perl-apparmor-2.10.2-14.19>t  DH`pY`[/=„YIm?7XA!_W'X z !͕ p`}"Hf  N_*L]ZTh& _13H , |@{OqfuRWn#vkZP1 Nwf"{H 2]6璃}U]]#WgM"B%' zEan ZCkN6{nj1@:c,w&SUJ*|vVn0r8f3be61e19409c28f04d56eedd8d243e9fba88b1Y`[/=„U(Ū!ɽhhKw/+h/O@Jɰt(Dl9EjQ>=P?@d  F 7Rqw             1 ^|  (!8(9 |:B/F@GT Hx I X Y Z[\ ], ^bcAdeflu vw x yz0Cperl-apparmor2.10.214.19Perl interface for libapparmor functionsThis package provides the perl interface to AppArmor. It is used for perl applications interfacing with AppArmor, including the AppArmor utilities.Y`Dlamb12openSUSE Leap 42.3openSUSEGPL-2.0 and LGPL-2.1+http://bugs.opensuse.orgDevelopment/Libraries/Perlhttps://launchpad.net/apparmorlinuxx86_64o# (+$ehA큤$A$mY`iY`iY`iY`iY`iY`.Y`oY`2Y`o8ef5bf96891b2f6cf8bedfef9df37ceb64d261b5635b60a9b2692eaf7edcd1ab1ad1cf8d7e74b112f5ebc58e0c8f954fda2d05d2fca28eb3259b51d9c9efccfd92edd0f49dd11f4df538f882dfca2ae2d41d8cd98f00b204e9800998ecf8427e600b9204ca416c02841914f837d183b8rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-2.10.2-14.19.src.rpmLibAppArmor.so()(64bit)perl(Immunix::AppArmor)perl(Immunix::Config)perl(Immunix::Repository)perl(Immunix::Severity)perl(LibAppArmor)perl(LibAppArmor::aa_log_record)perl(LibAppArmorc)perl-apparmorperl-apparmor(x86-64)perl-libapparmor@@@@@@@@@@@   libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)perlperl(DBD::SQLite)perl(Locale::gettext)perl(RPC::XML)perl(Term::ReadKey)rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsLzma)2.10.25.18.23.0.4-14.0-14.4.6-14.11.2X׭@XX*XAXAXtX @Ww@W/@WDB@W@V @Ue@UU@UU~@U:0@U0U*^@UTgT!TܕTC@T6TT@T5ThTeT_W@TBV@T7@T2@T12T'@T @T TT@S@S/S@SES@S\S:@S5d@S*@SRRR۾@R@RR;R@Rt@RpRcR].@RH@R<8R6R2@R1RNR@R R QQQvwQZ@Q5@Q @PP@P@PaP\VP#@P`@Pw@O@O@O O@O O@O~O3@O'ON@NNN@N@NNNN@Ns:@NoENg\NRDN98@N7N7N"N|@NM@M2@M@M~@M~@MlMfH@Mc@M>@M>@M=iM=iM=iM<@M<@M9u@M5M,F@M,F@M*M%M@ME@L!L!L8L8L8L8L8L@L L+@L@L@Lwsuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decrrodriguez@opensuse.orgrguenther@suse.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decbosdonnat@suse.comopensuse@cboltz.demeissner@suse.comopensuse@cboltz.dedimstar@opensuse.orgLed opensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dejfehlig@suse.comopensuse@cboltz.dedimstar@opensuse.orgjeffm@suse.comddiss@suse.comchris@computersalat.dechris@computersalat.delmuelle@suse.comlmuelle@suse.comopensuse@cboltz.deopensuse@cboltz.decoolo@suse.comopensuse@cboltz.deopensuse@cboltz.dedevelop7@develop7.infoopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deseife+obs@b1-systems.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dekkaempf@suse.comcoolo@suse.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dejengelh@inai.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decoolo@suse.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dewerner@suse.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.demszeredi@suse.czopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.demeissner@suse.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decoolo@suse.comopensuse@cboltz.deopensuse@cboltz.dejfehlig@suse.comopensuse@cboltz.dejeffm@suse.dejeffm@suse.defcrozat@suse.comandrea.turrini@gmail.comjeffm@suse.decoolo@novell.comopensuse@cboltz.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.derhafer@suse.dejeffm@suse.debwiedemann@novell.comjeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.decoolo@novell.comjeffm@suse.dejeffm@suse.dejeffm@suse.derhafer@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.deczanik@balabit.hujeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.de- add upstream-changes-2.10-r3385..3390.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - fix a crash in aa-logprof on specific change_hat events - migration to apparmor.service turned out to accidently disable AppArmor. Add a workaround to fix this (boo#1017260 starting at #c7) Note: This will re-enable AppArmor if it was disabled by the last update. You'll need to "rcapparmor reload" to actually load the profiles, and then check aa-status for programs that need to be restarted to apply the profiles. - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)- add profile-updates-2.10r3381..3384.diff with updates for abstractions/base, abstractions/apache2-common and dovecot profiles- package apparmor.service also in Leap where it was missing thanks to a wrong/outdated if statement (boo#1017260) Note: If you manually disabled AppArmor, this change will re-enable it.- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diff- add apparmor-abstractions-no-multiline.diff: change all multiline rules into one line. Needed for yast2-apparmor (bnc#900013)- add apparmor-profiles-ntpd-pid-location.diff to cover new ntpd pid location (bnc#899746)- update to AppArmor 2.8.97 (aka 2.9 beta3 aka r2721) - several bugfixes in python and C tools - rename "__unused" to "unused" in apparmor_parser to fix compilation on openSUSE <= 13.1 x86_64 (bnc#895495) - usr.lib.dovecot.auth profile: allow access to auth-token-secret.dat - various small profile improvements - update and add several testcases - drop upstreamed patch apparmor-profiles-dnsmasq-iface-mtu.patch - re-number remaining patches- split apparmor-profiles package into -profiles and -abstractions- update to AppArmor 2.8.96 (aka 2.9 beta2 aka r2652) - add unix abstract sockets, ptrace, and signal policy generation - several bugfixes in the python tools and elsewhere - move program-chunks/postfix-common to abstractions/ - drop upstreamed patches: - apparmor-profiles-clustered-samba.diff - perl-apparmor-fix-bare-network-keyword-handling.diff - perl-apparmor-handle-bare-capability-keyword.diff - perl-apparmor-properly-handle-bare-file-keyword.diff - re-enable installation of perl modules - move python modules to python3-apparmor package - create symlinks without aa- prefix only for tools existing in 2.8.x, but not for new tools added in 2.9 - make utils filelist explicit to ensure we have the right set of files without aa- prefix in sbindir - switch easyprof python module location to python3 - drop unused defines APPARMOR_DOC_DIR and JNI_SO - refresh patches: - apparmor-utils-string-split (file moved) - apparmor-profiles-dnsmasq-iface-mtu.patch - apparmor-2.5.1-edirectory-profile(prepared Thu Mar 20 23:35:03 UTC 2014 in home project) - update to AppArmor 2.8.95 (aka 2.9 beta1) - complete rewrite of the aa-* tools in python - new tools: aa-cleanprof, aa-mergeprof - extra profiles moved to /usr/share/apparmor/extra-profiles/ (bnc#713647) - and much more, but there's no upstream changelog yet - drop upstreamed patches and files: - usr.sbin.winbindd - usr.lib.dovecot.*, tunables-dovecot, apparmor-profiles-dovecot-bnc851984.diff - apparmor-init.py-gsoc.diff - apparmor-2.8.2-nm-dnsmasq-config.patch - add %bcond_with perl and disable the perl subpackage temporarily (the perl modules will be back in beta2) - drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages (they were disabled since a long time, and upstream no longer ships their code) and the apparmor-profile-editor.desktop and apparmor-profile-editor.png files - drop apparmor-utils-subdomain-compat patch (was only included for <= 12.1) - remove libimmunix Provides/Obsoletes (libimmunix was a compat wrapper and got finally dropped) - refresh apparmor-samba-include-permissions-for-shares.diff and apparmor-2.5.1-edirectory-profile- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq read access to interface mtu in /proc/sys/net/ipv6/conf//mtu (bnc#892374)- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading plaintext password files (bnc#874094)- Rename rpmlintrc to %{name}-rpmlintrc. Follow the packaging guidelines.- add perl-apparmor-fix-bare-network-keyword-handling.diff: perl-apparmor: Fix handling of network (or network all) (bnc#889650) - add perl-apparmor-handle-bare-capability-keyword.diff: perl-apparmor: Fix handling of capability keyword (bnc#889651) - add perl-apparmor-properly-handle-bare-file-keyword.diff: perl-apparmor: Properly handle bare file keyword (bnc#889652)- add apparmor-profiles-clustered-samba.diff to permit clustered Samba access to CTDB socket and databases (bnc#885317)- fix problems with dovecot and managesieve * usr.lib.dovecot.managesieve-login: network inet6 stream * usr.lib.dovecot.managesieve: +#include /usr/lib/dovecot/managesieve { [#]include + capability setgid, + capability setuid, + network inet stream, + network inet6 stream, + @{DOVECOT_MAILSTORE}/ rw, + @{DOVECOT_MAILSTORE}/** rwkl,- add #include to usr.lib.dovecot.auth- update usr.sbin.winbindd profile (bnc#870607) - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/- update usr.sbin.winbindd profile (bnc#870607) - treat passdb.tdb.tmp as passdb.tdb - allow rw access to /var/tmp/- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p needs notify-send)- update to AppArmor 2.8.3 (r2122) bugfix release - fix some cache clearing bugs in apparmor_parser - various fixes in mod_apparmor - several profile updates, most of them were already included as patches (except abstractions/winbind (bnc#863226), abstractions/fonts and abstractions/p11-kit) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details - update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch - remove upstream(ed) patches - apparmor-2.8.2-fix-ntpd-profile.diff - apparmor-abstractions-r2089-r2090.diff - apparmor-abstractions-ssl_certs.diff - apparmor-fix-url-in-manpages-r2093.diff - apparmor-no-perl-smartmatch-r2088.diff - apparmor-profiles-dnsmasq.diff - apparmor-profiles-ntpd-r2103.diff - apparmor-profiles-samba-create-dirs.diff - apparmor-profiles-samba4.diff - apparmor-unconfined-lang-r2094.diff - apparmor-utils-po-de-r2091.diff- use current ruby macros, the rb_sitearch is obsolete since at least 12.1- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file and supplemental config directory (by develop7) - update apparmor-profiles-dovecot-bnc851984.diff: - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary - add abstractions/mysql - allow execution of some more /usr/lib/dovecot/* binaries - better restrict access to /var/spool/postfix/private/ - update usr.lib.dovecot.auth to allow to read mysql config files - update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp: add abstractions/nameservice instead of allowing more and more files- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined) - update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*, /{var/,}run/dovecot/mounts, deny capability block_suspend)- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config created by recent NetworkManager (see http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b for update details)- add apparmor-profiles-samba-create-dirs.diff to allow samba to mkdir /var/run/samba and /var/cache/samba (bnc#856651) - add abstractions/samba to usr.sbin.winbindd profile - add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131) - update dovecot profiles to support dovecot 2.x, and add profiles for the parts of dovecot that were not covered yet (bnc#851984) NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs. (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*) - %restart_on_update (in parser %postun) is "translated" to stop/start by the systemd wrapper, which removes AppArmor protection from running processes. Fixed by using a custom script instead (bnc#853019) NOTE: The %postun from the previously installed apparmor-parser package will remove AppArmor protection from running processes a last time. Run aa-status to get a list of processes you need to restart, or reboot your computer. - reload profiles in %post of the apparmor-profiles package- add apparmor-abstractions-ssl_certs.diff to allow access to certificates in /var/lib/ca-certificates/ (bnc#852018)- add apparmor-profiles-ntpd-r2103.diff with updated driftfile location for ntpd (bnc#850374)- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)- add apparmor-profiles-dnsmasq.diff - add missing permissions for libvirt-generated files to dnsmasq profile (bnc#848215)- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile updates for samba 4.x (bnc#846054#c5)- add apparmor-profiles-samba4.diff - various profile additions for samba 4.x (bnc#845867, bnc#846054) - update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages - add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work in all languages- fix ntp by allowing read access to openssl.cnf- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch) - p11-kit needs access to /usr/share/p11-kit/modules - allow reading /etc/machine-id in the dbus-session abstraction - add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for the new tools developed in GSoC- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental in perl 5.18 again - use grep instead (upstream 2.8 branch r2088) - fix ruby requires- update to AppArmor 2.8.2 - several fixes for python3 compability - various profile improvements: - various additions to abstractions/fonts - move poppler's cMaps from gnome to fonts; gnome includes fonts - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base (bnc#824577) - update pulseaudio directory and cookie file paths - add missing permissions to the nscd profile (bnc#807104) - deny capability block_suspend to nscd (bnc#807104) - MariaDB compatability in abstractions/mysql (bnc#798183) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details - removed upstream(ed) patches - apparmor-abstractions-mysql-path.diff - apparmor-profiles-nscd.diff - apparmor-python3-r2052.diff- swig for python3 is broken on openSUSE 12.2 - build python-apparmor (for python2) instead on 12.2- add python3-apparmor subpackage (currently py2 OR py3 package can be build, but not both at the same time) - add upstream apparmor-python3-r2052.diff to fix various python3 issues- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)- do not package directories as %config - especially not as noreplace- enable python and ruby subpackages (using %bcond_without) - update/fix paths in %files for python and ruby subpackages- add Requires: insserv to parser package (needed by initscript)- nscd profile: add missing permissions and deny capability block_suspend (bnc#807104, apparmor-profiles-nscd.diff)- Add missing files to SRPM (bnc#777471)- update abstractions/mysql with correct paths and add MariaDB paths (bnc#798183)- update to AppArmor 2.8.1 (=2.8 branch r2069) Bugfix release, http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1 Most important changes are: - add various missing parts to profiles and abstractions - fix a possible x conflict with hats or child profiles in apparmor_parser - fix and speedup stdin handling in aa-decode - various other bugfixes - add pkgconfig support to libapparmor - remove upstream(ed) patches- verify tarball with gpg-offline- fix directory flags for /etc/apparmor.d to be in sync between - parser and -profiles subpackage- remove %stop_on_removal for no longer existing aaeventd (bnc#781564) - don't hide TeX output when building the parser and techdoc- clear and update inconsistent profile cache (bnc#774529)- abstractions/bash: update /bin/ls to also match /usr/bin/ls (usrMerge)- Add required fonts for new TeXLive 2012- update /bin/ping profile to also match /usr/bin/ping (usrMerge)- update to AppArmor 2.8.0 (= r2047) - new utility aa-easyprof - templated profile generation tool (the resulting profile may be less strict than profiles generated with genprof/logprof) - various small bugfixes - removed upstreamed patches- add apparmor-techdoc.patch to remove traces of the build time in PDF files- update to AppArmor 2.8 beta5 (= 2.7.103 / r2031) - new utility aa-exec to confine a program with the specified AppArmor profile - add support for mount rules - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8 for full upstream changelog - removed upstreamed and backported patches - remove outdated autobuild and "disable repo" patches that were disabled since the AppArmor 2.7 package - create the Immunix::SubDomain compat perl module only for openSUSE <= 12.1 (bnc#720617 #c7)- replace patch for dnsmasq profile with upstream patch (bnc#738905)- add apparmor-r2022-log-parser-network-bnc755923.patch - logprof didn't create network rules because of changed log format (bnc#755923, lp#800826) - add profile for samba winbindd (bnc#748499)- fix dnsmasq profile (bnc#738905)- add 0001-fix-for-lp929531.patch to allow reading /sys/devices/system/cpu/online in abstractions/base (lp#929531)- Update to AppArmor 2.7.2 (= 2.7 branch / r1894) - move various permissions from httpd2-prefork profile to abstractions/apache2-common. Backward-incompatible change: *.htaccess files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5) - allow various .conf files for dovecot (lp#458922) - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files and abstractions/private-files-strict (lp#911847) - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files to use ~/.kde4, not only ~/.kde (bnc#741592) - block write access to ~/.kde{,4}/env in abstractions/private-files (lp#914190) - allow write access for personal dictionary etc. in abstractions/aspell (lp#917859) - when using genprof for a script, include read access to the script itsself - automatically include abstractions/python or abstractions/ruby for python/ruby scripts - add profile for smbldap-useradd and allow smbd to call it (bnc#738041) - allow creation of the .config directory in abstractions/enchant (lp#914184) - allow TFTP read-only access in dnsmasq profile (lp#905412) - allow capability dac_read_search for syslog-ng (bnc#731876) - add p11-kit abstraction and include it in abstractions/authentification (lp#912754, lp#912752) - add audacity to abstractions/ubuntu-media-players (lp#899963) - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and /dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831, lp#890894, lp#890894, lp#884748) - fix typo for multiarch gconf-modules in abstractions/base (lp#904548) - allow avahi to do dbus introspection (lp#769148) - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992) - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062) - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in abstractions/cups-client (lp#887992) - allow read access of /etc/python{2,3}.[0-7]*/sitecustomize.py in abstractions/python (lp#860856) - various updates to the sshd profile (lp#817956) - (and some more changes I already included in the apparmor-2.7-branch.diff)- Update to AppArmor 2.7.0 (= r1858) - make traceroute6 work (bnc#733312) - allow access to pyconfig.h in abstractions/python (lp#840734) - fix logprof/genprof for hex-encoded program filenames (= filenames containing space etc.) - add apparmor-2.7-branch.diff with some upstreamed fixes: - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041) - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file - fix syntax error in abstractons/python- changed a $ -> % (typo)- package subdomain.conf only in -parser, not in -utils package - package libapparmor.so and libimmunix.so only in libapparmor-devel, not in libapparmor1 - make Provides for perl-libapparmor versioned to avoid self-Obsoletes - move libapparmor.a and libimmunix.a from libapparmor1 to libapparmor-devel package- update to AppArmor 2.7.0 rc2 Most of the changes since rc1 were already included as patches. Additional changes: - fix logprof/genprof to recognize "mknod" in audit.log - fix libapparmor python bindings to compile with python 3 - fix wrong status message in initscript if apparmor-utils are not installed - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS - fix some warnings in utils/Makefile - remove 4 upstreamed patches - remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now - update line numbers in 2 patches- make abstractions/winbind working on 64bit systems - allow loading the libraries for samba "vfs objects" also on 32bit systems (bnc#725967)- allow loading the libraries for samba "vfs objects" (bnc#725967)- include autogenerated profile sniplet for samba shares (bnc#688040) - more helpful error message for "aa-notify -p" if the user is not in the configured group- update to AppArmor 2.7.0 rc1 - aa-notify: add --display option and warn if $DISPLAY is not set (important for usage with sudo on openSUSE) - fix syntax error on "rcapparmor stop" - allow read access to /proc/*/mounts in the dovecot profile- add patch with upstream changes since 2.7.0 beta2 release - add example parser.conf - print warning if profile cache directory doesn't exist - remove initscript for no longer existing aa-eventd (bnc#720617) - set correct $HOME in aa-notify - enable caching of profiles (= massive speedup) (bnc#689458) - add comments for patches in .spec and comments in some patches - run spec-cleaner- add libtool as buildrequire to make the spec file more reliable- update to AppArmor 2.7.0 beta2 - includes fixes for bnc#717707, bnc#678749, bnc#685674, bnc#679182, bnc#691072, bnc#705319, bnc#713728 - add some missing perl module Requires to perl-apparmor- update to AppArmor 2.7.0 beta1, for details see http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 - removed lots of patches I pushed upstream - disabled apparmor-2.5.1-unified-build (patch to use automake, does not apply to 2.7 and probably won't be accepted upstream) - disabled build of tomcat_apparmor (doesn't build, deprecated upstream) - run spec-cleaner - remove *.la files - move usr.sbin.nscd profile back to apparmor-profiles package- Update patch apparmor-profiles-usr.sbin.dnsmasq to include /var/lib/libvirt/dnsmasq/*.leases (bnc#694197).- install SubDomain.pm compat module (bnc#713408)- Update to 2.6.1. - One patch eliminated - Lots of minor fixes - Split out more common abstractions - Add check_for_apparmor() helper.- dhcpd: Fix apparmor profile (bnc#692428)- Add apparmor-securityfs-systemd.patch: do not mount securityfs when running under systemd, just access the directory, systemd will automount it (bnc#704460).- Fixed typos in descriptions and summaries of apparmor.spec- Fixed building of pam_apparmor to properly link libpam (bnc#696553). - Fixed building of apache2-mod_apparmor to properly link (bnc#701821).- move the requires and prerequires to the right package- make the -doc and -profiles subpackages noarch (again)- Added alias from Immunix::SubDomain to Immunix:AppArmor to allow older users of perl-apparmor to work properly.- Properly re-created links to old utility names.- Added /etc/ethers and /var/run/dnsmasq-forwarders to usr.sbin.dnsmasq (bnc#678749)- Update to 2.6.0 - 19 patches eliminated - Lots of minor fixes. - Split out more common abstractions - Added more local includes- Additional libvirt related fixes in usr.sbin.dnsmasq (bnc#675867)- Added 'network packet raw' to dhclient profile.- Add Requires for used perl packages (bnc#670650).- Updated dhclient profile and added dhclient-script profile (bnc#561152).- Added ability to completely disable repositories.- Properly indent sub-profiles after genprof completion (bnc#480795).- Inherit flags in sub-profiles when generating profiles (bnc#496204).- Stop treating profiles shipped with the package as config files. - /etc/apparmor.d will still be treated specially. - Add support for parsing network operation events (bnc#665483)- Fix for sbin.klogd profile using kernel versions >= 2.6.38-rc1.- Update to apparmor-2.5 r1445. - Includes 3 of the fixes below. - Several testsuite fixes. - Update for Thunderbird profile.- Add support for libvirt in usr.sbin.dnsmasq (bnc#666090)- fix rm call for nscd profile to avoid file conflict- profiles: Add openssl abstraction (bnc#623886).- Added support for sys_nice to ntpd profile (bnc#657054).- apparmor-utils: Support newer auditd formatted messages. - Fix two x transition conflict bugs. (bnc#662928)- Splitted ldap related things from nameservice into separate profile and added some missing paths (bnc#662761)- Fixed pod2man macros with older versions of GNU make- Fixed building of perl and ruby SWIG modules. The former is required for apparmor-utils to work properly.- Fixed use-after-free issue in apparmor_parser.- Added fixes for logprof issuing uninitialized variable errors while encountering audit messages for unconfined processes.- Updated cupsd profile (bnc#539401)- Fix {proc} vs {PROC} macro usage in firefox profile (bnc#436262)- Added support for eDirectory nameservice (bnc#621394)- Fixed incorrect /proc/*/sys usage in usr.sbin.ntpd profile (bnc#634801)- Added fix for another case of whitespace affecting profile removal (bnc#510740)- Added support for unified build, which massively simplified the packaging.- Fix for syslog-ng profile to allow upgrade to v3.2 - add mysql support to syslog-ng profile- Added support for enabling/disabling the module automatically during installation/removal (bnc#623246)- Converted archive to tar.bz2.- Updated to 2.5.1-final. - Lots of testcase updates.- Initial packaging of AppArmor 2.5 - Now contained in a single archive so built from a single spec fileperl-libapparmorlamb12 1499471684 2.10.2-14.192.10.2-14.192.10.22.5ImmunixAppArmor.pmConfig.pmRepository.pmSeverity.pmLibAppArmor.pmLibAppArmorLibAppArmor.bsLibAppArmor.so/usr/lib/perl5/vendor_perl/5.18.2//usr/lib/perl5/vendor_perl/5.18.2/Immunix//usr/lib/perl5/vendor_perl/5.18.2/x86_64-linux-thread-multi//usr/lib/perl5/vendor_perl/5.18.2/x86_64-linux-thread-multi/auto//usr/lib/perl5/vendor_perl/5.18.2/x86_64-linux-thread-multi/auto/LibAppArmor/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:Leap:42.3/standard/8fbb0e3682b457cee0e8206b78e3cfac-apparmorcpiolzma5x86_64-suse-linuxdirectoryPerl5 module source textemptyELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f4a8a34d0ffb65082e670238d5fab4f4a2be9a5f, stripped PPPPPPPPR RR R RRRRRRR9ܖHmB:?0] crt:bLL'AI&ܜ8E i>7`mt@ mƅY(ry䂴D1 >?$5}_Wⵄu)¨sh& RqC~Lލ%9Ǿ#e{&bMf Dk`*e6H Y ɒ@HR}}x|$!up@ 6sbO0/79hRC%CԸWSjWÇLK82άGw$. =3GY\3SR8 ΘU׫ibfN#}+=QFr^F`Z|T\;1Z0x^o&_1$$KW,~V'@tXnH807q˥X0e6@2}yPTn< |rUUfBe"ؾ FFS_VC;Z糁? ÙHs4$0,kT Nܞ] B uVxѴ 2Qe@I"iُF9:r?UF`!Uo2`,9X\+Gf_vav:<)4-HfM{>}]v3K~bR#g+D FuұpXRa y[&I7`؇ 0d?Ƒ4:d5(VKLVapwW|?O_ m>zj>8wAD?\ri9(Z-Ns#㜺)R wlr{hVcf$ tk\sF7#f'q4} MA[K Dx÷9=tbD( _o蔐(߅,˻);ޞ=n.[(:sak+z©5t) H4sHGQ-LS:гޅ,u,cgD1t>ǹ' [o &sϩg|i!Wטj΄yMmQu Щp; biR{%q8YcQ|g@]Uf aFF p=$A9!<LO@WlU`d'.̹\.$U#z+V]Sh$kf[y爺&r?!Cd_]I )tLOYgB=JyN7%Z@ %je4t: b} )@Y-/5:Ӕ>[(nWXˋF}وNR+jަ(YR>&W=% qKhU2mCWhjI{>jܖ>Іazfi}(#4y]*CH{h2bsiAuwsX K ^ϟbkOXtĩٵa^'j7]z-#XcIGTU4ØUJ6L>ޥBlxEg93 h\paFM7=VZvN|.&a8(p[J?_TЈ%k&12HGRр3t#JRxq)|9VוּfʅYQ8K)(3.PP!Ɉ3fte`z~sI .nSnUBV*_ KOZNξ\c,D5P4 n!>B!7ױB=PWݸ3g9"[輥jG` | A=]3{a]lr# HMz ^cNrl#= %+|%CmǸ=!5q*&&ci-q% ~iBRMʬ :]3iR#sp5HX ՛6E,G&hG@"{Y=dOU 9OGR6|l~Mmd@"7Z$2M N9qK vqU2ͩY"cɠ&GXb6NVE$k=/q/ݟ3M5ȇHu}5{8eDr N07GǦͰj>6LDSN!VBX:eU@֔% k`HdI΄5oW0{l|Q ^N:Gʦuf)w SҒXDBTvJm _xa47xLWf  !]qo֥#R[iFs:nyFEnzP[Ba1 P<:( 6TQA+py_)lnY\&bĀvӚEzr'YDS9dT w5g_z*9]hXam\OKytBIO%'_q/cxt :E͚8=U` ُt>/cEp>ט1@CM~*؄GC>Kʡ:P (}1MQjFN??ql+Xv3w/q`zMYn!|;R?27:)WK/jRoQ @`WRߕmZ/k0_GXy=l^/lӽ'gp)\R_{W"oEƜKW"im\}&l/ly}rqejFt= LbnΨfŽF\>v'u&: i =A]مUIhWt oYVI\i6]j`7I7Nx9ѿGɅbj739&˴ڵJ(5!ij!p)U(38vŸhϺԅjAiaЂxGŻ/ w|G|+tQ/LcI菧İP/ sa$X,K;YJy\k-KQ29ԭ9{t\n[~2D$h*md4&WhR^}60h evOq2ʬe[.#,bK8y}MR Q@/1(I>xMµU$X =y1C|4 f]O2W ܶUq;0T6qx{i /.t3)2۹4qOQ4vwN^YdᎅbHpO 0݄ uXK*`-7>z wɰ;M胱Mg(4xgA)9'5-M+|] D)s:Q@Mf4Ͽ^ +Q)hw 3ɌzW|ρ> v6ӡmZO0mZ 1c|2]dѣ
    pt?$֥_wZP Ò'k݄≣)H5{7+?2?;ل}ц#v?%t@{P~qm_ k5*֐xaKq&)㋮I3&N%QE[^ b4` 8?#92pj_nib )VsRM]u͡K4c1dӲ f:sKSl7nh0J0p3d%^!gn1K/:ghZ+mIv== wGi2EGL&g}VSX2pu'UÅ;)ns`C4]"iSVks΋^^XaծN EډzNI[gl l$|O-Hm&q A/(\˒eHL:1iPҐ'Sb< Romfw!Ttcb<&y^n_> 9^s(xᕷ ^a՚G?ݶo!Oy<ɊʽO=F^"fY1qCpO2ΆU33yyehǫ swOc9U:l(ܗm'B +ozӰ5oA-ULhE"=kq^50-8|LZ'hv1藙Kf q_.3nWѸ/oKKsCe?pݥ[ sIzIcÔN?]VQd;E+F}-Iᘌz!2@0OmTvxe\Є7;w>e~`ld Ѹ=}@Fg[gNaڈ^1GJ;8d0B} ODy҄'anJvZ yJGMٞJ~2LN8yͿE 2-r Gu?*HZYID=/'Y,J=A]j3&"W13`93VɵG 9{~kHd!4l9RBYv ti* :g$7 rKg[R)_"r[5nP2r3w߃pQsX!l}.U;_-2/Of(_d !6F }YvXmtz=Q6~Dŷ(J)Z~CT5QYz|tԭ_۰ƯMjҳ*yi!]$mwX"{8Ӕ+ :xayq^/q*9}&3SY ;_uv&á(|q(I:WsX-#s3K%9|np=xiD7)pk3zuOmyȉBtʆZ[\D M ob*5Lzo,*Mr@kwu<@dˇo=OPWD@1Lռ3; 0:+ީQ C ]6GVq(l X*YR)^m%:F`4:$&.xٛY;ɡ#p  |%1S}EtZ~0Her+pL Uiܲ^A<]Zq$:qDdDŽ;(&]M`X>TyOc4xz6l+|5mVȶ<2'|e њZ3~2vHSN @w'S r bD쀞hBd|:~#m~gq HVO߅Rc/[ۿ鍍cgbSt9Hc:.0ơ3,EprQ!&:GmI:%8#fC:25b;|%Ž.¤ptǴ zEj ͗»]+޼L:E"8}Fַ,ꉠii;T &#¹4ǍC:  MZ pǵ&lk21(_?s)P`Co7<7R<Տd+Y3O]59<[?Ze AjGw`>YkXYWĆ)#03@`(р4_HQyΤxċ'vjn HF"yBٓWx3ffjpDBwSk4ELm8"Hэojcrrγ*U\?CB@N],/Ie2-xaռD:,Pp՗h}D͟>%shEUN.c{2æd_wvjӰ-"rxTe@jg= n6g-$NU1w 2ÐIn9`AJ{S/ |BTJޗ! U;'ƯƇ.C@kDf?辐wF<] S3SfqV)pble9RxR}Jk&BH\f=urFr-kl3E^tw%UMƈJA$-z GF֎Uc%J>eJzwX4}(kQ Harigx{6۩YaYi5;>t u-ܵގF>@b+M&>6 4S,dJQ7CvL A\!pSegfpXbHk²eV￤ #m&[U(s%*LA@."w`|UٳjRݵr ̝;ތ "R"ƊL > :d ñO}]\DݵBC0v;`OvVo({A0[Lt- j`/fZ9e8Ud=˗HŊ^Bd9IG< ?g~}0qZ+>t28_QxH9e*ڢ[1uc;Q>HV9+&iYUq,!@az_<Ǒo jJY+j"(nRD+6hNhVu&" }. ؖuYcHkcy]fSqP\EnT<nZg:Kb!~0< wf5ŐWV9` Ac<ͮ~_Ҿ8yA r@֪4z +sހTum@tZ 0&+&#ZSpJ2 Pcpo{YԤ$=ZIN\NF!aVLCdq#oO}SPD pyr1ќ{$|aNOo{tfq _󿭧f/AfT jjECyL?R'T rlNSxD7jBwyS~3/,4©Zˆ ST4?*pmZ%0T[5xtH^ߟnnD]v2 _'oثG|qhBx Z*Ve`9pZh@lKohZEa-Ƣx+pg?&ͩ5DM!P4 Ip\tqd*569Ь0'fx6KfDW0vwdfnr ~Ղ6q@w7+;iU uK|m'D"ScB}6`]Lj1xwE HpY0\lx@W2R %5{׎er"~lk@̀N.Vta>VV>ދ!((۱'%g (|- !]< /(%* :_Ý-IT T$diȾiSpsY !ZYOYAF;kNXncIL;?bFq1_ .  ;&7+0.aAtfѦZ/&s "IPzpQPߍCHe []\PN40Ф̕'d8M_^8%;3fj7t l5'}o1Io[H_V)EoAdLansfKaj<N7XVRם]wEn n hQbj`Aj,I6(N ͒C*.њꥺ {_{,b0waRgH^t@WCU/d)(f`'0(S:Qغp&)f!Փ.m OhywWv# b@f 1w-C:Mnb` A0t.gDa3-Ub:VC¥B45[rc" (i;K In;̌"=WnB _V$VD׻PDԬN0rۄSIZ4łb`ZYv*CEkAZu P=s}W`ǂ6՟lr~Qpg;Ivo-@sw^XsM=t Ɓѵv>"պ1D &Z;8M{;un4YEQ\<=yq-TI+ S:s 7(cANPPnƗlb{o5B#=9ui5]&,Hz?-X̨x1uF1?v[{1D;W8{[맡Eβ;Işp ( }dqN=1@ܯ4beA * PAb !sP ki0tԢ@텠ZCnV"kȪh0Qٛչw))2G^p\te!ӕu'Gib?t{eJ}ǥ#1'=4dL@#0^(('솗 \[43 6YJ;ExQǰeOZf~C=V|8ByۺRA}`;I+DwndHTNBO /\` S {xWݓ a#hXS!PUz  =ir QUAhd?nĕ&>R֏b)#TˆJjR3\Vj)V4rݟga*^Sg.LN!g*$c%}S|񻽓Zp LǨ>n:moGg/[K!PXwu?sv_9>'P?'$@p(WK3XVg@);Pk2G/rr[nS$OS~ SPH*zעF*HnH O>MDق觚ߐ:ש=$[Oy] &Q]= T!aζ4IS\ jK+k%mo0}[H b +92޸MAsܙXy5}k  C+: wr[e.owJMp2>%$=PGjrQϡ~/XyMjԜY\Y`[q~v +j^I D*Ƕ|MՉTLxLb3Qj!=!CǤZ>3gv'oN%Z\0ş*^R6ʛ9m~;D#l͉5B%h9XVu62`=h9EYl EJnWoѶy6^5 :NlZk h1 ,:‘U Zv/\G9ؖ>;nJ[(Z{S[]gةvYC kEs9KjC\M]UmhmD%V6NYqG_,d!xnr~o<њnۜ%~+U/pciL!󤱶VjsGЀqs9*ǠFhp Ύ93۱,:P# U:l ;Ym9M}d*$Yʝ1iF^oչ֟Ł7") KѠ/  ԟ I(d%f &UdJ}^-hxYBg⾸:w\dJE1"ڠZRN]-YMQ'8#C9+v)fDG<:E9Y=`mq|}+( ړǭ{97GHtTk!9eR /ʳ]((N*S/$l!Zi_=L !EAAP(eJ׷dL?@E=l|'r{g,XPX ǖi\z)S2ݒx{Ŕ8F,ۖTq?.Vx#ućQ$3',rVںL}hZ;VuʈFXD{*~\' S3?"O<>hSQqy fZx bj]B\gS ru c*ã}iRK⫐V*5$_˼pYܵD**.6=ڭs2,c@iT167c?q:%7{#6rV˙FqE3үup$wm 32rt0g`Rs<K! T=LK= շwY.z$_ъgЌ8BEEfMDDA*yG^O qBJbZWPSΪzTOMF*E @K/yR4LE* &j>Z8ͭEڭUOmbF4dIFD !X0]&;e̎,SFD:8^$ߌ^7;RXfRCAFzU6)*oއ@]-,R۔(KBTl@EPd<UY6}*<6=El{iR݉cbB]^S)`%%-3-6sAY[!$YL/q&:.&|"&%l̥}7-\>>5{KOla=m'@kzm ɻqgE9y0`M QZf't8CߵT/NQE矿8`Dy4 ':q"ZqaJaU )kȻ%Y<94o}#zn2Ċʾ7 P2$U@^\4ackG ?{?!& ] [{sr}m2ΟTծ!ŭ)Y{O\~nm1֓NKE˻c\@0#lGuvt?<w?WMy@j\|;r0ᒣ~PP/? >Q|XK{>bY}ؠpͦlba?~o<[D㰗.i_ּ:OMB~'yʹ|q9>[]9K ?ykDTǮC=|AC`ǩBu%9Dp/U;CKV*(5^G&3姮C 'Ê[FbѮQu`/l*[ܵ KKUFgQz|jeo}H [~xx+',q'`vOɎ7lB{O2k}(X9!%5w./̗ _qN37ђTk~dvYx8fD3 E`}s{%q x!QXl6@E3>/ph؄{4մO?Xch0L|7_V!fqD탴OSnYD{ >89K RyqҪxɑZJ/zfCi~ߡb8>ClcڻR5D ; '_U$TL>l ~N0o6`@sDyNHMVW豠g;`BBKv z.n4uP_%8GOĬ̍]%[U@w!s`b C mKXk D/ݻTXMFHϿ3v +TPnnIZ xռ^nE`c 'a6O1? } 0ol₵L1zrιf S\ߪh7]X&*8m Ry#5Dl8@$\rIO{̅ 1RY#h Bi+^4b$HZ|LR kmX^ܸ!#EŠuL耷\&)tccH|~OXGA}DD(JuUqK oWV[,7 @6c7̑F\jfޢ0^_+sߚǑhSߠ]6n`25mYX_&0'ZK FwnznJH=s6.=7BUoP@ "B.uMGJS!avܬhe$ȓ%~Z%Q6Pslwu"1x$ AȅQcQVy. nFe2r+0&xə}&OCv(HKFt0W؊ P6qGrYSALTK=~+Z#:E6؀PVvYbV[ !ZM'؁_H~)ʐQ|PY5PDS\`U$ PV7(3B9,(Ϟ;h**hhEg~64=qL^}87-;\lR1HcnVjJ`#sIĊY\L=E6fwŀSF]moJ=5_aaܚ1ʀWYMaNIF,?*e wrks5<i^O5]ʺ0SM$2}*T0\,qIxC iNeTO/$P\gz )Nr8A(`r_w~;ͬIGaF5sewӷ̞])%9Gϛ4N*}*>͹|L4E 'g.\62 Sj/Q8QltZS>}шXr*l1q,_[eSDx||vz:;4ֈ7 5hq~h܀zL1 UF@$@4#z^*)󜦢@?`D5ٹe'c$A*;4ZCqdzÝnhP>o$!uGυ ko)(O4pP}H Θ{键ۜoDS>٨l;Ч,#\ˬ;~iFtN x$B[?I.>nOШxOI~L`Ӧ_z^PxgKjN[U' wV_L nIi w@8u#=H1蚷զlxu'0gsd7GsD=NoivUN, :%*Ol! Rz {%%HFe򬞰Bt^PhQ qk$I%C_!qu5!{ ]ڝ }yn{"tX)05ƻ6 0& X4iG 1duM"Hݜ$-Hk# ɉtDuגJSg47W|Մ5 u9 $QBzw> 3xF4̒95Ԭ!1ɠuP"so@<"W(*J*xu yYSV}\F&}a?SM`JY\J38Kb}إ^`U@:P".'DoG, nLu2=jA}ZrkdJ櫐\ΣI}r+u茆3? "58 RS qfF;MR޿_*1|_55SRDm1mzgls@%p?c j׈RM[h/3(yVΠQؔZrCrgnJ*;M z6BV5( EXT$X}5Tf!؈ AB;b!w2?jLCC4s\>XJӼUp`T YGOxpROAB0$t bHǧoG 4 I?4lR htrU`%􈒇 ''h{8Vr+Q~E $zU]:ZP j"JByDgs(%q(Z|n<^0]ȉ`æGbCPqU4QnA;&(gH.I:ε&:nN_5 !] STL@^8[OA7;nd}]gZIjc@ď{/n22Y^?.(kOӧvC̲H5BE <M_cKjJ*ކNǭ+i0Du;/Yo/N;DxM<ÆE GEK:P08nd42oљtZy'kR w; 9\TKE91æLyl=}&9J vs2+]c (* 3B-c"t\ytj4<f6x4BH'sEiQq"[oWT4cvȺ* ]ayg5z' ,:YBpRqלgxdDrےUAPM&&~B4LHrv&Y[ضzpqyY6X8c.k-J1Xs M}cq* |K@=cJݚx mqW1Le %3KU$XiJX8QX0@'/II3l-K!1s{h-;8wt {\5#4:l2J31ӊ7dd\fIoӘ}I^|헇,"r0#CemP0q5NL3}y-&Cq|䵶b$"y[ie3ObSkL(uqrk;`捈r`3 MWj~ɦ5z]V6+҃L=XQc~_#Ų jŰ²gJ MTXs6Uz/W,sC,Dě4]TNrt-÷!*P(7v1r.ZdllxƢ]']wf%Ü U*dfyųW< =Zsig;?R|aTeP8c!';o]T)Bo߳);*O̊G4"i$X&ZgQ( %XNH?2*VX'!{Jn<?7!C]Ɩt6H16 QrlURN)րÑ΂ڟ5ݯ)ԙKA.\Z:7c\7eVlm pΔI kd$q?-rRnL:w- K&<+|5}J^++, \bbBiuYB1Zut8T4vnD6; ו&Mn]tsdRLJ3 oۯƕAX+ܪ+[luJAͧ>8sa Ϭ6 X:ݮ fu_"=w>cOZڌ=_Hn!11q9-M!-er#jB)O`*B1 ހ@=E4QpT#/KK:zf`bl9c`jDeF,Ȗ{ԇK"H1n9x{2\uP-„V[ GҢ/ WN w{h}Mlf()yxE97"dzPփ&3ңYHB;f簫b&8E_OV&q$f" R ZO+l/>L6>C,%؈},dcV6l\`GX0i r+PC"'cg+{A1\6mN P]RF@Bv4HOn]>LI(a?DN̯ NDk]#eXV)ŸXG?umbG'1͵l20BJY . p롼Oi]6ۉܬ|s,|ꡖRgr ݶ1La<9+\/Q ,^*C. t%#,PGh e9C8S]b$^: J+[ApOMe' l=v|8F$\F][  _vc/"`EN4%\%;YE:D]z.iʑҟ GrBWU#I[H_Is)'nh@h0 C!L6G04'~ݿ-53DlxR+;%ڨ!$5n316B[YVh5yA0yhKx aNWYs2Iw?4 >? j_8@̀0>h0 IÏ!K*6)[~pq9~䌫*/R 7Y@λe6{bpZΧD/{#yZΉfmNc eꐡ&*&0Mp?hN5U dyR. ղM#J;4Y4qW`$BJ0~;t`jNB^7ast hC`;=Bf)NFLP`aKV- aw̋5Aj1RrOm??F"J&@}m΢`+(AS"VRC:4js!z38@inSQ2-5j(P~t~:Qb`6E3~THBBj K1*TkpLJ;y] TN!e*ny~^,-hVX\76_cύ'Re4#Bpfxj>@0IAִc&j[Gp'5@ S㌒3 GRiW79"$4f vd8!7K4)MAAP@혥lM2`~׳;%Wq8ǠQ_"ism*W޼ 0jwBN=}N)gEjLJvV *k&j֛B=jo1M;l)ژX!rC~ݒĪ`Jߞ}5gݯhN6d΀|9_c(o•^3,Y?/cqJZ`Ƥ}u=&87îmY+/;vHGvHS NySQ ^衫aj|`O49GSu+^hyM2kXv ~0~ͧ|/{~֜!nllDV@!1s^ͬ1WvL0aStI*zx Y:> ΙhJ4 pv`' qpcx#؏17P|2/l  D2 aI,Ж.5Y:k];7Q\RVm \- uE5@t*\>09 "Ua%"\z0!fofd(A(^%& C!VZfni[musyB2Sr?բ6-:? t]8=Qm =BeeBY$8@w .\=% meܡ +q%v}3ԟ >SLeKe Dû#j~aB ? ^F̱I ? yvXa xn][p c&xMAB?@HKN̍P|E [釽WGf] 4t:CѴ $Ƃc^/?KXmFI1+OratvUrKG€x|?\ru*kn ѿG  ;]/ R˂>RESuLAvHפ<.9%9 ͜o֭d9H L 9g/ݰқ¯1Mqg Ѩ[=I1NgkCdl m6ͮRqԿ4H&+ Uba 3!2)ʏiBvXo,R ˷ KlmSf}&]gOB 4*Vfl0]DXR:9r !I~2T#28SlP9 9Jn*ެFee$ٓ+T''? =GOqh횿P8EbUgOQB0naޑ_ۗrٶ6o£Rԩ?>_w4S]Ẹf(~caAl> g?eۿ- 0EfM`b2u OE%vS̗z{z)=PQIZg&M|QϡFovcJɩc?7*;W06's?$`O,/7!a{R0<ѡͿdmw){6k{˭K zcENyIҲTI[;fUP>̡^ϽK[9ZcAz-| (TsvoMv|Ч6\Y\6AF3~lC*7fBx)mlniXh&-¹%[H>@kEV!!9[$~曋Ep+4Bo*i EcCXk+<# xRNe9BvT{*"%CKL,r,&0q:ޖ{\'O/+2 Qf?*B13Zm^F79!+kݿoz2Nb>oHI`A7(k'B۞T,8BoS :# \9Se2wכbU`>GోSP#<ã!^qay%|7[RV4:JwDS?'tOBX2PGIUTd(Gؔ D;}0l-3 mTZ}V$.]n> n"C*bٔЩ ,va nM-i4A@g\yH+In}S^fgIE}Е0е*/MG=!x$nvZ#\֘B6M_iJc:jOB-$q-x+% TUu_ONd:]4֒-ּb/-:;FAO2KriJnWTI~2<ߒz@$T[OSdC2t+6mtN!J@K8cubvAHUkiUqҟ[f}w}v=]4BxZ+.ZQ$p(1#Fl==!t4F=Uby*3\ÆHK2Ʉ@x@ʆ.i-wm'pxe_VD<-gбۙ,{m`q~Pt֝Hգ,hcӍGA;X6v+toBh9mو9.2Yé-{ՅIJ4" Ve]{xIsP xѻ5cnˌ= losjC[M8؅ G:W76G2Pbi91 e:Y:EІUZƠp/[$0$7\$SᤙS:A֌ n&b)3l>a9Ól8)S9 ǦrB6Hh$ô ii*[j"CF69jeR""cѵeQH wO ]x`qBYWZON(2-OOJM3lqC4g酉*0P|C~'\sAy[2]{n/}]r˭#n`գ,ǘb ։rRf,eܶ )4cI@+}Ȱ!9~TIRs#/:\ZmZ࢕l-j;dՀIvJQl F{=Ƚ,NRm[J%v<#_Y,qҦOkT5qHDƐǡ 7zMI|٤!Hd/h*ZY`a3GG4tIլf2 jDyuS@fJi\:gj2UVZ!SXey_YwU!_|&o(å%"+SpӦsӳ.✍`K+=~ΕIaUZR1惁)!##Y7ڍ}ͥ^yWEGz49ВA^ >3@eZ7vMbVdNR"ͿNƤ#K&7'I߀'ԑXbpy;q @tef^Z-'K+}c>9A*|+?Ǿև =a: z)c%*^2UJp#t1cI\#2IKZ@^d!קZ^tqȄ$s#o@YOcv.>"Mi;fVuNzM#h*ٙ7;+35R4ln *X-.Lð{wHcP}[ʶ`}e}I#0.,b4s+)>y7>xXu}'5)l^뇱 9@HNۊyΓczʠa#hHe鷞J m:&=uR볶=9K7s"i |pƓ-_7NrBC˕6%. ꉉu!OjwX878!R{{EXŦ;@=[±K}#pog{I wN̯^?0 BY@{0י6Rt{H\o|hn0pFBk dF[Ǐoxq+G_ mG`-S>n;;b ҕ#1~s~ ȧT#a>fpJIFKb r9V\=)W*HVn#U7@fa+˂J?yaL#1Lngwɩ>gP {ڴ`* 'eGSnBLhybKSuœc(7>@`\gMjp]~Vsu ӈ`BF~\u )+yES}ӣ%!8onr{%zq?Z#Ɵ] QjR3c`GaAZ`17_ԔU)EGo vTݤ0 s&y+DZN,j \z s{ ?D=TiN5|ݏj TyN-n M{$a )osMɣ@VzMue敨ga7re~eJ ݅6,|7.I*#p*y%>\2YsJ{ہRxMDqV#!HRdsh E6<^:=^}-ˁLEM7anfqPNt'Q뜵 :VMM$BۺJJC`jQG0mJ؅t,-X1{ <2&j:_/%my-^˯\ajȐƲ:iD)]ӋF wvpu<$hF@CKU3֗e'tk8swuz''1;(ژc()pvgj5ǻ?_Jk坅&O ]e鬰+-A \ҦwEy"\Y@o |m&.Eppsg=Hb5BY &Q\fKkom Y. p_XUag:P&dGU n*c=(bb_.&\3 %>dVN o+Qu(Gr\Ru1y2 rjJ8 9h?hxhadӉOmg~d/\$CU%ͤ!PmL}.qG^ ܷgELJz1'8#J2Smә.]8aƖP EhG|ےzjN SFq1CUǂ۴E@]2o!()ѲyC$`@L_s'4z -+<~oVrt߂TW_N?8c45އ/h}Ӵlg*qS伢)Ph65?WiN` }]0 ԤE~_h4╃p{=oeN8vvY m٨T7ys0K]׮&t0Fm҅f1+42kb& bʚVPčgRAY B|7P;$nefN{jqTy2f[e>~^o~-QcORpSDd*gs5Iȩn{vbtTiW +Ź)n1 t/8+ |(Hް؇Wq! Ҫ`;aCcEcÿ|R73WV J6k >b Cq\JKfAdh,Y+~1C-cYD VĹNFv>AB"=Yu2+{2IV&CeƼ7ApƹЌ=ׂCT-FRWvj"M7ShL'?>9`PپZ_Oū=x܀cJh>vq=3m!?]6vv-oP+&wa^oFRcFsQ/: N9SA7@h:rHB"ʝPDV$Z bw;;Q9M?=)|kBbzD\\/K@4ENQ0A.l$06h&٘0}'p9()~2xyKM:QY:%(,9#+H >0=n%T&]ёd,/l -l){Fxļ,C '¦:\o<ܡF1g?B=rZ% 3^VߩOt$߷&UfP3nD˜1>.(SUQ@i|GՑuzut vպ#>N.鯒2ZaGvmH(-?͡src_)T _Koy,=e1t裷9?u9l3&38@TkHJ.k1@?؃ҽ,/o8ku)%+NOmsed44n J'"y(_^aZvAۀNghkǨMFHRG3}l}oHXK[?=-a!3KOMW{wLNij )MkH]gb_% K0p[;kOW:#&|[p ac@ '9tΏWD+׷KD,>|hy8bGA6"E 5(0e`gYLx3-F{AtI+7Qt6{X ĕ NԸev> `i{8A"^UAK۲ݗ.^꣇ }Z*Z2I`XjP/I֒;3ȉF|CrgEpOlCRpWB<P$±UK'iH즙B[@MOu:%X) k8K=<ýyrDn kD}p2!dxЕUzв3dQoR?Y&~ Zd2W담 U\t+nS7צ8su{ _}elH}oePy$Ӣ -$3+}9/~ BJWXꥢ=0K?&7S"(A02zt>U]*"%$7jVif4BPoexdhfCnF^F_]&tKK?`+f!9,l..qQ`OXhaG&Ӧ'@=<4t^6u9k`YsK ,KDte:nj Y͂ ;|I wM\<u9Y`bC=|xȴwj3aB(c$ė!^=y'2q{Fo L]s9Jj T׊4{&@C"Xyn6֭yWbRw#1) 0Q3FnLg[J [lP=<ӥ=N [| VI8,zʻu;r)yծr3n!,+<@%2s'b?f|eeD lUD'ΆhˆqO85(5!l~m$AJO_ ɶqQ9BCH l%_,1얼m= @W (dž jg$Zbyh|pacV6YZOgE;BOWHCǾ3_Lh&hYmy. ; kxL2=4PnOr\J3ݮӥ*nÁC2A\f&~{,Dz$PLd1mu5q0Ć0d^apm(]{#_86vSOO',$ph8 XK~&WNźIB5 \ȟ06£p[f$OYNB-Dv-d'd'cg6 -@htC8vgn{*wn)/5RQWdb3V ѷn@vm;DropAή{mdFAĕ"+0R7>=/.GkN8K<8L6C'J Q3]N{)XbǤuq{tIP Kv/}F_'8;Y ;ݯq8ћׄLν e(e7h;8+y4\ztSnnK3@Wy`t'p~ 7D΁qF"DHdMn]y@H8L= F>׀%JXKn',\dsWv ʫjGƐ7h&SS7cpӴZ@c".dմN҇BptXЛ@xb0g"84-?nլ̼lrZ=r95O _F2Dz;]uFeo8xQ/1NԋsKרi,tϨYCۅ@/St/=+P=H)C-Bs#ͨ8;MHʵEAمIP<G7c2Q|+H[cBEFW~͎iJK0QcH;fyBrbN-WZ`w s Y~lF^)x~ƩAkR]T;g϶WtJ̕kѫAZ7 EϮiJWj?1#Y/$MF 2|-?$[ZN­kts"WC:yJN]= 詎0p%շXɇƜln|V.ȓ q ʅ?Bk\PT1.ĘBay!2g?f^D׳,iX-r3 O/sGߒ@Hu`٬V Tk$m%VAGjGƹ@4# %b| 3TBep{%w?3*V OX77cG E2^*vN:x>N! crJ [w螝nOdч&ꂀ!Y(K h⅚Rw>Bx'%-͇i^i4͚ ^aR9}'Vp 99yF(Я3Vbu‡ɓnn O^ pXF(U0dM_:t)5SR&Igg92gg #EA#0+C}_Œ?c6r977N@JQ5SB1$ :Jl 2@B'ZU218o7c]'i>pG{ڂ@. >8ډY.}ūlTXtZ_B(?ObH@`U}W6l-q1 %<͋xw$U3U5|$~ewJLt>nAD)!@ L\aD`ZW4p7t ``c$̸F*7Fle8Iyv)5Kw.*dSPhywzrg,ۏW ۠kUd0?xƆXELKe8ΝUO#*"`"F׉y7"sh^ RflIȔJJ+RT_- t-ͫcx|F _ՀS$[cۯA)L% G2f>XoW gw%νd{4R>sV*1F&;#?~,< Z#ab((Y?t_lbvOvI~aFPK&Ko#&#C`[?. y#Xl$x9E40!P/ܠ$s-LC,=}O? p1[ kģz?qѣ8-Yէ) I 2u.šX[: AGkA*k>|Sz3 [Gِp8}sVG^\#/hzmzU-Al$@ޖ_vFS}ƈ-i~ë2{V,a&DW nyA0OÁkJ<_rN[Tf94s + 惝1ޅg(eӬn hpvYMxes? :sYR*`j|;_- FhlW9kj#{ ±4q-1ôsf3?3 y8ZKx+C!0ĺ!f&X):{'0ٖE5Xd-t7>yaA?nv5~YI<jP-疲.qgS` EDmvYNHA_o( G\hjHPs.@YؽƜX,|mMnL2Nn؇DH!ʰ17U{B#ens'Խv7 R;NB~U"=A'G9d\;o 7y9k7r!?yM&j,\HB)cq?q/ GufxH}9v+7&4I=dt׼h)1"aˆ!MƗN4e% \5 kt-1K=˓P@7i#DUJ4?p%B7'O/N/I%Kտ_VDʺF [ҕWq(DNwڿNz*KYOon;Ҫ69*{FP}hq!!|x=tX5酜,*POW0Т^zSq$ԐQ.SOnõD`9w$hhVPHr)TW.&>3.w1;Ds{:% QTGiN+A O14 $s 6Ի; Rv\B3$Wb"CXN~7)}HcTʤ9y!2s~2PJծMpMlʗ2A$ᜭs9 tPͩHaܙԕ<:X/ ϜI!(_*:ldisW 幯i5԰՟+ȏU7a $a쉜"I :G<̣sZ*.F @O'$AIu>s/gj/{,5 E:oynqh`q@VZ$xȣD c&&NMP fuYlo|H9,vE`hOl qsp>kc6µ|`SpKN*b5ywz WTm!dTmXKx_*u@As|lW>EYCf@؃giuȼT!Wıd~7-k0"`>sĊ^'k_jQצ}.'dfhI&G !K Sl``mH3!V 0B5C$"Ipg聘`mPes5QqMà(Sߴxx&槿|v9oǴRVQ#W&;80hMT)uzlxZ]\`6|CQ'gϒF|uElG@\X?E74j0 IفClly*wIYO89n ߼L[1h٦lˈni \t$[t K{҅Aߝ%u9 6،oZtV8*fV*cN-qgx]&;4[Ygr)Oy=޽߉m{xB!`v<*#ۨampt?8tɜ)K*U l_loGvAĮyM ?0!}q=@/`L`XNɵ()M4ٻuy$`1+uOnAHRߘ&gx_K:PG=3*w~H>j?&L_P# Q3w 'UL$v@,ԲsIKBӐ`<8q@+-N=zwRsx~, 'nX%]ڏȒUJp@ q¸F `_D?wgyum |x$M{g~Ձ7-ń2ѿ櫔YӚTyDWgYFU܀Р^vGIlv aT盵Д//oƗa@ q ZPѹ5U9ŲU}gJL~2[;Z+s:@~hй)voAA28<&;M&I(?=+F$M4$lByރt|V,pcq@[:lʨƿo[o)FS xOPj6kAvV"(`& -g9^VK`ŵܞ|YFwK',ه&.Slq2zʽ"Nc"Jeje2dlV-4s .l77ɬӯu v?|'7iww Ӑ&nW+RʫCcr"m 5L[>= Ŭz_/bZ]7xsJɳS6y)nĤP DG\;ct|1!jOc-ZzQq}7/pA.֨p:1<%1'!Ǚ}}8 n>.vH zQײa%q^3l) :K?#A10uS}DӀ A KCڇb_rq}*Rh9ɉ=be)1_H?RS:fnj|`z=z2.ek Xq)I͖v3(@nJ[Pa8T/u88L"3)ph܈>抁|u O'+`42 `^<[>eA(_"R#ѻ^55  r % ;#?aS:Z<<Ҡ= Dt$2_}Yގo*f(Ngɇ> x~rIƓ]7WJ#~b˸?)vB{8> |55ZHmW_ sD* Jw!0ؕݼlQJE5vIqYNG@@>d4Fw 5H Tȴ,RDz03/&&[/&EN-k~w:IN}c1a\*$g("=/<TS+Hɓpl(1#kd/=ͬޛ^z^٘,>GLPHtrvZlN6hj^uvX@@> B庥diorVcA2:0ѩL .)Wv"),{k'J% >"`%Du1Bi ؍#BOV%eqs6Pse"6ω ɦX%m0*-f<"ocIJ-{inR}z?{#U-4D-Gz-尛TyHBtrsjʬ~?(wXLSd3ްIWGBr@MwzA᩼z|@I{u2EbYihsrUP= 94[Jl9xz**.q,:y̙=eiu% @KcEmPhu_Rf c㪉lgl030.fQn6 MyqE '+-wGH:n&6^E+[50d}ѽ&?5,`m|`"NQO-j>{FϘ~F|dkG54?IIҪrUz*rR9(Ue6NXr%B2WFt,ͨܔ}bKgz#[J A~2RTUZ̬C֊ Ea>)^LEo U|%c+&$o^x`204= 9iNVI i1aitI1짍b=#2;N%QQW ҭ_ktuYs\o @ZTsL?JFWpB}*iaș>7|q#x|g} 5ՆR͉K =Ǧӂ\7"ޤnϭs[Sz\zX`w3h;OGހL:u<)v+vXc$`%^qwk!{ޯňhAƛ*z+t2J+2PśK @z׽3P O{dͱ!GVT-m4Ű;t절&brC P j00 XMen?S.0Hw4}ڊx$)XF?Ojzd'<䯷?&GUw!lja i :(Ӽ ѩ~PVN22꼬a{%& u;GJ@lQFHWڟz!{0.oυFgZ+~01CGf:ΑV:Gi)>sYjjfԱ/̤c ?[aI[pc&c&w/!ߛwD O A Fͳ-0Czy+8}._wjJ&?uU,lDcϜL͞q>6"Q?:bV0_dž߬%/C4GU'ĕ ,^&cI_2I{*>hy׿?OWgazfMZl?<(#>"Mdt=+ABE58R>^&tGBa 842OS~q^fR<~dL  ^MgWA}:sM듫ӛO 4A!la:Γ)Gr2o{a';}*BG 3L4/>',-^S& Q\PZ!=duS#s[1m0w &w KƨP&醽^4}5P/ę82X)>9'G^zh'v_^F}xURˇ$e 0C: -ӂr?_hAZ|Mە#7/SA}|Q[X1CtخFJ7z}lf[QNGDa1 m sQ,Be()$)6 Nj<9'RcX\h?M.Hg(V~c~$8@$ @=qƿH ,rgCHp_i.ƨ5Սb-LY?W/_8̨WjLT:U2`YK|qh»~H.E /ڳO/c48a_ c4=ˏ (.)M7_.$qn~ O~B!%Z:'4OR>Nht*>h} +f/pKGR nt{ެ||Lnů,kU݀5nRJ(,Fb  - ŐO,^\(ԉ=xbO3C`s8`\QHeJiD}MIoLЏ'z ggtW{øji67B:[ϷWGe/iҪmdV2zySRI_ūyǵ$|f6+L<8H`tP{ c?F+IFl;^(? ZY^$QȺ.R2ښņg:Z[EʈN x{.73-"0*|=ͫUûkc.{Md,\6HɎcCn; ,WbҾnZ`SW =@qߙRo7=^8d ~ls!gO+f QF9: .9ǚV?F;g 4Mqrpx5Q>ZAzzBuͥGB!CUy51?N xg ?Ddq}"vi%!ۭ>aH~0<%~9p)UC_ɂ~gswITAV>HJ庀mHu7*XrW Qe=%q_9lt4NX7rخ7yEPO%8+xԑ]iV@P֢]J3TPQE#Ra_>]{>SX>(D~.ĭ/K695XpJFl9 U̴j-vjRrҐG?Pҧjr!ċÁ6vЛ߭ߊg%[hm}n-kZ.*2 O3FfY]1 13 -;2_ &*;r{&)?b󟏤^QN 1@_[9r"[2Xy%Ȱ;0̀{E\{Ҕ_ HRp0  l @- Q=M`xd $_FFPܻ87fV)I9|!c8,Eا; fkIqKb[cXKEVL .,~ac"HV߿ E5[[/?\MmYZh^: f*=Q-0V|SV(MdsL=a %y/0+ " Y&U-EIM̚l'hOW壣JԹK7I3M,s{v8Bd#zԨc9N2uD ;()YAȾd؅V L~!Ņ G5l"ÜE~t463 pk(( 4t5Q7,4ןmY[nܤPii7+gH~!'akq8hS-~>3}biAC9%170{>D]_FkoW,8qH~8T *r4H)؇U&fc{<714A 𘽅)vKSl0d+C.e+h-}"ʪ:obv_R?۾6jò 1@)Amoش@tr0UR 0L{}VzMh92ZA@sHkIl,d 3hp{cuv|}0&9˷Qt*36L L>!c ~I# >3$e"%O=C ɔG6k h]ټ: 8nROr(oIJyn;b !¯ Cϛu:j؞lwYEFa c^aStCBYX=2E>x &isJ&zw+TC)p:5{Ŝʸʷ wà\F]e]ht]ɹ/'bf-c*OI5AT<]jiHd$A$Cg~ly j&v%shnF U*-($\[amn , 0Wni$sґa WiVkS'1؋9ts~XńwD&l7…֕s S z >UU%hJyrS+/,zlչ-Źf/vߕX6ț-UunBGpmn2|cUq/Dߢ)_q4boJa95pt/M6*OMZ&0-7ج؅ i19u]3Y?`C&3AąƝ0/1it~ cr#'l[; 921h[N@Dk5ʒ?Cۘ-n#tE]h[DZLSbY)=+M37#[k+U9 %A?joMZ_e%i^\b{YQf*4`M q'NS끾iS5Cy<_-q1 ȥ o 53 ѿ՗av7Xkņ-e|"o*qqSy `bTe xܘdݻLPoD(WyZt;IH ȱ8v1t16:cVtUt jCoNŋJM(M;8٥; 6s`T[-mY-YPudO$3Rqz]*X,(D1!~`K ef ߪAUlbN:驗vSi§dAj{-0uY,`nöu@C+Gө$|sOb:v6XX7a] ;2v}3/͗),i8Ľ&,,§x圠7f/kR|7O'HzGB13Hc͵@$8 Octw4gxlc/,'"c8ڈ18@H_۰U$FHhܬiuo2.`o7}wjS"%|8Wٚ1ںh|MMA_D]fGW-[JZ[Tn=lc?CBDǨM­09*hٝ7a 囁MWDЧ5_Wl;l{mr\rjmKEβ\CN-s. yєV{|>+xTZXA"͸/knCw$7*׵"ͼSb7ia Ⱥu/"V!pQ_]Oڐ;{噦NsvhI {~Na:p \)| *G<=zAyxpoԮ1b̀];s ;1RT lX%̔~ңOHKDgy@nEc Ȝxk ][\y^.I/M7G/S PU !]́Dߒ^k\<`sE QЋ9U}r_g:L|Syf =d(W8 ֥ua@H:|IC=(BknkǘY _GG`X5Ψ/YgհR6f=ϙcrrnGPZ^p#B vЬHQV<$.( *v[ppq1ZjS'99'pbOO1>w!4u Oj)~xȲ8qK(rvi Qhj^A ȴ-7>! 43Woz'^cϡ6$>N6Xp;Trsd>Wa1L4+{(,pM?@2$a{ξCj5%|[5ʪ6o[57`??ir=e"@(Վ~bcVZP_Dk  J?M"s}FS$`aǙT"-UJ TyHUޓ?NJMn5$`"sE=Z^P}$U?Dg,4ஙlLdq$\\² {V?E=] $I w_ SfɬZ9#^6GK3i^Ś+&^(1 %U-`&*J7FjVڴ ti ~/@ZZDl,EDBy%<ڟ:@ ^#'<KW.v@[.'df7_9K]܂B⥥֭a_cfș9A!´#\=iu3]mfmYr>uY>x"HD`L9\i* }'u@'$n>^e0缇 @c@Nd4Cϵe vn`?)*,vIOD|83-lϐ4, -{̒}/6D%'vitOHd-wϾ)tmZ# ]ɣw⪕J& & XٿTԫ&Te8UZP@2C  D;\fZD KG o!/0;pVU;Ж~:(bUIRFZkńW;;"n=Cliwp5;ӷ5D(iv8:= cWVKB%/K(\C$m_3pF.?BkhzBZp]9SkhIZǩ%P$矑FLg-@". M)-`^1ؑ~>,8JlkKvsKoBgG?D(U)Vl&}`>!Kƚ2Sbn6A\ q|?ђ+hR'.97Uv)yUHt7=rHsO%-mT!DĠXܰ}]w'1em-_I<˭Ɵl_+P}Ӭ1-)g(0;Ta~+͙;=#q}"dI3o*9WU(nB s*S4F_T?Ng^ɌD}>wN$H=TX^g=_'Pe"y}Vhymy)eY~ElAGbqNM: B1}sLQOCh`?4r]+N?ܰLbmfv.i!'lhasY?yvR+ /h7Y-dKױ Zo_3`$Pg ɰM ^r4q1PdAiN^'ʬxCgzXÙ3"F9┻kX"LBDWXVs?Ĭ FOI Ig=!ڲ:DSn- LoA"\ƻ!)vX6uw0wi4D0_w{j n˅?Bv3<d<!n̆wqJw~=ʵWX_l%_{`o!S'RRDLEZ/.Ƴiڊǜf2m$w}r!:(Ok>b+KD7IRgvWD P@w?%c6R=/;ӝJ_\ ȫ<`P1 fj3)18MlvЏ #~kך|iOzm'<s ~gNY6^NYKy(Yn*߆R'tJ=,+ұ\vP[A נKeGSU+"P:C)7""AW0{tHّeo6a S$Mqx>EA9^8kB_=ۛa[2VulF ),9"=tQEj"vF&דEH dFI9Rr4v (pTL9xӅ<`@ 㑦I]>[U;7Lݜ'beaӒsHp|Z5x hGj:ʹJv^8l3Rά^CҊ},k$n n_0Qjb ?2Lx( AI뗣B;*,rTDb&r"Zd@Gmi(sN&նLȚ`uoT|Ih S4&& `;DᇫfB.tJy'bp"tWelR9,=9wdxqw4+ܘG}Y),~ȼgWYWE3Szy{0=#||A) ko! ]ٛO0߷mrjfpQ;. Or­XniXߴnf{5(VJ+xjkͤE*K~"49sh Ur ) dY[znE kPgjMi/rTZ֣:QXٻjt%"=uQ6#u fVԌχ  jHQ$⠨Q ,׊D36L)jso7sEMH\C5ӽg!ǟuTӴ,vwSꎌm~&ݨ;X_o qNqˤhdPtgPwT 87RKf긙ϲH`lozf6fUPlǁMWWfR\Y zQ;*K \ -j}˼9¨ .xQ4 yaY,#mMF)kz w)7qҼSvXX{dQݹ?n[z< dztF+1vuS /'bu=#H;E݉ra}h_\4$.kEM0joSVHlHbBY" (B%6{܀"gY"x-Zq[Β8 ,n)oG]L%s`0hVʭnU26b3~vNhS4ci"Owkw K983A,7acg T__K`#8[{ʢ8'C&>*u>k i;)ݖS-YdI7հ@ %_um-7ga@֔?PwXpq8Ml[rdDtacvSTr E]ǚsN?ec kO{UAWm,&+Q W#}xۓ]Җ3AUSjo3n!)J*?Pb0Ķ.?=(pyO܋jM8/_ZIn)w- {>(AgpDktR]j V/#??m01Ǡ9΂SJb&a9jE@; DP)!I1*`߃fq ,>8۟}О R.E 꾯E Y:GZ0%\en_Q6@W2KlSk)‰{R<`hn8.ߋbK~{Z7dr2֌BVHC!Eq GVS3_w0^aՅl1&N]P P]RXHHhOst ,hm\%}. b>3vOzt Psz8:۠Bi/*c-,sʼn#bg8HueAʕV0Gs3| X*kEE FC(CK1۝= 6fS*f@IGVr~Hli^-7^_bI3eHy;Z0Kk zB|jw\‘ Sސ %ZTPQLi.s6\YF{-:'U_Nfr57@˘<QA&n eÜCI6TCB3` -dUYJrtz٫ S}#~!5c8+kj]bbEƠZM9ZY,?[)ģh&OߥJ 3aZX$BrdׄIܱ,,jr&n9a}+!,ZL+`\gXm΋&ߢFYY'EJ$-ky|㚵Q~(۠N"2x ˆ6l!WrRBHrgsmw}cJ[ >оک> :A*#܋$>qQpmU y*(}#H,?4'>.Bz؆1ճ2reM8_7R;: vVW$VfC<ܓw~)!qv֊|#Თ-bA3aWρ2' 93W i/%xpÂ$N"BcPz)TL%}݇(Q45"r:FZQV&ep9i)+$ue_TJĕ|^<*I03qHbPZ\=ǥOi!tgv3;5o RWr''| AyE-UvKrXR٪{HF$N> Y0+hS ~V<{ X'cwJ @ȭ!6 5(@iz#V2I*/tv |QDuVCkz3>W%YglFPy>R*9+1 7RYa"՚:CBaPæˁIéáO+:GFw2 QE- s2s$(im@HJɹ`d* -"/b*4ɫ\gCs5 羶e%XH2 auNŪ1^962lI(|Zw5/A[VIh5 TJYpl:`>Pd]:qwzԵ$XBigmi[{Ym0~&Dg;SPR/WxyNWI81!$p< d"QLEW\!B𿳛i\65Gd2g ;%2F̧R&]U˴iF"[qx;:%*P៍=qݶD+띬ՁLP6v#_ObfH/Ձ aĎXG$q(Nk*K[I8N1 @t`xjHJ$ yp{.\KDuqb.SNnYufu:>A^jG(x5+NzKɑup~Vq 0JwƸϯBzgx]L"BOOx#YPs2; $z"ܚ $H>Ps˧aεߤac}M\IJ bM QNf_D]Y}=qu9RX[İN7껐#p3I5*cn~u$?6bXs]G!ތ>@=Q ~b76 @cغ)Q7I2F!}Ȫ'kso#(6/qJ/H?ce%>RYVxDŽ<rqԓn,개KD |U?~_ɟT?y_mgiԙ^όpJ[qO :8}P9#3ADP"| W\x}haq@<`7F)mF_kܦ˸KWud%V`ʑduߜgclyZeW=lr3 !¤RO ϵen%6"*o97w%W-3=+wqym0J õ)xlviC\B]kiMk{ȕWh0̛^xOx1Arm.H -7VZ25Qr!ЯLvɄhUGY{R%!t~Fq;6YטD 0LSn#<"Mbkw}=aV<'5a JQZ1V/e0vGC7J۶; wp}J"h-5=z*lZO*1_|O`(چXvr,okee!"# %~ߓ@h6jE(E#ӂ6wAIB5}=lG~B;PãՄqVpv /TR|&)dѧw&ܜ>K/kC}͆b"! *Nɇ[0I;1Fȝ\KqRuV-֐;8lڨkaW`7Dp#:!vhఄ,ۃX/aɶPb6ԂcjyyŎDgɡUTB!Dm=j8!s*`106\ hwBNy=uuԪ +cRj{h1(i0b%2 9+pX "ޒ]Eh0,Wn4H. qeuZf-49Fy虫|eT2-ז9٥b5yJp$4eKf&ms 17eݨ g@mX~ L9+!R{m6Ճ wG{R2:&J?(}Ckħ9Iɯ6{ӯ.Ȅb 4+7Jbk0FD9cMŲU|4)mho^̌ap1FTeӅ\'ȧY,EWHPz [efE ^;"l:?^vOOsd/Wkqtmqa2C ۀ,ʝ&SyJbk؆G̕YNMj&Փ`|Pd{ho]?/K5" &z JbfYa[ZVNA"1o5J{q@,J:*O?TMԲ_/w̬/孳,k-KY $>V gat<;l2넮S.u=20rkcC/B[y=:3pdRvhC]ctz9k1^rtޙ΁MGq"[?VP|YZ/}1ꉃ nA#]->H/ V(o]7ʏr!X3EÕO8r'(@\#ċȺ(gnBʱx1Y s/(<@-:+N?I"? R?;x\4h۱x&>y:PހK.4_B{ Y6Qo틄kSsM]cAS%aWk;aMlӔSe* oc3Q)"D!v[vY8x/|}+4L(p!⢖~u ;*GQ ?)@@ei'XVXxmC>Nav|GHVaW||J,B뭋@,n@$97 ˎ|WUޥKے48U`Dy / L)f)ܯ!t)r^ItxCg<'qh J v1OaZ' Qs~zuiB@[% #ICs6ӊr$db>q9{'m9_%lBT$[J-xQ+jE4\Bp5 h 9}녃fxvќBc  f)ymnExY/KBS hx7{r{#]ϒahרsvؗ޻W؛JI֨^(Apї{y,#!NP#4VfnHSZĭk 3l?U_@r 6sHm"5d{guQ 798%u1#N`PZ˶g~俟 Ÿ ;6߬`#&awPg=;}y?攓W81,i>ɬD\gyʐ[jn9.3aɽ*>4hqvMܐ\?b6Or^$RO2Sbi.<%fjk͡DK!zRob9|ϣTTlyvsC:7` 49t]g{y-mH|KpTk*7ےm]iIXfm͹Os=\ φc&p[Vh~!Q!}]܄ȼE=A<3rŵ|d9lwyU=Q$(|U& uUnf"<2 `&Gɾj(lC?[gK̢w@KCLh39_ك^h20QZ#^{Oۙg q|G.vBQF$>H=#y{NQh<|˟d KuC,\7Ns0;;bkUiU9?Br48!GRE(˘6~Wr,wZU+TM}VTblܔQ-cl9AF6q, }eZV c/b\0Sɶ&>j5U *t61;*Ḭ%z5j:_VԄ2BTq'0M= iTD!|R$П19J([@z.g,0&MS_l2V5dT>x"K}>H;]˩f-]SBRc0 /z9H-%`)l8$Mx޽Z5p*M2J}PO&д?\@߉"~8SX%kxL=F̽Hݴ̦ۊ+10޲_/XTȋΩOvaNE:I{-W/'l.DqbE1hTDu9sa>,rķh` aL|8kl`/YjobKkGܒ-%Ҋt\-7GkK!dU]?|s2#r 0>a.ˊ"}vuyrp9LZ`xN?`L7 ʓoȞ]\T|ݧ2NOS<G}@<Bgh85eR,Zfg^BB3/ J `39fuk7-S(_G{Ft:2RNȱIؘԋ/d[vRy>ya>7ܴϔv—=5 sf >v/Ҭy 'fI*nweؔA?\3.RsЖvǝQRd(%d %ж@,:h nVxrRR/i_ P} ssu)c$1L,2Wp5x{xO $+^,#O7?e\bz?Ŭe.@^pN"$$ؑIo}ʥ(s,%;〈^Zi݋!P d5W-<4ǔ۠'WnY ],U" +Ɖz+h UI,bUtm[É^%0° '} E Dg'IwNjÿGN` cJ{XADR-ͥNgC*{`L@,5!QKR@!烍\h 1u"AP .&ߑW,e|Ne_yB6Åw'{)F;f^,͹?qZ7<ްeyR"sZd: 7H0+l*GJHJ)]`a&OoF7Q&}# uNʹ:lBe*)28$NN{\ApЯ^:#R9bhRY(E\s: 8郑vSKߌ`;vLmemőR-aM R4PQk nY.AʋTaO@6HuklDʕ7 l :(]trMieei8v|hB2ox6MB\c+zJFR8Q-W="ׄUEc@*-0QJ c(hk*a^.Zf[vbpB0>{+ԓVf9Hʁ<л>S>ad)q ,+gq:~橬DOIG V鎐WLl.rN S,YZ6Q -ŕ2βgX܌}"/bonۑxw #j ލ;Va1҂7K.B=5? iK'˞"aba K*E0 '^VSF&鑎m,Nʐw@1nR@{L+ÜlCoA 802<Է:p̀~8k׾&=8&nQJpi۬dA}ʛq85*7q\ K5dJ*LKKKbK{A!‹ζގQvc/,ԣb&juJGl$n#hbAQv}lM$Vui󼍢W1*Zn;M?Ï0+F)8alX>i՜y#R;`g›Du"~GMZ3kHu% sc*'AF$O#jV]JMIǑcL\EM-,bmu,;9i[ \̔$|OX=z6 ƻ=3kEE(iŖ^-^k)+ܢp0>$$r^xK6rLg|CNLIzuȮwj߇rM.̘|D_]Wlr}Ͼ`#]Dܹ^Y+ؔó M6}+AN|6ttEj"Lл@?ETpJ!7pO0u܄;'Pp)itעq]n̄d(|aYjcu4,HE'Y(/hne.6/j=K'fƫk̐?+8" wF gbf=ffn6ˎMs~Ĝn+<ct-%xNNO7_|-|5v)e)|wuu^Gڜ: T3 q)YUe4`t"Vlx,6Uhޛ Us?]zO+ꬾ D:F/h#-^Xߗjq_IR]/%$n%RwWm 6]`yWv7aey[+Yex4bBs8js2Q7u+Q$* 2#W%pXԕST{>P,7PMlL3BU'v ؠfA0y^'ijᵉ+*e28tYxTp8Z~oڙVGšTWٟAyZ[dݮЀ*4hԞ+mV԰'*kr ܊lY5=&2vejSTcWIOf_MVn26bL`^H$`L}ZPE{g=1 :Ȭa>{ 7++ARWh ~ѓcr XjҧR~c6$O a0u~si`{nAVMbXa#zZ+uDA8*B UۇY og.oBP#̗%'d+v&6l)AL:l+,VOڍb[2vp+,6ٔ r.yHUVዌ!X߷a=v̀4tj~7lgEr6-SkZ c "~b}q^ߙaBZj(=]jW>4,9(bkYS|.>FBhC+NzN|>#5E9O@P`IH J,݊_̄|(賘s""@!W\)xNSQ7ķGqqf_}(ǀmt_s mZT_6ѓPEз,-+O7<:MZφ-VLP-C^vH޳)[|{漵 ՞ůZ`)^*sl*c(#K$kQWMWoז>+2Md[})@:ቛkM]nh̆JiƴGja^`sStsy}3VZR[;-PqdD4v㌶%AL<'eqՂ"Tu86B_rs"ˍ8u^w$2w[qϾASQн; *]Dl8gn Q xYc. Xn8k ͮ*= JDXB3=_~u7]Q- *~Ւ3: ޿蔠9k%k@`ƌ.#kwG|U5>OLi菉XiÙ6{0p8Yb 0` 'k->d~jR8gh· A6s䃦.0}zCk Kyˡ0e(@} sQ;GɴT#RHҨZ]ɦEBuR@K/SuIU?3% *F#|T