python3-apparmor-3.0.4-150400.5.9.1<>,8dckp9|N/AJV((Oى]In4C@@Ůҹԕݘ.Հ{ϓLTެ],WfBV7^%wuٓ&esigC(QjH~Pr z!صT Ph$~*-A"#ӗAfLr)U)ŕ̕0 :[Nػ e\ss%%箽Ze/P$8>>@?0d & S= SpUU U HU U 1U UUU.TU ,"[("8"~9$~:-~FXGpUHUIUXpYx\U]U^ bcOdefluUvD wUx0UyȄSz,Cpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.dckmourvedre ixSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxppc64le/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d` d` d` d` d` d` b`%d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d` b`%d` d` d` d` d` d` d` d` d` d` d` d` d` d` b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d`d` d` d` d` d` d@d`b`%d` d` d` 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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(ppc-64)@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffmourvedre 1694065515  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-powerpc64le-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=50625c72d320638fb2d1772ceab91344e8ed3343, stripped  !"#$%&'()*+,-./0123456789:;<=>?@APQRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRR R R RR RRRRRBwȅæ=\utf-8495a4cd3bacfe106e6641ee1667011f4e5db813e71232801d6873b4c09fea3c7? 7zXZ !t/ ܾ]"k%a D岻N91nHGˍCtb_8,/>kxɠߤvՏ]oU:Kd%kֶߞ8xQO#fHn*ONG7PбeuyMRw*ͦvdY=<572Vz7[NMd=I% *‚Q<-YQ2 Tq逮y)ӕӁ`I7j _XܝnSĮtѡ6y}4Tk;v"~1[[c~>H+]wGA7(T>>P׍J MK&XY'eCt8fڃ S,کSaY;o׸TjaӚ ڒs V!TXr-!ueŒ덓'{{FR}_WN.N-3Ң͕=EAH\ XǿAkz|H|gSm+9+W McB%s!Iq`[ꎨe@ ܲd܋Lƪ(m\RV<镎 "N$.mk(2϶(Y.,#@ow/Dm<aC:#}p&]o7=D)e7QLr7&cVޫM!7YRS]+J z%Db6p @TW5:ܥ%>I.Ω wVd/rGX9~{]iLJkW)Q;M^ĘĦXvhOp1 3,=']I:71'?_y]XVgmo cU5sQd"fԣ 'aI[aN.֭6&J绲vzn\CFx%.'"&@M4WT3?I܈ĕ#32YcꞘSKeEx̶bs8t/T[|W.Rnԗڀx (abu|ZA_,|d0Cc՘p#SI| ]a&xh;z1P-]8GWfW֌}mN)kȷt?;uXŏĈphD N4-Zr{{Q@`=15On;pU,VU Meui$Sp+˙ X"W:|XFYD`P 5?,>uJƕA"ako$?)YV:,L֨s I8'v/[yMv )A?K=S]KB]ݦ{Gctz}[6.w6-c`yk+ _EAhMB7O0a@i{S4{hغn)Bla7-R0 Yò<.jݰfZGF[;ފ1^@ hS@'5|,^#uq#_@6* DӦP"M] F1ɜkKiJK?Ս)ɏΊC E٢s27{QcR%QD^?]&W^mv:zITs8(FUɵ-5h7nV{PĦ&5$@NbM%6̋^51g3S)ꄽrb"(wRUǎTtP@gEw=4v,E<4 ,g_-J.qNk Fiyxne;/r֨@ԚgBBoYn8;rRxk`CaHHI|ة,X ۣ#Kw^ Bo^ė/ڑdAO]&{{: 4bzuagAd?# \w!> T?V'~o9R6ob :.OZ扖if89]AN| 3=DF'oДTzV~pa$W9@>F%6zIβ`es 'hOqZA #qޢX^sy//ŔbSiQdNģC )9J]uh0 z^THصv߲6W,uVddJP9A~au;.+ JV 5C$@7߀1%>dn韨Sḧ́8aC[2{E+:5e4gf-4y3]y#i# z"ZYQ(e2g[E3g'\O9G5 O_&=ݻ鄨@bqt6 އvK@^]NO=5zT2y~UGTmn ӯ 7L)^#|5ţ 3SCTYTJ 8Gq&Ȉgfe}bPe-YonDrU* S.⑔9@4 һ\x+ׁNMS<ϫ4бUVhy|ZqfY&R+`oe֦%tu6NO,Kp>\AݸVT[*qtTksS/>ȉVuK{s!YJ!Wz*iX7eal97԰ +&HOp`'A(+C?Njd RmL6jF}d~|v|cܢ) -)> y\H]CT ߆|6!XjezeV4" ϠQQ <ב/:jd˕'v'$\9f=E`*ϑ1*ܗ J@:_BgcHDMt툗aD*>2jOA9qdX_eOy/ xy] g;Lѻ"#OŬBP>;Z*H7J k0?eBhDCY7/! )؈!9&jXN^z[SVxӖ1< 6jJN6ǝ{j9kAyH-4C8 ոT X C īG)3"?|Zkځ6@KXjZOS&=ј*=70I}k]Bmtl|* L94bZ[hu$ `T^._67HcZ|$E9c^ʔY`}4$NPkHdlcz{6>Al̫#WN< ;?Y 0e68yp/A{0D]chnN~23e=X떬:*GܵLq{FaflrSnT2h'mkGGs|M#M4Ǎ倚虊3X)/8g޸_zyJVNY0zainaFx-YL`Odsxnޅ߮5_ vʔm%ӫ5.A<4.E}mcnwnfbrdb5en2g-Ld}8W bZY(vqOk" E5pa-iN .*eln2WRoB!CU3r(Dm GeTRp(eM{@ sKYbWOu}ëY.D"՝|C{ !KœxL#ƽ 'Xd8_e%cWd:$W/L<# N`cY!/Ŷ}7&&PXm|OkȨJXB>*vY}.)-Sk.{/;:' gG]b8<7Aj6\2*Ϫ:~%pwdC|YR&`ݔwbW!6ٰiyaXN(xfZ-3~wοA\fn*~v]2I{3['/znг0VVYS@2:S)W`nYF eU1Tl,7L㍧%a^݄}+.&^=ʵ;U FGEpDO{k#;'6;$p ~&vwfpH3etbPp齮vˑ/XFHư'3pH.pTGu]ziElz73"Qh6!\LLBrliǠLTsᬨ]6o܈btP(a:u᷷ܤi m/^@FSОtl'aXܟucJu!uhlgfo \e;YSt?{+0DڨDo딆K5haN:;BJnZ=EOD )N  >q:)5o:V/~8F85Y2c܌n˯GZjcE9OJQxS6TGkSZ5 ƵL~x~ќz=% J#N}+NcfmU)՞O#t1kEvT>y!VA?['m /$ؙf캨C3Zџ8 #%FS]z lIIIb~T)rYZCx(7DE]əfJSo0$aۚ}_|tF;?$C`5=H%idRlS))u-/HT^K59ى cnfӗdl[JB^%ꝼj,ms-24oГt7uu.kk}Yj;m4DHϳ0ɤ 'Ne@"SV&WT 7V\`0IRN?kʗGNFoXDϰxjO|^ZT"W},16\N$7>  c$ 3+D|Y9tK%ةF,RU$rw.Xs/Ay$&mVA$1Qi'Fx3NxD /s˄KzxKS\!MȀWoџEVgԬefMy$?x9wWo:E^"u d2*_Ҕ> tHx( Ǜs&=GzLv?bY MX6Q~%q=2:v7Hﷅ,cG(Q]<fL7x;w]<8Y~0@q~\YշirCz oJ= W0ɹ]=dUk YXcje{}Bs17/FS\Ըv%?c;5_dT҆jQ~8֝ yC8;>!TH-8!+_=%iB}5 >&+-?l^L{ vÒ5wZT}fW渧: 3̷l㩹A#1֙O*tY@Pe0tgv4ּ%Q։u|SY-3S'svw~tJ~[VSHKBޚqTh3Xge93 *Rt?j?ƕ&>ͅ-OG0odzyÁ#Gs|"ӌal<:)?vwެJdwնE̍>ubU/*О1C _.mXyAvʸlŏ~WK($vkސLkG8(r\du> s^"ZݩxB6Y*iE^Pd]vSqm%\.ɮ8^ V'xO`unk qk4ScSu=8ҸB|nB K{ݱgi5m%tD^Dl)v 0IhL\-C9H:- yvS[7h~o}q^+ƃUׅ*GR 5pP{G/V'u[  2e3~բ< 'I_YKdh3UkToA+]:s*PFSKȟdB}~< {xhj]f_NWpɅdwİaSVЮxV]8%ƶT1~XC+_bcAUU#:DZ { me I\Y+@Vg[? w*=Lߘh0 & =Z4l4K'h|/oZuMi6V*YLX3b^3'mBik,.ʟ[#+N J`='P6a?g,ild={g;:Xǯ|櫑׋˝(%`H[7O{+2st?o0kbMIm*DΏRf cņuJD m7.| MJ#SYBߟnQU)ݙ)'W'8eU ~ǁ6+%p g[gamlrv%-ZYt%w3Pk}ΎAΣO(>,cD3RW PԟqmҾՆ߉&b\q~ izkku-0N/VPͮUvE? ]qqb=>d#!C{s!s/|T,&MsgnPɬEli'V^B`^gkFrFQV̚l[SAVqp/&o$IAfc\'u=v[c;Fc_Q-?zY 29W8Z%#%a5734džzkX2t;&2m3䓓+K~u5 E^<&,7zdlͫ4p0 Jc.3 JxHGrTn}pv/x\7Ző7S2ҿziL݇GGQC2uo{P)ͿRB+U;Ln% U+yMlQ>+*| Ƚ,,y5֪ƅɖhmr,φBɇbD_.PS?v8Z<9#8j|=* ˧7d%kj}t|!0 pԆ|h԰=/9#yȑ~ą nTу/܄[ ?bTí^dB/3lMQьU@>16k}3~O2.uYCH s ͌+VbFNUAL ̎ު.e-/(vl}c7y}%plUpإV3RmF1t759aUEm(B8"Ikٞxe5Pp2 _޹[.״Q N}hydUzy\eFs>NXteйW>O8 x#e*H(e`FO kAn-="aJa_RVQH1$Op-7IxV,|R "w&BaUYu $*a ekԟn^~՗zYA 'nb2VYaBuj)Mvt8U+^* =@s5 F׀Z󻍾SDkx*!I$9nJa>HAlIT&/Zp9X kjpaq=sd+j k;1܄|S oF]ԯͅԹ@esLMZ$A-E?f_>pۇXwf)n^,D@R* p~ZDY'A>\*{ EV,8D||onPؔ1W?T.cvcb('aQ‘ i8xzGk %%)wcrB,ބmxbٝ;5s# aeVHiᘯ>*z0S%4HE*M8˭ ϼCHr@JZ(AԭdH|'?ou'2hZ!G, '8W_p-3ěZDxkr[L y&,qx5}+Dy%)pw*P.ޔ]DjIQi֗lL II}gN،vR]LpR3P=ژ w歨@P)]YˠFSYgE]v% hW ÑKoqVN7z /9EebgR7&vх86]Qd*D0KT(*)I!="D:i7􎈽L=TE:31%~OزamEDe 18'4I2Ja)z)--f_3i,ۣ:k)P ٕ2,jD'z=e45 ַڛ>p«]Km<žK= 7Ո&E rIH q"vPCOdfvYݘڻ_}5M2dRfD蘔@6: |ʆٌvй8~Pqug_jn-`lg#_ FiBܺEQȒ糄K-ڽnfnA]%&! ߞuqM\?eYܦ&nG8I3E:F6ni`wGPsf 0IM9V=*b oL\ehe㇋],ɻ-nW.j1P7I-qCsd*e_5s2r]`@/(-J0Y]+CJHۃ" B۔:m#wfYqʷ3 %e#4"/LS(șՃZ* =c~"s7yl&"O:K9,]=!ݶ^aCq 5xZ`:@P+{H<ˌ^b;S|%CQa⪭́R 2!V8}[:&s ש.*}lݝ\& .xQ[bĤ-$}Tf;d]#J2)@+=_ Bp"Ǽiжn|d-.vϧeYmp-]QZ['ޜf_ 祌A jkw2<=@a>!?e3VCaKg#sA'95^]/* ,6 )_,h ?^gI/7oGy8EO"epzyDjWݼi17w rmX.!wYlދ,G3uuhx6i+OUhѩK2GQeٮ ڇ!-xW><.'Y2C \m8xvD'b9,_jf&SCaDآj48N{l6o͏8߭9|T_]hpVט-FBٔ90 .V*98T9 #4OBqvV{ "R÷LK7ˈoItx/hA|l겳pO ؊vcHQki0џxOY]nb{.o&ߪ-Ƥ-D,X~YL Ho?S)c&<[7C._uϞg[\emT#7G->ks 6uLe?kJl]skHމYqkpK(QWai U E'ۃVU_Go̤^_h*. >p.ɱoiCש5 cR{u0lt{;{-O9 }G!yO+fq0 5-]jX^fl(&qvQkUqOra Ye'kiw騼tCd? A%êXg ᐴeW넬V( {h"A%>HbW<ߺk=jA-ۧ8o{$+EE`e]$s{ycm!39g{M N҅N s VnOAWweV8^Vq&:KN2B>';Pu_oG][ 7C"MxYZ qz̆a ޒY4ܙ %C9 -M ~6r5Ĥ3uUҭIk2&<&W #GqriyaTPDɊ7 UEBzpP劁׼k(hnjkzFB7su>aěhk'ɆO~arɅhvR!%ynU*zL ( Ӥ| ְ`?2sCRῗ[=zL:HSZ+-籧~nl%3Upڑg+ԙ QIb>@/f+މc̗Abq{qTvzW$:Ė?ZfɑU ) H(:Zk`jO6xw4j*WKPKx~)}lS mm~t knG iC6\y'EB"׼0 sXx[kۚӇǤp-;͊A|i䔈(˭z =rG%Z EAqxB X޻`{Ez}QiAv%3 pWBbkO؅#5Ž>{&9;˨t=JPYi@o;swȿr#$uyvV$nn/ghzL_& I}m;jXvvE,nlA/ 8SISyT|[.ؙ K:k!"o=a+̀PD"Fr]M:d &0 ~jۺM;;[dQI>*O2ff,,E@P1X0 C`ODH*[6V byھkH_@;Z}߼3̑DcA5AWqNԐnM:n_cըojUБk(z=Rfgw6ʋw?'?.<M_+η\.ja۬gڻO&ǰ||S=]wn2DViI5n]['$q-Y Ʃ M,{fCX|pnK*F[XeT0Y.-4z YFZyN{dI'8ءfF@ ϡ\HcKlߴ{p *w"6qHߤ-vAf͌_ F 4A4\&Coֽug?slv,jjP/+-`꟣g9BTtY+KWXe@+DҶ)fEC3t1Cj[F탄בt}0O7>}/Gu%+8Q6?Cr]'3B ve|́ha.L5: !oa䍝==x_y2^}'+@( !.̃}2P!1w*ݘ֔j*Bð8?eD{~M pMx}r{1 T ~gg5L/>Y:D|3Hyݢr{w"tĀ xdNeہЇ[ }،b㻖U"QMBxF׋φ>P.N,OSm+ ^=mgs 'ZvNk LNn;Q}R^K]%Hf j.Ƴ='jPd8^]@=B.0s}'?zEI~Kޒ9z&o{ňl8|ke{5m)r&4Zas;V?X[^y<W-ΖQ Ҵl?Ap|a0u6ͳH0pj %R'/mRߎ_z6&\V Oܤ> g ЉZ5/Rt$.FWQ])C4P߭a֟/3>T&+ZdF'_WN@9^۠=E2Dh[4"K (/?ќ iQ?:)`]ʤXT_d9(&yORD.J^ӻ*:"tZNvzV~V&wB /ZpCCMϋ WCt)$*ҽ¤J1L^o1sOl-vWءcU&8C֪c SM Q} =z"Bo_9vvnxes i}MV~ 9epi?-d=Qsżrg OL&2gۣ#*)Dbhf7fi81&@ 0&5Y뚉mSNB}Vn ;A_0v+][^-m}Ux7>eXop-+[oaNPXy"II\GuF>f8܆hK.B8N[*/v6hx4\7K\S[`hT>O4boޏ[ ifԞBnLr)wMM#xٷIO}+@w$sH%gL5{OP:tIԀ/N-{ͩ/*J& hʾ;K8=f<儒\hp:5+'&>ɽlXx^T!mgVF9/&ܲTm8/(7H_vxEsFD9t GmT8YxeskQh=ñЅi9/iȶ:Yޤ>& ` d>{Ph|FjEJ4Jo~d?:!y13s:İh$6ʆүqQY$""ɫ$d"zN_/{T5M)tj\Y(Xw/k#p~)Sӊ(p|v$ /E}<*Q0Kd렸޵Y4*@77_}^Z {fo7/t[jT .ih[;Cjm M!n*WP"}7{֭t:R sB w7#D%`ցRi s?Unf3ЎHx?fjXp.% /$ JXb(4Ӛɴ ӹmC{ɣ4;֢LmiHƍ%,I[uuoZA'i@&q*@c6juWWTA7K8~ 7?jeIo&{6vx*G4LgtwBa(Xl0?O˝;geC3~@3*3ưK۔-*#`dE>i mljC ǾE{}es2h3='c~nz}^m{&N(ρT`r6d?B[COp䣍u]PgG(PG*A%6p4;ϱ:TSYXUGx$7:BHuh̹?;/ousyeCJ^viI,ø& ^K^ .,q "ՂyΘ2OuTP-E4n./sZr',ѩppE"옅}ϸaH 63LRp>Ga%ԛbOo) \1D6Pm6\ͩN[AliCU0CJ_=&YU8wǫ1D]7$@4N!{joCRG~v;f]&YS`=-/ ΡMTn+sZzʠe^rcG^& 7&᪪icN@He_Հ8<{Kj ر~Fi)q Ȍ<]g. 4Onbק|XrI(>!7<323V$zJ"oij~(\2?bEUDuz%؁}|0|]]'2^_Mn;W)=7*%^P^ p]:N덃+EюLR wLՋ"ӊOp.|=a%Fx ފ1G2\팫kBmZ[2 z~; :WxA.0QlٹPM #wl9WakVL֊w@"@a#[Yzc PR^"$\,Dua Τ}9 `_\ =RiDXShw1fSCՐֺg<[׾Ry%eO@5*J5-)ӔZfeey! ,N*ǽh#?^Zpw j)b2NL)#:5C*Wsk)`Wzח  VmiCo yk oDAB*l鹥lmP0;8Si8d_:a (vqx^9z6ʾ[_k6*$̵O.a`udWDSH^\XvDb 9(8~UkhSsj]}XhB!OL>l͟+JmFנ /3Bz;"_R|v<;_V) +sC}(?nG;a!6?ϣ 3w3waF" w `͏-b'4A;b6*b ,&VIeº'x#YDT d1FiN+o\ოegub5ѵP8[ } X-FXd'N @BJ O*XߖZ9OMa!{C~G 插;BͫZB?jrÌ^Zl{b@`dD|W$2c}m[c_)q<܂fXi pONǂ%\<2@D*i_hD`ٍo_D l#kA}ռ?A4QP\|G=Bk&ɻK(cs5 LrӮgC8qp[^&spNt^,OiTe泼D+4'</y43x.ݗ@0~mO6M:;TJ |M'3Z(խ}UML',,ؑVd m7[aJ 'X}P?}LLPވU2Xޝ4IOm/WG0lD6 &2m^(9=~Մo PRas|i Ç:uYi'+_ߟ@MƓljnl/dτQ+KG Ro8O}1"Uvq¤3^w"*mJ.xsE {AbJ@/iƞOWS=>n?9EQv$+fv#q !2?u0xNNѫ)ugQy,8 w_ލE4ȮϮ4Q b%teK>ʞ"xo/:r*(VHiY.my=Orn>5Ǝ/Q{+w:ƿ}>6{uY告%S*3c~mV\NNU&To \goN2:]2Vb*MU*z^j} 83,$TaXi"zH|uϒ+JPv0rLѲz:3>:p48fTRG{e$8^»?w]0g ёUaQ>c`]As Mؐ/8S7R  ^yd9;nWm,J"` MA~eqUoZafZ,u3R Ip;Kb!#&ewC)#Ik)`wj.^I兗_3 ҡV8P=[('swLp$N}?peDcsgUaO1f~F9?Tt w["'JhŚoLzyjexғyEC|ln؋L=K,>t+7CVIJʾa'+_wy $ݥγ]{Jg[r?cp-RoMzigc}肟OO!TyO~Dv[~%c.hVP`X#)D{3Ө`HQj2GF}fkWN^`Εb($b:]s}kpbB7ēñRVh@ZI1o.9?,;Ww+g,r`Һ鋀CH-vQd,V3Ӈ~Ɉ?jжmP χwWf.)kf'&ho*G^IAK Aj%։m4,Ixw 퐾ݳ5%=*8 N/Aן[8\ TC8R%̐ ܠRO^2Ϯ$,+àY:ƑMf\4=ks"u(ۿ^7AHw{b+u{yk|pE'B/AݺUj#ؼ!Z$|C:T1ʸ4ڱx%F tOa5NT ,7K厷A0T4GmbC|ԅdP8cl~=-{5"OEigD]t_ViFia~S`F$y06Ӣ* j~@`>tAqv@Ӊ+upXj0g⽍? C*y)@fkRUWo{Wt@uX7]^pi%ʞCys9҂+==Kﯔ=;1MtʶeJL%UUPPnrdINDt4b'`\F0SYʦtWuF6Smijs?ƫC."ܣpL!7AJ`iTЂ."hr ;g("Oj \< `<^GMoq͐Ҋw<7q׏pot*rK8H%(Rvw ~do/&|& O[fo>7{MKESܦ91_ {ÒN zG)PZFB>iB#\-4wK08 JXdmW0wNrN)Lta$(jJ?e<{ә0X3!*PIz).n $nGLFk1V"eοM/:5)l~9Oz8u=M@ 9%;tylf 3׬3 wiqiqi`o̅nR5iR3(X | 7]_i_=HlTL&VNݔUֲ !9fj2}p#>_V@RZtsGNzx̭ 4SR(܉lqL12N֥nb-!."I@jzt|(m޼I/MiθL]`(Y O&Z&3bсUuDI(\AAfT{+\:!UN([ A[$6JlLW-cc/҃/T#H~hxfGqGYA-rG#Ќe {&}wo9ڭE7W+{(4m>Aq>ncb:tX+|`*)LPވq@C6'/ec.],BuYl,-KN݃3V.һ3b\x;i``* z_/tCDO$l2ll%|"gdXҸMSEyN|ZUqX6"Wt%lޮx$~b2 Ms,]S.9p T.[H=-9ң@ȗrt-X24ġaUSU羥7' h|w?sA,CpmK[4I4tr ؽ: YQ iq4{r`4BwDcˠ=.dVӆΜP|5 ˎ? IO'(f cc3aWUd;4'$t_-L*Fz꬈"If𸊋)NޕakA50t |&d}I5wfM!k@JwpPLCED`,t~oZo{?eKtz&@OFį йvBIi8xvyBF0-H_J`ᐡd@ᜪ_:M_ұ@"tC>EqR}Bh ~m:^~c)gwW?;=' Oǒ>G>F75=9;Cni{]Vm>ޅjЃ0Yl ?>Q~u[-Ӳ*jrxQ',_e[m9pω,xeGFz w8*Xjʫxl#̚)ɝ R~Ϸ>or9bV\ļFE挫vXA[6'FNu Ƿtliʣ=No-9kA?%AJ9j۬YqL]wSzأڄP~DnhkGRH~amb~)6I1z/zS}LLK4WrbTbvÐV[|ZwtA3Fd(t;(=.$:I^a&je9 >٨5cu?Rv{A/ܑ?g(&n[Es0B.UpiuF3Tn%ksegs L0Ǵk@Zx3+d>~y{vV?;]iVBoOYu6e5 !@7)nɇ9:̺S7թ8>'p0ʦat&O6$D^HIQ3|*^D$ܳfBx#` )~#?حr„i;,3X~ fS$Ա!7'( ̏SuIsZۂ/tbfWކ F7kC7jV ,8bEKdK&t ;IK<* xqwMHwF)\7G1x*: rn'(p)A. qB18W8JsyXv.JTvuI]J^ŭW΅0¬~_A[([P) t_+A ZJT߄z/@U GXtiM% a;i t0u,P֦V@]q y6ˮ)Or(D\Vݓ Vh]wMйMQKC"FJ.&;5Dl0c6ÅJ<1`ːZ,L[]nΞazpO(c#l]l[mk>*kһLߴ"dC!7=&$KLAbG{1@")?T\9T#SI *wgV-X"J(@Ԫ 䖓7}Ai)),sH$G`xFp p ٨rCt'TONLp 7 Ωre5uK\ Rnw]J"{'%vop^"C3eLC\̅j.#l^Y69&xtrDZEn#bP# ߄T9JPnT {U~^+YbmA)9hVfO vl ~yBdR3>i > Q.ё*a6gEtyMA%轆@;-`)NR"ޯۄ7?_c3Kt#-y==['hBUIѝ:B₳[TA5:gYΩL4s/~y;._@ 3kZ. 8U7٩A xmtFCmG_Z.F$1*)[kЂZim$-> 8h E_ag,r|6; o_iXpCY1)\%JM:; -99*ؑaXtvh P>*z焥K{nY=뷆twl|^]H_FA]?J Ɲ t`;Eט8|X 𮒽$0s.@hV 7a: x"zJX.Hf:Щ_n/,٭dPmhْUU|;+F@hS}_D=M'KVq0&@`u &Pqa]1+ `T(.Xt1gbAda!%4Ndctx +ʉ|d9-?k LjDr;ڛ&Iڔ^rW߅ 7kowá:8nXO?9j ϭy>P?j0̅5mxdqiq4}#ź"\Gc(;p,; g^w 5 : \hɨ ǯwƧ4 T2"K;Մ|B5 Qntͥ^lkr/v%y0;ɗeHAPK<t*!=@&fͮSI!Uڒ5P#!B]eA65fc ϦӡC&~NfZZksZW&=,[&dDJ@1A؝D{}wHw#rĞ9rh%#Eȱ15_jn K7xI}U:T<-%Gn ;)ږ=k yR2"xwɿ0ɧ%F] g[!A&%?79 ⼬K<9< i{M<:`F~iGO#L fi[ؿ/zo)zg\OLϛ ћ+t1+[< ]`= cK5ZP3^+1]t!p7T[pIM9v:C?^JUk.ӻd,KJ` 8gJZ@Z +/\ (oq}d_%˄$>_mX+w-3BX(7Fd*n::[脽0{0zT8fP7`#_ *Lp߄}< bx}V]#̀SM.(MuTːrH)u+ 3TQ)~z_D7o[68cA*iFF<18th3^jY'4m8W%y,L|U]Ӷ9 P܄G]=2@­T5B70mv=+pXCs{ p AOǩ3d`esøѤġDq*C<4Qi&6ܤj4m_f0Z2?nNt1͊]9r$T'3Pn6%"IG$}hòAZl⣲]5eOKhGρt<`_5/5D \R$!!YrL(wC5<2uh9q(K@ B OYWKˇKĕXrXDw.q<*6k#9"v|Pf;Vku8R_O>hok_eV[Һ,}R,mY&fC;%N5}' I#skjlCZcބr&&.-KrU_/g` ޾ J>e=*S8Xiy.!U nVc}eg;l8-kTṖtfnC2Wz^x)ѡl) }aM/vS+~5F2b:Cy '`ҒDC4d kN=T/S׋E .A N̹b(5%C|$d](Oj0/ۀw&>y2˶Oəjn J|9,)pSh:P:׎=ݓ iZC(o#L+  [&2Bp~|rgZ&*@bMnmƧkh OUe wFPwdcmA}y2fE?in~USGm mnXDt3. ZT$Mb.A=[Sʉ?<ko=S#g\NZÚ^%Ikf}WdvYpުū%yOKaeTy]d(ȴ$R?T-Whl :s57սv Sy4 33-5{TF+bp_s/ ]L1p"6E\8s)7Ŭ]HKG @VS|?-c7v}'G<75MKj_OvV OE'{B,cEwB,-Eeގ; Nv`AH>T AQ XHۿncR!坐 T俉b6(~p, Xszkđwr8|sQm =k`l1t%E-|>E.sP|t*嚃5TL:L/wg˻4WifC"VrWYxR*yE.wF-JGi ϛ{.ؠDsCnXO ii /h{;{'E)QCg%9s ?Dq؉ np&+QӖO+18y],UJ֟2Ohc}4ȫ$ Ny8uIެz󔫇{hP<_/ ]ɮ)rnOy aHX Akz4.Y+]m"q J<hm{-в(zm $%m$)ϥ뚍^ڋ]8@Sp px170kp";o<[ºRi9 (2aXC_GV~$/d~砤xE7NV\`&rpx,I|! wȷ?6X^ 4lC#1W>.-[JH2Q=YN/P 0dġ蘸5X; +t?b\Q87۬xGA 2=oݡH|5GD +f8mּ s+6^FfLNtCHKҠb^ ]#ڙue4YMIpB f3,7)[6t8ɡt0"$$\}*j\IRNp7k:aCJl]H$C(^XKW\i()>e['6/jߌ@ced`V3X-n/8E37eC1咋r1Ee,Oɢ/^<(k*C K1X%.A8OEyzyQ9>Y8xK4I?YqulԂ%v @iLGwb7tgv,pBݪ 3!'Ȭ8BuoٚY6UQ$~!cx(*2L I)7VN'x>JQ!\re q鎚4!IsFv=ʅcľcJ|{j ߆v x6\Xp7]4__fkuǪ*Ĵ%)i5QY89s^\q5+G*|.^O!6'QbP +Tn ݚ;X81#CQ!gc"i&fj) ɳ?d~3^Ϳ ߚ!cѲyz^hj*3RP'AOK;Ps0D cvݺpLtNT1(l]c bN$-'9A4wmA5fӉ3g 1-6xB_Q>#\X*#}WqIg ͆_wd-A{6ڌ@%t~BdlumH%Hۆ JDPggOxRjL\vâ>&\ErC^u襨E8yMƄaD7HTL`ջh;2 k/[ήsa4M23,*2\~.3l5M;'X%Of ^xǘ-fʞ>$F޺Q׸ of B9n5wl+)NUf@u4afs|BS*RD5Y 8$hVQ"$5Tg).ˊޣcߪMWp{ %Zm*N[d=q㛣"qUg) PO0 RYn԰m]O6B\*O #Ϯ Vm#h5|sE H6_vE]M}+MNl~W*&U68Z~s1eIJrxQXMբWq:z3XCE[mt40ALL7ZXH%D\d_a^yWOhSe>UoU w$QqsW=2QA}5/JrXHw0ӊQϡZnwav^:T0Ġ_i_[$߮;{*/!/m˦8:置y{;̆$?+W6#*O~mP2_F+ކiր;90dx2jPZlg/e4~nys:%z*H=J+MLR ,=Kx4%9^d,]ѥT{f 1j0cqǮtX2K"{ QxF;[Mm{./]?zOO( ?rmԥ{=תFtD'6qQ›' oY.$wJ9 ~_Ś2_<#-κ@9-½9/v|5R[[d Rhj"mKx ,1%U_lӭJ%d48A)V/14dNob|ߗ-mWNDňE pR81D9)z/W.6k91vטsb(9^^ ~D 2}gXVYŰJ~BO° WOʅo,9?+bp:7\1G2v)O28mƴk_`h ԷBD(3!Ak (HUUwP,>ȏ9Ge+|p1ͺ,L`Іx忪mWp!GZkj]^vio/(kR~!hѤ+Bgq:Ehpe.zԏ {R϶՝-+O}0] K]\ TVfB  ;b]${`+l|Ŷ21GD@SNlrqh^ba,8*Y2H8~rsO> 2E6zيr#2(|)>—9AL2ewcGjk“C~Dh6a~OTK>y;Wssr)]#Gϡ3FA{Z/d!g%G@p2dA/TFʇ^*֯!iB,\Axb1lxʠmo6Võ1˝뗭}㚻.@αa ~GU p!!I!Qj-"*U/hO0_Al4GTbvN{8} S()Hj&!(8Y-*蟽7 Bi-u,7zz bvKaO3D0zБE瀊}zI=Ц⥝p2-!2F_l[fRIZVÍꅿJ+84|xoa<%`FVa*;cʦBJbE~JhocJB3wd`" O Dp0{3ۮ! Bď!&N_ĂTN\129It2\.w/s)V6qwg[v2E$be;,8EHYe(zSQb(/[ Y=Ys^y' YGXcg٫LJn/ $|"t ꗷG_\vv/XuϰS;0Y>-rgN31S'{d4?3оC+C W2 =C] __ggØ,Y h?N+ $yF[53ZэCYjF;%"'=ab4< [ԦIFJ楈%j7IJϋ O& bΝR\ʙjCU,'Q!CÈ01 " \/чx;i3VgS M'1)O}6#5@<,|2n#I 䲒eN`7Qs^VRv),Z꩎/h=h"[\|Ҙލ)&0_'iW"_O5+$q%xs+aeX6d_4%IdkF_o"nc$B{ң޹9 [*Y;Ɯ+1!6@GJ/l ^0|:2ϟ`Vִכ:VLѫקrѓ`L2P}iה,k3h v?MΓsTH|Á '5 E yghQR`p܆RRyo/3g$޷nrJ&y"ʯX!z!i.|ux{dwl1i-!9/44m6Mg5Ʊ^Z\CP 拉l߸'F! !ыgњV}[ Ig(C+cA- |M jHt?k;qX$j48Pc6Y:%K;TQ밐q>ǀUz_~bKD/ދ|pvU梕ܻ0ꍘN|Ҍ;bhEYcR؂'kHi“PKN92Cq]9?,ɚp/Spi̻6Ա)P0&QsHNe!+}WLoJgsǡG&dE <5کu#@eQ #5N ~GLԟCSBp?cDyq2En3^o#|GqB>R{S_'`[rmSdl7#©*rKӾR%Rf%].oMi*zm;s9=En M˳mU2k(9qR2HLfGLXQZSOOse4")g)Bwpjc 9:8xvJUI."J8ɝJ<7U~9}{)k K]|<_I, /b0I*{4`Q垹@?^*US7Z[=V~>AKiOĨ߅ֶfw8Rl&f?95EUPq]rj;XSdΫ<_6zUNٿQR?zK}z=:i1n00g`$j\FƒG>Ƹ.0N[E[H-I,-1Hܓth[9b 4ekV[zxM՘v;(ҟ<Ճ>c*E0\vI Ob]!.n z!M+Mћ1qclYpn ?>IbÝQ&rQ|=y! ũ[1:xˑEJ;ay%0$Y|!#sϝ2P[ayWSsSKhvW+)Rr1Bj䷛ZbK$ΓCمPRΞ8`?RGuIfQ84f/s' XNEy+]r'VO wG& Ƽ%8Wٗy;*]{qd)ձʹp]C a^JOH;bOw]t.jڣ3ORx%m}ا}KЏ,Tԥ,<[+,;("3qCwL2_d@nbnuiݣXJ'IM1[넸ebs?Fy*\Bx6KC jp8{ڪEJ@({ p3X~c[\< \eXw'Av 9%v '@%9?}.*EpWuк )F*X(U9Q|. K`o)W$Z ]S2iǫ,|uy+ĘɂB4YNkô& 6 0^dpwONz_ܝ^i683( ״‘hRJ$JéQZ%Ȫԧo%fS,xǫ*ϩ\aZlD<ߚ?Zל`Vm(.N׍P#3!a:`J[Ѐ璉qur #&/CuLmK1g}YFtPM9@:V*1$Tg lD8ΨPGIo!AΊ[97FnS< ~=B1kqJ@Y5VG5JuLCe2Ląn>x8ȴ`OMhIè eΪFUTj'5 {5I %i#N)cLU 3_@K%.Zю.7a$;`jȈ;09aA2t='烍Z2J*j(ٞL2NsMIoz ohLR!D0e,.i&  eCw04lKXM]B '[jkP&;bmΫ`8寡תLvƒ^vr cDRfW |/w5׽ޔLDZV6J۱k2:1'ns7 7!M!!㢟”1&HT_3~SџM~b=^Dg R 57~mHW늵GX߁%{CUKɪ1c`9| 烇Mhz}`8"=+I8-g,K V Tk'H}Y4ʖFߵr>B,hosk=;(Jƹ蛾3&;IlBDtE}(\\?>->Դ헁GCϦxWBL:[dA]Ї);}vX[R K+iS`/;u F$Fe3Lxa'<&É2ڧdVglelWMdd:!R#KaED^tF7/9"x CSH#4^ 04ټA>H"2$W qϽ#1@AQHXXEAk81z9PtHU@%D+=)u>"I,ڠ,m$V e_NF  YU' 7Lrxź%3 +h'$_^D=$ %+2}.呩_7,hPS4$qwF)3قחFLm ].Љƌ!w?e̠^hȐҝYU\Bem͌dwMSyn+@ 鐾L߮++']vTn<]I췴srE5FU[.R38GqnB jB#nm(sGc~:JZߛ;Uv`QjDM'Q3QlBK`,tYҐ4 oYƖjrm(obmqj!n; 7Dyg#gAV(ZF؍NzgiTƩ1皟x%]vBz%t%pׂ[0 qҬ* e68 ̙37Y)T}w=.T^u…_h}B0a=XDhD5d Cf*-`ϢQ9ʧQ Lk:!# dyXՍi(Losӫ71J ^Ѫru#|3( L<Zs!#Y#UmJ`Uziͷmf\8@UA~W!sGc;`s3 :46w9O(P0F֎?Z%r&66x&A5[RƷ%rth01aXn2^>3'zBl'BwGfK\!! }j޿`o\ׄ+9:♠YӹEyKapEmɗP?D`}A_D!s*:du\pI-*",cxuUv؅lb)x0z9tVaegxh1*W%إ-U{CP%9qSnZ-"y=cǧygaFI,BY^]nک skm{0*6v#Gi#8;}%j#C.jͤ5؁9^ "`7M+hyZRR T-T"GֲOQ59}#B뀰{=5W 1%r,%f"-\c@_H1Re?q P91DE軺Fk_w®z<xU.p5va}/!=Ɋުp/eوN03k/gA $ ~^sY]Ʒ]d}͇`LAcf3ȴo)9Rqr lʈG8jɏSf"%!Wi=3uMTl4z?k٨]Yl\7,}k=nmDCTWnm,IOD$(F0OgKkZ( xIt!֊#.I"o F_; +J&רJ#w1V59^K@o:َvJQvB+8wQ>1LoHvS%2LW.xz@4w O-][wBC'ijpE (gM›e8}g42ElẉHdV:T^Y48)]r:g)K|Cx}7UA^zc; _S1xfLKC~{SBlG'DZc2%- A?':UXE)TT]Y/q )tvf{l=ݨ"B{ {$kowȅ[+I;xOȜE /N~s6Zaxɡ\{yK烙mھ%lXZi@a/B$ uu~Ey, Y?o]L~ yKh =l2Qˋ{ٔl(ӽsyF_,o|e%rJPMNA;#%EU 'ʈSyM_իr>gLZy>%`nbMIQs`TBQ~>' y8ZOn[*H9 #W$&xa6V,,vIxi+(_#MfCˠM(p݈$/2ݚcWYR?:Ļ o!lb;W$k]v>mJF%v/!k\ S2 jC4 oDjח:Ъv8sǾZ0Zt%\oxG7P(Lze=)jx@<1_R T$L Iq7ˎ./=3!k8YcuyӺV !#L:C&.1#ֻ'*kdlr%_n0?=uq?L wn59j؍]L4E\H\ l4 }I6 b3ch+3 SC[^k112aٍ K9`X]zeNIF_-byabD/R?٪Vc9bs}S͵QpoGt#Jb:a•Xs9No*/֘tTT_1K??]E\ٰO#B5Y*Π£4V&/8ApTڏwGDA )EV^( :„ "p/󫊛D6pAe<\xT@q,/3>R`KaŽ5A '>@R(Ib39I/Eʻ Wns31SH* G3 vׅZys;-ɗ25Vl^YV {%Xœhx%Q0|S fe02U4F)Llj8…Uqm `_ ɹ&5W׆09bQ7[qD_ihg7 .Q}"ҴGGp跰`(&+X7dD`ʩp7sC7SvWWó3 Нbf}aˠ;t|QDg1u1Ç1狕m6sjJn66ixEbˎ?wGEDҥ4>|:w&.3#&;dDe~rR¸*>pje>:0O<5ήFKd[aB!0/j`,4tpn~A~U$9w,gŊ-'('О,{ZyV`OYm!sYqԄN_ 0rV?uv 6Ck]u;@$R?G8D.l~JrRKC]1`:zq*1d1e8  Ň3$Q]h֬@U" t3pIIuc^bY.[1}u \ D W\S#EvMcR D@l#(-3z>ucn\ dY+7^.krhegR 2:B 6QV.^IV$] C@]tWk.NQSY(ٓ91TJ+n$u0a$@0R(Y3rh޲ifFQ:]yHegBaĮOpQE_Kܞ%&v vY(P(!u:<ƌb\FqjICeH{J_M8tu U@%㖺(*L_ 7\ 8Z {wR0xF,+EWk}ߣsw@u!މSDy4Fw~5@cHQ ½)z|ZQOA罝mcH@'꺮>Пꚿ儠ڸⱾک׆hPV{?yw!]u_!.g13m+ӏҚRL[fWxTCZ^<~5pYGg9@v-P:F 4~ko5Y)ˮA3^`(׺ay7+Xh@c{)"p" ykm:ʆZP庴(]C}='?,LMsHLD l$ ݗ YZ