK{F9n]~=މwA{PWd.@+%J`4=,dYhjE=nCWefsdNw1EV K:48x%%[2{`">IX\m1M6Jz "ݠ* L@cUmyMFxs65hs܍숴jnЅ㞮v9o-8ǩVm7dY537<+jƒ[ 3>)CM."g0i`O5L)֞B?IX9!l0|-S2mQov׵eR:2VNGu>v?'In_[s H^ҍJ$NQJ#qk))$YՓ(Sc鲇q]X\M%鼻ՠlѭ+OspI_SvpW=1ڑ﨣=X({!׶3 K|*)#lȫA*. }>kPil@2 .U]:Z)jR1`rtݛ3eM Hc9ĢJD'`Sۧ&`zNR=vp+ˊFL<GHCO!0*1]yNƏF[kB*VSV~Tۍ5ݞᧇmI@DrgPĜ-̚N{RǠ0\Og 0g] Q'$ϝ7ȡIǎF"Sϼ^#r/2OTsȮ9Be'j,Uׄ5p: dVX=i^8' x슺!m3C.gZO8uj>FQ&ە.J0d[gg0a$忇PJ{D;rR Z>"L+/g ?#0n#;g xX:^֕PZL\Q KR|m -zJST>A!&&Uù6&Z7"2pHX\5wGDe p $iȄj=5ZH^v(܃? AksʇR QC'SU@1Cx kMxn"PѧB@xE6} -UC|J|nT^LlCrk#q{ L^ICo`& ůK.@uz*SG%Ѩ4Hx2)v)E67J92R%Hܮoتs- "YATQBxN(3:4Y,s?r;XM> A+Hſ%Lr# 䑅/݈uz+ FEt}[b}×}8%- cGеg^ӄrl(X}|*9lvI>y¥moN?J$͵ߴ`aߓcoY_"@:{= 뚇rp?{*#cbE6#5^xD+[/h1 "qon# 5xk2~R&^Z^9:>"`!RA>Oh&V CCmnV;>IqBK)!aዂ};\:%e Iࢽ9,]V:0Y )Cv#kk˭ `9wT.%68c0uLۖ~*qxm[JB Gr9jT#Ln';?u;P,9`6)"NZ3TV*Hy ehM;Y[#q[*zDtQe*FZs~cɥEG F_EjڅZ @F4i0BY ,R*,rndMP2y@uUT dz6><})E.L!gL5صIDe=! 9Ϭ/L3\_JcA[VWV 42}m9W5@Wt(h߾oh;=Qr;F3t7u@މXGY1nT _lO BB qɢ1y1+r.0jNP{I紐 PP> Tp7Tfmvi,[?{g^CJ$sO*kQj1,VIs^; $S ݕ(  9톮bE}cxӽѾQ>@TVƉbѵ_y+qE$PT/.|ϼQ?}:).ɚ@wEeo <;#!/ $urO;݇v yUV ZH"\!RkLxE2/>Ӝ#S؊܂&u}=^?эt%A.UP{PioST'R' 6dng Vhkg^7c C;k'`775^G$ϱ??Vb߬RKa0OLl ^p\;urEӀ"]zz5qSQrT.}ʇF?S~,8T _;6Csс/gE$H̙5\b& `9ڗA̬ eȗZ> VԡcE:Ԡ|a}rk̳ EF7fzV8sGá UT ѩ`@^xb,ZV T2 GH[d =-Ag>XyVkSi "c.u6y EMC3s^1~7Y 5R =d@IKJT `Eѐ E臬cD3c':QGm $K8qfY¨.R81qV^xVk G/Ji[Qa/k%~:&Z ʠ1*XwSC]>M^HK۠I35#|b"ynsJ0w^cWTV{K/_ PY ^j |ܓՠ!_D>uzQ!Ow| YH -b%v}ܱns{fdoR{a1-()ʇr6 9i3)CB vHPLP(4yA>I@ >OaPD*uw&j蜈TޘpٙtsD;V.Mq+NA@|J0J_ ' "򸱗Y\R4DZDQnC*usZj딼.gAOq~ Q`E'/>]͔2/O|a6i5E_`DNN6SV.8_zHCAk ħV=>P^%2  1xIWѪ_REcEq{y0 ׃ 늾ѷ'E,6z*P r)įq ۹UmУy{s*J6.܇e՞22W|zKM]#] NFF)ڂ-c@ @B_e%d%8#&$`Ά9J{ͨ4 Qq~;E_^uՏtUw\uyMd쓀&nH3xEXˁ~ /Y}26[q=xƼ+m|z2[&;a*?hi}ה *'%ǩrÃF"#SGD E$aPi"h-ŖiT^xʔFC*_TOnM ֏XOKOX։ݠ2r ce8(Juh7- Ju5"Еs``-(8%*ĜcǍBœyrH]-cv fmٚ.=Me&bQx`AF hm}x<jR§'Z1!gщ6ls|6%}P]~3/ E<;2`2Њݻ|2]\XTfa lc];enR=6*%mHjj$, k%.ҁ!T$eq" ?zyk}+߱HZBn:bi=뻚Ӂ{ t?JN:`)yPw,-e.8'i1UO})FnPy?GO4`Kj逧US>vIm=8د A`w#==M6τF}\xB/l=OqzT?`3#$4W W_`T fE ]~0߹_n#єQ+GNX^3J%⁘Pm_R4Lap X_ai?b j%veG vaGT A Ell9r_n{&3V٥TO ނM&w _op4SxMzkϼeyJVk3pj1Es$FY>6Ʀ ߥxA@SNDOY j@p9dBo+A =T%qd|uyHzkMFfy(Gh!U8[36i]e{ݡ!˜joux{K|Au<'y߾@|Bw+M]Ae?^ͥ[k7+9ಞe\uy }#}ЭPc 2I7PqCRlw -OẌ́?,qCUA}?bN#`2kO N!o4xԋT/3>./KIe(W@=ư-qqMd"x g*E_ 1>%6`V\lތ/)A@ofGg.G޶iC+2!tYZ&oLe؍ܮGoM4yug,Rf5iq)@ "{PK^':25gnC(!=+ ,>Sn{*LO7-*7cУwEHfQ7) $1OPi16S3#_۾1Xgz:t^gF2/e_|s:%VPj=wp[K5]}_BF'e9,Oa*o 9t*! aCFK[T* :#E M ضmuM/{|˗@/4IxF c@ ~h}Vg-X8 r){!Ǭ(%0F/+fybH~_(0:<$Mxx5TZK_f.\ƟwCSr՞1\1LQP")sܙ8;ꯠGF<% yI+#Gp$h~* ?HV1"bդ)^׾,Ґ }pQ0I y ʸE~;_4|GT4Ux8? vO-̘ V?$7Iem|6jP0cPo`f7]Itѽfs{dbJq?P{6n3g6wf`.z+`xo@9OY!+l/-Mqaxt˥>[m8p|vlǪX " ͉l/@ 6#D!pIA.fڀNY_zi C0PmSMBi4q@@¶r(S⥚Y4]O0e* ̺wbѻ—b2by$LtZ+< 렊k%шe(yW!l{D@j, Gb: (I_cЋ3$^?-8ЦCPP+GfT M`\/9o=>&B;R A@YEjAmvuϞ3q;mT{/:e9!Qo@G45S/1;dyfB\g#6kqtkxViSk1*kC2e֌cԨo4rp+B5vbVe7ln+f[N[{&5 ;hi #简}QAqa_., $JhU)ˣmx@Qc,0T%gC6tȁƻ5g84S:MW(ΰ+b?,(n~=۹! (&ksc` ΐPyX~RS@$8ЂԈ4B^E*rơ`~IZ_SU-"[asg$&fG')3{Sȸ\ܶ$rzaiIR!Yo]~  EJ_-UTw 5tۼ&dtr=8*:}p DvPS*@XzX{Z~UPB^G_#t_ܨ)_@\sӊ& ̳tR4<`wuK`ZC =-~@~sO;߅53M1@oIbWy^ 10-Y 5ܽPBʹ; U{pXl&aG9S_auE95ttDyAw'Cb-( ?0-iVnTv|ӼG sv]Tpg IXƛ[7A4+zgi$( 5>DtNG/7f-z2Sg iB*61: l:֙2-;AuٯsXC e۬2VD^9;4OUv@48jiRJ4} tr~P^demUu},-j$bqoR4$t&kd7b K!B=ᥐqn?~ zo]* ڎִZ.P5uߟ6u BRtbGߧDFڂi9GɷfQWEJ67}Dr_%)fG3CTX1Z&H 5|SG{`lG_DiV /" rDV7O̓0'N\ ӰWe' *VdJn dv؛ƨ$u t4M_W%R攗1/[?lL,{+}7a'ߴ$VW`E1.(۴bJ.Y ʆWU9[ػf|  f't(ӧ)>4(fֈ%鵕pp>īʧ=`*seܓ=u! b_"Pm6E;*H3\^}V/'~H%JPq;tfF"u~PXH4}_Zࡪ'>PB&!5&|EfsQJx{7' uYg{ i"͕ti/[tgYcZ~"3F1]|J{n!7v*4U[m1UJ>S <>tLV1yd@O d{/ $\{;[5> ьe;,Eo$Gm"0xv޲:ʴSi(aL?be6T́\G'g&9J | y̆Qi'U7rwDpYm%ZJLciҴ3٪OcxtAX G/tYWfK?"5dүodv0$fWzF\h/CiDDp?UM-I]y~L5%&5_rC?x-Z}{W]ͼ6iˏC=V'V˵x%"I,d*=j 'kjW:IQJ'm% xpgR7 cٚƓ t#Lّ 6 ex0S&p)>]kM(,G7JtCANĉ(ܔ̾M"l2R aq5H&'w=<ؾl/`Ms\nۛN#K@zdV~n] 2T)=T@7]Li0; H['3^ cײy"LU{=/;0AUVgx]H0m&U&u!)5Yƀ\e]~V2"r5~zz۽eB/J jFДhQ_=PCl=H:{I}_l،ԫd0p&o+Ο(ߐm`d} ֯d/%c]h]7PK< N)| {qi[8WUq1v8#2|#k(]8C6 M/Օjjb(C,,E#PsXmа1jO㘖X_%!d\b>PmpletEb %2k BՇYyYĔը۫f-/} ףk&_WXHY)8-Gok,-6sA8IK/'&slllQl;>8恑~Nr悀Nr/L$_QN_z:m2 70%`jq?iHtD`֤fٶ'rzF&oX-|蛧{ W\~& |Ya9PK¹})b E_qs9?ņLko*oCHl1G|IX|fξLsEĝYR/d aU;DMj;mIX"Ȕ4,,FWoU&2jRDKʳ'H|ć7 3|>oYiSSmʃI7<(_J )BhAh%nSE֩WVJpڲ<Ăpf1"ݜ>D SigX(jwD䀠+#cJؾ<Mֆ@dqI5@mS1i"hkvEY{ .Bg#CJ'\خ2 \ Q'@Չ {b! ۳ZDP8ғB`(@(qj" !jW[ ՕsbBN8ȅ*81cf FuksFu/ZW5R/ٵj_[ 02 kZ=uuC1ʡ4Y(F@%.~׭ڈ2Db(QL;ʤc^k>:B]q`Q &%$)/>@Ǻ%twϊ2q'^Jl.KK;$I@^.RGKŷ1⶿s&Jb0?#)| FZqudTwcHba< )X*n *A6zƶnN=pGhs>3 ov؁].[/ZJ+m_p^>P\ Ϸf*V CftJyCuBpF*'4c y0l+w`Hm m XW[3,2P/7SLkP K>ayxw+[0G'8 TTXju  wP|. LVE}&ͺYzgs\+  zEH˵!26GJkyb/NJ)YMs]&y!ɛ(X\%ȝ_ZL Bs u+TF `x-o57^҃J]*Ό tNB=)+מ)Uɺ&/<- ,}]:RT12o;wVQ^_Mq]!ʊ0ζyj䂳a;䮦m{Q'JJ6'5`N)gьBCܠgt%ּr}3M/ j~g܈s>Je?99+nMT7@k:NP&tV[48@}~́T%8c8,*`و5n=#xzPpYqhmۣͨ|76ۨ nnw/("I[*4`V`/VPMuɪ舑VTp~7ƞѺL(hҕ:~CC⦃'ˆBAeqk 7-kv<;3{ڣ}(iZJ 8_.T𿹘׀P 8349nKCT,Keihج~42$ntWc{YV5*%u8l-CNCј"WC|p–zmv*͓>#{ʮ  zj$T3p@byyLAGU]6=Vr(y0cH!CRJ54Sz LZ4kkq?+{@h$wG-+M;yԱEХ£#edg,&bKǫisLY}:K=^gfUCط99`dZě xgGs PNC~rX&vƶ.;u־?t T zYj#.Z&t($HpnHO\} x)5Zڱۖ|F.׮|D1#GW&ź _[7f~2W!l'AI%_^.&0E StK~YʗLNS#!a<%c=|ܦ(b5 q-Z&}\Ѐ+LH;`fn?Ai'cSL,QCq-αD/dH)x)=0Rٮ%Z%K΀L7l)9 iVKs⍮|/67-xh}'54fl;l,Q dQ3nb7tK QŽv8{PH_'yF+Eg>A0 +v #d@q | GbG8 tW>xVp`&ﴃ6Nd 1fD@B` &FٔϴA@ uxk*&/mh#nƥ2ТĔWゼ,S@-E7>n}\,bsoJ8PwH1I} Lc}p"F36]#Cq+,Bb܋Ĝ"Cs[E˫6e``m3C') PEg4XE9&=qУ`QTۡ\>lM 3~'[p/1F-ATa2~vҶު~\# ٲ3\73H4б%nGޟ[ClxE @e0aDN[ApQ#{v͆^M'}(q<8!6 =Ƕ^Kw?=%]O;֢PfW-'>ӧ\`ϦYW*2Ag T̓ #R];2O9KyT]X_K3Rc4?cՠp۸$ :Hz'fWI,) "/S9=o3&'u cՁPx02։ٖ8&C9~M۾EHhx/+_COsZ_Rut%N Ali[9r4+4ٽ驫-Xe`Y) OX~)اH.{ 2m;ߪSQl9p3R֐S8!S9PE04٦k뿧/GΰF1}3L΅RBmU2W Sl˽7-,-sA$ ;np;!3~P6&aS]+{yJ)&nnBvc <-{iI8Hz^ (}FD"ȗȤ1O(bꡩpB/Y%mL.{Ka hz=;FѺ.@ q-'PEJDNqS-rU/ʇOUm<y Xmr"`c6,x4>t F  1`>!zXXzPl.E N} !T?&aXKAN3kBMD<&A&'5ޭBš jז+c[MU|HufK^xsI…[JHp~A4Ye9<9UF破y7gnA 9=!lcv+$ *(fE#VB\m(^33a HK`4D5^=nPLR6$@N`/R|;%GI}f`Rj.6؎e2gTy^' so[ؼn_"EƧmfj}Fy&`2*"0~Fgz/Fxd[دRE$| DR.UD!iRM.iU91^8€HY΢W sIr)B" sVP~>MYz4g$|@p ٦4 ,u'&,:$m}xJ]7C/zss=^ @wJ 5MG$ΕZk~Al5TM]˥“="ӷ#W۞$=xd'x 3ѢluV}lH @1wH W*4uBjPV79Ow S^HyӚdh#Sl!"ZI=7} }Pw.N4pKFG/%XIŭnBjŕxDҬG:=^DGc# RYt-ٜ0{KDȩ q []Τii%)Ɋ1EE9s[5]l\ \ ps?qI@k艶|χdǽ%:uAw^v3A]ыc'1Yӗ8j s?뜇9BdTBr54S2 g> y;#  +mv:Mjsm~2IL"I*~ 52dhČnm_ 'GMDd!JB2]o" sfeaw?4uH̜1j+J39Gj9r8žf_t%WSH6B>pF5[&R/ok &{YVл?,r*,aO6iz TwItᇶJwT`[eC֑u1Q얃325[+ofñs =] y߉S-VUf.ҶE=Z۩ZPiY9*H+|R {GY@HIzL)Sn1ŴxD: zbqv|٬r,CjrY6D #xj5mГ?ɧ`9fy]97^]=:9u{sQ|h'c99}LЀQb~3DHcC16Qy`[iMaEfUX4e,ltL=B!\vЦHk`4[RƍE0Td3*cF0" h +\JÈ:)ts}91}~T`,> 3^@n]O`MFAaDSay[ 1xpQpA^ ;SG8+#,^P<, oC2Z/,vxnIt`abg>j"tz9cV#Dy? +ά+RW .S/(p9M*Z€op/`2п͘x`2N}V[ L6 A$uk-KdFpE`çsma,-5oV⽀r1I nV)]b`wT&Ǔ񙔽hxz%|re~t6jo]G:%QFIaەL& c}Ӕ /[곐ϫKu 8b݈A뎩 |{# Zϙ91  N1\Lcg[E!GAlӀ ƭ)a= Y䴴ދ깔*LbGӂ,ap%zH9g6ȊFb3Rl8HׇR2qXxDmuBXq/P1ׯg6 }%3 ϛ*IHCt&: jzf]tnToδ= 3Un5+DD8 ;RBdz5ڸbQ6{Zj~k7ڣ9V֤ ~yKH.y?DCl3^By~%bQP1p –#n7ei *pȫZ mA%響 d.%oRRSF\``Wg׭e%C,#4Ù@gYsJ%}]oʐG&~S U5DgƹɘO^0=PCr5LKx9EaR5GłBi4Aճ¯8]`+Zv@(hҋ'u5y#kH<_ـF *2SթC 5!'֧ǰߞaMց%Ueͪt%PJ) rrڎv8%kDF~WĦ_+ 1B@/ XeG|Ef8<'UFhĥ2^~\cO{$=ެ.ITum,{tmo[_[|Pdgn%XW _Mg ĩSU+o6fiT\sO'\p9};ԉL@-bCo;%ĆlE81+&DWLH6ZBu@{cKp9J棤n2|sz]BB:9嬦>jU 4*8뜅!Dk/=y JK6ڈav g!,G8EW*{"f{'5(1ƒ]#qƪyUdМ*to[uR.(hkhoU>uJR rW c}p$Y#ٛ|VۜMuR:fܸIi3BXASlOvSx"+_*Mܐޚr|bPW !uO^[ m2Gkڏ[RW=6՚,ձC> /w@řmӹ4,Wv2UzFjEvo1e =* Vc Ȕ9%ּ`9BNڣ,!csѬ paj3oygs_oWܢCbRx4` |:[vR> Fgaa,QGRF@l@[izG_~s zcO>ԄF=.VCzV g֑pل:OT&fW<|&:OC[8)\d iۦǨḰH|?N>TQO'/[%nN+q/߿EL&>k:b|5- 2Jkc573BAt†("I%R"pf@ .ZK4.2z_Aæi3>v6Zo Wm+1#q%y? B) 0pe\|˺ T S &V~?>wu kxxn4^'S_ќ$AS17wc^2s UTd :j{%**,I禉لݿ3S6(ZNȳo1Q>"zkc0d F U,wOEF/?WSͤCZgnuY%^RCƐx9uׯ9L qUQy'Wl,~ 3Gַta*'Z͎M3'*Տ=FUS4( )1 ;&T #4=eH{Bؕ,X"I 1,rV9 < 'S&)D{%̬hv_[8*sWtGn9 4*F:=Ϻ6̾$CΦ+{6̦xMX,"xk#VOkcSFTM$YS ^-[FVH H ^ÚĞ ڲu|9/NKo6v᮫-ڱO%Wk EՌB7m֊ В=&* q(͑gHz+BZ{0jyQW&0_(i%i@O}1sgh7"ZՕUH~l [!@7|9b0t}H-QA,=db!h̺%)=;|(;\ߌ~:Ll3+䟉<9wıHSmaBF.=)b&F.Kj-pkfnqƃ p2Qj,3mSpqq6Q-M [>sxf YHD B'KvabLOK^ʛ罭|vGp.%JGj˪GbΡ;2\p&fg+SIO#SdE"@ZE2nndžiD^W3!un'71zUz[v7 >jZ7vtD n:Zl"4sXLda~;*ƞu*X U9[y??ʚx@-SϭKF_&Kąpy#HT.Q#-%>2}5U+qVJCk:s)-Lɓʤ(c,`K-/-R-TkQy[;K?[K^iڪ= *Tzz1*xV@U \ $LGRi|^o>FFK`3B71[d`72A4MB[YGA S23Mib(/u@V$RT IG!h.aw Q$n|钶>WVjVGo8Dwx% !"H\ZQU+d!Q1"nԋA@L2+Ï:!+d*&fPd<y5_0hIZ0dJrotZ#Ny#;¯DRߤz6Uova%޵%+vq`D Yd{ZìdѠĺihOyr0Ꚑ`Ie+9'z+N]Lu !ӢLZ_Y=/ýV1_h|tFU=T&IΘR8ӆRX*nTfE.YLMj_E9ZN,%;0 93+T8ORN2 Q"bSNϦM;}s'4Le,Ć,`!4yܶX񗐇(*8Yp)ۙZBu\Vv#|,RMQa+ѮcyM/PaIՃ+եdPGּeR[`!"'p~VHoMsL.Ž-4sѧ{a8"F&$`SV}e'nq9' 'L& bPv*SI@ђ 䑹gX'7ь`iS{޺VA WΕBjA^mlp )Ѭ+MrxY;iw;s,Qe.ݿRtW?1^Q&(XBD )\GݢwQsz|\PKS1Z:|KFϛ6:'CUC@L.iҖF7 aO=O V`rrkKùtعPVM:.jǘ=:x[.?_qՋ- *1< %ڄ8ywp+'&:'᥾f@􎈱dKхo[IHxMk!߿~ㆯVDmm,Cˀa|"|S}F*sw2{K<R! /)/et7tvŨO@XʳPt*-!yPXr۹6Q&PEin!&1{&L9̯+sU#< U'WN:ݷTw8 kRh֤;)xBʧhiSEZ`sz"H;f[G8qT8M#ԸK>B|e7ne]_J5=^H(`Ez]-NG1K]VV{T2}u׉pGm#(h#-V΄04~d%FI5Zu&"ۃ"~|D]""#"d@ˎ):{_%` 'vbT>95Ӆ1V)`@'B993bk>gJvlؙĈ۸W2Q:a,{TX:2SB)n`&%mЁ^? -;HFKo\#oڼчF2  XV襬T!~&qL5P]0%c;Q@Z^%t#o}e:)TK3|l9Y#ŗ9Rb_d!!I.aj<=/0Zzg>#%Bk9r}{gQiirmYBeF/C2bI y[̄h,/D @xxC@r 1DChŮbf)O&>D 8o * {O\5TT8wG4̋Dqc YgsXZ0sYV(W9^\i9D: \NavlջԺVL*"tNT\ki~7P 7dU4jx' C\V*U[[hZ,iQ:άcJ-@mI\:w#ƦS,O hd6Zi:$l@ g%z(I72ޔT:u\%Z̝|&0N`{tM8Yt>e8>ֺf8_\Zgc?wPn%J{}$I#P~i;I'We˅V'P xDwh"~;byeVĊmI_Ϝbxԫnz}_rI![,^z6 %#BR߬H66Lyh[r6mIĹ B3Ր+9q/.%Of?9 b0Oeiȗv  Ai2ξ4oykr5^h)>Q/~$7|(>ť]g?w5\3Wdz1yWBd- >P[WV}zm|lY#i^jK)סa8i@RM^Fa3sp(^e ڱ F$X Cvs $ZVW]k|9. iFFx`{e AR/ś~3ARy/PYt/=oX+ H\r/lԶyE\F,mnQ6'+x/O$*l&A wllbev*Ry8F`" w:k$nn<@!$6 }{p˱U6D<0K:]Gȉ}޸~@(SzF wl A|݆كuJ/2gf}LT%Ψg;Z`W[ X/ȼ[, [Z=_ZIP[Y P+~1\(^' ɝ,Vv (<u9D΋E⁁fܹ$/!C85zߝM'vm\_9Mm|CUz5bVd+L S#PrӡĒ}@I$U^ƅ=x55[WOFKn&EGk9״{]Lia5jsv_nĈ^\7ogs?ʱZ*6ظ4~DŽC9x˲)7\V<ļ{ S#aE8c0..*{+O1)1 |Ir)eU#tr۞+dzK*x]2y( ,=p$_E.DD_2{E5Qxkk̚wouxܟփ$i;x~`,`ܓλ4ghMR-<9j2KPVHyfXVW }2F2E5ʻ]3e9<ۯ mx՛ᨡIk1x1%>k(4su:Ðdb-a(|3zy6ݱuK93SFzFr#<%%Z6#I8>\r`,> hBm.xv=*W?<&A%`|=Qzb\>zMf=ː4tQA>;>r‘5-&㬺ћ:*HWW?’Y5?L{NAattn[ѳ{67}0PI5YvV 5a"F:Y?o6M#/Ikˏ+Mw*R\cXMmF/mER1fF )3KT{{}l,%}|EfdJFNMr`+As|spCEiVFH~<`Ѝ4NЋg@)ynpRg "+Κ_mɅjv;Uz/:Ut,᫗CI44ev2ܘDpyd0AN~epbӠcPjw=;g!4N8H"E>#rooqZ3`YѿhPD_5L{ zz/AY gPqh 5q"A:-#uaK.Z[Gp V@t-<[!)<=+fU٪X2$Kf5G!oCؙ8=VLhԉO.ZJdјYB叜3} TKqzR#b \د]iůWXq3Nv>i;VȉXHevkto_SØg Dk'B|2/֢pss{p ~ft,_#/S!IZ{s5D[GjbEX4InT4u?lp]ś< u.&zKw H=j:H[Ri ʄslo :IХ13oت7 ۽3#U &ta nɺFS9jWs*И2JYIfo;>cVNZ͸.;Iw'cR:FMV9bhگPtmR(b!]b6#Kfekg&'ԯ<H)]} DswF{E}RW>L*ޞ2[0]{ȇF9>x|?*R fmX(Ee@?lѦI!{f m=Ώeȡ[\] k5l/X%g&,ۊVjIr(VWV'}Wt :ae&0p,V<G8JjrFQww Bem3p K^aڮaτ,Zs[±Gv7Bu=#kbbwS91z +],^,=^NDR4h= x˲g?Yx6_U&jg01IJ[EFd3~J5ڟ,C2y*q茝 B"l|23њh{^ U\M\_4ةS䢬\\#UZDN5Qfڣ`tYZ^{11PZ`i);3!t{ga"P*w=1G_:lz3{ob!;3_Uˋ^qIo 3_4!1[ 5F[mv(|QW%U-Ccn֧:< F[@3+d`y9wjiG kvS ݋7p†-g/ԜsMqA/R##{C.U׼61Pf??:E%oySb،,s2P^,-/#mT\t YިXm0PG'$xcF֌2(]t wa}Z(yޜBBQ@V^4<Ŋ!Vqp56]tQKTX5vovfB6Hl6[n *fZx.+ɬq]!h')~zV.%@SmL7i| }vS|S 9;C*'LRA]4yZc#( o&}@nuD sЋB?p˝ mP4 &WH2%wzsm1>[38cCEDO8ƿP Vw-Sξ :KŠmE{ff0qX37" ±Xr#`N<#fQ4cXlQ_`%-!eᰞ^(zn{<8 ^QwaJs R@~ax]g7U,` ,d;BT3Qd˸h`ZawA׿PmdIE?}%L!jL*PϷx I MPrP"Qu4$.v4DaDn7EWq/T"IKj)n^(NzPHUR?p_F^F:` - Mo+vZ963![E)\n[so6VP7Ĵ俌mwޢzy~_]OBqsuJƪLDՑyG7uX!DSp:8m*@c:?$[-0SR?Q=׋Ti0|ܩ9o_lH"8]*l:;kvhͱЙ\M&;&RZI4(} 򜀈vc$ؿGw0pqrk\m%o` o2[ Xח2XTpYזg YZ