polkit-0.113-14.6.1<>,j\7/=„^IdM.76mDI<\t `iNg7uEDh?hd   8 0agnu  P!! ! X! ! ! !D!!!4\%%%(U7\8898:"!8=Xh>Xp?Xx@XCXFXGX!HY(!IY!XYYY\Z!]Z!^\2b]c^d_#e_(f_-l_/u_D!v_ we!xf!yg<zgCpolkit0.11314.6.1PolicyKit Authorization FrameworkPolicyKit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\7cloud106MopenSUSE Leap 42.3openSUSELGPL-2.1+http://bugs.opensuse.orgSystem/Librarieshttp://www.freedesktop.org/wiki/Software/polkit/linuxx86_64getent group polkitd > /dev/null || groupadd -r polkitd getent passwd polkitd > /dev/null || useradd -r -g polkitd -d /var/lib/polkit -s /sbin/nologin -c "User for polkitd" polkitd test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in polkit.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in polkit.service ; do # The tag file might have been left by a preceding # update (see bsc#1059627) rm -f "/run/rpm-polkit-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-polkit-update-$service-new-in-upgrade" fi done for service in polkit.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi exit 0 if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /usr/bin/pkexec fi if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /usr/lib/polkit-1/polkit-agent-helper-1 fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset polkit.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in polkit.service ; do if [ ! -e "/run/rpm-polkit-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-polkit-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in polkit.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable polkit.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop polkit.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart polkit.service ) || : fi else # package uninstall for service in polkit.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi~A9K h`:8p8c+sRV CAA큤AAA큤AA큤A큤AA큤AA\/\/\/\/\0\0\0\1\1\1\1\1\1\1\/\/\/\/\2RսQ\1\1\0\0\0\0\0\0\0\0\/\0\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-0.113-14.6.1.src.rpmconfig(polkit)polkitpolkit(x86-64) !@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(polkit)dbus-1libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libexpat.so.1()(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libmozjs-17.0.so()(64bit)libmozjs-17.0.so(mozjs_17.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpolkit-agent-1.so.0()(64bit)libpolkit-gobject-1.so.0()(64bit)libpolkit0libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libsystemd.so.0(LIBSYSTEMD_213)(64bit)permissionspwdutilsrpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)systemdsystemdsystemdsystemdrpmlib(PayloadIsLzma)0.113-14.6.10.113-14.6.13.0.4-14.0-14.4.6-14.11.2 /usr/bin/chkstat -n --warn --system -e /usr/bin/pkexec 1>&2 /usr/bin/chkstat -n --warn --system -e /usr/lib/polkit-1/polkit-agent-helper-1 1>&2\@[= %version instead of the exact version. This will ease upgrade problems should there ever be a soname bump of libpolkit0.- Enable systemd inetegration (change with_systemd to 1): As an agreed target for 12.3, systemd integration will be enabled.- Add pwdutils to prereq for groupadd and useradd.- Add polkit-no-systemd.patch: this patch, only applied when not building systemd support, removes the systemd service reference from the dbus .service file. This is needed as the systemd .service file does not get installed in that case and dbus gets confused because it expects it. - Make %{_datadir}/polkit-1/rules.d and %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those directories have 0700 as permissions. - Those two changes should fix polkit so it can start. Fix bnc#782395.- Use %{_localstatedir}/lib/polkit for $HOME of polkit user, instead of %{_libexecdir}/polkit-1. The directory is manually created in %install.- Update to version 0.107: + Try harder to look up the right localization + Introduce a polkit.Result enumeration for authorization rules + pkexec: add support for argv1 annotation and mention shebang-wrappers + doc: update guidance on situations where there is no polkit authority - Changes from version 0.106: + Major change: switch from .pkla files (keyfile-format) to .rules files (JavaScript) + Nuke polkitbackend library, localauthority backend and extension system + Run polkitd as an unprivileged user + Add a systemd .service file + Several other code changes. + Updated documentation. - Changes from version 0.105: + Add pkttyagent(1) helper + Make it possible to influence agent registration with an a{sv} parameter + Several other code changes. - Add pkgconfig(mozjs185) BuildRequires: new dependency for the authority backend. - Rebase polkit-no-wheel-group.patch: the admin configuration is now in a .rules file. - Rebase polkit-suid_flags.patch. - Explicitly pass --enable-libsystemd-login or - -disable-libsystemd-login, depending on whether we build systemd support. - Add a %pre script to create the polkitd group and user, as polkitd now run as an unprivileged user.- also use -z now for binary hardening- Package /etc/polkit-1/localauthority and its subdirectories. They were forgotten because they were empty, but people might need them to put .pkla files.- Change the way we pass -fpie/-pie: + Drop polkit-pie.patch: this was not upstreamable. + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS when building the suid binaries (pkexec and polkit-agent-helper-1). + Add autoconf, automake and libtool BuildRequires, and call autoreconf, for the new patch. + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build. + Pass --with-pic to configure instead of changing CFLAGS to contain -fPIC.- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec- Split typelib file into typelib-1_0-Polkit-1_0 subpackage. - Add typelib-1_0-Polkit-1_0 Requires to devel subpackage. - Add explicit libpolkit0 Requires to devel subpackage: it was missing before. - Remove explicit glib2-devel Requires from devel subpackage: it will automatically be added the pkgconfig() way. - Improve summary of libpolkit0 subpackage.- A quick test reveals that the systemd backend does not integrate very well with packages yet, revert.- Previous update missed systemd-devel in buildrequires without it no systemd support is built- Update to version 0.104: + Add optional systemd support + Add netgroup support (fdo#43610) + Add unit tests (fdo#43608) - Changes from version 0.103: + Mistype in DBus object: PoliycKit1 -> PolicyKit1 + Add support for the org.freedesktop.policykit.imply annotation + Add --no-debug option and use this for D-Bus activation + Add org.freedesktop.policykit.owner annotation (fdo#41025) + Default to AdminIdentities=unix-group:wheel for local authority - Drop patches that were taken from upstream: + 0001-Add-support-for-the-org.freedesktop.policykit.imply-a.diff + 0002-Add-no-debug-option-and-use-this-for-D-Bus-activation.diff + 0003-Bug-41025-Add-org.freedesktop.policykit.owner-annotat.diff - Add polkit-no-wheel-group.patch: do not allow the wheel group as admin identity, and revert to only accept the root user for this.- pick some patches from git to add support for org.freedesktop.policykit.imply, disable debug spam and allow unprivileged users to query authorizations (bnc#698250)- Update to version 0.102: + pkexec: - fdo#38769: Support running X11 apps - Avoid time-of-check-to-time-of-use problems with parent process + Fix backend crash if a .policy file does not specify + Fix multi-line pam prompt handling + Don't show diagnostic messages intended for the administrator to the end user + PolkitUnixProcess: - Clarify that the real uid is returned, not the effective one - Record the uid of the process + Backend: Use polkit_unix_process_get_uid() to get the owner of a process + Introspection fixes: - Add --c-include to the gir files - Specify exported pkg-config files in GIRs + Build fix. - Drop polkit-CVE-2011-1485-1.patch, polkit-CVE-2011-1485-2.patch, polkit-CVE-2011-1485-3.patch, polkit-CVE-2011-1485-4.patch: fixed upstream. - Remove service usage, following the new consensus on Factory packaging.- BuildIgnore ruby, which is being dragged in via indirect dependencies by gtk-doc for one of the helpers, which we do not need during the build of polkit. Not dragging ruby in resolves a build-cycle.- Use %set_permissions instead of deprecated %run_permissions in %post. - Add permissions PreReq, which was missing before.- use LGPLv2.1+ in spec file- stat race condition (CVE-2011-1485) (bnc#688788)- Remove PolkitAgent-1.0.typelib from main package, it is in library package.- update to 0.101: * tons of bug fixes, see NEWS- fix file list- Update to version 0.99: + Remove duplicate definitions of enumeration types + Fix (correct) GCC warning about possibly-uninitialized variable + Fix another GCC uninitialized variable warning + fdo#29816: Install polkitagentenumtypes.h - Drop polkit-install-missing-header.patch: fixed upstream.- Update to version 0.98: + Fix scanning of unix-process subjects + Add textual authentication agent and use it in pkexec(1) + Fix ConsoleKit interaction bug + pkexec: add --disable-internal-agent option + pkcheck: add --enable-internal-agent option + Fix wording in pkexec(1) man page + Various doc cleanups - Changes from version 0.97: + Port to GDBus + Add shadow authentication support + Remove Lock Down functionality + fdo#26982: pkexec information disclosure vulnerability + Make polkitd accept --replace and gracefully handle SIGINT + Implement polkit_temporary_authorization_new_for_gvariant() + Make NameOwnerChanged a private impl detail of the interactive authority + Add a GPermission implementation + PolkitAuthority: Implement failable initialization + PolkitAuthority: Add g_return_if_fail() checks + Add g_return_if_fail() to all public API entry points + Use polkit_authority_get_sync() instead of deprecated polkit_authority_get + PolkitBackend: Don't export unneeded convenience API + Update GI annotations + Don't dist org.freedesktop.ConsoleKit.xml. + Properly reference headers + fdo#29051: Configuration reload on every query - Drop pkexec-information-disclosure.patch: fixed upstream. - Add polkit-install-missing-header.patch to install a header that should get installed. - Remove eggdbus-devel BuildRequires. - Build with introspection support: add gobject-introspection BuildRequires and pass --enable-introspection to configure. - Fix groups of all packages to be valid groups.- use %_smp_mflags- fix pkexec information disclosure (fdo#26982, CVE-2010-0750, bnc#593959)- add baselibs.conf- new upstream release 0.96 - Bug 25367 — Also read local authority configuration data from /etc - Run the open_session part of the PAM stack in pkexec(1) - Bug 25594 – System logging - Properly handle return value from getpwnam_r() - Fix error message when no authentication agent is available - Make pkexec(1) validate environment variables - Make pkexec(1) use the syslogging facilities - Save original cwd in pkexec(1) since it will change during the life-time - Complain on stderr, not stdout - Don't log authorization checks- update to 0.95: The major change this release is that the lockdown feature has been cleaned up in a way so it isn't specific to the local authority. See the NEWS files for more details.- Package documentation as noarch- Add Requires on polkit to libpolkit0: all applications using libpolkit0 will really need polkit to be installed to work properly.- new upstream release 0.94 - Allow unprivileged callers to check authorizations - Don't spawn man(1) from a setuid program - Add polkit.retains_authorization_after_challenge to authz result - Ensure all fds except stdin/stdout/stderr are closed after exec(2) - Be more careful when determining process start time - Remove temporary authorization when the subject it applies to vanishes - Generate GI gir and typelibs for libpolkit-gobject-1 - drop patches which are in the release now - disable introspection- add upstream patches: polkit-close-stdfds.patch polkit-no-man-spawn.patch polkit-proc-stat-parse-fix.patch - drop rpmlint patch- check for the right binary in verify_permisisons- disable suid bit for now to get software build on top - split out libraries to follow shared library policy- update to version 0.93- initial import of polkit 0.92/bin/sh/bin/sh/bin/sh/bin/sh/bin/shcloud106 1545378871  !csda0.113-14.6.10.113-14.6.10.113-14.6.1  dbus-1system.dorg.freedesktop.PolicyKit1.confpolkit-1polkit-1rules.d50-default.rulespkactionpkcheckpkexecpkttyagentpolkit-1polkit-agent-helper-1polkitdpolkit.servicedbus-1system-servicesorg.freedesktop.PolicyKit1.servicepolkitCOPYINGpolkit-1.mopolkit-1.mopkaction.1.gzpkcheck.1.gzpkexec.1.gzpkttyagent.1.gzpolkit.8.gzpolkitd.8.gzpolkit-1actionsorg.freedesktop.policykit.policyrules.dpolkit/etc//etc/dbus-1//etc/dbus-1/system.d//etc/pam.d//etc/polkit-1//etc/polkit-1/rules.d//usr/bin//usr/lib//usr/lib/polkit-1//usr/lib/systemd/system//usr/share//usr/share/dbus-1//usr/share/dbus-1/system-services//usr/share/doc/packages//usr/share/doc/packages/polkit//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/man/man1//usr/share/man/man8//usr/share/polkit-1//usr/share/polkit-1/actions//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:9378/openSUSE_Leap_42.3_Update/5a60c813760b988272f25212df6cff71-polkit.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linux directoryXML document textASCII textELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=6eb14cd6b756fa45e765f172fe5f87186735c290, strippedELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=726be8f4681cbba852fc67767b22eb83a594ed24, strippedsetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=14de18d7577fbe52117a1d8aa24852db6fae7b3a, strippedELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=9293f95cf9ee9b627b3323fd2fbbdd3a25abbf06, strippedsetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=e83ee27cecdbe6ccd27d4495c6a754ba3baff2a4, strippedELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=15e90a02ac66d59a494282e29385000f6f59c8c4, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)#- RRRRRRR RR RRRRRRRRR RRRRRRRRRR RRRRRRRRR R RRRRRRRRRRRR RRR RRRR RRRki:QhwL/i?]"k%Q0wD8i|n,Gk +1e:R&TOެopdQ<}|MvBlif*G@F)ȟD{x6Y8Ju &LDi^|N&ڐ ZK|-gT 02nimuA*@T!4:u0OV"FVI34.!@,ػ0T6. JC>^VBVޅf/76 Rw}HQ !<#ƕ: >gC!Lhfzvs}Y,γ:8\iP7o)\6ɋ$WKPt%;լ &t^ 1su _;~^/Nzx?{2Ru N9_KYg$ԷrD)kb*$O!<75uf oDӬxA;_ (5q]D: L\`.(ibʄt>fHi=GxМ-بKGxtVXqe/?c>!};#u4/8t:`&M)F6)S=Fy~fzDcXhg=(2 mD _Y/AKI1"{v0 Uƿ)"tm¯$ F?(1/ZCAYL4@#<]<-g](<  z¢i 08l"s9j#3cTU%ؼrΟ C=V=ZT4z(`N!<*bs;,U._C #9s2}5ReG*@ϟW53 11c=vnՆFPsٙGoQ\PR t 6YaQ)[$/i"aMx݈t+Fw4s6H3SL B":nϮ@oMww'tS5TӺfP&NxW0S Rŏ-4B&OUAD$5~.j>[>ߪ[Ett4n-"R64;5\C쏣ǩeb$CO Iu YcdX$/4%+6vC,Nd;ASp)35L xvnV;ԧf*iApxTz@x1Pp OAY{ؽ.n :E펴iYjb՘] ʔI.R28ZܘDmQoNG_QI g7oXW⾻kz$C 9Fx!5e RʟNnb2ED}x!"7Du߱OjM8 re;$Ҟq@_+w8^ٵ@qʍ>aE^rB @Yĉs"}>"{d<9R/<hԌ3|>1X8,5k׽aZ& l=LVoG>y i,] ˒ DF:J"iW$PSeR9~2fG9h8ph-[w<8;me5D %|11f>U$y(151wX2E`b'w֡J \&w^Giw\2 gQ )$AT N|nHO=P_k8 zMq屺 fi ;"ֈpFϯQO%mE4)N" ЛQ))PW#c}qpIpQثJE&9Ol,3>t֦˳uf 1gjdDD8bƭ\BAEڑ$@LƎ#1 yf"*J/-T@J ℍgJ%G%O@U\zLgF}Nu=壑7=c_^ +R3 3H~޵`R6Jh7qYk(p$$2(o N> Fd!,!Xj]7t7ߏT-.iZ? neǫ` &87~ vjEyeܧG-qF&W ; MyB3?`*'alP2/:`@(sXm`eBFNLJBVsq1q0f1Nƹ$d׶Is œ%Olz;N[ ۳dz˽ߨ@ 6zyx_9 wA' oMGt"V3V-5ijJrs y1O8Tu9eD^46+AB:= >=nwE|+-(x ;/AF?WCԫ_쬪A2l|_6m9(8Zc6Rj,G:*>_* um2m:,.`"!?8j٦eyo7R:m&xK ksm:Qȣkj|D*69w:%ڂ֎]ezZO8ِ?'u]3tޔ\)J%>k ] (=T5Г4tC FE)3ij{2񧞏?7)Z"pTG՜TO.v#JZgُ9/J嵵{96φnA60vuTr- ow#"`p*8+[G:OOeit2ޱrء"s3fm[41 Q0/q3<b H@I"ix4 Mwo"B.-ag{_j$XygբSAɗ3q[EvxZ~6it; v@AOFbH&/ {Pb]6CXqH6m8DCn2)ȎboU4<dN`.̡,71b} 3kDx jS»[D񈴎Uw]V9-FK -a5K kgVce-EeF5HNir쎃u$iS s^[%9K.;0&ΏE=vQީ,pN %bcLHV]d{_i~UUl~w8 z`StC0|W9V#Qq?Vm%[7t .uH.x_kw,Tߵ|>w'5Ҋ:g96-)/K ,jF*[~ߟ]1O P'.3l)pMijZ k/.g XrI t $ˑOD$zfK~X`7Eۺj`"U7Jnh(&~=-HKx4yثj@ }HtI3䌕 b&'b&N=g *qTcVBO-BA=C&m:]н_10Tc@%~ \3@a3KerceosFAh9;j`t,T19ԇw}G5 QG߱Di"sj+/L{pUfRkb;dFtO0<u@H|g"=)c yUяoъ65_ϊz3u- uG!s^;:%'kkNMzyaAt+6S!$?瑞40L 77:g\|E&Y]!( dI#gs *Kiep-QGzhAC3F˹o~>pt%*1}bnɠA‘=ɑT=8}R9/V1|SFЩXG>a4p{9sڿVPC6_/v'tsЙJ1[7=Dkb氯U`~7}\qۜ|<(pJOb\Y/jI"?07@8n'% }]bɴk]l}ފ<;uB(P)2\+ɪI`N;ֺ9 Ή {8sf#_rlaA&h]c;HӖ=i)ZP(f#{w0EZ}mK/>Bf&* `SIsb"YDυT5yS!yϾ"XӖZ&kE/3L$oMzOT0spA`0THMz ȧ 埌idMy"&Tؙ<9ӌVy]|nQX!Au9p ~;Z_UcS(bjhn#O軉mq@ Y1]znCkn>RTBn1{a{Ěu+nEDPuVo#Q~ 7M_6onw 7 _4ٻU4U= %n-9B zYwPDK_̯\ۚgdW޸cḻpOQ46x|^lk+T2\u-a/&tR 5bG4tfvyV]{mCL;.-1$qDL>]_AD|<#mģw.cW)NJ:Vމ2 ǛnS"W |4su@a՜ 1v1lUL$PcL4@{fe=5 tQ3U^+]oo pD5:7@R[;/L.*m .ʠkuצGߟE理v21Γk#PDBnJ,mn"IgA@[x`b<(U7)C  #ޖ3iK[jd tʽ^N^{zgʹNkw?\p;}":`:rGk2CO fJH˶.HķCMm/#!%4 uB(/7MQ,mt~_aI)PM,ѝ RSx9>Ǹٜ hyɡg(PQwraM<) ED yέȺOMb4Q@Zz2 Q $}WoXrSmw.U{uΉyKY8WAOv@MBO0w BR5뤄͜Ei/r#AY@ǭ[;\odZ`j9:KR #5["3 fo#,0Ep.nO0`֝d΁Xi&+ 6\жis*PBlGN3R16Mb?".4(M.kɲ#WC5 #H5y;@Gu=C5V9^7%sbڱ_aTPR9(j0ifߣE =ܯE%jq]ɚՙ*Fw) ީ>X}ED-;.1mEW:LjT꘏2{ڴfLLnR;bR?Ly]ZzF;*^lO7q nP*2Wf3#f@iE;*>d!-V[R ~e[L|$֏VB(YRm6I|JL>hh'Wu{uMxٻV-GȬХ-x#8|lT$"Hg ;NǶ3] A9'x/ S#sX ;并r^#53X\Ͻm@?w7` >+r&NW׭f25Hp`cFqS4-Ka8FB#eQ0L 58f`:(DǑT{i^ke }7]ZaǵS\ѓ /eery va٭mKSMޮH6KV^z>OF*k>^yﾸx5-2~QA jYP1m4+^&EО0EVnx#Pbd y._I 9>LGzꋍƱϸQ˸?2GkBR/2w@$׫_ Ao_J9ָUx)}eoa@SyKʅD` ؏x}ju% cf!?VX.nEէw=%~#/#ZgOF+ d҇ &GAL͹f)7oD\*c[9]1;sCʡ&-{cUHĹ{Ë38I\f!CѰȔlJ~6 ^""dm:U5QV n=ah%8py{4TZ77^4tFl+t)ưXL1> 3%gV7yu9!peK2*|Eb1e[‰͗nk{3mCi#A0Vļ \ PcKytړ{KP Tt)X*q K.ZYեoC:VӤoϤ`ay[At%=W+ ^I$y.L<Αbqm%:ޞ3UVG9"1 G/4ibQ2-߅:A tj'єjֹvQN%g:䫅f 6\Hh>mU>t 7 Sne UX=r2^GVz@7$B]1wҭM +yD9樽3 N-Ql7RN}5<Bshcv"q [8pgt-w2A-5:ESG >6|ǭ+^IJ48hSh_ Zq3+1v-ré4ܪY~8_ ɜpkײ@Cԃ/fkJa>GgjřYe۶YK6c69~^k !V 3OOӓI_3VЮ3޾L7r=o[ ɔdR4`I;C#\D\7;z4DTIae"հH$z*UTvrDb1TuWo pɱ)y\<5 k`SiYX#1JAl/  PtA{R݂zUųU3<4 J`Z^<%QZ Y%E۵]?6imj.9x0䎈Rd%Bvv] A(]6 6gpKo_j[ %$78oq`Y  ܤqz#§dr GM5%# LϢI0[D孩=A0U5)2E#@#\@{+3g̿&=6b[+3F;ky\f}H(?Muoz΋\d5kCM)3zAƇ)‹qaэ/`a. zEBGm]`x.fN-P^hX滹ڬ,>dWI(䵣iVo]GPdeq '!2~pT{NE 7xgreF y/W!Epf!gy+8 ãMĕOZ;'{-ɜS]HI. ̸7`MD=@_.6&+=s\M0b3X/*cX借s)|:9=KXD .blxI~{Mju. QjK_=I&5$"2ɉL8m{g*ieqv2TOL L\Es Fnv ͰY+BEWs4y|IϔrHXha3!@l3G$(_?&_ȝIړ}5aIC.Mz7o> khWDiA}CcbZZIa(1n㍿ "/(>]03ip|nxTr/0u8R ~o>ڋ@Kt>?榻JM*2.avw Lq1C ŰjEPmEhHܑ!, DT_[Pm7ë%0ȵ&)Au>Z4º~yBd5tl,Irqڤ!>(HrYµ'FCh~pܪ30__mXWpZRޫZwi$嫞oę/LrWv;&)]DSAT]ͱN{n>Dp 152k NP3P6`m[E"d3Dt)C-V}?S(:R)G2>9stf. 8>(55~d&zD7]h{v*htI.**(1 RP`G55zYop ;5Ax&q %Xs \ g4 YRm ºQxB7c؊)Pyzy $֟<z4 @*{"pi.O@E`P l1wFs",( c($yݤ|Do B9Աꢖ>(ZHWVeNd& ͺܬS^ ޒwV@AАI nbI37i(* Kf+U-w/3t|S ^d0N3$e|i1~% KwͧdIU!kOoo$ Gp]),,.ʱ;pK0ǍFѵQ;2ZV;h.TU6cE 7I%09RW\ҍ\(,JR̹E#H&]Q hǞv i١f+v eu2::݈\#Y cD`X|Xe 8x l %z@G=鞴xV[ށX O7ycM4c%V ?{e51`PӖ~·2s 0): DGc[jzy2֞5@i.!l@d ߶47elG @Ò-(e9 pq}L(Cp`d!Ԟsd֦3ݧ{s FvK~y1ECB&P90P{J_g L%=# ^)G,"v_ Σ\ƺD$)i|4qA9s>&GUI~OX9X9 }Rޭzm.9qDESv(5@Vc3Ha P 1jJzkE;;κaU]Gz<9tw `MfT1, XAS:ߔrF=L{ .v^XX"I 39!bQ6xc"IkmėGۨ` ZBP MYGCI=ׇdNX_f]Yc#﵂*.LzNӹdj"0mZ?V<\rWYo@Oߠe@[B;m f _lso 0Yɷ _=V)wGoP2Aa VQKcG&GB bfH҉Q*T!>ѡl [|N^gĹAm$l ?QO}z ]`ihBM DQk#aL 6/= 0MLa*n CĂhi/u#*1|~Ql oF!7¾G #֑qzIYv/">E{- DT#!N 46Ό?ƫ͎;t[6~M ~ӕL|s3unk49Oe6tē6nuBN9;kI !\!լTkbW~<.' #|V%<~wt VNM{b^W*xeL|=W9ѹrVr\H\C`L\u䣆l{šqS|1s(mp&VEVl钩p#8Kp*><` ^9)j[}4u}[:Zt[wPQnG#82Xަ?ќtIVSq:4 f!0]ńC;keIW \4/i| Ge}^h tԝC:4'\ol$~BC$jh[6x.@8rTgqaj15Nq$=fwi۴8oP/o[ESct;iԎ彛<_\ͱS^g.˚t(9r%ʣ2޿r+z7^@ A:*ؕǢq1?>  V%r$,  A \J#SHd} 6#X)b-EɌz/=E@2CCDv]h.R<\klrMkA/azCeσ!͠Z16/c̶t_cTf%l0oo`5F5312ٴJUbPK* AwFqgiT1vaUxj9o{@>="|l dPk(ɋۖJy'Y\oz%f6I^1->TT'R5 rݲ`c}CҋL8ɳޠ" g귔$][7Hx(<$F E dj)*|bQB~va]8E( dkj @IV\*bD1iJH(xzЌrs% Zྪ^K]BD~@DHd{\Qvqة͏]˜eߩQ.ye++i$?&BȏFAp֡s?>scWbv~ $Y ~=_4̤6=8nΦMOf9d2O|dۆﭤUB$eBr:u3[G% ;%#P VӦZ:{Mz |U([$:JwrZc bsUc01迴ȭ:`̓z3rGēq,Ֆby-/)=H!&nq8Ц4J~ͺ(Zc]Nf,lL|zjU5-T>꧄bB$x n\G啯MIDT/u=fh008@^M_+RXF A7D ֺ+L2Rc~?%EȴrC-H?$[6CdO'@#$4xF0>o@Tw7ktd3n9%y2+J`$Ne.*!?a~v=y >'՗:xTL +ZDQ5!|UY/|a4|Qf ca>>7#agKa<\bRXq1o˫&6~-0_BԉEQҷMO ]J\MK55כo,^r3;}[g_^flc|ی GRvRe8c\P$)d\|iމr_ܰ 6/=3 Y09} y=`מRscR?I^"  NӠ u^~Nk(ܤ;K, qk|lThJ{8kәqD:$CrޮbжHG"'PuTk&;h1 %UE#RH<*(y@lTn⚷ "sq[K_p$8Fıul sv|pYFr`u8 w L]٘} j+X*?zυlS`79Y8Ghl`LX;!ȼ2sH%{"TjV $d m-Ũ 7\Xsz٦,}4EI/{D&?ŠVxC?|!i'DёAxN?QEލڴwmX:otH*c8%r*Nlj\Mc\"5EJ-̮;J@bƀ ƽ&;d,uMz\_с1<><!7 2?WD~x+A_{HbvQVSV{Fp8x|yӗ2LIuzBp.<|6>~3SZ;=ׁ7ؒjEO1zjsh Hy녞Vpq0a5ݴ}[PCFզ&l0[Ƒ܀'C)9l~:>_c6T&^]&lôy/J>7MDM/[k-Jσ $5V3@̢|^?2eg)rC]AvSglwPLZA͢sV# V'{Sr8 cW\f0JNl)gm~ v]wBu6Lꥒ0+Afw^ \a@Ph e C>Ƈk_c)kmDS]]$Ơn_yPUYNsFMYY~Pk3h>_`шt|[Ua 6,dˇCࣗx(wfIA:iDJ ~YJF:6!nJU!d[,RݫG7cAMḶjytK3hri~j7q?_^]h ^P OaJXeza\lV/&"IKL;+ba!xmͥ??hMa-s!|/vYnFuw]}F0'Os|6mzHw/̌[W=-!K0w?^1.}pK O2eߗ0#.1g>gO`un$ͤDvJ!٣Uaj\T߲8*!EQ2zt'v+THfM6T0wlA^=F'&!R|.-H >y9>T6 1g'](qi(O63ϲɬ5y]D2 <M'u#\LQ\~ +}?!`6wOVG _+/sB;΋d`٪!mG K?ʑV ƆBz.y.rjl`lNcN=r\;EVT]kRh4|tکL{@ozlmK/P J7|V2c1NJҧ%޶