python3-apparmor-3.0.4-150500.11.9.1<>,\e%p9|j\!RquD&|^7=a!0S.º׺ri2Oϧ^A4-K;[@M@ 3y:o_u515_SZ* g!S1@ eX W ,j}(qLk\mDIm8㗯f׵|kͥXvfҋބ+?lIu<|~lksWUKwb˜ݏ1>>t?dd ' T= SpUU U DU U -U UUU*PU 4"("8#9%:.xFGUHUIXUXY\U]4U^ bcÊd eflu,Uvŀ wUxXUyɬVz`Cpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.e%h03-ch2c SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eeeeeeev@eb`%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-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2c 1696247589  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4acfa4e449ac6720014bec7850e8f0e0406857e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR!TN^CLA;utf-8f706ac215f7e64bcaeec79c1a3d43ebc8af0c8ae0286b75e641797760cf9a566? 7zXZ !t/ ]"k%a D岻N91nHG-Ŗ򱸙+wfy#\)¥T|2+ pHQ[&Q; @LsجF_vA3ʲi]B('E4ի^-,4hk ͡]pyE Rv/'ILH|fn& 5);9j]\3K|EΌ V#*:dIj 4-bO}ݓ7f'/f/{7~J[sL)-k81z̷Rd.0?_8o (s=T7~F g$鍹Hw\[V7*:E#^Vj0"x/L_0wZ6vHQ$7&(~qRCrk/%\ ziyĎ>ZuT ]*oӝ44jrm;u{@k7?/ hT0wXWvU2A*lhѾI\D)?6k`oXFCzTJޕ,h?)A|.ć!YuKR6-o~jIjHmS{v>È|gdBZp#7GzPn"5mKS!ծHZev Pٿ._hBI^| o [#b5fF ]ex>Q|Zo4Mx1{IɌC#AT\1JYхq<\ly"P8= E6).SFT,dĻ<X1O'`OEBi%YS`x,Nla@im(7 |,S+ ڪQc".Ś3}Ҏr䧋c5ai4!̷g<& \8[bM ( 4~8x} &-FT1Ԩ>D,]"ms@Cbh=D6u ;7`̑+JQmfͅG~=P;sI>?mPϴ;" &APJŃ>qa՝ uЯrJv 7>2p$)~ wnpE Ad8=!yO$RWVLjAL Qj>JBRKq\*E1sɂܬڱ_ )nr Rs(bq $hjR4j E* 'I!ڽW"=uc> 7ݞvKCI{!0_{xEQhDyec3B8*| soRԭnbKap*072)hg'9ADX=ϐ.?u{FKM5.DC4yv7طNo&':)u۴q &BLtj RXK4&c%{]xUE'2A{C?{:{ p.1ETt%<Kp]n볶ҕWAIJN=ѯˤ '[X0LIJNƗPNZ sх7ӓ[ ]JX͸ސ*qW35 BHsԇh bE*Y≹ iY˸r 7 VCMaŁRWp%^{UoǛDCNS16 o-.׺Нli_>}7T1=`̛`f@]_,Xar% A 84 Avy8]W,Ao S޵SOz7-N-7WGV^w[ `rΰ\_, qj_zU+ʌ^Z0`(?.QQOMN$U֍}Y0FLoD/?&e=k w4xl2ߔ?j*J[d}NZ逎P;&n 1+4J/7 5_%Rb)ڱrYN}VaV$ðSoPZAL`{+Ad(dEȥMȀN9^m|IC{W >H6S&5[`QAE5qc1h~c̟} ;DƀP@35ۻkPɢ,b͔F_Z({]٤q1!!E̵ cc6()o[%4,6cl9 !bf\5FʽϑE  Xɭ&>.y \McD-c o:4G2n)`ؤnc j'\K%p6l:Pz奏b4}%OU )Y'#LP}$I!fcS[7%e rIJANFJ7*$^b/zYQJFtg^\CjsZ0ne:Gas[SN 8kʏ11ܶ$X ES, ~]J4FhIG<͏.d\%OF\YЌ,BMUi7RҒ0w,EDzDSP\$>n,-@ԒCj5drfzOҬ>5p3g#-:w vI !2en"U[pTWeˋpV\EQLM&5d@ۑnل49A!u[tCN@bў0,;]djCB&yTip,MbVvA a?=p|<A2.>#(Ӱԉ-)wΖ+bdΣ@IM=+˦7|22⢱zɟ.um½aߥ]83~El7lh6nK}=\hmѼI7&~ƬA-P m P&EhZPLJҘ_]p6O[=2Θj[O|%B6%AHWJ,D "M!u7JHOuYNEp N vDj7εSM%k+Stggӣ~Ik﷓[b˸^dG.$e5uW**qv[B4ۚ?ӷЙGa+z+ܓRF*_&LinZK6)5P|: 5*Fg0)(Y<9/B0*Y Ʒ^mVIݳڇ ;VRdA̼Dl?EGj ¹w EJ?[LM(Rѥ*B;cˇТᣥ̍cV7}diSρiD0"4un:~*}- T{M~9$RRRqLw0s$"{?M[N tZ jbwOLO8pV|b;>񋷖/k_" rK|[Xv%2EߵpzS"f( VD9l sI؝{V5l?CC6ۢvRC7//lbC~qP R`Eb `QRs%b4V0vr2,H3)_қpI(|Sd &= Cy3)/Ug@}~Yq[nEiIF ,6Y%$%UA<-_*0e3ǥR+Ɵ*7+V0&.ysEK|%!?»|*=E$; vרrtyFx_v vV2HAMX(s.YK˹W{u' ,-=dͷiVQEơ`yJ2A]N]U8ZߖdnK%6">/8у8} 1s6.F(J-N)[u `Cָ68(T9OcזMB+ 7h]cd~I_ C^vd˖ld_jM'O6jL)-vd3GTnN,&I"uwLjiaZϺ/_\BknnVMYS!R=ܺ[ϋF);=䳵RoE kVAay.}k~RY孙>əo ZНnuyAU/,8 &5[.^TAX=MѾ×sV87rN\x&2fYldhI^ qN K]霑aq2]H&:'a'޴H5a~?m]쒯@j[F`h!6ߦAGDULm."x',XX|~y.kz'"gX$~6-?XV8n*-z%9C$[ԕYo?bz'H!>9b:HhOxro1rIZi<ǝ>EAO17^q+f,>+mƓgdȂMZTXn_({#_P!9"uK9u ̈́G JВ(fZe-JD~ƭ.)p#5|W<w wOoii,c|OK >>r`a\)UD޹u8wAFUNsR&#tI,'wFGD5AR؇pk,Dԥ.n7 xײT##NRJF05Qf dH380-ʞs4@'+=ʯݼ6fc$&'~B۔ [?GP'nN;銕;Mp#M@;4LյUu#8 \!(!'1aV 猭ߌ@Ա" h f{hr]nw;$0rXOī&%TBM(>WgsHYY_GMv'$0w.CRtQ ,jB3V_a4A`I-8g,Y ) !R7>ڏ<D3PR7 |Rʖ'r rzk.CC! 2b,Ub?j^Fbhz95\d>8 7f7RSCB2D|e}#ZRnvnf[C}-ܞqMZMmyEi1qBhסulpފ)N~ DlO^w N}Ak?b|oS)<"Ƕsu!/Gp'EόҞWn%ĮF!f)>+KH5A瘾L˃S$eށ[AƺzΨq So1>(=ld P}w0EG҉bl&]h^=ݶg⧑]/K62@@ZŹ6qЦtj.ؾz%\{LjkB'ObRbI-%~klfڙm%l1hƩsb0pIA%j~\Xd#}dp,e ڠ@O=5,3ևmF/N!;xiZM!rb`T,*^v*Tb@a+ aCD;(:Qbk\gJOJJ %$S!HU?BxB5퇘[;Q[$=سO`Ȭ:'L.sJqqjEӴ!N HwϲKWզ P[ # 8c;`i M#|axG,wEC~zQEϳmqݜbBADH\I%;,Nx,h*H6?zhz.z5O2גРug2BNφ='@U[쇷T/z35Gsٖn#Hbs oIJ ?k28NGV?G, /8.Ml/W;_&(VޝٲVpRyDْ/"كQ@^/դ+e$A|P1%+8-sdjt{Nl-\+3/Oq^:Nޏ aܟ 2@ 2,kt44Ǩ|Le3k 9ǎDS:{”5ׂAvctٓaP;b=Y|00!,\bTFWO8wVzI]9f_n];xm2'5kX2"?Վ}bC4!Yu`A#@lu?VdC󠩑RNB`VhM vs8_-jj@3| iGo5Db| c-7@vRj1KǽOTg GLQa9)*AOdP?v)J÷us{qלZRѮ<<5혘"w/jJ3BI;9F]ǛjAKq LM#G~FvV,,69jZەo,똤O Xbu76*<)狈 A?|uNǬ*w)τ9V : 9 "^nU ?%* 6X$x+l/Esv9<%% zżgBZޣZ5U@z 9!ˀe{uwtjja7ѤPz:ARkתzGb90$2*2Ji|'ê]22(J}3#'umPTgZۀυ\g:ΠeU}C8rP [kI5TOVroW;_0`XNldG67`=.W<:0M`OVN;- eíآ&+# mqPP, %mMĂ훉g0 ᥇Z4Qd A#<Ddmj3(P# /\$Ne<"_qs" TerB^98nkDgD]ruW,+ծ⍃ c;1ɷ${5-?0[W0 S.DC0jT8cbsVIMN tJhAPI#@S>'Wm& ؍Wi^Ui̅Vh^ߢ_/tLԄ1Q3چg=vx6p73dze&Z?1";Ox11VY'!Af mD2gnvykbh X?&d!f3 _Y24Iuՠ:ƒ e?K_pt7;] +J dыj->nMfpt@qcI:Ԥ6J\qLX(RF@A4@ad>6ҦB8?5r/#@{k PdMP5Q2TJF^.{E#ar<|Mgۚ,o-q$&ZTA_q榍#4 X5-u}qGJ6i78#2B6&YpWTZ(ZF!mTNەTʊiyP#&KJ %$Wz'Q3 56+*E C?$uOyg2juş|L6BLQ X5{ytټuc[tJh8qcmUa٭d1ws`R_/7 ڛSDJ7n}:6N>c̙[f)la]}Ӈ\E}XSX5"iepYoUzY+[w"%|*/=49h)6hRLyHu18J)FFȾkn2)&9JYjs'pp\p+^l@,Vk aD; pc6*<#`55 |ɧ9 3! vHhuzAݴ80{' yM^V[Ahδ~sT b*xg{7LLfJf#$ N I@ f] 5D<0ֶ.NvJwpX/|ց,|9LGW2ז(b&q\⭎$<VvtzR{7ϺiM M%THoik-d Ϣgʱ e~LabjYimRӛ4hoDE3A0( 8/{mnEH kۍA#۽^^~B$pxmٗ啌},}zmD7tGuY>_iY;YtI8m;Ў/0j m詙7ͣT}QNycum5>7y(D;Po95ܶf k*D $&hQ9Ʒ5Y.IG \lW خz9*N%k 'ycIǠr:kp(ν9-DAޮگ:4nH$ ?ݬv%M%pB]7 сZ^A +B25ݘ^fk:r.zYM 3m_ $GwFٴ$)*PIe,sw 6B 6gFSn!X{$09 )xL"Rfל±zK8k<ՔF_N$1I~ͶKP2)+]t{ (Fpf{+ wLy2^N d \CCmRʀnሪLyBv:_n 0ƖV[-5/ <8%WT8#k 7]81,:EQIk2q1wƊ͇ 4 w5xk~cxL&3 !oJ|kcUL>Tr!6ިM_ڕTt;j٬$(!5Xj>1IP&,JތL7Ђy`! 2.8,, <6e]jh.|ܡ*:d쩛brdϤ?8ydQSnF$A;g#.ULz CQq*3a'Ǎ)ЏmJCQ=ުD\/jj`B#m:\%MkᎴ6XxVU`~1ۚz&!.R?vcͩA6peQ Ny`@<^DɮWq-J}`O=^2opd:3j$yyC#ʝhsך+. >B/6t?ʣ1 mzdlBDOh(Qv7J7]sKXf16-uq=ixPQSlaj(ӄ`fn܉:RY/(bX n<5zc)JrCyP2(Ã#s72&Y2l>MKb'=ww¢gA3-R3889 bb#IͬgB̫xP\MZVh'd(A6)J!eEQ @ʟujڷm.LIb9ć߬ݿ=Q;2Ql9*b?Ѭ g̟Œ\$?8z} 5@Rn@Wי=4bdp)l>Gg: \_<;%Ff-՛IMgD:6ONۯFPxWPf|:u)?VD~) -ZC3,U(xs^ iQ[j:FJz:D  /#X=?Q( 439Gl^7jʼ~J5&+->̪޻/wPj,;G4d.~jSD9IWv^{$t%&ㄉmYpˁ@ɷ|5#R{'I/@7~ƼB|SiV#Y:58yIE*H ෴Zʩ:ˡZݧdc3+~o2Ak+4G񗌶D80-% Ǵz(qHV 59l63N KɢHb.D[nEqG`6.fX:*x+"VL-~#4;YGWd/dcbIQf/xaQY}G%&YR/YFor Fm=Ffo V,x?9 G,BClwU;t*4^U@ϼ?L\A whb, Z:WyXEh"+^y̶MW$;A_*TSM@GvVoߍmjYZNl f݇]Fڤ*굹Fí[,Zd< &FY(R]Bz90Ԛ3_r-7|=P{fGܯ#p|45]A }OTw|*3͏30yUMfkeiE+!Ȓ􋏉"­7 L(8ۚ><fͅYU)Z$fr: ՙ2$E`^@8 FzV݇3s7mg`D;cKބi-enĞE_>-AIDZ5ңww:OE׉yĠ^ԭ PbUk Pg^@n;5ajų0,ӯN?ό)EFf"Z.}կIhI/k1`w"KvדF oH5}#4'/h 2%hs7t6%F`;"⧅e-F (=@qv|:c)' |dg+&=Up1Gt|]z]=g7/yrd;':;`$Y?w1œϯ/jg3S VJZqGY_s҅)[jű`QD h> `k\pIVSLpqi =Y1T%Ft ĶeWjwg={G2h &@+4:7cg{\tp*"NCe\Dە,vy YUvJ5D O|Ol(- ~25[:ND238 2 Y*>5LqCW`fǧ|1]:TYKG |Yށr C ۺo^+\*9K)ld+õEMX;=_`B&J{ qR5#=S邻ޮg7>saKxfNb!& Uė3u%l9ݩ E)Vs& Wb exa͢e= k 򝟹uT|5 q芁$]0 7e߭p(lņ4D(nW:Un{;VKvj͋u9?1(ӳ#C ?;5]`㢀,Jbz9'~g̓"߫^fƦH%P>&v@5iLĀUw%r)ҜIe-w%+m3[8'aMq&Ӟ*w?XKvuni+Str6$\D^xޅZh V*w`&XezcDt~UlGe?"bvُms1иu"' %<~ snh0RӈomNM9G>%Ϩa_k fc І\̋iPw+rRT '!Dnmo,jMjd-n:y`m8 PSWpXUc˼`>\뾙e$!./98I$ > OAXZN zZ uZ9.Kޑ*!;<Ƅ,Լ*Ww/ ê.ӊ㏞onc#e@Vď7&(A8)V 28*8 b]5 b.KFꒄƯ>lSf9ӕ辌Yn喷ylj; 8#T;o<:IV?E,fE*cSb6ypzzy50w`oN>VxmR0ƀ#ԿZ8"!z>,Y ѿEҩ]U"JB7W !S}SL :{j.| $]4YPBEZbUfC(Rn؈PȔ_؎ rV@)̊6P5Sq9e^wZh\:erxN3VH\CwǗanL&sFӚt8V=QH!l^.Hl9()/lj *>eq.l&v7;'z Z⭰)^* hYRx m.^fZ's+溝{%4Rb犩34HmLvMN.X9)X!"7sGGe$Ā#?sO==G5A]HiTON_&\9/ ưTRKԱU7- c'+d1E2 @doX{k.}8: Ct"RJCUmvmeC$|(SX lݨ"T&i*A89}^IhI[ nHS^vEr^!/|Dy'&jZ@AKVN2ɘM z0\QcD@qqѫEC@h4@[sW,qINbfN|#z\xW2`Xf΅ SQp>s F<:hy|xOpJ?Hck ^|,DG (AR:pNvPmНfCIn2ib[oH)? _}Օ|興?͒71TY.E82Ix(8 4S;u`tٰ@衁~d%]79pG즍7ؖ: %44ASJV=" G/4"?6848-Flpmy*T}k0p+;,34I;~ y&CAΖ.kaNg”Ξ(uѱhk\+[|KV*rx lq>7;yCzQ$hjYA6Ҽ 9LZnuL@9sjx[:$s!.$O+(u6l!#5 9pLm//a$2m*x9-c`Uh: ķLAB|ŨVa^jD81ī⛛K鴉.ioM̕c(4EvITuE+Ȑ$d,vUq5WŚ*.PA<* l }Ʋr?U [NPAW@Qˌf7'L.u@{Owǣ<(1א}1ܨ `i4u5j}n-~\.0tri{#]*SAȂˠ_%>bDO|dzX}8" ftSkzx$^o#?ہm)Ox9iri7p XV<O㚲) B k ,H͌zpŶ\rr/I'"J-ZNj\g1ϔA#AYJ53?B$GVUDZt, b!>Ag[I Hho(#1Zu͸iORvh F;jڝG3cĀϿ?R4 +F)q'e4#pA nyobAK莚z9o^Lkh>.4YQaz1Ҍ1 3̇P%v^RtyU:"4-=q#79h o6W\f<(TwLqm1ODpf-;! լ, PwpbQF&cmq#ųаųtG:N#׎6"mD@PP؜M,N(nVKղ@q/8?t"n&+T }v]A({e {fCLr YeReJӚ6=wA{gX~EvyPNL9x2[ G2:lPw5_H- $]0EKKPuI1hOKD"uP낼qe"2rFU֡ƺ,G$FXjL`hAo1hⅱm.v!{K+W\! R4FҶ(Z:p[P iăCAzۆD-8mShr0當˳C|\gJPq{05C"HtK )Ccb"-Cכ @8y 'fBtCB "ϝWi *d*Er) fJ-mp^#DMn a ,i6婦63K2ɲdP BPz(UֲWJ)Aȃ!P@lX>w 1ݱٌ6V5\Ws`0 !ji&m<&F7$_-a+5<@յؖ?{u-̓MMirQ 5Yʧf_=%€ q8ǫmV/&WGF]{A*vR-*l iV)2VfM6Lb0FfxLr1w&ͪEJ|U(Dlx`3A.ɨOηY1δD_EvNS\si@1z! 86RMr+&LK8Rk gm9mB4s&mw$ vLj/ 򖎛[z%oAw;Q0R>sd@ 7I{O&Bxcɵ$iAoS&=[+BÁ :Jao* 8Wdz{&Ua.Om yCRG?(]T\m!nC~ -rg+MZ x%"B-7)atL V§xo_ m@1"wK/7|%_AY UH$+p[ݛP|r /!6!D!b %n}xʜRY~qz bIb T ?;pd3u1!0hJfAu0܎mrK^3P͢w"ʌVW@>7)? +ԎLzfƜc,{t&ȗT]OI,y \6Sbp=h͝|.Έ ,CeXu]cʓpl3ѢFE $5^SX*;6}R.VsvOk "Kw(fCUT4֊%SrhJ V{6+.CFLjֱ[A#cT1y>ޔ)u.Q9\XE:c]@c3w,[5;Ss>j :9-ق)"4Q8'2dwP&j'V?jg侢 4[Y>CF5U"β)Z,hh;6l9t./ 8b:3nkdzuI\Pwp c+-тH/[WQP$Mԝ=v"%q;І4MT/<]\QԸ7-<}`8<_W3d' n (:9BX;#S#tVEȤiܾfJ<$Hg4NŠY.>|8_S?,+YqҶ j ebpwy(7ivzqSMCʆÏ5}M1 ," Ai[uh.(V`%i:: MpA*7%}Hҍ5=}o,(N) }O,O1V4&Pj8sULd9D5Ch._]oP6C>z SRSB,\3kdM rN0SKG8u\- 1R0& }[);OI#0eh$~CO^GFntoʇsd;&| %K:LgfT7٨>BiDڃдT\qQ_~j r\xbJR< ,^ +xj2^AƋ+8QzUd7Y_A4L [Ȳp94NPއafNݷ[S(,%/{zغa4Íϴe͌z+lY8rbœ65 ' hf~wpbK@8SuE5W3]XĤaڐ{\i&Ӈs&s\T^ n4a:ĝͅkJ|78^=-Jj X +5{wX] OB6{(? XMK8 SZ+Q #& ;?U/Vc؀] wH2{7\ ̣j@0LxrwqBZAn5}_sҝYtzH{}9[RSK~dKG.؄?m ]b˝m͏B3%O|v\G"SAj8LҀ$faNjғ:69"zl9QUƤf=֤vDPΆS0e2Y[=g/Y1CNgh͆Mxs#bEx/M /Xf2&*`[\" Gb GLAtJ Z}:~#._qu]$4!4fµ5=Vx$%̴釂Q1NzJw6F u%AcuTNa㋳rih|Uj`?x[347Z<Ƹ@i%@Ie[jsӲĆ=~Mې@&?d/kMP H/Ԩf>RcF w`dsw 쀮 @,EbYS]4/_HghreQyL%Ίm[H8M 8GxCӲ3,-qaZ/>f o rR>z` vrz}Z<-aFb֣JnܸTGari~U7mEp\.$(=jn~Hڈ~K>r("=k$KTM%n~#tm[9'&bטMYH&xf<~AzV}O%oAHv&&#'tD 6="fV݊:ڌqCD')(::8 }vYD\QJ>hF_`ZXSˇ;FEe'DGٻk jؙ.)Q2=8El`1'7^?WI[Jj~5r6(c)?>[tvXVvlasNykINMcSQCiUtFbfT{~G'w7rBLLKA9[L;*X sLF7 ;JM@sS=Wi7(Z1}bz朹7NeWq2EE*> Ne{⚦o{zt^苖-:/<2{Ég4 &29 ?Aoeb" ZhaYb)]`=)󎋶XEF)y\++pcV׀!5x˲ĻX "UyZH=h J6ph \&)&&uHV&U\ͅoKÜJI߶>JM/E`e|4ٴ3ÈRґyQv(jr@Kӽ'$v zٻfr %o88 2Dc'yξ^'1{qoI]I ~|,<$!=@W,{X/21uNw5 oN3-mQKU9%NOOB'gu3_~+s=bM_JT~jWg%3l&NWCc՝4P_?Ȃ넆%NѾwЏR9=\ҨςE, 'kJs@8VS*&b͹g)&(߸ޟ^ʓy~L1C#ʋu+ C#h]_;#ıb&x)qe觗TgڽObJı ϪXA+?S^IN|\ekaP540>,_qԊSyLd,?JAؐTD`¯SΡ$\?)h̯y€[%Va5&+LZZqLZT#>LS^Q;:A>ye}BF۴a酲tSi9NXM y7yj4;5뿟,vHx'~c1)Rja.qѯ t-~$yguTy*Q@>1 eam ;pۇu弁Lߐѽ24i^ø%8 4§KEK)*B{*!-p(kvq6i(>h81bMUkB֟"Gn&s3t 7`Nk|҅cKQ`i [UiՔIOIjʜୀ׃!שIksZMa) BĤ`P,K@ɏ_", GuS]UsG}<l"^6z4ZԏcOpLdk"[Zz?ڼ9\f3>d.H_&X7`n'qy-'#Emm`)bO+YvwƱ@ o7")spq0d[5;w8o Zr~SF"ůR8STAa:}[ wa)91ܻSJ&_m6t+J"_~JuoV r紜e(68@gRe G%r92#R`JM$ Y]mF+kCX|p!o:MGg17=a.'1Bt.\ػͣib\,3ȿ3-.;IX8xr6"K2#μIG[nlkNus93`Q: HtL%fkoq;;.#{,e+llןm@EL] 3)jh8<0oh~8i>0"8VP,wq7 16hOҤy<ã% UL" =yGX>N(-Tku2NZ60 TN׸wwNlF!HP̺Lj\ )>e;erWV8)#ʗwwOU'` Nh7L)'4,y`Yk(aQyBΘ?TI/S<T\I0SJFmk46}|{ KVyN_K9>O{*#ԐM)$GcU50IWjϗ޻ 6K2̷FT =9ŋh~_#3j9rgw8Advl#F3 nkHO!o&q* I9N /sET?,hu"ps19FDʆQʹ Ѭڬaiԍb}*]]tb b]3,>sg.WWjK3Rl2!+\ܝ!F:CQ 6#mOzu/1=#pW1q is'ylvM82uI$_gg2(M3ӝJ\+R<.xjg'<qFRh6B; ejXdc^Iq2Mކfo%)6t.鰅 ]ǐ/`Y*7}l7]i#Tq hCy Dz_vrH>LnިvHTW7Ⱦ{ 4ؼosu{TJ(fhT;̟1~ׯ9M>BxL&l=B%2_-z؋My 'rIP/5u(i.oU!Hְ;qև,efzCB*1j c"l $ C4lqpЫ$yP45OMU{ft)  _jl3̱|eKj#nˍcdwu= h:a-14 'j~< Fe*?j 6)_'qCtȔ] ӸJsPGN8r})&PҫsRݯlzFisu!>1cKY3bqvv y3l^՘iWyQwTB0b,QUDT$8",ؠů#,|.O"#UjpzifE?][Ry\ͽ1oqAWLTKV*! ~a,PL#iQ@%m,ɤt%p6 w,H)1O5q*] =*^5A5 {P$`lINZgf|y.WO/#=%DDi,+%}q-qp,z D0 dG)"D%BE(mᢲwnVyZľbYrFd#}J'3GJwtSST"j<6[ kźbcw bHN0wf=X$LbeA ͎j3V}Dz哺0$z逸sL+GJ%?~RU,2s+><[u(&4Cv?^-rpZ[AbeurT×Շ[JQUu3y Y݃GO@<1?ǻuP XlO,E0h< ǧ˭޷O.B?'' 渑iryè9[SN-nf/Q$i4%d,ތd\`+4܈X,Qy##{l' :SٞqULItf}!q,0p bj\gfb:mlY:1r:dNUC&\Wٳ%) ÞSlGuiij{ۧO l#mC2Ɋsƨ`oCyaqR/*u*\(y\e7B P*8p;AP{ afז INɃNG+)Tuta~یr@m1":z0Em)bta0yvΊ[ H_kbz3o y/;Tz7olu=n)6b,ՒfTSvɚ% G$W0%6 WW_y$'޲TZ7i `I( ű(U.2`SxK.BQ>I]m0v<ݤ$C','č^Yflϼf=S[=kA %&㕒dRDg+1xCDmc(}E5G49y^53,Y\q-C-i 5LPj[`hsSe˪I @h+DLtbʜZ,O5EWE(B\^6o= <6"9_aSVUo)R2q4E EGU$2/͵*$<{ܺQKa%zѢ{Md|&BN5%td}V,PIZܑ3 X]ݢ"#9{œhlZWUt[bIgjf7PKhr%vIbnnw{ToD$`UF͐W2!us8C-٫ o$9Q_/''GVL}66͇9 q$IH1qA$%,TH'dl0:k`gj&h[1XDzg%Ѵ?d(`I2VRS[8p"h6`x~-QARūO 1~ \tYc00[n0mH ,N6M+cZyˌs֯[ԩ^A+ oƺD;+˚2A:W۶,#+U.c@JNSny=O/d-B]7tq+㾖DJ\?l|d:w{pH=6*&wmzV͔xa9b &wq%F_jr <Ѷ+5m߯Nk\Vii~[d_1ԄB`%17ɒ5 i;UBS-RN_\4r_=&z[3.ԉ_V:{IߞɂJtUO U;B!^T 6ê:Xɂ\'䂭vX/Yj;u_ mofXJ EpՃ!tA2[3B=ܥѝz8&!w&7×C|碾x^A'O88 QO(b> A̱w? lg/4I 'epc ֿJ;JP/[X)Q]X\H${Sz[SlA'`X>ݹ9B+2O+V3;/bm/3leE[Pm_ԎqC՘ݰKnw uXĉ(k`&3$ll=?tF*?iւjm% qs=i0MjSPY7+sR-/+J.Tldq8j1Qn&Lf;8?Ij8*o.~rj_YDAœ#YKE_b̬0/ifKV5i2~@Q 'ꅪlHf[|eRlF"h{x/ޤcէGˣ yѮ:ZˀtD4xސA<^2"~.| PaT̛5l*@DKꐄYM>r=)/@ VIC.Ďrk@SiX$صBg ACz,쒄Ib vD*ed^xWGYtM7, `{'UFnЂ$3ĎZ]`!ĈWF ݕ eZ6|śv~M 4*[#Pl?h-#LUQdEuv/NFH\'Sb=/78+VHC?K>u:1{`+㌡t+$,X78G[\W_t\J$6ve_8#&3̖r./iԽV9 %!xAFybcv@)u i]*$ɸB^Ez:^*wP4uԜ Yx0ur'or0vijΌW˥9}8ʖfLUZOc:Y&obvDZHjBEs)cl(hȀ>8Sj2G݇]|'4NAϰ$~̭Y3Ȓ;޹F>g,t[ qSV~w=($e{Ī"tNTy, G\5j@Mا" qSڎAo)D{d'!dF*M195r΋͡Oj4S$nv=y 7Lj%7s#2,^vדrm 2xqjDV#mȕ'n3ghT嗴fkil'u>F%Y8ϑ3uD^|i"QQưxjj&% kGqc@\yD^= 8]\ 96$#i`Vjrv" wRhjq7 ;Bfve{af@G<㗂ovȏE$Ԩ{N5BřΦ%h5k'`UK.8~ EUkYYw)A/LyLu*d-DH-zZ jZyԬ2<6_!B2_ZUv[Ѯ@fGzhg>ՊxꮣtM 頫Wx$$T7X\;ƲzÁ~X/Ϧ2CÚ!1pgv&=56:#ޖgv,;Хa"k'f!xH5ȍyEkE~ÿ.$#C,1v>t~a@#4ibb8]-G:ZyN԰xnM:Z3>Ďecǀ2DunUߗ||V')o1 ]8N3|PJ(\rmHw5)T\މ$tb^J?fV  P ӎc|8N X<nl>l و8G74k#*<]ď7o*6l /m~Ry |Wg;ݤr%YU_? wځ3uF1eͿ1u[:2w WlSwI2Y^aJ.v Nq4N"]ص(#&)bHv=)O# LٱoI'f ʂ ה7ePۭSo;5X8Xa$Y6Ĺ3OABLND3Wt<2ddJ:mt+Ʒt7 _Ķ!0Ђ'2Y\W'!o -5QѴXnn1O 䐟Gm|Q9fYꩮ T y/*ڊ~tkYȤnS3ZFܠ[T 1% .I[9ܯ l^iQڟaj/_G'ĝ3(,'DcJMq@ts Ҟ,٩> v/Qc`[ Ap|§60X;$m/m)*ۻE+`]'cmdW[G]< <&j8BǺ ?I rmkTBDzVxD,T#4rI6/]Owq]-.兑F!qz †fBPXa?$.g}UޓN$K0˔o;珡^-V|<|Z7bϮ5Pf~&(ZpZ~نu|Ma_Mǚ ڑ4Cu|qd9 EN@޾#4U\Z;5C%ZQad.c?e~ t>)XU>9j} !+fsjZyK$`R) yF/PŶʖ/)*.i)0)gnN!ìY.qS}zVI[$ںډhٌ?mpT1 iU&]ua*iޮ88g5Jy;(mXΐ0tJk؛mOsZtK kIi}/h".n87H@xT/nz߳J 2e1k5nt ̪Q/m Xm @F`k_TCbI] 5niCJFJ(mBlkcڸaE9vhPF V2Q"Sy AeiM^a$ }"Ehi8ۮIPcloWU8X$6 \޸b.:หY*bVHf,)'PNE MMnvֳ9 7<5~dd(-+]HmS{;*eHyOxIL$V_~pZEMU@RYW;~1l0K>^CR9l *M[HĽ`tFud6Q GhةMۭ^dP,3*k$7JZXAxr|$`ϔmWH~Z:/%WIh@G?[&|/Yf֦XgWM2vzT3VkL|9T~ ON9zí$b)5%`&ꃀE%j~RQ&ؿebM  a7l+IޒSjG$GIj}\Ofx$DDר2j_ϷzfX·} Iw4yMϔXr7@=YKFU lVk BnA=^AK?GDry݂r5sF?e61W y&xFT^9m%Nn^* -kϝ\묑f݆݂*Xz [jH4ԟߵ1G$$fᚈբbKω2'*Zo~유]O|DnGx*$OL D኱huVe'1i lDr !>(>+scϰVXK ,9D /Hvݬ-c瓬\[& ?2 oW5TOŪA [b8;5*/L&1]G ҃/l+c'ۦIk.~gboXrH,m8au2/"1N5ի{^^a  `Hd_ɛI75 GܠףY ZŸ gk5ON+AM3tcoי$1%S9/ި}m'vߗ=ήϟY=x뢜x+t8X<=Q2n,~V*0_½W y(efy8.2ktk쇋Jŷ RcAN(lf \؉Pd/:Y7VQߡ+ybn%DWL2MeʮjXg ^31щf &CW1e麜0*+Q b CzvjˋB74=@UqhÍZ6/N=udy֟xqc5t̞K hy.-?﷈qg'aZ[)HqWa0Z)îЈp YbnЏ&q;'^RN}|>FnnuEgrgهN6&d@)Vvh:tzHkxi5&bv(B91 }tX@\Ay"nT:~MJ^e !; zh&=^ dvrM_M'U\.x9o>9M#Ě?ΪU~x89P$؍kM%a<ݓ+~zo?"}e']S'NȾ61!q=au8(b]4pÓZɫzQv1=aGc# gA?w΀q0,pt FyCb?y d7\6ԕ?7Uʥa Fqy,u|GݓwDF2ja%vSIϢPdBb؞iGoU ł$I\GVU?,`Oɣh'KQPiTju8^@vb\&G９?9iko+V 'jyX&jo~5mm>>TT%#Nd-N]>m7 oТ gv=y, s'aa[`NgxovtV9 ?9 UVNbrG2;]W3X(T=&oi(zIĈHX,T:bļ|0Qe 8,m9܃ ;c#c)hF p/[BݘIU?`8WXhF'"8:2 x~PZ^dv1U_yZzёz&/B=al\r;;rv{L}-.ـA-L;'!0ic)zrzEPg % ][cE䩩sLIUQ.?qaGywz8\p$?b$/jLLD+0~-Тi~(:9,Y s!AҊ< BѤǒŻ?arc l1~5Ut9 jyIX-kf)_zM[q&8k LlN$#"vq c/2-]&Cwрl`տҘh^|b֮К7*'Ǭi`, "fqB1$!V:Vkh<}Xd$1 7h.ntˬwM+xNe''5S uK@;))ccTv]!?}EL8  e>4\7QbmRޖst?s*im{]2x6q/vNb1oChA'/d5^0)ir-˥Axdmt*}|П| n{sT. @7VlelgDŒI [w,Eݧ`ɽ;@LˑWZ?c޿v\SL6AWjچ rΖ|mJ5Vc 8]TepRA[R Y `J|a di ߟQcyw`t":co:~W沷LM /嘘eDIGǓoG)!!AgTb#Zu8 PzF;!u{%_`ۓ] TtZ/$; ٣NEBa>nFf>04wth57Kj/wU2eB:{9,A'ԙ%ct8[F/1W]&l #Li G['P".ڢ}}&pu |DX:bIőN 2ٛhEi2as #=4 YZ