python3-apparmor-3.0.4-150500.11.9.1<>,e%p9|D- HMV}̿;_8."@0biE(])Gbo_N+= ,6ZAnVqz)Ǧ5Ci/Fᴬa D@%j _侳R)rDc3h흅ށS +ָɆ5]8Wkj/4z-E Ct6gmX2KZB{E>>t?dd ' T= SpUU U DU U -U UUU*PU 4"("8#9%:.xFGUHUIXUXY\U]4U^ bcÊd eflu,Uvŀ wUxXUyɬVz`Cpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.e%h03-ch2c SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eeeeeeev@eb`%eee103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d618125338a5b63d02343cc8ee55add5c2857938bc28f057ed5a3cec6596fe45c21759f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c054742f56fd7bd6387cb47f2a6b19110187c9e7af40fd753594287ad0a4cd55ae8fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2c 1696247589  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4acfa4e449ac6720014bec7850e8f0e0406857e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR!TN^CLA;utf-8f706ac215f7e64bcaeec79c1a3d43ebc8af0c8ae0286b75e641797760cf9a566? 7zXZ !t/H]"k%a D岻Nv2PP%b?ꜿBU'qJߪ%k 1V 2D)UbR%MQ? }t_I:{: ~:!&gH:]!$H6,=Zk7ŕ: T.`֬  ~[1v6zfP>wv5LHܮp[&V ΜD"|Y rY>K̛"v\swdAf Ƽ)&qb@w3zϴ|jU=9|9J R ~Wyxb4qPNPNc B/Ez;S.5|#pFXLu N@Iu .o4B@@7GKlz*zIX ℑqu68Vչ gVlB;W0Zz 7KqgA0ޔŸ9sǙf *\'C'FC+0f=|_i<붔{XT}(=EJB ArjǙ6~tVix'jT&fo=%^R,Vw:uj ٝTU#F4߭قӍωmTq33#bdnv` fiőRUMKy.}D wBps }QUI"̗DžSr뻏"Kwce7 IS \[e#(y|R5T8`Qd?N"ԂpZN[TK_CY`7سH혔EЕw R6]z Az߄A~h}Y*9$,oYGe_x KG%q?e+>0({J%u7ly'/!b?6rY(Z'?x{t_DkY8Vrڭ<<;P)dO#up'0g@.vpld!p􂉇Ge{e$J&Q| ṡ '8>,Ī{ޠi#bTtS&$\/Y9m-t*iQN(:4+-g\QҪkl5ǃ~H ]4wri+"$̥Ij縉gbXju+WA&M2EշzNor_ppCp|hۘ葳HG&&ͲO2]Uuy\'*Ij?MU+0%6Z6&pظt!J&O&Rc Y Ap=x`&i(+hQ&C1@TKa{s$q&x4'B_x.P%eXoܺ()J!_UהFf!eM֔[ꖥE-=D۝kj~6֚DbREo <JSmfggn5 8i.7j0CnqߓuiTEXs<')x?VP3b"=[2v^.&Z[dA}<~&4Qt=pdgvac'% [T:ؐxhJ y=~Db p-%%# ^y+qj sMaOLtȁ$Nf1cZ'64OSQb{|8(u7`R倫,}_DR8/Kԯ -;rr2e mCdhΓRV=fL& ^QސjʑQ)@;=+pp&&B|u'(m\`KpfR('ATxEq8=˼2UN]c>|&ƯtY;`k+* Tdv?nC?)yh)Vhmû&CE_egxN?bµ^&d3z]u+ Dyh߁(## B&y5v/Rxwz1lz >w@ j UǙݚAux׎f NDոfmæ869"\${Ng0s{sES-Xrx_^jhg;, 'z.F/Ǩ]tbO-5t7 |Ph#ya:}[N9b6@l *sHaH,+\7#Z<+9=[lՐלhFڔa-Z/e 0bǼE-2j=o61hte1R!‡NpiVIJz"2K, "BcgK'J}S~'C'iX/nUp&VH/]v)cO6V9-r*;F1%2$:ʨRtؿY#WTf>Xf)E,'77H͹*_W=ӼcXTk3/u(wQ PT"v2ٗx}bwTYRYy侖Vy QUiAr5Y=cra\ћQY)$?:4xAX5LQvYָk^M_Wƃ;&)E]8Rͤ\W_##|:߽A'YaDjcjLP,;#V)B䡕D!BNxB K=Ł֏؛hn >|F<Ԋj OO/m+cؒt{p`jsCYk$[tVr3;aݸR;8ƿ¢ϴz:MEuhb չ;,ET(]Ta!WbN:\v8ŲX& 觚#G2{BiS(j)G8#a% 1Ʃ2(pE v *OhTPLȽ6X*%KwȬ0S7'g9fR̩=֘Bt8z_w2bZ_O?וZ>0Jﱟۑm w 1AI4An=at%z,(h=Q9ՄD3;]z#[mpM90Y__XB5JW,M7s_J!=D6mqIb3DusqHHs0v`قݎ.nQEa) a+ ŊUوvun\#Km:O#a|2(v,'\y,C/rPBPjEsI!z`P Z[3)d`pJ5,y$ ON Bj؉:a}Ki2ݼ -z sB3Q=<}zRuL gw;M_lzߦCA>my2FJw(2DZ"gRޜQV{7*4] MEdj/aبP':u &4I@\ u犔R9zK3>Yt1PΐNo.-^s ;GA!A  X-gH"> YY',0,#orƃb@`OR`"iL8h$>aaZ)6߁Rl-nHrz58ښ^Y1)gH-%r,T/VY t,\?7~j@ZA3GbC߄8\v4ܵ*fpzRѧ&SYPٜZ 3;%iL"?Ū|vj :˞wJ4Y]?K.PJ*Fqі8ɋڄ Cc}PA2Aq9m~#X8Ui g-%kPoCUSe[Z%tㆿ!,4y3ۀ[Cĩ`q! Dd goz~A[[ Km"cHGFK݀wERvZJg)7tRm5KڞڕXĩEjl 3z:Cs%%XR#21f EZڄfƫ*Y;,O>IOߏ;ul^^Dt&Q#v,ܞ,hw)q %8K+:ˈN[os)|_N*nTxo)A$۰'qBa1a^f57+d}Jn,ͫ.7"il.QJM*lwP{]C·@n8ۤa\6n'ջGl^YHǃϕhϐ yGѲz- =6; Ls#~tW~ݥׂG:ۡ7L:FX5|]FQ(Zoեr9/2<&qxZh㯄g}eH-F `%{wV (OU[غEd(tm?^7dE@i$g9ػm&HKIw*lm|{ zʬTlVk2JaG/Hi@pfv;FRvYo {7b3Xt&9buO]HB.x+Ti>HTTTӜG$'bcZ1G%Nz/ ׇ`6R* 7`#ی.E0vp6[}aI3 [@o?M=&~u<}\Oݩ0,­9\೅@ޚ٨M^>wF-L;AdY#:޳I%^x!ߜb193ǩ%a ~xcQZ$M}6{qņ rU /LWؗAŤjyOJ&X@QFx;^!Cx' tw(5[A q:r?`3,-woS5ju ,0 q~z=٭KǴdq̏ :Po>͘2M8BMDgeOj՟Lhp0i~`lTgM_IS:Ol#Z Xvٷ\peN.En*dB/˶1 -&M*I4Q\"hB.,aYhg Q&a֞FPs>:aGS)rXs f:>0Bm' Ő6?Fd|*eP{&\ Lty]PB^n.X0^x>@4f:jRBݪA[n ӦE 9?"w7,9iS8C3} {j#9}(qz!&Y-COT[NTbfj" a$TsBBʾ+cfd8d(F_aشE2?k`th5?OȰřWϹRhsQ~`Y~ZSʡu2,*}T.bfׅg d}wF[nG -tF.SSB"PԚ?*7F4C5=i{xиS}Ŷ ^p'f_piwvѵpy Flb1ilqMh:@a`G^}.e։[V#AI4駟W{-JFPw}S2wSzT%Gp5+UeUCz$$ח Ԃb ,0F wϷ J0z`9gX,p<>ȧMhaT4aK0xMN9kL5"MRQvI0M,^%`{qTEh(nCbp8$A S}9L M>NCHlV =u'XYޛ:WM(Ժ"M TCaej<\=@ɖf%/m[4[Le!W[ IW P|=w/!{/!wq< X`"Ժe^b@mLkiOh3|?sW`Zto) |xFua],mHJE&?;ċ);2׈ϫH8Q>#[.W5\|֘}7H!(_ \N^裲Pgy7[3QaJXg=gxoWicޫ 6 F.SuI1sY\{lLs&r V#z0F- J?y|?l؋8G r0uaSVdy0_wƹN~TIh!lhy>NeX?:b>.)?_o_}E05R Ă@h dKS kW=L+iL,_L(ܿGb̽/\CC6i݄)D(%KL vɹBR Po =Z7;upb>x @8GbJ)rY*-ŷ-, fft?PDmpv}}]#.M&_-{\ X($U|㓕KyZT-f}Irۜ}K%ɜ/pg X}i-u8S=>N^Bmy. E{8UJ4χgV|x Ln^ !bV n*4[oI%y`kV"lU1ׁ.mV,&޽8w?,Oz3(E]93)P6 zWu) ȰLƦӁt\48T$ֱ[%I#BXAOQ}[GhF"͏QYQ5OZ֫'8eF;q@c8)TDVW, 847aMՏznpMooe]7ܟjYh#A4}W2UN}TB`9F޶c v5GO4SR fSՅoIoҝ@#>25#Ȝӵ6L Ud1F,}=_3!x 5}X=큾:^V뜸ȹk*sE-UL(k<Ţ//enOik+XRcV݅3.f$4%@$~)tA z;J2WSu_>7cc_2H -)ۑF$ƍ#6lW/hUEc2E 1rǂTu 9; GS%dC<8`4+.Aq ]iKZ߽"ImVԽ, ]TgfօfI$^xl\\0tM=1ogIn\ucqpi^s% ,ь6)a{k'rDh1(ոA"piPIҲg@W/+m.^y ES SYݛ1^7S\Y6<6 N hq5va@drTGeAPdTY~WR;EeZ^[FɡXV7W1'E#BEpK >,DBO KYOrK>(ExҡB" 4p2Hcs> ڴ)wZv[V+Y8ν.s?O(gC4xvTi@ZxܬSEKh,,y6l@T*b6ǶՈS)IgHΈv_Iڋ{#MYBq;Jn.H=܁@#Eë"XD9w0Jj1M](XݵOo+mt F@:M`wwKoIEHֶ e82 ]6&cJ܄X׸OWp4oM+SFjg )Њ0f}FJœtM 4: N r@uH69Y6y|khb <~ ;e[tѽG\h#$ijPHy~| a+ `l֎/`pYa9=3)'ȟ2EzL~ W5#<_a;gJZžC'k25~uÚWwr]EbL6~TuI/S)05xY(*+Q.~&n'@XA[B I >\ iGuŎU`*A=7zaOB"rTRI޽(Cm+mR^Tdeߨ>/Tf"x0Ob^5:eavS1[a^@I*f[j9BmyߢQ[)Zּ,^cz91n(FUyzdYTpVAgG~ y[44M~Q6!N3EQC6zFIFSe[l4%}HW9EEֳ-3D_}SnR*(g ـ5KP"WW__T2{&pBw|'fp"`[Hp:ejw`$Z.#3^L3?pM;՞*ĒPK9j[sCIwwf!'Q v~dLvXOI4iȪUA R@zTxC0ʭ/ވ֒Ma0ṻVĆE_k2kK&\h %/x@ĕ6{ywVG^]}>If,ZJoD4"Za 08!mf 3 Rvkb@oʮqQ2 LDA`gTVm$fW!4TׂgZ̈ ׂgfiatYl\OgA8Džg"v M++#&\8; "m!:9#ZVDj4tSCܬP-tCN4Y2-Km1Kxɩ6Bi`GN\X-7`E.hfA>."%.5+!j0$lPʘJ>QmkF8&ec Gˋ%䗹Ey1B=Rz!oۜY]-{2(G `_%޼W[W]y7-Q~✴hd5'G C9{lRF'"\o1bT{Yڐo3#+E M3Oʽ . #^>:ooX+DgaHwo oV=+JZ wHm!}צq|JaIcN Hj}*oh+Y _OM`>Ʒ*F=zBj&H!T e췞E+kgv '%w$f@`8!.z+CH O0D rSB $~J}\v\UD 7CepM;`H4ad|s3z l{_`ϠNi/uCep *_щiXwΕ-1y3L' u{_7@R(. lPRwOHaιJ.x&x"wcD5M#ܺl=1F|62KIqM;h 6ŷX@A?%?ի۶Lb,f=l5 YהNS[NN2OhE&f2~pԋ£~b*Yu{a$;x(w`–PN3]\` ~%bq0- @1GbG?+#qr4Kt[ix_7OhG| CzvdvY@$jB i܆cE!1=Li'ǁI,ڠbYU/iH,rr㫂ȯ_`.W@ЇbAA #1?XڢA"b0X Io Q` GP>c;;SDXN!g6ǡg؟k0 m=q7XuWR>2j'tE D'|"Ӳ-'˜a;5{MQ"ls!외VRpkeq,;.g[u-lM _ uV܉,z88݆ϩ$6) w\p_$0_Lm:8Zgrvk @ ס<@T S?ͳ^ЩV j"=>F#H _V[4R*$\z-M f(wA޹"([x5F*l|N2MwjY`P "CHۄ;#yQ5a|)K4?rL7q,r 1@rLH/khW}1Of+||5E6(07oK4zyj֔Ǜ X@<2$:^Y*so2毌>Wr+wCc~JTR?UL].U1+d.zy |a$gXLOi5%C~Ot 2S `lTlސ=jΛ8&NF3nj)+FXkWϳ)Γ٭l]m%Ӆ]wVccIÄy0[Oaf[ ꕟA']nP#+#P5jP!UD5=-W<*㪒b[o rUB Dy i0;#ClnU=< K6]͵ l^2RN?afxƝU?~㥶*A<^M7`z_DMxg{⟛IMU-[TYm^Z'} bQĆ-jFE0I}+̈́FJL'xPD-ŋn dWQI8J-mv?t w} ܈8 P %[F #XZ6X6EKutA7lXK샏;W:ARY)fn2/V:>Sϸ'!x#s0 :yM*K8vbSzXc#Nz2t2y*\C@:h@lj术C}fy0m &8]mՅGVHBfqZh]RTcW˹%uC1,(X\85 /Zgb)"6$z&vL3cGao94-v-u;W&wBXM(cȫ@hf} w90WRC]zH0yDʡBtġٯŚ' Q)Z kB8&N4"6zG$+g# xb1}Se+He͋\!|fui[@˦=& 20LRQJq.6#Ei)aУ2@bҽe)*T8_LjF$?/Ilhk39L*U~2-l*:q_T20?D+Ap QJG(kHy Sԑ5=`:OTx~XI9 oԿMQڷ)iVZcw&fN(G9Z2:1*x@b4ݷf> #67 R䠨`&F"Mt _>#Q^5NVrn~PxJ0.3"@mb 6J"L[82>YTRz[':eH6'gs[$ӃhLwPnwY0T!ׅ]aEyl'><1dDdHkCp*~F.rObB;7pƾ ض{Rf1I^W݈QPǐLY u{NG-S3"@vJInnlw9f5h43vSk]Вi4Sۨ i!P/n.銒эSBZ]P35S:1u/71WP/˗Y! -4*kä,EN,GQVы);ʆH:Ԕy9$n@2&A3Lͳp )CJ8n 0"+ԝ7MkYLj5x93&>5(069CSW4WYc,ܩqb˄2ģDћ}XX+3#3d|o@ژND#hd2X.JHQGcr4ϸX(N^3'Шz&جzd?4b.ય;Z蓟ohAM"/n 􌸓>od^"]^iҾݴp8Uj4;ѐ5A|\,:I00d!i\z‰4a5 ٫Z+5[] >" )cQ,2v+iY]L Kk41 ߽yV%#.T* 'wP٫&԰'2⼓<CfCW9\/<³T )c@IipwhkAUl83|'Hp!ͮ36 ZS@~Ut@"܅W; 4*y oi,sn^.elO |QOຎ" 42ּ!%oBh -S7!$y /;t}6,.,nI"^qƁR9|s% m;T^iqR)W>ƆKX9J&T Q xZF&WV(HCKrxihU<*-4@0 *7W-H T+m?Z:g0gf-:P{NfQc/^ z[aǥ[M87GꔣU\^d*Y}mB;7j](ɚ,Ӭ48ۃW\1S #3uVGbSvk.0JH\?b]_{[a7$&Hk@(lj>5 #-BZZY< H11J&pKy`a,({ߤ+FZ@_*[&Xi˜ )# Vp J`/3~8,TfdV FKYB:BV .@P,{mXZ,'&(0!a@/$ M<Ύb&2xx4µ~-׽BЅ[X=[s 0 *^$w7e: xi.i[FyUwƚc$aY?> Ѫ7Di:n#Ʒn.-@@LTAsJZEpXBŀf7UŪGyԗa5lV[Ho". (AAZzӘD1O28|lM +g~fŦ A`e(RC{R_gc}qJnN/_DXXH7ڙauݮK} i"9^YiНNuC9PmK"~.^ԫÕ^3P)zњV;%rB|Be*AkK"TCP'UD1a |Zށ 9-HiiՓ-Lv/lGߘɊEu =[л *{@51=K-y XJ\VR|C*Mj]k['G\ nG/v$C,IٻtJ5d;wkc池ɊPl.V bI@ zLx^k ;OaFnʧx\V^82H[,g@NJ ˦s{ךeƤށ(@B0Ga6۷e{̮% }1~#r^UTq[3 #71ug/03WdYz-52slP!~0oo"rc"vBlju_C-K Zq>܅\!tփ%_XBȸ_@ yLipO-Co >1L\8ԷF ~\B߶Pi~ 'EHJqPfoQ5:ʔg.KQvJ'b. iQ=a2݉sYEd*ofS*B`AS r bzLøZ֪G9'6O3r,|AO߸%6 G ºTĶw[&\: ǡЭۨ-{ C 9G> >ӾuصF@*`s%H`K=liY_WWLg^M gybOBoRtIO~;9agAj7.0ݻ70xf*y>+WEdbJ%4ͦy,V0~ah(L=p$lԤGirD>Y%N?ň" y7ݛ']r6Pr17xz#Β |o4+tQ&U1<EqGIf @J+I异WUX a)$YS[ hX. IbvY-b],Q$tNiwfFU%C@]LpI!L3v}MP (jfz! Z DXG#h!Kp2/gtW? jh>qY=hJ٧YsCܹ>u};-=o#XݝLgKmA[Lw~]"Z=`@OG']Y}/QY:gTUVeP_R.`'^OaH$m + %v9DO.RO^- WlC>i߁}?tK}t_sz8Hԗpl1B3B:;Сk(]w&'KU9 Υ2L숦6YVas昋wL&5in6p6+ I:?sx?0|/P&`\Wp;;o-WXʭ0ӽ/uPwG+vUbWG5]fe8o})97Ы0|kp3y p\zeEP_~f?Q晄doʊQDJp|@&mJb+MtDRҾ(f,_Zx*g\tZC8aФ NLᯣ鳰xț[6IP :|ů:쟶JI4ؠ]9ۙ3b0҄z\tB 3Ј7 "|4xT@/zX)3p {ZZ^"EnjI|dWlW4Q,]|A#~&lţf)]J@fT?TQM9 ePEw*n|;{\RK?Tj Bgio :x<)"]wȨ==DFl m'j;˥N-^EF;VvF*AU*f؍z|0$Đ꟦ڶ`2G% *GfM:M|B)+ey7l}Gtv)lr0>4qS+zd$t E5O`Ti<'<&NUämA=GhJZuz"TBo%\dAU~RAk!7ޛ]ZP@:V«`Q&-m\H5*gnOבXb[#muO=^kLC"Y RY2a_Lz})ی Qvw˃d色 }w? {fB<@DmRt.AEحZjmH׉p_|۪N$x& jD:lȹe,k8Ann 0 dG8W_aZ*N=2Q}IzMCZ]K G*Gƕ%Z r0H~b9iVn_fc0'6 oрŹ|wz]Q~Ye7Aj&0O(@*!D;Imju}rN7uml YJl@h!3l9!i?wg?E]k2F)YBg3A_7jfy[iJ`U =;1|}}dyz˱N=U4V = 3#NzQY7he[0a|JYD,ir9v8Ԉ^u.4+BϘ:$邉 .)C`XSDǣd7_^; j܌[t 5SLTmEڝrFZɜ2b)[,=uvA\0X=80=]o!*YOP$!^`E7hft7A9ئC䶔<}ny3;UA`ȾQoI)aVԠ!frixGS^dȦ+9>/ylg7U-e%' @/I^j(wN:7+X44/M0qR3cPXGWAwenOTGE$\n7a$(%i|P 'G.B'n1zcgG$J/eIꮡXF\S ks2>=enheoo*0rHk]N'ʞ>?\UlKFuβC)u4߼!ڕANWE9t?h c`^$R <'UʱћP0wqrd6jzUX 1 OÈ|d.1|23>o?٘_F(ʋt)tHɉ9џztlEPqx+%@U&$ђ9kK⇲gM%󟅯G}zkPy/5B(z~ĽMѰx4@UWUPE)tV&;W>RHj9Qie)Ny xD&A }ho ?RGhaLpe"=88!&]cqdoBTDFlNzE ؎ %:;g1!>F[ hbl 4M#qol8@cߕԌ"#[ xڋghgVFFzl)1^y.rMUԑV; `YiG eR1xiRxyQw$N;ĦV8R}[̜avJH5*P[Ѯ&"UGu rTmReݸiHk`FDk@BsQ^"eWS-->KM-NTX\N1(9,Apٛ1i mX) &x\cwM|:eǶ @M@au#ޘqD vflmEW18ɀA{%vhɭ}KmbZۛqkH4~o})C5M0Q=,lZ Q`h@`M 5kDbg > aOJjKLw#hv#͘P9LFʮb %0Lk_<,I* ӪtX# [7-0'87H8!Bz@++{2_L»8VԷH,ŷe(IGFEiuoߌ_|HZ?W:9y[cݑl}LǭlpN99R%t2֌ @SF})8&]Ɗ]!bA~FJxd9faoΪu{[9l\2U,Xl6{|[:'+›gҕ>5uIt$PTF \|؉vJk ,z»v\ uJx7l4tTY<G #)X;^VE#Ǚ=mLeXw%O↪:it i BXjo>t'ځ:,'JE0kS |9쯐&jH@{ bt(׹N0 UzCqnTu. $qkK#K]J N|o-v!fȂbߩEվ %$Kȷ|B- c~?1+gCȟ35͢ꡱn QmRUu :f{Z:5G;;gEG؍'n,ET9q^&ۺ:}_nUh)v%á"D,BSMpi[Oe C촀go)DFe"lyۃ]^Qt~2JǿSp? E*R*3n R˼x$e LMg U욞[B͌[]aЙCA@ΫDjzNm09EkcB"n崰j_= bbGW65[Ãr,P` ža--n<|gYtgG8r r6a|.us`LY2*/AVh'>φgx IZCZm!rRruQ'=q&#k\6څF3'5B~/V@}1tIE6Ur__fWkzT5 T. i)ﶅ k >vA1Q:_rYxuVa7D'tS K:.E5&|;,k;9m:ÔsE]qETPNDžVr?M$8`V/yE[ '84skBz`,ԽZ#Ҧ]|qy jg˱?蚟p)|X(Q_\* \:4UnHQ;ruܔj]gsk2DEz;[<`2X(=ҟ5 |j#2+i] 5YԷ,ޱ8;C! aӲ:ՏnkU} Ś#! 9[H5l!b_Iub^ ϜkՏ%9#XT<NJx~)֒/yÇϞL;%?ReiSnk~mQpd3jb%aԳUe p4q;V>0u@A :8wYp=c~bgc+|Ƣ!0&'#9~sDWFF(j9 s=.@Sͥ_Rܔʷ߳%<ˎҋ /Ƙ^ݟR{cյitߎTy$+0NCl@J$L[ (]BxI'ѲRk1z9d٬PʠF^R`hG}y0yČ t!~rD6޾O& @ y֎֠0K5PX"P9n*`z=D'Z˭?e$ڍx+cL B\h_[e!W`܊~Esrͩ-B%<;ɷF\KLZ m/U`OmS!JlՖp9hS3~-:8y B_L_v 68\->h! Ԝ 䃠[򐠩JugHڟvZ/ pkFUgXn2ڏ9o^F[=MohmQHi-L*B~=˹di~.87Ƞ@9 b+la1(].D6d4yK=(\G]t$Wۂ"d;Бe)ԭ䃽z>T*zw9^5 vF<*YKf7AV+oa%Yc/ P)E=-aRp%]~oz6XQnk-EK{Z#}ӳئeeSʼnDW?T9 ǜ :^6Z$h'dx'\<Ĵf@.6LoϱDs*@*)Ƴf#Vɂ<.TNf'_GE!@7$Lh͔R-zܝ%%"0?&a'܂(3uZHa%FUWִ#= ], ?σJpX/VzJr|.hwhk&|kf!0GWS)+eUYu$cְT{++ )WE S0@NP0駈q`n 54g#$nQbc~otlExd$H{6 >CJ &4S# LD=no]=BD_Ql) 9?#ûfwkjMZ&L$Viv;)$s+@|k|[s$绵"Jl6|ӄ5 #H 𻍐ȉS3jA mJZ~řNfŃ Er&YrR2bz;WPH>GeL|T9K%jl<0-̀ݢD :L:K%POKĭi Lǔm;lX%~7zlzԯNYIH@QwuyJrW4:^1Vф|ZZp%C)8!bH3'hoF)^Gn#6I|cUJq%sVS$5s8B~NƜ1 hsODAny?B㪧28fa#ݏpBy7̣RJ#YKE+YY1H\W[L|4!u'f5-$o-wn|^ttȨe r">VEh Cjs@X2\gldj+[}A p??d ;eNMԞʩ:w߂p Dd"Hyᩫv_'DH tL˾=~J :KzRxHM^CTg(}u .aؑ>m@jafO +FC2?"Yڊ"ժ fE#}3KK[Yt{f0wb Ps[X&R ;$RM*gMn!KA4ܩ⏛5`]9X;~].H>?t`VU.6U۝-MW9T8j$\3I98j+h_JAE9IO u0客es@w7$+$d̈́sgY6)^AF-~9мO`^J&:0!`>De w.xx^ ٫c*oǫ?ZAOI 3`/P6t+U[ZWsRĤB%ohji9h%{}~HJ4Rl`)޳1-! _.ZCѻ:5S9U}*g\N(}bCszXߝm$_}V" ,fmfF( QorǼ: BlBg5!B(ܨy,)0>l;[Arsș< s)oGfb`tz`)S dH JHLz R2Ѭ dfxATvp0ipԷ 0hJ)q vӇlX⭜ژW pRo_WWF#D11O74ʹ'{$l>Ŝ3+1՗,h"JP^*4>8x;sCUuVhJ.7ZgZp5a32e[tT&)Ƭh ٜދIS[fcp wJk:Rn.Z:j56M,,8@$)OlH$Pk8FDL) 2c;0 xa7FQF+mXTQH_p^ᜐ&żȸ<:;pˎJOg6?}4Xi? $j &i MR+ن'auš˥;YY(Yㅀ^M7 P.ՄC;;G:/=;l )[X@|1kjRC;TtU]bEc4ZBu,RX&Yrrӣ Jh U4esMScaW^d.<4~I]yⱊ-+sCy {љ[ۑv{"_S83D+'bw25ޥ?2a+Ǚ|YVx "~%';bZ<4UG1/8+V4RQK]ʵj&n ywDC0t TW<)b'FC8leg?SWMMre^њ q^i21V8uKe߱UcQw"#v%@,iZ >8ڈ  V [q*xh}ݘjlƳlf(~;2q`wzfGO| Y%%uoa=aSxT_g,McByu!2~섋F)<[7p8u;CPhVFvB~fd]{42qI[:.$%6 Ynp` 7Gf3p^:k Y1ɜ"'dd&˞U= U״4QdڗlMoXYcak:z׸K [N˞5;r q!%TdڬbZOkI}-+ !-m LS/0&fٖ(j|jgHNeNRHQgYEگ<ѱM > s |ez '́)@9.D"~4 s%].98迱hMpO02qe$#R>s#P=і ʡ41ugo}9?gi(~d`grh.ZƉ40 QW"ԭPx`fz}Ҍyb==4ɎG ޒ'%UH+?h2N䨶oF\ۙqIly Ｐn'GAY 4DA[[٢50zZ҈7>Nʭ,]|~(cSӃKMR 11Bbcy,)q,@)ֻeMhY nCQW¿zMor2y\MްoXv} kuN&m\T5u$EۅU6V Q ċ#τJaO'˽+K+VZYkKGBP##'Z%$%hS)~'rawP" T X HoD)XW4Tp#L*&GFi+rbPWj뷶P,Yq7D7I^ AoipF`ퟑ%GXN\k㖴'~:涯%i׊!eaD+b_pZ\ \@ cc򫯽DcG+<*m68߆KBӁLe4R`-H3"Jq/0; &?- tdzֳ]I1ˈfƄg#,7p5mI-TFK,۲ޏX*nw"{gyJ(eᗔrA}>fOǥ#TH-z̤G sй29 nP#hgTu: L8z?NG?|Z=r0#SD3vXs16*$ _$JKT6 UBjS 2H)yt}}jJR6p৒!J\?Vܚ2V̐ 0UibxX}[=peZ ^GP'?a7dCETRb܍$H50σt2%ڜtf[WcO{ai_'kq, HW 6  _R+rR04Kg3_Y٢x`|)s]RXd=R=,;Խ)Ue~Ninh3E`;BY2Vkv8KW}BQ4wxavxXCp9YG(":GL˭$C+pcA$0z?QQUۖͅwcV <_Yxj\-IAqD3% b L#ۦpfBcMpr¤9or _K{Z=W B2Ʒ"j; :3nYafwi88ԴcNziwMRxr9=xc֨~7 bL4 |Εy qx`Ƙ6Va"z<;knGodDf>{H#M.åޒvGVA ՛lhhߋPkWnVyӲ[)Wz|wMDp) "c^N`a?0"y7+%!!> 2J&BP2D0! Cv@GqxfLѓaa8(qGQZcײ{i+"0it7N@uGL:[ҵc\ΖS/<"c W 2yҁč5Ĵ KOƋ<~;js y (s6kxS%TMc~%n9cO) P~[w{i}UX'D~ڄ寙Tտ`Ft^Eo0}F ?>B)w-IURu6q;ct\@rl;oY91P6Gz9-7~(3w5c}&zBC7S*)h4K_+EAEt@ZreĆ *pFCjmz\C 'as51XzrrA7$;2\`z5=KL .פl=j2J=Jl " ueMk@'FS]z4<p@SʘQuE}K4 )Tqai vB$,Xc>ۙJֻ#0gL3w ]1棂ծCgtiub&F C>fAC@kSTކ(T&$jMx d֔.U/yYLlpCXQJɝIovrD yMLfGi,/Cȁ(Yx7Vjeg(" deH0AASq3nҥ9Nv33US{yI-s3 /-H0^4,\V,3g4x{LVkbŦ8P}HZw)mM%K;HszJnVN '06?|9A#H H0UqșЇvSyro1r7/=bex5 !cӋ|!=_#AH)V_V>2痌nȥ̱:A3xYvT]BV`3ENNس |X%QvC,ODe2:q0Wn.p =m=&pzq.+;j 1w:J[:ZH*t=?XjѼbQc6')C^}kU+vcUu8-0B5 QR஬db2EzqJ'>{7?ȹ |1̯rKAJCmH@Ye2ο/A5<`Z6u:y2_=©^$є<0P'gn<X5;t Y-@#*su֋UŤr#$K^FҘ7K`JqFwzOa$zL8j=}|_TKxwEʉ\mT]zqN>S`vh::iA,xr=o9m'A Z(B j?, CgD-gGIPSz,sB5[0 mgi`((ℶY읋(&Zޣ_u@i>saæ\f- m.=CBN,6q@?*Ntk#i\&b ~2{N B}Vӝ5"ᚌ}q<9^[_[&-@]:h''=JM< Pi i'=ə:|m7Bb' X֠:UC1@kiLPV^!'IH (;jL2,)Et)bAscY6/ c \]7qrU{(0kHFWȅsYSG`TBEo){y #- hFeXS^}ҭ}<.m?c~k'q aA7:hLa8RZ| !^i4>p`mmЋo?,淍Dk ;#C>~Ocҽ#3b>7+˟^Xhh:c%h"xUNj+֠En=҃̆ IvMQ8>j]paS%zev>r \j [RǸJd,J%Y)<_U`Ż 0Xj nCM$Z=0N(_œv.Uh0Ńڶ䧕'.q\+a 4bBLK&;u{Ng]HVx0Kcq+rWB;iG8% ȁdf^BRvW#uGctTIy/Ի\}  p @(-&ahXU3J|g󰡀?$FGWB!mv U MGin }t ac}~]ڪ*D -ў#WڨGu@R(f#Zi>1s;ɯW#.!jo3Ȫ(*D3Ix؎v0f(G0;/広M7{B ݧ[Kmm\(Iqa)}hQ3;H |=:'L5QN5]ŧ*Ԅ R2 jP SO"$\>} $Ctmrp-C29TB'E͘npVZm\/x%-KcNYx5}X'-x~Cr/}r4GAyzc߯8YoN5P^d)":/rSԂ&`Ңf UPJA85dB~I_$ϠA=T>OW'> J٦Wȃd>~qh3{4x^v8zFP n G`in!&ש (a$6f.2BH*\y>-ɒҖb]rLw )U( Bd5¼lW/2 U-Tp3hu(>:gN`]CW*{D[}͋:f۴]@ .ʱnBIhf7.`}Yefi~m5Yš}ȸ@NFMT@b1%004 4PV`eIa}{aGՂ}ەv6y2c#&b  fsVsT+j}b"0^&}/4$&ףӞ+ʷd>U0߿Dn"SGi[aZ%oN-x*c0 oC/E'`֙G\*5ѯΖ1 yAIJH}槫s!@琉Lqfɛۚ;Yn94 ylIf/'-]`>J :%{98Y]Gї9 WDk u d팏r!u&?z?WSq>ƀއ̈́gɮ%Vwx),WUq<8({j 1x^IߔJˉ1^5LWAC;Lp© |GcDFnOs+@dtf%~t+XiJ$ŝJ$]5r"%h{֞7oV .6S=XNC%/?}({d?H=bpM3K-0v!+76wLH1<2?7!w&DGiՉaI[B5}:õO72œ*\hU@d~왔`) jm)9$Q hvB2>xV<|+d!4k><hǟ_&Rl9f@&Od*$0E^<)O`D?p56ΫKtW1|}1g\&aM>v@}()7&  @pvAf}Ю9m3 r]U"|;eb/>0KzCV4^,] MwZ i9ƜݷUϫJ&!*g= M`zx7f3PErVJBK"uRi1q!GӠAZ厀" n6[HҐbdř|D^9 $_잮S:GUcPXn{Ry#G@bGة&T|˘+S 琥1<\`g}$_e/S.e$pH3 \5aw˴^TB9gǫkp0ll>y2(jp,2<޲rV@Ѭh_aDz`,)s:@C8G 9~b h0xGS_Ӥ6(2]QmL!5V[lm"W6 :}{+,P )>c3jyC?8H1B쇺$vPj~kC| u ؛YZ\{IRRkܧTq[l&xa:#+ Ksf騩>%+ H=)uh,*[MkoݒFMmQ*4U:=7$9uel p}5۫璊َDW쒔 rZN""Gr̗%G\lmI:q}C*֜evշ5sشWë*5XzvJ ,46.s=Lr1v q+1XM,~x 0X7]' @=O>ݫQ(l.- lz.tv45,ɱ-oq2W~ T/5I:pb:G{?i/B\VU(RJIS$OFEؾ:SvҘNN{V ^jO]p~NYv+6έ`+޸4?wV_S2[3*)\}Zc ov8JASDR䅧pUqǓ4%t_TN|b4.c%Ĉ~]/8ӆo@V%VVgho tʹK^]'{=pAB -fɇ*vEА*ڲ̭&Ʈx wLhy7s 3|I}V/] }Sy,z+¾P$fZiQQ"3 :La0};C*cVbh<; [UgG/ѦD/졦'nvϯ!kQJw+ Śq;*p$@\{67?4MŶS._QՒA ȾRU;a4l1)fEڮEpbTX˶/Mؗ4i#H_ܗk]:2|%Xm%e5 !9"9'O>&=zU5޷p=\MpG$x= L?xugքE,x}(g֎VfXN &ɺ6=Ճ3", Zh@krJ{ڏB#|f/qhF໳i$iL05xݍ6+kz'E;fq'WSEt9+f.09[RWM+hb%QۋLwJ97:fG;*͎ϯ (gż6ulv5n5V$5s-/Q:hRWD% }-J$F}|n}ZGu[D?Y)ǮK?ܧqhq !vX;|L\CJi_F5R QLj5Q&$ݰfmvU0ý+MXH;ӄe{IF?^D;&K5! 4C3LwDn>N4?gU-p9zDqbr}sгkWA&("#>$g\I/j>\ORnJ D'ӦvgSމQ^VK/KMybctq@2fWIJG'~0XϢ12KNviq*ƴt96 Pu269?@1,7oKWe&7+uVahЃo9BcϨW=<"qpGؤE)ͳR n^- k~K6 nQ^Ɂj5iٸF1Gt8'T|"ĎI;StGp9>95kwhgܐ&6%U|8/#`AȻE&dr|Kסdwh. pԎ 0qDLblj} o){9_ǯH@5-4:A&2wL-krɨuE,;I-o wbu$o^k/ tx6Z5e饶'x؆!ID{NČp_2{_R2Ɛ暦zbw1< uqMС>ҡC0X<}ZŰZi5֜iB5H}$\9;2M0}oDE9WF':+z~3OXeTpme=VG1HG4%E}bIڌ"h$QRjVcԢL5|oġm/J `iJDj(tR񱩗~ڏ̌VwU`?|X~*N\ZG(3IDRv0օ:e%&weoK/ ,_nj֠H,e&+v7=LfXL<m/CNߦLy2jceΝRlKJd1|bR= >r%1댕\WU0cOyn<l%b֘1p鲞-u&Ӑm쩆텩WWކrNf랡t=X4niufpj'FDBJ9<#:Vwpg/q, XyU\oNQɻ{VBߠ"7VlΝ8ruB}ן( 1,U,z&7jF݁_-f6ʰ]ީ(0I:@f3BWn5ZiߖnmVxDP&/txGl BfKJ};)*vV A;̜QPl7F\>:i/"Kӂst3 Mj[x܂U|fal<X#wjا&oA>d#zsZI='dk7+rzF!S`ו9sG2}/;Aw〥WN8$Z0G+$՞ f7G[>y\!+IL󇟑 U5H|k f̉0\~mp*4auPtMDI8x4ʱ"۩F٪p_p↹QYWAڎQ