libapparmor-devel-3.0.4-150500.9.1 >  A cHp9|) Y!qe.|}SWP;2Sy46;mA\G {wljU5s{a{8ӿXTG&+/#OzV%tKy8c1z9F]8Gu^ 2kQ.*ⵟۢ>|d4AzbqkuڛT.*!ibT݃vÉJv Lu۩  ;,̧U5{`I18]U5RXK\&П >p>?d % W &Fekt   @  L`h(8}9 }:}FGH(IlXY\]^/bc]defluvwx4yxzClibapparmor-devel3.0.4150500.9.1Development headers and libraries for libapparmorThese libraries are needed for developing software that makes use of the AppArmor API.c-s390zl36DžSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://launchpad.net/apparmorlinuxs390x"C# B y  A큤c(c(c(c(c(c(c(c(c(c(c(c(c(c(c(c(c(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.so.1.8.2aa_change_hat.2.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibapparmor-3.0.4-150500.9.1.src.rpmlibapparmor-devellibapparmor-devel(s390-64)libapparmor:/usr/include/sys/apparmor.hpkgconfig(libapparmor)@    /usr/bin/pkg-configlibapparmor1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.0.4-14.6.0-14.0-15.2-14.14.3c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffs390zl36 1674118445 3.0.4-150500.9.13.0.4-150500.9.13.0.4aalogparseaalogparse.happarmor.happarmor_private.hlibapparmor.solibapparmor.pcaa_change_hat.2.gzaa_change_profile.2.gzaa_find_mountpoint.2.gzaa_getcon.2.gzaa_query_label.2.gzaa_stack_profile.2.gzchange_hat.2.gzaa_features.3.gzaa_kernel_interface.3.gzaa_policy_cache.3.gzaa_splitcon.3.gz/usr/include//usr/include/aalogparse//usr/include/sys//usr/lib64//usr/lib64/pkgconfig//usr/share/man/man2//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/5fe6c53300f77e4434023ba0c87090f2-libapparmorcpioxz5s390x-suse-linuxdirectoryC source, ASCII textpkgconfig filetroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)C source, ASCII text (gzip compressed data, max compression, from Unix)PRPsgKI βutf-8382c0faf0fe5de4c52924d20bfefe0439984a67cf2df76d6536f7188874cb3bd? 7zXZ !t/] crt:bLL "sCT$!\$ iHo.i!I`(y9Pav_ժkI]t6,UJk8).ʟ@`Yq.C -hE#y$ełw_EAfrj|_Ve4Pkء`ExL%C4J&ϔ"rfp/3ET+XNܻL`9Y^_Fm}2$9/ Jd~ppe]7y o)1-;H3-8HB` ^e86iYyxt];9Sb*f~)\aSo|ކOYN e,SM{qgBۍz3YBj~}QR(W?Eł_mu1t?{ѣ_Pۢ54hiaԑ^ m sU4$wrǃ\ˣ8V\5ōjQ~32r@’xjsg=OzP*6q 1&('rIn%tBɣAD5Nz"6IΥAdN;{ F@l ̴0Bȩ̈wNy p1* ,Ϋu 8T|DYyK8Gs 2H'>f)Up12qg޵NDXr/?Ry)dӑr} XVMtf*t?Lc35ʋ>Ti`?!ZBw9 _JydǪLBfNkIM)zN}8<.B}VMW{Cx 'MLYe-&)V0. ɟƗ ~9n ?QKNxNC< Ϧ٨C<0Q^l,dUmQCFj+6?~jb{tJfR7* oׇRP/`Yailqv ۟ҐɂiC=5B'T $4M>C@͚W0%X'm3sHEgxMG[ԉo-\tf$!EVF\CO1tV:û޲`2 4[[M$nqJqze-Zͺv+aPyl&MDBJH3*E 3aq;AZ=՚~{ͥKx_hz1p)rg[% [tN~_ۺ]{ޖi;1 iQ̍mM%6nj"PIJu@gz4=>ґabn(G>3dRi.^i6EFF:%ͧondB@lqJp%n#1﫪NGZYP_sV.X[p=9ky;~i{83[l$<>ءcLmJWI%qJ>ӣTe^hkxC=K9TV@P)Y.'2|yNHTP[ߴZAD{ZSt%qD;\_2)p=ULUnN9Cę=v6=#Pv-FgU٦y%TA)2B,Q/"*<̊$HgJ<0?wB3]٫(P@z' BAyN~ 5`~R nH$ bŌKW<_rshAV";SG=&ճHqj1^*prW>anDc# {䪅]UIڠ1e_PL ڮ|W{KJ4z d$3[oX"ZGm;ZrLͶoY%dѓG#rgZN~ DWvLqB~C=YQѧԑ5lQ7o}w$#:$3Xo8QFkF%/%%@Rj1;QmXg$ )yA7~?Y1`lLZ[L~3oaWb\pXXIJuXGf' U.`; ^345)hORIbדdԖ 0)uk$cW{RQh:G==\ \+T^<;yoxDA 0s4 J5ѢDvdx?m;4'$uKHO Q5њ `Gn;a)inpqo(@pcTOSvDRɴ,mE eV0bd_F c{Q Yq %h`D4eW S{1f4,ÞY-&&r"y۲q?2p.ӈU~&22e,d3e*SIqX?qEf? *$Sz]QuՍIų&EzhǭeDnF H8. n;Xh$admo*TmkYr#rg yrA<0PeV1^ID$.lG/ХE8SǡP'cs4& Δ֌j:qX֢g[R`"%Dzt|0?Xļ! BQ69hSCv(hv%+ p0lU R7zKɞ2n[ A$b}O`K __t=|eo'gn=]$QU%Y}% }"۷~pCzVj3N )Bf'h kz|G3K딐*e }~e | ֳR6FXz*r(!l3I8\BMQ5kegd#'r *p%˖WpmyYVܿr|lWy+|*Qm?˞BH%١J[X?ReD}պi<60ywJ{|]-7$_'fC܄j)Z% cS MP4uio [ʋGhxjzuK(x-=r [ FpJyPBzW->LJ]^z02Յ]i+aOQ)+G:r)4y; {GH9-Ij[W0d` 썠)!EC"Ciw5  -F.bb^ muhb CFZלt끾K1H·Ӗw,)_:uMZLYb%u#OLT` GD9,.V{VĭXe{:m{VmlDWl@26RճJgDuD܌),`+IiiyC0lyZ~φ53H{)]U%*U3!Jzg V|4囚0w bU ^b1ڽ;j@[nRw-aQR'i Wp6 %kZ`twɞgHV^Ҵ> 1} ,d)K΂B{}u'UvoՏ9pl p=^@Řƍs? ?avs@f}VXlb+'j ߐ{ξqT)y'*PcTA\-O} SH=PYWB@&=IegO{Zm1Zqs(%,Hƅf`Da0#_KPǫČ@It0fs1hqLDEYN1Ʀ3}dO|WA 5wvGFϤ`984%]*I%~9 /mb(9 gQ, ,;c%=kCu2 |D,Vf? ؛9a}sCBu3KTW|DiLӨS8t3iVxL^=tj۾0 mǕfYۦ'Tt9MrנVyg2>{n}rI(HM\ys`Vx.[ tWz;/|'i^͠0n'u~8> חٶc@Jpb=I\9ij?H߼͉v!2<{$,6cOmH)VHLfqˌsX\.n vͭJYØ>=<#UmoF !&'zma*ps_c-53dJW^w[r*w?DL/!Iԙj8M1 HM=u{j"Mՙ޶OxXH-n~`3!Gů;Z9L¯!cI-Z1#C>Ǯ5IΔEj|OYjޯt[ VISd/3L9YQt! {E* Oa.p HWr ]$Q&zm,Sՙٛء-F)ϒ w(RnnR:6̒{:0rY+e{;naM|\ ؒs6?n~bBzG &؎)$2?#f4,}XDeUz@$nkX$|NOpX3cKYa&_iQpaHA89dbav϶3Dnާ?d6兴kxhGo'ꈒE&WՌ4̖;ȓz GH.#ІI'Q%'8s'3p\yrJUhlcD+cPoLn.&7m ?Y %ptrϦB>oYպSv2b&CM{w?ٻ. ĶrOJ8=д ,r|%D{q.-g0 |p :aA]c:*?;&FSH~xj*D6Eh@kb(ԥʌN /D鉕 n ^jH<29Gm=@: WA|FPr:Jd6I9tI qmYM cGd+n]l(1Nce}n {,H 79\?"@@؃!Z{F~09?yvM䦧zn -f7PS86%"(²P!Y 4{#L0`b ȁeP;VÐs珕c27}@ƒYގ޼)A> _`吔2$~\W-;-a1̓Gx9ɅKޤ54 `e?q8ΓN>M?(O͜iiD8+'*&)1V6 T1aC-液7UyiFV왾5DE9k-in6uX#AR+'Սz}v4Pv#j8 ājJ6[¨)AC"`vIuERqq,bP$Gl,T 3Jrkƴ̹ok~HΫnxT9d>-n]CFܒhrOH!űeU]~{.=B>IǟToFEX{̸ *0=O.0˭8TҖaו[ e5 zpeGy& gtH w^"{[OP{"c*+PiTj9a>.?Lr.o$I~4* ~7vג@1  aM*};JD> XjͼI}?)~&hACg{WǴ E^ǝy|rI- w!dKl/~)pQy]n\k91 >(_ ' d3? Ϋ:AZKKG9`OkR(T 8!a%Z@jHnFxx:𤜌'1Fͯ-N+z yMUn 4+vQlB3Eemrׇָ. ncx1Pr (YϚM"ac9oV1&.f?܌8D Uxt'h#t {͝+}ǟ>jbW(  k-k!?1#>ȚbJHdLnmL^fv66nj.# ?qg_r )K,#MGE(tsڐQ(i+>簮2:qqxFřܩJRlgۊ_{,XU#Q+!1\xw~o7W)2%^KSAugƶ"[V :*Ob3%aAk\h Hэ蜯ksNՅ>tV5w'Y=-iʉ%>Tc&M)H-S;I͵P$J}pѱkm)dԫN choN9r ˌim@>?3WQthBK r(Ƃ|V3{ +>3DWnYBYj ߭ØP ڌ;!f"4;"_f^9nq.=,r M[F?rE4V0͈0' 0Ce&{PAe'S'HGǹV7Q\=[ֿ4뗗@nO-k'vjjUP:!ـFggraoi.2kU23B+Z ȫ?`8؊q[ P}k;qb'qxmv¹r=)V{݋CITJzK1}G(7TVU3kZz+bd٩3Dj'wy+ Md^ XGucZB)%4 J &J?a\6Zf )q/5}hy^h=@Y9VMɠVy`#n>~sh\ʑ7:!3PxMU_*Oz'Z:F]¹ZC;T`w ۴ɄLR?ק6HQ`zi=•`Ztkt0hpjQ㧝ŢQ<8ρ` cPY@*äu^7ɮ/K__x9K[471j|m 9x /YkနQ1*?[&g+< z&B3#{y,Ⰽ/|Fnޫ劽ZU-{[/(H4 +/8bb b((T۽:TT:r=(h$87Y]&/=`\|{ȟ%ia@J=IGh36l7ߎLH$Շ&zcު K@\w !Vq!U6gbOFHdfL r=rd4d}/<l*wifx5uK &W<(=ݖeN) 0h v؍E8 eޡjz a6S/cXǒfd$&PDw˔اғ~NSpgͥAO5GĚgQ C臈(͍s\-.vMFA"ϓHBT,FVr4!FQSU:%20Z;n9S1u]I :A5,nd${/f{2֋ۊSiHZWZ|6iaK`WF(*Vs)X 8hّ;]xc.2Q!9 QQJ,-}Z/Dˬ۾ Du6)Aö߆5vCy[ahK'2 ѽ9ñj,n%ݶL PPAiDs70b72,(6 M^k;9VWvLdαS;T@ƺ7 iC'Hz>\5+w^w:/sR^1;/guE_1jae]ri ^֊e)%)jFԙ^f-U`su<ڰƿBo6HU;"CCRQ,m 뎯6\W)KGEW$!qYܾ;d1xU(t]íNלXd^C"KpkVO}~cdjJ{lM!# ,6<:)snMM1^Ko#C+A[ϴX*Q`WfVOF{ xP=`EDCgQIQM}Au/WlX_sT|zLop#Rc?uHrǖM&,w&N8KSc֘q7DX>@I6(whc#.%yFCQ+Lj  UG"1"vrS jHGϽSE!ZI>rĒR:@8xKؑA$OO{ȴؗ d}ؠ#zJ'#W Y1XMHmmAa=rriK?R>̬d nlGA?X{q%4o/ҔLaG#6?#Š1V{1V󥓈R,pBRCgjiÛ, I3bdP3B[mWFY73j%eOz+a_o1rc7D.wMS Cr{424Y{2)m)8Ú"%*=ß*CgRmr8V_Ls \%6$R~|-BB enj4kdw9h9ȡ;^9k{$Kx(aMue~ hkFXomǞ}) Aև2l)gɃ(F"ǫ02y.(1 +dsoi+]v̝` 4.o2d8¢P^][-Fk )WfgA @ ՟;i\~k٠hD(oWpӬiZpHbЌ.,^_O+{!0Y3Rod՝(c"R (_~:?xO3pAɂMoYSY!я g:o9EzN#[C5y3nL ]AI h% R]!.ltXd'4d=_+T$:g6Ks jXrUUsr3h F]s &nU-KCKsi ^Z{; "MzN_ [<$W<97nQLqYc/dssjɿCzV }~`M/Zf#RmVYe~"wWz捊g3LV3L{NFM7Тce) tCÀ Ѻ {I:`ڷ4c"#0]OeC.B $Pm&Ab(fOS*ZU:`ܽ@7VC=u͈X ,&oTangf{S+<$j/ח*U>鸩--W BM\b/:!D2_ mUCz/n5[rs,ɖPLJP0Ea jΠJ۔2[H+Qڀ˳O-wѢƠ]mVoyK7![p+L)K~K ؐaaJ㦙k:90Nneo51g(`G8_Eo@#;AoOSnmk?2θԮE=l7rP|sl(pP„׳ZY*s ʙTD9S&1@UmAS :s uoy[j;,-s 5 8>[}Z]\;IZU3n3^G!&~5jAhG8޶SN6+撱#&ٕ%7b|7Q=fX~?UE˟6N VZz>Jo'/rQ-j ir KҠC5 e'ba皭frւSo@o킛̛n6x|fS`7y\b<o׬Ow:Km>֣ʽ\ۿ9{jQ^+otPU)t9A$ <O]ŠQC/ f{͚)GeVMM7t(.ѣz1*rʥQ0x)uOfiH( 4` N)/gNWС4jȢm|Pù҉3}Ef}햇Ӗr0J# ٱi*C~2ɩfٛE2@v[94mCNY8.|b{tY8htARyf|-٩ <0Y/ 8ZҩDc7/A?"PrmŬUV>6iؗc h N,\btGa] /y.<Չ,`\T(ڃx:A"_@.z(Lo8U쳱5.UFQSIDL;8r[@&JڙomVz.wC@{<#RTj4Bgl_ ܝ+YyAX.s{µM"x=jxf!pkO@mǛ[e"_el:virD!Ztrͪ8R?-UϮ0FΪbo{7iِi*0љwULj$+gS02tU(P[uv> $6\>ϜBGi>9 n0J(֬"X֊aKOCB}Λ&@g)BzFfǯcm>n"infQD%%s3W_Y>q6jďF7/; ЈI.Jv:H$_M!hGd%Hs35m6RA;r7-H!G0,&m褮za*!C`;Qa輸nЃWA ,%?UO5AޒLr}jLyVJEvXqaYXhd sU=>bA<cY1UVxѨ?竑3"n9ذiY%X,n59͢ja u1-CDP]/ !_$`I̡fjׯ=!.0ꔹn a$OS)J@\Nxݫ#>p[Kv9&D1ڂP %#: 0zrҰ Go>c9@'`?4@$i #Դ/2xߗAJh5^W1ʥ1r4jmST(. ٝ7짷~˻ҏ\ަO=}&#aSuXrcKT\g;-|z{K41-Օ>qd[tRi P-~f]NKQ/F4I9z PhgAQ( @2F=ky¼(l+'}tvGk+2 r p~r]فo&gFͪ {ٱ ogZ˻h'd 9Hͱy,Y٬ZƀwXD74emWu>36٨m$m2Q1cα#Lpzdf $Fö nm~w9|{ʮP yVA \*7C71D\036#Ka>7M[ᴠ.*G3$i헤ʵ5;$W$<<~\ =|$ hJ2-ͳ,E ʺ9 U^ Z9p9P$qh]&.0/kNc1R0{ OS%ÐJ)jǻaFV&`ډܷ3ޢ&ktH]N<2E!@i4uFGP_a6j|kt!!`- [K67|pkƐ\26TX\^]wo#B銩CY*$'o]~X7/Q0Q$)b; X\6 ym".0#]6j˾!:}eHjoH%S앺Ӱ]bz5iknU>Q,($q<%!ʀ{XQNi:h>xLD3?)e@lRKGVĭwr1F+#W,];cȄ@5ftղw> 2jTD*ŚT6 X82 <0XiJ ٩NR92(}㒓GpQLd3/gp1x[Љzypac,uqKɧ{927+GH:C:3 ˓fF`UV6MG[efXm^5} d<3J#e%#J($> C)=FR Қ9ַT-wf-b;rLGϚ}0۬rQ.O6r ,QNj>kQ 7ߞ:+"`'3W#;4)qq2)pdé `ڛbsՌ_Đ@qKz| 1V!3n_((vHu\9j8l:Q3KVV`@M ᇒs0kz\Ax8v!?̋5 *t (\t86¸0suA `܍*} 1j\w,)IW@7F{=ֶ*TFe"Џ2> <8 #l-K-NUzO}#P٤H~v~vΜjxN#C8 uh'Iy'3B:^ <@y~/i3RTc@FuBLYyE; Q}fC[2i?=7&i'YLA1ݽƿRrXfy㈍vEI#LTQ5wL>y\:( eB0)_H8D97Z3 +=W]2 UOゖZK}aC#UCQU-glFta8ܷ4mq1XBc)r_wbȝ;""? "ҵ5!t/ޑ< GЌk W:O ;APj-(NЙ8XSޅ&х-.J'8d156v?D=0.98RǛǙQ՝ kfD<N:y9]1rN3,( FN.+bw=׮pq܁H`. M{yؾ1BwE߇)\o^ltӎR@ {A%3W?AGi8%ye,Ia@2FIVa9zL+qwz6l@mXi7p^]- @ +!ozMBuScU]]! ou8Pf $op*v5}YwlUK+NLtȕ Ugؗଋޕ)Rċ|+CHi[p,ŨQxOύ ͥO3Jڻ^t}m筧TE4 mE= @ςݗm8ld2ZrV}j^7IK :Q4QG'48( e\q70({4h6Y{vhY 7X{`3"h*\gqJѫ9Q*Q0S '+Qr1ݦF<$!u43)參(>@P| 6͜t"G#V2l3!fhx65kpU>P:5fÇA~yxXIv6sD[7ytYȴFR -λm^ޚI|q5;8I1!I$JZ;/G@.07m8oA:+aE$ H~}wRڵx˟9(SQ:Ǟ'?Z%*#n7vֽ^E%Mf=EBf!"];pp)s^oޫX\ls{[jTbUǭ K٣PU$CfAZ6^gtZ.:3457 ÑgO cp#~mnR\h=oD5u;(_]+-_W< KdLguM@|vas" 3wPc wsW|t=~ 6/:=/(E޿kWy,:u)A~7tmʊ1siuDX?0U7, j#&a8 ќQJ"߂|҂LZ0 7R^%=Iܓ\qu(zh:XEPoŧ~`Zueƺ1_byäeJaR?cKo"L !oDw<Ԟls' (۝rB.pڶq=Cdy(nrgb;sg¯ZDF*2{$NL.14J_D蒫M6.p .f(s%UlM4dMWVGz XDzcdieH>B,r/܉sg6ѽN!W~Z,F  H>cU!tH(z%ņ@ ԑI)W}>kd0#Kf ŭ1E rSMV<\zhGP&Y~U:[Og჌2NHZrѼ=eV@fFq9KlKc[N|-⭝_$d0$,0vby$6;aˆO4J-6G4 gUK̑4M6+I%:cCק,-JceM( ќq+:x=Ek3Ur1fO_^vcF!a[⒔ S Ln5c7x6Pׄ&FkP_8"710y_oƭ+ڣO WЧ&MGz9xI_hA%<Fr21S uiLG $.ll3a`Z:Im5H#µdA'O1Fv$]HKePtp4yRWy)bFݭ'U,38Jc:VsEZjۺahRљqˑi2L,*kUmT~\ iX#*o DC s/[W)Z2l}!eXqϲ$F¡9Vg~׵F'|1? xo7>,C;1M.8nB@1) _u9Ԟ pW0 M86HƎ%BM= K CZC`!l]?gDK.D0p`nzyW)#)6G Z؋Czfp慼wm) 1>^-5|lAx!J'HR k$:=ʼn;CYZtL+EE?F+OͥnT{A@NdbB cxn`Fbx*j.k8"9ߏ²kO뽊2+ϿK+̪*}4G`e]Sݓ@`SR|4~Gff\S,˯Vsϸ60B!l:e ʐxebsx4J%SM9J*/dRODXrx; L5 {ڙԦ~t|ϱ;#0t{w /LB.d9bxc6"RӅ>pⴛM2`/T=8HOyǁq3w-xdt'-Bb5uNP%68+hIcApᧂp-MLm2Viڥ%?#kv~y-b'p 3wbJ^DzCzI;$ȝLQ_/z?'{'j ]މ1iِA!E^N4ˇ-QWma}lV$P?׽WV7^(BkGv0D5!pDn+%(R(Fb++=A8EhYT8<$#r;E5b@Y8bjsl6DI qr"8?4:aYK%&_eL_݂M&d^k2w\| -z_B}P"CJͳZ@ 9ϔfc-`m DLQ(,׼HOZFdd`_UbnD HRm ޫ)hBKIط‘bjCRXԝ%G볲DA(mQxtXѝ^Z,>;ބOm},QTmwt'K]''C jNM-?ؤۦqI(7?#Ho*ȾR)=-!@_p./5]~ lRT:4@ZM^nt=Ґ~o9I4uOE>~d6 sE;䗂 8Ic)v! |^@e.VYN|dBϼQK㠠Nr0X?XF fY}u+'f)TZ{&;sNىnū/ =c:}n˧.[nz{~+@HeL.#bZOeerawz"*h5/fn1伩%L'8^E6Yp`ߧa?rs&aT.roW2M9F3otx5s,6 {.CTr Pv} ǔTТr@z! 8"j;_?l&`JK`4e rKǒ 6z3 > 6fB*%zVwX&Ѣz0gwVE Fe>@AMS<[!׻|l8k12vO&HZq/E=]FXp(7uq`iHS}uQvh<XsuR޴2E }?+3 DQ1Mz.ģr_}Yð[ge9^&Qx qG@am uVU7 @wlx/51QL̈,z=oZ"}OKxIf]A;s"5*O?@/ST8IAT`#htxnpk*ܒ%;׀.GkVPOIIuP37d O[d|M?{ן{œNsיbȭ/I_4گ @z\T:?;Q6;7Mƥ2+;J-خPW/|dEűķ=}BȄcwnI]6|kp: m[p)氦V0sH=Ts^%Do϶ddEDkk?M=+[j3yhY!ldc [m;U@*K =]ևbCrށ#'Qk_bmůRsG6-9ynb8N! '\3[ݑdixČ['*Ƀ8:~UNG70رb:hK=Mq)I!#g'10p3=Ǖ§;ߴ Aꊯ`e>Z/ísa:tF|ޚ%vk_nVq?R DD bɧV' Uu2˳gS0T|5ڕ<[2P6!Իסx-؀,0iG冴agG0pmx56?._9B2W506*&6BkDL,/Ti3/QZYW9aݚk;('w*cr2Z>EɽK5"yub͖M"օz$Bgͬd~|dÍD;z @ZlMk ԅ;bk{Yut*ibdkϿo2Ek" f 0lZS@~YB3J}GfTv%Xd"jc®|iR>qLʭ.cU뜂ϮA>Ȋ>IEMìr߭_Ǿ/?|Ru,,׫G2]qW ^nPe*3PF8,jЄ WN6zZ\f1u.շā51i+VONb`!nqV9lY C|?ߖ|n&[.R}G+\;v;n@3IF=r a u_悱LOUVqiD0t5iV7H͑bP:ry~8$nQ ͅVhag=I73ѦG+;vXwP+´iq/&7*"Ovw>7䎪 Jfgl7]  &^. :Q+F#@KC+xIE΀=q`'bx6lUi̙1˦ 06t[ |^*\w78k2b`=ȫ|+$x}8J'"8N’03sNωb?F6D$a$IT]J6P2<DZFpwx֡LJjSaw݉ ѯ.Pn_T9nޫrZWC_b7)E)-b]=[O#MgӤEWZSАS5>95/6ImjHi(a_Sr!e`;yS$4i/fy1/۾`*EOfim'>jtGu\+4^7&Zp,1x'9ta4KܢO#奏-K *TGw+Muŭ;<(K[ |Rg{JL&'bl %؟LOW5;qK mPdASm$mZ *<9zĹ~* ą3_'Af[UgvN;}}tWB}\|2v Eݦ_>hyѭFXV^b ti෗L_{_#(XS9Kk[0H!ҟWT!i&]ԍ$>_@pʛhg3v6BܣD3wU+1L=}DHʆ_^i̮@`UdC̏|VJ aPJؒz 1;uܱVWvϬ{k ҁ5Y/qol\C_ آ|G`q%QCqNm&y}YOJS3jdlQ3`R q&xʼu !;Z'ߜ1`qGPtbn]](a4;{ 48(g_mz"/>qf{6,O HfƹꨕqW5er -w #{yNGqh.G`RAO JR0|Uڀs 8"彳7-PbsUVPϥsYb!O*;Xd] t\?ڡ|9Yu8+T.z/ 6j DH f"_.9i5n>=pt`XZJ.C*vi͇!X~]\H/2V*KX@S_ǍbchH*OOm72kA Y*e7O͹O+, /ϟ'~Y=~?, T)4l5(>I˲!O1 wA&Tý;-BN0)` fMD^Q߫BdCɌl04 D5 ω'zⵗ'#S Q2PL'#|ƪHlbۯ:uڦHfU@q"I_NvG:[2Y=ykC&Fa1`Nfm 55Fy`$b7)į-?UEY[mEEPF}&\XDp$oWUv4Ν5Ggi1i.?YVEawbciWyTh73?xOrIE]k @h_[6ۡVÏj1`Y(K,2v/͌Xd'鿘v`vR/fۧz}at.I#*]q6l)o.[jx-<|Dua^lwp#+z&y=b4`̼Fl~3ei3 N Mul-&g 5wk M#3GR(1z5o_hPv"Qz%#D:!Vs7C %gK):'' D(8Q2M{/>|y|뇜3R 3z˚v\Q I@`أ82)j}=SmX4B=w(]*5V~YQa |%'9Ľ^nNȦ(/j0 ݥ%tm(yB(\4Qi{LmSyT?'7b4H HGrIeجA@D V'ui'4gI:ln eej'@ &ǀ{"7UںM̜%֝O'Ul2t&5YÎN *D(7 #f0O*Uǀ0+qy+b} v&8`ɼ lC䩷&iR|_;Sv3ՒnP|w0 8txb9ӑȺ.$}rVz[bӃ&X ݙ6̇G[ĉ{",ŭ(LAc -=4 @1#tOrrYɗZN'}-II`1t[XOIO\silS-r`o!GCXAa?a35;G<boJ580ai jZ:FVDT0^׽NhMf%"^Xw@GHJxrEIn_lAmL|VejE?P2{3&K B.Ӎr{ oEaXRlY;w9(¶}a,-lg;vU f1>+4j|T~`;}Br=X 1Fol: ´2RC\v< ?Bie>;565TܵV@}#4DYV:8PgQiKs}6+4rVR @-C;x&L Ƭ,wOryMMD12_ ~˸)tW 9^<x$BQw姰бuھ7"w 64v(I@X ZhAIyu1=)njP]ɱ\oE1rAwniqzT,g%fykF;%_d(ǙU\yŞl+Aݬ&n8IDa'.pt86-+ufyuT\TugԪ7J E2T;=+mW6=YzT{$4-D>eI&6 ;+)Y_Ȥ B䊹mZ4~o{0!ֳV2*ƯTX3]R˖9oBV>T}Qab])$'7-m\"bny:3{csQ[tev# ]WƮ<0}>.̰qa.=xErTwNx62" yI%f6.gsh;y=ToP}9hݶYTvǣ%U%+նpJ W'+(G.I_'q:'F9PAecqy>2i9D lOeLj槃bۋ?39e8=L/h@q7m%N;͑D.Ͼnϻ L&`ݪ~apiWN/o0VʆRwG oNm"SYʴb+})Ad{s鷩;^,:UT$*˲/7|p]Ct ;+~:BoA,n~Hvз۟j\Ȗ]Am"VSubzI;cFk&S}`@6LaGpp +LEqXgE&E4yG);H7J\ٿgˌTDt`H}P揟|vKgq_ >@loϰ-z0i5Y*(vJQiLT1DS=ڴ @Fxvݖ6I=$ SSuUEp?:V]rJIϵc0 .T2,Y9b mM/JaqOXEM vNA"zK޷2ߟ2ȌqEdp4OCmɐ8w+5KD7܈QN*DR <{̄O֒j~,q$.)X}{&&[;W# 1v},dxfTc]e(#,})tD%d_OWo^CL%@{#=ՅJhk!ţML⣭ ӐFUUJ Je@:3;xDnL@TFlXK<K@}a*b qyǩםs׊Ayc3&V8w[gu}'ќe3^c.pde{àMZ ZWq A]k5FDHv{A?/4b EЏ^(2!qHӎQx o'1i|-Ɋ 70x( 0﯈PEuV2D:c{D]: d3Ƞ"[F$0OIBVb(Х2 #o–g+ۦb)<ľxFs3D΃j8ayO|S 3Rec j^¨1Tڂՠ ]([ֹC3z"^[Q 9LK+"o| niQ  UG( O:ݚ[GS_`__P!:>҂е| t Ooļõإ4[x8 ,;ivn@+.|RFWQ hLb 9-M,&\[$_iu/0!n+(Hr!͡+=fe#>r3ao^HBS^ïVRd8QGV렐g4)):NwaUniצ/ `LP!_Oriލ- L].'EvXUKj-*p9WPQ0ײqN{X{3WL=g;9XOÄD5:Wp0PPsEҭǐ%c>) $bpqJ-sʤdt ؑ{g^T[/`c6x?|$+y85a3?cMAeP̖~G+XߍyX-E6 D`v%An! IkEf3'AX8EPԲW Lb?  `GǍS7 FNNNH~ڦp-P9盒|:YIW%$r\; `հ0nd͖ns*Pԥqd^e *{*ځ-J?~a 0 ;jsỳ3*8=%A1A)KG87f<,s<6wW梁{l u`kqxfQ;SlU|b\,ǴXujk֞2[j #KP^O~vhhMc.z&0Q2o!*iQ}pB1&}A(e:h< =_ݔ5pg"uDկYEr鑫+%3Pb-#+ ζXeDkEa)bۚnXYt3'%S:]PsiV~\@'=v=a wS/e~[@nHډ{߻"KkЎYJ2 $'fo{ʈQln/zLr̐G0xrNb9*;'eLݘZtU6CS^Q)16Up~Ƨ 6~b7;ڲ(10_r2Jm}yNyy;9GRͦx GzʽD al([./`>QM 㙛ݗo*ybr`Le/@PD6%z }s|bjc^qd5-«(%,jP90lk oQ˴`a}/>ׂR PzN eq$) )KKW9 V;\Enkb^mitg%~|bø6= Qb(\!rE` /ipXTJ)f/i %P2ϹzTϱ,Rk{\8fQP%PGѫTo ۶R߸7S#9$ e8-Zg|1%в2Gɬ U= I?%8NP#D{ {$fgs>l $h jfR~gR"J 6ƚ5 sgsrǣ<+ؤy0h1]qRT vڤ7^c $Sa%y %z^ ]mʴs4LsqM^FѠ #R(?CѦSQ RV.ϋS}c7wm}Qf>H\1qDd%pP*<~iP2o^]]~6) 5{I匹pO9ҍ*u, 99i-o{/@m<ƍGSj[|%s*-_-rtO9ɕN,? JݶX_4Į>Uq"7d>\z7g_h^葵'KG9(Y/Ť &QQn0w2ܹ(hUjCt0CJ򒢆NXp,QT)w"bo!q*wP'p@|2FD$a.Dc@? : Sݫ;Vr-{Ee](;OR-#-ȼNg-IBwovz!Qg[ 5D6 L;)2}@Nrra*Dy/a;CE%8YvN\&BF~ժ Bm0 0h=JE6&8S >n3PBR/7<ʬ'dgfJ?8\z9r\udÝc֢'nYy6?cM6 /Q3#|ߞgts m׮'b ;IĂ)L0r;AA)]4) ki2Q' Qk<3xׂ ;gw9O`;AWæ~x3R53ObUĥep^݁F CY(>8n5z{xHsv F'exv>;Ĩ}$shBTOL<\{7$h7tp֗( 0NJ SBj2똬;s|)F(x,XяR(m:Ƒzyھe&& /y=<AhUH%' Ijx&/# s63k?^qFfxr]/6}h`P6N=Rޗ٣%G @k1O=0bTtJRVK~$Gs^N^ 6 x L@'˵_m:*lgLzȂ4 w)j@z/mg+~?@ۈcsUe0,'θ 1^g_/p*Dh=Ug(B(GWڤy6;KBCoZъ4dwoܒYk0vTJ?rHn7ac&~J]fwH :Z.r`qb..H!]R}5߀n]ޗpg]U0#) e%7`XPaC\ʷ n׆U }5\Tkk)F92ОwWi4E.ݞ;#:MEF"\wf`e'w"a z~fF@. ӝ 8؀by}mn.N Tw'8q%?V:1V5{`}z%9)Cp^G+Bo fS^{N"5kpo|mt&poN]QPXiHOҢ2cߞu5y̪V\0@]0[^FX İpnXuBrZuG=d e >aawkOPÀalM:ldx.lk8@ ߼=M_gtX*Wϋa6,ipe:l/ )>"6}&wϛ(rdkeènpn~r$w Mν4[s _rn}#vg^O9xYtD| ,{,7; r$"OW0k.igQ$Ti o+ ֫6v5DK=+.uXFzvID Ȇ*`w?htIf7)Aüy,~~8 4J Z01UǺƔGw׳=ߚNS4)^󕨝:ZD̨  8Mƥ#c(4`|>+Hwf4f~3F1V9e]fޫrCd 9 $T&cM\.0#vZHCשF h_HNGo?K1cjOƟ).S(+?nZN{{HW:O G.k 0d^V &BY^ u4,_fTr;ov9P>I@`8ssj1i tTD} o樚+Bc'޻>v9 >s06v/y{1qLhK]$r90cBG 9N>jGQZvDAx/kԸl9:n5OEs-Є#.h; xn=ޞTb4 AE MXX Q?_*{r qEi\ZP8psfm,,D9#|[_ݻOuėOZ9Lx-1g 5b_U ;wBCj\ {QE940pT٧:qj1=Ro#"'7E $ hߵưe =~.?3nV[wuG_L41KI+79ZpNPE(~|bTN]+g~hX!^M[/%!B9gs/fgWfP5%wOl2EX?U.m.qg$ȣ8̦ݿ dCա.EaL C.ly~٠=t1Ba-,E,9x=o?gEʙ8$D凹ǂ[x V 5WD J,S#S?Wm;wGk91_Zy/;yٮ ZeW~NFXˠP&DsI9$^:+I]t C84/K}cc>8iQ#m<7z8{Qӓ :暃{c'6+",ךJgCs[O[w8jJljrXwc~"4%`Ɩu!A/!{'6Q}'T 3PIuLWgJa #;I4ODXtb#m:S!5{| vV)B UWҳ,qOg:/2r3gKz~SKZ< amiS.f`iWa-{8$e`7 W~hO]}*Oq2_ ~LZT!ə/iB%OjYh>^FD[јnJ$*\y>K1JJU_pJ{=e-ŗmZAޗpNeLj"ӐWjFkmkPE[!mЇz/ťe?zjcJ37튪5B m3 o[ەSjwEQpV O}6~- q2՗(㊴Atqg?/iMES;7T6󟞞"͏!/4526r &+ G JbFtP*wQ3}^:^xmҴ"HCIr/U. SV3 )2-r0~هǏIaL* oOw${sgە<v*+sjJx}d'.'a]w (_I!mu^ YZ