apparmor-parser-lang-3.0.4-150500.9.3 >  A ddۃp9|U?]"@5_`%*F; [p4DW:T|u1_N .Đ!2lrz}*Q*nk\ ?͚(}(;_vP^ ,{2q x%4Z "RUH?*DiHpиCHؗꦮڮ =-.~HO@fܺzZ,U+O4˭'/#hDy69)t޾3on&DH9יf570422e4167f6b56d48b734f6c35047fef23b81aa7ab8458258c73d583d5464f749abcf4ee39536a64dba1f7e0822cce6c8ab978ddۃp9|k'!ؤ؎ omC#pߵ8oz&uv/Vkvtkl_'rsO#w|6T!mVqNy 9آwjl\#^2 >IlI;?Cٿ4Cwr.JQX<YQ4>P!}>T j3vg+c}@jI-cW?MlcZt4ZaQt+R[nmgdtꛮN]>p>? d ( J|  &0?,? ? (? $? #? d?`???$8(8}9}:%}FG$?H ?I?XY\?]?^y4bscdve{f~lu?vzCapparmor-parser-lang3.0.4150500.9.3Translations for package apparmorProvides translations for the "apparmor" package.dd#sheep07ǺSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Localizationhttps://launchpad.net/apparmorlinuxnoarch2-L*>)J{%'G@L0E E+7X&,pzDnG1E/ (*6+o2++X9YI;vDDzT''́dd=dd=dd=dd=dd=dd=dd9dd=dd=dd=dd=dd9dd=dd9dd=dd=dd9dd=dd9dd=dd=dd=dd=dd=dd=dd=dd=dd9dd=dd=dd=dd=dd=dd=dd=dd=dd` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffsheep07 1684331299  !"#$%&'()*+,-./0123456789:;<=>?arbgbncacsdadedeelenenenenesesetfafafififrglguhehihrhuididitjakmkoltmkmrnbnlpaplptptptrororuruskslsqsrsvsvtathtrtrugukviwazhzh3.0.4-150500.9.33.0.4  !""#$$%%&'()**+,--./0123apparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.mo/usr/share/locale/ar/LC_MESSAGES//usr/share/locale/bg/LC_MESSAGES//usr/share/locale/bn/LC_MESSAGES//usr/share/locale/ca/LC_MESSAGES//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/el/LC_MESSAGES//usr/share/locale/en_AU/LC_MESSAGES//usr/share/locale/en_CA/LC_MESSAGES//usr/share/locale/en_GB/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/et/LC_MESSAGES//usr/share/locale/fa/LC_MESSAGES//usr/share/locale/fi/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/gl/LC_MESSAGES//usr/share/locale/gu/LC_MESSAGES//usr/share/locale/he/LC_MESSAGES//usr/share/locale/hi/LC_MESSAGES//usr/share/locale/hr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/km/LC_MESSAGES//usr/share/locale/ko/LC_MESSAGES//usr/share/locale/lt/LC_MESSAGES//usr/share/locale/mk/LC_MESSAGES//usr/share/locale/mr/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pa/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sk/LC_MESSAGES//usr/share/locale/sl/LC_MESSAGES//usr/share/locale/sq/LC_MESSAGES//usr/share/locale/sr/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/ta/LC_MESSAGES//usr/share/locale/th/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/ug/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/vi/LC_MESSAGES//usr/share/locale/wa/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/199b58e781a1bec73a7aa1a9da328ad9-apparmorcpioxz5x86_64-suse-linux'=QVŲgx_japparmor-parserutf-8db7cc269dc479e250d46f8e73e7c43b18b13ae8708d0d1a2da7251d613cba381? 7zXZ !t/] crv(vX0'.Ϸ\LnU ʁ_M?iұp8wHzXJ G+\+~H{JF%JJ$zv)nTY6@t(␮!Hqbzpmk ͆L/YX'=tr%kRpP _-yaF"q1G6#=nucRe\Ջ׬C?]~ )hG%:ىĨB4$ idz72vU'A{9E7TՆ|߫p`4/_VTm<"M~ _v)Dy{ï=o0 Nlq*_¬88~F3b {O6Z'ET2Hfd <33{U bYIP1 yXUkձE"-X(GVNJl/C@(lej,UJ k*A E͋C[CkQ#;L5xt5^C"O"q|۪{" H؍U@ޯ׿ PMfv^f W3Go74/?3QHS7RN+8{䧁* ЃRIn|($g2pZ6ߎ#&jWn6?ϰ:.=g}Deo'hR:A!9$Y[p5y9&Q CN0vdgNƵ.q+h*X}[W$I0)^ao6/ v$7ĥTVaOQbR/a>h KI`*h'7Cy(%TvL9z36Z]:$ O_=v+voggm[t*E,k{l4`adMᗂ@,^u|:eV:BGVɸHxFWUKfS6)ɬ@큏  R~l# /Q%Xzz6yrL ZV,\GB Yb!}s2ߔº  Ais fWzϫSӝi Q!UIC \AݭdxJUPq%l<&>gP kIs,L6|/oݝ*GimƩz*8=(HB%CsA!-䌋96^ (\`(vTP{!`ݵ]j S2QZPO3v=Yq uzBBp=%l!TD~PM}_k!<]k3p'{(8۹U Pt/X ؈G.`2,^T7" ZscZH݅k`xNLbjoޜ&ŦC r4$l V=;ʹh EZ t@b39;𢟥Is O;N>:j 5ɱd&LSlX:P}}t{`m^x:y$mCLO5}YA^p)zXnF 0=Gh/y&pP ! (V6ʹUHO_$at]uo](=(&lI_^=v+hK_J p3Ac2w]r\6J8cb悯b34 QHHOhM?&ޯٽ@)Y B֞,ĂaH3ؘ/Mљq#YN<79־Κsm6kK)ij:aϔ2l.?Q8ifBCp8ݒǛ<0ڝd.iBWڅ0qp] rwq48\Zc8TdjS5\j#cwYkb5AQ }WګPd>NÇ#^^a}')m,X뿕[[徑?h;5.D-ԒͶg'@&M}]&kuΨ/vqp: &3y30w2n>Rl`BAa*bpXCjޑ\A.p*}ƚD peEZCwX1 XR0_$n}$E%g:'BF_]M) xOչA 1lMVh?Hj:K>8quEyWK3e%#sQ}X4=a&\?'${ŭ !\r:$NGO>8`׮z͈ vޔ_DI9\f-J=?t_,=s "1xP+[U*-V[ρ&yOeT@s}UjzB(E_[?Aɤۀi૬ ,f0X%bHa42,{5.6(*R+"PxVNP;zGЭB)3U}7-\6$3іn cM&,ƴf3c?z)kph'W(AZFh̶\ω-!t{ʠSL9c8bG!%lq>iĚf@q^1Ha)-ŪظyozFLp*ᖻDLdM2{YA w?_X?۲Unig ϲLNu&M>8,}'ʠUdjE3 n[2$,0`P۬?ElP &;naRr8ܐځ2єwUܶ b8ؐҎcS>XD־-pu1)Q 5?s`.EJ=&[)P;pdDLxa#淯3z,;„\.h@BJb4bl k'.h7iӨ/ dkl?y0 kgK2ʰ=kŢ˷\$SCy  N.yqL\Zi܃Zp ]VcmcYw!gp]`hxS6 BnP5 ŁjT.>WPkggL+Iw) c4upc !n&/S#a0R)82܆2s`RT3P(K.\GJ/lw 2:#Nѧ7=;P *G; w]9,#Z\H#E Le c"+,ʶ!zl`!Cz%fcZjJE_Ae$J%o~vWchlmBWi}aYN8dmhsI t~`#6"`!XPLs?jԒ$O׮s|OdЊ\zj)/.@Ye4)ΊۇsΙFC>N!*nH()bHwY`"=^?G3- @2'͆sYc6{u`4ji b_MsҮmAL^RZ,R` YYkSAGw)RlfhEvOuK ]IηsCK֮(*q R/dD*4J;ի9?Yl~H\۳IRWN1 ֶP+W0~*\kB7 PǿCTa]6zPڕ#`M^̦.{tv`Y;B^_d'ouQq`׎DPL:WڠppAS'/]*N+LDu >V|k4 'Bm×r[<5Z*->#P| |h:Ǧ?Ҽ)G ]òRWK][(yPnDȪ O&& \=f\F#H-IlٯA}&uAqS]U]nNH:Jb2Jp<˔(hIAfDp=.Vѐe& 7NCY}$((֯%LE)dGd|IJ EAYt괤Aw]O&|ݼU 壼 #F<ҫ=C٩gm3vShJ- yi0d{td"vUOG(# *ʉbM%C1[,d;*1U9O 9:ΪY_66bZEs{voA0x< Nk@݆WpXІ9 g~E=PUe,<'eNE/sG6 RߢL_=9PfOʥ0"}qvk8dXM}A]f\A*"bcbN%[cQil`q <;sN TcRr }MHyD`dGKj+sMzUr{A KۧŊw\UB9̿$$yiUw;Dx3Uzk%x)zrJsnRy ʴN+[7~d/܋VAϋ0$O6ޣ:\n", &Йk0J^('bC}3:^4@oNr2's$JXPYAY˻Xr1GQ~B ԑb}wϞ繘읯J2gQk#_Z9cխsUot!F[:oU8NG`(dN9P т mٻ}Xd<"B>Tf33N,sƱK|eĠJh\eO+VT5ŸH[)u_n2%Qz$Aokw'[L 6~+K&'+i9EB2'͝QvZit&Yaɼ]2=I@侗7Cx9xIO].&;'uƚ ЛxmcKKl_O R'Иwӎs9Ƌ#'\kGlGw[fσɪnhU{X4p Ӣd$*)Q ks~hW"4T~Fyo>i[[|.8VSgǩ2:f Ϳy8Rk~" Xw3A~P, M'gcx zP 4b~7&+%k+j3B"]D\(k]tIV \͢+;2 ܾ\ݟ`px^=Է &Y{IkKd[jMgCqYXFn_] m73gVKS"H*3iۉ<4z")3/! $ؗVJ h q(Ǧ>,|[0kZg wP^j)/huqw6oil$:'\.rI̡t.EО7e%"4*sT1eC7.A<Blk/q RK3>X 痉툢;8vmWR<1  wyy$"hC4ků+n]#\8 sf,?1[It2`7 Ym']/5g c󺝁 be rZЏøQvTwU9ArŒ+R0Zbȡ`ɔcgjX\œX6,'(\:CU;y]qc㪎:2ձ;1 .﵎n #aEGKg@ݭ16,26H|85{isE@JKj661u]vwF³5/pjwL(X!?kFOb jX-&%ԟTa@&R)Ov54E\ċw㭫 j&UwJ@B9/1z gO'LYYT`V{@϶2sJ3oˑerd eN,O0X3f޸>@;G/51c|_y:9%%O3Pvr+iu@x:3@/b|K"@HSv*iB"ޔ߾)rJEΈҒ 8zi6j>Y=gX,xJ:9 d7FP5 %x)e0O/8*2l"ؤ**Su+sLK%mFO`YKLC[*J i;㸋SƌV>L s]ә=>wy}sc~Wy-$c?)<)O?ҲTC3=qk[~|z^ƻ1A Ac ؘvRLj/[@bVvўRݥ;y@KAr݁$4ݿ3`|U@>l8T{RzcHbU\p.\,yCw}]S(Y^Y_9W.xPZJ.W STJrn>;pWϣ<e}Lk&< \v\$5$o 8z5]pX2$L^+IޔqX  ˂X:!h%/׼ʈjU.D0vwQ|]DQRlY ]fY(!jMǢ INlfR1ѠBkvtuRO,%"bXnc y.q9}N|duf9Bty~:ꓵNl&&փJx%1N_gl?[n`R2~|8Ҥ<8jKt%JA9+.@cO֩BeDjStکdLC*_IqN:ү /?3v@~ϣۺ+R;̠̬Ã) ]%4+HEn> "^5gy#>"p)b;{29E[m%Qpȿ<z UgTʲ#՝ީ0$8=nlZlHHI.h/Q&5n\Yci]=!mGʻPK60d3ٻm40p!%d![ wgh" rUMIWwR&ƶoJb$b-3Dv4>Dg!u+ ˒?ktFܿjm6 puro?-JxeW+<Y*t)_lTi9=ҒG kD ? Fog<8" 1I\HB7@Dz`٤j2̭QW=讣\={)0HL]I'L?ZdtBv9ٓ/8':s/ YKo]v& &~9iB&9R=& 7(S gW9cPt![npy|)>J Fn_!;:14V/1]PXzAb8ت V3U7Qu򧹼%5) b*7z4/;0gmA'Om}^N ASCǔ2XXLw"D #n1|&m&0?a(3W )5-am 0C 0e[ S)4ZX]nH|$8\Tn{e ~.h%]lsޑpN~F^u%,êU65S+- Cv__nvHk{Q 9. ,9Rw#iKYW}4d(>zG A0_AWoZq*,&;K[Q_tO>Vj!Q"/J#=irp7Al+4Y؍s}slř418aR r"$wl,%M?I"PmmM;,#b#%.T;,ȫ3}b練DS6 D*A ΔxW YkiH%#7LK>5 dEYOݗkkn6)xr|V&C@zϵDwhLm`;:^OcRoh={=ϣ?" uLzzu,uTCV9ډeC`A; <:6zϓ?AQd[UJРͷKmKh( wZ0[dT:NX5",@Csw46͹%Ш&}{bs`pWn*#V]w|8lxBN߂<g|:6LGz!F7꨽4tH`Fb4=]TxM\P`؟ڬp3NMvaS L0IE}>]y8WvFe #dcȶmH6?RXPyǥLL6 Qpsɻ. .Aٍz()kNU 0ULVy8wm=uc-kmOy4KLۂ.,i)}ش緼^RƧ*ŧ`x17m97^XA$Uq)Z7U X|I Ds\E9XLk4]ЁwmieRd<Rכ։FZo`–(guӈ|'b %̛9՟S?^^Lѭ 2H-.ړr+dIg,z:*[y`![2E^zQ2|]HA-AV@̞ &XgܘQk^nsNЀےk$M'=-\fx(IMt$JlQA1/t ҋs C=*A4˘i`xM|Q)˦s`=f5mwz(g%i>:8+\-K>(S?y[NUZ+]*M%h8U.i4޷#\/dsXcb#j}n򓔲G(~M\AN@sw8`؁չTtưVֺAy]J4A7ScwwL~o3,]1|gBJy8T79`fg2Eikf"4e24u4QCԯB\/&CGoCFfؤ)7aH WF2&nGd2+!o·aٶH.CSca:nF*%N1I[joέ)r630jܰcF[6qÓƖG!S Ab0eeD3ېJvcX-6/?Ͻne"$gp7eEfG!:h@82ƨiumnj#๱kJ[Ku_-V'Q\5-ts.<Կ6vT  lSH#ż6thۦoP)9 XW_Į؉ ˝2 S%.;;4e~.S!\Ohu WpyƮ_?=+JSu^pT^k<7g*#\$lQdDPΜM٦nTM4rZ#Ѐ#[O+^LW_Pqp̰ȮM*hP#CW  JmٌnVzey,m 15w$߭4}w_l 8`%s~qX(Lc&*&|ɶCi(S\z9'*{Ź}:SH$~IMwCd BҊE}PX7rP}HN4qXd{go˴H/;jZ0b{6R%z8#F6LA98ct;S[aH?"D+SXjG iR#X4XY3e@[FqHmV(lJ.m1V۷4 PBO xvٵ2\Y~r:eoz(xW4p.[)d u_3!E_et333vH!7{6z9A^xv!܂L/Dgϣ.u ȿcb\rS%NZrk%9,X?oWDHNFx I`W#ڌrchg-+0?SU^HA۾-!Ti2ޤ>34fڒ!fitGO4l?M:We$Ó*-F]T܂;:'o%ϊr9@Mr_V禋/!(ܷ \ϊ+ȩٙ[ī5;$.(ɘVI3cǡl̀84,%,Vhʕ]44jv[Q'|-8;}X8 KAwGbWK],3柚FS iK#oF߲(wClP'7HE W%oÁAocі^gClsNq|Ye6ڌ sNH0imU\mV=Zr䘙vD۬%L;Z׫9Cǥۺ@U5hr,?Ϝ A8@N^h"52\+|[$h ]#Q:^ H˲^ȴhKE$r|+7:yھc3;% aU<[pLAack]7L`Cjz'Ay!NSλaPIC/8*=tљ(*_cD'|%"UHL]1G)!#BY b?Sw|OK-~5eA "s3Z/j0\Ļɾr{kYFsqC<0hi# LܫJΙ}ۢZ1L.SI6-\.D/#ZniX |nO[7xtGk#q8礶Z$ym0=]M8PWÀCK#,m<{}]蜊M=vֱmG[6k"+Ĺ29? qY2e$8sz"\.xWDQLHo,0 JlXa?Nz]ª6VJ,\stMZ7^IHEJ767 2ۂEGz2g qhT#܂D;}>D2 hsgrs__332&$`T~fOgdsRR=\c&KD(.fz@!3} V|(!AXۈ'0ו8HJLuLaO,eB]2DsX"*YޮYFQ9}Du9!*~+V.iᖰ33Bgaw^@eE6b|FW:4A1>K=BUnqv]NxF7rQR t9m}wt cL.0K; ⪼,X=!~lTb\w1BQcgMVgf "4dWVs]]⫨O &F%8 ZX¡NٮBV 0.nV_Q61PT^ @)yRr+d4*~Rr9G uBFNjtۚI[vOafp^ kL+B{t[HA%x~q_\hUqFl; Cx("c : B+dtq߈-x.qt$:i0Mg-fv`xnȕoti`"g5A5v"j #Odʹr(a~ 챹_z#gf_ǹeYO*D ~dXL(M 1Bjgf'l'^Kuy| `r4N95 5XNoR'Ama+VhtV? *MZ_+H@wή;XyàVFbXg`0'G]|ž>鲏eIiNEP_Lyxosd;-3U~^|ꔶdWLu707a3)v1QE+g2ZOi }`6u$&e6"Qx/'pl6Ǔ/>9Aj Sj*v$^u$E$sͿ[i${f U5:Tg@[ٳBXJ_ fQ%x;Hqwf4H=3)x'(RHG1cEI5/Ap>Bf Ys)ww# &vF3K 0۹?gkwg y4A/"VЯc8gkšY Vp 1 'bXUi.O+cXlOxUzf%f@T| kB/O-_0\ 8kom1 T_|ZP, 'oe{~~;Ă.-{/{p/ HLqrnӗÝ߰zI|iKDa*DFΰk~l򑩧hWߟX6GP+7Z vSk{ݖ nOuL{4mp#(F#61 pfT9IO+?j?_o:#%^LD`y &&goo p.C( ] 6dԏYH ]>)ahS&r׷o!|>x uhJSÕ ur/K-/&JfضWS4i0+H ̮0Itݣ859a_% ZΠBtf%I*=-W+x/^epDNQ{Nzr\'ȍO!61IIGSζnVhChk՟wXd'\1 Ӱ;x`:Ye p32)SgeW@xu-Q+uLKNewzvߵH/qPŪ{z]XJuASjiwHJ7Ys&m*.tE;N[Pm=Y/&jr5HF:RUA.E:ۧKto-௭_6CX|$Q1ĞǯkV֗?Lf&n[bA4{kP:Qk?#,BxL )-h9UOF`}:LWMY)`+Gi{+|Q0N &S@hҖKQ0yG@Y #rs՘G.cp64c0p6>.:>4Ue{ΨH*|%td&,(yE]RWnX#aB_j"yp鰺']%+4P#0C9EW6WhB"V6 d n1aj E=oAx= WiJR,(>nJ y:Ŷyd ]>4]iLDٞ$$^kXc YAEqf 3}b]+}q5$$O{dc jݼRYR! \ڻ&GJXxtfߴi?%iz?jׄOp !^y}]Dn~A$j-bOn>ˇ ע821ۑ?@vO=ςņt_v{ɢXvoŭg/^1dŁ>] 3YEFt] `.Yi %'sq7.*Wb?0E_A5?Q`Hޜ {V6%́S1]勸])g Mt٣R_jW) * e]ʉ^F)#헹7}hdq@Ҧlٻnx fp/pQ lXTW/(#;8,5+VNKE,V}ؼ;%|[뙠X9F4]^P,o!|"*HׅC"IoK닎-&n1a2|(Ȥ^aA6>B#iA~;֯><9Zb_}Ú 9gi{R_]irL9 B9ǜ u2~eh#"0>/<7Ɍ&&u0D-aMEZ.Je!j db=]ihśyU5:_| vo[DNaܣrZ5`ETvRkD)ʶ̕MHZh-udPt6cJVY`) ]y^"#;idFqmR oH%J֬Iґ|2 K#o._ƓJfΚ9G 4) 6hpF[\M[ UPH.a8 _<-kCK*4:lW1Cg|R0I MG(ӺJ>jfdtR2혹GÅ"k5 "ߓ5ΪGOʥbNIp Y#Db#jWL)(J79e@aΧlcw4x2D?cDvv#AoJsʼn`{F⊮=AK칌y3؟I>E^վ>EH Ō$gpEy\3ߺ`?`tԃ6SZKLiTk bhϲsd,GR6UMѴc7@gr=ym"-@uYaZH !ح[KDFZr Pk[VIv59B1hEYKV)pXҺ|\e8w5S$ ,%ç $GLεj>aOelHб'Ǥ{f(ɼ29P:A͔"ǎ/g3v}pOuK]AThj9)`] NNPMWqPlGHw\Pa!ç΃]>`j < ؐ0e5=ϻgpm;`=SZ3)&:#֐d J>Y2_lIeuX| #)=٭&B"FWYm߅KrXKgm5t9}a%R != ԯ_d[b^:4),}H]|wX2Qcf1/z-HN3eacXpjŗ[`'N/VWg;M.}3Qu5BHFI`-by#gk`fFJ!:!)j0mPSPh_8RlgcD=)gi5;"G:}yt A( m H]mfZ*/.:onQ~6pQݛi~v$?Ərf<kg J=WMՁz8bYc+&4TEqa 4WtjȤ-DevO#L3¨֘Yd__R{ AQjfDM9˖[`d0sݥ#Ve2]sL(vm!}]:N7l~G^vY(iDZCyoFF+դc7UR2B~>\ЙBԻ}1i6Ego|l?]I|3Ce\*w$gsԤ H֫cC )ÑZ=k&++ex1h`MK, ɇ` p;RC99rw, jwz{$Jq|Xzj2Lf\oFZv^oZ4wZ)ŧ+~tuQ3'U]3+\_5 J,C?+*wgn> Jl!,'Ga2w{@b"˵6u&I.h"q/i !kTF{ ZooG6ȷrO,o(ʥciqC`-o-$)L( [}S1ۓ64{U=RrH,& AtS$urk2bޞ:[L"J9@:&~K;cf}izi:C)2B tT?E3K$UG 04iLsԋqxJ9[׭$ m ~s2 ;=x֔_b!ӂ}?QvՈA~A=LuEwej{| -A:'>ܩ-OE2ק? %yZp,e.Pr ^e*Fu C* n;1Wˠ봃b'c(0r$yS1ÇѱtK7Kb;Tc-񃳁Bt0-_ch99&ܮ#P-6u)Bb}45Ag?/. o *5)-墇rn"@}" 2U ȍ>\L$VGDȐYloMŘ(,I|BKNi"wE-uFMY^^>ȉw {a;,8Oi,W,ye#2pI0"ޯӁBD*֬34/)+vU*/W3:b#|.V*f!,;.Փ{iF "Z{G-`g~:J"Xq# 51'-o}\X dq)WrAj0i32C}$LT:-w_~0e*|4 EMx ִYMo3l#ZZOR |ܗl/}-*a ܌~.%3r?}z W {p)Vai SQvZo?p^?䇨1&7bܝ"j`BC>LHv`$҉`s$/aFRaѽyI`y<+ZC@!V=MOkQD4;ꚶT.ؗpW:zO10F} 1XuDq:UAV7 '-XCrm`zaƩbD1c5~uX^c٥cq!@lpH:O{GK[eY+?M tOx$۸俣:j!iV~U8INwr9=3-:IIʡIkg0wXd S:jYpx񱎴*{U 9#e *]_l&ꐋabp8%sD65. 觷Oo7.> ∘`wWF_@ (.junfROu  ьcpA7T:JUÝP%+[]֞[4 a[UBH|o[d^dTAoA_MyL2q1J0٧F k@~$>*q'%"^\P^,ky/UlMտoެ0zXgFH犬67 Hhzv|}+r!֧d9#DqخE)?!M^%'^Y\gZD/ BQqKo\t`vw"L ur"E c mF&V_M)/k!"mHLmo|<f'Z&\)_?4XI0:H# tj  QՀm}Bxw5SYH@6lՌpnmөTڒacR ֒l͟TK,)Fxfw_ᐒnBa6+u[jeЀzs?c 9`HGj̝SsŠS"`xڔa+ׇ.SuMĮi1k`jNA><u)ϧG]K&ZI;PtQֱ\5:kI*1cS au8^9(%RC?DAqo$!;](we]bg[0j(#rqnf'$WVYmZ2bqkz7Z-~cr}Κ[5N;5zޭ-6?ы=y1!l.S|zK5U>&m/@'4nӗu,29R'sv:?hߟܑ7~S.K'~\gK7*ti`_So O ]i_{jNxC*گ ϐu*l )(|N)A7&w  'Bʦ- &qD͎>a:& j}e!;(!^"FH {n3tyY@@$b3K2$yC,\fM:HAˋsZvuYf>ȻVtY濝XXvY5E4fdB: eOOp׋*}u=biDՍ z=N~#Xnm[ylfGkG<6 y׫p#KCȽۺR*ewCJB3@ы*Rt)I%bE(㴕w-,0Nޝ,H Gi\ڬ{KZ˟aK+o v0-MEXg]UaWo7QCd 4af>•Ѕbx ·].Mc oȵ cfG<ַ3™GjGՀe@5OkBXTG;=k)!Z_p  5"FQ $CAml=G1\ݏ[X4l{t$oh)yQ+A8`]veqnI rEYhn@Cd(N$A9*ߪ~-#:bMH!bd`ϭ|zBl4ؘ`( YҀv\ss͕!: =2Ն Ï4 'L]LmydNds_~onIy ;YI2cɀY`CNlwPQ zw>Fi= ?yu5ei3k}W?Hhl,#t0d|pk;oihM%3NBj|/&N,0k./<^?ȜcDwMS3m&z|tFcذuC?\ݿ'g,L)uFױ Qe*U7p0_Y :bF\p~  j'ąIcM5f{jUQhM& 3- :'K2yYEֺĎ4ɼӹ ]!qˣș)4:K>994/ ~G cEkvfQX66Jh̜ I fn`Th&MRu׫+p}uf- (i"R *4 o2i"?+oPef+ M"計~Q,bK@P}X.8)G8f2 R|U?C*`۴"QժuMvd"m \e\ם:'e#̲T?JxO֕)kA Y7=5X-*!|%H?@Z.pB]ڡ0W(2,DŽ`Ύ?l`.* R:sHDF &94r&g0hIn!-7 wl$R~laG?(!4c仔Y6ڠ OZOB /9h>uNp>'*8a`cp\vϼm/_^=wDc\FZ~|<|~&oEˈXi}SN 5EQd7ڎ |5f&`&H+ w1Ó OǐjCUZ_Rc1G5}pTj|]@/|e CeߖC*Ml5\X. c\B+oB o { #z}s&kfz@h!mZ&6Ele:Dm/R>:0ɽDcM3FaA Wph2Ŝljf Ǖ^yeͷ\ryչ%OWL ]VuO%Bwa%{#`Wdcvx?} w syZ,PZէdd8Qzddl {}IW5e* rߧioǏxQn,s?DMư[&ucC,sddũWjqoH+KMCDH !Q综%ձL<~ʶbF{.+FAg8:=G=آ N`GJ+XTb6zɽ YMA";6Еv rV ګHr=xʲ}z?RÁ;Vy± FZZ=w+z8Vi`}(bSn@@LR`oW13eLNV5&DBꙣ;ך5T~.07b[z󮰧 yeagMx@>Iͪ˻GTIUOl%ڪ[rJv25~tQaɲ Y>IBȮt+bRf̼Ȩ lGApS[VOBx:IbI5nu,vʪ.(Ne4!h֚k b#R^l>sy©aZy ؚaj8?84 7}P\@?2shftS/5b"PjEC30ss#CcXE\QNwt1 :&a8tf*o!8*|]p#@Q:#W1p9E,zvt ]Έ)Tp̾Ä ^̞ RDOq9K;qƉ#k=A~+q%ݟeS+bGҲb6bWzrm=$䧯k0fAJ\VgQs@GK7M5d{=M]%~FB Fb *P[YWvܢ 1/Ged@TUt˅~YT)aA KY֪6dڑt@7p2zwkdpr-i]?W3=Ilѻ#nLU1u7@UBsw\f eAȅݛj.*6.V|Wd6E+bZ1RԚ=š) ( SLYҽ )ԥ>hfaw`Y\]X&3ƻw0o܅ {<Չy m?AZ!yhKhj[3s#<׫p3 fi:,[#^ ף$Y``W6}"hR`W^0'5ԕ#b(t h;Ъ]Q8 .@XQLT}'ҏ*D!w2T@`~!OLO$}ЧI4I^^X
<'Ӽ t_āx{oTAz^|x-# hdc>׭M7@c(jA}j-#->N8}4jewEh+ԇR(ᷓ_0KgB'̓2V5ʽb)qSjm-ȱ->r=߮l/qDPG˫b#13 s$)3kAE1L,|PHl9hEo:UG0]'ߒx& 4;3^+8tUq׶Dae.BFJm EV\1C zGE37Uԏ(_ ;Q=k;J1o" AmY꿴Ns]DZU:9i VuN&1I]+EG8 w:731O̖vifJ?-w3ǘ/7yՈ[W!PN0?sL^͹N7J##-$f\a/xT=2p51UjZӍ-PK2V&맽ն]󽶲/M  HВ&(F7WZŒ}5םG 9w&ŃhqU/-L3By"!^ ]+OlV=4蝟 7P_o)/Pd+PyzI@ۉ!- ?5B^p.~5]A דdλgR ̕K)^1f Hg92 L/ףґţ^0Ztď]pل1|b7>2? k@q5/W`>sS8n=4{Ο`2I m\"yB[f2V(.O3ٖRHV :rN:xYB2o3\SV6VRFGy=ToiZW밃[](V'Q]d\, CΚXYz6{g 3n 0 QJӉ&"ZhQ <;,A+Qa#)!/ZN2j¼ dNS剱c*8G2U1#T]iVsm%'p>tQKZ;$:nt$%bX1=PYw(Di7-!.y#.QLbMW c~ɠM[0PbKvzf3(<S\M܅"8X$#VP&m|Z&, Xzuw>()9"F(A Fl:Z)i3F|-rSAmt IvYNvE6H¸ P{2 b&Bo`ig=waj)la$J.ݴrgL-`ia])UrZ|Oo Z &<2a|Ua0Mٔ aPe<)ux\$\KRtE~-g)F*v49~@WDQ Pi,1q|-,YZ}R6ft ~b^C!w. P@S\i.(RVWT(QHZU´;C}_(ݻ>{WHf uT"3p-]McH禩*U009|+=с >Nku"F﫞= eVLiǷދ^5CZfCgSI%nc@h3۪):hPZXE0~nB>cٯWtNʹ͕uGz b`'X`]g0n3ϦJ \^! L`]1j& ~dQ{WBcTT4 T)x?[B< l7\cZff]:pF߽֦FmIFM8C`zcf;~rҦjrl"Sҫgrǚܥs2 7k<@NW+ׂIZԉMqVYxv.%Ckhdn¢YR̃ WȟDgʇFQQ,M\xJ*b)4O`4,*rNTN:ΈFb"-BdD?iCx)?M` xl-3GdxXI^}Q[}?K-FNe&:n|ۄ8(FOqy4R2JZ,wkFz7;2苵иN#S}+N,(K׿22m@ZvoD$P䑮:hӺ7}Og-V~P0wal@猪;JAvCa͈ٮJpSE=!b# t5ѯcPv9\<IȻFlc5+UV6bC,Lds%W+-?HM Szbݔ(CL1-h.#kA{~(듿 #9lSQNauV"nEGNnJ3Wl limN)>\ ) 9%Gt4?_&u*j=?&U49Qx_mZfnaI(]@1M@Z Ҍ6;AZ|ph*1O!1͗#J8+,~}\}U/}ҹu+*Mn awF?x~>3Ǡ؃/ߟBdh19 8WfGڤJ6l":XnzM5!R bľI7R&N Ub=%`m>ATYXkjraHꎽ;aˡmn(3Avv8g DŕyHG1W pA3qRmO\kF @mu:Hỏ@̎PxrUϊ-ݐ̊QHqW\ţ6e 8'X~UA9&#I0L\G+շ&sj-4\ze],$iq@D1TK`c tF֋wU孪sbPmwrs;{JZ%,[xBN| ][R\OP>,~< N7i6A"s-x1Lre,op,4|@ B+45 ʊ)e], Ǭ  SKjׇEof~bˑ>XJI[6Դ=!RHch)1P'B$mԼj8e9[Xz/|d78pmx]u#H}14ᮗ][wAԲBED\Vj eKvKtBS4)pHTɚǒ/qqCe 3'T"2`D 6XInkDD8@$tΰcݡiз티iy>e3Drdd dH`BfROLEr'D.aJgbC) @EOFs!E߱T¿n|p[w3Ez*>se {Ӆ1Vx$ȄJ8}[nѩ xmSiQnx8ġ "PzfѫeuFDwI?wk(<)F qa%$g=ޣH0a/<uv.wX(=~Ÿ r\F˟^$λ]0W7Đ:oyǏroOKL͝iAaFgp/Gf'B}GϒWV`i [1'B|Ix{7_Qk!耻>VݝDGdx~/DEnrPW򉉠.X͉Jz0l!ǒ hf']c?Y?y*LbY6"YuUr)#n:vtJd7# c:c#d*<2<K9~,%xeu|hs RCiYB.DUai&}Kul,.ǜ*c9 W@Jܳ/(׶֢"љgԦi".ѓ%Gqg2h#ix!(u'"p,0-ш|1]obg[{94 u$sD'F Y7:./ļ|s'fWل?Fd _r,9N4g_+$G [W6vPSFǴlvf>s} 7@IW(Ox Dngqh%L45'?]jI~yT%J| !Nz@N/8OZ~ F<buXdSGܔReu9ei3C2iC:a*s^![^:wvR )z HšvE$&V,Aޚrr!{BYzg38bt[;X;%'Y"1e+^q87.1з' B@G9pr G+t<6"Bm nq,U'טK P)ƿ!d]&R;*t,b?;P ᒬ !uomb{Tehs R'S2M TʰApBR}sZ DTQna_&R/czj`i&hn1>k,mO{ЯHrObd Ǻ^ Bބ`]R-A=1'M&.i-qqT̘3s]4)YRWj &VXvimQ"U^:ud|.`^f' UּHJ]&2]̚ȜҍKs 0"2Qd {\zY)<ٌ1FLk& 4N硯ƦSHD5%z&ܖ_֤W3il>[;sQhV.t2#'#Su J׾l|NXr{T$ Vɶc j8@&яr,846i_?1B I#b@oRx&V( uEx*0B:S^y BƼ3::cxI FA ~>?P>"Vbݣ>cnq(˯ 41Q nǾEHR0YWq04 i>(vsCHjPtvF57Wru o&͍ԫ!M 5JpB Tއe) #_zb`xڵrw >>-C(Gq MlsKG}{6s!Y@n&1-oaT~E-v[E-Cn;[C)kϫό1% 3;l!D2`w|m_^%֖x^a$oWkXm?}?ͭ̐ "my75?"gTi~OOl>}O&- t֡2tX!̏ m<*cG5SCNkq@0z4w9;J|i5v8D3^{e*^C|p.6&5dϹ#>Gc62Wqf3dN tA2M"OxC /#ׁ:>C6Ì6\j7jN&?FxywsF0EctCΞ>^:L±T1XPr 7ձVF0|g[\q**,s HlcA4)s" 3n)%%:!vEKhfw^<7k@e=38Xy:^n>}p T*x<}7nՁL5 YM0^T09N@(GK{HU7`jvE[vdtqeVV_fgAI-U:1FxC42_Kis>_z8pF0hZwYȢFI ɈA%$n& J=@c"(.F/36f5hx$W /݊_wZ7+RƆEz[ `EoORՁ\,[-ON\頻HC)6Ac&]񔖮GE )U\YB/U=_@[vi~ :͹U0ʺWݸ&?+ xd? rr4M\' NG2;{nۇTF Bo ف>eOohpCg.ޯYBsp9w!WjC4Z|&ʎXZd]P4lfQ^cMkKG,JO5Y},Uq(xSzBՀU{[Y{0v7xي+}2 H,M!Β2@vs X߮:L/E7ؾxc;]=hB1^E)MZiz3|@w0Re.ޟrt^$vd#wЊ9jUJaX5l DzQYdi}mTns;^5#Jy^9&lȤ҂ v N菼hln*s Y6aQ%1ʶ70M#ے믂b[ -;476(.q:,67hFV5>~8W&3-fSepM۞M ?..F/7w^k>-JCn$2ꉡ%goHC"`ny3-;#M34qridn=z%ZR*0",NP.jy#)|,iKE y*J3Ri)_y? ͏ao_=KvR.|a՚' #䀈|.@P%pY[n}0;{ِzAsx; JqjOsHL/9SiZѽ0AuӥD뛷He ; JBÂ8xD0Eԥ@*{v+sɝOp:/w,Lʆ*gy?Vk#*ˑv!]gp/ws z1ˏ駇z (t $y☚C-FŘL ,; h,Yb4uf+G""7/mO(D4Cz hlF)z:6`?AZO򆁰H.ȉ}uDxPAMi0 Nʝ #QQeHrEYڏQK}},ڂ/}⾲1iQ3[wD_@> LRo݅7TeC&$faZd%(QzST"7LH݄$_s} 1=$sSB&7o2#?Zޤn]cVԲ=un-]mrkM̖sqӪ׎ZOU˰ k .)^8璯ܒ]X?6N"3Ll)'+rdWAxDJu+A+}|)9'~P&X|`f^bYTqtL>HDY\042Kgȁ$-OJ! ˾Hb7slErqw.vQ&V)kckQ}e^uCDI1n5st h;ocI3O/bw& Fͥl{咨U !J֘:%Kb){0YwVl!Nlqj*5D>xQdj^;G `FH [%Mc8+L8&3ЌqF:>MEfJ>CXEeotQaPгb19Ch\ ?æNEa: |A3ӡ8U [b4+B[dQ\ɠ^qT?LQ[(Le5̡­/k߄9 Z%2b$x٧\cq aQyJ:1z}t?ֆW*YK!]HTVIe90䚆k c4"iȢu4W@\!ϠLNKB7{ h$L{eϵ:6]mᨲ "xDFE *pm4*@oB!Z`t>*uU:3J1Blg;b<`Ijikt$]f5Ŕ,i&h ▐0YܑSϥ̷ta8G7%J}H!WG[4-̤ ./g ?;KNsz"so|lE|!ZELN TB(O1|kGJ&h H1hUNS֭ȇ+Am3)q$^-'U >a@O^jݡ)W*.{լ}q f)G~O8} BP +)~-K?cC}*z$zg^'[NxURšXeSwh?ݯ9/Zf̨nS!50$Yn\_{;=}$=4c1MR UyoЇ/+bN0r ,=8ј g4KNT(V zuQ}*D)f?NSB%/t- 52KK KcLT#]`{R೭ikCR∀˩ۇBl_zRbzt`g[?Z/rM\b &w{9D1:(juO9[ ÷v(n ue1hnI![VcN$HW֣<`@y7*$[Ȁ(Q3P#!; 稌],{],G*Gqkt2xӌ}#მ-(Թ [,Xg%po`opx( D#&0ƊAGJքQ\y' Jv!{15AU\ cM-׼Z+o{B!@տ){JW&u\\ K{:cی*ɨPr$S>>)'7 7MOM8/m<+jK}0 TD[%8f/Hy-#OA]:7R]6O{~QsQu@爧LZ%[4Da"/S OBIY?%?)pFn%q9bei'ҀX 䁇^5Â/!PpEePʜ4Q3Ʌ1W5?2LBҬ| P1ӇV@eTXfC]i܃ٻMoH&㽍whq٫ZP ӟ`>ϒZ(uGO'Ycq3HI5RkA`q]{I*#a } F(fՄ_Z^?1Wt᪷ )K@8GoUH\qmL̦ `NC`ߙW= Iߙj,1/->r[Fۮ#›ƇMeilpw\=$'k#Gf(] ĵek "Pd%|bR@~By%M["3/ʰ\!Up)՛ȋ?'ݢI~m19G3-%.E`#ٹfp:4[X|#zأQZX>%7Rr>@#//2pꙵN ~%TcԸSg$B]}S<̑:{Ĝm|OGlSfD%q PcKMg ؉#$ G~mI3vE2臼addէ2b=B UcӘfY*;<5 Z/H  ~b[GĕVuL}j47d 3+=PoQ(ݭ` j+'Z2 a8ni ,҆XT̐Ǹn;ncx_mv='I˹M0~ R9)cd뭝"$:Ior.{,t\\0 b4uX$fAX^>ן D;F7'Mbf{vO}K-Pee jl4(KvGxo0ЏLx5BVVjȞ daC&h\l` uK1gZYW m$60qEe_/$?⾤˴)Mfg{j:1D'H7?5ܗEq Sm>uvɌ8^HlIqnxy=s`[]Gʦ:(3_=cnj5wb HoURssՐmڤ*ѴCj!SogttZ9dDxzL@Tc{DGCg%g~ Ei{#p8d Fb!HK.|0gJIb l#._GmadәHKdEB,sOW[nx]f-2Rz "|<<_GzΝ5X(lK1+ݑڛAR\fl/2n ZԈX0s~[mpcȖt:Gy8'cEI)鶲Vj"} xT'@Jf퐂ͬ0pwAOmiuK0cN L^Ľ{ +[QY6*dre񒪅:`Ho:WH*@uÜ)4~.!?GV&\AOu׽#`aVEU^\SZ&s@w4ϒoEN6.E';\^!ɞC&i-zÅ%Çh̟xg&)<(_skM AV}{ Kz(xZ$f`~?c-%Y5'F·ǘ"YK4d ؊\ZqЇ8^,"2І(f^dLh FK5:O95JjGi^e8MEo%ʾoWRGuSzW?zuiDAŞ"3ŝ+@9 RsֺR6tc4i(?wZ䐾m;No n=m]a-ml䋰I7 +T$ƋZfwCc CUq')FDZ~ {o߳s;W-| 8c>x$#a:e24i]׌K? ݞV/66q-_}FzJ( ŏQq^a!S.N[pup :T౫g!QT`JӃϹ6X[!ОIқGqwQW_F"z- &ݞLfؕ!#Q6 @iv5ݸV*=K`^S^3õVW2mq7;ģIO8te$%Vh+T%auX#LO{m& oa\99s lRBɦJ%x AujM1?ЫMɰmtD$cޠ CX%7U/N1(ckCB'2J{[]jC.,,Q+avߓK:Q'#nPbFE# %]o\?~hiw80|b@}P㼨MӮf:@>_pѱ\6??Pþ,p>7}8UmB}^&.r8bÓ~(2!Snnj\mwR紿oRtpJ$zT?>e ;~KMS#u `vP&K'V7M$ uTd1#V@2Ppjӗ6T/=I%%ZGZi}qsG.|at>~WSUДZ2Hغp!-ġ"8jܸr5@.M-,Oc?\m) v M#@ߞ'OfX ̾A쇥Ǭ:v=z͗t-JAmNLwR3٠>*R]YT} &9sO<4`z ̄N&4m {Ȟ{0oܡ:=e /S.zD5ҊQjŬ-*`ā/``R#4k˝F"0("'Yp'ąeQò a%SOS#FE]QτJEc 'yٷb6-5P4CH G}$sޮJ8`{za #fDXdY4ANtDsZ;;JR2@(b5gߧmjDOr?\Y`U )#PI*lSV0gïG9-d0@Qʘ׿4[N\%㜎zC>O s6 +o⎘8 ॢܗxf 'd%z/pm(ȩ3\5+%{C:cϿ69c̽?| .sq ER=0_![c?'0>MsQe%+E`̏ sU9HOka[c>9Ln–}7EAiFhifk[%'Iz(c@H2ߜ 0egApEV^ׅ.lWﵝNXxĉYô;Ӆcz~'\vJ 2u XѼrhm10?"Ϻ^AuZ ~QtagnUWK%tD$ܑ ]hJ2SF;rm]ә㖜|2{==AC_,$ַ{" :d]xkɿi.`lu3)1pJegV(E [a}ӚI A)B1H\r2񪗒z7co g.!SX!M[٦Lʰ{fM?*Z(sGǣ8DP@8tզ=^.Oo,pgI)w!Ơ2_F~w@ [F8.4f!r{ODwdlaMeiRXC㽙Ks޵{gQMN'N;"D|)V)Bs80*yg5[,Az΂&VV8?<vC~)eY-^\|Ptkn>Or=T6,vӂ-6ю)'ƭ-SA\k |2E|'`np[2J\  IZƌ^^ u8B{'] t58%&cyD|fo;PvMiiwSXN#Dž!ڷZ˨ڽ H*W~mIDhτ s.rfAa'6| }m.ndr!qKy3#utZɉ|Zދ+|kPx= FV;v(Kx$ Jt"oP~9&|oi89G8ǹ̕?-l\J ZΈy: 2X:9 8{I\O]rg eE]t)=si\ 2eto~U\ kљ,X^`p{#nNK6=魮.[ p+TJx mlrZ"5g'tm+Fkg=M6k N4`ܰOT.衐D.S&bw"\E쟟^wXbDDdC'5ʚVnΧ 5?2+0rR}F ,*erz|l$W251ABfJo}-ɱ]qOVH"i_C;u|Q4RyקU7n{X,mjz|*7b.[6siՙntPtNO/ ڥWI|.?gP+ƪ)(3}|,]B.f`| 9ف$- <}Flyz0<+-ľ瑨F"&K_fscwBevcyh|Luq▦ |jRi^9Pa? ,w0yQe MyPESx6=ۆ K9]cT<ءO@ǭۥ5uxTUq?JUf,QMOgu(rmjsk假LRĺ:ζX.B{}g(8όg Sa ^6[ԙY5Gz^WbvMXRk@RӸ BɳŁ vL& Ab*e#O*)bWdx3p*!=U9m*e4$ ^ ^grݗ7 \ y®B6(k<غ1;rc~-eT_~ijP\_r?ˠZwlX'Sc/-4X+x7''F}pv}('Q[UwĤֲ]j4Gav>whzNZT~)C h髮pt+WLAz0ґ 8}{c >YiRUťИ' ͠B,>_ ey͟YnoXM] =qh.Yd3OHw0Úsn wzAUʾH}(ͮb=-~g|ătHmDwi| ݢ>53%(@fvKNoK-AYO7Q=gUi:9oB .Q i>bI=IA.iH,r#`[X` a5ٌP"O5 u:ZQ0fT^0m|^ߥ` ўO3ɩ_f8l|n4x/N‰ϩO_HL:)^}:zD5nO`aH<@*/RzA-)9#6W-aӯsf2p]$GbQg$!UE`HTiE{/f:۞'sCɞBM)5u?b *GV"0r*OSVΦbpv(arqHHu v5f~-Au|Q~ӱaS}^spcʱ{O@:a*@z[(("F yt<}oQlk>^6lC4}^9Kb.bZ= @tZ"R>v7i0;$~ Cp|cA WP9tl<s_-Q6spTDyCtNݎݎ4ڦuc?XįG~\d(=\z}_a*tMi0ch$d-ЏJ/= f(bI4' ʉM׉ۯTC'%qzAAP>UQ; 5_1i Р-JNuR̲`O2mKn,+#$Ԓ{У~f?HL XGeN(cHlcQWE~)a]Dž%V!`8@&8+y8M}W*wDS_י9jH9Lt,SX 2sP" %>j X):;dGh#Ytveejoc\qIVL7aG.XV %oXnWjz+fy4g2r/^ciz㒉g$RUr(/N{07Hh|Z*^蚴g< .3im:5%mTta ~8>I5],s֛̖^51X")pual_[jBv^;p̨)\#] *꾡1e5_bpkذW(T ppMIu^AeuxR_ܷiRiBcvxڀ?-y'oc j/,X:vpRS;wBPxT+o ~"r'<>kʜ @RL4M)Hj*ʟj΍o"䬀F4O;x* 7%iրs({| n+R`߭:6TҺ 藋~A5A.y{5Jx'sh( pb^CI_ws,Lc@ڳba>= d ްe[Q&Fb GadybXu:ՀfyW9=/zwbd0t6|ސ^ G>N4>clְҙPl {HgѺ1Wx{tppuGMNx$ 0g]ΚF`L#TWHYx HMB5d\/ydfbh,Pcgv4M"JΝlY[#2;AʦSW4C2o4tK& %|T;bvwGp:,G56y a.Y४wdZʲ>sJ#`?XJ`7n ^@He_ LZ˥Z¥H,H *Gv?mG7^:ӦłJ[]MOt@a\xِ}Ow0Ŏ (G*nO%1b@(@]SH]GF!\dTZ܃?E9adЛYs}gZE\qWeUxft"'>\**eV&yRtڨE-BΟ׮.{eemcSj` 5+f2Un)uЂ ;V*TQ|n+kb5oϐӾ*2Y.fNe8ϽP^J &^Y{,Sr؅w[cU Q⎆?uAfXL\JutYqqKbĄ,_ϒ|Nq^9Xej$$n\Zjyqkn`F\+ U7@v61Փ>}Nm/b07,"1(Bϗ\'d5ES3pB6jm(Wi¡ߓ#^zk hiT])MM%Y.X*a% 4V=\0HVw l5LsI|)|٤cY|N0Ld}:io _Yz*xdC,ISIOC> ml8Fi!(DVE 1%,ʮvc~_g9Pei*~% ^#AqτLQWCC}Ɂ4H2Al[4m sIVjDj {/A_zG5-uAHFXsdK6‰M-Ǟt(bЕӵf6ٓ(/ Jv+5"q&妋 vp\{={[5Z5E E=p2lTi/t_|nvy߽ g,saCjs;EmaS>h;@+3c,bSBT3@BV#NU}ߖ$?b2gg(% V኏]U+V꥾o TN.hw0? eo$~D$ガq|#0y&ep62竀@ Cv;凓5ь#{D`?_Y_doȦ)r.`J1)&8׼].S%cПZ ms׹{@сGן7荵g?2k{itZSP+EQcϱl8HZ<= @OvSDaAFmN0SK@é#eMJcj򐁻"!͉`Yh!/fo^w1ѐl7NTW3م}, 'h\2;vt+~bWGo%1J'd @ xZ)ݷSl<,̨B Uu`ꈓ_XY|l\~ֳ-N$t\S#i9Vk݀筲DE sא z ɃC际1>s;R!(uNpJ|+πcףS`ڹ$ㆍj<'+BOT|v Q!m1p$ñmlCoEV[K-?y}H7;R%C<wd&f8xQj ]90qT(?" ٧1_inuC=7ŎWD7FU(UQhl! oNQ񒪽#VRdp_VJ\GHMHD%%t2fŜ BLA_ڎr7C{OOi rB 7y1fsAFl]E}3=eY \1g|DтDJ2Zlg+Ϟ:+׃0Q XF8tnp%>6н(O/ks_JMvd.wF*")zjhnIkR+lG34hqt&.;˘]x\@IskP$z0~)ɲ&:¨X8 p:$Fz{q 0uT$GyqtLFIoq ֑eG{Oe#U_]Av,Dy>DW2Mw7Q4]^1PN'*?Z2+nyuѣqW QŚhmH"_mIl:A Rjq)Sd-F"'( tЙB`;Wƣu`Ǚ0Zj!w Y] Ay+h{5)1^(ML\TÍ(є f+di~Cx.+_} jDrԎ_PT=wt,GMr3~@͠RBgE(bzζ0s_E#(d V'O:uװDq1esDXwߺ qN}f/KQ[cPQsa0B0{s7͙$]B#ekw@xQc8Y"eXͽB!?S7WmF5m 'Ovl*y;c0U}d?7DBvI:^ &QBq NM=[a7LE&UDXZr9yjW6/(PR^ 㷥^LI,Y0BYlUb^O:@B"#26U?:׭&[1T6_^;Cwpc<Fcj}Cw$~z0qak!G/].OQBuoO[}Y(N(PyuTpSX5ll(P,5$؎0ʆ'w -l(Q2Frl7*r,Џ^U,z'C2v{ |1:i>Q+8N)"73ӔC1Qw z %:wrXe1i@.e IWIovDٷ1Vjm<neKt|˵F*PvW^ nr}~Y>( f#bN$G2~{ ,} 28}vŏ&NB_u8,GrJݮY/d/AsZp0 ̍PJۇcjW,*fTZ]EETo) V%hE62',7M:nUG-6u8?Sy dxP U=<ŔŋF@W>v˼@g.>4u,0' ];33'Lv1qTG\P*3Hટ$>P )Z8ϝ`USӔi~ݧ@AqtǠ;YijEu}[R ,6]88v (?L|1ёkV[kSv{f-W`80Qr}GyKc1Q$<`$i@(O+i*v۱K"Ed@AF0wR- @nl2OL\zť~Fs HQFtd)bPdؕ亄kE7JC-9ۤtwḡ`1VFf6mof lnݾ 攬tv:0Wp'_Mq4cDZL- a:ίu mAFȱ7It3:˓Ȥ1xP=\JaN/C$zs YXgHtFVۈy#` !:&alI c7#]u}F{5hMa{07%zi. =wt) گB~`뱢 SsuQU\M ǥM/;N)(=;C~yv#+E(C&c DNBƞ^DGsUdҹȏQ/r^>b O]4೒\ܸX$-h<2ܹO%]Ή#vh gI5[U̮ y A ZXǻY/r)zl%\I?-IШ `| 07T&)Fՙ$xG/nS9N$]Չ=2^R 0/ש<('- r{OzZƫ 82Ǘ9FɾP="BvR/D(3f]ӦO-ʋlAF!y٭)fFoVºHYw%y2=:| 6 r*/ɳo03/uNZa2O<=#$-^7 qؽB󁦛Mm8X?W.r2VQLaDN?]22)&A|Q}n<aʩ.WT %=܎`N&R(Y}_wy/%.D-!bs%FIwUQ~ИPbxjmPSP;R\{@iL+(yp q~+WYyLg~ʻV#x>~l {$1B(LmTI͍43"t0AO87!-aua$n4̬nǁQC%5a/lV0snT~#eg wu @S\ 0NrnEM\ J:T:4:_eQ#,LC>Y%j2JK[Tu.$ýi""w uTAdwka1ZL?}Juu@ @Ꝿ-U }:W^L/'|E_LV ߯$tw{Ze⁉~7J_~R'U\&lsojwo9HP嘃&!RǷR? h=@q !!Kj=1~`irN:7oÞ nl&=VGR9(Hi%sOZFvzA库̰kn(~͖da/ 27_MzLnˎuN#ipҿ0̵[%Ie6pˀ,w2 oț"F0S4H1-(\wǨ9Td6@@- טS̅usﰱ)iz ,cx9pLu1(NTl* ;O=ob6 hǛVN3 JʖMͽ' b9"СF,52߹5"$i.?ъ0QG73mM^{_0JGw_{>,U?_4+ }u>/sB~˸B,M *|ii0W.yBSIR $XGNsZV.xPeO~8nG|~Q?!J<>?yQo#S'^'d5H`);ĖݐD,d:7cc}9N}_WPZ)A!'J栜/'H@*0$\ GRII|x?Nl[ԣ5=&6Wit"c^yyXM8͔ʺ"*_8aߝds_IqpV;`Z`vkZL:э<0]L85Y1zBdyaNhf։o>㋯8W{;_ƷX&@3gS*t.[;F͆c>F1W% $=I#`g/Fx3|ų^%Hh`D]w>cV-L#mDrE:yx56B\ 4u6b[QB+ alc*'jE \S#@φI bT~̫+ȒR]bcǶbu%[9J l0qޛ@=!sTs(Џf,Z1qL0?u(Yo % E/0OOP̳X#`MApQSeq~n/{*RmW{ A/VFWhl]0\tDKdrW0ua4]mJYr|]ݴLli,@dB !;@ܲ=Q8\7n$vv(Svg}1l3oKđ{T}YFwh'Ɯ6}.c Ǻ}( ՙ𪇦 yOzŘ %+p-+UtV]M% k/}V}2 \X$sG$8}ݮy`e_,| B ĺ /}ghՑuxq/qN5 &4=;# dSY3ןRtk} olu5(? %Sk{:)p+H-kMx\ˢmF6u:P~mekTPc'1~|$V2zjAh< f?m b0l}nmmrh? &30%sʊ'f*#r(ElԼ'k{&QEj(g.r}G7»m9BRE,ǰ="&Ja-Ch@o5uRQMyЖ|{L“ výq,M];x$&9uc)Y Dn߾{jBXxOM2ȓlZ=x(g ֳ('t̋MFCUp #dq  ekqkJGHmL_<(t9i ƹ>o3 ocl,i C P"2 "o̰84w\ I%ln ^thn\ɿBm.m; @U"Q >{[{cEIqǐz"uUьJ`8|Sh7z7p̧lM&|#oF}}[@"P-%Өt)QHJw7aO4'y@ g 3ɥaGPcD[L10sfS>)z`W%,'ֲf;^Cc!E('\ r`D蒍5+O8淦!y- }.dǼ6MK,$YX?,S׉îM7d+xnzj.I*j!| l\$wZQv3$mCˤo.GrR"5+bt I<ΪvO|j$gDJ,R(C1x'OK.pzudV.-!3魁,bX\aW86Yhmx4wɭ 2؂1?.$zw{tHƒR g\%.}A ^h"< N#q}M@@9`JiQDU~AlYJ|vC6R YZ