apparmor-parser-lang-3.0.4-150400.3.4 >  A bw[rp9|ڗHMjj3tw/vpzF-QVH&̠UX]d=21ǨB)b=>MB ;fR$@w Ф4;ͷM Y LqKP t1 IT /7#j5Mt)ȚG@R_ͼwdu lz@Vݯ([[0,o s|_u'HY׋p^k BtsV{|֊RM[b1e7d3101bc856c15ee6e055b72462b662187280bf3f23eba9dbedfc61c6c4ee5f6bd629a9c918ca6f05e4e84c39dac1b08374a7|bw[rp9|7NZu,t)._(o5$A?Ş3WFzp3nmV4esZu-'!6`BBd^//Aplpt+`??/I(^C sY& "qY|-DVۊyHgD5ij8E֎DF 40Piެ&l~Ѕѡ*Yb'vH@_MH&r8Fmw@ߕ& }&6EGnEyVv.\S\ Ɲ>p> ?d ( J|  &0?,? ? (? $? #? d?`???$8(8{9{:${FG?H?I ?XY\?]?^i4bcc dfekfnlpu?vzCapparmor-parser-lang3.0.4150400.3.4Translations for package apparmorProvides translations for the "apparmor" package.bw[sheep18ǺSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Localizationhttps://launchpad.net/apparmorlinuxnoarch2-L*>)J{%'G@L0E E+7X&,pzDnG1E/ (*6+o2++X9YI;vDDzT''́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-3.0.4-150400.3.4.src.rpmapparmor-parser-langapparmor-parser-lang-all    apparmor-parserrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.0.4-14.6.0-14.0-15.2-14.14.3bk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffsheep18 1651989267  !"#$%&'()*+,-./0123456789:;<=>?arbgbncacsdadedeelenenenenesesetfafafififrglguhehihrhuididitjakmkoltmkmrnbnlpaplptptptrororuruskslsqsrsvsvtathtrtrugukviwazhzh3.0.4-150400.3.43.0.4  !""#$$%%&'()**+,--./0123apparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.mo/usr/share/locale/ar/LC_MESSAGES//usr/share/locale/bg/LC_MESSAGES//usr/share/locale/bn/LC_MESSAGES//usr/share/locale/ca/LC_MESSAGES//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/el/LC_MESSAGES//usr/share/locale/en_AU/LC_MESSAGES//usr/share/locale/en_CA/LC_MESSAGES//usr/share/locale/en_GB/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/et/LC_MESSAGES//usr/share/locale/fa/LC_MESSAGES//usr/share/locale/fi/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/gl/LC_MESSAGES//usr/share/locale/gu/LC_MESSAGES//usr/share/locale/he/LC_MESSAGES//usr/share/locale/hi/LC_MESSAGES//usr/share/locale/hr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/km/LC_MESSAGES//usr/share/locale/ko/LC_MESSAGES//usr/share/locale/lt/LC_MESSAGES//usr/share/locale/mk/LC_MESSAGES//usr/share/locale/mr/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pa/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sk/LC_MESSAGES//usr/share/locale/sl/LC_MESSAGES//usr/share/locale/sq/LC_MESSAGES//usr/share/locale/sr/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/ta/LC_MESSAGES//usr/share/locale/th/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/ug/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/vi/LC_MESSAGES//usr/share/locale/wa/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/777f32e71f91d8029e464d490b1de4cc-apparmorcpioxz5x86_64-suse-linuxr'P )6apparmor-parserutf-8d23c991bf66873893d32d502075f8b750c51769f3cb0c537241220fef2706b0c? 7zXZ !t/] crv(vX0?NއX9jJGs@JR`OK L}lr{:.݌i _yOyt]=īF=𚌴A(=@qF*+Ix5_=X9 d FZ7 Y""kPS'm>1^ 8 #i0cHbN{TD1F6ٟQF:M愥%#VO/&{_,ޚdl"KPO~J)$aZɽ:Eق$T,V%&cX5o<,&).Fz~Zǀ*͉L=/ {d%4sc< uaB?t\[2mf qT 72[ʌ`7&0~t?v-Qhn$MBE+ W *DbHn#"XT $޲Îb:56[m\Xe+38U5SZOJ ]|PL,>Կzg| *A֓z:فtO[pIPi8r\i}:$LK/H^(&Tg֯TNfjN?|J&wYds4͂Sz.~)OQOp= 7vY*a8KdB3SLɏKgcLhd؃:k.."gK &\Ls{ >~|v)_<$U |;V홧l$iPE_aX_4L?BWYea[if .`M5q6C±R1C첊{mBJ".ڡͷwL6nWfQl/S }{TO K3o cek @Fv7FZXaV4jvE[%@;u_5IO\ͩV "K}@uky@*b£ۅ]} b/DZ3 ^d_ CVE\鱰E~%^Y@\I0 >cS}OzLdOCL9ݟefv|幦lQDD<3X?Y А/C=+6BA#ҏyy_ \ )!ڹ˰UA,/#Xɿxʺ|]qA1S= aǪNuزְJT1[DU:,Q ^g6GVZ2ejW{cֶh>}ЦY)T 0ݽX2 ;&\^'kd~B% ="6,: \1`Hq1*'iȯ]4b).~T1ASWO8K`? [M5wL&)O&8g;QđΘt^ vٻ/~dfˌ!|e HㆶK_͘ 9,ëv"d=Q+ڽ 8a<`ҡڃpjzR(cg&NCF(˺+> UtXae ˧9=\:Է,.C_d%bL],a`w.ߊ].Ig^.psh*>ʝKE"Ph?YB͊gѐNdXy{45ྭ1gyirvCITKNCݮSlyM*G)zNiN!h4a"MpN.=+O`?,Z *2/$;-dX!vaԅJ#uf\7c@ ,)IZрԺXN91u!L(PY; `OQ('beى͢ ]oq,K8 {u9{e%bO y1K؃Q2(Φ/ $]ot]="ָ¢ 5 `SsKmx"$У"AdA/H5.ZG6ȑPz>/]azYNW6IQ.ӕ]Jz=r;+4$xgq0Փv `&;oU:L-$Hz٪?.bnGQNav{DٲD3Lg&2*Y $^*i2IY&c_ߩ ҵx)ww|;0!)9 )N/fɯ"FI3uG fjƻlX/ Z`$P)lŧcHUaףR 60ʎc]C<۹+U#VIy^7KNX6+_L~|6;k吡D[` ׹g5`R@㓡t7֯r.OϼTr І(4ѭw#{ bϊH_r-g" 9,f[t>jZJDAFT=nHppZc5s*i`6/vʓ,_YclUg4,/!4 hR 'La"ۙ-]؀/ɽTn֙:4-ͣ]p M<㜹Gad^:*N~/,@0M4v3AWH'1\d#%܁vUj C~ ?).'>~DX29/OY(r4[\]T4b 8 sY@?@v \h-7k~R"$CI!f^^+0j+>G9KbAkttIr gs-qFWE5Jp5JD׃P(PWg[jܟ(,Kɋf4jPѩeyՙp{*ڧD]pxU_I w!ǝ"e(.Wmch^dWjLsrR"C= ;EcGB$8ㆼI_^P}1&W\pp3+H^^x!,iYc@OWMZbU 9QYa'wT/{͕ PoxDGT seNR@"AAl]=5!*0kc=v)xņ 6sd~pj}l@O0_QZ0=8ItJ{[gRccJЕX9o"jO dUAFBRY֫X33z 2LN}6{~ˮP$;K5@0/G ZSk5֟srǮϫ4[tȵoiE%Iռch \? ~LK؎e?P 35wxi|S/)E݅MTbFj/KTQKt1>ݮQ0y7`lm:1*#lo뚓1`\$7iw;.Ux6̼SǾ"xh,P$5oE|) J̑ =NҰwr[bG[z6#b)s|돨: NÛ ʏ"N}(E\ /~T'_\T;iSKMG镻Au̺$+ɕo:ԢTHY0]#bʰ;2ԑ<α&! X]yƿ,y1s#Ai#JIxA'k8RITQc#!Ծ,K/q1z?hp#i̎ZP|\-Md Û2?;Иta ~7) ݴźJbcH_+*-݁wCfS"YHy\GQَ xp:bz5>EdW3a30  5t,y,,Z]ӁMH,aLJWE«K>a鳮QٯFm Ɣ j>6aoۯ-ߕP&/YغOQQJQpìPʩ(*J_zS0 b]Ke|Qf^eh00aƖ?s@AY"HhՂ0'5Cޱ]| >+b&yb cB4_ )x%Xº"u]G#x>쬼 69DԆj' ԥY7wr{X6\ښmb]:`HLyx- 3`7J;ZEЭΦvFLc^% #<ȕ./ttUDu 8WY/24G 6 oJA&j+|23$7RIF[K o6*[ ?\ۛmTg"uTSns'<:xԣ@7-k'(ؤ֏W9Ҥ "A.x)dVOf`zoge\/,d|Rb trЖK2)!d߮p~ /=gK#lE?P&ʸ6#\.fa/m7UrIܲ3XNG;c2F'.9IʂʏiDAէ©s5@azUį̩s=mPcu ^Z !ӔOzMIiªXQiFB x1w,>oL+"ERD[ykhߜp~lPy!&n"ؗq |B표xC';\"Y67\ `|(/_b˅:ba$۳=ܢץN%h6YUJϱ:_- T-yA9}Ԋl2 7>1?]^عӔ9!~ 8N5l2)^LMDpi\+LUc\9SX00d4,McBNw=Kpn&51>va"ryz/_X-ȈJ#8BF>K2̹92bQ-{4 1 c8(RR7,X>}q x Z!.u]dHi:TOd :PDNi %c 5%e"t vctM!7u`'fq1mǫb+tਾVr|RfPUjD>Y0A8=@V8g6A.oIgO^g'7n, j߁%++gYmVG;Լ 6ٓ1z>3*d^> *p2vzwGd [PEy" l%|bSFlc7n&6,'dͶr kY7/ѳu`KP%'9=Ab dX1N^sCyĝ.+̾~%uzbcI8 `JV}DJ`aB+=D~KE. ü:W_SYb0_DY1 F>}>`Wsvblvci @<ٺtÍx]L0"jka>o=Z!a1>[nN.Z@ȳL+(i/JO8 I'>A҉  -LaAhb*<Ҡ3>?LL sFI fdEGl:oYX1XCWyC)kgqL俫%/ J?LzSĎF~1RvTG}Ae&0  !`29&2T?g:I֯)Gn/kHI'3>f+(ȅFN4Yf^bt :M}X1$*eke:*o-[9: ;D6X*iзcոkÃÿ Ge1}xhinfqK Zw)ĐC4' 1?P=D ֏/ӡ'[?e֣)^j]0azY 9u8Ciܙb:tlDKM1߶q@l:u~6Mz90z64LsYCWՕ:uv[sK˷<4L\g&ʝ?8vrӚb6eN7LT:"y 8@˩i/Tw%UV%Ypt xx8ߛ7pD΂yk却C0Wޏ{](egZ5< &4Ǡ>h#wG,BkIݫTO C_ܵ}+zjeG^pr A^u{dxmL!Z"d~[[A{"X8*vkP*IL6TZ*Bxu@dHGrK1QFTW Niy)%jŋɬ: 3>߫hw.7*oh= ((,XY(sVU:A8ykrǎ'T.70+N^g@I;slcL Avxz_Ocј,ͳc + Bu X+/VV!}Nw1O-htjb*ϣ 1';Y>γ+)-,_Qߢ<|zu^3)sK,WA~.hЅ;ɍ-P] %%@ $zs$ Sk +Y:eH[w)[ 4z(]*#j.;A7ª<}ydM|KϽEZS4@:#-Q.ѡ@rX-oEDŔ8X)uTdř٦ o͐E Pɝ8)z4Rh S#HlR;cg AJf3E?@nP-m=Fln>ƶGgkopt!s8H/B,c.жY5g7V8!..a{q;PYc(#H7)kGD~4D %>-D>\k|7W&SlvVg`.ZeHNcfѻg2;y3rJL}/ 8x?sĈ2 EU%X@Ԛhp).B=)YdtԂGU9OdIC`qƺV@l,RQMKFn;&YݤD81ZVyԖx͝qY W(!dxAk}uOwm08榿 d_m6ȓ,{a'r kWq]/߀8fBw\BPaՓӈBH&N|Ge&>]΍IGŸlYJƶeޓg= HK}?exޡ+B^ C=#Cqi&BwSj[1O{C# YZBk{g%JvHlt+(S> Ӓٮγݱ{/MGV S2q]y}I}[RlϷez)H9`'NYRˢbyѽ 7hN$ XVK ɼ^$&RZ8-*<‹ )qYV FA] .2WQHC[,]q8Zeym}ʆ{t0%81PwA9(p~ _ ;Pz% /O98FǍ_<NOxW@f _>jw\̼&މ:Y]fD)ȓ՘-7HKlz~H#G@HG4[*sHoKnkKX/@\^F[*<`@;,V[>9O3]hʢ }jkm`+$4XQ[ʸ\E,yM#`෮P8L#c 2>I4g "5yJ;K#q)__t74{֦NZ-Y2{@mo=cK(eoȸ|zyERq֣:)sx4[5 ( XXjܙkM)b&DFa@4*p;PD&X^ ?}JK`3Eܡh(f|rwxT (мed~^MGy4aY:#j' }ߵH0i,3ǨhSw2#Jxbȁ (G'!^v>cV,WN~cJE*7^&8 Lm @IgY %6:P619.ZcYDX򾀝<|oyti$A. r?DS~#0.ܔS_aky o(Ѡ?0?"Pn9}5?D~gs=rDD2DGntz!G4=1SD J"V6yT4ȗ$HQ DH_TsksGSph2 }9\bʜl]mrUy[,h& 'DQJ ;D/шc˱*=tEq=H@4=IXv"|xyN$&wDv]$ex  i8+6kklgG$4'C @*qכgsRqɓK3lZM /zc?~wW'y2+6aVt~E"elYgtm{Rr֖$EcP.@nn pA-K,h]B J/ yh~؄$v`͖_OS2${E }b|/~\41 GPκ`؏[PhkIlWe <,]$@.u;?ҿHFc2`Zo`!,T$Fo)~Wuy ti-bMAvRZc >mɧi|,Hga#cLmQ QmrT>̦qh&^N⿉cK5ogeӬb$Xrz K5v Zh.8㾏z/$9W/N~[7 TCOft[ЃcV|^."!7efӨHwM<`2Ro1E뙴*m _'n;$ۄ2n4{/# OWL=R`" Ɣ}/H'pҖñƤx'ݼl%T༪d=$b^hUv1;drJ-ϗU z„W'g1B2T s@ 1vR%Z lL#+'!`*H"j_'q)=/@nm.%t,п[wbaS5\#Q`~0~}BwRڢ]s++ Y}gcYLCY1c=H߬^`E8 .%L0vܑ()KPZ++ V:պ}֧L6lhP]xb3 jUQHF& M{zadCͫOlH, D8ӱrr60,惟v+p:̾ Ws 3hj79p5Qe ()2t#4I ZWD~8)хO>2rL&˃QZһB5ȳo(˦̽a؋ͯKiĂ-m({ݩJfPcT<V&f{iʗV{Y.Mel&,0"YC@Ոq OIP<HnhɊ4m-1;pX2)%Vp`Y-AChs3!ݙ)&P 쿳h0I\ksRAgE6>\+S$*e"Zn#}9~|ZTW,ꮜ|xydJ֑>/Xm9;Y%zU+CEG0WRdTi4(1!N Hp6B`Σd?ƒ!V\>$Vd&1@[ Bq<zb;E+XdSopilJ$ "e˟n7AI]A )M412\SV#2љOri =; 2tr{e88`ISm Jo?"&% -\5 sf#%zܗ#S,cN8v.aZacΖ)O\y|qlvN`M$FxthEr$"sj3@T1IELt}鉾YoVֱC&$9y=w (ډ๺^22A[4+?m}nfR^eAE/ڌA;ɥF)H1@8'Q/.q"W.s@KmiA*Bck0V))6qe/r;t0$ ^LRDJl2Z5HF!l>("\"ÎWS]v0|[|~&#uBS"tٻh]Ұi;vi/PxguEG _)\ FfHg,`ۦN4zGMnutuCdh`\$#.p\F 22K@<"sKyʰ#L zq5 :L[6eU]b (f?(3KeXq??pc8W]/9,@$`'mexmX{hmTF#Q(>Ce`?Nd= NYԿfb AT[YLW)]"Zk1:_[AP"}Ԋ? ^* [ء:}r.JDI?Ɖ|}L]DEXd6,8Gz,KTֲXh-hCb<]I{S`;~X PLz?m,t @-LmY렯89oq'JgJvS(jxE=0.N{Tȴ_!+,p<~ZZ嬅juWi[T]rv4z/3a0$kqJZP8:+PPʵȴ<h&Ӡo@ԯc["j`|@u1\QϋOؤQײY5x72l3+R=훼navS1:|T}K@HSJ*\<Yc "TH2&!Mm+j;iAzctlu[dxc6ܟCb _j#˝(:&]vT`40G2Q4FlemҺ =U0>NB8W7zBȅ*CVlKϢ7_'mC+'84ʲ(>1%fCʯ5Ɣ*>]M)ZDdIq]Re"Έh=p|EDEB4aR$*ɦQ`i~J(#y14U#~P1Ӌt[ɡ ! w:tJ}'CyeMô%w{`ԍ(ơ7pOcAQOf~iȊ4թǞe/sIr\ ݫ;wߛZbSO଴'rq4w!=c &jbmQ rU0f-Kr4."9. ٮl&~9#~bS0zH&5@KZ,T\ g._XJkDWKQ"F Nh:vp,YƃLQd{L1^PFBFi[Cڷ?4-(嫙wZ28dvTF:Oռzn;n%zEԓt1.,[KIZ.xUPx5s H *5{J4]`ɠaob٩Y'-֩4. ޔGBIB>NW[@ȌcHKlgq"P.M6v6t=}smc&|Pa_ṣ+FC_d!;^@ J|s>]#?>nu_o-~Vv]ætT/h(HrORJV*-:˦u@A'p=[uÍ0;4An!qho.bw;ݺJGnjN<;Mn? ߋTr.KcpQVO-aBCĨ.Aڒ*^hT&r&2pȔ@dNNv3gos3T9Ky$ė1"zԊajը/?I7}&0CC|G .x-.ՑԶ_=;泞0Eޝ)"1u+B= _C7hue{k"-G{ǂvL`JU/zA:רF{gǃϜ9Mr;-*Y QRsU wFB t|}*-ȫnr|KS3~ xTM#^؞4?XڼCZap RFD Ncv+9f*¯=ڛGhhRU2=:Ki9= eP {k~ -8h޷Mh$=x̐5 վ\&o# z,lT}(+gz&?h͌%rJ /hrˎ^ZL=w)WH(Ҙ`9Pǃp51#y h!cU⺘p6KfCDkzv1aިc~Kp%(0)>?yCM38 Kp`rTN5,2vTp0սgrWބYh_^._ehb9wj-M޼fJh *ڔ٭|vЪn/_yˇ)8\Ka îTRad#o1@ xG[,lÈTgib#{zֲmׇ-d .+R-IeHJS,@$*x8ȷ`*> [Av]wk f珎֥5+Z|%qO@j0]@Qt[+t "!ܝ3jRϤ?VA%HF6dd  FUbu &ҋ('67HֶwƊV!Ne9H]l*!.㡆 +&9"yl3BT>1 !22@z-}Gb-aD~OV ˆ7Xr A#bigup %|2TԚѧAaaB)Ɂz*&WuCn' n_zx~#bXr!oylm#?r#e9;>p?]HQ" 1w[mR;(S_56@N{Ƶx5`N=_ QҮ0wSyj]&)s9vT!6Ga&;߶p }.g^jEϧ? qHW p.(]AlDh:}(dH Z6oo],Ff{˲=+(&Z6#/PoB~0xrCdIlg2"9 NͯZ|X&wvE^N~ኰG^6>& R)eo!9eٌA!iַHaYtHBiE}޶ 'ᶯyDv|'z{KթMwVE^ǩ{xo[F(fJlfC{ksK>9X" 9I'{$=r GOWbgr. Y ;o4e?1_rE~`#> nf #!Z,PFwE 0Y-4tK=B^͓ObG`qz6#D6 x>o~Q1tNIQo0~1<Ӹ7ݖ!p1eIGcC48Y4 9hS+6+S g/}#l*ZgA|N cqybCS:Ȝoȯ16{mn|o袴걦A䠙B4,A׭rzjz3Dhh(Oe +q^B2IAȌ!\,Dbwz\Q&PJlrי7TҴ;S [NûHlboJ؁՟<-[x-q[khLfsT#yMP[$ɅM5C pDl͌P]- Uxyu﹂("RN:ۿ-S\X'&2\J9SF^i 7fƜ5pf햯)\7mt ̓|: ۼoew)WB\3㝛O$y+bz9츴ؾDmUae ّlzK,98!nFDJ4*- 4nn|z˴o3c h"%e[]Ǎ+lVb#إyC?{3]y,;Au(9#>P IVOaEv}bw4V)vuĕwB@ɝلs4WnCR8.4Hcsd%h IV5YxXqO5ՇQqMp-D- ˭S}*h<;v ʰfNJT7d ۤ[XTٱГy.(95P9rsCc//lM"(IXX]0r/!:0şXD.S"$ʇvG0 w<=MRY I8̥QPG=3c!ؓNMIEH70bͼϗH#@rQVBwl#[vEc%="꟢b*QաS7.V>r-DD+lc<%9b1B9_P 2nrn }ΡbVʸ6[ jt_?U瞚BdмvSkөĨ[8h}e곐{bqDl#_Aah@r[QSL|AzwbU7NMdÆ[D#YC.[Q>:teJP 8#1} "Cy]E6'~Ã0E-[.mOκ4^G}2o,tA;5&&DՐ@6|?@w'`<`&d_hJ=?zG+e_+YQ~I(I֚ .`C("~u(jQ Bd3TzI7 ïɌ8b("ّ9-_`U2 Ty梨߹ VIXܿaqwD*&ѿ~/(h@POڡ%**D=cqlсcʐ1醹hl 7b4Ob 3xJ}Lq:JQTfaʐS0Bw/^͊ g]9{MWmG0 %$`G`&nma,Y FXޤlX[ ]tw~+TvZ+2_-n ^_> oҊ߶=MU}n\_y1&UQS i&%WEuVdO8>) YQpf/$2F`j:&W PLP.p&i; S?>$tW#ş-ut. vpB ^ahNn"I቞˜@丩A@BK%b90y%8?3졺L[fMVuMZh˺#oG(X(>}FnzjCF#^'PҤ+Ղr3PHuodO*gUǔ5'  VUmTs ʋl6*`  on5ᮉ{;;[|bP/[#ҪnɳGS-*9"6$n_@_g1 AZ/(|Y*jJjt> Qӗf`Mݒz0D ZDP*M,;Ax*7:YX!??rLuUn9]\O TdƁBgv7uTqjb, zdՇ`=J}''8u*(NLf8-?@u6+^3uC6ys,hUj6}E#(;r; 9C=oQWȞ#d5~K"*2r'AfPʙFn;h6$6p +|Z-C˜'FGm/]:,ϕW .d_*℗{;8 *hA+KF[%.W(5c_Z>V˒vV2NSE5@EZzX,Ś8GMzp%RbExe@`;~=ۼY+;Ɩbn2XM.V&syYuʸTqv`QjhCftH^ &EV&EٳNr sts(^`:b: ˴c}K=xl36;uq Iz|z/(oe ƞmעbEOr⠁sqc6,ݍ"2XkQv|L7eM#"-/Ⅱ8~^%}WyV>yxn <3FH.Y:ABwAΚ19wQ߆Vj5LDG,m"B,)=y5-vǧ!52W "oy,~yQ'0tĎ6Z$uh1nu 0CX9~blWF*5TBwÐ?0&awrt9Goa:?Veɀf8iA:cq‹dqg4NczQJ39ɝɥpt[1hD^*s(Q?})F)$= =馀AMNލ1ԭe)+U35Y}VQ] &x+,zLK3 5ɯ|)ms*7-kxNXpvƵQ E5nŏCDYl{`9?Vե E_'M,#M.6ܦ}ݵPBL'|ffb\IW c&?hXgܴ~P1?MY'E!}(_j$p˃돊5`$jpF:  ~7} )vm<,R jO,Cy m,$nb- E W͉) lf=1VLkoHesK2X(Z$f/.7,m4jZҝzU~s^_9ʶGP-9&Wn i\!ߙ<%MfmE[rS lZ_pHYx9ф;n**=a9OL]GhOI&t}nM _5Exx`>[9H"RzCڜABV_YL>D/aO%@=%+)lsf3kֈLiC4bU?YiL<&!(.6aꣴ95v^:#W\ܷi鷽 bgPVL2*1jr#&4#uئ\T4Bwj4Tw#Gu+b~[&R?qR,QDO>NA6S4tF(#!&xA$ֽ\[J)Yl|EkFaDz u .']7O%X2.S'ndh Dv xasT|PWҌ)<[wև N󱢠BRºN#T_Gb~1 A~>-ҍ5 ׄͶ hEX4pM߇:=\[-oFOELh \&uetrXRlG/[ 0c%AFߡO@~^7F&ݰcjgh]$UQ%+Kn޴& }LxG<:I NBØfH8%*yS# ?9%"4KUK*Ŝign ڲm@dKLT,Xnp:Q eKK+'2_-|?WZ8Cky-m`VtWq͢Rl0 S115ѥU}ƶztjn}GKN{`)2L68h*<$۬yL#kVHo$8{zdCg`dV.4pJ&HJ oHLrHy~S>teLV8♩^5{J)5 GRU 8*-83(pԆ!\ܩjKӇq/k!.xQAwCU wвGNtlԤx: L9W]yl+f:ߌT߮Dhd'Al9}>`-a4ujح+a`G Oc>r@tJo˓Yd߳ 2q1Ub8ǿ҃qN> ck{@}O$o_!4 anjt^ ]y6ZD=7RJkne<e<"2qoz__]oYkӊdr9BL×1a 'd:ztAp|{iGWP˩ХVchB3{ Wv8;?=muO/F5pV3&*ԭdMJ6\Y‚jlv. +[%s3Xu+4U< ? %Ϭ _^ !.<>*c4N jd-yS/b)r#K Velc2B̸4o]L_E]9K hkkj@= 03ątp$ ?\Re腍j?4ǁ}]k=.^iWª%(_AdEcAKpU:Ga) >Mzs#_Jij2p>\0kz,w\CS$:T\*LA[7y{*$$kX.1\It^? tְ6AqK[[/YB9744Ͱ_ՈZ8 ):hݼCbֳq3s o/SXՍNUMPqe|{.Kp4~nIy 4tD-xuq$`Q,W{S|V7MD}ˣqM1:w.E V=57DViNS~1ui@ Wԗ_[G$&IOdCffz0)J9xr8/<&-h֙gDPdjrYGHbjcȼ[Z@ /ZaDbN1QЄ5ixfK,NO (t\lZlv]YYL܎U7Lb yo k# J鿄aF)tbzGԅ5)].>L, &uQVn]>>ܥF>jk I=)0q:ĸG6f\}Tvh)'zYY|j8ȳϖx (BYBI@^";b\D(?74$ĕçe5^ t7ۃ@c> h5Z~wW:EZT9T ?x%;$ӯ#tQbxdd kl5ZʷVfw,-,ia|:y:(RMéNZ!_HNѸ'b)G',n^ ^]RO?pr_]2aP,fj0R[hVb1EjR P,ysp^k׃$;(Ve9[ .+Tܩ1S%7fjao6lMuA?tpqNӗAXMS6.ǜ1{CkP<ǜ *կ4`zf}/"NYvldAoaغ-2l1搂\t>1_j9))"dwYu_nIU1QOhJX>W(gGl‰,mZر*DxZvr\+qkh&t\Lܕ-鷣8%rdO$Gvq nMOwirar!4M>N(:RYY,rqmj$9%*T+k4_MAP~":{Ў\cyn-UZ,-DW ҏ8P<H)_f[hr؆lo@| ar63Ά>ߊXBuԠ!e$a; 5ywWWN 0MAp G{ޒ"vN[~\|*gI>N;tw@hbkJ.^Kmq$fϽ 92ټ@''ʻicƒ%74d;D&̟pL@\iOCVډlX+אQ ~@zJ^̔ kw>uRku<ڡ|!<,>L$f]1?}34Q B6JIY3U=73aY#SOGg;EV>Ni8;m3WC$> J8(|? >s\g'd3;a6KD[dIjÛDmʜ,oJ+ohE!y.Kv9 wAkQ<"E f|qIZ9OW~@@j(SBUs1$<NƦƴ&V%p=/˽atuJ i t ; jL;]f'Gn *pg _ZZNJK=6~L&.xvQR%N0ͲKI/)0L_+>Wx(Px.gukD,Emĵ/%i0ѐMԝLL^P3n򷉴37Iq?;4vܷà+gA2Q2 7BzNzh:ǀX4/ f|̭Hס 2VVNCe"rg wG Ida0TY+Q(D kFF9>M}||nur{.Q.uVfk=@d!yJYAh㇞䠁w:7-&'Ve㟆*P\p~h!s(k/mV&@pd| Iu^t"Bc"xgM(U#i"/ [&J# ?u{m7{(ew/+F 2v% 9|@e1EG+gFϴ"KȨ`r0 7=#͟g^}s #M8w>h7HP>9OU x(dg[\ ѕWG1Bd̶O q]F.Rt崓ĤXوDl#z5羾^Wǘ(9_=8.dV!~:# ^mN{P,n)$!mIpd3XÈSU&phy w+]ISؒUdn:7]>Eµ/+5%n`Y3B=Zc+gin*W:*k\ˏͯR7_9> 2WeVXt,?ԀK1y/ BM%f((ʽPa=,sUa{#$4O&نEjb5FH􋻅[xρ֛+{% $T7C8Cr4?eT̸87]`ð(DԡD&>q3k 9=ދ&jnr"suwV"˟R۶B5JTKq: 2:J- "%uX|*#9K@*lUl-Q G"FOU]&,-DR^I72T|#!%H0^M?gwnsjf3皜C|}C=co4E5am>?yM=HҾ;v?Ml+8˔xvH"w==އ~'GָvSLi  7w# eA&rTo2$zB$񑵠KM:$t+˩TYz=,uczn!eVգKɜ*yP*Qڴ+'8B"vc~@@i׽``*NYtpOldrX@2kHҜ$j|Et+&MyWdޕw2`↞f!hit3AnP.1Aڼ7(zB\\Mþ De:ipJ:U>N&mKAK'aP^[.0$G-ƋZF9\ƺq!zg9(l(:$2 7izr,-ZU?TY?@fvD:;z1;)~{-P@._"Jw HrFaP1%=Q yZU`-.m%߳m;^l,\T FΒn3Ust?1cK8>!~v k"|,Rq u5][2xCvB_7%c)7Z"8<ّ%f;Ao]zZ AЗJ#N"QG7/B\_'ef[upa Q3.u&-`,rH|n xqlf\[m;*AQiQK3А5hX_z2vib}4ACB|"ek1xjdX%8vKb'FBpI}fi<0-u k^i}F[[1WL䲑|E_.(72R(]m ![!Uyv_Rngce˕ lFs Dw\3r^4`bd}iMU %ͷj,R|o)e W< כ6 "(D8-OfOM:O2eLVrM> 5N"Mrv`QiDج>`ZrrrX֡SKI0Ľ ]"elA]POaѨV`C to+yulvn`/Aƶqe(&mq1WqJ}@vzH} O-ؘ%jg"<σkŋ[ć%p-=c/>8JzsYPr'n .-|bIX=y"dd- qCnxE"԰-dV7U[?۔zYO)z&Bm ´p.1beif)Or'!.>XhKaٯ*3i)_>ڿ򸎨z'qYpc2t'SzƝEv1WʾbF{1]f2ѩCQ/+U*>Ddiz7@ibelOOz /Wz^ݘ52tuQ@J( 80_cР sN͐q,<}/=cѰdHGolaJ-D|.08$k7qaIl~&2뮀# w&_i4&-@b %h3nwSX=^9=D"(wB@jD/1nz'T+ vWa!t&lILg~,p;lD1k.!p(jDlN^$ ،i~nӳd}R &'o0>̗kA btc"Yk5 2ͨ oiXѺ aH/DÅKGy@Cie$W2͘XR| Jof-z  q&05vao+T]r{#ewP`Z#[Aw~"lC.հo{ٜ/5K?Z >PF0s&8YdOow6>4ĵ:r}˅U0ٕuu 3Nd&pHxgǨKڠ6hJwZÕ^`\r}e)磁I8RӘSuG7N$Lh`xqD2`[^,lm6 Q2REQ85p A Ȑo@՗U;`biak,4(Ce.q3jhCC~9`~CxX=Q`-5(aI]Ā:Tq_YlSMx.F):x1+Y3|2O40|M%6$e.PV[6OL;%dZcՑ:*],@}Y@Orb#.A?p`Wo1M9 ASd7nGgE1so'L5-?gWGmZI|@X}K`K7}wыD=IﳦjVG6rA(@jUhB&cĐ& ~ mLCGl>LoОkFv+d+O%Ud [M;m 2KԐ{O(YMq&v'-D(idɶ8MaduW CXH5m嫄S**N;jdF xwXy[IHQ%N-BTwnt,. 7@u{"|ƿԱ=Pz_)j 6œ; `^cW_J]l5n{6xÙ=i=<{K)[dWʬ"S3jUZm[fao]au’ b\gH̿,/NA]~.F?_YYPMںNb~)M0ǀS%eń'FOsC8b^<)}fLt[E`#rzgcfOHc&)|Oe#ׄD+]go T&Fy@V?da@u vxv15M`ȶ+vƉ+[&0p,X4?b6wU\8ޟ&~ĺz@iD V_D:xg"[ߐ!"QDl8Gj9lXHtfk&}aᇶ`> >%)uhIi&eoc`kџϗ7VdÂVك;|$e1Yy[;ʏt_F^ M(7'0ܪ9my O9fǥރr+4_b't %) X{V+T /~#A/s%.[䢦amZaOl"7Bz"8{mvkR!ڦ4tgmR=u<0C x ڂ`J;5<3KW|idxU2p]Nlwtm)M`9f:uyOaP((EAK7_\yu+VHNֿ`Ȩ!68W6 x| *37ڪW&= L%Q;7ZrhwEO%+-&0js- J+T)A /l:鵠a~ %BI7&`JZ{/Gy|,4[-S-G/ED3uVB9Fh8V\dak7B'8Qݎ S~ɣ%J`]^\*Xg?ށ?6V p{ߞpaOF͈1w҄wAyXm52KAxsQ1p*Ϸ^6:@t޺~TQnbiV9=wQ7B)Z {-g˙z7a~tV& Mj7cHտ>8eZLذ#i!8_k(:Dxq7!rU1Mx@T"kAE𛯑/`d=pFJ,:'m";3| NsQp#a\<",|XJ!6Jr "'=fJTѣJRM|4w>d7T|)l$ }o2de/m co}gƈMmZT*Myw3a jltcNn-pJfs xg24c,u cj☈y]dbFay{`N#aDlZLӬ~@>rsNOh$o0%J:OQ^SJCa`pV+&[`m",4 b'ۢST7J9e)ȸޮP``mУjhawi\}.oFfjӎ)%)O2yp9*ͺd'A7\ ۫if:RtSJ+$1iݦ($ Mxè,N-!p}/rM:tMۧI`SL@Iͭ8LhRw) ל'~R{g&JS>Јcb#:,o"Y iBUAx =x51 Ʃ_=ya-cP][x#fx= !R"Xj~ 1GbgCKN\:T~i-͸Mox)17|r&y@2ګ)%.Y۩mry9 y $=`vwKVk@]x_9@3?TF1 hVm,RD<f'j1Hk*Л_wLT 5.=wU"B;YR\r)by}D'J)Ysa4R,kxP iL4Yr]G7HJ}t| ZGY_BE:iJW-zqTʾ I3^ơSl7סWOϏ TbD8aНf*Jf;MBsoޠ Q}ѕOk+ X|'r7WϖJ2ȑ'.zAXL }]7K.=izx#)Q{c%Rs(e|n:k ]s4x?k =PE%ɸ AAý2}5ienM>Ak^gi?M: b>W6d遫I ]m}*t[IRSŒ T8'+2S F(Wq>JTRXi F_+  hJ2nNw%^22f-q?ܧޓ˗`SԦ'$EqoLUsuJR̮D΃NEݪ5l@Ҍ+p8DWr>ۅ{yN${sEow^xJġK>_G!qGDinMؿm|}4zjZy.Cm t%)pآ21p n:.VU ٵ%Oсڇ";SZ@Q([(z|G nx3Yq:b^ZNBtmC'FrKGx?{AV|S_:n&yjx ''߹GE=ѓK5^U1322` ҂ܦ2.<o_KM=[RnW\X:@O>1E%T(3]ج3A:6h]K#yLTፃ(q]˗,q:Mt{0b&5=P[Ҁ\Q-1J̛?sLHi=;D[JTM1~7DQ)͏sn/f~&z UIΎWⲚAFNb ߺbㆯ1Z~9$D^ @QWX&Vg@4RS%Q7+$U^B"҄L>Rr$6Yx@tC◔hW1ig؉Nx ffU z>[a eәpT!+YyE /8C<5y:MZ;E) /*Vةt js! i2@J{ M/>uz_5‘ɾ4yٖ'4mT;/r$@ƼbGԫ\bo}P_N$}ŮvjC u*ł/ glA_>8ɀ|$&K45M^f#~ш;kvf܏0/-gc^di.# Y)y<uJHT>+zF\\=6`V8EJ&Xpk#upzENw ZfWcW/`20o+:%ZbT1UgJ!lˡK e=M *@^|nv5=N}.$ ;* >rK[ɩ)غϧ=޿<5مê^ƪ0?&3P2?,뻕׍#i ]+6F(aCTTN]h4E,ȃ3Q)S y3]u>X+I3.ZIhH>q5zNWKxbםjTX׭q"ݮ1tlTƒ~pl _t(#SEx_'ŬGm"|zn?r\0>(31p-; 5mIC @zZzj;8_}KۼKtzlg`k[y mvvC#Iele ҼZpיִH-t)*=ĸ? p-"F͞l i1n&w 7G߷I;`1-K͊xBN=gU,:R`v?!OT|۪(`F÷rD LQh5@|u_$f.+"a16J"'"⺓"ְ7 `9xgIlj'DBrxZޕ(YKθgu^>[UM>PMb$kzlކ V']ak+'e H _щ{myxˉg1UB <ψG㞝H_DXi9Akf6WӃu?LjVYyV4N<'aC @fN̯/8 H]ϕJ+ Z|hFxw` %G Arp]O srL} yE:v9n(2ѾUz{g5axYa糤f WNo)bBHyKJ&J*GYq# b]<2C%c gIocGN^?|NÌ0QP"EqOzț31C w\S=l{˚mc-k1 j!"b5n(|A_I9u#9d3JnQ샽iHlAc"V>cEab/p-Q+FdSx2Ϋl$`M ޤ-hEaMP+DuKjҫ6DmyLz.AvK)}<ӟvW.*Ё~ƴK'3fUZsd+d=IW~HdS}0Ž4_ϑ>K}I]Z`=zUR\| Ehzct9RidMI`'fI35%=oqDĮcJ# k^z[:j#UX$q`Sg6*B!*p<j=`Y;iSngDX.*OUzM#A[rߞIZe ae86 ycKʀM\4|.7fA`}z#w]r;1`aODb.g1Cūz,Nx{1-;s,/ khȥ~];ߒ5>b?1'Aq!$\(t959oCc) )÷簙o,]IR`u4@@#SCq36{,M~}5 5CnAy|<匋*4ɃZl TtHY{%wgE % q6On^DDV"->NɣB0XOEo ^V7Kt1y[IߐZV}1p]5,ρ\͛zO[+իOLԂ· Kfs, iˣ-:?\;%s}BMSR".+lNFP[$]MlY~y/bWU),,}NFCPm#7?hc[{i~LW =gVW\Mv'4b (n @ĦiGD)O/hXh2 iy2<䆔&۫=P8*/W.xCOB*^'>}a-mՁ8AҾlavY34I4 ;"R`kB{ SV'kt%*& wlm H@vEKLms׶_w ZcJ0Vc7ehTb3O(k tw`p癇ImMa\R/uPKgR,>z3 6o˹ 0 SBZy3lRT@ ;J-/dVBR=S!aKkʻ޲1H 1W cFY-9}SDTh(0gaAabu$V`=9HbMHh8*ٿZ#o] }!{?'c'\SG+uS]a3bAp˲ߙ]ys1RKY5n[$۸_ܗ6ƈ&˃k;(#y;b5p#܈2G;o\v ,ǂ\H[ k'ۛ[H(w[gf+UP:kZ^G&+ac}O6}ţ >s04)%L aGq(o5liiF[>6/gB]}6ZaywR"xG%e2]%P MAae"*t-W$sj)Q<*JJK*]m/M!ܾ*e^6R(|>_ =zHZ,gN*:&!o.4"M ]u"<Ԓ3ϧ Q{ eNL>v0kqQ[4;r/|ݾNp]\rrsϲ-<,+Fp *0Q$w~7S&nyx9TF ˠ;i_9Nz=c#TB һ[5 ~STa/`Ǚ ,dvҞD:Y&äץ;9v5Ƈj|G);⣕F͊s!K6 j)o}1zicAY2)|2;Mzr5YjzFbd}Jۗ/?igŃ~G0O1sV,3x?p֚.*,]G=q2ӕ`szR8y%k7ϖlBl\[Q&ޣY](cn Q@m T=E@4;ڋrPF0ϑ_Yo(JvMQ4k?,)ɝkW1, ~Y? #|*Bn+BNEth$BJN$Hg3 +WZϏ.r,1I(/o+58 _c\8qh9 X\ ã fN'tge.L&Yt\vιLlܧysizBFz[OAި0'mf'U["V/+׹l73E"UEA̍ -QO9@‚2IY'䡺c.7,#޽R 8s6^঵.[ڏlDtkTJ\m\Wh{YngȡŴoCWm4RRV<ԝqRz Gr;(GxBJ b\0{azr<8uʭf-k}@sv+~ShdG?H*,()+Պ`SxٜLyǗI$ m2ׇ^¬o/?;)V"NAݧK:֓zI P6)ջq.b&_*^tN)k #"R$G苑~O ?%/0S 6폿-\Ƕ8+ 04lnFM'H݋2\+php`=1a (҈M0y^5 ΰrAGTt+t6~]"cM!m@?)6&'4=놠ݐyo~N(cJ;gG|rQ:kx"Zټsa8Ntʶ?imO,ףM2krP"y>nbD&^7W#[1@!A K3=4` 0t>Bl5jGp>2Q.EMăWn1Ԅ ~[$R9|(gyꄤyڲ#8"iP7&;ˆc/TǾaeJ*rP7 ^dHyx S*.}#-I&̩" YeL@նi d1_a"0(OzJ{fsZǏpk 5` )ZShj(2'k 5~#>Rg\a7VQ"  0PōJkg6&*0Q:aj"g/47{Ӟu8FYwF c<7g[|PZ欷 _ a\S[NjME:/"˱=$Ym~rQؽ#- .1ᅵ'{޺;byѲRi[ƾ44pЂ bOW2#|H:^|<\.c BsI T.Y*4O]NO3iq?e՞,tj5"\7sz]ůYs pW򿄨XؚUG>S>r23qVaqt9Xٵ-:*zޢ>}Cu"X4/.ߋp8@f*+جB}2YWZca XJyzݏ8_]a ӫ11 ʺc؛(I Z`00kܹ"J$eqesźJP PS69-=rTE9.M~ȺuE3ջkgqNFiRE`!hl*:qpAC#++.(!{]*\UGPvPJWk$"LYX %+N\?q|}I&nr 2m|Bsǿg\2ZD/獈ePg ×DBAA^W&-qL 8ԙR<7zѣM.)9(czO[Y`nj`X4ʔC(Q/7288y{Z*eW8*u!v_ 1%xB =MW|1 |݉솲l T3tO;$:[b.u|F Nنq (XRAHcyyOxOJ/?B9鵨fH0ApX~8̪d:&FP6`!.ז_vZЄh_2PF埛FW 'q0<[tDL8[ YЁ7A3\ۍYGTd-+M3Xw X }XI.MM?Ej N%[%ro݇!ͬP?xyjXdu }E{Qmˤ1f}-l}¢KxKj(:p2>"'.Eh :˙{}-ʹCQ˰#Z w/g$2-hF[3B')V@d2|LcmD\+t׳dalkQ!h/>e%B_&xFoF>ϝZƘ &׫}E(#r3ft,:BXcp-9D(bH4vv&O*LG6L ù{yỉ3( jыk?ۢ}l}X-̝]kF''m@j =pYtηWS[{NrJPȩ+$\*ۛW/N ~$dT?:`tN-UڞCY.IA[ҖuY0P.7" ٗ0W[@S5qQQ[PaSWf'1;e,˅) ?I3C΄5Z>&۫X3i 0ֿjf ߠ}̅aG!C!1+ҥ5+~wo(1RW;qX) pc;qrO!A6Qk `޻7w2LӠ7ttP3>M?p83ӻX!Tse? T{Sлd pHP5Z6\s k[+Gb E1cffJ6t6*"3Cݢ;_p+(~r#?}n (? _=}_רCUf0XMLGLǒb^݃*۽3H IBf-|.zU@ǨfNĀH*%EvVY_f:Ft&XpGGRןWw`>̌r w›AmKD~~-׹ڈ.bz'?|4E){}?Qo+j`QX[eMfC9kspTU%M/0}HZjڜ%F@x w&+ڡ4W]40%aT 8NR\O-Hj4d*)|1rSy˔k9lTW#Ol8405>uSUR'^i 2Z_|,ǫdtq%Y}0G,%~V'#pcte,w}x-Cbݙ͓ >7dҍR۵yx]t2E WO\Gl$u*/ %#g ` wrM%ЕbhUE&KWR= ->o9~B%)+?Q9kH(=;+xFՍ=Vf@Lu@tIpKeP.'}&W@w9a_c Atܰ]0[ƚ{iH=7W Zܝ1_'X88ȥ诨: 5rCI~^8. (1+&'a'SFLx*gH&/Jhʸܩ's~Җq_ )͂bv8_ RGmYq2s_96`w8\ ![EHԷGR8 nW?(ڦ*%xAn3Wo.{ &4YObg2W"]t;-POYzr)\;HW5qd\1`N23Ib>/$_O:nzWzXZڻB6vދy@=h< +çq9f*Z+kX͖ɞ"ĽTl`xŰ1|J;:2bm(-i(A59y5HILW;IcIa+BCMiP>̠̮b%KP"9e?? %yF_Rxtй=3Ѽez(@`jfo y#j`+dA'Rv#.'sƓ)OEUtzEUmVmvlU1CO7OxH/ď2cBY'y؆ nBg;9,oR*#4OJ*E6 ~W{ ƌAGCͺRo8nuݢK׽bp_Z g"ݸd9MBn2H-EImb\}:Sg;H  x'> Gu8'Rb৞Og6hL~Wjy4Zɳ0]q3 i?/S2L#C/=KgZxT6欄"f,>dTDac!¯>"rhϢC+lOA7HH,  WWXX,wEt/h{YU尣S<58`Z /YcGeDr%R9(3+lK\ NuQ<5/`oȊUPkCYtZ[*a" 4'Ɋcǜ .hK֕vT&^6yIS՘851g%hx< Ô$^RPLW2۴AJ)q Z@A#V7";?g890a /lҼF! <T:{srVzSL`BK!%}i*אn/sfM# ;ʳ]ʷ7TiRv/0B'Wϣ(r$CW.hZv;\LOvD/} $WHt`MG>{r vlO6#Ao}d05$CIdX2[Ws+,[%Ka,PorwitHf NVHscB("}/h5a QvrExKV۝{ !}8AݪI vCX Vk l٩*Hzq釦&?Wtd k_G8"e46UGc_/KWW#)v9杼{qĖH"fA6@$#3($O4Y{d˘ etf<Kv>Ko;Ih<&VCqx.ARck3|RTsuv 5/"X9ʇ J=uU-ꦔd/}Iۣb2ug4<7_{!2d!"$19› P)0d) GawS2\nȊz@LO_CSkUşG8ѐ60.>T-_d ucMF a@ ; 4bSAoNJc:+.X6"0O#?s4nil_dX25e5sI'3bg۔t4:Y̓ NI f~o}+LS ǟ E̲LH7bQjS&ܚ rZ)1ؖa_2'"8Dd^Q:,o<|i[9͏ DK1YCH;\1;> gte]pk*Voח-@ spx­ҷ1(r%󅠯_`I3@M=fgW1~-ɨ;ޠ:/յhJf /)c >1KuiD4wni _ml0|xd(SL[V@Y?C f7*HYѾCQƐj:Jg4YX>٥ֽFc'/ (~ ޘȼ! uzck1?/xc+Unӫ+HÖ~uOS45"U3 ܦMR?mrA|TM$w*RORnR`/]K:z Ɠaak&}Kwa&O6|,|NL֮XwNFvmFH/Ely~Ըu='~新9a7ܣrx<#-!3-\Me bD,Am펽MTN/,U]މ 7JMBj)XE)l)p'!9eCK5asc}km֥ _,9i,0@}y c,A3vꚵu0NNcdWNs3%ue> ,3&&s5h þ:l3#nrJ!}F@~24tE8@p  9~j>7\`r9xxJřs #q@? 8:ʈybܭNi5<|uFVȧ ZkV^[Ri-  '3tVGt i q Hf\}gϳQ9=1p K }G!%TΚ 07fG A[F N _8^g0 3ftTzM[^K m֟ryju(Vu[\g7'X " _ >aE*>'G \4Fjcb:qc LJI7 8$ž*n1@K|meCo0X]"nF$PŖGΝdOM;9G8y^TJ3T~CuuS2d~6WppeZ y0 S[G2g@huD2Z87KY"?-aJDM"yT0`BIf*쟆g9yU oC<]IM"n8z>Kn>&+kĪu5}ijʘǘkOOV5*xXfgomzGS5TTֵR̳C"Ɂ$:?X/ J 2eIPHhkfUÌh|> zwpt(@#",ק? b D_B7UybƩC:`^*K ]0.j(M<4 6z!'5PF\VQ6bNV}\}D_ S 8pWA1Dq񶄂Sx. {e䓳#` hLXw S'%޽|sc ;ݷEyU#dl/qݦ T/LYJ,?+v~y_#TKL# ﯩuLc;PoMezD*7qjecpY=F VRKɧ& t~1 R7*fov򒤍rz_!-7@D9x(hz*Qg Ljj9VʄsoeA* X%cĀJUT+]چ53~:\ngU͒@1}gUFQr"lk4Hvyw]έT)PRT7.|]ۅ];xk Pi's~E\(dcTBͼN{mA@/O|X@},}N2~ę\ѺRF}((kx3w#aوW|%/g}-P7*х2Б xuj&D\*GZ+UOVѮH::x*gp$e[#l6F|/PЗݫ)K9@%s :O0X |Yx- FQ^RQ/τ|M({`}o,+E},4- F8RxƛZ儩 ʸJz.Ч[R%-xwFY1wP&奒 =3}c'I3kSLqλZfܦo57RПP i^`iou<5%]FmH2[zŸK#'wIXiP'(2&ՒR zG/jϑ/JdFK7 6{WQa5ܽZ}gV*Z3g>̧ofDBOqOJmuC*]b32xcg|,0TMN6S?P~XP`: zdFP^+#CTp,TܞJkLPa=<sTQ'nV!"A"Yb%$*z¸WLR_ tΙ@MrO۩ؑ凰Syv|T& xU]$r^6MO fZ~6MWZ7&GYF "J}7$a)f:k:Tz>tGC v o'D3h$6Є,pHǵl,_^p6hGEVR!Lơ\&)>֞0#cxm={ |֕HtwT|L0)F#VxS$ vVYGTÈplt07;VK͚"00+^iXZ}%.t-Ŝ 7d:f!i/- 5ox,@Zi4?|TB0ܧؽRqȺlvڛ1y4{sip: i& b,M,5ªD>i||9B+BB"^2?:S@JYuL.Xl_=π{灷*Rɒ4Ѳ$gҊt^HZ?r{iCHTJZzsëu|s7FE"c:zޏbfS.+0zдo{/^Fնy7?|r9/v|\}A6E_t1J`PVV0 %Xg}4K!;-A!9~cOLpUu<ȊAf Z6|QSZѡ`JҳjK^*fZXh, CĦa]hN,lz_ԻG*Y8<ٶ.zWqb=Q?ɖ~BUX5 vTGL DzwgMo[rb9,e甜Eߥq@Aʜ@ VMMؒS.0xL1G]MiI_oK]Ř4vTy\~Kz3fRCp7F@vm UB j9,MU.{bǡa&uPm!7w55~0PW3~Jw ]Dž>VU+9YG0?fɱ.m DPIQ =qh vQ@B1zq-WCΒ^ !Oc"wPڳ w_^QbO)BLKw~7Aր5=9yKXEM S d7 ufOWlS^_5B]8S2%7ԭ&m'~tE;\(?ZH4mAj-20ր}?mbHyH>K8x{5F `>RHd]m}!өmS;p;OQ|@T ̡׊'>&ER \ _Q*OxVބTBh>|TvR)iӵv[_ G*RtEZb|cju^|.Rpm#)cV3v?Q$V5cӓ}NN45` }#'h7iWB1T U(ۉ;0,vQ_,Di?0+eI/u\B'\>ֻ`nLlJShqϋi3i$^_bwROؑ }|p?oH/DzSTzp .&m+>)'Kf)F*bc[H Ѐ\hyԅa:fXG"0<5W_xx%947/IKԥdbqP:K|?;G/d3ȰUjgpf&,څн21Dq_]\'2QNOLԳ[hg -1_C̀VtTFc>C2 @O=5Γ}%mh\!1kTQN~|? 8il]O їIQ\W˝*ڜv3OxCbgdkJ9k .(oG{ȞмRASD k#{ ¾&0V rtHsmڎW"|Uq( _Y^<{Q sn?5 ~WvE@#"7'up0.<<)9GjV< W, if?+Y-T[ӉPa ҳ;[Pj퐶2PI;'&mMJdkun׉W(͐P:ifoldjԚkIWf_3e=LDYUMH°rҜe~+si #Z.tjNm˔ne{ضf*m: ,t(>A(lGgԌZ LAl]w]e]KLKn*ÌP<ԥ׎=ƙ\buc1L$]w*g'z)tŻFC-}i縨)[ՕaFF獮DA>4e`t1~I æg t_Q‚f4|Q'׃ dM:Zks5VO3e>`ʕ '#\NK7:UQ(%NoakZ$ #B(0go cf}ر^!fn:$ S/4 9ch{GFKDkc[m|zA?y>r|ܘxIZ𙲭+d$es 6!fwHҜ8~>FT8!:>So(4-(]&i>V)5|mo?u?pܻA; K۩j951X{To6:vOvd'ZO~rM3TNdl±ꠈ.w+6D$\teOK+)ps0{Tf R tn6?>-HhbAP>C3m8Lsl%ʆ>ЦPfO}^E싥?8YQhP"sP9y'VMw$7ikb" {鱌ZGT՞K#l Swd1U e"um 齖P}!CRZIZtM=9*qلgѣ 3?O*~)_߰ȥץ@Gj ]?wZ9m՛Ls3j} uj6mϗsJDczog1q6~x&:Ї&tv֊*3O :J0˥92I]<Q!:?(EvT7OǢ۶3vaD/wC#~Ċ.4)惡8)A Ĩ`X)&sh A'hLpzt*2?g/xW ,F3h `uLdDKJ"