python3-apparmor-3.0.4-150500.11.9.1<>,ep9|P' W'޴;@%UHh+vW#ꋚiki-OHIehp;p;@)# ;@ ,8oI ]Ҟ2 2\䭁=m}0,Vq?XVA@ K x6k$\`\9%{kƠzgbk#(ܵ#VoIDT3}`*\/amC),Z(*$Pu:ޕ́mEcKKpgK2>>d?Td ' T= SpUU U HU U 1U UUU.TU 4"("8"9$:.hFGUHUIHUXY\U]$U^ bc{defluUvp wUxLUyɠUzPCpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.eh02-armsrv2 fSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxaarch64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eeeeeeev@eb`%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-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(aarch-64)@@@@@@@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh02-armsrv2 1696247785  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-aarch64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5aarch64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ea2e5d7a1a5843db34cfa5f08614ba461003510, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ARSTRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRR RR RR RRRRA1~&futf-8f8591847d85ffecfe06dd6ff3d2e2dcc63f8ad63c1740a8c9284e4a9ac108d2c? 7zXZ !t/,l]"k%a D岻N91nHGˍC*,:> I3A%`#h ;MlnR}i8?0&]uݿr:l-{7H2)8UUPD1M(n|!k 4 2C!O-k`Se58,ou>šb§CՇTFWv;8 "So,QdyIN@wf$^ȴg X)>Lҏ䏪,/7\ 8LS,>l4:9ŐvW L$(*`Go^eȮ(?oboB,:%2D-ã.@ɓ{+A˝L}LnKF5@R<ݞ (Gk`tF۶L-<3, Ǧ2{S31NJYnIrgXW ڤ2 :K~"gTa%yxgRI:os%KZvm̾9ZJ e\)&])ᓮWc;P-Q*1!W*eəM[vMqg1Vj#{dјRtS$J(ܯ\#_u%G5v NHo?{q~(Xj xn#L!y#m\5TM&΍2\ȇ[|XwYYɴV"8R E7Ml+^Ht Zz+VOE?lu:P bydmzAz$*V`팩4[dck]~qcl-XJͳtc mbanX[~k/}$l'IM9h^wpTU ~:*x^b# eUVNzkrI{ow ;';}J7lUc+6@Wp8ee^+ʮǾ`pGv^`c8 4ih!UQ't?ۉS2bSu} `Wq82 ;rSIRޠ[: ߘ7A$daQѹg\s c7TiEV"oM2|bSҮz'V,}FW}Vny &l[X2!?,Q;A}U6숄>&yn OQOq2$$Zl}&Zt>Mwf) e] KHEbT}Fz` <0|}!xףU->*kU,."? }1T>#)#jםE[Rmi沥-$˝&pE_0+;"n ' a>=Hb}moC`p*s4P,-CA,?;ú9kأP֗\PiJ3t'a>a\CSv E!FxPW|άa=/g"ԥՖc-kb5`Br~E8=Z7rDHT%v3 Ӡʅr&W-v2 o`%t1=SV=֐pqyܐ9J HA8a`et[hbf9N~cpΦݬ:ϭ>tX2٧'s6j5DlN4!|_Q+ P=$.$&꿉0'<4捤ȁΔ|yhl܈/ZRmbwe|䲝Ѻ9 ?IRBCPxjz~DJ7(IP :2<'@aX+6vi/ FuMqXܿkč|N|1%B :D5fg.JЁwu'\EBUjc<"@#p3/'W["v0:CRu8lYƗ`&u_nF4#aQer:e0WV4"qӦO Bs&`)iԷZIW=gsmTݘQ@e5vtSf{2HCڵS#LvpDZ; = ׻!v,CVڏ*Wf0kfs-5g)n\H pR@YC N丕0xt"(|'F ^%n*=ˆBJ|!Z-I"Wc mOw![7˜\vFT3碖<:9ԁ>1o @XN~Ɩہ}@8H0EYgSZA8 (1'URq8{”%tO 5eaV:|p#5!iE- \/'׿ 0wtM'Nz`N`0Jg H0}3x(2Zgs.*ٻ!|fQ])"'g!mX^8ߔ~uqGV㋷@-AڷiEmRζ&|;X\u@%yF PWdy[\Ljd3b` 迳&2ә/cc9Ş&΄^d(is#)&f7~Ь~w3ԈZQ4,n /׭#3Dc6 y7@7HV;J"< bQp\Uƪ>mDM}`ZqvSZu  U@W]dK hWȪ'7=ۇ5)8/Y 1wu QV{ ޯUTL\ d߹X Q`qeeN´mՖ e __NAP Uדh<,jd1*r(zYUEfؾg{KYcƊwH!';d]|}<8t#ǢYc7Wja‹-5;`nD]B XVSRD.2 gπ n5U&:Oѵ!?̿3- Yl E(4R٫!Mtpl>R8V Gw4;-b1m 9 zt U">뽿 8v@A*!6%۱uA.@RQ}%/za޾Ccz!3b !F!w:FT׎jB렧)1Zz2Z;q4퉹xlv/*Pndޭ2&bSXEu v4+FP<Tkk+\=qEev|ˠjABs%>`m5,_7C߇"0>3V"! }ip}Q= .~خԖ2-MrKďe /nx."Lmv펪nhd8Q6Gh3͡kqL:SM_b@ gwWˏfK}JOKQV9@rwG߲죢.{#.6Y@nE8lPsI ދ=J c;Ik0 V. 8OHdO^~AplyJ݄c@Dzj`_6$|sq@/L ;OJ+Z"XwtcxǗWM?#gMR}ͤ2tw Oǐ uXpF.ݩDZ4W:5:πߕIc8[xcCs\BL@0\IoG K$Q CгJ6l*>gx+}Kpln<|)ÖbMTV䦫[.) h'E<)HvˑeV*zYͨ{ߊ\e+t쏨 s񳗉feԶ:!j0 ؽw ΝR7>\і oQ ǁ+mKG ʘ*Ae`ޙ" BINdcYKcʗJ$%e ͘|Wߩ:{CW{CeNȞJ0)M8<>g:Ќ=nttr @"X=tZBqnyu{)peȃ$A# #4.qk.A  })g } K"u6R0_+MNV^~&wd8h& cPN X9{;^-b-dQLDyx ܪÅ]7;- ʐ\XܹɄ@sJx({N\p buYbY_p~^]L` e8?KSNNE@eE79)d® O+FgRHAo(*GMڞ!HO]2xć iQ^ !eS|>+dl$SʼJ&]1&ZxZ3uX.s }eV>ө[_ᵁYFqA#HE}!Ҝ oTS"RoI8/8ODe~I9s  D<5tpd?kzYK/o4s5gVi)DGallfFEƌL h\%)Ho&47Gyw _`4I2S!q/e]WD9F[{J8 4aef4d,6Ș[QM%nVXcYm?Åm w@ZWn Z[%CFj(PRJ!<2k^cN+$ 6"^y>+}y?D @fp wAeW0.W*{LbD+F\ѷ׸eU8Ae v&) xPNRhe (/f;M]$-Y0]BVGdK-]n9iSsNYꢩЈ}_MS߭K $p sD|wQrZc~a1k0C*ùnnFT1'@RgnPkAQ1hs,$yمCYq ă< +&)ZkB-JD4 sP^Yb+- h=wա$AHß# _!2 \݂_tlkcXl2BC**#G>/nP rL$kދ^rQN%?9ꁹ_|~i~S6{~myk2<]WdWb }Bk]G1Y:.*IS:8{̼&0Z}ET#-kюhxW&rkeS% gMƜis+:p.RE{K<!CP=Uāf*,6x~ ~_lkJh v }lA(A Hdzً="=ZPn/؀~\j,i+/M} 1x|6* lO%jA U/:FhB"aùDZr$عhKt_ԲUTq7u^4 ְEjՑ/HIq&fbw2݊a5#Jy'QFf?jǏsQ7Uzˮ#VM& $%/֌/X bkV2S+ݍJ!9W+(%>^Q"`\j7Kjkɹ GyPI_5ht͗\zJj1Lsgf=GB3J\]gof͒$CZ.Ϛ Yh_@W9*<BG#=7"no1$t\>ix+o]{gIc/{ F,MGbߎ$K[B',"3+moYSA, x6aN-9#|mwG2@ Xʽ!~&MCwLG϶Dw?KF u=R:W(8}`ˑ nQn-OIi -#;濔t(vV&&bp(ҩ)L>"'RHnkRT6Hd}@Q1r|-'{pTs'Ý?ȃۛELV2ar#J|0U{MùIZ/m`Z_do%PHL3T8r0+i[_ UzS~1BK>]@4Pc}6{ q!90&T?AYyb 7(ƾi(v,:6\#~LyO tSwuMO39әVx $V|)<ܾ:N߸U{W;fʷ¨7뒣jaT" rFL 8ӵAsIq\_'sZǦ Dd. ÐHAmH"*ϚG>KSK WMqyPZ++ r3%G\PӅcA;ئMQҿֺk )wSw%zA`wt ?TDrL9-{ IY[1VqS$,Qo'+'  tK$J84cu"'gĀ?x_ѕR!SҹwEyrNީ'@/=EPT*VPcbj?UڐN*_#1*CDj4TH]Mݙx:[CC}ksx')nUiF_Y} {+h w0I4nr+yɦkrӜb4D$\[],Tk w2'rvwz방ޕwkj` Hs&t@C'>iRwyڻ0*Of<bK.q΄"0^.m=:٣@?o,TVl2VbpyS (i:ip+[qAXҵ͂ &jRhoFE^'K_8fE%]x*+QTJxF(M/u_pt 9ǎ#[2ghƑ'3z+*_xlꬂO1ReY`#}{dJa]}Mrx ƍ rtI!Hd3#T73I6xK~1U_yyRVIaVJ{Ji2Z"& UPALavy x&Hx89Jݶ=Qˬh}*=zO[bF*28JӋ' "!E_DPBϷ6IYfjA u H kУ>z;n6~"թU5wa= MY@wp=rKq`/٭y)W45`8qcF Lʀ*ҍY)B--H;gr[lDݺ7tblP2^vq)PRQ#ʫX2c0B@Qc;`Jl%5SR/':șJ5sQ07iάVAkO5o9ROݍ 4Jqj"K(ƙĢ* 3eݫ΢ؙ>wກ#]pyu?<ˀtsCJ#EKH_VL09nZ* U㍩tATj32N8"%Ca2JWލx] IaG/VR\, 산>smY,3wgm:33࢚\xN+V؇' j^F<8$|6ɱKO_2,,ry$᛻wMj.UcF 僤A>ZdZMHE*W:FIQ0HµwG\† S/v\`0uRsNO) K}F8E-?\;D_7W86'D:qVk_ޏ\R!l$Ľ^pY3m>mVryzw9ߞPP::ֵDg7aS\ dBZĥx\M!Ļ7Yc I: tU />5NfMX;u\?]?ӹCK=2#U lL3W<];20͓Iߥ̀djpy$NV1u:,JXg'k;چtuB4|B'e"oiva})&FK빏F3%Fv#3OHS^E6өs!V,U&b]䒕L*0t C̣m7KoU}WUhWXexGQ[8Ys\av M7BDEm> SUSI7YS5l54Sm\ߒUy/"oaYO `ݸ0rNrɒm#^b7qme6Mr&1I\Jg^Dqx*qD`S@V%XAʄ>qW44*+s_ˌ?4 YI)Th-̈?|&= k!'ZgLS!@8ڥn)8,9TxL:0` Ǵ'z`h]Q^~&&-'&\6;/=8N`.SEY ڴik QSreKs?uԐT8ʧ#j`vJ)MbXbQy|ANl2o$> ![Ql1íOnTvk;% kʳyNj| jWtm&-5C⇔ge[c6p]HǾ7딵ocGs ,=h_ [C~ ~l㘸KlK]4_q#kxVjoyѷ&8~ =HMZ'lᱷK޶>X0M{1c a5XR9qo۔9? ɗ@@Į][#̚闢J~d`77ˬ7)cKh,/ KCq$6YP-; G:KIă/N2 ]Okk/:9oM)[`⇁WjY)ե*8rbrW*=11/σxJGbc'o8vZ*좤 bڮbYr5h&A? ,ܺ<}N!4l-Zl} OrMx}ל+rf:$t}K$30'Pt8sQ%ڟ !Q@qz>'$X79 ޼;Gׁ캽h38G6 wMMKElZ\ݒ3I5,KW=2z^#wClufUm8O89=W9xeHB8d8<1i?%^dXTL A ӦZDݫ sac FZh^~WxR-ptQJm'q`@9&o-N ID;}@i4;>Y|xBtd#y3jo+3_9f9l*((ݎ~t3 G~ Χh렳znN+Fnˊu(x K.,D'uz* eYC\qK$~RS# 0e[7-u2s280.E)!CqD54Gu|;Bpb6x [L,ݾ(52\lvlw\J)jXE+ Wz^)0l]^__Bp qeBiˎb{)[b\2F}IȲ0Q, ¢"$_amrṪIh9ޟB-\J}kEwVxB/hT܅7k!<Uv䓵8rNhW ߝqc#/-'4ϫZp^ JlχGbsC:Z7N>aE -sҬ紧jbzb*i;=%Vt5t{sqpoe-]&ᷔlaZ ^ CZrOVڙ?;ё6m!W(K/]p6!T֩?.n Ɩ`~ln#6Be_ed:'tTJ H&wdXӒ Esכ5[IweeZanj[ $/>С#[}Ӊ;/p(>\Ę6Ϧ6laP3Jd |Di8IQIF/LPN9` LÂ6T$,.;"N*&;Y$1EA1KR{Ę&'O0i<>7,c ߑ*GWCB~X{23"=#9SGeN3)1h>TkF mRZvavO?Jز#KE񹰘XW¿ӳůLr_ ^Dz9SnufLKH/w4d) "h/fPd(P-2[Vu1/Kz p8&oSؖ ȵ1Egm6⨈=z/+>+ 3͝kհ0#٨ZӰ꙼ 6X^ J.:Jh$fWy▽Z3UmQfbu 1wEs1=' QŲi50.>^-mG1aɀw*+@tUGu"YKeJuk^:O^UJz$gdB6Zn( ظ * AܤGͫ7TϱTON0鲮Rk"'VQKv [qM,Z;&@9g'5lynDTrٴUF,MXK*lR-a1M Mڬ!3끒Y,C޿. d{AC`0RF d! NigU?3ԗI]#x`=;q%WIaM[KUeXڟ6oKnu},//*YE7j"jR#*!,~ȉQ]C'kl㟙X`Z7"&x{%qTVSʱӑ~H &T 6ˉ.E8fXg20=˻\laV'M%1?^% hÜDږQiSʀ/e<q335kOMQȁd%cd`Př\p Wp>YtebNUD/Kޯߡ $4H(ô'8`HYAnO]az鳄4U^I=@W(-طI x6E> ^<\ !!y._ՁN_(ʴWteoy /eY/\`$ >Njj)XE O+9%wW"ft%cMz E+&Up{G쮦\TTI;/q XY} =:ۼ1N[fȾ8*>&#SGi[3LC* Q`K"U$LEH6Iw@|R|x_ݮ:4 iUoDu&Y7IsM,Q=swc x<$6j25n'`RY؀U*وדKQdžnW|"EZ]\ 9_&A>W -qő< %a1wW kyȦF5ǟCqN 2ےcd}ΨP*h+6 hA@t|̂uƝYs6?f]&21­@6ڟ6[C?8&Y =$M,$AtTḘLi i\c`=OMWYnt (BQb2VU*X'g:q4v(dZp(m<m`څIU'Fl-@&须/FN")D7wDj~$5;e"nv0M}kC/Xf9,*ᗁ H8~X&] oO14![ę[[NTbArgx7eApJ;%mcPPy9v}Ql5f1CTD{{PJS4 YO&-ew-9hVDQ ΰ oE7&|fj$RX9DAŹfHC^{clSc}eBgOzIEǒ"]ǭ('hg*2 ydKebPqj%N7ۍ⦸uV !n|UXuN$Jj> TelB 1EŢmn?/iba.D T?k! %ut^dp&nQ6*m_3G‰p؋\beRf&lPp m`a:Ief?h=xݶq;)VluمϜYj͠yӱx{`J ۷Y31񭋟 w'waFA2{T>8k1ۤCXG-ctnd'u*jk(]9@ ~נBNCIpDnc佀`:(.Ȱt&.8+|Wc>DcAH@JHM~(;m$Q4˧ nG{sRbi훦+NxLUEZV/ χ$nyIu^.AΡEH5zG79ArMpIסd!߹ e(lN&?2y99b"Lx8<'%¦:žm;G8V4%@v݋9I]onuc9Dj >+oG͕;ayc'[- diaT"TF13/7J >X]e EiIO%4(N=,{p͛ 46yc65<(FgN>V|&{G|r$"D$D|oUкCN Zci N,B.`9炥yl6vvɼ|D>+j{}Dp2NƼ@YX@Y.:X @C]ku7Z{ 'sUNÎ+ݍPb_C(N?hS hp)xݡ2cʞ]s;^.n%( 6J(ho jF o^VKPni|2C *P5=L;B)t=vFH,QOcW1."4 V{ [Rp/%G>kygOϭRQPzYdjGT-%cLX{yia 1GBe3B& ńƄYfpjVhG ߌJ;9oc}/h-xX31K̇HeF%,>]lWcuTD HMPZgzY9@QΑƑ׬ PƠbfNq.5Z9 y#*P-c`Ul1ׄs]Z 7D!hoVi`bTUnԫ_! oT DzEIrl4仸;ث'zK DXQm,`ۨ^RicAq֘*I3)ƯzM{kr#R' !| v&2 6\ ldߔ@X {<RL%q.~{' zKսc{Aa33aNrUˡu.')aNS!RIX*XI KMem HBZ샐&ڠ&YNs88' Ӿ 3zȽds։i&څSzAZZYĄiQ@| ٗm. X5m8IcFOr#/HAbP:M" 0 Ց8Q5*aBe{z6ud>7y.d֙aoNl`qv-_!([08Lk#͸&;˜T)yjP뛶326묍0fF &T WςїJ0ӧ xZ"M *Ӏd ŧr2J‹}8ij.h b6hX`}J#N҅0߸ЦcAlez(jm&!ۧcKEjdEb=+@7w v_|E *u?>gin I g'YeO/xFP:N t]1Q'U5A[PGPwH3nJY->TnIFə Z#8*T%mnܷz7@zސF ey;ě!~?CoB)c6 Pڒҵq09ThH(If MrNj0x@B\==qhlI&ק:/t6+Pc*!$ "1[ֈڅAǧǬΎCc%-I0-TGJοkeG}=D[nf{&( }I@) J4DC {BGieTEt%D; h8Bwop !QFuÕǜłNye:XVFfcVixpT,B6Jirjԉs\#ayZ)VOhjoAqL u™􀂈.:"h W1quHo|^FNA~`BS`sAZĝaS[2a6/f0> -W+WAJXnKI?PftBvѽ Lu"\4ki Ogcrb_պ5B3]98ث|qA5'{{;(Qy Gt IZS(ySmn,ç~ɨ+,.\D̊u)tvOB'ϝWw㭼MHU u }>rr5sr4$/e"dX%n2(MKal>?hGϝ=Cچ<-^=GAv~ȭ YqLߑfZzHh}CO 1ꂜ +NDm5dg [:?vRhkȃ˿2g[I=M߸FQK3U!ד韮0 VBCLsk&8Rһbȝ7T#8VXD U>`cRhSбoODJB:;HH=ңj(Zidpi/H/>F%+! R {C&@:x#Bp' 'h*${k;Lq9zxUMІ͡A+W"Xotqs%#b9u8w9:g@ ,J(XP,)"L=xͰj(;HVGO>-/f{y 6ʀg;A DA4DA%d&O596> j˔ sԜnWܡ"?wgvzGHXk0;Ā4ZBy*fTHap ƕ|,܏wOۏI,6Kk[b*ƆǠ,'AUʘQ!Y:#ɂG'ktacn\r.Z 2-aw5>BeU$o7~:m)2GP-nzwr[A.ny8B'Zᾐ)Y|kjuC_"|LqPhd!"$6bmЫOY.1$DƧ vZ#ЂjM;XNF@f@-rQÿtXb u71ӈ,{{GJ QPBfߘٙJa$|C&U⠱d6psYֈr.F܈P"㠻(4< AydYG&+jƶCQ7ADzR;1/Re.7.vC]#BXH<_-ͳM? hbŸn10.֥{+ \$O_)`hG;N=e|M6d^.iT+QJZϡ- `r`1\%̜a'XBbz:؜[͙}y39/ h:/1a' !XlQ"zIst_P*_+'`MZ01CpHb ƫcC0W%bUf|=Ul\7} (5ƫr3y]/{+@+xR}Gϫ]6O _c?Kg|/gqoKEH;Y8 ժ0x9xJxCG@!{ 'ːIz]{/V`xMٮʀs)Aɰ'#y2e( St#OPqng TM2 R .zyO_JA rgY0 a7oM'\ 'V Cyg4 ApNa} kZav1ng&v@*7%9Z)$8E MlBʥ T]Ӷ5w5vGeٛ?Yl/B< d Rn`ybk镟azX̗xx 8AHT/ Iv8ǩ!E[86wwJ}^%=&f:UamG*XWbJwLڡjh {#h#l +sExۢ'oM)t襀9vo(k"/s؈ofM$PNgOEgpƯ+NfRTU 6sB?HF hPI|ޛU[ȸw/M]TM4UeHJ(};q"oDdh pTa,6 dP;Y|cM,3FiK*&.ݵ{7ݙoٚYUжL')ݾ,7|rsyG:g.#¾Td( {Hٗ˳Z w ݶf`L  䞾heÕ+V=V-r..6}0<)a$2քyaX iE##0M <-+ɟl|+ m#8͎'"+wVL1!# c:_paL\rXUV:5h׾/z?M+@c;Bq "V_}7җZ?&9Pa=j3U|ȫJ)@58XzOQuo?soJ+1Su3GJci^ P"'Mhg1m.h8M_:}-;?4i$ ,ŰZ=;# d~TǠ@y) PTld:QVt4kk~զeηp=9X3#I)p͡~,~i+"NU̱ڦ1Ġ"LϯbT ^k\(=pvt3 !(,>BLRaеwc"٦P|0ti aZ9.QoVG˝"LSY}YM(GG|ܼQe,~qH2_S q\g0CĒo_A`͞YƂNq ^:zFl|U - 6>m8gw VuB *YHB^E;Lf57GP ˲|hJ2c mAs*'o1]?d!\7ң齃9* 0$}V݁>2<%H*K"YKRy%߷sbH/@CU+)Q,/Ei}tܓyO h[a@?Qki{Ɍcx6&o펔6EZ Ϝ*DqTf茞 TnmE%nR**T- 1JxGR#U@8ETiP~{&K}X=4e AW WNi3:-j9l}vVY'󃊷 ٪B1j7d?"31u22gϦ.M)PHz:=/!/ky9Q dr &v)pxi__MԱ~>(:z.\(Տy͚R(B$_ Y1YSP%.~e0{ʞ->,ļ$lӭUW0KUP OЗGUG}pc^G:=h#iW+EA}_԰p+]A6npg\i4yq9ߩH" }%|MayYn>veI7 su)NS@ߓ`QWw]42sbE+BE#ҡ$A7kAR 0 -]։H2bkEǩ}9a}C0ߙSfYֶ[L_G0yy?LJq8bc- ,9Jꁦ=oUdI3 `#םQȕm#ob‡nt,/ag )x*SiDZe3~ٗr;OσT5U>)hZe!R3h8VYu-kߟQٕbz=gMprJg{% k<~,<3(#>#[j`Q^q4qu5N='byScӿ{%Y,` lcqxO*?1tyK U G4UʥעH*L#jY>W$k#_dz?^xM~E-!i0Sv58kfmsuv^c_btf]vcL|J3og @i3D'g jl v:(?*%̈HUknyJqfbAڳ:̂@WN~Hߤ3:hѫҮ3A{hYͬ\+] BKչCo9۔pwe8sO,B7eމLK#ܽp}Dbyx(D_L<{N02W`K/$UDEP7 _IzgPߓ 0Ǒx=Rw+7?L#yQsN:S'+ Ov}WA:"P:qMA:OϑP۔[Q-~Bu:t331V:-b|’gD>jz A)7 _XDs1W{g:tלBE&rVL\ sda{+"'>a)CHr \FRdwҕͫ5b-storu f (hLv)(]V@~;|IG8U>HdUm4%[ӭBy߷C7˛jKY6UPK>~.I8YxMsU?d)@?Lp!_p2/_#j⿯J!Y L2wmbP/ Tm!KmZ3m΃0>olg CrDQ18UTT8u<){u釃4aOtGvԭOVuAA9Ɨ%44\t]GrBLŎ+454R3^* eF7Vo(g{c7AJږG;F"# 8 uL:f=LU嵓Ͳ0d6;xpjABf(Ja_XZ޷qm+S gG=>$R'=LmkJ..XJ`pؕg1* 2YjkF~:40t.c19mƑ9 TU墙x JNpS͑;q|(F 5Kk2u&+AܡL:LʵHb15̸tz#7ݴO4ve/|]7ǝhX)H*go eRMBBճ31R_XGPTiwr}U n);>n >pi4hGF:{1g`,MYwy¯ſz~ZIY=EԬ$>.jG3M-;QP.=D=N/9 z8bklbLg>{ h_&˒Xd0n fw-|2{eO^HC1-1釰I SmSz3.=}%mӌ=&Lպ:GA*mӝ⾖ (MAd̯gY9/!f`'3[@hPCXw;jIKth0}Wn$ӡ)& oi}U} G_Jxx cIFK3}rumL2ɒ$r8W8(ugJiT\yU[rrgk6@+TUآ7G@ 1n_0qLP^"B}G6P4Lf{@j0jKԑ{ c~Uʛ`Tz&-BXOPKK=I⒟4y,Siژ7HA D1R6V,_<NE6i|7]$7S#b v1Ű4K)tk,R:Yz4Ӽ+RxaqQ-5if2t8q?7%Wzz( Xͽϒ8A  ˁ;,!zӣ#: '>/8 "ͻ@)myX1SY*NGw3i;d+9[2J#Lh!hJ 3ڠsEa?a3q'i)qGDN; \wN4|[ZZD`sڐ]wߣD[OOk9%gZY@4ߍт}NZn'/&X$TB+99{y}Ert쌇]1%E!~VӤK$,jN\ ɢSH|竪9M!{^ 'S#Fūy\SYrpƘIWrګd̽Di3|\pq1M\Zjc |\?دIX|wE^f0.F?'+vrg~|z3&n~ۂ`KT{Ҳ$Nb҇v+ߠFUI&͚#ZljݒSN<Rn)L1_!ooLS H:ޚrMfǩ`V34^sq ,~C1p=]" T+N ^V}d/ h)"d:v5/81d@vW>mP,fQC~v.,=M.CG5ܠ\u\za_'wà|N[b{5j,{?,=-+0t%G ha3n|n%sBq&LKyjJs~P60SLof 5G .{\rcA|k{"ckOM08˔|Ŭ )a׉_ MMvĿX#} Aܭң,b0ARq}^nveP;' 3 W_C'hq*o.z}s%w/JZ1X;6!;vEjkE0&"Q8f1In\/C/f¹T#'=.3WpS,Q»rr^Xg=>\9dO}J|Pۿx+Jf㔥aEZ6#VW˷NsnN\;u\^yF*3DemG-S-<)W!OЀ3ð7JVqzfPO6Sd5Ɗ193 b]NL8rV@Xl曑6IJ8q`plJ`q) 8T[)*e^4eV Ir4PJ"Z  rMFSECՁK Z&wK 4nnP`:q+֘Qd<21e:C,Xy&W1}nߣ3 -du0@hXyg: 6=YFzf -K2ϦbCWECfE Xݚ1Cכ(4u8QqL>h Q |1^/"&V*mu1\fZdAU[JgE!j*'3yWƢ.M?.S=E; 2f@‰_nt#fГYShRf  &) H$XkfaCo+u~t\1(r1O/ 0XLJvnT`JdD7U3IfdbX&zw_b >4#E|NovjrEa˅Q[ X4~up%Պ 9?}H7NWZH X0VH~UYz?6[DBpՃꃙ|C1B_-Ⰻi 9֌UQTn@^,w`aXlG !F1W b!dSռ!>N6zp0 eC\J;а7+lC.:n$ 1p=s8YD*vq=M Z̴^HD7TJ e:op9*='ӽ5VXC&H=$ż9ױ6N5D:vєk wrxmOO1&Ù^?nsTA>3Zs Vxo>ݓ3Ys7jfsqw BD'w䲼9`U'^mzH9)s܃(@.~CʵO oqm$lElҊBb;F[c4kZ^r T+2EEB$JsTAZȽ[.]G`ADžNkk*bzv ff5경m*^m#zK!uM& aê; ~8@.׻ B"_5 SYɜ- ~d%A1k%r[!:Gc/R?8Δ ˼m#~d̊ bMTྜ$-t[J@?8]: O`2Š'-C{:cI?:&k!TWUp/L~MX X כ'p̎՟IN4Mݾp,`ҳoѭG.l`4wQ K 7(-م w:y.ښe7=  7<[CQ9`۞I$vJKtE$C-p$r֚(kqZK_uqzB#\4*r\LQX"~·. Y8# BOMO;A$Gr\l=䆭xG*W)Hn%q!ŒX*HC[8JWPٳ;S!3D97Fxbmoy1.ۿ- [rϼV4tl7je3ܷZ l%B` r7GLLY7D^+\,5f(xھڄR&f"j[SM$,6o@M4}w/@3]+Ĉd bf-ý8Z='_ys pͱrgXgwvn]v52W>ʞ 0&:^`JdhMl0?óţd@pnrʮML% +4?}'4H!SLE^*AP~b%80nEǧ& kA=S*5嚊(Q4|N)ptAŕqgK225v(>S'! @K(yOR YUDXz{B95WgxƳghŅLH[i) gz;$!=UTJ!= ]gӯgp@9q *.ހmwlxܚ!͆kقB!e[@ ę9̀YsZ8ߘS6;/XE+|iT}b,О z;N4wrPn Jd3*dd~+zc;4zԀhaR] ɒߧaiڣ~I-0cnQeէK`f%GtoQy~7߻c lEiWL|"s?OٴwmLaneB*i`HjI)=K=ۗ¹u$fA#ϩV" Mg\Sh^D$|y r_E[ P ;$i%p $>+%Yk9X'<&ġk@ɱʹnDq)rЖf[/z @SV}!.Y[$DP?f7\oRB#~T2A[b4U6B l2,v=-h jӐĄ8|V`1)**4K =.5ͫ,$E0E)ݡ 1x?(VnrmV=5wX}V.l-^^О 5%2Ҩ U^Mcê7"PA?:޶ ðx*gPt-ՠѳ,xtӊ8^m_|oVsWG__]0f@@"+) %SB@ <짡ItB ']cg:,e{[Me4ՏwCfS43Eh5R!*7k-T&w=XRCn;$`*x9%vrihmb1<6a\J#=23`“ k,kjcl)NRXKǨSz2݅UbBFE=)v#VK羞[xd<Fpi7ݢkuCVFi_B ؼnsPNGebfn@7y-?[A>g 2o(3[?{^*Mr<fO[Vc8tѮ<3.߭tE U: C:{)jU5tޠR3쉗PT|c#"~YEu6yh[咥Aw (VG1i?9喐Zİmi_m஧4֋8cܘl Lԕ 0XO`DMGw%+"-"Ǩt `\ۘ"I<,Dlg-T?P^#t>/ETFC ܋ץ7W a/ \D]k4@X7ȖƽvaxJ$3rK 9J;#B]%C3-ViVO2!na*P.a;YjAŜ7}="Ƌ5Z! ǵEm02-ix%sniyc!v@U`Ul-=x,;dhGB.$ t{yELJC29Y2 퀛CSyL ځ>?U!̭ ^,qg,!֬Ӣ-XMJ{W&M*4sWJdS:74^j $r uBN5nGGµj>N 9O0QFU,b-q,gy@"ُW<.f.TREFL$c*+^ӷbokF왏v0P#9lY!{M'b[p>]") 1]'-5'4K:N0)mɅCWY7EB(Of.oVlr5N᭐RGÉ4_}׀6bV_+讃`'m˧ 'Pi~MhgY XCշ/@v58r"*MmPԾ^Ω8Z5|Aؗ-)%^F>}u;q,yG ܊uCټh<6)$ Oڪ,)lT%] d X &/М/BlFܔ -1^q$& ع>Z97M3j )JH)#E=uH#TAн߳y$n*a" 1|5E?d`钖8ߊڐzfCqK??֛G$|FH?gn”aXu4#HWvռP  j0jNI"%#DtG]!~ѧNgLg-,.n[ȂLdfN8OAvnf0 M1RJa0IX+zŐ > JCIBH7E[6?#V+8ԅzWGp jَ $w鈏Z}JGIN{t =UW &'(u$ ĻkԉlYhn.%WwHN`Ԛ9[ ]:4h[fL y7`-FrpWibR>Z"(]gMIЙ}3T̈<搴Hxn{PA&yTu{Ӗd῍OhSܙ-V c'.A ?]ߣ?,4Tc}3'Լ3;}4?ʼဉ]RYg]q6*⛬xEUqt) o[G[so<ԞZ+gz8,o)b7ols]ڕƌ'CX2<)Spc5G@%;wM kVfvCD`E&XQ68wouɔ;j,} -c{OBtz=x2Mk]uz2;FPme:OT-<.{wH3d:(Qn E$Noqvq.:g KU>~Prtnv(Grݴ6c9p5}Qeiǒ7_(*o(ܙ!?nnd (yIP3 eʎ"ҳ(P@>RlSSey=#It>jE!kZ=vr2ŁTF^c8|6LZ.~?m}[G%wiK>N8bq _ovL ]iȽs|'V!4J{*k hܽO$_VXQU]y9K6n?yJ{G+˿=6?'&|+ ][mtǨŃ镁 /%7_aE܈@'+ ,XFVS#o@ dBP<9lץ(ۇh$硯홫&Zae3.cݹ_3:J#shb)]b;Xf"sB%'pm2Լg# !Gy28ޮ]Ė߲ĎΞv\y2H_?!l FT0M[S Y;^=;FpV&HE5JdŷFT5YLut8"gA*GN՛D,>:{cܬУ0Bf$ƞ$!m/IB'^@J'qZir'>vXmyϣ~G|13k$x_o˷9'="ڨBE{N {59? .M_1}D @dB:)&PVyX+D-!:ʂkVW6sJTMsJKdu簃}){'ֹ%Kޏ=K̨ma9DP+8a|DeゎQչԾXWAœ7`^8 ;:$ύC\ m| y\!4B9D,>56\hl|.'W;Sɡu5F0Z(AIP:[{Wbjֳi>YR=@-DzU5cXMo5-ljRBE)X9exJܵżmc3zT#UuXӱ&-P L2V`::vಔ#Amh㖢(,Eiߔ}WC,rA]_Ȓ8fۑUT=ݲ+ Zڭ,!]!CBb;|U%mb Z4>"V9Bk5OtN6{mL'O/*2O=dRn`cן=mx68p". `?w1{qyz ?,0@ޏxHc4#*\hZs;Qk_]²xI&Zb3T ܢqh׀q#㛅[*m w0SJkK#,Ɋ)9K87Rzf =k/o )$, bR2M!OX\® ʑMb/Qݷ-zC@uEwoצ1nL2 .aQv~5Y|nS\CjNz%Tj2ʕP(LjQkebc{婜ڧ:%PeY yVS܎rƆ}bsu"4X\_ho`ebs׆7ds$>qoiYD/ҲII"4)UKSC3u-%mSpAm&N3b+hlXPcQKIpU apsPr#lGX,qU_ZNx4Wwe! vR&+*<ғV l2 RY1Ѣr.jA(Z)DS/d]?1'U}w( O3tI E[5QȜ sT"*2#W.(aWHh<K&^a# ٍiqsl؛>X.,Mwb1=&AN=sb77}5`@1ˋ 0U+#&p[EPA:>C_elsTG4@|@q 'T`J=%3&>pi0PVFt]l6Qc| 3|9izp[:iיjD?Wq:G3`_q?*S otKG}wF) 8~,,hȴEq!ߦd(:꒨&7cߢc6r;Ɉؓ1?=Q`Vѽ_O[` 57a+FMJ*~׍| =3m+ ~[Ԇe~tR݂[n{xӽjgQ92FK/֬/tcQkSнԈ}3^ nB Z(g/gD5"o"PWoB$>[PGATBwuqaWa ջ] zkX;|߶\we+xa.;ީ`ҶNk0DzL})p'$Eܥ>1pwtOHBA[g\P\2hH*P#H%#@TWz$Ĝ\r^\7Ndb vߢ=(c{͌uMDy)aY*7`6j-Sj_@X"[Z/zFW'LMvx]0e0. d ^,"'"z0 "=ܿwp:o˶/i~ ⰷNٝKʼn*in Uڬg̡cұLO TvFH {V6bic5Ƚ^q !$WIJD+}bzs<6ģ5~{CLPiG4=1S戮:{p;0ӘP+|HO: M=-ypEU$Z3GB'W/q݃E$ TX¡%Bp}>-^Mߎ*оuf^nV<82ĜTMfZTWu$aUsBjj` KhFңB=A } ,s zWvUuIKP"UJ̍-dr,%00`d_W1tx:U{.JrDIm(,+-%> /ËkF6#/m&{5<]yU|ڈt3e8:(Dj6^r23sTmb;)U*ː # N= [`-~٩XYvx;-zE 0h YHMveU4Rش.B`F'?+_KQG~n{G*i<\F |֮AsNq7ԍu=qRy6yA7}wu)s }I^Pi̦''Mo}ū`DZrR^ETfQz%Ih1,"KS=n?8^(C!\՗%29y6KXӵM Gb_CӜe廳Eg-4R8F`^)_t,\QW"H>a/pOV? e=ycKQ壓"갸ysRyOԙ{XV?g9a?L7xUҠ%s!}2ә0WF|('-7ݑ])ZTٍab?JQ,EQsYEX}L㙅 J%ʥ"_6a sc D Q PXE5e_9%0RBYX7!,Cm qSϬBk2YqZNަ ϺNn-v<4kU+sH{`4ŪKw|kIQr ^ )Vl&?& Nf"\_]엱wbW]lBB_%dCմY}l}oX4r^U&a"/4Y|l/QL`?1UdfzvYhei.O}W #}tr<β)Kc1Q[\D"G\@Ie5"0b<QJD,VviL^u6`n&B\ww Q1#0kqWgxw0=4 Pg0paM4S]S\H^S}wznvj>g Hf;Gj$Gpw<2W%Uo$wa",tU*`v"6\rlҁk*S$KM[Elsڎjy4dtE8DaT`l9|ػʗ,nW JJ1%qܜ-ڃӁ}`T>u$ڔZeցq)'Wp5t>5lQ,`Lڦvy, Âp"=^wz?<#om`F8&4P y0"۔D{'| 3҃|.rdĎ jZ&=yL x>rػ)NV$ެ%LJ\9mAj@$T00G]-f"Ojtј\V^X6{e+@#7,’7,O|q|InNs",THؔ_xA}g0;eu~~biw BϹ&@UϜ?DuK "I'O6 TOE\F8SR" J8y&/`eXâ׌ӄZ&V*n?ҷtG߶#쩎"]5tM#EMkiVg W^.䭨nm ƓW['P[8۝rKe*Ԋ|ws> rOkd=}hA,삎7flQ1~"Ѽלr=ŦAkf'N\X" 2̎ IiP@& H}¢i_R<|#(NLMȬnZSm20ٷdy},ǃ {!B)bEe8sԑI.&qu@[ ݴ_Ej@rUb).:s_L BpV>؆ι `WŦIDFD̹Ϙ: @q/ia!azuQ(+/1?-~yLDyD*v4V=hj4޷[K H.mlLG䱗'b- Ky5;<ژm׭7hir]d2^O& z̮[3D%~S;ßRh8W2Q& pm<3.7?lNxsz!QLkbU}a9KXRЏ s44_?^o|e&l]Apaŏy1҅~Ngiv}-bװ(,ҔZi[ /ݺGv3M iS4!%{k/1]TW{Ef(` E=)%Y_tJd[vZw K% ܚƻiU%˰4k]Ԣz}juFR 77\] p+y,jz*6We02z.x߷Sn29m#w\z8׉]2~4M@3u@P=qo~)*_4|Ug}Fp?,AL<]y+<ۅY='Q hG4QLh ~]Ӱ{m/$$ݐ~O]yKpR,3c$ح]4oϐǤ4.[H [d g\3.}A kJ=pW?>輍:8}'} Qi<)t~Wg@7S<(tqpY꿾y~=SnX;U.qiYF:z݆G?[4,MU#RNT ЎJSuFmS?z/e:&foLsPyV"_F*6 /C Kw\>aىA\4U9'K9 ΙezbXv2U2;t~ ^ Umq Rux5LG<07{.Mig,bU^Fo wMJiR"Cv1M 㼈N([1Y՟VE_(1DgT?O˗w(,+wvю۴JF9{`Bn50aV'h?`^4Ecg;VBx8>ea_))͝i<Ժ`;$+ ԣuCA#Gw `bB M-\7vxTrsn"@dińPduh牭ԗ(hmtA)z[N3J֣.(G{{8&ފ{ W݊a77_rlϻF_7ÁjXV#?oO})%>:qDzX@Wx . v[|.u[B%̗XSdN`J_56*E"﹩$R,R[B2~UuQC=&](5r:L,РEO* l_@]I` ϐwu/nyR~![01H$;B]]fy=f#|"90_5p'ݡw -](| . /É<䜉Zg9^K!O*IAg1}.$g",6zX;t1C-3mdDzCq}*>${in  agr >JufYB@}xAgʻ}QZNԖW!Y6V4~U=%oH-w M(Rͭe!Dy"A&'V=;,}EY3[8GTh ÔMٺm4,svȓ`E8@V\3SW/^=`Ld0Kd}[m2CByL'Ԯy!mԢ+[TH&h?Cs-q8MY"a 7ݘJ& J{*<5b1DFF@2_K.PY[\5wr *hH|K{[&ͺ+$%d)xۄה QAvM֚@ׯշ_Q?CǡcGV;ƤG:סBNMе-;˷OVwIMX@`lqɱ?Rsp `j%ʹC\X[ h+ 9=9K)+/VY[ K6EP"^3kw2jmmL#ƱxA>Qny0kF*f-Ȑ^RY_cȬyYG\+"Ҝ^U)̦,ՄEV`Um{@lɏccZWx!-Cp݈APˎ6D{˿uhoȖfHAJ,i/PHEs 0U``' kʝA"Oa݇p¥Z*,EGQSL\%]Hgo bL=}nO0~.Гu!OMS!ѽ8J|kO05wXS_IQݗgc*T&X]ǧ+ꮤ tJro[F HS}L0V l'[.eޠYc[ C]]1qps,,k𞙜ny.*t(߱-IT|wZ630rQAq 0 ˅w7Ia)']_!Մ1'AzS㢃x2IVE=l)2)`Pxzk]P>'7>eӯ(Mh^<ڶ`9-Ӵu1J* h8v$Ue LA+fv `Ce\4LVWu]j(ΘU!%w a Haݤ %qɟn7fhn S<lWE_p'~‘4UK/~rbeF^݈#2e}v dȕp'Tж[ӲȱkVd~^B1kL*TI=*)46j=fUyTʓU)29r,[d;!ݓo"> /-*0('Hl-EcTu("qEBĚ+q) b^jyH W xk@#EvOV.V>/jyZԸden(Rty!#θIWH.V3BV ~x>7$5\v{Rh4<$bPx_1 >hapz) 0I>6FpfNTLE{0뢝OA$Y\fb1/hlLW] ׶F;} e%uts9Y"zFgTBWZdVI8 Uw:4SikT,= w{']g7K3x7`Y 7ZSű*bR<"3{O/ڧL!4lb_5mg~]ЅHćtew&Xo1TvB4a;zzaq[A@ e C|ߣU%&5>8cI$r`VqN3Fv=yֆ[4KEULZdS!#CW,θ;xD>W02MNf"{</V/;4 oc Dg2M3g`?p6+֤0ucE6iqIk F9N