python3-apparmor-2.13.6-150300.3.15.1 < > , 0 bp9| Y.¬ |+S [J|
ԯ}q=p2O|J(BӁVq8 - zt Nc.v~?E{FMT?4X$iPؼuJu7q뺸zR-ĚK._} Q.lÈl ,%M+8= 3rO;8_JqeeY=$L6I;WKj;dƜNC̦ȍ5gJ M&{O*xY#tk, > > d ? T d ( U 9 O l E E 6 E
E E E
E 4 E E E ` ( ? 8 H _ 9 _ : % _ F G ( E H < E I P E X Y \ E ] E ^ b ( c d T e Y f \ l ^ u p E v w E x E y K z P C python3-apparmor 2.13.6 150300.3.15.1 Python 3 interface for libapparmor functions This package provides the python interface to AppArmor. It is used for python
applications interfacing with AppArmor. bgoat04 ȀSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only AND LGPL-2.1-or-later https://www.suse.com/ Development/Libraries/Python https://launchpad.net/apparmor linux x86_64 * } ( q i
'? U
L % w J\ 9 /K ; L %e 3M Ho # R7 > 4 l ; ?j Tg ' % U i( +{ ) C 0 P x 0 A큤A큤A큤A큤A큤큤A큤 bb_bbbbbbbbbbbbbbbbbbbb____________b_bbbbbbbbbb______________bbbBb_bbb d6cc3bdb95fa10ff2e0e2f3475bd2b9c664d6a56d7bb9827b1c9db74328ef730 6b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c649 b9bb53501f4bd8a9232f190c64474195b7f79526f13695d9691e1ef2a933749c 473510fe4c09a907299ee469ab515f0c529f48b83ecbc9ae0488f59add7c4cbc 95911df349218e4c9c9b81e1c72e08ae2247e252adef9315b68085eeb804a270 ab76de6e8195be57c0b9ec180cf7343ac4f58b08264a5a7d2c37aa5153975d4d a56e19d7292d10481abd4b4c36861cba6b21c625807253b63704c0c8c2b63440 0bc9e70074b9ed7689b2865ac69b28ec9ca580047489bbc89ddaa3cd197ce6e0 499cf0b91c71599cb8fdd9cb383b4062f062c8b06e5897cc0b92e6855dddcc06 a380f32c82c8c66dbf534353c248d879942a3be159b5fc4c35308b6212ce2eab 3cf6cfd3c9acffa5aaf86bb7b6bc49c257b706bb2077c2ddb0896bc034147649 e6a0d97a0a07398e1c633c5d4fe362b0c793ecf4d31746ec30f8c939de5d0410 ea243ced0332dc621c72427bfee5aa4d29dbd844198dfffb970fce38cdd91cc1 768ac5e0b4b9ef2537d26b0d29d1447b6b874f3251c7e2b838e244e89e33b2eb 8eec907fb97e4b142a27b4bb6bb3072c8f8d4d3d33baa15cf2a5afe5ae975afe 6692d227a5416305582024ad816654e389056820bc3634492d38fff75edd8866 45438a564ce61700a2b63ad2299d782113c38ba5bf395622170672f8007211b7 b1e3ab9e4d648dc689f5c577047553641b4f776e57b20d61dde88a5247bd1132 e905eaa2b2e8e5609c8845a68a34ff0bb716bc36d8058f82ef9cfe66a48575d5 18a2f287a62ba632a4d64ffa828ed6a077b74c425205d07aafce49cb67fbc59f 14dfee3f86f1a9268db4463ec3a653fc71f6eca3de8af4e03ee55f9b1a1a5ca3 b8ecf92e7aafc8563e0d97a271ed5d84deaf1bd067083121fbf36905d5f97576 dde41f5995b89d4516c6e7b1f1c2b12cdf1c3518c62c4ecaabd653e13762a357 e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa fa4c3c06c7feac043ce450ef74220181da3c5f1259215d936a6ac7ee4f5639fc f52d7e77d4bb25f58ab4c116271706f1854e6967cba395cfb79008d2405f589a c30b90891d50fa8cd9629dc01cf9ac72026154f6222c8c3831e5dc63023e8ef1 92e9875ed547872c3b48753af5d686b6285ca9723598a680d7989b05c36ea405 91c0c36e7e9ae313ba092b50dfb886f083b9ba66a2ebb164bc2a5da80467e6d7 25be45cf9a7607205057ab9903f4bdda2142a05393ce12e5832aced15a1205b8 dc83c31b2ca7933a8fe6877e3629240cfff1168ccebc050cfda5ca25c93b4105 75951f1443fd0f2a24b38e71610976471dab433962c128c5e9c0280c28f2be3c 0fbdc4266c42fa91fa7457f93948fe5de05f65b96d0baa0a2f622ba39aa5b699 f951465fae199e8637cd6b4391dc6921cac122438a903d0d63bb399fcce416b6 2d148485bd3f0ff1f757398b30007329f7181904140d4ece9163f34e6ac9a78d 1aad69dcd8a8b42eddaacfc4800a216f24cb876fba84f1952c1e16ef154a57e2 88e88321ac315c81cef626cb374ff4d63cc1db7a2bf897012f87df96051aa484 b22e438020be1cc90295f47e473dd00252c962fa85a904df4c21c59a2e729d26 9dadb60d5a3600d31485bc90719801775dccb774b436c0dfab7bb5bd76c29901 73a74628f3ac34de20f9e60c9be971ac6af3a2c05d06cbc4defd44fb3a1e6e65 e41f86ad9a6e4c3ab59c31d0869dffa1c7fd5a0a49f8fb3c7dcec6eb8a8e2dca 9359e7d3e66b39f23afb01d95425004486c0f3d0ea9718c8da6a1be94e79a6d6 a2589e9d8138b592335ff6045fa50d0f415c9443d6435364ffbd5541246dca5c 4ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592 b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113da edaba213d38fdf6bf9496fbed2862ae7bb02521b263c36144583be50a4202b36 d2301febd45dbd29e7b7631d3ade87a4062c65aed1a2caddd8d54926a290a702 100c2177e2f10842f941dbf4f5a14b6c7a7fe81662f204488be205fba331886e 41fc5ac1a83401cfd164e57ef613f3fea4d911e33ba5e72ff1fa6dcdb3ae569f 40ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb9 7608de362df3538dabb71273c433b71e70e0acad9be2d3a100cb0994f48de377 5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456 a66aff2ff38625ce7d0f0bca611d280cd75a13d854c2025c751422ee755e3e24 504346a5da40b8b34c57efdfb2bf488e44e2dfc0c0fa319e7dda6b9b8272dcb2 e237265a7180b28077c4d28fc23ee2d20c377684e3e90d0253ab9b95513556a1 51d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e 4b3c55a4146af0d4b17d439f9dffc86c1b6bda67a8d2b19e0d4922e389cf4e21 8672ad4696bd47de53504a018a7c7b515bdef1b011961c438402d4699c60c7ef 56386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d6181 51ed7bff04ba2a0e14962d8c31e9b43187a2ef0e7ce3cea092410f9863096a2f 9f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c0 bf2b87eba391473954da31e6d9e3c9f4ead1889d22b8e4074627221f263d9658 cd51a7b141d7f28bcba0f906bf4de7311633c256316a99f1fc3c4f3ec1b9a034 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root apparmor-2.13.6-150300.3.15.1.src.rpm python3-apparmor python3-apparmor(x86-64) python3-libapparmor @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
libapparmor.so.1()(64bit) libapparmor.so.1(APPARMOR_1.0)(64bit) libapparmor.so.1(APPARMOR_1.1)(64bit) libapparmor.so.1(APPARMOR_2.10)(64bit) libapparmor.so.1(APPARMOR_2.11)(64bit) libapparmor.so.1(APPARMOR_2.9)(64bit) libapparmor.so.1(PRIVATE)(64bit) libapparmor1 libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libpthread.so.0()(64bit) libpython3.6m.so.1.0()(64bit) python(abi) python(abi) python3 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.13.6 3.6 3.6 3.6 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 bBaZ@aՈ@a@aim@aex_м@__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details) - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff goat04 1657079435
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E 2.13.6-150300.3.15.1 2.13.6-150300.3.15.1 2.13.6 apparmor apparmor-2.13.6-py3.6.egg-info __init__.py __pycache__ __init__.cpython-36.pyc aa.cpython-36.pyc aamode.cpython-36.pyc aare.cpython-36.pyc cleanprofile.cpython-36.pyc common.cpython-36.pyc config.cpython-36.pyc easyprof.cpython-36.pyc fail.cpython-36.pyc logparser.cpython-36.pyc profile_list.cpython-36.pyc profile_storage.cpython-36.pyc regex.cpython-36.pyc rules.cpython-36.pyc sandbox.cpython-36.pyc severity.cpython-36.pyc tools.cpython-36.pyc translations.cpython-36.pyc ui.cpython-36.pyc aa.py aamode.py aare.py cleanprofile.py common.py config.py easyprof.py fail.py logparser.py profile_list.py profile_storage.py regex.py rule __init__.py __pycache__ __init__.cpython-36.pyc capability.cpython-36.pyc change_profile.cpython-36.pyc dbus.cpython-36.pyc file.cpython-36.pyc network.cpython-36.pyc ptrace.cpython-36.pyc rlimit.cpython-36.pyc signal.cpython-36.pyc capability.py change_profile.py dbus.py file.py network.py ptrace.py rlimit.py signal.py rules.py sandbox.py severity.py tools.py translations.py ui.py LibAppArmor LibAppArmor-2.13.6-py3.6.egg-info LibAppArmor.py _LibAppArmor.cpython-36m-x86_64-linux-gnu.so __init__.py __pycache__ LibAppArmor.cpython-36.pyc __init__.cpython-36.pyc /usr/lib/python3.6/site-packages/ /usr/lib/python3.6/site-packages/apparmor/ /usr/lib/python3.6/site-packages/apparmor/__pycache__/ /usr/lib/python3.6/site-packages/apparmor/rule/ /usr/lib/python3.6/site-packages/apparmor/rule/__pycache__/ /usr/lib64/python3.6/site-packages/ /usr/lib64/python3.6/site-packages/LibAppArmor/ /usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:24912/SUSE_SLE-15-SP3_Update/dc7934d2ca5d37f1ee18b50c372c7b79-apparmor.SUSE_SLE-15-SP3_Update drpm xz 5 x86_64-suse-linux directory ASCII text python 3.6 byte-compiled Python script, ASCII text executable, with very long lines Python script, ASCII text executable ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=143245ea5af23f79268c0e6e1ad3f1e8ada3abef, stripped
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 H I J R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R R R R R R R R
R R R R wNaWa utf-8 611783a2cf26b6ea670c5f8051521b0f3dfe1f6664f8be012705e2cd5048d515 ? 7zXZ
! t/Y] "k%r) `=l.Xt6
PD]f,1"u4=piA}V'oU ܞhLa|, c\\dYt> Q W@K/_ۧ ǰq'~S>nKn{tk\E3ͅĔxWg3!n?JyPC2(Ǿ HgAKF9_! mu
(Ɍ ý֞{ y殘Jm#`R/Hu{ e8_ب(/>io4DՌfHQqV렿 q 9D-x_WwagRݝ2X,os4L x9ytzD,"IY,Y ^ ?6q\h1#܋{
r\yRi4@/a^&BӖfX/iI> h-ah.=)] E[Nvk~_eBRBhn9/@dv=;.p=EJa !m"8F,t>λ8|
X ,S KXxD5#=OKν{[8?.3nIođ'g͘LrG(
HF2Z梺u` ?Qv8pKϪ\ #_:Ɔ0E(g2 +
Ceﳝ#pj1 VH v2R8/TQb {S#h7Bt*UڬH'HD{3M(c@Ӟӽ벇dKj %ȈΘep~rTɩsF*. )x8_:c=AV *+t 18ژ~rd_6a9`.l1S zJysS cc% swV)"5S ^s(εi[|U#Kծ ucJI5] +#fXc[ AÒ9@nrf諓-}|\5] h HNW y @ T! mvCM|K'r(mq/aUű_B빶a%S6 æ9?di9X|7\Mt&&!TEɟpGG Jp: aB
%=9 38r+4!(|A 1Z#kF a q6DB.)D `i:#C0 `Y78d c> ,x^ ގ(~"7sa(JO@'/RtZ-ɩ-y룸Ƙ ,|*k=0.Òi4p0zEi3w{! QGI`k. [vF:}ݪeTABc 粰ع$9w'K{)u +~bk"=SЪ>+IphBKSuK1 H JZR/upKiFz$IAf (")p+_xU y
OD2r01E M(^wO)]WTXyڕ;R87n 5 :`'])v
&g +VV ձ/:9у{ H#N ӄi XCcDdE6#sJ 6S aJAօ `Oaٿ5)
Lֶ0].^ 3,im(oSw=~*[:3;KD#8x[
}$DnJh-Z?r%=~+[DAGG(1 |j,b|pD2& Lxk9̣njc>1*hfb/[֮LT-8>VL0{Z$( ׀FT\KFe l2\cJqPj{`']q硘B;donPz*x`K݇CqO_>\K0y
IhZtYeFX(MEUpS[շeИ%^n^LX,e,|; gW|" uF{6k &U&'ܩ4ľsOrC y &1 Dz 'Б <<4a, X{ENM6{I]5-~Xq+L>o; J:[~9LȰ
hj&
H@I']غ
R#]Gv LX_ʶ1sW>Lޖ 4ilK6 X9tE8e]gg< TS9zuߌ ㇜Yy+ț< 蟔ܞ34VGfO(LLzd B4Ņy
+2|Afţ \191Mo$gi9
L+yNKm.I-Jvv&1 `D^҂# #,?k-O_ h\Θf.?!D0 οahŻ!~$:rܬ3|ϻN<Yg>I&_)@2%hԀ 'P8TZhKC| ={s'w*HOJͼ*{ô1}< ي1_ }fe
#|J$uc{FV4fA cQ({ tc-;oeio4K6nNPN8Ř
9.so)`@\]*0S WW "m- AuqQ\Vj
6÷d6%ó5E~TpDHmf'z4m/Cl92=v2*~y$;hoEOUCXY]Y uw 2In`6h,~OTƬhg'&7hØc` ^\7vS5|SDyz`yy*5-0u>q8d$հG'_-d@ 8; [C.b Fo*ԲÂ^qwѸ_XRm-t JJI1Yɵ}j~`ιE .ěJ | p]n w&@M͞
51h2N!~.7*ܩ OPng
: ]vRKW Et( A v4W kJV hFl
p(F)GٞP%j
`훜3U@0@GX~&|OaXj?J&TVAA]#kq+Dz?ݖ\Ìcj$7Q"Rz6oHh(;pԶF a,& rð9O$ Վ/(2Ct99SK9!4l9K`ى3RH5mo)U=yLN5z&1g| q ]WӋ^?sj猩K3z @Uq^u==>6`%9D,^N50euX(uGcn נ/C.! _|sl8(Wʰpn3YE2*}BڳxE 08%KDI"Sg @Pf ^ F4%ĝhڌ :|2S#Gۧ{;? ~M.%0j3~ ,9
Q BojcxГ*/ e}{L8+ul=Z/ #\#y+eڬUQUӿ]z b#DBooIL0}"OHg'c`+4 E(8R LYo{Qħ\eRؗuUv^1
X7xzoULj5֊G# q # Bt臉SJ3 :)ϫhVR.; ">LbA-!==?5AB^0dE<} 0h%>\bm 9:?ќ AE.FvPC2EMumJv4&}1xQpEt(@MΏu
$$T(}F؋זmepV\Zs;Ț%l7<^ _|L MƵ3w~7%Yidv(Cw!q
ĻQ䥓%1 Ճ1rHX}=ToqC {3*{n$xۢ1eC- k{X2w|U&9B ÿNdڊJ eXhtT9?WfzFs=xbhFSCT `2"٧z#iw`, mnG$dk[ ?k"4>|BY[#`]bS%iq_ňߓX<ؾjp9aE c,)q:J6H[ n|$Ja{mZmɚBVf x~Vai 2'!/oh()Y!:Jx=-hKCD_FXys;p#T(bR,۔; @7PCLu8哿BeKWt\ZPo +f]8Kq_8D3o{KR _pNSG?UҺSؾ!M
FK "y5*~FcAy6S:XF s9¹55
rsX{+}]h}KB
+]1WO*!AMK
^/ ݊TEuv"&2JJjpI 9x@]@qG"EP L"`JbGY_;/n>-U
˳˄#NSg|rƽ2[9c qSy@dc{-
9pm~|Ygw) +A^H4Kƀ$.m| <<U>@;|A&m *:ԫ+Ec|9bW(1I QW8DEUBb<$i)Kڊx Lŕvab"bWŃfTvܝ8n?{)'@H{?/ BP#
5 eQhW wKnjs}h{pabÀo{-'=݈b3V^ ԥ4oeƻt,<[^(IB>Ӊvfʏ~>9 O"Z&JzM| s{*j '/'@bVz\0U,Pե~ڶt Te)7ȭm
g@ \D H ̯ o5Q8Mk"s@U⒡ *& 2]Jnmt瑱Θmq #WFl e,urm/ǸPˆZ1g%{u=A#WS&0>BW!eiUhOqI anVLbXsHZgWKV owv+sߣJ2x&98ב*)DAŹm SK!'y6u#dͶ'78>bJVXNgmBtB`Bv[^E-M֖x
\,"'3qg}42f})7Σ Cy;dFt~;Lԥ %8ѵf(x0q$a/*ȃ~wrar J\?0 A4!lNGӏėK :ZVb*%Rktdʲxq$#\t! z $?_*=#'-XnD])V.iٛp7K;r
g,vEW-9E2e_{]NsOwA=&р4& lg PIYiz:$7^ 8}0A< -^pP63)UP~~+SJMh1;o J4\"2;W+xD0z1X8 3RIIk
A}E ίQq^g}s`+Aڜvݐ BCpU
GD IE--6,' SeƲ:h G&@
jԩ{bڿX҆f-~>Q@68x2l(ҡ[-= ػd} {P$Ses#T mmOVi| (ƨ+&@8_E w9%ڟ¯aޗ r4 ud;ǕPCWBOma6BE=b0ߊ-rfrG\╝Mꛍ!ߝSF(K?)O k;
4MamcNb zV ;"Ը ZEw1ς| 0bJv n PMg caz #n{ƶJ&
fUEG%p̍_OFIiWjLG>`>5Ӏ+y㦾ݩZTO?\W;HT_)wKiR:HV
C6;k+Su( B{ӎP,oα
R< a!+0X$l)8|UhȑߨM3A@R; t*SQW8¤38maLA^]]f^YH-j)G4(KiPry82;dt7< Yʔp+(?q6/T䶓o 4d͋*~ADH P4!PNb
g 3EVFe.iꡰVJLZ"62K ݽP\vmɂ 9@a{}aaB ir,aت+!?rb }4.e#aZPx rnH2"b-g&blyA$- %= g'=h quf)@"|5`:1=JI,Eٜ$Mp^+pA)0w;
e|etfe~4zY&`ۯ&{ʈ뵟bHlvokneL({Nd}4?Bnbٗh̘4˲jFݡP{ݔ:{}0pE,?t@I5b4uIus1١^*iA
L d2b^h " W8Frh
ye%aBK̮6I -23R+ )EN5xs 7WMzITF&OЮT u}f9mz*kkjtjc lbvm 5s>X~@ 9zH$4 q Aٵza#IkE) ]RFUu|6|$8#p95zQ<_ =e >egi|V+`&G)0تt/ѷ`OnIT{hQJ KyWlpTr(v r dN[ZmvAe +Xc]q*GL6{83 >A
/-3 $Nqy!Cb\ *<ÛDw! 0{-?6ʔoM ښ Qʒ#>$LJf8\cdП(2oG ^qP"A>YGj+D6"؟ϫy=HЇH0τU2ɁM}nd̓Җ%q6\Ac\ɐ ^ S|<V5^J/kNNv SXJH M>X0"&Gi]yڇ&9PUh겢x,!LPA廲0QG*٠pKўwE rWS٪-Aăβ{2#2% ƨ`ւ8d3 Xh 5 тgMھ-{@Vk/I#P#}>|Kȇk m黀W ~]^CL7q) #Y^/i)[bEByE}Sy[dVP<3 $_~_ 0>?W aCRcJnwe;ɠ;0߾ < iO:PN+Qj䗴'ʯH`}8)t+^"(iS(;s߄ASTkj+aЭ"W!1b~ w$H%0 ,:ԒѶQ2p: ۋhF{2MgeóGK O
TۄWy<|C^
OJ b-Lv6_TӚ\va]bMIf-htntjiř%ň2_\G#D_n%SDٍ{ @P.It+K|*r͎^"Z;SogIkC |UF~.pTc :!4tc=J|0[p-җY116L=2ɷ0j֎Q^}iwR?;.̋AmCHT$ ys?G-i|Q 54.'wv(ZQZ==L2: [3|; vJx; #8A-]n40qIT`Bk#z~
d'V`<
'A)0K b_BȞA ɢoD[dN,ƀAS v k麆dxmLbWƵ)9Xs\XAed?= *){,v6 'ɩe]9W7YRBn @}Uĺ#nКmN/5ph>gSt qPS7tڐil%f"sP}p*ߞ[2UlF xv+ DU m M
duO\uS*Ai_l8mʤ
7@C_̜ckxHݹݧ48uRKMc_Ho_*dh~XO͕wO{aVm/-6HOf L=Q>V]wJa~y> cx4S8'}7]y@":*B-3/ =ɭ { LGQ&w)BPA\"6HT^-$gM'
=ִ=b cĚ Ȅ)#d5F?;N=k XR>[8dܵ =z:hb>5'ZU }f Րo<\ 9>5t ,%ΠA DK!4,P{$wsI;!5lxh_lhj- AXͬM)8.K*_c'4dWG
m~ 4ۊi.縵p6#%u#5dZhmWis<}hSUaf
4tSb%wNbyS-$uŊ1` (!L
!K
&j`{ K&6ƊQkyVk9`%S
%ͪ6 F:1سm@kr~[e^- tK*]@wp}([u͑kb=fb, hZʈG0$Y :ҋAr9!YDO>5^H}̴v9xOzU-{%J!DUA\ Gv{͵HP'9=PMr"0)x4&ma m*G27ZT1oV4`eL8Sb([?uŖ
]#o!.laG \s| ɻAf?ٓJ쮵jvv(b:ԟCF0b8xq&юM]=8NѢ㛭aK ΅kg'>-JQO;S
6壞E
®|9Ol܅NɼNWykʎVb(y|e;].kZMN(։'zng5z)e譜?;Ix 5Hh (# eB.-{YXFFH 2$/d;ط29dfyMB 7CϮOt) × |2]E]̣2B-aݱO*E. 9, .F%֪F3 ˺p˵4>^ye횏*2Cr
>aK䑓nZƸ6%w H;2 vPߎ <*bn&8W^`M :oFd^/D Mt:+
Oj%?g[9\.LSo5g8tr +lEM$0Ц#L[7wC٠=CKR@[sNX=B[(O(@rzNڴ_gPqPK} cOᘤP*n>!{]
)X !0/&r/}kuľ&/u
>=P o|cS$\I~$ῢ/`\ bʘbc[DA
8xېħChBCr݁$*GpH1^nyxV$
Vҵ}syl;rIƺ[T%s
}"X!
(ƭw /]?FXjon,'͎D胏iY^Tn5F)v18wPklzPpp |ڦ3 *oldj An$AhIm#s9 .ˈ4|POR
y t1OS;n|2c*=}sD:A"y0Cڌriwp[:M DMZ(tg>%+v("*>aAC ) tP#Le䨻a5}G/̛Z([F
SAIЩ/E+' = :~;| ZUUkUq8e_i ]9HCǀ&lӢ_%K*G+/#lH$?ÕxfR\|yzU ]MBY ڛ?Ϭ-uRUO cI>9/gn@]&ۚ=&2ZU~"Q ! y
6&cvxT<Dا V ;$諠 Sm-~F 9c Mp0G 9S !ucNtPCL y:㗭 "qEeh zZvw{^@LRTK,3N+-\ F)8 Vg/נ=4 K @rG!UҼ7:MS .dƞ1fS'n~|-:n[2j` MKcLY2vMxפ^q:(LJ;{\)[t+
5ܮ|'q<) Ho eZֿ䒕D(GtW||2T`^8
bܞÃNRvpF{IGđ
OIG~X$~-qJ`oZ YM `?J&̈`uIA~c\h&=)Av>FSy书I#X>4Ay1}; %> a8TJd +aHxm7hÐ`D
XXv( c]@K}9KJ$ȍ)me)Uп_0~gp> +$عb@xͨ K1ixM H R4vkk zd={V( ,Hxѣ/h6 >UZȏw:!~(KNlNb4;%PK@rGvܮaR# bw߃_]{# _{u,R+ 6PPD#/ '; ^dI3Ӄ]Vo]J6c'W}ܩE˻M{FURYZMn$_͘ .WWknéd8G"n ]t@BH BX|F t uUHx['p K2n|q₴5
9ޢtFF0 v+\z{Ci4z q wA!#'Sm@,4:q)QW }ggP F@ G=h,HcTw4v:p$fj|ث
!{HS7* Bvb'.|^c)bB1rfZ
[?F,ØpzFb0i^x^[W; z]6v]"?so E"h;(O]ޱ$+? ݴ
6 V.Hyn0^2E/h[d|,w</'e'AK,_giX꯷\c@q40
+=AԬ,Y8rܢgu}CcnP#e
w QNθd`ϰ_I" ܩ2>y<'}yt<&QZKitWM0o'jprϬ]iǯ _m%X3y,*ۜ$ g Ax,[Բ&dIp92-zkv翙[bu)[ [7%S bK_`\(u('z=3{39W\uO4 ևn sT X":m=X./[/uij_(\α /(hw' FӧBowAg mPk\!j( є@) u>7o0BىlpYM]%io[=I3GNמXfO$i^ªH :HL3X%融6 vq"awA0Fm(E䙳z&N/ d
d/V,nYkiRNy#eGz ĿvtQtP߂uNKz[z}T!0 wyqSwKP^I`;øF
Gj
zB¤o9@tEHE{l-fDCGwK˛ %GF0@EKT|{бS5ҴEWSh=(
r_:q"s\/EO8;:*
i/@
Z6#` #y둱ۚxp+4cQ{>uv"vǻ sitT*?Kc-MR2z咤mg2N a Qȃ')sԺp;zGvv,Y0
gɽ9+'51ʉ"d86d r ;
W>ɱXgê䄇|Rɺu WUa3 -$J`},ȨZ|6>hmOeGcp,'}b h a-x|J/gI` M 5X^k`u}72;2C1v$hl#J~5?
ԂG
bI8.+["t㔬ߟj{+tQvҒۍ c S U "V'&~aԜ X;]/X Ǣ x K&p7[ n 1a_.|G
w˺fT;odQbW/wMD^(>%"ܔ!B͊K%h: {B9}ך80-`l_EJ.~ mƪTV'˫ɳfVә"a+=(e--|9-ƛ; J2kgltG2
2c{Wi[IsWBR!NKh~
KZI7.FLAƇ\D` k6Y#/i% E)f W\ͼ<2* ep6\#Y)UqO u7p$mO t#5{I/^Qs/ P8`{#
p%t@I<QFW3?{XP6-y
Ɲ}nR,M a:'SZH4"[JǢ H+=hmΔV cqR~ \I3^Ŏ~LMW$ t >ꬅӄH+ufRWV,
z["#^_S_S;0tqZ&J:8sG+e[Bh1Hͽb:nl$.#(z>Rcu 3ȉ9*1h$(dbdZ5 CDK2/K G_4!%As#`-k~tꗅx'K(UǨ<)?\C=a̷۲ VyvTaE"-|S>m/@oL=} ˭
YZ