audit-audispd-plugins-3.0.6-150400.4.10.1 >
A d.p9| m^? 1C0[ _4@I"_rt1}G϶C~ڦOCa[WlUr h.
fy ӪǨpAPbܟGpD ~`PUv T9%խ;Ѷ‿DpHc7I"EpUҺBտXuLUߧnFohR|װ@̡ 855565c7de2f838eafa6f10e98a10a7ba3906dbc db5e9d35ad4d2a0af2ea57e5e29e17299ea5e75c0d108938353c1b50339e0a94 8 d.p9|t?l!9-iCO"?h2?^꜈kf6`.6IY/
hc$_z-ja{؇0%;?xC벤7|_|8)4Z1]=e7M;]-Y+s+`D%9ԶNk| _j{Z L ?,jߟLI+ %&o*p{d9Ra'֏ a"K7 nҊ8\}
K`ZPު \ > p > V< ? V, d , U - ? g m t
*
8 p ( ` ( C 8 L # 9 # : i # F N G N H O I O< X OL Y OX \ O ] O ^ P b Q# c Q d RV e R[ f R^ l R` u Rt v R w U x UH y U z U U U U V( C audit-audispd-plugins 3.0.6 150400.4.10.1 Default plugins for the audit dispatcher The audit-audispd-plugins package contains plugin components for the
audit dispatcher (audispd). d.s390zl32 T4SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ System/Monitoring https://people.redhat.com/sgrubb/audit/ linux s390x ` H A聠A聠聤 d.d.d.d.d.d.d.d.d.d.d.d.d.d. c4dd732801ea45bcdc85cb8bcb1171e82daf1fb100cfded9521d8f6cf685fff4 939297b733936ded9afd5f96852a65eada0a1ecf1371240f9ddf7f507bba5cac aec763b2539fd6f4c2d5af045a91389447ce63211fd6d720e2fe544165c15889 392ef562f7cd7f6a1d474a506c32ad4b9171926a89e9d3bd90f6b420b9847a72 2048e4fb4f78df42a3a5c7ae2a3abe5b25b7bb01d6903ce4020878a53aac703c 7929270c0440b0cd9ac737559b4a64983cd034cc388fdcc742344908c13827a6 e6481e5cef9f14afe5515611a380c6f3d50f7f248886a839fc87f8662ac0d81b 85ff9e11a22cec708aeeba64dd7e5c3db2e8b48792e4d4fda5310078c91ea5c6 a8a5ca9ca3d8938034fba134befa00c14d803e2b2953f70ca7b233f769e8d4ca bac8a07d781cea01e0095ebd816fbfce3f961778cd630c87f4f065f62256d333 943b87236af2fb539733de3007ae4f45c01862dad00c10ea0408b518cba16668 ad8810d33cad1d2b37096fa7b24a235c845be7d48e198bf5499e44a05e2f3f4d root root root root root root root root root root root root root root root root root root root root root root root root root root root root audit-secondary-3.0.6-150400.4.10.1.src.rpm audit-audispd-plugins audit-audispd-plugins(s390-64) config(audit-audispd-plugins) @ @ @ @ @ @ @ @ @ @ @ @ @ @
config(audit-audispd-plugins) libauparse.so.0()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcap-ng.so.0()(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libpthread.so.0(GLIBC_2.3.2)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.6-150400.4.10.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 dq@bT@b? @b=b; aaaim@af@aHwaC1aS@a`D`@`@_ǁ_@^ [\|[.6@[&M@ZlZZZz@ZyZ_:ZC@YYYu@Ym@VbUematsumiya@suse.de jengelh@inai.de coolo@suse.com ematsumiya@suse.com dmueller@suse.com fvogt@suse.com gmbr3@opensuse.org gmbr3@opensuse.org ematsumiya@suse.com ematsumiya@suse.com ematsumiya@suse.com meissner@suse.com ematsumiya@suse.com ematsumiya@suse.com dimstar@opensuse.org ematsumiya@suse.com abergmann@suse.com lnussel@suse.de tonyj@suse.com jengelh@inai.de antoine.belvire@opensuse.org antoine.belvire@opensuse.org kukuk@suse.de tonyj@suse.com meissner@suse.com tchvatal@suse.com normand@linux.vnet.ibm.com tchvatal@suse.com mpluskal@suse.com aavindraa@gmail.com dimstar@opensuse.org jengelh@inai.de tonyj@suse.com tchvatal@suse.com tonyj@suse.com - Check for AF_UNIX unnamed sockets (bsc#1210004)
* add check-for-AF_UNIX-unnamed-sockets.patch - Drop buildrequire on C++ compiler.
- Modernize specfile constructs. - Fix buildrequire for openldap2-devel - audit doesn't require the
(outdated) C++ binding, but the C headers that happen to be pulled
in by buildrequiring the C++ devel package - Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
* add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
* add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch - add audit-userspace-517-compat.patch - Use %autosetup
- Don't include sample rules as %doc, they're already installed
as normal files
- Fix create-augenrules-service.patch:
* auditd.service needs to require augenrules.service,
not the other way around
- Fix documentation for enable-stop-rules.patch - Update to version 3.0.6:
* fixes a segfault on some SELINUX_ERR records
* makes IPX packet interpretation dependent on the ipx header
file existing
* adds b32/b64 support to ausyscall
* adds support for armv8l
* fixes auditctl list of syscalls on PPC
* auditd.service now restarts auditd under some conditions - Add CONFIG parameter to %sysusers_generate_pre - Create separate service for augenrules (bsc#1191614, bsc#1181400)
* add create-augenrules-service.patch
Remove ReadWritePaths=/etc/audit from auditd.service, also removes
augenrules call from ExecStartPost.
Create augenrules.service with the ReadWritePaths directive above.
This makes /etc/audit only accessible by augenrules.service and
let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file. - Fix hardened auditd.service (bsc#1181400)
* add fix-hardened-service.patch
Make /etc/audit read-write from the service.
Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
* add enable-stop-rules.patch - Change default log_format from ENRICHED to RAW (bsc#1190500):
* add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs - harden_auditd.service.patch: automatic hardening applied to systemd
services - Update to version 3.0.3:
* Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
* Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
* Change auparse_feed_has_data in auparse to include incomplete events
* Auditd, stop linking against -lrt
* Add ProtectHome and RestrictRealtime to auditd.service
* In auditd, read up to 3 netlink packets in a row
* In auditd, do not validate path to plugin unless active
* In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls - Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
* add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush & reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid & success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa & rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha & IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream - Do not explicitly provide group(audit) in system-users-audit:
this is automatically handled by rpm/providers. - Create new "audit" group for read access to logs (bsc#1178154)
* add change-default-log_group.patch
* update audit-secondary.spec - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) - prepare usrmerge (boo#1029961) - Update to version 2.8.5:
* Fix segfault on shutdown
* Fix hang on startup (#1587995)
* Add sleep to script to dump state so file is ready when needed
* Add auparse_normalizer support for SOFTWARE_UPDATE event
* Mark netlabel events as simple events so that get processed quicker
* When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
* Add 30-ospp-v42.rules to meet new Common Criteria requirements
* Update lookup tables for the 4.18 kernel
* In aureport, fix segfault in file report
* Add auparse_normalizer support for labeled networking events
* Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
* Event aging is off by a second
* In ausearch/auparse, correct event ordering to process oldest first
* auparse_reset was not clearing everything it should
* Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
* In ausearch/report, lightly parse selinux portion of USER_AVC events
* In ausearch/report, limit record size when malformed
* In auditd, fix extract_type function for network originating events
* In auditd, calculate right size and location for network originating events
* Treat all network originating events as VER2 so dispatcher doesn't format it
* In audisp-remote do an initial connection attempt (#1625156)
* In auditd, allow expression of space left as a percentage (#1650670)
* On PPC64LE systems, only allow 64 bit rules (#1462178)
* Make some parts of auditd state report optional based on config
* Fix ausearch when checkpointing a single file (Burn Alting)
* Fix scripting in 31-privileged.rules wrt filecap (#1662516)
* In ausearch, do not checkpt if stdin is input source
* In libev, remove __cold__ attribute for functions to allow proper hardening
* Add tests to configure.ac for openldap support
* Make systemd support files use /run rather than /var/run (Christian Hesse)
* Fix minor memory leak in auditd kerberos credentials code
* Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
* In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch - Reduce scriptlets' hard dependency on systemd. - Update to version 2.8.4:
* Generate checkpoint file even when not results are returned
(Burn Alting).
* Fix log file creation when file logging is disabled entirely
(Vlad Glagolev).
* Use SIGCONT to dump auditd internal state (rh#1504251).
* Fix parsing of virtual timestamp fields in ausearch_expression
(rh#1515903).
* Fix parsing of uid & success for ausearch.
* Hide lru symbols in auparse.
* Fix aureport summary time range reporting.
* Allow unlimited retries on startup for remote logging.
* Add queue_depth to remote logging stats and increase default
queue_depth size. - Update to version 2.8.3:
* Correct msg function name in lru debug code.
* Fix a segfault in auditd when dns resolution isn't available.
* Make a reload legacy service for auditd.
* In auparse python bindings, expose some new types that were
missing.
* In normalizer, pickup subject kind for user_login events.
* Fix interpretation of unknown ioctcmds (rh#1540507).
* Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &
RESP_ORIGIN_BLOCK_TIMED events.
* In auparse_normalize for USER_LOGIN events, map acct for
subj_kind.
* Fix logging of IPv6 addresses in DAEMON_ACCEPT events
(rh#1534748).
* Do not rotate auditd logs when num_logs < 2 (brozs). - Use %license instead of %doc [bsc#1082318] - Change openldap dependency to client only (bsc#1085003)
- Resolve issue with previous change if both Python2 and Python3 are
present, tests were failing as python2 bindings are preferred in this
case. - reverted -j1 force ppc specific only - Add patch to fix test run without python2 interpreter:
* audit-python3.patch
- Update to 2.8.2 release:
* Update tables for 4.14 kernel
* Fixup ipv6 server side binding
* AVC report from aureport was missing result column header (#1511606)
* Add SOFTWARE_UPDATE event
* In ausearch/report pickup any path and new-disk fields as a file
* Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
* In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
* Fix building on old systems without linux/fanotify.h
* Fix shell portability issues reported by shellcheck
* Auditd validate_email should not use gethostbyname - force -j1 for PowerPC make check to avoid build failure
(lookup_test.o: file not recognized: File truncated) - Add conditions around python plugins to allow us to conditionalize
them in enviroment without python2 - Rename python binding packages to match current python packaging
standards
- Update python build dependencies to resolve future split of
python2/3 - Update to version 2.8.1. See audit.spec (libaudit1) for upstream
changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
commits)
* 3b30db20ad983274989ce9a522120c3c225436b3
* 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner - Add audit-implicit-writev.patch: include sys/uio.h to ensure
readv and writev are declared. - Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built. - Update to version 2.7.7. See audit.spec (libaudit1) for upstream
changelog
Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
service (bsc#1042781).
Add config: audit-stop.rules
Refresh patch: audit-allow-manual-stop.patch
Refresh patch: audit-no-gss.patch - Version update to 2.5. See audit.spec (libaudit1) for upstream
changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs - Update to version 2.4.4. See audit.spec (libaudit1) for upstream
changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
(added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
No idea what earlier 'automake' build error this was trying to fix but
it broke the handling of "--without-libcap-ng". Anyways, no build error
occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build s390zl32 1686843061
3.0.6-150400.4.10.1 3.0.6-150400.4.10.1 3.0.6-150400.4.10.1 audit audisp-remote.conf plugins.d au-remote.conf audispd-zos-remote.conf zos-remote.conf audisp-remote audispd-zos-remote audisp-remote.conf.5.gz auditd-plugins.5.gz zos-remote.conf.5.gz audisp-remote.8.gz audisp-syslog.8.gz audispd-zos-remote.8.gz /etc/ /etc/audit/ /etc/audit/plugins.d/ /usr/sbin/ /usr/share/man/man5/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:29414/SUSE_SLE-15-SP4_Update/a29ad66efe3a163563a6766603df995f-audit-secondary.SUSE_SLE-15-SP4_Update cpio xz 5 s390x-suse-linux directory ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=7b99de6073e894558c0d77b41af66a1365ff63a1, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=6e623e095f124723f5fa9561f44578662c719a72, for GNU/Linux 3.2.0, stripped troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R R R R R R R R
R R R
R R R P&kPC utf-8 c6f096964be12adc74124606af74712666a1f42db250f7bad0dc4e67c79b990e ? 7zXZ
! t/\]
crt:bHW
܇eY_oP\z1<0 :u"g"t 0JeM o ;5 nzY $SYtGM =<_7no ݐدd V8cXe;AoUQaC&vbT`qt
IHWdY1\Rx?i5eyT43{V[Tfە;~3Y [;q#0%/OF=!E7r#J̅;$
q#nbrp雿aYhYzc6xWZb%pǙR}ޒ', t|W 6;+s~S.G`@s=(/Pn_ \)s#t ؗ?b|zw;@BD D&t0 O.L/,ILiԥኾ$qVXAp$DC rP@,k>[eԹ<8=}e"yp;ҐF:W7l!Qy/j@nSz'
2qކK$,&$SĤ-c7c A rN6fc#L!['
+;I
ALgUn}N7M@e(Hx溺]-Q T5=ՋڢJ@M@ʶV[ ԉa gu_qQPO&C@ZBK M 厤
g鞎\kCAAU Og9k MbKy +d̡ s@ S;lgKW4jwyIP[o ^9I6F˞>iu0= ?j_0`"jޮT
V>°rU"PJ盇)
=}P$!-ڏk* e2!0R~{e{. Ǒx#NvQ #@vH;\<KF^_n IKOx `Gڐ8 Ih4hve Ŧ̬
fre@$S7 L[G9r"^ĩ5qrh?wKj=W> UBů0c.%89 ,@@sJ A˷ɾ 6 zgfbb\.S
5B*pYu8U:OO@
O% 8RF #e; w'4}:sGB#B"6ȭ ˲t2+_JZKkS.E{89wux
-q =SR|DFO /M;kr]p""{̳0+E&~w<]Ԇr690˄n$ Z_~&\| >3$OЍMJb)s;η+W>\ I0n Rpk Nͤ`¯olut[ .+S/qZ`a&"Ij7#
6Hք%5c @]zK_x_65ݫr$AhEe1%J%b35HCuISݞƵ~+aCAPW#g5.#2ট0py 9f* xӹע /sO"]8]˦_Pw
Oݺ1a8*(md5?'عvmD6(
B`xK]'[+ ,'3oX6/[ d܃ٖڄOoX7J#sʚ aD3OqB9p #%X5xXK uޠʼn{}bCu[}-=mˏKnwB7C
\q#e? zG4-ً{eJ Kuf"?7q0mf
hy,%Sp~v=A>1REtjCrPd{菺H9⎓'*(YV2ݛzAEX4 OؘOI%Zr] c
!Twd~}Ω鳷(-|⠪]fhB6s64fT`RhK
krd1]Df6
]DtWfG=A @0N :|ˋ JmY9H?pQ4(tiPwj)uQ\";ھ*1z
ry+X FCiݩ&=u8@FDY, U6) p>b: ꂵVjw |ҊT9so~};훛Pf`l;@Y"K_/G˥3{Pk8HA9gh^oHq=۳OIE҂ؽs j++^ӌ3 OG؉\,K_8
< du %ͱ՞)p1k| Zp$_3S&uy4^>FBt,a A薦BS͉=^ GcZ_-
`Ǹ'5Kށt**̌S#4_/pB3y|1$DV$ !#O~7a$..Nr?$' @6y蜼*
QJGR'iX o.Z
]+`ȥ]e! Vy4pR+F0,@c 0e-pk
1d\ܠc3mWAyp/O5*1X8P|_oVT[ʄDS'/fOwx&F\hUOFJ_0uכ= M3vot"kմz Eʂx8MZLQGAh d>Uk▨$/7r5^}aX32:֑r4j'-un1kcAu Kv *ߘŁzW!&9iw,c4>:;P_T@}գKGMbֶ/k>dCWʯ {
WBi- [-4 w_J1I-)rh&|u{+:udF#loUο}u
t$K߂SbGTWѝ%㒆(e~sr 77 tgÅLSwwa DaAVr+.6jBP'w С> MNoIi4qXhA&W~(jw"Ƅ IR5Ţ;^T'b* 0D7+Qfs:ٰ 19D5&@?ArB
@UF u WMaNx9 2qH2ekmdr`dg58xH KE|.ؼZc"tYfqabH BJ]v0N`@6O$]Y:fM!Sw# a/ԉU*NʮVduCV jU4>)g3z׃B(xeigz7I 74!G _蠍L<91ްd(&'KY{M1'p 苸8ji#õDˢrFON$kpSߋ}(Nb^4'`
huVs%{b蓟͊+q q n G\v%rHβ-Z.A@ u P+-熆EGް>7U
W8h-͏Vۨe$F%~qzk^XX[f 49 ۔YE{mNtʹe K
)(9p2X [O;Me T' O\+U?f9toXQ]ȳ ,PYll\(`)o/2@
/(!'{lہ l!ⲛX/'Wn+nA)XjDv]TމIw1%t(8%ڢW0dDk%x{ wr7ΚyoeYX,~ܐqYe]?< HN)>\[
`:g]rn{ghB g^K7rl}{ELRۨd Z0{L@뼕][c7wi/2'\pM^d
/bW,]Z朋x )/+``sP-wH!몊X=5ڟ;iԯx "0UDV.C6 (NBdrTēӛղ#_KQԞn3k S4#.C| R\s2}Ӑ[Wn> S@|6ƪAi[@EP7XeCKo+@uo*R; rvBk} AWM RѦG^W:
V{嵼 `u\
a3ec\4ٽɜds
>&vdR/l<b{EC>';iI[#JJ S.e>n HR>˖\`IR@ ӻ[=m
6e5hɢ=5W5LC ge?_lkk c,{J>;-6EF?B %+Zp
I뢻>ud{ޘ rE4ˊ
P#g0vK E3.17ӧ M2 hvCN:tv5ܠ/P rS ;F _"zabʽFu
YƊ
>eOn[Uu5UL:
⚼-Gʘ=~lA!4T.t(Q~l3sÁ,7}.ia`Z!u;"6]m{Z(@3H[Dj8|L_7GvN
] (N['
Ɣ:5FgaW,?NW5U_s&)EFh?/%D~-lvH{_F/Ck=6_\ S}pG/|a;mBl{7 - =_ǔߡ=J!;{ m R3k p.Ԟh Rى4CR≂mpjyavK\ja'ےMv0Td5#eJ%]gUso$yn5@,P,|%{kf~4
-J q Jɴx`BJH{d% )Fk-{7@5-Nain>*f8]#E^l4Nm1E
Q%1'I\r|(.26I]R"T߯а'M&qYһ1#bԻ[wi`2G[V~F2Ri.^z%[!m6=yfQK߿_#475f\B
ɥJˋ45p(FEB8^~4M Q|b ,߽*MuGSʅ^qG80b wN[Iʋ{f:'GuBv WxeȓH(
Qx#ں|sSkd$ ]X.o@)2/0 [cZ41֒Z{CS cK;_Kktl`M\i@) i>K 7v}
m2 I;n,+mGwȢg8 s ;1$^s)@^+1'A_Sh4AO5}Vi r=z&byLC]*:4pp>֯8V!1q|$7_8JKoO:=fh^c P3xT]9qs io+[MJ],А]}"װpuyqtݩޚ \ x1LqE
+k~m nY9I/
|a"ⱗ]T:AW^nac|erO 2588]Q|1#Bӱ|rs%(bߴ 8F[F5 HwMMk/J[r@a
G y4Ͻ£^H% \fTo SAjO> x f dT}6 N Xejׁ)/ ==*jȵ;~iU 趜Wp1. {ɀq3 Dg/+f͏B:,{gr)d;զ9YehC}C7Ҍ}YLF2=gKj7(1B%] 'H90r*zİ}MNe
hh 3w
~+X\3z%xD~,,!B|ЀIe/*ll ?xWWu& SΪ ows˫ "Qbe jcӑk OHfG`$^ۗz@W<(W9ZV%fR%^|970uq$BAx~c T N19tGoυqfFneέUI;UeOQXIшԀGsM~ώ7<;GW?7D&l&BIuA@SOy#A*R }k_ F gÙ݃,d _ޡ% 0>P>^w7kC(YQU*t&rh52ai =aO5fJZqMKh9NVBv`Cl7ؒ^# 0V:,,{{Sm`dWC͵.j.0@qT9lJDL̠dI"
Щ?9Bā :m'tVY#ܖ\(B@v"> cYmgaLYtt_
7)G0' >%I&{S +b=Y4u!m{Z!.
8ঞ yjuṕaK4>Y<Ri Ӧz]>UrΎ} si%;ka)P<eR*
fӠN@, f:b1?8J [t[w!;珶Kgmxx\
"#fY=zt}֛&yh^rO* @m-2%c=b~7Z ʈ611 A~-學ʍ|s ހALy?>
Fv鍕5_ Bvk
!9V)&A~[wR=ϐ5NH@9y6Nk>ã3ulC5zѭ^)fQ9ݭ h%-̪jqA$rC,xɢd' Sw uƄ׃\9ow4VJ[~+ OfJB?W80U6^>[+Auq렲, @*qiei㢶B 0X C 2xghxySS tB"%nIO CyBL-K=y* gOW욎'ev(J.w=#>yG
* J}ՠ[uv1C JnjS^#o+((-ANQC9s
ːd `p哲Q:jX!j)()R_ I&j&A4ԽS
%Ww#40 q懼:'iWxpE!K퉢oc~N%&2MRe|; |7 y|^
|v&ǥ+Srϩ"l4Bh@
Үq+PAE'Q^ 1\L` "\^$}?*rwf A-wCĎb+;enŘ: s!j_Tqk d[ہsnr* "֒wz y6NhK9 Řo݉/ش`)\fweu u Fd T|Shn@ iMyF;-k m~aMkϼ]ow/
N>$[ꝸ[ P:\
4yʌbMGD$A}Q`5>%L>G+Ԯ{Ie]aw8WWj\坚QLY4IŜ<&i %}<&< ǀ/d;7/5ν{\lND;X#vFcO{ WM [Dbk kôC=Zem-/1#ʯ@0#X\o#%[ {&e [$vPFB(JgqMFM߰D_ɸ݄*=]0 TY^Y8f0 ,N %բk ; 'TGA33܌7/dVOeUS:B體`CkC =M?ko8b-|bDFB)I|=bj&Er.Q ?*p$Kb(UHh
9iApn!I :ʅGp9IDKCAouAp70Dh;':b4 !qM #U ďVmKΚ>XѝEH+]=B$}<~o~YCuX cmf! #)>/m"V&$fЙzy"z
tUdۊ:r>l #"i @SLj[tgTgLq:mQ% hR?rT;:1I3']%@~5ermz'pQ˛$G`ΓEҝk7Ù
.Rmlv,oj⾠ܚ+:Vb Y
M0 Khdz;
> ^4@[Kb$f 젅k
Agb?P nAٲ=8 H*xR&Ws^
Ns4|o!\/w
;#/ 6)MxV$G YG$] l\3|u<{ oH$pRn-t4JxQe VTN۵ y %puj1
˳oOY8VPc4/YqהD)
(sMRq(u
;nG&9{Q+)j \3 !̏"751H7%U&B-u.mtJu .G=y7aT' A.wtJOU:P^dh|͊{ޡcd BgY0xT!2nSG1\a ;4Kۇ7N_W
(k]Fu̜:Ϭ|e~\=|I4r j
Ͻ˦4|j9A
B4AwR_ cCbJB;&PH2abtIj ɴѾ5W$E`jH12I*牏u.wg Ǵ7iǪI-}`:nU@)p1`W4-7B
{*zE51_Üb#I=)mM,ԏmq0|lķ=Ҫ) [
ල FcSʵ_ o9)1e-u$y~N潎2yzغ1O.PA'Qb[,~cs,2Uw"hwM濙ISgIAA MEV zi2lG#; V:ȗo^vTPˀ>j$ 3/ZQ DҰpa _A1/bNr ߳^3 A ]w7
2g)_ iܼ/(I(.i%@|RKSAVZc=Js}~v t,HW=^2{ddM~bDМH
sфOW&깮,C#,g^¨S { 1J j,Q}Vr|"w6 :ZeaT^s~q}A4*Kl ddRwC`X3r1 `],.CO 뤣'e_(D[Wr!vl?iÅzIrs/Z9DEeǡ4Jau#h]5٬ n kk3Eȑ6 $.y6V"߭ +FMCǷLW\e"! tt7gD'xdQFXS'DBS0mї;s셈֍ӡiad]n[Lw՟06@vCtG< K2D gjx~7 >ɎU+ r\Gmy\}%d^2+leс (}J3f !C\0` rW pWdhD{Xv: E=!p-qڊJKOwUcx`Bu {7泓!
йxk!tkqr ߏj.#Hns41e?=Zy2MWHS%9ʂ0G s5l$/.^p0
V/AfHdCE^3-M4:ڳ
:R4n
+izJ3spi;㽼y|Vhq^cR' &o^;HΙB5#I[0:1j7ȇWD|@ 7c0D *Nl&zazy)6#n~HrЬ6 ,D#+ +
'e6xS ~J!5r%ǞA .j**F2 U]|YNRq#cBcK E# /;j./-A-5& h㺚2OF3glCzԦ( EWNLjWJz3k(yTBHG +u > tzl95D 2~,& i2W)y[z9B}]{ڳ1)a' h?K75M
A< 2S6SڬSó$\a953Ip,v fs
9ޑgs\OF4G Gb0"+И~fΚ#/,U;ĥ:0u n(FZtYJۈuœ =A1tԹ)ʃOujHdp3<`C@ h.6 _QJ g 7kNCѲupn? ǤZ6T dug>mf =vDg RSz~UmԌu-bǓ@3 C6W @UUظN@J=W5UcG$K -L
6DCD7P2Mе2nţd\wa13=ooz[-]FP ȋ=,;:~$ J2FD )pU=L] 0 .hۈl5wJ 9b乀Z2ִ# =: ,JPPPyt[?ȖJDh\x YQәe٫e8, :!~,zΉC~sL!ݭai6X 0t?9sCqĸ9Y" #+E _xWkDaq2O*^ J?x0?Gb)pFRs$EAD$Vez1~WO ƥH}CUxwoyeL(&4mm1Q ̠ nQ8褡Xs<ߺ/C 2*%ɡ 鶓=<_wq%:H{DqO7(eC!{J [ y M%ݳx>9^fnp,T!%S:Kb? Cq8 \5cƔ cB|?F}ʟTⒸF0DfDP_$}Іǜ[!#t?>u$ԫ7ҘCeXBU~
+F-FJ$
~%5wdӾbɟ* h%EcE2AOZú1o 7H|= peD ׇ10C?@x]ndKl_
}gg o:YS[gu`Ȃ0|;KA۰In9peYx"[)L35OE>G
wOV!DqQݛ ĩ4 S*my16Z3s@֕0:6hva :\w
N4 06r^Aw Ϻ21,!RC>g M!13^ͩd1)\O%4 u};O!>;%ڏr*Ok 1MG",HFȟ1%0Tob&D8? }F-9zN#ZC垲%j| 4zJ埞/p;p@XۓџN 3 vQeJ# 9CQ>r;VIQ{vw?uzYDبn֗ )XA1Zw 7'-ȁƚ *8S0
+L%O3nv>z'Ŕ; pұPY o9ql`a ^ DMM xA(3HT7ddl}nNZaf"[
C<%+bN nm{11Ӂ vE`K^$+Hru!p[w?F:S4=;G2xw.Rk O*' ]7E-|aFe/K% .-2 k+J9VLXJ!{xI9|6 #7^uVb@y PPp/ Z,:r%]3 B0W݃ UXeo'oݕ
LB
!L m+G?Ah"Xr,\QzHeճyIn?*3R%PAO~OMv fI{V kؓI*vѧkKMHSt=Aku9Uv_mz!q20bp_
qyӯJŸxr uh3FgϝGucoA5y;,>Mn_R?'4S!<bx
LicW) qUqq3m:mpq f30,(
>դ!z*$| \)YKyc%/X'0P(G]I-_tꑙ9=˥\Xڲ\E.. {^ . -HYbIf$ 4º=@EZRppK: y|2s X͡E8$@ |.ٯ7Ac}ͱG-Fޖ k~%dbʈHV_Cl2PVGlS!ϮP}C}),[:[a><TX|y]h*
<
bI7 |T@'c]SR wu4 ldOtĵu3JDSԒnɠjXrBpap9Q2V'fL;PKsLSYWsD ;}\]Lƥ[bg^Mo[U"DUĘ0i[G\4S*t{ZpѬt!08z w}9>X!|[S\SD`:H@1uuR2TI.<HI ZfZuh-fm0 K_WAa|ܟzy/XH 8}}d
t߀9\x78hՅ֝`PREUZ9iCxTVZ)@A|r5O:>Kâ olQo)qܻBY"4zՏuW P,~~""/ fb+~" X(*ΗT$֧Uux l9nN ˵/JpO).[,`4 Fh \]0Gesϻ3v"\CZ:['-Hc[uz /'̻2 &V`ߓI~)1&*J? HP]gPek
hw[$ JGղ*xdR z֩@ <p[(E i؏_:%SuH3g爜A4A8z00EgS
D'q`SǸ&):4V>J@VKJ^BXfteb3a4{߮uzC*#ϧf,vC}P0
::qq.t {.z7bk QC6O˻+Y4k#Ōl&Λ;4Hɓ]9qo֜)9s-|<+^E|ǭ'w@7C%#*ZfŔ/:1&]+I" O
+UT ,2JDpieV+Lo.z,WRZBRXqAj[d!7 vUoV
9CJ;/ ,}Q)LӆDE8u
eFiJ ʗԒIK @ӊC`o UN_[giWaFN3J V;!'[d0\T}ufRwOg<S!t 4/9.E"VMV:X 1l͒j\x%. ̈WOiy yN($
aT^x\d6UV9zPݽL|
ֵ$_ (XAaYoW4ʦ*,N@a
o,xVbu8O\ 2[7>ɭ댍 80wd ;,˒븢y钗,ȡ*T]jS<'~͇q}'` i`qw2/Ѫ>z'zov̓I ί bM̀*3?#ᖓwݤp:&s㦺}\cjDؕSt5x+W| ([ͣHS6c\WQ/"֥.0'HJjbq\,˗ؾXc 2.MrGS L+ pgK5~\J
olk.V(2<_Opz,1KSJ?3\gHOAfC6nC[gGUv iFc:,chkX䪵RC.C~SS}{=g4kF
@ÍrJ\۞A{#*j~V.V2V &q'G~Mh<4>9Xް^?[ Ly@IWn%]CxAXvÇ)WR9CFlgnez{CK&-ڷuP>#?0ћau,NVCHД3ark|:bahm EJiw fklÏ4߱lS:WD߱K=g&p;@OY 3-ܠ<ꁨNvKr0;;m,Tg! o jR ֿTYyūV[uY)>a>{p wg8^KTn٨X~Ʃ]|5tl's(L#>V4 ;#6PaA3+Zv| I5`@F@_c5
NloڃifO_ruis(-~P!4jǺe[Y@mBkR݉>şc5VY8 9:iX*ݨ\3)F
0as3;˼;?4GMXn-c`K-\1t$.I1AcM` #4](! yh3Ά/n@ h☬oo~h`y)xG%r6V(Q,lkQ(=Y Z2lvS4Q(N S<]"x~yҿ}s&=[t9u̸J[12]Mm!([x&ؙj ٣nY`=VpmL e?]D` "b~]`Xx[XᯥB0\ iu7q/ɨaqN/Yk~~Oxt$ h ~"&k57R/n'YYrSnywU5NYvz2i5c& ({n[l
ܥ9bV6䲪8LcBfDG+X(P8N1C}ZxU {w@xK t *M}OJ&u)0LBOQiұ\ƌ`uBd
PצH X;)
FE5E/q e.<ls2fi U Qe"8ji^s A$5giov>{Ķ-c)ȣ`a[v." P@1@ դ!P_v=|
K] Y&/)3VI.Gu(XRX2>BEt҆a*jU!<)K ;]`V1 ✜Ң+}H@cEN>#c- H^Mq+Ӻ%E^>wA8&
AFa,p
R ۃME %zx1 34 ?^G/;VMӂ 2w!i
pq!6=q`SP4@VfƭP֞Dٔ
AخV:f|XƸ~Kx?Úc]#+ A f$#g )L,4 W* wHmSAA¨\x.5~zBi[-jd%Wg?Ocby1uXE9YVѰ*>spRbM $qY
>#'>kK5.2XGo6ZJxQК읾MH$)Bp
"sn/
%3mx,G1"ʠٕ%GjQzRqfGĦ\ %Bl K KǽGա&Սb\|?Bm.,UZtіCi+էjD}4 hge J "iGu鹫>2T mPH8ufzofi`/HT\ FjaρXiiW<"aX^$)l4u RuV' Mir ja#" [jlXk E^ -ӷ<-s0LIOq%"V
u1\ssdIbZWJʑ+UydXׄMf-LqAXz (SOpDRlr{廦 #Z!L"ttbPПX}Vw풕 55he T<
(/˜1[ߏG1HYR ˊ ")D$gHW$Lj NB ) d&LLU8up6qb/} [PV \PuWؼ1 $A0 BquNMk&@2'QAJPd2Z -8Q\d%-Q= cVBg8>=Gs{V)̉o۶ɩ
OVo'ڭŔ>pp IZڡ(0¹ ĥUUS Ѧ*[I`(/[5<5/ّ] '\M_ۣ[V\[=vyg~pzzBrK1 nO/'r6:<v?E|NO،8BsW }/i`lLFS_Dh
c*ڢkt=ؿ SBǭMqs舤^)3LIYF MQE+%`[6]/Ӆ TJvat|)~cc C } Hq<)r# St^:eV
Cyvi#4H!ގ 4ȅumt:
I]#F`B$JT Cy. bӅE8֭ěNJw
Cy'Aߒ3ȆX %MkkB?Jd ?5o+^2-JtTj3Yci|}; }@ Zy3hw9h}Dӽ'':4J[yF2Lr̕ucDX"-UygFv NS{Op褬,μ+cg<]P#=M^Tѥ,1@uv1vjaj;'` A"N~jgMćg Tގgf|eU6 ! XR?Y)
}D| ;ě5 O8̯_3Hzq9IA4?S٠.Z<&P' s(Dg Y;O+m1e-{w8Gse; Μb +>
PiC-OhB;J' ~]urSiYЯS^58B1o@WRbdK!rlnZ皻:<җͺ
6>qJ^
ŊW&ޞ X|wlST@L5kϞؼ3]ma,L:<[9g|N$/3ɀ/5=r]HP:2 atKG"Z| Ubn=[|m7+j_')sb4=XćL`0B * .R\-b{Ň d/iNa۔# 6lH:47LK!C ڡ t8\l/"3[x Ғ1P{Vr?U|F\/;Qܲ=eei4 >_PY\`~(֚@)91; ^4ы |2,vµ9x#lA= ]rC\کэ|
|",4Š4*0+M.t'k_kQ Pa,!4DNd(FQNdOJBJ0K';(@'Ss )^I!4pO3 {I&xNF-Z~0Ie&m{i 2<7 "њLxO Q )_ (Nn %R4"gO;@|KMQ+١? <+G ǡ%u2PCގ-
_)r56|١ .3=| ~% H+Ù|YK7غΔ ;Oimy>3̍ʗKw/W[N:
*#ab_O ȩͱݵ|? 4:[E7P$3jo }'oP_ ňR O`j;n@-ftKv iҖ
Sa={3^ogt¬5f_TxyA?>,) 寍kG` 緣j{og:|inڢjׅt `hU1r7}t+mTt8[* ̓jڨ4ˎjM;vϟm83)n'lFMU>ʬ\= v& &bX%9p7oV`e$IGU~hf u_V{٘]|Q/Z&15n.ce3 "86Gl?$7\aKc=mꫮlbbQsw,m.
s,mhX"s^tVaz ZwlŨ* @yRtIK("Wb:h): ^3u?䇰:ȸJ1 'oo4"Q^KaIݶ^oVͻ>и }aC'i\!jF~lSuZ >h|`ݱ){;D73K1l-Zg {șь4Bi"#jZg{{H?تl}*+pa6W45{ewp|8=$ |2WѮ,?6ZE tEAld *3놾uyaTqxN
~+IO#}]"K /Y,Tf z~A,&E NV3f4v`{ U7#|+='9$a} E{cDG"nj4p<ϑWPM|Iΐ7 ?ӨA'f: ʶʎ HZyV\7k->o
m& P]Rwb"h37ӈ/Ӛ1 a#4'72 \83$& JujG! 1c
ߠ"J89X v
d%͡Y$Gݍ ޜb6ŷWf"M$-M& 2D@T_Q!uu}Â/ٸrClxԭ>#q1bЇ0vm'ڿ۲l\UМf/n0:yd7Jiq1\Ɋ ; KNo6g<`Aey?ct}EϬO[jQt=Sa , ,͚Ni41Mp'r!srmG!i\W=L FVPk啞 32V"Uɨ]ӺjGԕ~Tn37J ;9 @v}tD8)SxΒTkfUd%sTiW R> |U&G9G
' Ē6$|p) e?xgpFfA&*چ2"7k#@8Z\,t>rhZJզ) !yz/Qa8_QIB 3K"D
Ub
Q$ oکۭ(Hht'x)s hf=(y sh1Twz 'ܢ~XҼlO$3BG$l2 qϷ,eP`67a -#e}STN 6¯0Ajibwne]z3wއ7HG_ NsKFV
iz oܐZq1/DxJqgRaO, #9hb:MI#;8j@.V@~y̳ud([ZFmFb'MaTܶéN wa6Jİ 57_!TFQ7%~c&F?9oԧ <ͳ o}&l8;>\I/eQ"ttL ! Q:Tl*࿕cHt8YpRQG.>l
c-_,M(X=)UpJ܍ 5 YF:ÂGYd *lr aH3˫2T(=_-zEx| /l#aw;Y"}' 4
YZ