perl-apparmor-3.0.4-150400.3.4 >  A bw[rp9|dQW^nݕFh"xSOuyb_]DIWfg ,CAJKsZqTeܕϩ`9Pfጴu%?ucYhtT' ' #h8m>K:(7c; &b^5<0qؐ~n[\z[BC W>H w/+-(ĉ|yM {2ez2ݮHb (g W8.`m70badf9ec1a7a4a4239ff576425dfacdc544c38740320cb758bd3e49660822f00755cc5dabcb4501a3cda4bda1007fa161b5ef91$bw[rp9|ca?/<ƀAb FmyC|өcF/˩jcLyfm1u]xETl0dE| o"I!-ȼ}/1ǤT#MD Ք}UV'q59&Qinrfr:/US?B3yr0uu=hKX6VhF Jb7:QQrCq02AP Hr  0+ɷ`mMV>pA?d ! J) ?Zy    / 4@O^PH(}8{9p{:{BFGHIXYZ4[8\<]H^rb?cdBeGfJlLu`vlwx(y4zpCperl-apparmor3.0.4150400.3.4Perl interface for libapparmor functionsThis package provides the perl interface to AppArmor. It is used for perl applications interfacing with AppArmor.bw[sheep18TSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Perlhttps://launchpad.net/apparmorlinuxx86_64$/8$AmbwWbwXbwXa71411db1e10415e2e1017b434eee3a34785552b0253f64a07768cf5921671ee65ff0eb19d91002a3e0c18461971590badb59844592e040b258bc2ef4669305drootrootrootrootrootrootapparmor-3.0.4-150400.3.4.src.rpmperl(LibAppArmor)perl(LibAppArmor::aa_log_record)perl(LibAppArmorc)perl-apparmorperl-apparmor(x86-64)perl-libapparmor@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)perlrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.45.26.13.0.4-14.6.0-14.0-15.2-14.14.3bk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffperl-libapparmorsheep18 16519892673.0.4-150400.3.43.0.4-150400.3.43.0.42.5LibAppArmor.pmLibAppArmorLibAppArmor.so/usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi//usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi/auto//usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi/auto/LibAppArmor/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/777f32e71f91d8029e464d490b1de4cc-apparmorcpioxz5x86_64-suse-linuxPerl5 module source textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=31c803c2a85cd7268749e1b660bcf884a91faf39, stripped PPPR R R R RRRRRRRRr'P )6utf-80af108ed9b66a1162136f879a70b80ceecd36248d360b4462c74a83485916723?7zXZ !t/Vq] crv:};o`}c=KԃdEktf0V#֢2I}my|- ;xr$oPLGXdy՚t ~~@bp8") nޥ|pd[=>`/!I`ZsQj3Ͱ;=]*ԣ^Wco"S;(a.+&!CLFʩ[ޫ[-&K+[io~VWw kĹY\YjOyhY}7 }c*Gn]z31-4hMr:mQ..)PJT30;FV"6 t:$4n&fW^)BHR2k5q3[tE'~E;I}@o 6 =`~UeEJ9PWdqmSsJzM mo~夑i^б' Niٓ|g"7BbJ5j.L`?|M\z~뷺*M6;}mcY"3Q)efjxTz4fL`nܣK4&vas|'`^mD6R s2 gbv<> j&EOKW~jUJ H"M8,-}<ǜK< _¢ƥ#q$~{ ea'-? Y܆~ީ*2U6ՐsQ9e'")n2mlw O67Ro<7cPثؿ AujPH,c oۙEAg fF\aAM)k "p^q]j ADu*KdqPT4IX-{3)Jԃ:uf.J0Kf9EMOg'c\G9GTt>v4r;x/Uhmnͪclɟ9MPn)f ?Xd4O#^>bjK0 iO68O%Տ^Qa"\P$2J88eK>=8[ă?T@u*q<½NWGeہu_14 R5P_nvޒDγO *t-~n{.peVE05@dj s9R&Ѵj5.9x g8s";)-%7NDjk3}<~ۛ>ķ齑mŘ%?O[`s[E^d :?4Ɠ=5ZKK jhsoAx4 YoO,X;D i@L}MڍDhgOtsb{r;x7&Nz{,%){dCXk `VeY拍Hׂ,iᧀjzi1)v !H rn.0(=ڊV2]j@k%L/) + 8bɈ}ϸыD0q}S/~΁qa\FNx&G"p& dy<4;$7s/VC| @!zK >'?֋3!ΔrVG/A$t1:f bW#eh dQ :[HF nVR<$ֿCz39Dhhtˁ.gǖTāaBV*je:U!!~>gu`!s!xtH Av<*jgqU*jd׵ ӂw袚O2CML$ά4n1q%6һu(7`qk" (y>; ey 0'lJv\$̕V83±^}[C(A%v& I">Nrs}G"P?ܤHK=k or9ј)zl(Bti!/90cϢ%R6p/D씒=m^$2~x=E:.M;X6g){+Hˮ0$ QM9S$`QS8 dᒆ[Yٷq,|;]ќbev\2;HQ~XN+&#<H,gNa|wl|\oq]zeyr΍"g5r5+gp5tդb/e+@ËEH.˰ld*uKs | fwlS١K;8`FuĽ@aw~A76tTՒj̱Sչx . l?MM7io+hbwNb ȉOW|$6 P19lm/Lw EYMޥ ٵhVD uQyUE9gt< ^HPu\I]&s0=[kQj1lu-ʓ!RdӖz'^|WݐcYcxmh dKїN+XpDG!Vgۼ pxH՟ $ Ė5?]PbX_b¨)A{삽0:F5eoaݙ9 Ih]'B? +|lm_-;s2Ӣ`w6KWYڣG8`2l+?[ۆ4C z&ۅx.7kyuh,nu`L`32{f w N 8S.q<~oAkϽc65m$㺠AIo3tϜO~o42S\պmWI|;˿ָt(;3[3z0?j wURdR^m V*@^I*̝$-g!{`Ecx 54&^NkvZa! b/Zx:|"F&!XN;]>W֦RtKM%ZT6 cB>ПF[Œ'ab aHTG nSC1Np ʎYhUC Bx_}dyYJ-޾p.iNVfD8٦tN=\lUnNjvWV`|LGqxhqO Md'}R.srS[B낀v3eOd?brQȸ R(x;ZV \~GRrdX\-_%),y;fv5A9K?4!ۈHն=Q .tβ2fk30 KooČ YUcYzMeTL@QaMd y(VEaZS%-)a%ܦ}Giq5U[)^@}%̈#>8.,zs>wlRn^ys0h3Rd-fS`8)ƳҔ$Vg8-K:!s,XS7tty|{Gqc0@ܵm0M?Eϵ&$wKu[fyhՐhEo;ө*5Y9(ݧؤz(ǯ hG9|K=6R"s~ڊ}%62*7Fw#,6S]wPBh٭9*T]KL~%*x``:0uQWUp$?FŪKύxaYz/y `Pr2 Rttl3{i /2].u4mo[Uf:tkcS$\΁S1{օɔԡ.t"%9U!Bú7 騙Ll*AԿFIj78Kqv,F!$FcׄtE(fO@r='DHBX<|>3-ud/:'3H:hy{Ǩ 򞐘FM7*8:d7xJb}2.K~ u}7ɅhRˈg'X$f(|K֯V}< T{G C*so:\Gst0Dž 9W4YB)hT+QtY)hU L8^^+g;#hyvņh9 ՝G_iwCj:_._͢1*soEjFF؉{kx2^@bP@%-cOiZw>4*}zW8 ,uJ.} Α7SCqooy; ox>qъ23Q4lͼՈauυ.e hp3'W>%|!}x@(Ałs v?|+1i (^Uod.Sl%ZJM@RqkEڣI8`! p  |NiX\6-;@} T m{G#&䙶*%!`(<_/ iZQW\7/:AyYXB/s,7њ`/p|/o{5DG;o˻rq=\#|<K])*>) 0cXkm_7[.UPRQ-fzF=YdI :6(+GqD=OvXE1h-o~yVgl^ ]44޾~>=@Il0dSfV@#u'Z`Q\:muHc봆zt$Kp,j >1X !]""1MGY^:3j&ԅT"{h u!'3IJ4qiǔ.w!^ ,zPk7.|o{P. _ "Qمo[6OT/Ƨ #qBQ3Pv468ye& ~k<Vp3i&-^βK'RthRIai>V'Ag'bmlO^KlIƻ/2X4 L (^"& m%.Bj a?pX^`Bu_2D jpkG=hUjl#qt݉VU*A$i!+xt723]n*oI?ؤث|7_ma%li!-I[tsnzp8DBٙ+]H2~Z3p JBQCS|}0/YBg33&`yy.Й? Rq,}~Z^1烗 悹Ynr'l6洉QA'T> ;W1@LdJq}=N'꺔ÇtjZT9v kՓ@I*?R -#<ϺBp,`!M7fPcJȑadYMwDW V{UbR.-\x**_ikۻ~|L0_DzK$'WF`@}Jo<=hx2]mZ9uu˚ؼ|dKs2^ua0^}4Rvd7dτXj%P5`dhjЙj{ v2磟۸߂Vٲ^$QUTn6gj!=rLLsB)@Q F<-?z]v`ߕx(R<|tZ[j_yNvX] _-]2V-5;qǑ@]EĹ٦twYn9&T\0nC۹3#C}n1NԪԼ$DOQj%č\Ŝ $w'o]!v g}A[OxBPvo@U(Xesg H }4"O 1C=+w)Hl[HQWSP[ <( sREH%&r3O鿾Q!g]{q0sM= :U";Ua_*B˓Ti#.vȫ2-ǎr)Nr=:dZFR9{ %GXRMhM7kbDa7^#d%x#"'tRkaUcDd4J,O@f1S`ʵH֘PЖ;;/Tn1zQa;X X~34|#ͲhL@A., !@}sG mD9J : PR#aZ%jKMd`?*?JG6{a@!=μ'CNf"4o V4lGvq RSUp I+ Q DXy)W9 /Ϳ .'dnČrF#] +=9B Ct@u;>e_ld~E4`Ix$L$&:1o }%UH]L?.E+t1BюXV?Hm%xz3M̾q(D`!I9zXMM؀U7h ğ @@oJFm"]e͹CMdjK2FuxsoFoۣo'{_G2Si,ؗ&6^m&$3Sc,g=*(.ivq-"<:JϥG|w"$ 5Z0tlW^Ǹ>[6"*°:¼6TK˕ګ0^&Ωz4~i=&_/i^i}5S mpGAufp %Ug L]E?AObLG˾$w#Jv6=H)\ F";6쳕Qוws( }Fg}1Uw)v@E܁XdcQnwRTAt#*/f dv%ޏZv:ZʼnӉ:_ݲh`oî&JSK'[(9T> o>ߊbSW&|F _U .<`@p5y4B*I2_9%TM:l7@q'M0 ,gMŸ+jBؔ,9F.7t(%.q& l4,T!gڶAw:;'RfP1m$smbvKt`?1}JqFx8[DT,za-zRcX1[1QbiED5_po6x؟5|a' ;Lm.0hcsoC'/s]:K_a^a‹Mr;qf_Vk|=tFDG.r:J !q[qc|XzohD*8|zG*6b{׵UC%;7;`ɖeaڷeGة61b䋍Tm޲Քߚ's꓉ "P4 U0Z_kzUVtL1֓@ڲ{j9 ZȞnZ&񖲦Nd= ' _l^!=icÃW'ZoiT;eSX l-+i^ + @!}cG^zkѝ-]U) YҦzg]qٞХܵD<ԯx}θUm-5<0#w(*eGg[!b6,r:.>X[ɱ3rv!k3/,g3VFz`-[%00;UBH>s f.WJLXahJ !vsN":[Ztp.U5πEo#Fȗ^kxkkzU0d]p<ꙥ͓];S @41P9wpy{vőуAUۻ3 V8#/sŋvkӯ>Fd3Ft7P)Ox sN=GI$BԔӈVdK_2'XP\ww)LF&I7dž\e\og9~;yGo!]Х šg{^O8s' AWc0ytVש LXOSIY?bt>  zIaO;[d/u),\X|M:FȺI/'()517w00+'' J3t:O7Lr,05޹ ὘ 3- (hNj(!)Q7}5}cG1!B LhMC)S|5ǦTN4I.iCG"4 n A_<@UVT^*x${=%% ty"X>k hOoQdf0ɁBI_gvͼlo;0 " 0q&){l펁~C-\1"Vmpk7\QTӝ`§u$*p[NRq_7zR w.B1Y id2/ 3󆭠U)aHzE\@fC9,!Rw!ZL?ffg nj5@lJN?6${>sԡdg2;ou?:r`bުMrabChdWEgQ:]Ŕ޳kHFa(|ʹ!~TmoEy]/vUZQEwԝ@'@s@aK eiL p0ʞ|WW6hr%T@-_%嗵y7!f& 4ռ>Pv8N7o0zW8D(  JI^Zcv0gQRó(/|o\ŐIPXJnF6>e˸eYDxVnRܕ_]=ۯ`\R?K^zwi<\' ivo tT(QkyuLY7:n>qTOqP>CmE*>Ļn5Q"W3a[7ȐGچٵn$:%&x/c9S AH7 -k _ar#PA9d)~*{\BI$&XDŽ~=; Gq٤%SnL{h6V% ^ q 6̕=SۻMs_` 5>jSYdBtNh<[ 6fb|6]PPÄ4}3hO1h*rGNU9{N]M􉁸 X\CGO?9X {mD WboEPyLiQi5"LnQ,V;;4$e2N櫎m>n9`pO%qBKPu:˫kTRÉ"Q;_6 )rFeJ9j~B2`]w:~n͝<-`dwk% G;Bq>tJd/@]H?q3rrV#ZmjqX6ڢBP4N4gb=)Tܸ2HĬ=ӚXݮeL2#e-B]i̼ZJvKn&rsMtol19Pd;_ IFiF E-!Ir YPD|U$;y4G/c>L3ӷ_јU!Lc J!Y&ʭрhr83-, V²*ۃ,=eUˠi-w*ExYKǢu[lr3|UEc5ӛޗI lUf+3|Dg_ٯR_v9VCK5?Ïe&s4\,'R!<=#MT\+bȗ#h2&N);9,^rAR ɀ>@ Q#'q3tCb$E0t5Zr@Jtf O> +Y7XT8>-ݝ~렽 .^:1.o Xl2𗘖}ؤgN9(cBDSd=^~#Hj1FC ؟hiuySkr34&~6U mlQ/ԞLmxMi)Ō; {PIkO~f!{,~Wą[ݑ7<0jh 1Ccs\+"6Bt+5漸͟*-:0VȞ"۫hG=N\FXOfv/!@:X;mz2٫j`|/P3fz?G^PDE-vѓDrvXzLiM9Qy3 4WpE(ԍO%,3ce+5Gnvn2z>n_č%rWs.9,o ժ|-*V6] xS\@+>Wyݟ(8(zks,fWtp:x([%z0,, Nd/QZ ;7A SŎ8,j?<8/3ݣلhJV<$Y|(brͬ4{qG#UEt Kp<>E;96;A=:{-Bwv-cCl~7?9}WTEVX[?W'uP2'S"w{M2 ɶǽsOȂ OVx&-mK9!~ 7GMs**.dPǠ (GN8 a$N t'=:6ZY(qhoizw#?Rv)9"`ȕw*==ky<% :=٦/U T`ɚT{CUūoy19a[9'/k&} ryXz*jh+5_4+lld65 M&`*Wʀe1DSƼUkN&ý:8Z_aS7R+=m$by߲]Z~U2JL&*z>{%V>8ENCf̹L?pyR?Բ~D,N-)V#ERv6LoStd^e(1 L*D uY\XUX~G% jجp: PimtVo-2~^4|81*%ɠO;IXyP應ťҌ"`bV {×O~iJ|3U}\0ة{۱7A r;q2LPH=AN 餩\(q|ܥJ 2al >&<;N@٩&5u=q#׸H%0Wj;i}@6@lpS:D!p Ta9lX?ebɓTс<;i/ؓJטV23NgCbߙq?p؋9j8+剤,h vE; )ioO1p3ny ,x0.*SpjdX]]67i947 #æ(Fsg=4J &j&xa߾w7\ev/hg1)z:R͡MPXE"0-tΐAct R~63TѲp"{tO>P<ޒ 6(Bs4}j{Rĕb"uzƦ~BB\>3xvEҽݮa0l#mb7iGoGa)?{Ύ459R>çG VREnpF(Y]1B?6@'L`QqFT W[<'g+[o@3 0GOIt(%&2ΈFeNǔ>/b3?<>ɁP06\jmd}֯J=ۏc..]89g .x h3\H qWo4MkX"YȂSL zz:)(SMڲ؞9ddx~ֿW`wa抮TX8S-0BEyZSUɥ̐BVS}b &/o@o 6iw_MPf}I),JNCb PߊS'=Fg›~q4 JVKNH 1ìרb&㡚n5|aBuDMn0[#ZӴF&v{Vĥ=Pyf UYW  ? 4.\`|ĴwQUjh5nOpV)fݿP,117uHzPV^Y%HDhCXN`AWxeTGPpE/J8'ж Z7ITTE9nR8y%|RCdf3o¼,]>"+&ޙhV=fxį0-^w7J,T'ysZqvIdieό3b~3`Y,2NHL`(}JD 7モU/q77C&bvɪ9,d)%Ote+UUK*p:5Hwu] cP>QqvzHVMșv~ۿ0%IdB˱2 I2bNm|KCyUfIhRȾ]s[F5Ge+ZmP 7}̕ʃD'}[V7y=mĨKDwŜ׷w3+v'UlSQ'n#+CurPT#jU[[p q"A/~'؊腏(>]U|{_Q/1]L}>]HTx_! <1OO sTߒ pYhbDlOT!$˄#ݻ13B'NpLm.č` ,=a+̇6 =٣ˡQ?8ԩ d‰#[hS6S Ri^,V0\iw)j52P`|55G^ w.*2Ùܚٛ񫥖TW苋38f Z۹ Y8l߉lw؎Uz$T=WڻDWB O<1|A&ɜSD:>(7֯ߘro n%TЭ";Xhv D Q x`7J_:ow7 dO (T#qsl&׹}5z&ptf`Ƞm ApGmGg٦P{2kW@e?!<<+2S[k[5!x ;[߫.v?]<:arHi[@C0e T0I<_ي ^|5269ƌDXA&3̎k>`Rkkkĉh- k`s 18.@$]11y >ѵ}3Sk1kj  0 wa wNw=4؇A<%|'6؟wƘy>BB\dҿIj?HD68kPy1\p:KIbrԃ1(C% dvLŢԛ@Uy>+#IѧpR[<0רr4r0 s5;VBM=dA֚rGX.cJӝ'#aj#2˜;kJys#Miu Jaf Igi(jy[#.\<6Yӛ7y*)'v6"%(U~G_'NsZF} jv ߯N7?qvQH9*{r$֯ Թo d y~\Q`d\;r \̻ϨG$ͿJD4cSENo?\y ]Iٞ2icnC%6|y(T8=(Gq~pR}oVőVHmM ݩ F+yG2΄Ma|zG97;TEuWRq\EuП JuT>evm2: ƓWfhS&bpJL{ֱ80~#e=HSnț?@p]qcGWL GU0=3kيQD,ѥ$-bt\GӗrZʊr+Tܺ]mHQoTrR~ cϹrS.`Hbwkk1O5hF<_QO8'SykvB;=41v57oǵlUE'M'ܗdY>0K+fgjm;%zݖۇD,P<ƽ+\>Q>E0͊bU;W{=g# iYy% Z%ϗ>G(ҵ? e ›%ԬJPa# b&2 xwɍ&!Gn%9++NeOsݏZEimNW-:ʀ½(Psr,"w IyNnNJ~;;hh&_8LŶWjeEךK g9Ioc 34]jKEdrc0kݹr]"p0=C[wsMDꀀ޻+h0\Zr!&|VIg2qJ́9*25+[ވ ;$gPh0UDѤr0 g,M BBbI<%g]|AFdHd]JL4zRD$x2y{=yr:; AGI`-d/*3wq"+g6K;] MTLwl `sy-{`HSi!m?SV9iD#d::ΆI\ 7 Hf8< lג<]_ z:A4[癘/ـf==YTdҾ>t('K**tRrd[s[0kv&y-CV?E 8(خ#Tuy'f|wBoٷ7nc&1:˳NM]v,57ިđbY.mͣP8f.LP6mAhxmqa*5lTY͉D * =q|Ƿj}ȍSڢ,Otgսǭ 暍r~|x&;I:,i}i\8E7D5XVƖ#z/wo"FǎLfŧҩb׳=fmӛ xW:x}0GX> dyM.?ܹ{~z|ʕ]&f6yzo&3khJih`te.hI$\CH1Km°ԙRVﳉftO_%L y@^^{_Qv0IK [O:w)>xR:0$ͺ;!\^`vu*im6MEׂúQQi:gRsK8"^ D*@YMow[b}b=]ZUnNd0ܞi!3s@L ˞0I"G"7|H 7l\I}{1ﾫ. ߍ4MU'S"/*6Fji(s\Ƽ R*ʍe;ր+iK#)tiE24:eY1!)nš\=o-:X=E24vb,Hc<s"0 Haxm_Ϣ-MvlwMFF],S)ϙ9q{z |G8Hz |]ӤFw``Hbb[?ŋ]ѐ!71Np0ɾ] FP,YTWMʶBԕD}0JO~ (4} YlLn>!4;C7f;9 iq#z-tpU]ʗ'܂Xi:҆1l- fޑtu"R?O+!䘆#h#U9`=v>9lpH?yFo>'xPN R&ҾH'E#uչ*c]qRzψ镧|Tvn8=9h#.ƘHqMQV4~:y8rǺv l;vDT\Ju~ Pq"^fj5K6yWcm"=m dT\.Fz/B=T4? 'l@PNuWA9;DD%LqHo@ 7a5ӮһZZΗ7vTEn\x_#;&b;[m=2)DEpeDĵ Bm9@&Sk(BT&f~+ z6o{^lǃ7cpzkR>\&ȉ\eQp\G^#g[eNAڦiCm򋿺0u'&#D8 i+ Ѿ:9f\&@~;B׾,tfzŋp;;^?QqU5Q˝z,#P:`k9"87QQw;B0*)w(+3gJO=tvc|xv¿")$ܣ( |oS~{*{hO5*pr{ I-2%t7ʇpQoF8h#|z3Pxopg_/&aIS/H8?4?{ Z8@ƅ h)8Zu06̆4~;}S?QPc5G)HXQ~ڠTttVKUJ/Ǖ";CpUp Tor_Jȼ@?MoHb\PF=, O&XH%93d` ?=Ou4 %Ĝ9W9OqZ0 {R#&H|]Dœy0*B[Zs3Ҹhl+-¡uF& SҪ<:<ʇKk!e!߱k("}qh ZLD4|s%کo [n~ETD^X8YYjEw0!ަ:֒:Nζ5Pm䙃^_7V(P.wXY{N-@$"0QT~|`ώxK&Y۽eڭE\Bd+40{%wɈVMIx}Ȏ==\qG|B *NwzoZ3lRp1e<Ϛ)GE|kGkk({Vŷ,)V!K25 ZE!k>Z^6 6*r_޵;ܜ׶ӼiO{݄j+KƗ#O tEc\@qN4u'8"ԽhI5bF8WNft<yl-4MRy/*$[rG%*?N9E *e*H So6v^|&nMIR G ,d+ ?7A8xy53{d!F&p8 <u kX4(Ed }f8y}(3YT6y]n0TzЊEKFv,7#*@DeJS2h3uT䮣hx>tlIKmУ!A:^6?H!a$wc.Q')L9ca !˻xISS<W6cNyV9@2k7'3uZۃ}d>frNZyAH!@J9KӶf57=x&v-Y?,HI75Bf e}_1a̙9R"E ;c2BlF:g;E~Ը7:m6||8;%Rgrj;1lX% 4&yUMvXYWyDei&gm9 Vښsk:+uy=3OMyb1#ZD5URJt-qT?DۄiJ#_Cփc~w6)͹D+~dX4v_C |>${ZJԨ֤{qE*5ԪkwR|P]s1EIJan¶inr1};8i nNta Et5}uQw-K2 ^QO)Csot Xs5҉ mUt[6SZc3 A“CVAݙp#L2sMcl_}-K9r$@w>iFiy^EI:_[$ V!4Ͼ(t{ 3RVK Tyqf_,|[F:,2ԥJS VO[n`ړewK5iu9N֬Z*BzbTuhY:߭Y!=lY=tVTP]@bżJ3>q1F7p3fPpCiIP2@(5ܣ$'dr"X-VkrKvV8ķ &r3K%(,6< zĩ3T)0*%JkpnHS`e`;R(^4;8TΙU fe<;S5wu;C9i!ӊl<f v;Ja%Ɩ-$ N+f?+eHvF]N`Ђw74xAPj)+6Gx;9~KNy,~(0p-"mCv 1gH*n`.yLXʒ9}P߰1˜+9P Cp9IQp`M4km﹗XZ T  4IOB?[2 }*q賦W߾]i>DApvx@Wk&5\Z@>@h~hmvM]Ã)a)G=F\Oe],8=]@%B[Rǡʯ̏yQ[Ḣ㭑ZhG6#J-S-ɼ 7Mjf`prF{Ilyq6s7ź1c,u *xI甭+fn Qpmx8`/fL&?np "ɗ<55\28L8Q|$`8kB4gSdiKOfk3з8+D}˼4!(_(tO{xSO zWqpjρnA^m=t ^%\|Mc]C3Al'Yhn:lB+_!>83ޮT 7Knʞ5U89:fG` ZZU% ?crQx,n$3uw<@i0e@f7.'˷T],s*yS,:Ĉ.F21(T`CTk-".p+:* a`>tXK@ύuuJi =54Cv)b'Xqɿ޲o5w\d`VrxbYM?eӭ1҅+D N 59jʜ~$pZḙܕEGj/YN(MCJCFo/ Uۑ6_ }L1>C7}4 PxH+BnX7QlOKѺ;;!r`pa1,Ǥ% Rpmj;2Ø\(`ٳG~T')i"8?vV02QEqX]PXu6lRxiOR*^$ZjG#~Si+l()I :mfw>ԕY`$! |҉NY#FE0/YaM’<ת9p 2gAA_YLH8(.n^qN$i~Ki 6@] h \*ʸJ1zSzXJboɮÊjkD6=wC?9 MsJjDz *K]XVjz[&0*`]?_64<=AEuutm*Q%]jja9u"Py_:܉g7hYwŰ晞W!  j& &(V2$X쨢W))xAjQP*1GZhyxvqS8:Jd#43b:<:Hfw(pRv6!7;譬f|Y/Qy\@f,Sda{: j*arɧj/[CtdgY+)ÒmS<)F6Jlm}]L$#OieZ%I]~X0O{b "oaъeC0ao ?^cʍ mHDi%/rP,F^9.`L iU4:53hDJVRg*MAWE_#4(ޏqê[\r42X<chVOq̸B]9UsS[PM8ZWSb2F%Fi?Wµ r=#$_zSz~ok#$Hg,RXd^3CInhfꍛKؔP;4O`.籱 mtFsD1!\.5GM,m +Vѐ Qkˁ5yL"5X4q" J:eͧcRh5Бx#ߧbzov &W=e+Sc@v*yf;~3ׂf0@nSEc[¡ny~$1?:,*G |n @hqG|W^qE~&oU}]DS9t#'J9mG"مϘP &VF~ -Jg5|~HR1RtszkJ[O8;θ@<&+\}Rуtl+ |aΕZ*/' p7m8U}T`RWLT]bqFX>$MZl'qLά GR脸C(/TJyG\nKt?$@8&= 4042#F8n8ԌdIi[Dtk$x]aͺ6ϻiΦQw]dȭ X@ YZ