python3-apparmor-3.0.4-150500.11.9.1<>,ep9|(԰MLeo8RW^WGEHIJE Xf=ą @c/wmђS&='Qw|i`NDՏ'DCI%\,Vy~oҡOq33?Ӛtg̣ߝ5i7E{D|:SmTQOLe~LKCOn]ܹ>>d?Td ' T= SpUU U HU U 1U UUU.TU 4"("8"9$:.hFGUHUIHUXY\U]$U^ bc{defluUvp wUxLUyɠUzPCpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.eh02-armsrv2 fSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxaarch64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eeeeeeev@eb`%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-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(aarch-64)@@@@@@@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh02-armsrv2 1696247785  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-aarch64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5aarch64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ea2e5d7a1a5843db34cfa5f08614ba461003510, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ARSTRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRR RR RR RRRRA1~&futf-8f8591847d85ffecfe06dd6ff3d2e2dcc63f8ad63c1740a8c9284e4a9ac108d2c? 7zXZ !t/:C]"k%a D岻Nv2PP%q)~e7B 1̾R.Yjm. B8[Ͽv3Gv+4ȴtM7 $} Tn|g߄2fѵ𤼐U\y5p|AhZ2JcjB¥d&f7&t|TU?vT;pZ9grf[+ݑJ j$Eٕl"f#cJ n*aڷzNFyrT8St6^qy}lA'1t6-'<7+9ZFq`%Wʎ=DaѐL>:d4,Y`&.k\,E 8 wP;ro1Zw"+W)zҏyq2 ˑPZp+dXpcdC" ,dVJEU Wo2 z;(a ,[Ҩwb5W+6S>QFXp80p2jQlNSwƈb{ІaUYGڠ$РgE8;%5 et_LJa11ʄ&t7J0d:YN¨Q~rmS#5 v w.hOG\] k 覃ixΚdR;Ƃ^|UQ~K>'*%U4tnyY/!;FHZ$ɟ ũAO7mceS"xwpmws0צPc+ѼU|U[PgGAv~]%_V/H0x|ˌvR ͈ VI1#k)DwC܋X'iwS|rfgڽ-rRKwTq6 Ԗ0;UIemaW6~O6۟`KAo&b0LJE֍+IwP=-z*-JdYrvAi׫_i7WA&QHV]zC~w~>uy8(Ԗ#z9@;>>f{ sƬ$rH5 <+eQC~s 1e+0bAGX:;"#j=D7ui;#hvb%A4vGPy\<*-tcοfL=+Zߵ2eMd\8 5a>{h$d3bIP;bk1cvE`gnJeS$Y헔e>OA @ bj%%֒bυr"ގ]HT;@?>T4VuDk w?A+0,?jw:2/@^Im59b yI8]}SJꓩrNd = :$ +} %BoAG)`Dhoc-$ک&Fۉ_@58z1G(v!_ƪ̓k~>)2| Y3CA)c}@>]NVlqi J7[+0F>U1hŌvkSϸybٗ `3IZ<ļP” G=:}0X''xv~FZ ,3.{`(ml.ϥ<gRFv_r S}s vVE(!ˋ֑Lf>aM]4]Z˅ ϴ郭s;%$'3~?R[9j4x-axa4! wϊQZr4(:"QbMH+m!TߦŖIf3$*QO;b>ayl­t}L`dӉSS;!JaFPk:G'Db~?3~ɛ1'Tgh\XEe94&/Á-w*jeVlzOԺnLx4|leܒDE/Xh:ZC}$@Lߤ}ˢ5䥔.qH -)0t=y/0Ŵreڜ& az݆Y-f9 j(f oQv q́K3D]r>֧۩ oW*Wd)R`YElZ)PԖ)&L"oB+&)2T! SH`}`AI9Q4dk'Zȩh Mk*[.Ec7ڸl0&!Ѵp?m-,Lxcuf\Hx±T{`s g1;5TZVk#1N9Nft:oIoz3EOBԫ6nKOQTh\Zd|c6,;fmn?2ξ_A,aFLS'^%sU 5PXWg.9. 4Rp^Ϗ{2z#П.?֥ $w擭FYt{Jeo{Py0z_䂯gf5I2:'Z!9_gd]A6zΞhg!W܂$֭7{=x SuF_O4ztZCDy‘XP [qlZN\-^Y_$!; g,A%y4HĒ6+HTo8]ŒWr* ~Kf\3:z-ȕ-ʚ7_uryfq2N 3X|nJ0e}d;*[!xwy+}]7&_S9K!|li@lKZcwKˇoAKބquÒ:[>*>8t?(p f _F4*kFL#F x&r`Ջdf^k:$iP 7Y\KyV[? `(]ԡp4@lJ7m{oq*+AiǕˁO rS1(ٕjN}g_ywT:=԰hU P6e I,`ˆAIVِ0eS\Mq{[40^w:G7zeF^isoK4pÍ=:'=3=o JR벬1V =<;pr\.5 ndO+w."sQc }@'K'hTbYW8>vDT! _8  hv(9WyJ C gsMQ&.@-Lw<ʕ_D! ?ɁNe=m7c,9N^\6؃Cؾ I;!l:>qfl6k ß9{fL3;ETc@- )t(?-T2Ѧׯ|1 lր˷Of0m4R:`}&:^.r9vwj@:IU!}R0-sYêP@$6ه~X9yj(!OvB`3TdGӅajw抜y(bV3T(~=df\i) s{sdh?nV:b !e״s/ԉQNRwv:լ|[hсm0jCsMOd;:>(e "Kźuܸ'F^ pZaazִYЭ̚4ݓHDB:"MtzFRj5އ BVp]ljV&&n]wD(:3s t|ț 'ᰲ eݥ3G7+x۵v|y C9!&F크!wHV ^Nhop@j.iNz켘̹#ПcGRgl4j|nD 37PګKuWxݭ,^1>/<;[ܫwm ܽ a] n(W q^']~lAg ~o{n]tAźI<_$ΐRv6^Mv79P1  )bcĄt"x8n}I߹s䱷d{.wɣ"K_;jF|cؕ9=W 3L | & JEoY kYԠq6@ fkٱBVkI+kY5cߩn&z#WCg1OL*BryxE׌2Y-7@{a:p|/cKrߞ#d0I%9"Yj*5ZsfT88w,4Z6Uu=[p?Rҟ5 fazF;Q#̫ƇGfٯelbs YĪ.6XE t[><5tA5dΫK~ʂ-lt)5|Dܷ,@t+ AE >9$Ur̺o *&|$ե?ܑ(p=] ^;-P=l $#L^i9W% n%=mK5)E:_qCIǣgvs#QiI>EVa ,K[lƃl᫽Ql'>X]s]Q5e[o͛D!0k o:s6".vsGoKn#wotU{LMcfX `ߐJnNS,r³-$Xy ?*iFPK.ldLv?D:]+ BֱČ4d::tj |:'ӶqViݘ]Aތ)@ VESdGԲh[Uf0]8R DLxQGtΥuA&;jCzRr ~~a)fr/Aͥ}4:v Q_Yu8 ۼkdv (<@}X+ n|7"qH$fчN)u"3;ppA5 y0qIT'ԛu<:k(`K,tr?,r!h⭙,@t"Ј&͔?,gzߐ՝zO䛠n E8] ZC]5,_8UyI-G4YWt2}H϶ PQ21+&Q|EmÑS~plq\itpsL~G!3p`VX:e~d8*L ڣ+NR{Cg )܁;76(jH>ramqgs&nY0Br79C#8NB燐_uyܬ jzQQhY(b$Z֥ tXg~=$*g@rAwv;&aǧ~Thd3)%c(2h%00}GUZ*E"i%a&Ixj88[͞.6y}v%2{N`bI$ސ *^qOǏ5JֵfB?o{L!}_'zjN!NdB~1}í,IF`~AՐ-4: k1fkШ_y O48rYoY* ,+QiEBDc?ܧ sY5qNҕj HU,~"NbRbF 'SByf VBI8S홫ytbܟPZ-1tD`cIV>%xO};G~ݳkMu{(A?5R(qT^3~vzu;JͫR8b @NzǺۨ8O!&2\QCW [-,Q-WaqbPQ-YN"\'ǚ-S8B0[26H#Oɳ[(zܩbߵ#im _lFy0da [n&I+2SE|S&n_@p{z7Co>&RMlsªXHz|d$i90{:(ѹIER@5!h#O얓Ys%* (xx"thv4V :ՠe~5c{9fEyN'hS65R^Bµ1HPL Y~"HiK,iŹI0l9:79(<-54j{N\ʟct+ɝFOX+ޥV;"~V1b=< >niU|K ]!MejO=}c>~~>VKwSNJ1d֡rf< =ȁvJl),vɠL֍j9_> :)Tm/D㬧bH< WgQExUQ56L G/tv+B1}9r ȝl"(n3C<{s:0LXw{MVO]ڀˈFB*ީfw[/y.xؗ⏨y9s)f[՜Ta@J2n9??m.|kVh踇F9$q@A.)AxPK^^\`}"U5U>prIsfԩ2xyO)'IpUcUQJ<ni@#?"BFN_c$j JލqcXPζNBeM^aM"g$ǺpUYe%<%P늡P7NIg:-"W&^!xԳ]}8UuZ3bxtĺm4clڰ yڊ3$SDpt?8߿+}^\g_T%37뭯 c6) QyC}n}l_7 E>G?i';Ez_!c(+l}Ɣ| PJ Ο)\MCk|> HCr䠐E`'B-b.MEv3 % ,7v/(ѕ.-ʹ;CJT)s'ܾZEzCJOXsCTқ̡p:u X< /ѣ#jtZ̹ 2'*CQhFٷ(v[B?ĹNW^'LtxQم}Mm/^U~r+BLl kpCYMG7U*bP)0.,z}HOa)ك T #$9[dFx1:*MM4 e`QsZ:-@#?Pj 3bz +\x:sd;F-]BQ!5k۞YY`ƀRznQibF=tJ,:+y= Y>Cj7YIUY>WqS!EfQl+FixZ2{D]O7Ei6(̭(E|w8s65!#X` Zfw&`%z4?2; nVJN96t\IzN , =(p1hΦecx!77Q==KWhr ܫNfO {5l0#y#9p(8ŀq)s>㯌Tp@$Q{a"oƵ6&YoT~(ZWtP<}=`.蔑t5V8Lct,l$EK5I/.~2vLCOg0.^v3p9w`6sX) ɔ]RmDjKlȍv&I 6xXBNԁGU#x2}6,V-에@Hz'dP\1f8Ă:LK@n)ڔwI&8xxyoN k߿dx~d:h:jm-)!LT(c7\QZeߵJX`*ׂʙ({#P Xw Wu@^71e"ŗ4?LI (e@,5[Ul#~lx(Y'=8-:Izq}.7DcSP1xSlv.k9 NdOˬ3zfI#鰑O]&46e_5H9ȥ_5Ta)q K\I'=AA1!T0(5zE [MT,ɺ`1eY͆(J%E p,MϢF/[bi4xsO)ݵZ6:&„^.B"V84۟<`AR4/[ spO:M^^W( li MQd] .#7ǿ!vK$+ωC̍^ڶHb uq4̺I5Fe{aZ'0WBo[zM)|Ш\S&ep0c8hTI+/\D]V]6#<4ɯ+=|O+ dްb6`OmW6 @5qM B~/R")qG缒.E͢7at-U`ˤM.{7QNeAӵgoRg+ULKP҃7{ :jL/a)jeTb f'ƭ49>b%: fIl$O(ɧQUY+8b7BGDpÿQOshEr]$)}lF6/ WC7s)&x:A)fK9.X+W4"Kdcsc\#fB>M0fE ^&ۂ'QÇ2˩Ǿ鄿)9^2r@f#LƑ#b`P5k,ƟgRR Fvex߯? lYz\#, q:Ss%WaʘPF "z(-ƙL VM1pߺZMm3.H j6iTD (#)]+V%i歜ZyN(Vy!"r@5]!I 1<dyV`izZ8x9C;}KxN~K;^/ѱcOn.͍#|[﫛s+2-|| ᱝDQIa2Eb@(k4$z0I T x%P9T_{h0rV:UjKܔL6 l^ۇF@&VSn@_66Y>0-['\gy8p( m _׭c妕zWvEp//\??OWys^MϿKIR[/($qWQk-tM_!2~»&_>>]V +f&J{Q?5V3?HF2?䇇(axY!}Qj!Th&ped>tX6暞] >F;+K.࢝AԔf? IaImO'`og!eȹШ=\52eCb;1NIDr~vetgNBʳ}+:YM4L[,o+ )f<0&. Y^(>lnr  Ϊ+Ga*:i6WǫKBKZ<{X _vCc6@@`՚ۧlR"CF wqd MC %]v0=CY'ۊBP"F6ml&]( ۣ8Tj8TԲk=+/k.RNRWѹwg{[z>\Nr>vvE-Xz2 IoBHK x^Qz6_aȔ3L QĒ:6a6u)W6UuK#Bb!("t/6uUV`+:|%}q]pNabc)y=*J<̋>IN2b4ĞXW\,<oKs1ǞMXcE~IQcSsB?gnE@+TL5^Ym \97W{}HU!I-$뵌 K Lx gp݉%,+)#Hj|zlZ,NwOeX l$@m/@>FڽSQ$C_;|q~@cҿg"gZz(=IC)0!,4E@c-BU/'Y\pD?ye,IY|:!\ [,)1ow+{Ct wzoDg7Ffbq{/a ,1]5v~Y]%v~+&fϪBy#,D=&Gx67V p}sBi!W rp:Fk4|Fン7V&r{Nءǝdb Gԏtg>Nk#;$$gA Ж{osGbƳC(2(x5rbwfX43f߳T&K ?g8㡯 tGUX[^\c^urJUt~F0b?ы[TzeM-~[UM0;zԦ,Ĵ)#fm._@sQNz!oihTqW 4ǃ`C ;>`į_"Oa,pg%] Ŝ CRgFϒD#m7o[Eu{Nxs ɽ18NuJ\t X‰ӂyj-[j؝}88) bǨ#~,^Edș [fAe {-gR0ZꋛfmG_c0O"wH~F Z,T =myPG:i ц '/ o [`0i'$qY5<ӛǙV ^akYuac"JX!/0Y*G,X&R#}IPsaӄX ~e <,$1$qU fHbi6 s[J3,&q ͦЏˤ؜}6Ye <$-u(TRʴG:W&cS:KA 6$Dx>y y%䐱υ@-J9,ȍ!3tU#r3J<&.Ի6|?KūB=i"^ɠNݮi)ZܤR[/潄@s35Kr{NJR}4w)\,6Cn˔lV e^GeֱʨS#1g5qMv#J@8L 16P. +TKqXeRSt 7hb9Y}>M1HS+h2ԩj{z𼉈ABXF6PkX:3n 5Wb5{4_ 8r/}ZS.lEM88h!׬U+a)]N.|,-[_؏3K_v/@x] ;| H-PْoTdpLcc=rr.VgUcG9m=,2c0n U6Wfj0c';<2d<[&xFXɧMsjE}0`2F r״jᳮMfu!^-$({ \Z4ӾJ gt4U|cbdlCAI|k.4ig>!o@Aa5y/'VL8~o0 ϔg\b\=]ȖQis*z"Uڰ8%Aȼ`\Bf3|a/=R,lU9_VϱJNSU3R M/`;h2ثfO(mF1ҶkMsqcAu=p'޸fF>HѥɁwd=<hsVC2l%.-8Qɮ&]-2rj B OF00Gq{YioQdhN"Ŀ%3Hf-[<,~X_DOu/0~u{xC۰}k(LQyuE\*i|7|޼ϕ숺 s#Ҍ(k}ӲbW<a8"lOzh)n~t,L:ݍd&|n㑞؍٣(fH#ЛFzpx؅hhB@7ps;9|YY{2wKSP2(2syOeMe<\Q)%c خG7+!6VVߖ F%rE^Tċ =w\%:PEV)IB8TAξipOR"Ȗ`.bJp_ͥXZk,* %bb3Tt1$f|w/͙,+w{Hw9 kISaWܵ*fR~at/6pK[#;q? Dkڬʫi&;'=Ps.cxn\ YI_g]\6 FQv\*?6g^xYd>I@V?haZk-AЍ +PrVt~lMy5h $ǽ@AАN吚-05**]MKeʄTrVϓY-E-L Cijr}/7ɾ;AnaC{n^\TD276h!O}M?=# :T=}Xl.#?fU ٿmN zWl;+PW n^}C2;e0Pw$`vt.,jp6C*Q@ˊ5 A\=ҞLݻ::RqrocR!E(sO?`,Z$g9S jmkD1=dv|Y< 4̣t*%#Zk @9ilt?%+LWA-}C:~H5_mA7^)_iS:U!_bQ{"%wEI5tt_m c_[ʧ> +z6w NfTڥ=UH۴Ys`{+O0B 92)| +Arp{7H?Ԭ\) A#Hmea^hA悗U TdL#n;Xm.vD_ݮoЎf4yJ%|'c'xgئ~䚦eCsuқ\<5F &uBj̾JmPP)Astʅ4ʝ׬d5x'SMW2ꋰb"Ts(g ^Qwz(ne8$*t=5CcY!H%~' 3W& m\7icjaǝ<&LlW/ Oo~0E6 S\,uq:tbq[V~q9#LcΊl1{x|ڊ " Yy L+$>8Hh|8CVXYh&p@0:1TV(T|b ;(Ȏ[tSx7j=72ЭQMlӱ끕qKKO4VڪtE66TZߡ,avf7;>RN Z_;uŜəGLJVxw-m2{yP≮.Ⱥsf \4nЮ^5m ΏT(hהT:w@hߥ[h{bI GϏS)?U֤W.?8H桯|P<ϚϯNRC=k/-g+^i0fBK]*~ ؚtp͛TuzЪrGZ֓nt:T1<>Vm.N;]_sMRٱ.giNuA??d0B-sohR\ WKΔ+[ӽtZ:a &Q/#̉oJ?tdl k6MfM/+f7^a#CTh>'ѿ3.gW_ml({|pə]8+yJL /7bO `hWdU%_/1['\.Ts)EzȨcAVO nr69!ދ&*,<+׿> yLr)[Z!1z[&8fZar-]*6hE*di)5ANP6MVKp:㍢(\  قM2YeL 0j/8!o~֚c"593`G`Įk({>sAW0R6ҙaQKbATcl3 \NcL򸚇9 ݃aG2#֑--W}=GHȝ茻)ș3$P6labCa@9~OZIl̻2g҇/)'2^՞=pi?v^@gĿDƻy5$OK= ; 5v~R}e{#8Q`~*[74Õ@՚CR_A{~$^e0b,N#d4GtXsTl\V Gda*5ltƯʿ.3| $pencqo/ͿٞN?#WƎm&i_H}7= F{ N>JtK̲֍MYrPp1ל\he4u^@)*W^jXƷ'f[be8-;0O4U 31z,e4$,ެY`,R)V7MO\պbsJy?njUؒ?cbXJ73AtE92=L4]j[!% ;-/3!I]2Ng' -eE')oJ`Y}ݑW wd5ɂ?-N'=PUy2`"AfDGô/zz\H(5 %o''hc{/'sSPjį'@7۪A,#qαU GƛgUr}{ 3L|MrRJݿmZRIM~`acd̔O #WpSKMDs!R MVL XA9cxg/)Y2eޭݻ?\ W?OqQfÙW6NžY?%3dr1o(%MZOZ{9;٥<뙲E/vF[&KGK(#|yJm*(]&U2u`׎ y:ebXX23TvZlǿd[fwRq G鐭"D9WtF>֙41yow!?#}R]y"#H2xuuގ^ ~M.nPtY-Ö<IA,O} z^ՖcD'SEr| JDdKtVeZmm%k~opW2<48L6`0lD{mأm*fk,vE!vWhmk71oCnLM\ 8bp@7tT]>}PƠȌS }m3`)15i9W=uH_+B, T}Eto CKEfڭas?hl359'3ѽr\V\]ac> ګT~jYI6)otbOJc zW\$6r½f*#'رo JVw~|5gEIe Li`b_3:z*/̟̂R^\"3վ*1n[M{RzۧA#nR InM l n&3DDWc|{5`vP"X{Ϫ5,鯽CtA:>˳%rNѪe'FZxhbZOwt3#n~giB&Ɛ^ D {Grȼm\@#W sٚQ0O -QjHh=?\%05uwaצAڨ3N͵^,@!(÷!]ݓ@*`ڧHơ7eƛ:dt?Y 5<{D)i@[?sW ctzGc|ʅZw~]\1mU2LCЀ+Ni(3Is d4Z#8a]($S6F 88?qQl<2[e/2SIruv H~ԩ/EW1^t:PQ]'e')"h-zUWq;˶<F@2fuŠrEZ2R$zf孠\цK-XFɮ'3+53-0h0#q̐rŷZ~^^5 |3A"`/Թa )VTt̋GѫSө;{_"c{ Q\޺pb%9 C&w _W<HOAxp)qQ311A? ,rwP^x)fq?vNr E/)x:D% ؒq%bJNz.ׇht4ytؗZ/2L=&_)4g)nMZeP U&MY ]iDd\4gx4AzSTI|KH]νƵ)R#:܋;q&y]wbZi֗W nůDOfb-%K"R>c-ۭLDRyOj+Ѡb 1v.$1r2P,0 QhxcxYzC]X䈌!vnZ"%HL` }( NI1HȰ;DfvB(w:na◠yVynCȶ y8~V H37~ 4+{y ' ZU*PQgcmw;Vh >baa<]@n"J (nr,&@(;,*&!ݺM%2Gz2BSϢŅ|WJMU_F!Kq?b_fJ3vrWgN英fl/݉nxD]Z'Eve?;#u'aDr>|8|ÿ?CLL@1APKl/k'-Q2u򅪟^nG۹ .",&D؆ TcbZF~L@j/4fV#ހ~*נߥ~[2έZGK2"[(N3ؙ+bsb"yh q+4Ƈ\ =߅tB8/Ή |FH\0tk Zn7e(ZMGh1tBܷK;B' ]9֔-w%ik'Z)C f>R{)ҪG})qyQDd#V4?1WYtνx)`*Ky@_1'6g`K0K*B% )¿#R3Fjh D<Z酪BOg(t76#x-jN:r0f#AC\A+,Sm>9V |;QUCwͯ6V{l`V=dU 19xFc7HQieר,r:~.1?Ē%G4X 0&NfдF&Aںqľoaz,Ab%5C6f"5W5C˃,9[ }X)Ӆ`9qlLk^CǛRا ЖJeN)CN*؁;(v {yJc6)A40ЏsH"8Tv5sl8J:[hY*>atX獾. |aw@|M9KK'(#^:CR!xEn ̬Mqpwsvr)9J#_]=3ja|^{ ޏO(١~HB/5v⋲ oDp @+͡9fk3lYJۋQnyF F gi"׉%%xsx,7K|?(~0n_!'Ea%/ڝz[$\,C};q5 Μo(@Gub,d:(M2Nrob]x9c*WX``9&L`N!x.14z]9$*9skyHAxF P5P@.7䠌Awxkx[#VzQ@OwYyD,][SJJ% whb!3⤢Qٮ/T N}G+|>o9/t$u!qaT @/WBQSNg.{+"r U+UB [Jr2Y$X63Y_)=U>I]nX<7E $M/YH48ƅ17{92&ڙV 20& KLGEXYb#ʱ/:4htpRg@w7<0 C v$/Eäc{6ޣ][ n`򓍁' B\a&98@zjːO"z_@sp..3OG-uvjĦ5Fz5Ά%L4)<GJ-M;g^lys&!6,L%G f^¡[чBd%.E ;qKks~t#z*(^Q-kJ/cB2[*`qj(y0 Evo+c=s|`yM/1g1U+ }E[{?bUӹyut%>Le3iMKzRƬzH|lV,E=Ɇ B Rw=LK1j˴7NY7"|Dha;bE\8QIbB:H# q ݎ!6NO4*qk//Ѩ`QtT}#K&zc3tht2_:z<8LB<%íUR,1r3dbHF1?S'۵82A@lJ)92څ׆ׂw,hm9r%M3d܅ ΩQR?Rk#Őn=S|j0cTKj-@R= \>>'>a_Bu }B aBٻ!3f%::kYc; ^#ܨ^$T\oF1*F1ϙߐa1XHh0FoM'ߒsY.Œ!>e] za~]N+&>!k Ze9#I6N:ū[IbzkGLn'־pҢxM/+_ǵ2VYzsw*hٸ TI ʙZ|)1 7X Iifo#}Y`1@@x5^%PC祒vU&%~̅9m>g3y:_JZ Fe \3S&Fķ},8{lV. nҥXiTO,rSzOt jpnnhm ns2 vY2FP:dhnz+8ߖ)ZÐFcŖp'MxVj2ZFV)bbxxkfiƑ| \Jlu9`O DIw ɐzK[U NqIPbFRcgMO"?NjHDM#a(|KCxZA 歱= ͮ m2M1yH# #ɦqdcTDPYG>G5f B9b*V֯qkޕ c*e>R0X|͉9݀fo)LmHplC.5 mciJ9I&:>5)$?ȟ\i# ԰wty:-K3tH-A?: ޿ ]V4n)#{!q#վ%܄-lV[Yq]6܎~!HpY4JnI"q\S(`1"pk7hV`iU՚;Of$5J Gm]L,pd|eYLqTqqsC/ۏ ȪHv FLE֬pULey{Ls9 : ^$D59B??Wxﾃȇ&$zYI?8G>{v9uNcS,Y ENK/ãr/# 1^4EN3gm\Q-$$29m$)KϮB1$ qՈwGfyxoϧWHeMsE 鿾vx/&2VV?$?B"VzI>O~w1lʈZ^Hk5 E @cÊxS;O)#wk.ޤA)Lپ7zi0Q|`/{SD{7"AIOd!cwr)3ϏFʭhkὰ!_eP`W 4RPbœ3y3ui8E&!Wx.-x֍JcUr ;چKW.Jй~SOfوPЈ'YmZ2s.][f smG-_g6(iG%wfب BAtXA@)R-H ܑ-[e48fEB^]igVRAضꏺώbƹkn8>ܩV#Ik餴c#|o=%3zd PaZ#qOt},_1 +H7EbrlVAԆW MyF9#7c]\%y'AȐ>INKjg  X%kEB;UADL{0:dFB#H@;obJ΋fシ]PhsS/$.'-(7m`ٺI_YwWѴ]Wt:fAшC >ٶdob%}NM鿨jBwP`lY ^ݾ,@%B௮O8ڛcVRH;jhabsXR/e}ifE)#AAL†Q1sKf=EksDkV/.E?k+߻N'$NE*;`%o$M{W+=b)'A-qjMf>੖yő4K]OR]iX1y[_L0tTD=L;FD ~S 9u YCeVͩ+&rfc#vZB%oVWj0"R`@ 𱾲"MCry_XہD'?O5IAU,;\+a߼]bԂ~;;KO _ T:fQc-Ivfç7L9-[^5$= Fj-Y,8Gs{ԅ|iA"0w  T)Z$[0̳!>םLkȌuh΁\7$DLg+@Trj-p2X;YBEqim{c$A97Ԝp32Ra0\E5Q(rr uЗJs`U+gi02G(CUXGZ4Ǝecڎ5R+ v=9A);yڀͺbU>JQG╾zd][0F[|Y,ztq]'sgfDA%m:i5Pۊ)!3EGkӎ}'Z<3ئf꠮$Ym4O Nb~%DcOagiUf+:Y'9ئ ?^^q98b]TE__p)H AQɕN3fHM'}^#!7qAdpeJfRp`rdzY3` ,Tmtnv3Js|74KPmGVmŽaTwH\g\Gޞq!%X.A35y/˟ߚbXW~rhȎ/B~Z<>">&661sPЯ>Io,CDv>{si[TQ[1MO9]Us|R= ~Lxj<pkfVfH@V|/f^1oiY(GubDf p~tAS Yfl{ɕѣ7?^' Cp;ӱyJ&\ "k3H$TE3u\ʢ'=WPO !jj`Ǒ,zLaQQ̽VIO nysq۪ #߂s(BJ.`oF$=a, <}vI^ ZA}B1:q!Y?Nk3-r~ӡ-I7)i 5N>R}b^rU,0LG/4{+f_k@uG1KAFyx*$\리صtUIhBw9\EV)l)Qυ CW\n05LdoGs; )4f6t" &f 9iۗqu KQnaE_9f9MB|[%7 W8Ca8EWTT v\DZm^qO^0b23kDh TI7UH݅4Or=gȻX )kvP9gr۴C!G`x7@S='8Aʎ#:Qg%q @"ym&)ڈ$ YTi*l'n+ب-!O f'Ȑjb3Yb٥V XaPY+G)Ͱ<#۫[p_YzW. xMav~ v%Xr7>D[Nmr(Vr)E㼒SDjyViA̘Yd@I>Gv]sRB nYY^J0 M#lG0&6ANu'Ӆv 4fqbq_awF+YJM9URJe*$X^̵meŪ՚(\gX G8^-"cYB)nP5~H'7#^%ܿ4Wy{h{@-Q8qkc8UۀU蘴O "G_.=Sb%Vʁ?C]9)`--G=@<U` 7BKt\| 1PLlrJ eھ ȘQ οM'Z6P3|u3&eEPG"/xʛ|`vMvJDW!"ob/<smƠt%pMac6t,B,|;wU l #V ^!z_aϨ!qKEM{] 7ךJԣL0;ܛѠr,t (NN"y&ᓀK2?: pKd^gr K?/W/TظwkF?O} L`S!',elȤNly[MMӖoӤfQ)nG iȝրblöF<"օ}ߴBBH(ti M`ߪ`B% }GAh)PQkK̟ں7)%dUT՟^씽Q$. N ]aX;IEi[(`Lq󛎆zW'cA'7?WSJ4x?"ILI#~M! /wӊNf)T"zX۝^!9?^F |/fj .g[ojC{q%>]X5PT7X Gٵ*4C?Q6~4ډCS.`Z\P1ˀ)FD;X C!htOi@U%Z<6B?X3T*UWlCYY,(yWDϲꄂx QIcbHZWtXiCę,kX+a|].)_Ÿ}6ou¾+vv7#_VpK%5w&g:%LZ(9F1ol($9-KsJ)ilk`j ~SaԸŲp8W׆;ޏ$HbDE9ÚhK>֐;L'}gV,}n a܆3I_4|v; lw (B3TsAC¸7j(1uNLfꦹ2l\H|{04f55=HP,9v gۅCCl1Cz;'4i㝌rc3.0W$Vr[Xuy~+'? KoTzLK|[jMa?{APys1a[S^٠Ex*Jhc=VkFm}ԝJ 6Gn9*"`%&Ԯ,FGl8FbsD(q·!p09Zf[P53{E fW`ԫjkZFdl5VѰa!כҌq7fNT/&u%'*4zÂǔf ؉C>]cǺb,(zy21w}ǡ/^/^vᛰ4fEƃo^cwLKc-۫q<|/'#ҎR6x F#Gd =1_?HN4¡mc/Rw$\ːSIcJI?WY#rY(Sc 4Ds8HH?r|PWo`N 0#)B>1ҍI;'d0~EUB|Mgfӛck{}d6cX\7bknw !wƵ:lfIGӣ}!^SID7@,=0HF@O&ɧz<[gʙJ^${w_xz9hAjfPY#U<ۧb㫯-َ- dQR1 l Ϝ>* vy7 x^kąh}jl͡prn[ˍﾵ-&:T=L|sVEۈKvAHg\:#r=FvJ^|7j<"oFuT"!Xil X} &2dal_ 3&rBJHzo?qԉ yly͜>]a3ҤNIO(ŕt#]!gD " F63u,jMAZWw%Tz~xYOLjOd9P:+< .7s̶:g…/jȳ6nL*C$Y8(O,q%ߓ܀)^hElm\28$~yJ3hIO vxL4x_sM>&NxV6}~LblZA=~<-'.#襤e72[F+9hg} ']=/ c^Y-u#7n  X}V7rtN&$TbzE[T6<}Vֶha`U(D%uvY5˝赼<,1Pɞϣ76tΓkW*83cFOƓhO6Uz*]x^іa2y2>w:r+K :PcS[9Veo?<^5&R?P2_w RAxzJFTv$ kPƃ ipJMjEW{&^n#$U}([WRq/ ,I`ЩrK.)ΠvIM ]*9Fnl8hfU20 $M/55w]A>y> rA)͐>t0p(zz=olWw4r)[KqC8Cr[7ApeJ*Mcnn|)Z ?HBܢ(B-ZSi o떌GwNǟiX`+5=Hf|>ݾZZ3v=}>Ia KN`Zna_E>NصXö؊-SW1g7K}\zFȲ)[:2O8EH<ʡ:Doj9ҌRf@5Ax"ʴw9$]lyB~]T7x)35pgւt("F|)PPE|x XwA,<,4;Z.9 fJH:? Г\="Sw+"sv_ݐQs@>ea۹NءO8) }N0T2PEoڸ8Ѐh/KLS:bN Et敾IX=$Uu qM9$*!ݩ\%ZA2K@}zp_G^ʉ=3AIc :]BP^ۖ𐷕βx %IS-ۗGS1. -;gK H; Cjsc`k̛ftZ!N$|2gK[STYhke!l_5?|mN~k>#tD.)sΪA0G#pC2'=qc|-ػ5_I u14{0L*g7|w 䤎f0%r7J gO+9;aP< "Z4{ 0 fZj7Es;bUBK~0`ypɘ ԄMFaP_V+dbڄgJkd1ڄ0f6^TCCiV)I5Zk: Sͺ-59xBRV>c)A,p/t._ֹo1c'\Wx@dC7<>`pPDՄ?v\Yyz [ƒ,K ۇDnNQ:PCqgYSBbWy#(ǽ%:qymd'mE ~&{9aJlJԧsp@ .U>ϿdTcTj XҞNDUCi0%DFj"R_{<͆6Bq$-Us6-DR i. @ yHIz8͊cOѬI5.㣹d/I5SZ`}eMj^SL0]{َN1J`}1c9^G!|:br.#=$y"rnp@gc,ެC"nEWA&{Xaͨ[Y 4]-3}X5O54HZ%ysy)DO:c!W ˺~]':q3q_.oJ;6L>8g`|#٠|qF8#w!sWl$?w iՕ!RWπRFscoR>X< ƌf*ym ))󲖦Z=[j:v}jk/y~D܊.V'.{@ K}jbV(Aw~p k9!Y{J)ågSX5Luc{S дy)qKW@; +Wهɗ ؙF(lcl.ium78flu`bAB1@˲j9@l> uɟ^*l/V g/6~}6p)3)Kp!$lm!Cׂae:wq8;ؾt3-^LƵQe[c@lQ CgMϨ`E}Z[ZpF,IGe¯ ;/Uӧ6?׀߁ABp:]ߘvo'AFGʖdն{=0"w(QQxUXn*9cV9^:YC{pHcMwh/= hP6ZWh>LNʔ ?-yDtyX>Aoyt-ݏ2=)J%-=fee<;FNCqz=ՎD "3!.cD,Ajb\ṳt +@M@ BqIN^Әd}OV|e爫@}gv/՗lƸ|cE뜴CXa=yʵb"p$'%7B6V%n֜=wVބ, jSSV evڶ0u0ug&=7yN̙n2b|/V`9Gbq6 G+/Bإ&XhH!sIE1tuXSE)DchR^v UQ xuKeuԳ**q 'lg<ִLN7wY:lМɹ讂ܿ(Vm8@BϘ'j}])? RDN47]q Z[,/ժ{rbi8V)Kl׍@Z^BgE,.etmg/?dxL,)l'h"O6{@ 'Z ңX ĠtWl<_" /Z S/F=&W8n*N^STv,H5%ڋRꝤ{ &=(tԘ#@S1j6zr4OylQE.X^GWB=Ovؖ\ixÚI,ǰ͜F-&Ecċ?B7_`01>K8c5f^bX7o bںG~f۳/P6d szp($lWVTr،H$)E Y\!҅ǿSeDdѳ>>D}iBgF k|BW%kA)ӐLe#=]YA8zs)ToA N bKV75Cs(l@=hwxn6g%<5CI@C)18h#e85QĖ(h4+sjh8I1z_z ٪ +U(uM዆5<^Sĺϳ†3)r@ '|15Nu!$>22lxZ->Ndp93cS^/a="Nόe6(N, _fPڻѵx&?;zk:3it>Kiħ$3nY@?| b vC\?+/wVT{mO ^1 bHۙ{KvS&HQ[btDׇǗɒ2>4C dݟ0ݿWA.?^<b*p/{衮F uA托WhJLKGb)@O&(p+`%r f*)b|apoUmBSг!Ajj]e)(|Tj62.ڵqý:\lH@Ks!JL{]\![nTuA L=DHvǮZE>mC%l 8[Rgׁ=Mzzvw.Vn5׀B&̹}􁕷cA^M8EZK'q:Ӿ2HCDŽ2p|"=u]7]~r\ ўC!4+41j7.M^6?QMs^(@//B]h z?ID+z@5 R<O|BS}Òj_l5h_ Rg_J$E+YJU A|Ff5)8[1҉rstl<5 QDUlX[~˿7P'VzuZe!~V]u[.[8[H!fg؉ 'ʕ ߮9=iJq\3h?FRsʁ CD^hӵO7.8e^ `#YELicxA)gst*d4pRb皃T5dJ(Sx-Yf1Ub\ȹDV,T`ǩ;;]ٙ,s $2j*NVpr!W';bI?Eo?O}ߔ^q:IQl?0QC-]B| E6K18. xtΜƼ=$Y6(y=aŽ}@e~JRQG?EȒqP䷤ueF_!*:a0ArcIHI*uLRQ"!;g^h𖥒X0,&=,HO0mQ{r%#X΅O f_,)B{SkSY/>jJ O˂lyWF=&wvB v/bZ&B08mT>\5aGMHM7A(ڣ\n>v$9iNn5~h h2O6?pX3457ULk݉pgT{w .ˌ .оL|9Bq&*EyvkCO(wo1Mz.nrM1D'<ش(`tSWxXF'2GѮ A`& |,(GN E M@?v@geԃJ!x/UE'0KM'_'u@hҜqfZU56,mZG@9<˷ݒ>2ƶAjY;j֤\Am8<=DV8V"j%:b``\Sk͌p*pUX_G/8pSbǮMaJ5)H K!* YW'r1AonSdV6+"-. __c9Sqhj.Uʹ 8xZr #/y^^gLWZ¼q6|aJ ?|t9Gp'̭$e Զ`r Ϝ(k,ުg6GpFu111$_(eI뼊)K N˻\S&!ޙ~%ȳc¥,;N8lhaeġ^}e`KNA X[rXI0cjmbF͈AZ`U79xV,xUӌ=.E[?P NAo~֥_)VjͽTjmݐ21CD ۘL=Z*OB\S^RFW5/dܿc8IX i5&GaT'ϵnWu<MNmL8xu&+-t)pͤp΂)VtR2C3vߢ*BFpyBi^M/d' ܥh7*|W8NQ XmnZG%SϹSpK]pnPe)eSO!$i,&ҕX{ oH*rB?U䕝m?lA#,b-pZ,DNgG M*ʤ4/D:y-x6B2.3~2-+ E}!F=FkԲ0yW>8"."kͺ_Jdp#($m;b15vNv/xD~]yT^ >$UCc ,|0 RS]9[B{[}SbYy&w8Fa 6$+%'R5喸+LLXLJb" 11x2D&4 *[֞eVoEëkUx\n.$Clq\{L_L}YxZ Rg|BB 3BQgՏ4\?5A9VtlbP!ZMQ])JJoA?pt&ewTg=.T ͊%GIXG($+i=_ZdjVg/Yy$ｒH\Oխ0Gg-ZaHЭ|I;(O"n- XD^6A OA=92fWzK6KwJ Ӕ]_Vک%%B^]*B0H?_e3ؗx͸zse8w 4Dwɯsj<۪|-S<5Wd[Ɨ^pkVxbN4d+6[Q+.4+{#A\{{v-{!ի淺%ȏ;mmU`F8Q"ʀhX:GLk%kv RU/8>Ra4W[ApcFi:}ba'G3۶"pEb#bhcFa{F[3Ư9[-} O[bɩ'"3ThߢٗOf꽵0rd>?5SЀ3ss`i;WPܰw҇]Tu>O&Jr6`+zr  Ey" }8pPŕ^'Wx'fuSByN \l&V_yAC=Co#4%f+%P(|l2 d !- s#3`'DMTFRD}&\|E0)}aeXaMh_k}\/m,t$)GB7SJ$7VF  *5w`˔C_UrlA#C3}<" 'FY y[,/X3LQQxcKpe!y`|/cj\~+MC47Ѧp #bL3yA<^V~Z@OGoD5^qDp8"] 0@os9}e=@Jhkal2 Q-fC5"ѺؗՊW嵾r,Cqw((r"M)S)IƷXN@R^jS^sÃ"Bɧg[7[! 1дڣ '". kWʓVjHU6<@ͰyC\EğE%L kzvOӅE CGHSHw{۳ 3g"%(a] mHMw\R05Cc%#0>B+."9FXiJrA?L;RF `갴/cR8p|XBnn[`(MqBA:Pa;'@:j "ݢ>]% 9U E0Q}]VNJk)V(}Z{FA fM3;7ąYgfa\6[|*rTɷtF*'/dWlH4MK7.{22ZВ_EÜ_UWK#aX@Pm,N:XޱѴ[K0.c c}9_zЦ'fM6eC")r O|=LkJٍO r.FbS~DJPSmTn溍 5{/`}C VUyt͊z#DJ}@m!Ha!wJӰ\SG 9:y!f/kCEM ZHrq!Q;vûkfUm]2)!hL6zHC}J:/$P:.~0+Mg!4Ϙ㉋ ge)0&_ !o9(7f'wFzzՆy? 2hop9}i9> Jq$}7=kl Tkk@Z8dYKX/4gzl:V\/Sxres?Y'U ]9QڟJ+WNS-$ d䕻 * xA_}A+੡tӠ!.p@$_kL.#-+0 yU6">5UWK?wQI>wBB)ptIΚVZ[7'JxXNRuۇW ηfڎ.$Njfdp L—I"Ȥ(OTnz7moCg}\a-a XHR`"o2Ž2YfDgF4٪x6MB͖Q9Å[V힉\hO` p7yP~c\.\RBHYpN|i]>PTbB܎Dlw 1ACМB kMm3rm1"BbAֽ瞬oa,Lelͨ TP&`Sۥ' оv<U'WO`bS6` [X f_/Do^y24@5'{W@0+=ct8(EOq2t y\N( (|̣~z6IeF*U/t0;r_qRJ]KJ5i{?4ZyR•euYLmɫlTs {] )~P7#qEU\w <};b'1Zle(trC>w5H^f9~]7ߪS#.!rPvzΚ*}ٟ[G$`ǰ7A)0`G}]bsC20q$CqZMY4zLt7Q;cٕaO`Sώ✳ ̡-r,= (F @A( HwkvDK;ͨ=@ݐ$A0pDL.!s*3H 3TikoLYK jIN!wjt;Տ۩*BҀ4(w W)#p6lQ q YK^[IUwmf;c7B*FT? XevI!g"ؓ]ԢrC21a-:}&ъDeh$R:_<<@*1*P[.A_nv.` RťgyHyxH3rڌ$7䨓 z@9cҠ\Zm6ęht-,z*s1!vB?|7VPEO{T0Ǧ{d++. G"܍G/-DIiBx3\)OF ٗ'\V;I6u٩bק0!dx~ksA,4gYl / |]+˪JxkY9N$jy)(1RPN_%1ۨPAt#u#Ƭs3jrF^_R.$/A&}P4)e[hppC hW9 s)<}G vS>P$,{ZI85UȫM';PXԽP#[ūr^E>/7 LȇzP@ |gۭ ^1g  eˉ%<śߠg仭ݭy\6ڸotś(؟ ;)/Dg8#ѵ55M'+ަ2BiiTbWzexyxxV)Yd>sdiNZs'`Kns=D;zj:;&`Z )\%Y;T#[ĭWλ8핹m?oWt ,%&BNq K;˝6N,Gy~8 YW<~ Sh!vu!mqđׇV|4jR7!ScDъi0U Cw=oEK4RBMhHh:$uB8wj9ؕG;l?,w,l$qxvҴiA!< _`3fւFÇ׿r4̯?s[*0NY4a&Y? -kd&7I[NDc83VQq(iuDfdZ}1PRK[M,Ñ$stS07VP&fMng#N(dȦ1jnKK+f_)gƗk}m:Y?^KYWOlJ̬y`uRCLrVFb2;>Ӽ9 \k7]ė-hm/'r& рR(@6dIgS4 ?syRk-x>7mf-5QCíEh9v _,h6(o7϶x\6zd=fk~ :oqE6% Q?y,K)7>6!i@w`^v7w͚jt7 %acaXqCT7ȡK*&5N?"zԅ?#y(Dġ$̠o;3 mxҦ uc["Y l C|etRR:=)'lZyN? ~:G(-̤W Jâg^6\v嚭z P{(I,]k_+gp@fE±/Wd쫀;-y~+ @xftIyd!2O*CgD]5+4xvX:?mnAwK3 3 E?$_f(vהI惦Dv׻ihYWJ Q "B77wS8pY#la,}p`R^2ZTUKmƍcCgAcڦ b퉶a82=CCI;kLVUg-0@!nB;=HNNiԚ4E<4Gz=0!-Z: 8KV 2)- M$ {h\ˁwzs=k\pFU/pNK@CAdJͅR qjc]~t`%pʒ;sI=޿C;=jH\Yh#9A>@RCIY+ek"~ؔZyU_Gs*H? =. jaX .A=^mM%&GMg7JumbbNWR;סi?ZV_9CϻVg3Eݑ h#0GD[ 'M#?NL$djh0XFe)Rew.o=,w83 wXa(zh=Ԣ9KH4-@&jAbօ޳ #ij(ףϊ9&Pl<= *OzjxtT>ʈBTiGӛ'aa;V(RT/:%SS%6ݩW ? O)֙`@96A:ҿ*UmDq O6X\]W$|P $R4;,7/˺]eIGMu"f j\ΤKىpq5 W7A## I-$FOȳK5*R]9V]A49XM' ?ާG@2^X& eDjP`OS{)1ĵG_j({1~]e}g7 *Tԝ*9]Mvvma }=+DA]˨n~of 79Hb\݀b0w3t۠HcFN5sbtGPxRoB8 G44guh8"o- {8woYlyY~59{Fe]l{ZJ?vhӹytwk4%bZ+/n zR0A =^6T6-Sv/l51$ctFZg1\fޯU%vEar,ے3 pvE8_T6qNwLֵM}\{ȿ5,D?-ثT.-2;⦵R__}aΆ =gL? g5 )PE-^&gppp-'؜JrKiz[Uܾ;/9HF 3Si' ]2HzX~ a,T`\OmXtekt jlFw0!zo"Y`S1&t!qsMW n)r (ޭ Wܖ3;a%%t Uej&t@sg R>w@u*‰WU|Fzpn[]~.?,MXk HO}C[e\LLhu@b܂y gɧVM:84H]̪xMd%laM-(Z N #DWpbNwo=/sW|Qs StetZNdlG {)% {1E".L\;P,55^95ĠĻȻk.r&9rf)ӯgӅMDnO1b|Lx_R\FG PP0jEx5 {Pþhe):B>(zB S N{1ABGP$:Şa:ՕSTqm-\\abSZk:g ln=# *pJ1K^h8dFT+#A$o@D3&cW[1kuh3g5~i/3H%m( & Gjۡe? ^<;/ӕvReQ-P@vCEA}J>o._or+nU0O7/g^K)Gkkh߇ffB&񰊡;3 9U΀8T#\UC,+x[KWsWm\XA)`SE !BٛazO@Lp5*~v*Nklsתo8f#1S(@G#ؾk{5/LEEFѺf^h Tl7p)G)tI jT,BX~z dK~nt G W odP古Хg[|LƶLgyqPmvK}p|b 1D-o<6Gœr8ѽGyWjS5* :@8(R'"CovD#$ܲ&8{gǎ@[t9:|+nё'I.35QcNӪQK_[ZP!2&jOoX="ޛ&r7\(v(ƣw8 J䘠4hI%>6 HxfZtmX;$FDMa/unS{"?tƤ'QL8@&PW8#7;!&0yHG@]Kܡr$x0>>izoP` @&1;>=SCi 1cN2?!7cJ4#~y MNY:o?$HA^,8}YWMn6@^LZ`4_8S<Nx[=xz"?X-,yxz1Tj3g4  ,*d,qnv2vJHǸKf>X[,HTO歫v^">:͕Z>Oǀԑ9U–}y c`#(tE p g8%il&Se  T9 o!`2DtfuGWuӑ{.+ͨRJ}JW6ȫN^[LU;ق-f#?ǥ|kJGRf#oRJq؎K2HL=UG*P'$RK~%VM莿tE:mye37($\ m.cKoi)~U}%Sjvx[L%I5د5/\Nk+\7V#& LpS{pd_!vMRS2n-&U\Mdi ry[AO 8V_7 5FÊ,SgwRάR5{`~`Rt=Ui`']/0t~b!&Rl@#b@IQ7n Vg^qSgO|cZCϢ[&ѸrYrb JTT vx2҈6HdG4B_= q܎lm,G (}&PHik@̊Á;CSV_J5Ґ(Z[0h?2_CXI|*{WkY{A&SC'!IP %O: g#U&wC@Jom;3r 'Mś86 aRpI~fḿKSe4yNmbMF>'PdMwk&fqn[쑤!(٣v!5u=iW͕giqO&;16QjE/378C,Rm#1C=I7ſgeQ7$l&:؂?c[A[<סyӔDU Tv"lL` 3˟Pګ`m"vgJn YZ