python3-apparmor-3.0.4-150400.5.9.1<>,0da p9|"-2Fgpc oIhC?kVDYbx>-WziȔd2J6T$'(h@xscgPG˟bV \aC~'bORG#{ H_Kk afklJ[sBZһw0A|&kj8$` c }+0"ɱ4%K>>ʔ?ʄd & S= SpUU U DU U -U UUU*PU 4"("8#~9$~:.P~FGUH$UIxUXY\U]TU^ bcªd-e2f5l7uLUvĠ w$UxxUyVz$48>ʀCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.da h01-ch4d SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh01-ch4d 1694064909  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=344ef28ac1645276be8b658523737b9c74bcc413, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR%Y/'ގutf-8d5b06eed0fb6d5cca56a4466137c804b1f61c5881a8c3f06a09f21112c9b57b9? 7zXZ !t/R]"k%{^E) `=l.Xt`g T'Fm[E⧍DzomyL Zo盃-jiTZ1g?NS'PIXkP)yqyJq{!m>4o&(:Ī\z;*=5>b=hq,nKʯ;6ZQ!ɫXώbe+UGqۡhghy V7-pҨVqp0X[2zLcY|ALoeOkGP8-;,$Ll~i#:9v)q=?:ST(yC|kyu3CSg9oYqLggR: 72 2]J R4L7M ?;Ȅ2mE_nfh藛, ln [\D3(jGE2Wpr.}oKf5d6q4/lKcll^!rM9\'ƁifQ>5^Xg7t ijO y79_b&XaSeYr.)(^g OucEdέ ]IKlYFw} %x3x1'&uC;JQ,k,O ΄G .x gvW}*e ߪz#MP~K_w^s 5;OtgKeo[ƒ}~8h@Cv1 _3y=L"5thS$SncKBSFsTlYeԠGt&A0-k96ډ&tQH<n+Gu y*fM}910:w@?4[LݹM$?LgWfhb9y ƃbF0N!;(P᧶3xiFB-0zĵt&\$á:Pe&vY^؏w,Z-5-yUW_T ÁD&?kzzcBv Xjf$Fmy*059a`ܯyaS5uW@-u]iVg#ocת!=D{s|C!YeƧĻh+l t%6Wc- = =D(L!k(FʲHq’_G*gނg]Mş7SۖX #FT>]an1 Vfy"g#-,)B[kzb1^ìVFRGB>cfWЃe }Zr{9G'NV͂>gbn!Hrzg0 * Kk%ClA3$' sWhVUg" *0s]Ovq.=b<(R@-+ȞDGD%тSo5Ju$DRQƎXeZhZ誉/SNf,po񗲓5-)rɯz"!Y:nL|$)gh#"uVm쥖ON|RsY7q39IPdBG@F\gUu!`Qu+QnA]K%$^Q+#n <^ z򫋅Lg\'ۻcoHfU|z:p줏Z\6<|׉6Ng 9/V~5w٫?'j7$% ^6ND[9#e,Q.@H~tEY.,P!:F@q)|\YkKhR1 vdIݹŠٺՂ, Du/MW~iĄ&삾bZɢnTo>TU3 %xyBšG"CM6h,/5t.bg!^%8HEb8ZIW'^4++ɑ=!ڲ.PݰI[}|Rk vK)Ԛ Xexώ Wp rom=>C`NB x-']xv9c@U*/YcDy_(G]nSI%->/J;_0a _K6lLoN}]Aլ>~~OUAQVR}bWb$+{Z9!Feʪ6LJrAL#aˇJlXK̰5}rqf0|/`iD(iڂGyٓ&;nEY_Y!}U;DLa>I =xSQ`/哥Xg;B߻iw&`v6Y2Ƀtid xcOt@Uq%4!KsQ}AoD@?7yTg:d63YOvL52b`ۀi3,f; U94J^B=Af{*|Yx:DN+%0/(#̊/?D|ov^iA60#Znn~o@IXA(ro9mIUN'qoDdsl8]@ ]Gj<~f<]m31_XQBAt1|o9@papnc />@wkmUSI/sA$31 wt\]\$Ft`@-Gϱ6[4<@ hn&}P8%1BOG>PGKn!ʭ[>qOa$4Lha=u>lnzFW|9d]rll} @]Yɶ1AD=4BZw+:7DU3e ؐ#N /^J^?8wQ${^3vqkWSLjl!X=5Ac# h)wqFtU],֕fFKׯRA7l7~= ' sU^GDd)~$:}E1ڻH r Op d1[X"٧@ ŋ ܤS0ì`MNK6޶Zj Nc&RΩ3Ja#0\9mkb,S _x`N€r< λ &H;􆻖/G4zlS4f$!WMf7"kz~C2(+HDzm<^֟n-.8ۧJG&o'(0¡"L5vqz>"J`3RpwP RB5E 1C -s{ሠ`NWe M2/r2 jM`" ¼6S>TQJ-Z~s,T^@K=y<пCC,,7 k|n/_/+iЖ% E05HYvH=L /躣#R}=5!hl<bd0} (*hF@Ek څ63 h:EWlr5RAT. 6ZfP)ڸZُⷞ@nBt8U:z+xͮ܂`]`g6{Y{}%5^u|^I Mu! 1V"='Qv#,cWۧ /~Viy+ J;}m&q,H&/zwv",L$l̄\+؍4Y3׏J}j(;!("zۈQRRXjFkεItc;oNG4y<+ò`z=: \~. B!|! K]"']7$PT}KmbX:L.5`vVŲptʑn:vr@0hL6 Å1Fͺ@O#e#L:zjV!oQ{mlsXB+b <ӳ*i fu6#9 gfTjmg٫YXL B~ƻEVPkJQNqwF*ey𒫒Psw)bɫzU\Cs f~\˥9Aq4$ d# #ȑĊqOWGCK 2٥D 6K;>acPU ة3';2XS@Y2:Evdids$?Z@vc-Xdz -YpV=gGQ!3k;}j .pXmM RcYyEͤ.Mx^~bhv0X2tysv hjJ$Nn 끂Ʌ:lI }Q Ύ*HvCe/- NwiPww9Lw[A*ll%r5p2GDUXCk\`9yPؑǴ|wΥ~x{EDJ4+w~ =@+I31IOWKv"MwP8povi|!&nfuV/k?ktO7mMgs!K'2h$?p4yA[g~eci|`?uUAd1/h}?ʞm"A%gV) qq#Q0@<vh;nh`/˶ *lhkmx>ZNi nNx+LLAwaIRFPG9Ž !ZcoHCYK QIrtG4Ktj16H ԔIY[㛙7%"ĠVۇo ?ekK:?*_}.5~N?2P7hL #3*T^t^cԓZ՛qF.CFF_j %-g{+q^hXp\+~O!+S;rw*Fju\'2C0/]a!YwwrRmbȁERa֬C&&7MHgcb5om'YXze^I0,F#>G(sVZ˥eimC5E7u&+P] Wz co[ ̈́ -@ӟ ؔj"|mqD]%NȺcoGJ"h1 ڙ _ЪAyijZr@ O\ڏbJv_P r.D#ln,vIw.̎7h>~I*.C/M俾D-7a&rAXMt?@BsHTZ,РLœ{m6_("&=yhmN-CQ8W8p2W¹H;6W4bdYMnpX*S4p x=S2Z?"hY؍ZQDwv˲ݮǖ]7hƯAlPw|wӁ,X7Q c+Կ uUAUB$/&3zl*QF<*SE')R+.]ak|h DSbF. qp V+>39ߟYsZ=LPLh& 1勚aL[)3_ɋytmQ2#J w|c%o?ܑ=:F\ěF+"]NQiƏ3BJ7c'W%&^3uX\-uz.i] :Ѭ$(Xt&zVl?+[B#Ƒ_Al cؤ+kf=tp8LWj@^HB$FyFU߈Ie9ꎵ}`&DPqu롖y(h_ɦ92A jݝr5ԌJ}ǥ]+8tNBQ "wp@̙"]nYK=8Q 1-FوI=؈ia3QENv4`~5Sќ.6 1|-(pUׂb5/~P?xdx6xa?CdǬ:޵9n-|Pf ⮳kR4]gJ{q6L1/ot'NeR8 {tr3xuP>,P擿芲V:dz%}0e?\rIz5Yś&mV4L "m %zyB5<`lpE~P C%h6& #[@8;l$y@0P]),|9A#Pxӽ>~wAmg]YhdS7IkGWs!qRSku^T f̼J5(8mwz{l0g9Ti/R/q#yݡA$ +zSɖȚdzQBdUm _Y ʎ;Q|&$ҡ=_[3HOF`B;>f%].s3@(sfΝmA{bTDԈ(MUuӌPa;M1Zj&<?RAyUd@A[3\6zB<8>e'>E14{=A'l2?V2VhF-Kˏ\AkxY-69_a{Q7튅仑 |1A5]=B,VsO0FX^IJ~)T7_:4R{mM$Vx#Ч;jSo_nCoj.yYcNn7ciA-e%nH= !+G'6kʃL"JYP8؋)$0 *A)b҃eT"lS-HʈrD:o\PF/%j݃띜8bJPh<9tz~8{{P>ߗVV7f}|I,⡌ |IX?T97bymw4yNU+T(EJ>`Ca -TtbLmϋ`;i6W]6ZZRs59,vGjB!`9C߿0:LRXHcҬuBtCon,^@# d_ek2I8hЕʵ^AMm_f8Y!CO ",dhU [ e0?uW_.)OM?&ʆnY)) SVsFJ,M+Lˁu*\,|+rѥq!5J,0V ~]{EGs?cczV:gxKy`fq6[>"9vݠji;%UȺұ1IS_do%ǪM@vU|atI&8Terom.pԬYN, ރw&ڦFQ_v Z*'k-L<}3dE8|WA؆bz)\<*?\< c ҊRbCOP8wEVK*&f7!gx e|Nwg0CTwy4NKpU/^*(05rb|3ZD#. K'cJl;][H#H}K#a'jљ>",vE A sN Up}^fk~ Ҿ#2m*tf lg^7i5s%\zAk>\E-n:H};o0+Zk E[!uXk]vv FB%&@2v<>+dv{7f'^^nܵ@da&2aR`'rG~71ګ˖ j}*hLVJ!FkAlhQE,$Ӥ0ݚg#mǭpWF^Ǧ4DŽ+-g摶 ,I7PNEL2r#ܽs@s1@kG$j`OQ`C lův}s]A-?j¢*RQ1)-HP;1MH j-4*ɵؾĀEp ݎÐI9rؖVfjq+OGZe-=-ҙ̮tAGm Tf,Zk*#>̤j xuxuhlwm,2q}p$mnC.)e@b(f֊|p3w ud+:˝!p/?D&A'(Mz6R5ww#1v?XT#%GlQgC օns}`*M[n( a.կ-jgN萓;<DBk %u!NCZsV'`lXf~Mˍ(;~ط}o9wsyD@{1wal0s4]``"(ᢱcOHTMI)[ Or@ˎ$9D/dMoLoV|iK-ءPم "s;Y+)!M˒ك鷩c_YGgCW8R@גQQ-srA2&LLvɨ+Y6>#S`qXc~8+j}=a|4ܳfs]@}< }%;RmfG}>4hb dH˸#RVYG0I seeOTx!Zˆk,] =y :b \tLxt|YgE=^J o}Z GG\[FU (,*ʅWs{*Sx\~>Iԏ۫jdűRRnB]t:u,U*:91%\=D$uaV)ΰ3Ȩr68K殲tme-*#)[ f ѨN#B"I,E&^rim,/N~ B#Mu/XbNbZ݀۽>k[ja,+SD$#~`E&96=1~Wl /?#Nf1_FW"W^nUԣ}?y-O_^h4)IIxXj~_֚hX(( &-И ;bcߺj#x B+iIjspԪL.*g),p+u]O/(!KWeoL Vy{ѲNou,33 9 W=TVDRJ)-dMAhM7ߧCf:/ r01Y6<2 E<5wj W7pw..]hj(b]JP]g0^vtkw%dC" `a4<a*?T(,U_\* 65.oL@Ah BJ4hG+Σ MSdS%l^H:h$CwG@ 8mbsAoЂZRH&2}e@D7Pϧgc7afqsW]jZ6h"d>@Jyiz}`f4CƛGHzhpt=4B,bV6+u::lDy{dm.E#~agfH} Wn!H F<["Eń[r#j˔h 9-~P۾҂l5G93#O b=f1*!]iƞDmA~ȧ-kl%Fuc7zaj~7[%NL|(9Nk̘nvYLbXKtZN gPF7nM#mf;YpmJ+Ayt9LƗ![sK=EB\6Jն[neǦi!xvK־axÇ)k@[uuwASh~N|R }B+68I{ k5QxL?*^?l^KnfW317WL|e[6qN&|Z΄,rcnsir?z_eg$?_y;9E(slqYh?AhcxZ'77*%VKoJfp &|OçxW{}6[YMcӛ{P!w #ר$m۩-龏'X2/%["c^^o}T'bn}-ŒPgbk`*0r5u~E,p*txNɬuV *Oc L¿dc{ZF汻dgQO( "GU2lyyVꋡ,$nmi )BΠ/LC^Ve#Etfo,bdbD $\ ߘ# ˓Nn/!] WRkȼ,N8ivS=ݛIn  _6\mfnF@-ne26Ng33Ba^ȦJsQO(*eB2fv\g:cΈ^ :'Ԫq!Ds1wmtf`aq~F^53- !S!{9ᶀXDpE)fLKʋTFk03Yj@b51ZʥyOcU޽O68!NFsqկZΒA c3hk 5=%@1v>IⱲnѧaĨJjD!}71h)v= ,%t$E9Sʭ/ܚlmS}E4+ZuM _zQ*u~41-yP`7Iq8MܻZRl/F^!LSjW[V_eMSץ7WA@P[b7Ƙ` ob39ӵgTi/@-d Q2@m-6L)s=ffwvNN]5EGckpJUC -PPyjWMa-mmM7{#hRμ:6B"oו΀H NF:Rt9tB5sz(ٸ1k=on?Ԓj] 1Gf˫-𱥪m[<\(gŻ{Ɓ', si`NZd(ξzj< ro#Ҟp kbxs%EQewqẪY%-͵3"|pcr T 7>;/Vy?o/- x*V4hN6z~rM"ٹ=31L kcQcE޾K m@6DiJ.wK*dOs4 ʼns8 r<;~x{A9 M}Vz\H`'/|,A:;/P] l/Ozmg ^,ĭxII3Led%SuB Ȕ37d lÑeEįBbh0a6[l!)ˎdmzO78&PPАOfAui陚_ Bƞ>NCW|aYjJ Ck6i,}NF}m OV[x-g_ P\Bo:-c@G.fo Cֶq6I=kL%ہzciTwFv7L$i{5|XME:߿xU՘κ=cv4 \̦>#X@g$(Qe ZYs/K՟ŻNLp|ݶy(yQGm틞48YcГ~ Yw4טBهP/a<"_P$5N4_p sEnldPN6^) *+I;BrHڸ9v=)ߌd֒GE;VpKҫoѵ%,1#M IܟDH.~I Ssm5rpb_/+w8 {;4D{5 0n:ZHSM_&7^4pɾКClp2;G@,_&FV?ЇXG4łkxN#\6[SB7Ə$ q?jdÃ=4=D̫>IUdS#'8` P@vI.DGZ(_wynZ{ad]$3]f2?ZIa͐ &~rEnl2 L=x2 Ղuz['nnAm}<.sIi҄yљ ،&; 9u[7`7Sݮb+;xkd*] ~ԩ'JLs 8RM8,Ow;TÇNid64"ԍ_>{!VIgw\{*F-: Jbd#OIpCS,-'(ⴺ1m2IؔAtYf7 'aqpJ≮c.u f،v=5iB$3RRzԋ{v%Mr}YI2 .=BZlM§xKYo);7 a lb ޜ*BNt-].gc`,dˍc`bq혚.`;D_f"S5 W$[C;RaL"ל/;Qip {tkZ ƪ=oWI(~ eu}/}d>_7;h6qepOv*F(/ٻC=ۑt;g9(2bZmTkb-^JJM4>Oݻ2j3;4HP/0:Djc@6vCl2記ci@y!*Jۨr5l!Q,ڬ1wSA:t F.1[/[k& Nhj Ld$&Swk>4@B{yIAbؽ8zmv@8<.aeJ.r*ʉ\Ez\ 쬽&|G+t%S+ڽ3JMjPQ ztɲ`H?Uₑ=A\,dx+j@3F((&}Ké| )rY:L}vq\L0яqg]+*PBiؤjq>ΑaNeR"V˿1 ;B~I1<)P CvAުpfL7u5^!g">'O$`l*RN2X̪eZ6;9ݰ^륈曳}Qh;(;)#?ɜ"NQ7 5$c"O-KKe"JeLо4ojޟ{NE\rհ'J&:SX_""VZ0=SME xJw t*2LU}& cKa[}2ް 3tGHyl>_+ rìhkDeWa{9z-*?}dWXbAV^ݻ҃8\yR%20̻3g|gXqRM¥$#>Fi=2. Rtm^CKɣ-ۀ.2Еfmy.9b/.ߝC_aRjo6t2艆k +ONkMwD ~8H4?ܶ~B%3>bR$-)cWHu&-n%Ld&xm])mRKTD3G=ǻ|nSUKPQg;DX;%ǜ $]XU~b,5wX?_Ȳa;@&S\9mҢRv9F Pm50#AF}_/7߃C@5 TA5Ѝ9=ʈ\Lh5@El $߯'(I@Zn%ˑLv`[*GO7n4q'{@%]%7x>H IMf 51[BU!F$4#˰@ѓכ_s]>/i9FJxL ~ևAŒ$x.?wń%YU1:'$pj>)]&-9F&ۥqt^3ǬZ1/ J{SGO#U(w.dY٢k)8Zr6%\D-"z*9SO/-IYǓnW2P{'^^kvc!N{ɦDܨ%by<$4\==H*N,pqg@}&k DkŲ+enآ N\6YF+iXlx0f&:UЧwH:t>q E!N/ppr姹_랮(5ai>f^Ǽ Ɵ~Ҟ ի+^%bH'YÉ5zVIJFW}=3n'l!‡4t:2ԙD<׵PUi# u z@,dfvl2t.v58!G™@l7KsJрEN@ w;NOƘY!y6)c 0'p?#l=? /[T:QKem I9P~hA!$?p[0gd;;Oy+_h8ķNR@yTT2} wntdkJrq/aZaeo/J`Չ)z6lE#əfվK_^:(yp2/YXFRx~w]z=ZH)yjNjm=fE'/nP`eue]=_" ޺z׆NTq*AD|AC08 v 1qlsXfKϊ_#b# 4VЗuʯ_1vsW<=M'0A+l*e.6#i?S^L[1D Ө 8:\D_ukKPߛ^dǪt\Lb)iTBaMK" ߵ1NxZzUNts *4j#7RA or4!_rm )'ƢPzYO(c+^CCa x j+o7nNY~Z\ \ubU(#zMZs ?E{iw2A'lq{n-3`rxBS~ı4^(j _v| ?-wVl"f|ʡY!ܬGeǜ5xj)G @1C{&&ErYP- %M?Ým2fe\7>uo>rTRA2.6I^I8 !Av3e0[xY2qv%!R[>k[ᐊԻ ^M,<^(9 Ñ8BmoDٍ׻[:p 0f۪$ lP;RjL` "{,~^M}*|Gz2ȗM^,eR !XYJgm[0eYTr_V&-9o/p,O3_\Hck n ؈F]h]66`1ĺ#GeXH r 2CE =&pmQ)[eU.y`y AyP[Se_缦e:u L*s"l nT`Xy*[2lȚZAMIsiL+kߡ^0T_hkba,יV4Ə |,U* 8E}/oFBbͲʈRq_Ētߡ7WEg?ٗu =k6g+ Gm$ Q|曨10cVmr;swWMF:ӿKSgL GXu>1ř ]-8?'iM^ .R*HCӑlbn>II'ӗ:ѢmD6.nߦX+«iv8R# ߖPO-h Lίd{cxɯ390*XJí$7/ o{ƺ7rjaƄu155M@`zkupXhݘv5;'_6B90#谆{sSށgkF[(!v<56)l+}QFwŐ׿T 1Nv _vK=.W^Y;>AtUזW=`w,N2M=N!)2iaOXLuR'9DzVNp_Ȇ&[hD`$4Gv\GaB?$}Яϐ{!)ZLu`C~钣U_ LS1+Hj!<]b LP߲ JS޲,H~Bw_ H3˱lWY ?7t5B;N zX۬& T2$@SJ[% 7ZwYb3HD@K=Hzuj 걜/H UU gIѻ r}I`c&-vBL43<}\=Ӊ Ufbڵoʙ?FL+Eb[/B#yFLqvmQokWA9?qM|S{ U][W8u ~i:݆@^=s[|)u-L-W {K/hvMBs/t5r?* F̞ր?ŜRdTVJa ˳ē% "[\{Ubb̀ $RiMOݷg x DZnF?(B wWM@ =U;5QҙdךK|[}3LrIi~q]AElKa%vǎc npd$+hZ@]cz k>B|$0r P9\fQSH@Ю7)>5Ȩwl:*#IW}La3$%7VQLO?'g,<4g\P*m.r]AԺՊ{ >[SppR_lu,&Օގ8[ WGGfziwA݃)YIdNl$L\@tni(AVm\<㕉w9<"V FAߚ҆9@cj>Ru=!(4Lᘸ9p xm \)D=&W8u_@ܶ!^ &׈lU?\]'зJ OI UZ .:#= oƽ8cc6C/< &dֱvvT;ԕhd?J#m4w (P͚r[FA, ,YX:V6"SEmSS'& 3N؞!I i+NRc|F-Oޖ={=W 7C>G(xi:SqVMlYv`]\HĠ#|('sZ)JC!5R98z &k^ PpAEOE>s׮7[r f @"kZٸ93# g64;G|<ƵB7i-F^){'&YWgDfF@lj΅Ǧ:aq|Ʈ;T^-dr?@SokU94]*PnLM( ׇE "DV=[JTMiޟ Zy>!i7n$jP/Z'b+S7_q:azjlHKFsMA9oH02LCH>] *9*Be fR6T۪[c}?frGi'`l7m7^Qs `j u\EĿrihu}Zģ*=Xyx~IBanߞeO8f~E$:B??ђd%vIC+ޡ0~L_ Rb KiLٚ宐Gg=z#z, v4 aU^Wvmlŧ2M!bXw2sU䛰("sK3RʵDb|ʔpg$Hdf-Z>?.DQx'iOUrwdDF)N2@+0Uh_[Gƾe.P@Kn SLcxݾ9ji  pN KMTV.N:W0,~s: #¯9Һɥ&~k_O(dgY)dD>wpX@^!ңUBi ? g)NcNwze.v:Q /sQ稁t@HQqɷ!')8 CtbhwcU3%J.7nq'a4Hszn:g%~YT͖-*І_W&Ps^pXOMزxR~6+u( l]eQlkv;2Z@"\ϼkiv鎎ft\Hy4Kd7bw~ T;IduMyY*a*vv&~j/Q^@њީ|Ga}8*Og[,tE$m^;;gвбEw3רEʖF*kB->J;B8v@E4& /3>G~d}T_yL+<\@Wt.1?65W (b4iAwxB+P׿/s;B,޲0Prj_dp4>_|ܷ!N'1o|+Kmf ٜaw,ñ<ΚT֚0c}+샽V+^{ABuPQ/'y#L ˠw>fÑ7esl %mO" 3Dr 8`6FRV/>sK>)'3/+Z_FCC㥝Jqx^ M$D fv#ӷǮˎOհ~HZdO*.yب;ѧ*=5,"!HLKWK3_rKw$ HJ2O#$,1TgkP$»7ҧN1HF/UO ߠv:k`` -䉾xw)'dF:zOs(Ǫ32QR[ @ah#j]ղwR[@l/9 [;lBk6V--vkŪLDVU]yzCv)>9ɡ6dȩZL*GG#c P;]:;t72uWf6͌Ѷo9ڿP SښtUI=R`󽯙[X"/MIUZޟh:{][:׳}\Fs]qrM_裡-C@z)u"[1J/xׯFAk Dz99RcW 8X@=ix JR8uD\ۿnmړh*G Z]~{5tJj~=X7׿Qqÿ4 b 8 FQLJ'_\xvgR/ hzYҭY3PS@&r 񺶋u7M / lho#8Q # eR w以iɄkdLa"i- "%Lb!V?|{_8SI ݘ{U=(ێN0g%fB( ۨi G47*c?O''%dc$Uu`1:HF?@1C}lJ.;n䶈NDV|9ó@"&]1oMsRvaA})8EGtl0w'@ jBV-V a]RIs1Fe[DN ݾX q0hkX.C;je!O[s&XNjuQd5AxU 1؛da@5xp^9 ) K8t9E部ͷ!6y!??+B9v4GQn{E@r2eJ/K9Ur~C%.Y?VwyEsÈha.T7{_KI8%WJ͹0:'1G-~bmn? .C_`Kf 8UA3?_큅8Z7eY^̸~zו{Ǎ< ; uJsvdRQł/lu{7f4%Եaxǻ^ǭ-񓃢qaG\mcێo0&V7Fr.@&QmuPhOd/ xx&PQ{vw@P׊yvLS m.H\GC=yVg6*lH"pڑSgÊ7A@/ܑ|eO5TDn5`X ݖJ{Q HnkFe(Q5X*{g)V!>߆cuF맇5צ/ɇf!,:yp"$+sp5Ԋ;O${^.0@Llܺ f8u.y5N;bZk{E͔-W nMcJ5Uajxתa! DZm<K_'kzgp]04m*G {Gľn>ZRodL? .v4Ym(U'Iٲ/`g6R&5e}(:2 PXyyg&05ӏPHk ڇ>J^7&Vw6e.{B֑^i30Ei`0z]MH L76^d8X` MYe.&~,Eudq Ո4~>B]Z& 8MACDLs%Qf+;rNim`abfb :y3gd@ZL,@Wd$'y)K=YaSt$}%'?^Li߾ɮ5[ޑ":Wq)²eT9%b%",pG$5)^W%m^gz#|s dd읔!β< jsvuy,A^1O˂uYIR!w/߰:D6MdQ_\XI{99sA^TKW60 ݄(x-:J+LAHF령Jf+ͯHkĚ0v;q\)f662TޥT-5D- .PQ=`yё1=\N ׈ߣ,5y`".=e:`BS{;OmdƏG)>Z'WN]y{Ư{pOKu?Q-Q򚋏L~ T\?\}0q{|w~)QY[*X`ha2MIGT|bK"5SэX#NqӼxL3ہC,{ U'(O d\{8:7JTnzWÕ>gY. )(5G\Iw_7BsrI%Pu:(:qp.0ڮ&ޮI(bnit?WW<Ɔl1rokwf{ .Aep \A i_0-sK<9X Pg i+CY%L`WNߍKCρJtOklUQ (a>G }loW$zs`#[7ܬZfPMg7Od-}Z*F2==Z qQgwfD+~#f 8c0 r#hWg}|< P'ӪK!V̓;:0olV@O T^̔/kw@lƿ;`d?3ZB,)GЧJLZ,D@1Nk9 )}E@{}S ˷ QzBFc VhTs,".50՞i̷~lkc9/H`vf^̷7xGM.j& I_:؃{B׬<K}lxN!3e}K)'!6=x"tcQ ˞U5l&Qی{x ԿpJo.lτ gbaB 8}_((d OcO?[A)2:{Ҧv`LSܲkVo+c6q0O3p/cwEb#u/M{\E`v0,V!iOG{FŠ9?:@F%[PB<4~׾AxlV)l5E(LS=Gl<5ey51^ȕX=0Mw*U+p+8%_HP{k HwwEwʐ{ `K͸j5+rml[y: R#n~At@59ęݥv+^I"Y9)#pCp4M111N;>; \(Pj@ yǯVJKV^f7R rֲdef?oM~E] jRRz 'H< E kzAR#vN;hz𹄅z&]|S!>d>B _ h#-I0Obd3%0Eu[=O]*'zdF9* F[(2a5pq1)Dk蕎[[w@#>(I-YiFXR@+nQjyVn:NIc/׀Y& T LAqmQ3{LO_"UyQs{UccU1b;FIa nຬIX/(H3u0`.~O}(B}ndP4ڽ4rZ`q,7M9.t4b|,&rpM[rMOxUo{6h'gȈdU$<YnLRdO#<סO1<˛)Yk* ";؟M+Fvu}KjfWW UŊr Kk@R_w1Т=$Z믯gIinGR2 _!bL;TX*g2sB'+?#lSjz*f# =Ou}/q>u=N|nMe, >UPZ&NۦT,+fq0J'2!ڞ+)Dḥ؇eY5qCC1c#OVX   }(BýskI Č4L `x_)HiH1gx^vcWܫ"F!7c,;}6PSY%29bүU&^T;DsuZ :j&g2Bw}8Z=Me"_}TEP[pǴwm &@@OdO5|ꠟ#HE4RHlzhFIӎhp=> }kl îA$NK\~ ;$6fCr~Zve'wo0~>TpIc;du9?A*$>L28H̭Ĥ Y(7on$?F[Ǎ y׈V\JѦᴤJy$ـYM˖LHTCw[XJWy'*’L og@Gtt,e@!Lʉ"]$斩<<Q. E-Y'9o[%ZiJ8T-{4Ώ</ޞp7Yj$#<MPW8Q{V҆(z!3*ǎe^7'^ݥ(]`%Ñ~ fO9*ŒAֿ[:iŴūx0r3O9hA}?fe}NV;Ԣ?&ۗDž=&7$"p}i\J+gݜ܂Cf0sFx#C=;6 r 2BҰdW?֙mR'M8JFRC'0i3M1>nE-6ocĻueg BjT)"0C%#DkV.QI(ֈ;@ӫk@d{rбZy%* ƮTZ?hDC T֓rN_08eOeOK/o=ёމEhh?(30z}&`TռCœh ȁQECܮymd aE +,3NeQ˺b>{f!8"{!*}#S؏ c fP ;JKg}2 "k1r* buWH$Kj6>~US;_1%Y]>UvR_Q*2SE&TBCc*FLXi<^dk >o\vTJx^B}H?7 %*(6~X-MH^lE +XϘ藽.xgrYJqK4L]]oLe6գH IZ)qҏ|5ߓ,, &ێ߲x6k/2 |2xR'3XZOm 5*HZEӿ Wf-Q[!kV%ܙAL|’ ׁՒM-S >9'7u=0)?cFeP`f™;SXԥVψZȔ [65o,%R m)N$9t|4cNJlXroEHʎ ^&Q\@+oqDGqvy$/3^W{(Khr \53>DVfJq!ڻoPh ;mBYLYq- p7~ V\/fX| Ne\h_yH~G\ay<0|E$t~uNlbJɄv]^_s7G.h9ԼYf#E@bd16)Np ݺ+ilM݈m(=a'Pd܂8ډVd8k=_`SUrC3tmbpډ*k!I|=FULm2q}tO(gU*X`TpR{tRj dJ]̍END]N'1)0Wh oF!߁gw~.+ >EP(c:Erm8?3h 3g9W忋Z[~_?|ےyjbo GzL\'/ɲ[P^#t@4]GYrBz?lH*3hC{whXVP<R\S_fA\X7Czp/zQޚR#e/۱BݑyKt J}+RhxP&,U5(a΀⋝gѠG]WПlêG8pUPh*JA]g"wz0{)US3T?$pށ Ҭ@(ỷd!|C}nQ]71=]zP逶} 3Zԑ pn{Ukgjc\l.u盺ؕhhqsѽO;%SڶOD>:?9`4st3j)0h]*sGП,$:_"`퉟no;e9f?_O0![&B 4<[Mk};(*qFS=TPX>cxN\!:'T~gGQD{K0-]UF)S[P;q=6L'Z:]ۣ}vaiXv"ҏS Ȭت=s榗l$1 v SӤGs]y1{Ӓ(?{cruQOOwfj':I݌q֭k?4IP qn!BK UrAx689M=uzZR2s>:΅׀9n^jeTURq̈́QܣtmO0+2>u0O%ٵ. a$b~4Cc2Yw Z&'}ܻpuc,ce B@0notlPv_y93u&P4jT&1hI\֐ AUL_A,B8׾~V474_?)9\h S#fbwe5QD;*&7p.3ۖkH֘x(X'1\oi_UqJжc'$I6c!!1kzV3&$~my2sxQ˲PpdCO\2n8I! VKL%?_9)Kti kYwu6Ős6w_ۛO&T* T3}$ᦹ7FꤙmFzegl.AoFv BInT2;3нEBz8^o wG [ !K;>rx?t7d"g1~ Xt0Vl x5W-;Wze-Έ HbDZ+$\ o1:ȅ35+5EgrNFnߟ *h¦d,Fͺop*zdY'_i䶱kKIXsڣ=]-(ʎŮTlXt 9p !ג"ˆ # ǩlNI`+mr2{z֬!|3O̳bH׋rv#N+ ͽL:WqVEk&Ve#ԧ/Fr\ rd+6_f}"29أ7~ - `^s|T54m{d >l>W;:a06!k[TISL1"X52v."݋\;? rP ԭ$u^+uRY4[qus֒&*{z=v?`_+<=_UAZUZ%"E`Qe׸8+v+2Y`CznzkD)~@8BAG^{խ m4:)|6EFP "Y!D ,2#E"qC{T5*܀|bd !."\XBnݴXB3ЅtI{V:ZZ]:㗴M=aPM56N{wZb{6I̦iINC(I#c)=i+}tǔ\3DFe w] ?C4 KUҗNs %v6j]\rdHIQ̽S%dm} z/e%tpxBH5BFxy05u ዔO6D$Y+}S~2 6趏 mr+!t'; ;)9"Rbh9jXYoͳ6j;:LLz-T7~ kVA/ȠV_NJTO`Q j$D|<کQٜBsfC337$]b'XHӎG#¦,av8-_D+2 +Eq%~,ѦI\œ%"mnHBm$ާ򭳥"4mɯjW"@p!b쬊{ /O-,EkUk!dP%i%q34ZϞC:Cu?H+bS>01=Hyme*eBB18B(~$IQ"k< .Pȩ%jD‚t+HV[hl/Aj76ftz `B^bۡg~^eCGk[9:u]xR+[2lhϚQrq,R+0x25mV,‹7 XLX[Tŕ.N [,R[s#W1퓍,_4w>+m%׼$=/BQgW7A21c\ Nu#21b99;[hC@b, Ҧe?>cnJ4U=[;R2-jۣ 4%ڣ&]2Dth4aG/BW-צr)7HѷZ(zkgȮvJK~5V5jF sWZϛ@l\Ļ̻/Y62|:6Xڪg`m2t|㇐S~vF$6S{꞊@d!VaJJe#HqeNI 2pZ]{P*a \,!#xoj)-> ߫ۏ>'#%*QhC^^E'Ȓ4h߀EQvDž8V5)P^UɌBs"YѼa\Ǹy,3儕C9d"Z)ׇ/Clgoz1љ( YC by|BJmHK{ɖrُsëdLGj0']^*~G] JE;1TdVVj<Eosl`~~9*[%DoĥoK݆iESq2翵FX37*.S8pPT瞘17&}s?pOUS{Vɐ="Kr;lưVGFDVQj(q MxR,ۄos[%W=p)7pfA8K9$RyξO L"Bν +"JN/@.!9}vZx7qk=;}߮ hЅUs7 }>MW f>>h=vc-ɛ3TRJ=>$$$\銿NlN܊}''+4eبy3&r" !#æ뮠 qVKFRol40/r:%WtO,! Lbp=(נqifo&Hf~K)7@ @G?1j,4u',PhתK x2Q/I9vgOCA&fef&^3`r0OWS%K`i<ؖS4fԋŮ/@D% #(d`r,5n\creApM? }ss"kΠ ~},a['3)s Z!>~S'JFj_}<~6<&icqVv,{_ɗMk3"En;uʦueWsͽՋUMZ=.7+s@qNC 4y.! s w2ʃ Ikzd^Pr=]p]6ϑ $)="DId|Lf[(Ɨր6wRtJ 1 ?wdQEȽK@A[SNэ!6n=I :ē5y%1(!,I" d` ~"Tx֑k7a̎Ų~FQ:iQ]v†ǗrBuj4S7fed G?/J햦$+;<ҡS~_)qQ7v%2-X9{$h#B{#g<ݤ$),ΙJ~#xvOTtLu@FDa.c#qzwR1lZD`/5.8hNҔ@rhjۿY@{t4nmޅ 2`G8ɐT 4KHiFDYOQPO9ۺr"ylL gJ7ط>kW TWTK + dm>d mȈ}TҪfItjàqV=L7DWg"ҕ x҄^>dkaǭVg3|;J%<-"OqKwj?K Z$Áyk+$Uŧ|մwJwQe`Ke z/utf<чU%C|j) zk+r ?lV"sq{SɟQnT^m=a%2$@jśVT2UI$l!BY9\eRW5L b"F4^J_4KqI#0{۞J"7UM hLaQvݢuND`z֤>#o?$8CJ2.TG6DLI u?.A)/y=}JO?1?)~ (>T"7 =![M~;m/y349>4PJ$tWtceI)N A6GzyXRO?FHț.VP˹re w1`Y-/mhAdא^5txƹ>Yo&Q**U.[\L\8pf:-WA‘!$)rb3'8<1+Kւإcܮi7y*,E=Uu!ZVnRLuȋۇ\VY=yB%1Lvfs |~<²:)3l>  di!dĵΠleP cjHȮK,\+L0zzZx)c% ##n]]PiiYHB)]80vF'N@]ĪqQ#Y)@t,lT}_~iч8[;X`|$[h+yVi3 W}#iPX3S[ nkhTt57j5("{7URPDݍD_ԓ.Uprd ?W1xH##1OoG9xX.#Y#\H10u5ƂgZR*yt4Nռ;4 5#^'JdE- A?_Şnܗ/xo˼xρP34kzKnF51 *^5Q; 9RST>ޕ_"coIJ7^2zd V֊Q=@߇2B\ ga"\-djvo r^PtWD2lJKZ:,Ш(Վ l-vZ}_Xs"+wY8οY[jVZ%ֆĜ Fl+t͵hJ ]Z?y΃ߩpB}C|?FeBP6gT\P;,7gsi5zq0ƐLi}1 2u3$amaP$C8~9A݃.${ zxN,i[*G}\CR,t6SpЛri`L|_ f %|h]5l@NI -PzK_6|}}çRJ0-&PbȍN)hTh ?(RkQZczZ5kApe*HL{$`[)w#=hY%kM lgb7yVPh&W9 )f1 a9L=&UHԏn6UtBM@;(1L4 3}Fʃ>R3.ˬZ`:,LMž>FE. NBsxU'$ɽ %莓Q讶6_ ohXq@%|LAV 3}#ݱvyL nawב5O#OqI{[~ ߍ\^haԢ!Sbh/NIډi1f&hԷ\Z-!g#3 {3*5gkĒrԝ%YqПصh!98UT!lhA`B锗-~%_',PGEM]5^ElZ0XaY9H LKo4c*&n-đ)")ob J GAk`j*#f벋hH<=Lb{Drg5)7vB=t[5_Wq)Q\nKW1>RL&|O&L0sT`ԶW4D!GD CoN/@'ٺlء *Ɓ t̄37UO0эlo28J +!\{P\S\B|AOS"۱pݬP.}X›1k=\>>!>^׬W2!|-˨v&^V RU#U5uz)R@Lq84rk"^50ꣷm >keB)8\vܔK~( Bh'RL5(ZGeWi&]ok~F.ٷHיԷYDM2.~X0%.Qj>éG2N~ EYlNm M<#{Rk>g/ݠiL#Tǩ94TH)b>LfxX!fYqhԛo&47aDCYVP b+%v zLgkO3!"nqXFB,LhX7ei4=S+mL[pI|k*ugOh6ݭV#>Y,[I|Tߜ;)=AXVvK2_,$hQ.TTlC8pteI`F濫.j,jrHyS$,Oۊ}>8<ځλw_ƴ B\_Ieo