python3-apparmor-3.0.4-150400.5.9.1<>,dckp9|JLǑ7+nQ)OeM?M?/y)?Riih냳nr"4 rO׳5l.iϝiۻEh)|&D];m!k6>@?0d & S= SpUU U HU U 1U UUU.TU ,"[("8"~9$~:-~FXGpUHUIUXpYx\U]U^ bcOdefluUvD wUx0UyȄSz,Cpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.dckmourvedre ixSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxppc64le/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d` d` d` d` d` d` b`%d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d` b`%d` d` d` d` d` d` d` d` d` d` d` d` d` d` b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d`d` d` d` d` d` d@d`b`%d` d` d` 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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(ppc-64)@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffmourvedre 1694065515  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-powerpc64le-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=50625c72d320638fb2d1772ceab91344e8ed3343, stripped  !"#$%&'()*+,-./0123456789:;<=>?@APQRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRR R R RR RRRRRBwȅæ=\utf-8495a4cd3bacfe106e6641ee1667011f4e5db813e71232801d6873b4c09fea3c7? 7zXZ !t/5_]"k%a D岻Nv2PP%=S Hu~M͔'&D^)2'QAVt}8T=;9VhNx[M ZFM7~[g>~E8WfXPqt#5Fn֪GjCr71br}^9I#U`%[[fbyi4*9W0H.4P/zO\,V%a.㞊ڹb5A&"^ue4"1I:| DX F2s s mIEdӫEfq%iԈ-9u3ae]ʰP]Zm}t"G-B.*" whk\51Il#A V2)s{ G(1!\՗ n1QObZRP{ V!L`%R,*CVulvK\=_Ӆ1i> njmJR">&ȓ~ί=xW?̸Z536]>hm;_ZeAnnaQ$PX2=VGAiKeXtD[Ł2V0:ב$OjZ$3bjWˈ b?`SE Y3lL ޢImMxgt&4]\Őc|9W~د ;,&wL~wVlӡ~KmOViLkLw ?K^57홃ճgDnj2RYLA^u&ԵA(/Je&GɛV\DԻ7'.…_ D+4?ʟ-lˍޓy8VdO*"~,nnΆ#f8K\8iLQX.z&Ȱ@2qH$ĺF2 eB5LY5; @fn Dݵs_"%$ۄ&1*b*=;O%J4B1>%d`Y=QЛD9o)!q`Wq9@pۄvڕt헞5EN Iw'/Yof ܯ;&S?{PO/\_qwv)~/iJyxPzOZ*u >k l.xNVJJꁪKda-7K\ F4b*Xn^uW<_Sw_ٹ dm5`~g7-F-iIY@&9Kk!CuR($|+0^?6JQKq7Rr]|,{-q@KT~A^ YWÄ }ٙu(?:'w9{ Ay#1H3NBRٛ(`N oz%s/}.:S2!<ҭWM ZSMځsF;#p&c% Et"L: #?$q -:-Ep梭Z mzIZfʂ"eAPwng_ٍ+GnK5qKB0XN* ngJ5$h% UpP5@Quwf h}ֳjAE!Cv$Ӿ54nIU,E҃_P.F9ahԺ8mgZyG \Ϊ*N-u/8@,p㥐rqX}SZDtz -*AQ. b}wUrl4WM 7>oLY{WU6rHA<`ܲ-j*\XQL>Dq=%"F=D42S4w cf:#"0ϩ%&`7?xmq~JmkiZ"ZMG_u?/Lۼi?qR'y3[f} kqιu5Z"! Mx[5CC씡ý$2l Rɉkd)NoRVwƳԬsiPup 7@ ܋1y-,v.hK36F6}8#Xأˠm_Ne'y 1)*=\2zu+X:KÁf-BP"\ڟ~ ew>!\ڛɲm#39ΓRYI`Js1CѭMD z;!m.9t`ohŚ#k+L3Kq,-j? =i{+\%M!z$k)}\"SW3:t\"00J#6~-$ FkґњV I_&chf8)}3KRԫ^de[9!H,'d5)ִ+K!v^r;B 9xoLJnKb$Wdn; "l /U:2es9a>Uy<#۲XA4)CKn8WҁuHJPoa#( |9av&$g39&hȸ\M=.EDF`j|NNdPZ4hvSAzkyRUHcow xLb8ᕃ.޼S;^]e4gGL:T} [q;Uű2Md!c](=ήDU!*xz~(toF{ NcEB*!t-+"N)Ci 4[8r$CA[v:ilv F, \xF!L%yzWnZ_Z BQ/PKt1TrAwU&9YVyzq:\^9w7<=+\Տ7M41bĝ;Vҙ3Ζ V ^(% D"gmj(-%e$[J0׬|qA ?4VWENq!!=2׸%J`IL;h}El\cjXVʤPR6ZbHv4mHU9=Ӛ=J.%ly ky,RVLgOe}7j:De*eaW  uSA %lkQg6kF{uI07j/^$*l'aW||uDGSqyINY$zýXAW s?MHjI^יR:A;)"g8bxuĖ ,Iž2[i9 T X艢~5X/ZT4"r={&(])YKbu,~[!?%{`*Pe\K,\8XwubK1N4]jTa)B'qx/E)[.YM9nO.8_r(oxY}$=Ze_r ]!q֣JH Kǯ}Dz%!3<q;>;a^YW>-i˓B-?8 |VfF@< \k8Kd3rd8k pGn]%yuOH 9Ӄ!$oцl& -H 4Ϲ/Y`8LFȒb#ew> $~Kpo8|)[Mنxhȭ-TAJr 6Dx?GȧQ(CLJAP;K4,`+I*rƵ>hڗӁe TM;,iʂG2d."KAᩓu: {9³9JGvyM:/w\/r :Ibv*mK(fRnZ3La&n_TġEYmIӕ)~ïD}~9#8ޕm˩d=|cLqOIi3y_px- }8k|agA#(Q>9\:}8:6hR&IP%ҷhf^偌~hATՁSۃ†Ϸ]Y8#Fϸ5l|jJ0-yHs1Y#/ʵ/Vev>({ǟE!zXll;C}B[ԉq`c(4[X Qx)t ^ɍQ@ 3PIa8Dc\}eYfO?_(!SC*E\н!tkjGG 0F8[rE o "#i9ͫF~o3˛ɓdPiքAPt}"|65ل Eq%IZ'ుDow_Zt,.?(zes&%b 1961#>r\P’6y.:֚{$?Nc®29c'7bsJ\&$XUaJ|zI3ct3bn4#y#ꆯ6P|,Eh줭Pϟ@2ЍړõISODt4T@jVX~!Cʃ Dg`ớ7|lûw|"#]lRҭ^ Wo&3#Fһkb@rtS4K+µ:v] KPi)!N-}ö#zi05_|c*"[E$PRKq9 bb`xBZl4 IԭM'Q_jFF$+ >#_6Mϧq? |ɣe3p**tˊE,: uWB,i_"&WJ09.E !ۅ ;D3 vbkIKɶ,X&SD)_b͎7n\j7dT|7ATxBzlY9%=O yw:Qd {ᫀRnЁb=HB6ji2Z:[ڦ)1:__a>Uz2LhD2Cލx O#ѽjrV.I,Hl~T,\S2% +ݚ4JDe2@MVKQAtsnzOYYZێ Rv>,-Z< nf9bV3R#׆. qNvCp0m]3p[E~[)~ן= gEOXT'E 5;yorjFhx4UTqSaHזudCWByh{n?syL?ʧl6m#Abja9f#;d5J_?2>+щJKdvVp/a)qI4#{ uha eS9[.^˖hFE DlbV zG*6Vxslcs  nm4!Y0Bת{E\9 ?W7MU;SB? iH E *F)641 l˪8hgcGՙ̮m6-yr 4|ѹ3jB ysچoG 8O\bS־Uf`j ,4{s-|>G.U`2|dgWjH])@SڢR2blZa~?>t|e*e2.9]7l'AĜ3zddaǭԁ~`2US2z5ϯlT̾6נ5#Kz ܷ6],E9GB jXN%@Jcpi|ԴPVV iC sc=vEdl[DS -wh^W^bo|2?M"m9:`z+G9ukdWTΤעeue(؆5;R.ta2 [gZNT?Ux~nLoJ~s7rMip~NOg_9꽱W:GUsX`FW>"[Me) ,oAPAQz]MxIjAӰ\=tb~9+:ssJ%3e{b@G*/K ۚS=0ryak-аmN~H'qU|a\ giQ f$Ovi.~u-P_E *=O4{FPf ltPC׍#׏Y@%I`a1`Yl+2<#psM = xՕ r(F́Qw8Cw9ma1i.+8Bq4S;aԻ@*FG]RWƸ$Hm uSt(wudpKƀ9x%73Q`IO,\GBWiQ3\qzDbppѺ`pN}`V Z twixKWg.Q.nBvދ뒖?P :نz*^ xb5VrA LnjŹ LL9d *3^A 5O pXa~[(C5#Jc1#}/WBKr,*No&Iđ"úI7JX,O>?D/=q'@wCcSx+8R:/M|f?m+gOG8xXQtwv.fTcN;;qO6T[(u i3pTQjWKq6IۃQl.*],dpH#h|zW l[urm\ {2&5W~W\_ZߏLDs7;,} '-LNE>k.:جIo6n;sp|GɴK\Aqd(G@6iD=tlx1wfL>cXZ(s@˛fXsmC;Fz{lsK):#,xȬGˎğX](v k?H`D7_cLȒKjnvjHpU佢̩lg:Fŷ47(]<>BIfcdJ( |Ʀx6a$:Iavpɞ62G2=BGk4i4=̴ #dqSYi\oay J]I& qCօV/"4vj/K3V[XTt=Y+Eb#kY +ý qRC%(ڦQf !|HƍFdgJdͣS躘LJ]3Ĩ3ocf~Buɢo!н0&`2:{IEVh/bݠA|c!x]2&(< W%7DW‘;6R={gIcŵIo"k\_A^W@a{y؛J:|n:'\P 7;w=nc4鬺7~ ׳i$+'"_n\iw,9y?Юa=%GǘuF/u|C ( غEBy:G(anщE֋;:b yk$+06O;r-Oi6!3]zseFC(]HXǎ0 CF99jŝbw{Xշry\WqH rIHX4nD 8:z]aGXcE{߰cQqeU824r:}L7q?_wkKmB$䕝m~o×sUg%%cɫqˤ6X9,q*Y!QzCR F39!x7;7I`FI iO q371cZl 61'ArBǜy/(VXE[2Kǿ3lO2B xqL H ~3bSbcbɄp$!εuOBRoʤUh[bNy včst.߰R-˗r+S Wꄦi3*w y_R_[U?sTVQڋQy[M Tp5PbmpeRBP$*p*btrXlb0 ~qHX,0 h@T ٯED kܶ. $S'1 .6t-[<"CߊNi$/ S#^Z)&YpOH%[ί;2-t:(or d{ #?/IE@䱠a*];Gȶ%(ؗoKfA `!u^}sիš`k;8DvAދyQhJ_s#k"P\xYH;GADzK|Ǵ sS;S &:50 ť_f{lMs]xQzwζ"[rw9|ct2p ^owp|YUɭfcQ`nsS3 WRH%Lfځ?aCԠ\x% ﾓ$]#K|qI4@v:vQ䘯uP'kPި ;y%y_ғʾ&65*H4njoښnv2B3$BţzSU,/bc0gDgr6Of(ZkoGxX.Ck{PRd"$'.[ >\hT ]BsOm?#ٹxatNS qs*c(vIlPzy]u#r-:$c8Iwz\%k9'OmU<$Ёd ŷeh9軎1`hӈqJK/ Ā$ƾ5dqoWTc F:W!:@Kk䆱*Ɏ$->|\)u H/5| OYl2eX8Xa WdýU~׿vӑӈe_͚80M$UEo M -mM9@ɩaa3nWqaϐkM!`pj OH"~aSxz/KU֫Av=H@K%*b([>E3EI8̽?Fьã?Wy9#&,aZ> Qj/!?)E0=&uB-8E&T7G(Fv3L^1gCv].a->cdZ tMsZ;ߺ \ Y]} 6=-oʃim#arvD/Uޒ YzŰW!@\ܦ}yR,1r+ JxE|@ ~]-O5yGF!שL*|%[sט{[ԭyq}Ai`/-' d&8!qyh$K'AXl*}6?8\M bBO&""I$7<#{r^1sXN14wm rNoe SLjE!Gj2ѳ.Kr$ڭOr?{ 6PE*'޽|=U5M5Pq)C4`LRc=>ٞQꢬwՃX+y/IF8;qI^ۦd1mw&~"r;(⠤ X[a_վ$Of1^ȝe4 li(>+]]a3Cu:Kqa#P * 'WǟB9dQ<xmap 4ԙcZq2-bZulZhcHwkg[]/`8U8J谧K+{?Mh*Ȇu[βj 'W~|-F' &L?F|5ƌĊhGl-hQ@+R.? 2r2@~!c1,-8R_2=-* ļ.itaq"#r`;lwMyZ( &pkO٣Ƿb:ei&h֎R7 ?8fiF"V6 t|sKHDyQsPwmٝ42/=vQ7C]H)J=~ CD}9M̄<(2iКnCT'm8b< U|/g?ӭJk!KLXjФ9^pI=Dx?8u24Co/ULף^-@1{yel+Ei Λt$>#S'p+&UZn;0 !jBȃ~/V[#nF!f{t>%jO di79[p$bda$Gr O` IJn4^3;|w8;A xoHl{QY"J qa_ϫTQ>z,z_m@Vk~4Hl!ht-0Nqœ&ߤD٨a@ ,5b\؀A]Y5PX.n)4ȅa-'XwTQv^ZڙMe7F9.w^/ 7 C5t%ãcŏ!!b6kTT2yʄ3q룰[?9ӍH8ُD)Ʊ]nĹnɯl E*;FAF~vB{QwȕwaBJGW|&|RhɈA#+"׈>']vY KZ(!bHhB >N۹{ sEaGߊ[}-g}տMuH ~C߆hRW7t8xigG\8M(dL %zcL˄-ÉըevOaVM~[q,r'g= eBm23̏~_>r9EheV7窈sv;B9SUbqǡ;^Uy*f MBݴs(v(u eo7 T/Wre`nXvH BEFVy #츫[nk6Ż 5.`[E5R.Jq2" ˿[] ?n?pu@7.؞ϊ&W㷐jCb\ PK*0 8`H Jwhc0QNh5 Qhd" >c !Fw٧Uˋsŧ쪰I 4d~@Q7hD;xD^A!<;?X%N[2N^_Ɪ|9ĝ۬m%?;6hѳiloMϳ6Vb/\s|3cyn ]K y x UKNLnS$#it> #8+JE(v%h^1\jg ӜjkeVvߥЋI gT&ЂI9\2_Ο!؍) Z(D`I0dWlN[, #U[E Jp^,ovx(۱MrZ":i{~!hFt<E_&Mz$˭)*My?z\d<`%OpkM}u+M>Wd"--Ej, KMB'lkDKDԘ\kRl\oXݣ m,ģey9Щ/tHRf){\cI?Hs9{\zK~8Եuu`F^GgkRLI_=\V g)\? o 2Ѣ[2buNU.u%+Gt%Z.G7ߍRpBJR`oQ {>xMקޢs5YK=Zz=ga~ԑ%qƇ \nz8SmL2f.غsHNyW݁'o fY> *t¨*&*#:OU oIѿۅ!A!B$yKF_D1=雗 hMSѬC;"Ԧ6G(gW6W-Kxj\D֏|.ܷk'AS\>_odn"TaVd$^ܫFRIj\ێn٭b%/񌈠Z`W pWL=] N5vK_ft~cHҔǰsda͉QcU:+d;Z7PFMdI@znz5kqڍMӄ-窼f$&jUq]! a͍& RvA$hItc|Rzg !1'oRDQ̬uAYeW!(ND3n}qXf7|u,~?PEm{ =;_v\HQ7^J LZDpug؎glTa3`%Pl[ h]nTV2?RIsMz>4&kn+%C4wFca9Ctu&*Ѓ!/o(kHHX `uTѱ 8[ lyV _ok ѽ480{6>a;2' PMB63YMaY \91uSЃ:qt+޺l}%r{Ц񍡰'ؔsHbj)gL 7|Vs$Q#^yY<OT{r@YR-AX% Ig#mĥX6톗gc J #OgQхDXKcc:`+c 9* gfD{/W{4Vb x8(N\, Z;pt\BJ@ ץR:05u^8"@<_AFWl!$" Uptb>zS2Vͷq{W JG^aa4 a_־B߮M~ E҉Yŵd 61V~jh/H!޳SP]6@WS(Y9=NYܱ(sQ}?f=tN1}:ї1&k`9 e r3Յ_ $'r9Rܻ2,Od.9cHgr`c"C2WN=T3a<xeR; \SqQV) Anr#7W`ˣ 1LfC_PU!ۗDܓƋ߻,3M[q61s8aټG-n(B@J0.xc[4QF[u>mjWfJ4;r/:2]H$cc߯~4CҡTSb==)hl:/ 5T#194b nfD]qWyi: ' i r*2nWYkPkyIa/'S CP8jǁ*-ʛ<1|þG&Sm Lc>*X{ŮB9ݐU[=s3`Z,XdV~8pmKSQ6oOAYE{on'6<) qy=籕IV%?.!Ak(i agɀyJUCɨ9%-uZ,mڦlCCơӢ.sY7{ eu)ױ._`s,*D:yB2+C*C#6mJt'].[Cu:%&q!S9iiF,jp~rDR&ei_LGEGRPet_suOye-Z.Ԣvd|+l W5_L3bz}1֐՞c~ߛ.wXmXGr(x}FJзϟPY+63th8<!z jGlYt"]m i^i]0+M:O!@omBA`kNDJ=20n PHXYְ%J~h/ tE[!0oF8{`2=c>ObyB'暽ҍmS ꖒ!ì5EvX$R]HG((Wu\3_ tNI"JS۰U'ߎfg-VIF .tdXc6Ő &Rb5HV3 w~J^ؚhzhf B@a'hT1R"vxJu'@2RvYenC`~ i9 -x{柝 Jp_u~vL[YLY#Y4hc X٬>HD-WstNvd~kerOY-2 {ٺ r'xtq2lT|oAϯ5( r177^*ƙh7Rz%w:><<%NJ#]"pnU(>hAM>]P1݆B0W)L\ON[q.!YDwIe ]?e.c=l1xzkÀyf8'=z+AZRS24G-}G\6$xad_NP!%J< nnEu\?n'=6tFsK#F m@Zy"ie,3`4Ӥ Nox5/w4mG=:4}'W?UL6 gWa÷bx[="bf[? UА3˜OS0 }@jf,xDGT* 2vF1ФCcV)ȅ&;{^UD<,&5_\d]yz!g> nE/RXu1cՇe~AjQn0Eˎ]IϩZNeEJn˕,A<P$=mK𮐴җ_?Ch,xwĜz Lw C{h4J|Ya%9/8`wA:̣LU/lr&)\5]h0!Q*aq(9D+=wkF(8X_̍A~Z=?sY*:`IڝܑkNUI@  @*t E: #g~R1Ml( OEE_fīOg"&ѼO)MDdY=`D5,@ppU8QP@=Y%guGyđ>vMpFB=l~y0N٫B{FzvR{8 2$V6#f2<̎~^װPhҰaWy+=qF5:/,)㚧2wl.J#XLމC;wC߉`Wl,W%2)@~ h }nZDrdWT (dyƺ: veoŌ'-=K+>R  <\f9 +~;N}s xl!΅s"m.EQ@sjAV_!V!YN5"kB7(7얢Rp!F s+i4&U\3IBAam tCVV?k+ԣG*)BTQ:0\`9h6SL]iHDr?ߧkE6PGY ˅.4Z]⅚h5~XϧAz t(ܭ<2/ߥ @3Kު7>^Z G gןA/ q5j83xV" lSɽA5vCOWￒK}(p';Bx Tӕg3 _WpK!=hF^ւʭ+b2^B߫TA܃6JW~* ;m*3]<2$j$zpġax}J#`wVoNO ؕ)O,ORj::U'19D/`@mD9%i͒- 69Dt=p=VQf{g\`>Ѽ뤇rbf[FIWxs㏨oh*!1C6Tv Nx2koe Hd6'sD"J`7|h7~ͳ4Xꊚ4_g7_ ,0+q&I T-usR'^=~kWS_&lhIz,tGN1%2A9-cp؛"_%yÄVT";ϕt6ڕypъy)S F|gQjR?)HaZIx-/pyFiD'_]kSv$ m+] UЉ2#mi5NgMЂ0BC4жhL[1+X| 6V7 mpG }H̐a&P_;C26J?\N$*NDHUHy3~q~4*s;yHLǛؾ4N%U^AxbeMm/m6P<, s|ڼSZ1z^n`cǍDe)҇^3Jpqwc&$SNBDO~HrjnGeOo0i9OYrCb:qWk oۡY V ၻUM&лHK[SlfJum W=z=Lv)0n6`v0UNìAk:)\Cȿ"gG1qOu{֮At>J7@n`Hs$j?2$9!⭰yK{Kkn F%FЌv OE29#<=%LBjpPAV;t9RWݝis;hu}jhcpCb1叔XB}v::ĥU0;)!B-Ra YܿGObYRq"f7HWq)_lzK[>֜zR؄sXBVHFĮ)0Huߖo%<lj l +~ȓ9~:pZ==:d@&}6QU.Z# fٌ6A>%A)C e`߷a.t`羟 ǭS~vā9z\œ0hP2Tyq3$:qTDYF+J|CkT'c*~WW2\&#-v}A"'wmD*[2gg-YAxqFuHOSFXJnx}3CtZm|H!oܨ^q*ɬö6fM1pJY挆dui^3j :yJ$2R>> 5,'23z b;{kdMQQ/0= )ʩ gp}&Lܯ&[U9$y2!,~Ԙ7*󲡪5@L$u&zVSF;f?ӁD~٨.!"Gnta2%:uXJd ז:$ P>@e h1xVSMhH }CH ԕ例ְ*+-!GW43I F˟G+52uE}&Mn^z>юP/x\QSTm۽Z="@5tD\`GYCXQJ=c.pAzˬ( R6ƌz ~g5.`'%+VŒWROA)!,-ݲW~o38x.dZRyuF{]Qs-T~0p$ z3d1W j0>(j ˲EǢSn Rs8 .BlD'ZD#g0B X }3%k/Cpm=g?ŅW'mdQ$.Rj f$:KRrUym= fLğ+@m S!sFQ{mQge!XfZdSGJ џc8@0@j#"!eK"HIuH3ž 5lHd $kpߺvH֎p@JЕ,L?Oh{H0,MD!¨p56ޟUt7;C T$+3x-VHX1!Wk jƫ蘢`7-ZN.V뱱gW(Cy#9,{e|f64|IgQNt|Ĥt%"curmX5:`i(gLXw9z>n-}`TؠdD3;bIr*CJǁޱ %$ؑggX!+n(j @ hθ~\vf"|5o]+._D@祎WI*`@jn+a>M@_Jb8kKtmA%`F^_GbJ:#ɽiWxQ~>wy֋>"CX9$w0Y7Ҏm-4 : ȁ@o0蹠*Z%H0< ìN k0,hqܗ ˡƍ) y%FQ}P{~bWZ^F8Co|$n|GZM(*3^RI{'ѻ8y 1۸; \fGiƶ-ijm 8v[y8۸ːoF{. 5tŎ3-j~FQ̥Q-G<AmN;3;`YR$q[oJnc D (<kԛer7l~λݝOЗxg\6?gy$^x{@(M#)P4 $=xkK.=I-0;̂‘<PMpiTj! /fY&a0OYY8tT6z~O]SXlYf tY}+Myx_ .\M_:ݧf ;sʳLi`=I|F.G>s;2Cmʛi'rqa!աvR\jSedo&9gCJR W=E'_: @1ujЗ1rt2 C4"T.~;DK80tEFެUY^pԬRnMuIW kj.v%˂8T#땲)m1,%zPԔO12'mP:Z+VJHr5\1MTYs5n Ò Y*tgJ^2"d?*o{ún͐W>W@NW]&-=أcwz[x_!Vb; bt`kr;h}Uޞ?R&E Ph\ 炔3wh=0$: fN{gGdM+$q]f~PO|4!F8kV!G1 Bڙӓ[r~33VYL82c".j&0;#9B`VblEdvQw!p(WvK{#q ]`XN_6faS;?4?)R_!/ ,Peb ӸژAz {|M75]NV.+V ؄9c2Lg,_۔:RBC~vJ|^I_NÕOCU>lc)e+]oٷF0V %tAHE?= Z(HG?iĂ{T(Iקz0T%_c۳owhqϜ3o.oJx,] K G..% *8}&cq.w4RVu>|Yqyݚd c^R],4YknVcҿkZ?B9qE=Yz l.şxS|Lc8[`O^2p"K:ӯ ;W)-Ņ841x*nkSr)Hb+S5'+&Q?{2+\UH ,㮴CClFvN}~UZ4j#l{9+tka-!_/ܳA;=3#^\T=c(: >WUC$1y.Q4) ^5pkJxf~opm5۩'A(#2 ?|7KF$FM[Xp 50/37@:,r/8B*͔84D},AA$ M7f-XZ70xEݘO|o]Ŗhe+ISd>"xV(2*qb,ݏoϱ`{3*9}g}%"]Nd jtZ3;O&0i#jA.E @!Vr@5F4Rt}0x75P9jE%a Yu5o,UK3pUK鞃k P`*\8cR-ejp%ˮ XC:U)U82:m]6$:  *88/Y Ż!cM׻aoOwX$"c'16X^0i5'Y:)~JH'ոneH(M}b.XNi(-kFhkfb{}Tے. l6V_1Ș}M[ll.M\  L.>a"l5XPb-h'\p/˨"JÇ@6O5pܣ[k-= ׍Dku KP5n,dn{X"WpٲJ ;'0\l9N !PVߒIJ7_(qX̸Q!7Kn "πwCI}?ķ݅Z*%SЍG 3nW q@~~q,y!M(yOD}h/CN5\EƯ}I47 E=TPR^?9fTVVXX|fn}@Kʯ< Ϙ~ޑ;t<ۇ9S M"v*aI͗I!\[ ݹ M @f~^sӥ.R*CvݚO8M%p@gz@<(FLJ*RV0m׌,UeX:L`"2ҿK;lqWI؋''iԗ&Xӗ]3Yq!Mš*$^td_h9Ӌ{OL|!^v>P8aFCɤB][%!gFF?ž_xHJW!'xap|akz7OB[@~A`Qun!1I"2gstKF4$j#u9rF/1x.Ͷ!&'8OMU|u(8vZ#ӷMÂОGoz{Qdav;τhy Dub@ aNB0'&ZGf48h'? 8j^@\ӏ姃f^WgVIez=4F ^Ϗd?΢^\'Ev#"=,J0D֪ nVg1/MdSƧٖN5%U<uQ}#4"H> mo|ZCE!fTCRz2>ҳ@ˮQRJ6: KP DZ=Z6zvM3:a✉GqgSVz4eB’mn>FLt#7eGW EuP4qOɬgf)ݸTDl CP>k&\sK44 2?΃qٞ&AmƾnZw[~jF!2ܣ=NrVң2J?i_ .F~%8y6/5) :!JnN7/=d4sFH%_0g_ +d)[9HBGΜl|y'ӏcv:2'/6گ˫z8B|$5WbB&Œ5|}(r.7"FaeĆPǖ?4-Id6}W]e8ב W6a2_Qt]K`7e^wjc4yvK:sCQG!Pڵqyꔵld!<"? YtcU3e3BqiȣH\N!fo0ZdtL.~:bl~پػtm֐ﾯ˜c:_ϓƶV^ЃM"B)4 :XIuqGv!ܸ0*Zs*_w29_U\̺"= ީ_pFXDT&`wh>kcҦ,. 1ʂ{uXDSWztʷs$kmGk[*V9oT׈ l膆cјvCX_@ HM 6tO^"CN%Ɏ/Kc߶l- ϝ;H=<ȷ:\?u D c3-#{S5+~}BUQk ` ?EXEv{8Nd97>PNK aTD+ 7qND̓ fEoCM#~j:\(@Y4WvTL O@Ai.}Ɉ֟ ;:vr,-ˊO]̦e9p>oթv}?C䊨uY l="7hRGwƟr~1{U/18kGImlns\MM 75B2/sF ~=ypt؜BXK^bU?P|8?yi;" z67QMt6w1@ e$14W|x~ZK;S79̙۩tEGc2pKTdn^ip xh7۸qx <212E,ʩj+l]먓t,g)M@Jx+o]/mGYMv<?qJ6c^feh*v!Q>*A.֙G7 {*-j1i43 naDpټb[Z^;KW6^g9*XX @WS!.,E@ryMarm9B5~Ut0jo:GKz$d% _@r?U'U<̾p1̩r)kOj4=TCr/="C8ɤ=A/TH>-c69Mӄڕy4{36̣tK biRTM3ϓWc\d ]+[&NM36+u c,s6?]iI,2Y%H-Oa`"fP P#:8鏇h}*pҖQ7 qU..j؛yt*G]Y=kpBB۴"WnR0sJϼWacGhכl^fҼX TL(ï *E(6hJ[(5Zjѣ` S}" ~9_~s׫R+ w dO˄F(ݏyuD(h uod /L+F5zNiM]JTǤ"' O}n+@ l ^=4]MK}H{YsM,>9o![6{||odZ##ZYsDž2SU4Lo`:+ٚzHߜ.L{J֢^ "0CIJ!u L\.KEAVT,3?N9.I B ' C~8EKg7nh2qഘ'#ǧ@5f$Sykb*RU2w-)*)᷹~SZ\򰷚.@^MB7|NwT3$҆'#طU~IL0`7C.[=yUl{qW.[T*Zå`L ojY"~H9'~d&Ӄ1ػCa~}:G ͒ 'E" -A*+j"V:4fraej]qk[+7aL.!Jj E) 5V7㳹s]lJoD3^}ڗ3\G?k\]\@Yة}hAn'(jsoY59*ߺ? }r')xhVS# ynoNdՑ7}}H*zT`_޼pY'JG1,BetSDSZ UxPvʇ:|UZkNX6PΔ+`{ *Z4AZ$D$iB8/Ft=ۀvnc8R9?pg6%*=圠D:bqWTP8VKP `JΈvvT%dA)W7k3v%5,H̯?' [PUQw7{2ty?ș'yIM%O17QLԬ= 9cC&#].-+Q!i-m=,3DG\ߞ`z sq"MXFxGïUQ<, jJhM4}|CAk /]hN:i{CC$=gHEhcvF8Nagt)l'#C`-"ɟ;"|5Y\P4~dGkw̜'"vyd'`2V>Ve\9;7CIJn/r|C1[bK=Uu!v~V=KJHl6x!&*p?jckf"֩*,6j_U㫡"mUR:AsyGkM` et[*b?`:(J8Sʨ(+2r[GhB,($^&}+CGl"QӔM>E<n€Qjby/nUz#psxLTbSYvb7=ILc+8_%3v$欢<Y?+U1=~LLovc Ӟ?2 OAEJx+e+G+[~Z|HOLܨZWU>K"&A(%$ WwިƓ>ج< $P:"Hz9C@,PJ ~=tVuexwDe(ZQo "XQ!alip/2d0ݪ5Q,2] ך =w偉j'IbݱF<?&G,MHS5IcwtvIj8kT+./@LRbdfczhGo{#J{=|c}˛'CMu'S+ͫɃiy$+- ".L]E!SB jYL@R>ԍ,g2" ԥpºncWx,V#p)͔FmO;41'4C@I!@6=}Xo#* ʕ YquoIT#=LKR"Jv&9^gE}Y+SqVc2'!?NDZo5b=sp6Bw6\b [ vV"R|;8: /t$OnO\G[1S֝;YEA^`mG 73jŎD뎽鹷B46Op.xpSyyt4]DFל7~x]"љ_mUL\p*w9SEfZ" ?OW`7o-s0e= M4c|\M'7,y.&j[ƏHɀ8xd x@_2lH`Zj០aM3[40F$6Gu2sz;:I8V?!@/,t[ ި5P`9 O[̕L|ǙXcWmhQ-Y#KCp+NvsJHvb4pGXC%N5"2muU\'WM=Hݤ!b|p[QTWĦs.K/Wl Z6 BGn]U%4r iA_@xb2In ܭraöFqƩ+1E: p(ȝ\ Oz#?V4?leQ!(א\5}rҿ;ƻ)Dv5,UcΓʹB]q8Gz̃Y\$xSGh:/4^ߤC[''yIN)Ν^r;K.~DQ!7{^]Z8r b-6)iaKokHx4XtBWI§n{>WЄ jyl/̈́.L"TaV aP dDn/N ̇w`eRLMIbÅ^)7jKxE zc;6Q~nQ*P$3C8~n2+ffxp{UK& ς9~T6wp! KW|n2{Is0q^ #gOǾ%񩻋$a^xe[6Z~'~b=%^'iS$_$wlW Bcq0c\PR-kP[ˌx٫ "idCV<r"agV-*\M}`Z!p88%8)17O`ÁUݍj@9i1UnږCLQ4GnŤMgG:[y?g/*tcC@/EJ"(KQ*7K`_HCjV@NkuSoU{i)]_aL,u6v[=kJ~*g9  8I 09OJ!d6W60Rb~X}]FThЅ2πpEbB|¶.O}h,${A" RN XT.E 4EZ\=jHQfFKM3<㩎0FpYM$D44UQVȥ֝a'D;G/l$6]sš5 2qC#~Q&$ģS>;2(~hx@bLTpHR+ϒC+>ćGdm +p *Kr}>5?a947#%XfE|+셈2F? K& &8A(͎^-mY{($wfAI{0[D$G$;ZdoOS ;QCDLSM$ ln6WozZ DMySez3"6Ll{/̊9fR(ƅHb笚 ;Јg,sv5$jR*nQtGouDޗK\;6r ׎ B?_Jo14ӶKcFMvnKS2IVdE,Khv ,ہZ%!wJ26E?/iӘKعc-7j]F'l3]wZ'&)vF7㣮zsWWeAVB_e!W1%\k Q\ǐX_dDMX=^pfEi'[YZY4-E;d <$c9QA)m;e@$WrMCk2ov29tJ-+B)Mf֫V"2Z_@\`'4WUbGE[7_ -L>,YxXlIY>oƈks$ŒGcsubNޅ](q g=TB-vC {,'Q ..+movcЬIɾl>&"˘Z 8|MCZt%B/-NczPL #`15!{r)Bh?IOsN JTIOXId"9^c`ReRϽb+Ef9-;JJEL9D@Ĵ}=SiD%_#J4h*i | $ȵjמUƛZ'_,ߏ7a\a=VkﻇF=I@^}h~;멗બ&}VJ77?xŖ'ʝVڪ_4f@8%:r`56Çd*ylJqޘ3*XI,nyv4t/(HglGy`칫 }v5O7G}f7~|:x;7ES[Sݐ 9u_3 Zo0Pi8MՑdӗ'IzuK|3K ."k*<v2f.n+SGufuz`&kh9tnDF|9S.u >}(ZmVh3%pj`Wr)ԮL1N*j_5S&]^$>WOS s$v\ƛPISgm&4GCB{&PáAzs&*\b6>nͱLkM=gz~a(@2ݝαRbdrel@S[mgޒ/Hs!n'5tYeH揚Dy9)X1SDki| 9+v}j!@e7B X)zsejaBǥ"2֏>|\>tvpw`y"boe0,IOWFui΍|L:Ţ\O4&X oDqCY? =1p!bH{Qcw$bЪen|W ̾%qjx[//Td1.T(Z1jͶC3#ikE N-'Q6T4pvRA~C.WfwOQNgz*ZSX(PqH~0ӓy&7t _+[:Lb@ٻ(.w<\cRdJָKrpy>Y[fata-fݡ,*}< 0Eק_-QGL*i봷A6hAUdL l eO.ߤD*}$m |aceD}a:;|UAG Y^IDM7v{VUݮ͉9ts`a*2 U =L)AC %ѨdHMiGRZC[}>û˳rog#UaIGfjys&+`}cl+]"Wet\u׀RYg6iWS{ͅ1Y ~ 3Tv @#NЉgĬ,F]@T:ʥY]ٗ;*C5(sIg=ߪQFl(kLVFiz7Gg=cυB3& W! CDnFS4'>%,cO&Oނ|52. UH {ז?Y"$YQD.$ ɡ@c5^{Fr;ۥ?dX?h|9ڏMպEaW᭘LL0eu(y9Fmtŷy㫼 S-&O:%Hz\8v~{r]tAaOzUbeͼz(YV@vg% :Hw"ꮬ*DH 08ntkw\*J )Ns#eЇ{zp0kpd 7Mtz fdjp,ضɉ},)fT7H D&pJ:}(nκ6V ct-r!/9`lWKgu9BBE.=zl~J Ec(5,i%z}AV1}b쮹[Vvarep})7Axv`Bv&] R]~,$-7H!(]w?YS混$[ǐKw̝XV^+4BÂʒh/iXQ@QZXMm$x,X1#t͙Phj/P aT8p.YC!DʑtQ2YG#'$s7y8k7y]iD`]1\N?VJֶdE5)5'*7rzx|(bEg(==~7KO kz-DjW! 5@[2z$ {>mwAtHtg*[$JZД]1UQ)Dـ7ViŸ6J׈||QXŝଇG_S=!+5uf]d|oWi_!3Tf8 <9\1,kƁ [e¾jo dIU vRW29J8#SQ~}*SpńwQNp9A譢aMP^xH1| ܩ pDk\ڕِ.SSQɫ;`e߽۰2!ηuRŷ,]dǕjpOSQ %CM8y$MUy?,5v윤da%%AٱXeD 6;B"c]Ż;!TmKО#lT MR[U}Nmsh&R#ZyfU0xagqrELt( eb䣶:H{,]܏ףN*|d~{Nso8ճS @Mr۽\v~ j/\H{[GoF*!A3*xUAoݘVլRkA'>GYXFjbOvPI[}(qqBtJnCE?@pO>7&"P; ,bMƒ8|&7D` _ּ&Zw-SKsSu%vyt??,pvXi~m_Х UW? ̂+0_(U˂}řSy.= dt.ꂡ˲_=(a,S 5A&- OpD:Q, [$\ 2 X7a %p,O%3F PKbQ {7۳ .`2x)"4Nϼ-t (c9CTo¶=g8s };,f&Nr~\&HN"7 蕌IDxy~?|/S*?Hg0C-g(0xX34n\Y` ,a/ꋔGW}Iyuv44T(x]r0`X>sCV[~G aq* o4|NC0ĊceWc+řM#* :fFj%,pGaǧF_O~<[&_O{ioM A4uBq2Hݰ`VRyH9*64R^{S*Zi=kۀw"uRuX7 ,tBQfYW;xIlUN]>)YYe+e(8-r!YgZc *97 4%-@ӲxieW007PU7?D@E?=)W e,Xkȴ wFvi01|aX"0?H2CId~x@rS-uvVtJُj>dީ?O0E6 Id rRCHk\2glpEJ = 0]Ef˾@_W]BE;)I놧TMu[5.r7jEi;"iC&[m`WߏZ}xhʽɷ[ֳu E=Wˇ@3c"t(+O.|Sd6Ì a0ˏΉ"cJWm|w'^|Η.%u<}|YG܎[д,V @dçƍ eIséIOԪ\`q^*Ǿoͣ]"{W'ړE~c;t,\Kk<W!Go`HʛvdO$եjntCƓ03KB'Gt(phΝ{(F.iG4۞ۦLN:1oo+O1(7/BF GI8ζvWP.cあuL>9UR(L)s_A$/O-&2E1[U1qu#Kء&%#e?1<P 'jabn`O=%Ͳ$r ٞFRoG8BląKMǸ&yAhk,^uqR.tel7H3^5;;"B2A& rC1/LTs=Đ486cIU\Rb7`?2JV*@L)]m1s{sa4e{0#A?x,)JJ٬0 z{"ag`-#^N+H?>˘&ۭ̪ ZX4 nCVEUipf1W!E<8#t۾L!*|f? pƾ?cK:ZŒ~r< VV4'Y&ƕ7ulV?\9kh3%pAZ)e/{iᛊl?YZyf}3`f8歷LwEf/︌uXanJIdtCzt}z% |κ,^6 }M:2uj'BUOQ"*3MU5N6B(a7) S]|:mm ȏ)Mus hr k'j%&bB7\o?;}@_(z۵^iRG X,,E3=Z%U3Sg kBY*/9H%OB(73\s:_)R@+e|g /yR=ŝEcE<(G#v"! ~\L\UqP7%ẕCΣrX.U+L]t L YZ