python3-apparmor-3.0.4-150500.11.9.1<>,|e%p9|r ɢ3>mU_<yZlʛ!Qvjs= PCZb/:oy,Y@1߾zՅYwװӸ@:l 7@fOm|'5e敲+J7Ky u_Pl*~"lDE0Y9ԫ[Eu;~CZLqv0!)eѐ>t?dd ' T= SpUU U DU U -U UUU*PU 4"("8#9%:.xFGUHUIXUXY\U]4U^ bcÊd eflu,Uvŀ wUxXUyɬVz`Cpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.e%h03-ch2c SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eeeeeeev@eb`%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-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2c 1696247589  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4acfa4e449ac6720014bec7850e8f0e0406857e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR!TN^CLA;utf-8f706ac215f7e64bcaeec79c1a3d43ebc8af0c8ae0286b75e641797760cf9a566? 7zXZ !t/ f]"k%a D岻N91nHGˍCߵH*16&@:U1_}˛W5RvZ${o0>}Wu1ngg0HY2Ұ/#/#(7o\IJzrF[ŻѠuJjO<+IK6~(6F"IW4բ m;-1](kjtmP^dM0^=-m/x#XUW9 7(š 5Lz2-čzi͛~Wt9o# 0_Q_2ٱL>XeQ+LP!ZGfx$]!0 dbR9ZQEg9֝v)xŒB8{Zw8? wn,bLMge0bw2?'|%:.ݷ*w |vG{M4t dlLבD1kJ.'4S? 81 aW< G ]jR ^79 $Mң`ww'ThwOj0JY)R_?N :|-I!ڬL)Jo4^Ev .~$sj(dҲf&.S+c[~Qv!>rk2j{AD|rtY1cFWʮOP?6h^.h_s}wK2IO8& .!Hwݣ=/ykTY"{||e i { l7tA+#Nŭe/qtX[6 e54EIl,Yn 1teס@P/|c2_4َf[̬}` `HxJsiş1#fJZTDž]DNֵ0,||C؄+g%s;Q/ӊ- vsa*(Y=V- =cA'60^`(yZ8U5tvQ_QE$7rx*2Ϻzz^eWoH+Zm2K>S ~U  t7{/pk^OV@MT@c aScS ')5WgQ *& 3U>O"jE*%F&JVkɴ!E e\$:R%_$߅2 AulSVۇ@mR(TVǷq-@$jԩR$cDr-4#0Usc8!@ &|L ޘygQF# g=cZw ~ 8餅 Og(z jyTIFŜ 2 G 8h:)fĦ.fOUJIEZ[6϶;wSrԨQΩe/R?wգ@۰ʑUqv/j45Ff (w!#NWtaK*o¾Z$QRX$IJ} 1r5h3sF# cyK];9b9(+(E`eY[OfyaEfwr`2N52E"#ʬpBXOy#k"wSm1ZH;ҤǞv0A 稡(6Ibxʍ mͪ<;(4\|# k,xI'Y,Nk\yQAN Ljd)6-Ǒ d_[y#P=k EݱZ{+38P2Pg#?m"m j9{aA "a_4@0RXK2#3|0)HAl53IZ%DI;Bt"K>Ɛ0)LxT$LIu,F:6_fij֙ l }e7(~V.I2K DeOJϑ\]R;=m;;w#a$j!JneQB"!5UM 9J'P"ܯ8p,pMd!J=ߡ)H@{dUG|O5vWvacYy\IhSB3g ,Ċ 蓗@]mM%|,HQ^yc~O_oK2:PĠP\}eX-d$='APbbsXv☲zkđ}wu,\mLIATX_avs͗OQtw&{,vCm돪w}j8Z:;g3X)K_{>Er?+鯊rVXgK,:+)63| RHYp;7^;~⤀Լ|/^adHeD4SQӫ)D)a5(t Z=U(dW [`q&dI>4 2Њ05PpH-S$~m6%x3_mfALxF_}:àⱴ^wI1@@0@d] |n^j/$iVmΈiz2vbˡ>226nE&ZF2dRKWI x=Vp)?V~LP?QixBѳkFn0I@eξ\k)Xёbw>f^"i -xB;Ɨ᛹A8 0]|O۶[g ~_j`&$K'vG@" i5)ZJ4Xl9xz ڵtГ'}30c!$l|%gk*J%qw'gcV4hxs>((ݯ<:,D$$ Ejqh D f7\ xbQ-WnLcB)]i{PyUtݴ:zBhOTlJ:J \X\)b鈻0/9QJ."S>XV"q'oDp rt(u\Z{v%.l2,m^Q,)_qj-6o_^Oj֜\s6vfSF:׸5{-IWTJ(]-\2W_Zn!Ou񪇶"Qw(L#I}ſ`{#/1yHBqZpʵ9>ENkww^kw++^w) #*$vU! o bGV Vul+D|w^Y2ЍTˬwl5'=.(F}곦8JLh( y/} b0t$L'{/9" l.w`mgTv8"1ߵ'."Qvv(-=W. s961`llqyO#+ 0DTE֣0)ĪM ДӰ /rh3ayok[;B[yɭ4 [z;HiPoVk9ۭuoh u?Dkq̃'m׿ IG]l]D` P h^mdI\'uz O Y5@Bkf9Y|C.gTsf&zS;f>Sx$f des lJɉ(k0)1vVkb d)¶s2QV2ןH_QML M+/7ڭTDٸz%f#zbTr/X6#ðF.۩S1ڎm]&\O#X#R=jɹ4it`IY@psa#!6jۼwhAdH Ο<+d C? YȀuͷAMe',*t{(akvW1b<,Drrh^RMe}yUWFnB$bd ~BWpO1ܣ7s/?0Ε)UE>Qg~ڤAnM"~'4M#v_%\%GvTb#p$d_@أMEK-[o:ƒ/Y1LiFL܌h/Q2}1 ^_7 D^T"[Q ?!?xЫ)*3#9D~pdFv{]doKPcSsw:nW9MJ[2@j! xOp 8&8LA@8QAԣ^ݲ1#h&؀ H`05#O>pTqʐʠij`UP@hZGڴ}\1{VOm{w5 ܻ%y˰uL9!}U8V03GTli`Fs)V5ɒfO7۟v嚗3k)oPI dD|&ޱPP}9 oB5 t]g] p慨%9`aQ|۹f?[͕KdJ TlKy㪍D`w=2RϠ.YXvXXO-55H_ݸ TE5d5+=`E^7ߨN8q1j$Ю.%l9lc[;h?L^?c :[o:+w@+

a`ZnW4&6whvƚ[c Gg }f`]g A "8jGh61Kc~3^&ˍ#aSb ڧLuH bv=A|tQj~> :#jrD^ G*%[Ta,R#ܿtY;"./uSX?tyaUS\0%Q!ͻJd?rAOC*{StP"b{Zk&P.%.qS|vYcN@NxҼ(+Y[ eCSѨT\\΀ s|*ye,838]iÁ 6bv^4G-oAB[8}GZ_hwT";d*X iI@<-*x2p:?RyTno{c4mӦ̖xy`{b؋f6=yJ-,tӫW߿x) o79j ?GJᔄMJUX[wΩ9.Ɇ6E{<6BxlMrpM ͮa;pdWݬ?m珮_l-pW~3>M B0'ݺ Ռrc~-B: H/h\VX5cYɃ #YM>_yO9wE\œL#$55ǹW]ptz'opl3]T [9h>Ky2j`8Tn5X?TG}FvTj>߂ ̽ Ǡ;2O Qԩiך5\01+f8VKhl[Yz 6BXVj3mz;ڛ~3T$D{ZE R,ܸnOT͝ ,.reS ڕ8z:'쯽=z.qDݠl kĀm;2E2-;'шT͛ {(IY/VL^~?*IT>E̒G=a.~[~E kAt Iu]U"pLp {3VUVm \NRGhÍ80Ź$V7OʶU@`UhՆBA6SB>.cNzЎXc+?k(v`unQlFC. ,?G1JWXݭ쯘$~9vz\.H{{:W8D {iv[{;a ' $]cNU$+7V%] 3 9$fDYOW5,4=fcJf!\54b)ɰvՔ -2^/6NPڔ /'ޥAVn\P JtxrPrE|W9._; DXqNTlU[hUJɤI|.8t tOI:Ӣ /$̍{3`)o\ oo owzOj*Yg|$`lűd NSs" gs)z"ѹیk-{MocpvoSx@5v{D,iJvKoPR:^z*[ 8K{4 X]G{4aMLRD%=LV}59 ΄;ZJP@83/#laC ΞH;SgԎGq_4@/vިYJ۽s}[;l4ᔥnE:Zw$|^ YnpXR6)t`hD@:gv6Yݷ_(4-C]!2OC fucܻlf#f1eT\[# eӕ3a$6G/,‡ȋi 5rjВJv&eԨrA)uf&fxOGO<뾄)Hsk 7\$Ias Y\-saɄ 0ڮqWGֺNŲTRmc #6.fNG^KQ䷏z.]r?|Mp "Vx1h>;sZ[n92JRGjɦwtfrQQ ^q5x2Pieqknb(W^gB?kJ>tgG\a gYuJj^uZtfg[U5Z S)mU\rka@|wQ/8HѶ%2؀t!DtfBhc>$/1.[9r9Dk49+ D\q0o(# x-XfRF*c:}$Z>A"_"x!*DAL2*`RHp5](_l05s6v{Iz(BsNPj=W+s; fS&-FQ_0dG9ur[eBJOTȧ<]kv?x7'0@s j!hx=!` z'hM(LQ0ܬÇʣC!gC5 #ퟻm6VCp/S͘{W*/e&5r)ODblaKk50\Jv,fgGZ6x@A?̰mKly@U#yJU< k: 8s&[-[o׍/sf ٍ>FW$k~,a| r{=0zrs5s*5 'H-S{"DDOxKZ3 '&Ug^^[#eJQWy뵑C.DpCv3aV%m%If8䢨bLpIw٢}q4P u+J;+?" x]'ÞcM䏃|~]fܴ@Vvb󂛕Խ I!gs!#ׁN=LX/(!iK]$ Q!1N*Jqq Lt U<\!z)cJE bKW >n ~,zO݊G. lT* O.f;ooB7ܠ p旲\(sLR`ṬrpG. =˒,֠ 1(ƸIAdnZ}-Ds.0AUŢ 9"J}emXv\G tf kT'H&LOS@ '6A<18 .'4c@3ϛ iҌ$oc_CCSg0_1Ŗ0-|D ;ODħ?A4 0?LwsrW5GI.`@މ:$ڼ6*cBi`sQY6d%0jwSvR.x .IE4!ս'k1zGWHfـO [1.^ FWIx3X%1І$f3r|H/T-Ⱥ.\k{(Mr'S^z*G7e_5үHHe]T? ,8>Dlރa4kv__J ՙrR23mS:.0bWkH&:s צ -F(6$V ψ/HVP Hˆ azonXb4B-} O!MQ w*d*C*MWi1gѾS#4ba'Vh?Gn.?=$"YX^f-oz"7ׇp=wCN-R8 U!yTtoZ<^\7hv+%' ïoP`K)JpLD}P,^<& 77\@-ްd2ozSZ*QD1[S*k8^*-&C37sWw*V/s5oohH?o4Rٽzɹr&1M:!ѣ*pЀ%iJ?LT)z(g"1{OIBD4^0?4'5`+bR׆(I+GcO>7z^Dq!µ߬_4 qc)^q^^U,/ʌ:џE؉&p|[Wm5 ҂^Җ$iK3*pX &8%lM:]#^hzpݚ'&yǘ3*qoF85jsG>-4@#vѹ%1 %hϯ=yAakZ?~t<6 p#!/)zҚp&Zc'a`DѴdtSYM1,#I\*]xH :s#<6olo(dީ.@q yC?+4|McQ~}{,]Æ f{ ?ύp(۬wKd }\=TkK.OsB!cޏ oagR$5/8PdN}dq 卉A Fi.-1:$m[ ~N5K8~1BgKosv&ΒPc]recĊaAu5IZ<ĸkeyG 4ln^ނNzAQʔpΗ ;5Nu\,ǡ/sPf/1FYR^Xb@dJd gx<= Srƿ|m W n ߃- ͪ_◳oh'|rG@wlB=J~o*GљlS4ΑJR?Vb \ \Ւ9տ|I^ EK1X ЋEO|y|{Q@zO[qVRFInv)V䌌e 1 `͞Vn3AжLdCCq nr&$@:34 *N=H@|Fvp(5/ְ, =,J~e;O[ E:ĦYF埙c-aX|qHm?M;U׻tK*9;ԩ+gVqtTtNf 02˳NyѡȚ6.m34M`jMY;.!Bvf?P 74eP/%L1!TC1%wTcmɎ`X''C@j> N*1w&RVɯovA:ŽCYfhiCJ ?"N7Re+3|UO@~o3=WD.0Fݩ{u7O0oJOYFΫp PBD0➮c=p&f*iH.PPilf,7[bBfk'PWoSǨI^b?fݯ,εWʰA$4gqUJ xe~=`3 }:&Hn D.ԅT'wB4T Xa`P'gK \%ǥ 6$x Nc`zXT:?1 864Z(=vFĹ^yZd<̝S~x2xIbofG}Ӭcdg췤_)!d>D]ujݾ on~`-JVJg (<qlB.-eNh՚:=Q%|U~7 T SY<;<@mUo٬TH/G0I(=jQ,l@AI7j<\7Yݙ1)PPV-v㙥j-o0yI'TPojj$᫄zbp̞ |h`TW_~)9b7`wV":p yT8 O@׾/~ rx89L))<%K/D(۹w# S8q0*8cY]d;\m) "F [mKȚv10a^x[Bm2)H4"ohJVtR; GK`g:}^!MΉٝa - FN=iنIHc:P0S@R<&5&({{cQ~=cVVaۿWۖʘD9Hf -мdϟ"MAԕ( SaOiH-҈!㔟[:#Gt:""e+\{$wg{sd#p9 F?=mBcY)N}Tzk6Ec zľ^hMi iPZZĈ]1Y6 MwT '.xg`'?,Tq.! 'ua֞z&*R^>sDDrV=^%!Xz3~k)ZN M#3t0x@hB* S?;Bc{n )&>VPH }S(I \wEE֯ʴM^py=>Cka!bTF,%~fыۘj`jkg\ ,b!jKO~SO .Ly /qh/"̂s}SMnQAt( ^eK_Aӆ#h-=`GBxt_2oÌ+hFoJ`7EBg'ʳk/T8O8ejJF!ݺ7Ϧk^e~O?[2TIO<]åM-GUgV[ tX*j̷hFrw`QrGaPw}[+~Q -g|wxK&.wu,[/hm  &906>^oeLʽu!3 T.K6*Bbn+cRTjָ@LvU{ 5~meΈkRPE-Z5"Ũ:l*@`k2!M{,ʍGl)yw&)F3q{N[kKͶ_i"W+Ţ{6%hL"YL5CTdX0-mOYї ¶ \aլ /0JKO9be8CY+dq=B)/V"BU{Pi%EԒa]cLǻ,8jTdMZR1qz|+rf\(\2C0AhpR5 |/o06"u9L2Y ,L"EG3r5|T&#0H@ljd FR}cjV=7> nxeŤVjvP9? ngCr/0qXcdH$LmMG+-bɧ>>@AW6+^J7#Ueqg:1h@j;'*e_W+u V&eGnR>r Y5 Mu!_!c#$[66c# 7O\T5!^IJ'Xu$ /J`qQ ;zZŵ>qN* صИjm_nq#Ifp8o=G1T\AodLLA-=pN=[}k?;}qܜ~B˃^J~JUdo,D _Vm|u@Eߨ۠{;<ޜ ')TR:\R\Â6yd*/>SV(cG:9ۃ>6ZN k[k\C>w;ۺTu\y%7Bg xo´x͠U68xv ,^-@K` x +.$ ]BlFF^/_8](G:ƂCe 3V)uQËѼrMy)Kaw$'0F3=w R0(>p0SU/o1R.xdKLǦғ7:d1\JJ&ځImi!naqS|c+aڒgu[_жQ|Mo5vh$U1AhL퓉t]3CBkF3?6uxzU82E=UE1}.ٻ{opxbU N57W3[,3k#<#ۄ&s>ѥK>i7x1 c9 ~zb{t}`HMr*FRp4jvh b8(5"MoE{biD(g kwbͦ˄c aAK* k\Q!C(95_o[3 I-S`]OG _am'"s,9pV˾upcp`6^IPԎeeUpzd U%-GCN`{#1aa0|!!L'vb{#ISgaa{_2d|sZr) ^󷰮J!Ͻ=|KjzntxSB5[*b({U}CͿG R4Z[NU:yN$XTꌏ}bbOT]@IĞ4+P \B,ҷDgSѤTcb75CԵ_w+]i Te x);aDxxGYS_uEu쪶Ԁ.i1M=!cWG0aPؤ e crDT!Dw7kj(x ڼ3!2~}uMRLfcJhre1,KG]*+za >O ~~M-TLfC(c[;\)&JW\3TMi]}櫳8^f{2ᦠW:àFdbw4%M\4 [ )PR:|~ya rʏɭ7@mV3DWksa| fȯxwWu9,G+BQ57@F|*rl7ܞ/>al5_.š8נ%HW$ؠrPV C6w6mN[`:P=vUخ3$aqm_ֿcL0 PlBimN4na(;NTi?iIL0_^C?夀CHIؾ VLJq v.-o0vbh:/}Б m4}n@6s+@$r8po:mt K:!my?l@p:;)HFzÜZWg,Ka)@ăun#32e^4 nywe-N&+>F6quuE2{U|E.V|Z5S E3>_^";zK;͝_?=_'VlC/Grsex)I۪81{TOL`z  ×9[?J>\XO逴 `°<7灞L ){ه 2<|$`OښCUoR!{=zʪ6ּ-Gw/sЛF&_VA$r0xyJҰK Ji~CğW.liN3:3[xxg0=< Ku;˕?c iŎx%,D0J?ZE6ϛ`w̓I0R~/j*7 9CtWQ'[2)2zO[4{]CPj }"8k3JBHBRD >q]f :7>TOs}6C$) mQyװQ&"@r;Cpm3j{UR7wIPP%T|FFS%h=vTId{rt;ZG'Xכ?s82aR4iowcʵL gkЦ=ܧB[,)mдOj^%]>ڭ5j?[ErlhB꧜Z#5k_ٝ^EE` $15+Ǝ$ډ2?ECׂ"s4uY'vcj4-} _sjcFxR8&(n$xbl(G G~שm=G~gk=r>o#˓UWIvj*eM:x5wy=Gh&鎊c6|q"9Wl1Tn~u(];-bEÒH(/JDmAe|zwU(*t)g1?)Be9Tb#?0[\W=WSpQ)j'/'fD5Lԙu}oZÀJzHg6fciv,wv6h gp#q]^1Ы` FIf{yȗ4$-'88خeɢjۏ M4.ײ"[ws U3˦kWX1X;[IYp5e_`a ^ڝWL$13<,x]):>.%&]j>%|ri-ɑ BϠ lY5z~{}S9[:ؚ‡S8&I#:"tG$#&̄gSXD/Gggp,tƛH~}6!{8Fal5n7o1;8ϰ,Aйf ͮ]BpB7?d ,LZ Jmٴ\QӦ4(n܍qKѴIv|$ƅ[ܹWmܖ. LUi =9Г03~eLbת-^!Dh:$ԛ3@U,w񗓀ǎfmw` Q]}=.,٧c"&3YtAnnb~+̵vE3 "mc!x J7KYWƉEH N@?ѴwD MXl,Dy!Ph'*\%hPz YKG`\Pe!m#Pm'!迫t+ 7VK;'z $&8,Ro¹.P6 h~8t6 =Â&hXTZ^=Wi֐`@5AheѼEѧYMz CVmW"ȰrB1>D+aa ZS%kHmP&HtnP^; A_pYjKRvOꏓ֤wM:6})vp(iIװ5`]ґ"HwL|d'4?<&ծ}M_tiN>cT=-0Ì)?E |?oyݦPĨ>d`㕣^"=)~Y%&{Su+ѦD۶ȩRƜ́ +uǤ!ȱmIJU`[M&M/7ud!=^rTΌ_t2x 5iS5uQB tԼ|=:eך(bw(f,c2-w'H}B'5kI&kΌL7),'EZSmT\a08DBf[AkajC {%bdl@D [E&ׁkD2(i\MH5Epw4f1',~(~yd"oxؘX݇t/<~ad7 Qie-g3bdH1J н7KJi +BQkyY /6Ĩ,8Fvn+?~Sգ#ǝԗ8fv$nWm Waq 5Iz-Y(Jfſ&xGek\”./;qd?艧7&Zn6 uzixf恲k,=F*@ozP j(K𯔋"Wd7b, U^ig5hXr0~lSـL.eJ\6966Y(:RrA11stĩ>Tƌ_-S>6pr댻SLTdI򝔙k0Ny/ټ_6124X^D9F5ժXTز%Y((m;"kBuq6(ȣ1jU lS FsӮzMyR}v2==WG=\#iN?Kjy85RO~g<R38gz ch%c&?K1~Kr2` |ZkV&ټV;EFb JmV-νKsf @ F~TF"wR&r}P='=d! +R>^@.wS22 rgŜΩ4NrjfaOC'X)FY[\V'SJI[Ws?eSlI+vzԊ-Vf$o]~OXPKbewʲ@>gJݲX͊C\h;HdУT |vnq"+IαGJ/hEk7Ohz䦀`!y 6] kd0YY#,ý'"fMg}`5]e<<hF0o 'OНF T1 f-9%H9rҾ:U0]rI;hBB k̅TkQ&=jq?$k3"c|w.~ 1gRM4!eǔx6UYKzBWEH-$" ny\5V鋾^7# #jc_fq5l=3$j 8;1qr3Kx!+PtЧ]L|b5(2ᖔRfVv˳gMG̞B o_.@y];Z+1p_3l̄Xc`?\ }gĂ74hG$UՁ1asz967՛<9JVhۛ BgĩҿB H]|dL EAI}Xa׷i6q-9te/+bB'%氢rQ(iQr]5uC4VXBpa&6 s̞1O[fտyN8Ќ2q #91Z({s=RkEAqD@&M2Be;cn-.qzC$@Lz nP:-(+>%6V/:IlO/*Fu^RLJtǓO)t\p'[s)cObHaR'Ȧq Ae }H(3\aK^0jp*|7D(`4 Zo/\/iHº|뵧nN8AկظDv='Eq&wx2lyThϯ|{GhP!P?EE޽`qJhZQXڏ}׮ZNjNpx3MtC(RNjNO ?8%^K# l"h|=/> :ߪ򜁬JEr~ (.I1 ˬ6pH6cm6m.Zaok5)P34NFc $aLPUנ`XVbD^6TDev=ԒaLFm-K{,qw)pP.dܘ$0V>+NF<R}{hr%ԅ1Spo7ds´A~DG0{G|5^m65`(Jk+ }.)^s:ƺM=FTFP"ŀE"œd1v)X`r/9wi.0ʩBQҕrosoy%'ARNbN:~Zyq8xTҰ`}'Ho f32ؙw@ (AR.4X+&hmpLz .Rri9'5E:)ExG\d!rb9y5zeSd'hLM 0\JкZq|Nķ%h-ũ' `lc}_1G W}-Wp=)z&ã0  ,,LͳοΈD9?2F/_n|N/,4~KT\W2yq?frM]9G勸چ3^q6xgV*•#9+ p>LmWs;oćRlgf [u^]5c %|J VlBl,yc2mF"QLbΤ²lnH"t&lIٔN{v:G ަ5HSn oM?Ar L.eL f|xT5:8k1Ʒ]b玘 5OmT8u3ZRgA[>N@KRP!담r)g#I+N P#v&߿i{H dR4ZX8's`T`}^-X"ml5 u+m.KmʣtI<=6 L[MHkT5>CϤ B /-B y :[;)a៷3rt-;Hir ;:L8:$lY F[hSPcd:]%0p\# \+@P(r5e9#펂pm2YE+Px}M.JY r#F;{'fO>`'?&NSb[ҿsOw ]AlgP6_Ϟ/ 7{44:yK+/~ɰ{ϊ;cg۳t t-= $մpoT-eΌAl:/k@3Ռȡ-2$yެ@feyDYfאE_dTGO8LUG3$NU4d_Y45?Ɯgi(لjP"xdšfMH%@hִ|CF1q_ #ׄBG܀ͮI  \E J"֯X3U=;#!o?<쨎*jCg VS0yp"qU@yg"?Pl9XXX.e!e] HsN?R~*E), Aђ4U2N+W\I]tmIGLHqQsBsN{lϐҾ&G)YX˞, /3A˻?kH"eW8ot*R3)#.[X-+'߽rT1WTu8j$X4`7f̢RG _eqS4gކN? 9X?:9d]xX^'쥕'gZx {"#[)mR\I{W< P ɧ-34Ky(FI(& CȈN@a|åv-P6X7ʌIv8;І>NK u5p% _w) Vy86 962 ͬJxm9qi.Ї`v+0QlFGkYhyl6jVNb+tj7VӀ|4OO0ecbH Bfon҃i :S +:P@x!h+#8Z_{[:0܄tYT: w|tH&UTJk)-+e1hiM7@.{0:R*+Z?!g#Zzalq ,S]܍5WB;f\ B8ϙR0@fLz%ҹ悯ep3^$)FĉsLj7c-^.WT=.?Z .n26;u'v _X|c~L;!ï ب0ܲL/X ^w ºcTwԕ4o>+n[WbT =L_gpe|/ n1x:sP_ҌRevBU§%L7`|2,R j`Ј|o/}lƏO o} A +!=S߸JĜ-YȂHWDαk25vX[068(InWϕD `~z|g +HNq43nF5 =u/%FlU!FTٗ/pdMdl"\Zb`U *9pCV) U_2QwvPlDW<=O #,xxiYztTGJGdTwڔs22: o,sfxbM|ݶ3(oS׭}4Pw=J ;B6ZY14g{.1| ge"FME>P# @[^)2Gc' .ωC蓭x漎qipξlVv3{=X;QT4h* tdFYK2Y z&([P'U|1UbX{âd6iN@o@L -;$(vQs*N13(zZmP)x꜄9͝M[ EM` T'e̕l>%,zȸz Nн%Ls+\ rgEQ"%Lm6eWW׮@Di w]=y_Woq*ٹg&_Ek!b>"4RzyVNkZ7Y3-=:qI Yj9#+Pļ$yI5>v9Y/RUʠ9'{\I z(Q `4YXM_g9Ŏ&p/tYFJp,ZNE*(S_&HIYa)Wd_#~v _iz8wUܢ Jo#VnVo$,ק&9PCQ;UVuNFJPͣԓzJAC*Di:nAG|.mhz>RˬtMrĂF޿(V|4F{?px9YȊF]m' cdu؍=j8i[& RkK>WYmpe7ɚB7V3G7YԍG- ʰ;V=^N7K3ňd!ܪ p xg`$/.%/s|rAcV DVywcu&OG{5m<7zfr-M}Ic]5.~hܡ𤴲+Өc.;f WEBv)ۨfzx+G01F"Ж|% 8|7DpyeeU." Pwֹ 5%W/ 9!G/g7֘XbC!\o@WW-]҇<%me菇V.}24SqĪ?eq%)v:^#~q$[HW\-^䄊2a ~Sy-̜biɞ \㠹Lje?V햃 7z|1 `'IyӰIϯ<$Ui $<4h6y b1=az+ ҭ?)7qo h]Z[.FMKy.˅ lqpןs:&N^yyN] II`')`U6qv8p[EStCeGMyAj, _΅?cD XɏiBJį L(Ōw%$@x١ڳYK]bc[gb:$1b1 '){G4p?tVAG^B.28Kc Dw.}sLiP9m^oyw29zfJU{wh(05lLTܞ\:8&CW˛lj=sܒܬTsqF5X|ȞvO:x#iµo؀6tgq&;;l%:\KG> O;lȥ?8,I 3bg$Z`rqtq~\+쭭Mߊ(Gjݫ&*КUNWײ%ЗGdHS&kVaӵt:Z&&] R7넖qڪwtHΡ^B=m鞦k*2tH&/{?@TB\jSk>Jw9Ƕa_8iASDc /=nT_)l{"٭7^\hq]lBV5΅}52ě]hz[>bKRb-bܶ+DU!NAAc=A/yZ oA;E?|ԣ/(#h 2_aWNlq JJ0TZu% ʯ9Q y|aExOR)4jƬ2pDd' ԟ~lc*;O)U"1YT1huXB]sGB FiH}@˼}M~6GT *:Wtav/DA\L̳yy3kiիS4sƗM(v\6 KOM^<UY $ 6rfVs|Hˈk ~*L 1Yd5k)\#9Bl}MgR'^pI4*!|ʺLVstN/ɗob, a]V,̊AkK蜸+Q>h1qUAbkP[0%=6~!ǩ V CiJй֔ .R= i~ަƙ2 O6EzȉRC,^3Zz_vє`|^hl{.[bVu&~z)l"L_Mv[yUN,8lw WUƹZAPȐUm5cǛZ02a+AM(=QЌ߾_63Hs䤉V)DʍO(\ Q>k<2#c ]j2mMxo]Y@)ؙ'ښDId8L[$♝y.o-H3xV fzmݻ$fy+cNfۆ~L/Ũ3}*^:EuH6ؘPWأ\ɅjVotGrg:lx;j[Yn"{S !Os{%^z`$½&f27AuArkG j4gư~;K,Xb_Z$a @ɰ>hiwNY%ecG'#)QN]M?g0ݵ3׿n-E=\2-wzU[aQ=ZH&ZvVQ#ߧf2Yڤd[:yˡS"Hm$,rJCeR˦:JgUg)r1s$)i쨄fȯ=EWBUYT#E)-,y*eZO[&]3)N|8^X @WXoC/qmrqWgݱ+p)fj8 $p Rp7sws"t jD^ ։,ohBhPpS=9NCcj yVE%5hue܏Q:.x;>\}=7<ԁ: |Ŕএɲ#)Kd۴ve%Da* 떚!aY ۶_Gw.l됗bECMKơƚYs4?H^kTa2N8sI 偊he,@a*] 4Tң(Jա E{IP~6TrnRgoMHY|بCvޖ {ɶ8mg3!! '1I"_ǣ"Km ->$'= yB ^0-i*0#rUlZ\L2P8ǧG%>u#׶dq)D^j"# d(C\ޑ.YN7|ܰ|.aKju54JUeD0V)vm6 b@&G!=Tw|HؑP\<C"#z4Ek3@*mS͂e;s*1q„CcR%%v%T@wͅ~?R0t?2SLΣvI4Vӊ&yx3e'R ġ?yfPi|[wy50J ¹RK_HLj<Η9x}#9 % ז:{`$vەX:' OKd%:6qZ}WkWͣP)U]Uag,|:[qGFQb9#L3 #e]xT[tgGh !yԂ %9<_kjEw-0Zi!pZ:65>L~SIC"Mrg65,\+m՚ \ڽT( ɮ.O*Wr >xnmi lm_a\}K{6=3~uNRZ [8~Ndd\\oulrf9iꋇ~ɑ7PGЃYi\ȉ?|&I.1,/1"bE#7|VG15֤[q! **i klѯ4xVuEfd+r k% #{g%0c&zּ|=Q:jؖwGJVuRZ81*5mUD  W r":zUѷ87+|:# 9Z3 5}_,~c_Z8uӛnYpwty8O[ +aƬ+?_Yx@-{*f'(aIqeF{heʼWs,l2SO+7 l?TzbI[-3S/)9)$aI~^xעZ~5[7{yHE3oT}P`sNGc]m˳$~Fzt=q11gatCt`t_S|9Ž\e ֟b+^ Cƿ&<,U@FuT<,VnɃ"^;}C4OFLlw>?qtno~GVH1i4K[ny 쿺+իm>3ߩ:%1z֬+f'`]%5Rf*hOHdc7 h2W zӻy'c8O% a4hn ^і %,Y K̶-Kі._:BlR.9hF4;茤$([c8rUF -´5N Nȉ2W QL >',G$%Aܠ ;sqDnc &94foX:7ƌfs٥醩INOo؉ L1 :MʃPюÈ+p&J}BtБVN*j88i RF~\gdҢ'9 `/+T 9,E t]%a+01v]uTiޗr ŬoL?tIȦ.w{06) w\b.h3%#P؟IeG[CણhSxKUFϲB&n  e+fKK4juΟu;:Fx2lD|.' %|^T>s 7j|mF67Y@ZnM@'.Ͼ߻yI5jS88 Ӂ}X@Qшysv?7-i9QY(R "IO 'j Ue꩘}- wr~'|xʩ%]Od(`*и8 ~DEkwo{hg .R-^=VHK~ˀ +j煔HЯed@PE1[e/d2KP& #xGW?=Z DB17§c#oWl ݡwnNm<>sL%7)gi ^נ`f~ٝ4ow  Ә O"H狎Й7s@wu*woa3 8 $+?2eCvw\8ϔeC_TJ#vEg%]"l󒈭87J36V%H LN9w+unڤIcUg߼M.YdSVϢbou)rG]tÜ~fel/3$ .}0O\o?ȇ=7굉l:jfgfQOqgU̇ċ:RAͧLyK!a=1Aq2>D3C?z#^뛹oJv..`@0B}^G³!&]͐Q K]o{tL6jylC-\l6^m(l܊^E3)i =!A AȰLUR_+ryޗcΔYO^#ݏGqenܶǪY]ca‘e7:9lU|@*G- QgKNH# fbv%%uVe@;̰=4x:K}v6Gtl*Λ' lHEɝt(fX= C R4QV3Jy76.s蚔@\?8rV4O(ҳ "׵0eUCERZm8 ՛q;m0SmH(#9 f6[LJ* Jsau>~%0$NSNu&"?/:ŗ&AVw!b9q^ůѴ9djQs0mTxh,.wӪ;Z-j+[B r y9 8׼9W}Q[=L]D0ZLđ gKr$q4AJ\U+]}OsBwULKKYRWB;=;_(\Edb`kFNӉZC@ ]ObDr źr-df͂UxZLzS'p)i ɼ.'_iѥ) ԅTbZ.IfhKb'k.w MKL5X:aX/wnxtXHԼOlh<hFeIUrX8Qv,hDt!!ig]"r3*O3}JQ h'/]dleFM8At #I~l6=І_}+!Ʋ%o!xҕQ|`p~>>d Wj=38CjA)W3E ZBm6!faZY(FBt=cc,?2Vo^?]Z;B:)[I@ 6j&vSLxQR'h!C-T9bxc:TT5cPȲ!wb֖=9 ]H䈹^|#$O^J 71[Ȼó60}JZ逡+[c,hZɬ(/T[ef+bIuBݰ+R@ӷPs謭2 xm;)6DS@D78}s5۰}: R_hQ #MCM8 FeEm3џ e"ZޜbĽw4kJO}co)9 @ԒHsLA)iFÑDɿ+Z9ed×$Ρ(CQ KyotSeSDCC+XXjE K ڈm^/sL&6:Z幨1g>bnѷD.Dxd7BJY(Zt'g#fyB&1 x_,L̃ dJEKg'R !f5%ty[QC 2_0Y^bQ#.g?(N/>R@riұ}{U*o9%J&;*4h$y *&8«BKq|ɂQ ,W $D钣#/XL<ի6\|<\ðzė:mM]=n׫l^@LAhL-CXn~΢Lzl(>`k?tlsif?1bC(Н(Zh_ NH9~2N00=<&>⨲ȩx7yFz^SF9y,[n#R)mefsߔf-ᥙ{BlGx*,k k鋽P6 z ɲZ{qBH3h3a{`{~DZo&pnYm̘R3Ĥw>%Qj*>Mk=p5K\\4%㨞9G2ctr윿wn50uo-bCNd?%f.B-lWꀅ9=(=x 5 RBsda$Zxw%fy12La\[M$w*ĕ5j?7səĀœ%Xs <0w4bBiɢQ{fPeY51!:}؃$WBKuTnntcâP/nw%S5;Z(ޘrJDp&P$lԟm1 iX ir B:DϢ}K!p|B%vYa?PJ Lν86)؞q_~>u{YNb+P}hBpTϱ~\%DW(]ڶ46c\I qa%B Kon | Ge#4K"5 U8spiY)j(cn@i% VYhETf6p/'#4;b^FLCieyZE!~o/K~t,C"Sv*! JntRU&b|DIx`X:z|Ze,~uvLQ? S(O* NQ/"baoE3'Iu(ph䲉YI͏R:BXQܤ-؝DD ǡ\Q5qMnVH{ysu>/  aS(E}Ozt;)WmCMR ˆI%8Z.W*9zh/^'2Hzo'fhMtvV3~c Ι\B\%{Xk6{)j'[A!N=hοϔlkC ZCֈ $իQGE51#*}%:ШRČ荘Qܚ k/z[@UWXg]I~l:iA&Ԅ+lg?6ozޚ .\}2~pr =[z׸s6@mٕZ|tXbp/ȃKtFAtW` z,uC k"nЩaJzOS #ؽ0ɗ;'a%}e> uџ*e^g#؆MkuWfGW,TI,њ7˂fT+== o^=!ҏJljc[c,R>Su ']qv@DJl"+{u^&vGA=x 4&Q ~{d2ԍ 3'@^q=y.QL6Ka}3f( >'z3ۅDzɒO<Î4n|ƕ~ J$@׊xD.{uZd3ɬU‘'Hr  6W Cdb c2!J[1zWY啅P57ws\a IW'o^$H-Jg[D}"nYb[Q(DlJ_a"'VŠd-Et:& o ޷{dxｖ^ό)1A ܰ:>#hw@c@>Ǽx, 8]Tâ6FiOߨ`33Dnwºٴי6h|_yQ6yg*{P0@_չ(Cɇz!c "xRmU,DjѤNU)0L9ab0A<]~g0ʿ 60x,*dcZXh dx i`x`\ ) ]Zd-grf#ddV\qZԝ<.3xXyĀ 3Tha +kߵy-J]GOTVu4;|'Vn܇l/r=Os_nW \ u!mZfўؽGKx"#Yd. ?.d԰hTbO5qV`d bޒ;h[DUwCvq2 ߔVt qTǓg M ]R#w(޵,:nn _s@6G,F)ׯ3+xU̕=/[ 青MwĹHQ/=&[P҇[b]L_@:> uNNBP?zg aHI%+d"\&J:/%,4Eg*%b=.~rf_q՞ ql:HN*DtQ(0%|TT[7V& ]stTt?筛gA`LpϷ+Ob&:ywuǾgj!JXh(qSjټĊ&RNwܪ7D9s=j߈aJan,A[_ vpD*>9+V+ΨwS¯֝>QW6WPOgJTcυ1T=ٓ`Qv.a=WZ(W+;ిE7+9ub\Ah< "ɶt?^qŰ%ze_ڈϙGrEutVq戨GҒNjPb,1`j[W1{U^HX%PNmu7<}L>V|eջdxp%PGz;-"E:[-܁uNS̔:}9xDZy9-r(j{5٩ce7ԦG&Z8# M0l5)Fn/ X9k kp7.yhoꋗV|/򍜷 `ץ:5Бu&cቑ!>Ajh?57`T77fQTxҀpP4_Hkm;H&R-@himfz923pǼe`نh2,DE~~`G~Oz&;޸+vn&-28QV[?KhUKܹq՘'@vysD닃b𗐩ieŽg Mi0"#(9m쾋k9z/5I ߁ř/d K( "~c0HTBːf{,A:Uzd_]2 >e7,tuDX}+[PTڇ$.!.|smJbBJ_tc56Ip5sߏy i^r sm;.xԌ3߽hH^G nAkzPjpqFIWɩƟF8ai@tu 1|[ZǙ7k6X0lY凓773+1)i:~ZWzIsWA2/s^Pqt{.Ee pY E?a5R{0GOk&rIkfv f1.#q9v hЖ)