apparmor-parser-lang-2.12-lp150.6.6.1 4>$  Ap\#¸/=„KZe4ws淘16Xcg *Ӈ \A% a~q0^e9+" iWB:k}ܳ7/hXi20׺`iBmrlake_?|8k}6^Ga.T+S nk3 *iXcsEe38vY $ԫur <-b'C`f7; 0`PŐ&usE|!clRP6*X[8b=<է ?2cfa77e4cdaad3c78e0b3e55f6bd72c2b3eee5af41119dfd73a5c8d49fbdc012b373a918e891636f64112c573f61af8d516f6075ԉ\#¸/=„۬ `:C8/b5Z:>i$^'NfEGo$|)w~p(| B=aFwÿ~ A]2Z]9jAݼq=fq*ě> *af7]%i͂K"PD!u J ҬT󳊬CՍ KJX /U/0cggm}զ~fp3wBCI:;pp.L>p>Ш?Иd ( J|  88 \8 8 8 8 888,P80`t(89:%hF~G8Hp8IP8XY\8]8^ 3bc΍de#f&l(u<8vz04DHLRДCapparmor-parser-lang2.12lp150.6.6.1Translations for package apparmorProvides translations for the "apparmor" package.\7dlamb09openSUSE Leap 15.0openSUSEGPL-2.0+http://bugs.opensuse.orgSystem/Localizationhttps://launchpad.net/apparmorlinuxnoarch2Vu*g)4J%P  pA0n n+D7G9',DG1E+0 < (0*_+2Q+&Ie*DT('\7a.\7a.\7a.\7a.\7a.\7a.\7a,\7a.\7a.\7a.\7a.\7a,\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a,\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a,\7a.\7a.\7a.\7a,\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.\7a.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-2.12-lp150.6.6.1.src.rpmapparmor-parser-langapparmor-parser-lang-all    apparmor-parserrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.123.0.4-14.6.0-14.0-15.2-14.14.1\[ZZ3@ZWQZN@Z@@ZZ@Y|YY{YǞ@Y@Yh@Yf@X[X~@X@X*XX6@XAXtX @Ww@W/@WDB@W@V @Ue@UU@UU~@U:0@U0U*^@UTgT!TܕTC@T6TT@T5ThTeT_W@TBV@T7@T2@T12T'@T @T TT@S@S/S@SES@S\S:@S5d@S*@SRRR۾@R@RR;R@Rt@RpRcR].@RH@R<8R6R2@R1RNR@R R QQQvwQZ@Q5@Q @PP@P@PaP\VP#@P`@Pw@O@O@O O@O O@O~O3@O'ON@NNN@N@NNNN@Ns:@NoENg\NRDN98@N7N7N"N|@NM@M2@M@M~@M~@MlMfH@Mc@M>@M>@M=iM=iM=iM<@M<@M9u@M5M,F@M,F@M*M%M@ME@L!L!L8L8L8L8L8L@L L+@L@L@LwPetr Vorel Petr Vorel rgoldwyn@suse.comrgoldwyn@suse.comkukuk@suse.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.dergoldwyn@suse.comsuse-beta@cboltz.desuse-beta@cboltz.dergoldwyn@suse.comcoolo@suse.comjmatejek@suse.comsuse-beta@cboltz.dergoldwyn@suse.comsuse-beta@cboltz.dekukuk@suse.comjmatejek@suse.comsuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.desuse-beta@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decrrodriguez@opensuse.orgrguenther@suse.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decbosdonnat@suse.comopensuse@cboltz.demeissner@suse.comopensuse@cboltz.dedimstar@opensuse.orgLed opensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dejfehlig@suse.comopensuse@cboltz.dedimstar@opensuse.orgjeffm@suse.comddiss@suse.comchris@computersalat.dechris@computersalat.delmuelle@suse.comlmuelle@suse.comopensuse@cboltz.deopensuse@cboltz.decoolo@suse.comopensuse@cboltz.deopensuse@cboltz.dedevelop7@develop7.infoopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deseife+obs@b1-systems.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dekkaempf@suse.comcoolo@suse.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dejengelh@inai.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decoolo@suse.comopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.dewerner@suse.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.demszeredi@suse.czopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.demeissner@suse.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.deopensuse@cboltz.decoolo@suse.comopensuse@cboltz.deopensuse@cboltz.dejfehlig@suse.comopensuse@cboltz.dejeffm@suse.dejeffm@suse.defcrozat@suse.comandrea.turrini@gmail.comjeffm@suse.decoolo@novell.comopensuse@cboltz.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.derhafer@suse.dejeffm@suse.debwiedemann@novell.comjeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.decoolo@novell.comjeffm@suse.dejeffm@suse.dejeffm@suse.derhafer@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.deczanik@balabit.hujeffm@suse.dejeffm@suse.dejeffm@suse.dejeffm@suse.de- Update dnsmasq fix, which was changed by following commit: 3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux") dnsmasq-Add-permission-to-open-log-files.patch (bsc#1111345)- Backport dnsmasq fix: 025c7dc6 ("dnsmasq: Add permission to open log files") dnsmasq-Add-permission-to-open-log-files.patch (bsc#1111345)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- Set flags for profiles represented by glob set-flags-for-profiles-represented-by-glob.patch (bsc#1086154) fix-regression-in-set-flags.patch - Add dovecot stats in dovecot profiles add-dovecot-stats.patch (bsc#1089787)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details)- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diff- add apparmor-abstractions-no-multiline.diff: change all multiline rules into one line. Needed for yast2-apparmor (bnc#900013)- add apparmor-profiles-ntpd-pid-location.diff to cover new ntpd pid location (bnc#899746)- update to AppArmor 2.8.97 (aka 2.9 beta3 aka r2721) - several bugfixes in python and C tools - rename "__unused" to "unused" in apparmor_parser to fix compilation on openSUSE <= 13.1 x86_64 (bnc#895495) - usr.lib.dovecot.auth profile: allow access to auth-token-secret.dat - various small profile improvements - update and add several testcases - drop upstreamed patch apparmor-profiles-dnsmasq-iface-mtu.patch - re-number remaining patches- split apparmor-profiles package into -profiles and -abstractions- update to AppArmor 2.8.96 (aka 2.9 beta2 aka r2652) - add unix abstract sockets, ptrace, and signal policy generation - several bugfixes in the python tools and elsewhere - move program-chunks/postfix-common to abstractions/ - drop upstreamed patches: - apparmor-profiles-clustered-samba.diff - perl-apparmor-fix-bare-network-keyword-handling.diff - perl-apparmor-handle-bare-capability-keyword.diff - perl-apparmor-properly-handle-bare-file-keyword.diff - re-enable installation of perl modules - move python modules to python3-apparmor package - create symlinks without aa- prefix only for tools existing in 2.8.x, but not for new tools added in 2.9 - make utils filelist explicit to ensure we have the right set of files without aa- prefix in sbindir - switch easyprof python module location to python3 - drop unused defines APPARMOR_DOC_DIR and JNI_SO - refresh patches: - apparmor-utils-string-split (file moved) - apparmor-profiles-dnsmasq-iface-mtu.patch - apparmor-2.5.1-edirectory-profile(prepared Thu Mar 20 23:35:03 UTC 2014 in home project) - update to AppArmor 2.8.95 (aka 2.9 beta1) - complete rewrite of the aa-* tools in python - new tools: aa-cleanprof, aa-mergeprof - extra profiles moved to /usr/share/apparmor/extra-profiles/ (bnc#713647) - and much more, but there's no upstream changelog yet - drop upstreamed patches and files: - usr.sbin.winbindd - usr.lib.dovecot.*, tunables-dovecot, apparmor-profiles-dovecot-bnc851984.diff - apparmor-init.py-gsoc.diff - apparmor-2.8.2-nm-dnsmasq-config.patch - add %bcond_with perl and disable the perl subpackage temporarily (the perl modules will be back in beta2) - drop the apparmorapplet-gnome, apparmor-dbus and profile-editor subpackages (they were disabled since a long time, and upstream no longer ships their code) and the apparmor-profile-editor.desktop and apparmor-profile-editor.png files - drop apparmor-utils-subdomain-compat patch (was only included for <= 12.1) - remove libimmunix Provides/Obsoletes (libimmunix was a compat wrapper and got finally dropped) - refresh apparmor-samba-include-permissions-for-shares.diff and apparmor-2.5.1-edirectory-profile- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq read access to interface mtu in /proc/sys/net/ipv6/conf//mtu (bnc#892374)- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading plaintext password files (bnc#874094)- Rename rpmlintrc to %{name}-rpmlintrc. Follow the packaging guidelines.- add perl-apparmor-fix-bare-network-keyword-handling.diff: perl-apparmor: Fix handling of network (or network all) (bnc#889650) - add perl-apparmor-handle-bare-capability-keyword.diff: perl-apparmor: Fix handling of capability keyword (bnc#889651) - add perl-apparmor-properly-handle-bare-file-keyword.diff: perl-apparmor: Properly handle bare file keyword (bnc#889652)- add apparmor-profiles-clustered-samba.diff to permit clustered Samba access to CTDB socket and databases (bnc#885317)- fix problems with dovecot and managesieve * usr.lib.dovecot.managesieve-login: network inet6 stream * usr.lib.dovecot.managesieve: +#include /usr/lib/dovecot/managesieve { [#]include + capability setgid, + capability setuid, + network inet stream, + network inet6 stream, + @{DOVECOT_MAILSTORE}/ rw, + @{DOVECOT_MAILSTORE}/** rwkl,- add #include to usr.lib.dovecot.auth- update usr.sbin.winbindd profile (bnc#870607) - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/- update usr.sbin.winbindd profile (bnc#870607) - treat passdb.tdb.tmp as passdb.tdb - allow rw access to /var/tmp/- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p needs notify-send)- update to AppArmor 2.8.3 (r2122) bugfix release - fix some cache clearing bugs in apparmor_parser - various fixes in mod_apparmor - several profile updates, most of them were already included as patches (except abstractions/winbind (bnc#863226), abstractions/fonts and abstractions/p11-kit) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details - update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch - remove upstream(ed) patches - apparmor-2.8.2-fix-ntpd-profile.diff - apparmor-abstractions-r2089-r2090.diff - apparmor-abstractions-ssl_certs.diff - apparmor-fix-url-in-manpages-r2093.diff - apparmor-no-perl-smartmatch-r2088.diff - apparmor-profiles-dnsmasq.diff - apparmor-profiles-ntpd-r2103.diff - apparmor-profiles-samba-create-dirs.diff - apparmor-profiles-samba4.diff - apparmor-unconfined-lang-r2094.diff - apparmor-utils-po-de-r2091.diff- use current ruby macros, the rb_sitearch is obsolete since at least 12.1- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file and supplemental config directory (by develop7) - update apparmor-profiles-dovecot-bnc851984.diff: - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary - add abstractions/mysql - allow execution of some more /usr/lib/dovecot/* binaries - better restrict access to /var/spool/postfix/private/ - update usr.lib.dovecot.auth to allow to read mysql config files - update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp: add abstractions/nameservice instead of allowing more and more files- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined) - update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*, /{var/,}run/dovecot/mounts, deny capability block_suspend)- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config created by recent NetworkManager (see http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b for update details)- add apparmor-profiles-samba-create-dirs.diff to allow samba to mkdir /var/run/samba and /var/cache/samba (bnc#856651) - add abstractions/samba to usr.sbin.winbindd profile - add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131) - update dovecot profiles to support dovecot 2.x, and add profiles for the parts of dovecot that were not covered yet (bnc#851984) NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs. (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*) - %restart_on_update (in parser %postun) is "translated" to stop/start by the systemd wrapper, which removes AppArmor protection from running processes. Fixed by using a custom script instead (bnc#853019) NOTE: The %postun from the previously installed apparmor-parser package will remove AppArmor protection from running processes a last time. Run aa-status to get a list of processes you need to restart, or reboot your computer. - reload profiles in %post of the apparmor-profiles package- add apparmor-abstractions-ssl_certs.diff to allow access to certificates in /var/lib/ca-certificates/ (bnc#852018)- add apparmor-profiles-ntpd-r2103.diff with updated driftfile location for ntpd (bnc#850374)- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)- add apparmor-profiles-dnsmasq.diff - add missing permissions for libvirt-generated files to dnsmasq profile (bnc#848215)- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile updates for samba 4.x (bnc#846054#c5)- add apparmor-profiles-samba4.diff - various profile additions for samba 4.x (bnc#845867, bnc#846054) - update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages - add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work in all languages- fix ntp by allowing read access to openssl.cnf- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch) - p11-kit needs access to /usr/share/p11-kit/modules - allow reading /etc/machine-id in the dbus-session abstraction - add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for the new tools developed in GSoC- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental in perl 5.18 again - use grep instead (upstream 2.8 branch r2088) - fix ruby requires- update to AppArmor 2.8.2 - several fixes for python3 compability - various profile improvements: - various additions to abstractions/fonts - move poppler's cMaps from gnome to fonts; gnome includes fonts - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base (bnc#824577) - update pulseaudio directory and cookie file paths - add missing permissions to the nscd profile (bnc#807104) - deny capability block_suspend to nscd (bnc#807104) - MariaDB compatability in abstractions/mysql (bnc#798183) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details - removed upstream(ed) patches - apparmor-abstractions-mysql-path.diff - apparmor-profiles-nscd.diff - apparmor-python3-r2052.diff- swig for python3 is broken on openSUSE 12.2 - build python-apparmor (for python2) instead on 12.2- add python3-apparmor subpackage (currently py2 OR py3 package can be build, but not both at the same time) - add upstream apparmor-python3-r2052.diff to fix various python3 issues- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)- do not package directories as %config - especially not as noreplace- enable python and ruby subpackages (using %bcond_without) - update/fix paths in %files for python and ruby subpackages- add Requires: insserv to parser package (needed by initscript)- nscd profile: add missing permissions and deny capability block_suspend (bnc#807104, apparmor-profiles-nscd.diff)- Add missing files to SRPM (bnc#777471)- update abstractions/mysql with correct paths and add MariaDB paths (bnc#798183)- update to AppArmor 2.8.1 (=2.8 branch r2069) Bugfix release, http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1 Most important changes are: - add various missing parts to profiles and abstractions - fix a possible x conflict with hats or child profiles in apparmor_parser - fix and speedup stdin handling in aa-decode - various other bugfixes - add pkgconfig support to libapparmor - remove upstream(ed) patches- verify tarball with gpg-offline- fix directory flags for /etc/apparmor.d to be in sync between - parser and -profiles subpackage- remove %stop_on_removal for no longer existing aaeventd (bnc#781564) - don't hide TeX output when building the parser and techdoc- clear and update inconsistent profile cache (bnc#774529)- abstractions/bash: update /bin/ls to also match /usr/bin/ls (usrMerge)- Add required fonts for new TeXLive 2012- update /bin/ping profile to also match /usr/bin/ping (usrMerge)- update to AppArmor 2.8.0 (= r2047) - new utility aa-easyprof - templated profile generation tool (the resulting profile may be less strict than profiles generated with genprof/logprof) - various small bugfixes - removed upstreamed patches- add apparmor-techdoc.patch to remove traces of the build time in PDF files- update to AppArmor 2.8 beta5 (= 2.7.103 / r2031) - new utility aa-exec to confine a program with the specified AppArmor profile - add support for mount rules - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8 for full upstream changelog - removed upstreamed and backported patches - remove outdated autobuild and "disable repo" patches that were disabled since the AppArmor 2.7 package - create the Immunix::SubDomain compat perl module only for openSUSE <= 12.1 (bnc#720617 #c7)- replace patch for dnsmasq profile with upstream patch (bnc#738905)- add apparmor-r2022-log-parser-network-bnc755923.patch - logprof didn't create network rules because of changed log format (bnc#755923, lp#800826) - add profile for samba winbindd (bnc#748499)- fix dnsmasq profile (bnc#738905)- add 0001-fix-for-lp929531.patch to allow reading /sys/devices/system/cpu/online in abstractions/base (lp#929531)- Update to AppArmor 2.7.2 (= 2.7 branch / r1894) - move various permissions from httpd2-prefork profile to abstractions/apache2-common. Backward-incompatible change: *.htaccess files are no longer allowed for ^HANDLING_UNTRUSTED_INPUT - allow access for more /usr/lib*/samba/ files for smbd (bnc#725967#c5) - allow various .conf files for dovecot (lp#458922) - disallow wl for *.so in @{HOME}/.pki/nssdb/ in abstractions/private-files and abstractions/private-files-strict (lp#911847) - update abstractions/kde, private-files* and ubuntu-browsers.d/user-files to use ~/.kde4, not only ~/.kde (bnc#741592) - block write access to ~/.kde{,4}/env in abstractions/private-files (lp#914190) - allow write access for personal dictionary etc. in abstractions/aspell (lp#917859) - when using genprof for a script, include read access to the script itsself - automatically include abstractions/python or abstractions/ruby for python/ruby scripts - add profile for smbldap-useradd and allow smbd to call it (bnc#738041) - allow creation of the .config directory in abstractions/enchant (lp#914184) - allow TFTP read-only access in dnsmasq profile (lp#905412) - allow capability dac_read_search for syslog-ng (bnc#731876) - add p11-kit abstraction and include it in abstractions/authentification (lp#912754, lp#912752) - add audacity to abstractions/ubuntu-media-players (lp#899963) - allow software-center, fireclam plugin, [tT]unar, exo-open, kate and /dev/nvidia* in abstractons/ubuntu-browsers.d/* (lp#662906, lp#562831, lp#890894, lp#890894, lp#884748) - fix typo for multiarch gconf-modules in abstractions/base (lp#904548) - allow avahi to do dbus introspection (lp#769148) - allow access to ~/.fonts.conf.d in abstractions/fonts (lp#870992) - allow transmission in abstractions/ubuntu-bittorrent-clients (lp#852062) - allow reading ~/.cups/client.conf and ~/.cups/lpoptions in abstractions/cups-client (lp#887992) - allow read access of /etc/python{2,3}.[0-7]*/sitecustomize.py in abstractions/python (lp#860856) - various updates to the sshd profile (lp#817956) - (and some more changes I already included in the apparmor-2.7-branch.diff)- Update to AppArmor 2.7.0 (= r1858) - make traceroute6 work (bnc#733312) - allow access to pyconfig.h in abstractions/python (lp#840734) - fix logprof/genprof for hex-encoded program filenames (= filenames containing space etc.) - add apparmor-2.7-branch.diff with some upstreamed fixes: - usr.sbin.smbd needs read access for /etc/netgroup (bnc#738041) - create /etc/apparmor.d/tunables/multiarch.d as directory, not as file - fix syntax error in abstractons/python- changed a $ -> % (typo)- package subdomain.conf only in -parser, not in -utils package - package libapparmor.so and libimmunix.so only in libapparmor-devel, not in libapparmor1 - make Provides for perl-libapparmor versioned to avoid self-Obsoletes - move libapparmor.a and libimmunix.a from libapparmor1 to libapparmor-devel package- update to AppArmor 2.7.0 rc2 Most of the changes since rc1 were already included as patches. Additional changes: - fix logprof/genprof to recognize "mknod" in audit.log - fix libapparmor python bindings to compile with python 3 - fix wrong status message in initscript if apparmor-utils are not installed - parser/Makefile: fix some warnings, always respect CXX and LDFLAGS - fix some warnings in utils/Makefile - remove 4 upstreamed patches - remove mkdir /etc/apparmor.d/disable - that's done by upstream Makefile now - update line numbers in 2 patches- make abstractions/winbind working on 64bit systems - allow loading the libraries for samba "vfs objects" also on 32bit systems (bnc#725967)- allow loading the libraries for samba "vfs objects" (bnc#725967)- include autogenerated profile sniplet for samba shares (bnc#688040) - more helpful error message for "aa-notify -p" if the user is not in the configured group- update to AppArmor 2.7.0 rc1 - aa-notify: add --display option and warn if $DISPLAY is not set (important for usage with sudo on openSUSE) - fix syntax error on "rcapparmor stop" - allow read access to /proc/*/mounts in the dovecot profile- add patch with upstream changes since 2.7.0 beta2 release - add example parser.conf - print warning if profile cache directory doesn't exist - remove initscript for no longer existing aa-eventd (bnc#720617) - set correct $HOME in aa-notify - enable caching of profiles (= massive speedup) (bnc#689458) - add comments for patches in .spec and comments in some patches - run spec-cleaner- add libtool as buildrequire to make the spec file more reliable- update to AppArmor 2.7.0 beta2 - includes fixes for bnc#717707, bnc#678749, bnc#685674, bnc#679182, bnc#691072, bnc#705319, bnc#713728 - add some missing perl module Requires to perl-apparmor- update to AppArmor 2.7.0 beta1, for details see http://wiki.apparmor.net/index.php/ReleaseNotes_2_7 - removed lots of patches I pushed upstream - disabled apparmor-2.5.1-unified-build (patch to use automake, does not apply to 2.7 and probably won't be accepted upstream) - disabled build of tomcat_apparmor (doesn't build, deprecated upstream) - run spec-cleaner - remove *.la files - move usr.sbin.nscd profile back to apparmor-profiles package- Update patch apparmor-profiles-usr.sbin.dnsmasq to include /var/lib/libvirt/dnsmasq/*.leases (bnc#694197).- install SubDomain.pm compat module (bnc#713408)- Update to 2.6.1. - One patch eliminated - Lots of minor fixes - Split out more common abstractions - Add check_for_apparmor() helper.- dhcpd: Fix apparmor profile (bnc#692428)- Add apparmor-securityfs-systemd.patch: do not mount securityfs when running under systemd, just access the directory, systemd will automount it (bnc#704460).- Fixed typos in descriptions and summaries of apparmor.spec- Fixed building of pam_apparmor to properly link libpam (bnc#696553). - Fixed building of apache2-mod_apparmor to properly link (bnc#701821).- move the requires and prerequires to the right package- make the -doc and -profiles subpackages noarch (again)- Added alias from Immunix::SubDomain to Immunix:AppArmor to allow older users of perl-apparmor to work properly.- Properly re-created links to old utility names.- Added /etc/ethers and /var/run/dnsmasq-forwarders to usr.sbin.dnsmasq (bnc#678749)- Update to 2.6.0 - 19 patches eliminated - Lots of minor fixes. - Split out more common abstractions - Added more local includes- Additional libvirt related fixes in usr.sbin.dnsmasq (bnc#675867)- Added 'network packet raw' to dhclient profile.- Add Requires for used perl packages (bnc#670650).- Updated dhclient profile and added dhclient-script profile (bnc#561152).- Added ability to completely disable repositories.- Properly indent sub-profiles after genprof completion (bnc#480795).- Inherit flags in sub-profiles when generating profiles (bnc#496204).- Stop treating profiles shipped with the package as config files. - /etc/apparmor.d will still be treated specially. - Add support for parsing network operation events (bnc#665483)- Fix for sbin.klogd profile using kernel versions >= 2.6.38-rc1.- Update to apparmor-2.5 r1445. - Includes 3 of the fixes below. - Several testsuite fixes. - Update for Thunderbird profile.- Add support for libvirt in usr.sbin.dnsmasq (bnc#666090)- fix rm call for nscd profile to avoid file conflict- profiles: Add openssl abstraction (bnc#623886).- Added support for sys_nice to ntpd profile (bnc#657054).- apparmor-utils: Support newer auditd formatted messages. - Fix two x transition conflict bugs. (bnc#662928)- Splitted ldap related things from nameservice into separate profile and added some missing paths (bnc#662761)- Fixed pod2man macros with older versions of GNU make- Fixed building of perl and ruby SWIG modules. The former is required for apparmor-utils to work properly.- Fixed use-after-free issue in apparmor_parser.- Added fixes for logprof issuing uninitialized variable errors while encountering audit messages for unconfined processes.- Updated cupsd profile (bnc#539401)- Fix {proc} vs {PROC} macro usage in firefox profile (bnc#436262)- Added support for eDirectory nameservice (bnc#621394)- Fixed incorrect /proc/*/sys usage in usr.sbin.ntpd profile (bnc#634801)- Added fix for another case of whitespace affecting profile removal (bnc#510740)- Added support for unified build, which massively simplified the packaging.- Fix for syslog-ng profile to allow upgrade to v3.2 - add mysql support to syslog-ng profile- Added support for enabling/disabling the module automatically during installation/removal (bnc#623246)- Converted archive to tar.bz2.- Updated to 2.5.1-final. - Lots of testcase updates.- Initial packaging of AppArmor 2.5 - Now contained in a single archive so built from a single spec filelamb09 1547134205  !"#$%&'()*+,-./012345678arbgbncacsdadedeelenenenenesetfifrglguhehihrhuididitjakmkoltmkmrnbnlpaplptptptroruruskslsqsrsvtathtrugukviwazhzh2.12-lp150.6.6.12.12  !!"#$$%&'()*+,-./012apparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.mo/usr/share/locale/ar/LC_MESSAGES//usr/share/locale/bg/LC_MESSAGES//usr/share/locale/bn/LC_MESSAGES//usr/share/locale/ca/LC_MESSAGES//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/el/LC_MESSAGES//usr/share/locale/en_AU/LC_MESSAGES//usr/share/locale/en_CA/LC_MESSAGES//usr/share/locale/en_GB/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/et/LC_MESSAGES//usr/share/locale/fi/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/gl/LC_MESSAGES//usr/share/locale/gu/LC_MESSAGES//usr/share/locale/he/LC_MESSAGES//usr/share/locale/hi/LC_MESSAGES//usr/share/locale/hr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/km/LC_MESSAGES//usr/share/locale/ko/LC_MESSAGES//usr/share/locale/lt/LC_MESSAGES//usr/share/locale/mk/LC_MESSAGES//usr/share/locale/mr/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pa/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sk/LC_MESSAGES//usr/share/locale/sl/LC_MESSAGES//usr/share/locale/sq/LC_MESSAGES//usr/share/locale/sr/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/ta/LC_MESSAGES//usr/share/locale/th/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/ug/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/vi/LC_MESSAGES//usr/share/locale/wa/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:9436/openSUSE_Leap_15.0_Update/ab7fb1a6f6caf9236767319302075f02-apparmor.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linux!_㗬04l,,apparmor-parserutf-8d78c8d473908397a7ea0c1e85e23e5bf1152e6fb2af88ec55cee26ff7d561cbd? 7zXZ !t/6] crv(vX0}g!WĭgWIn.ZMaKqh^5:;@o+S׾:/PΟBHzSp*=T5i'o [D _'Cn--pX$ 5ҟutSXTeIU%i&tTfe'NF eCהJRڬLpRQ4| Y5nRȃ0omA`dLE\vcЮxԅ|[xL$J(?ier'?'(&^ ۮN^*jpI;$/uq.Z԰ðr@}<1$>?D1f*mTYc8M;>?яk܌D6ۅZƛAzHvao qͥ+r*w,)'#$|+N0M_zMDg[5pdti}.l4o|^$/|-*% kH6_ߟ|qO2 `hd2X:%~6, )lE,u5n ;͹MxAufmOMm jMϐxAYe³Єgi"xsS/h}O6CR!6w6)i@/v~Y:YY} mmtPu~?3TQ/X7_+Z 6~!سoU _S)C{!1;g7?%o)dXA)F5}Y;#2߶s̼!0*%ۮ[\E +V|XbJ_I~^b["۞Yg1Y& ?91g{s:&ξox%+Iw׃rɤ XPiyFC)È:$ev4yrĪ_ U 7A'jTJN<^ h'^*I= *.V5K{ԕrڽ'$`Y!TiW%FWMFot@ߗc/H"p95&0ؑ*ݩxN^FA.R#^!+\oav /Lh9-F6(S VV )ۼ#:&|*S[CQfS0B:i>ȯ#'~?Lg7tRyOlCG+u: §aظ[30t>%V[3CEUЭI"l`/}PNsy+7!etY@]sD-nIzD3XmT܋/ UELJa'Dˋ&L&洨bBZExK@K &S 4\͒iy[CGm ,QXQ"ch >GVGVe?78Mrc"켁2{T+_lo; }몝 t\R_Ѯt~p-_|a!E(=oҋ)؜2k?=j(_fW~*~wSinҴ=QCd9 .WG;voQ<q gĤ0Kx-NE¨:ׄjBބp^Q"Kp <`|2G2vX7H_*3Uhs!R,)nZM4Uvȫ e ^p3J(ĥi(0xm+F>jegJT<:ll3߫2@bXq]$.' yyZd`J˸S7Rb Ǐ_E;go5^U#e6Fgk51kڬLx7 #zI ۆ%;J5Z@OHNҢYӱn8@EExuH+q⟤`ޓ07,~/@\;+6Ch?lY\*~+uQEAص<I-<ߎ q W&/Mch$d'K!#_sQ֖`ɺCOr:v֌ew Ɨq.3 _ı=* ^ї_#~M].&G\:qYE]\&A#Ž%Yqe נpk+Q*8 #YjT.}crкHK& 6Pǜ){Z(@ѵZ5= JFsr=2X mYip}؆aRqiDŽG V|k puHUҐ:,G=yglUvmB!JhgާE=y5NۺANX)5δ&3GWC(a\.l eEB](mnrc(XlT`lK)qGU{\ i!h\6=]LX٭CW:SF9Ej&D1 EY=Ebצ)e6fņ La#Tׅ9Z"L 2 /$RyC#m+^Yw ݛ#Y6&jQcoΗVĴ? *ZH7el9Ǹ G' ٩ctͻPuy+zc`ʺp/tOY_TV w2t3\hS1YPQvs3 I7 05֣/ l 4}׃I:,inPZMҡAB5+B#/+ǿك!\Z,>YtK=MfYfw`9;_;9\!UiɻH(GCA[xsH/rc7DaNd?qhGb-;wѩfDʰCq'I{ Py2Wfoj VmYppUL0?}"KHT@B]ڀtS pU$6ݩA34Ei]3 !caS'|Ad;*H}{^ĄLWNWf9knYs`>?iL N*gD=hW&S n݋G\,GWʙ24K xj "i~nXzu4:c~]^NmO;n%3*j$aJD)᧪G3^Քe{h>_<EMA_n8`DZ*fz49VZݏ˴eX}?kG٧ϧRvk&՛մNz"Y3/O@ j@sH)&*bbȹ}eJibhExݛz Yv Ln1KSFQՇBxXU4d.-nŋ[,AjqBGսy3YsW:bi($!@ f7-K@@a !Z|B€W)OUd*lC@Kna+! dnL2oσT0gCቈqp^ P7?TI?Q IwS{ھXoǧy-Y4?F:˨oTx,~@nը(9y`N~" e&w8swȲ's44'ƐZN\]!ԠDf/Z#35V ~ .j⠏J0u]8 Q`4vlMǥpidt~ڢY ?Ja16G zѩv Ӥd7λ>^r^&6j3tI+8H%f"4x%~>#V#U%4Q@e:jcCp=`׫BuPmD G(}̸fH ̃8nlEu3ǟ@21A찶VK\ZB? 7\20d tt*zTlJB- ;0c RtNS>+ |&0(.lTuS%,bdSK8ȴ *(9I)<(QK"X [o,)`((6g]y@UC0fq+MD֠ D "\jzit :HQ J]7Rugl3/,qw;I;wLYe܁^\]IŻMX&6~ZZ M)Z=e@3.r>):sIlSp7덼hx 4a_A'xB<P@M!۵RR9X/C&c*&؈W:B`Z/Fq Htfۨ $%e˨,:J S EgD%ƻXS GC[bIq+UCj@g$%A  y*㟱Bek0@o?C 4k_8 }Q֮dXH6Wߏ+".fS4Bd)`} jx^Q7^N;e-/(bLV,P`nd/5!߈=3r.d".v(ka}d,DЉR;YړdVx*z'r|Wx<"馏֍I1v59"[(!.e,V<7Wk(4/sotխ-e6dp63?=cA0ů; rBr&`R) JŒA(x'(b6J Q<OHߢbfʰ4]\J8M&'aU 0Ugdܔ 2nBN<>HUChVUl-w6(IN ~H|r胒 t[#<`Y.K0혳y@ȓ`l@QhG`Ld'M 4FC_a52x=-z2)/ %_tFXT$%Z?,Fr4 i fc+j%`+~w2>t,֔R`iY=oZYaVS,V[9>;+bί+U8]* [T/C:/$MWxpE"* |9cACǞڹy44@`yIK|tb uB@_JvJb@zE T-nn\aڀnS@a>L5'/~t"Nz< .Rum/W^JlpThk~6¯C-q4jjQ٧3{N; +fhM3yY}pe؂i14] zT#h0z ]#j )n (mE)rU]^_+ko [irV;Mwt9(^jtЉC:< /MO}Gkd hAYݘ4>~~-c>@m{T إO* DpL[VlD.S6jG`}F!XS?4wu۲U]Mpπ#1XG3a}w4s#^Yi gD8%"dD!OWqIwҺZyĬk:iG9Ճ|'[ddx,Cz:@^j,EBg!GIeJcSrPԤsސj dϰmkY,woUnjJĔ" F_$uUN&sI¢ʗe;2mF}aô#YLv !!M /,/MaN :KtE@8\@+XM!ܐ*Jق!EC̢v䶁&SIӽW/E2j岔!Ov$C\3~sњ@R;]PÍkĎ䊔FdRk re]- 9UGhL(jޑO磩""[c6GQ˦ʵKIAg&*aܲ T} ޽,pQ뒩-LčΌq? LI.~,]E#KmGθ~ K1oPs4+6ci¢u0L]Lۄ&8$ߌ]J.5BͬD5yc mqt2B%6_baJڷ6|?L̍Z~G (,!ɰ2| GmвǟwspQ(t_p l F^Zwͫ7#{M> YDz?9OI'?2!C=,`=k3}2d3H_~I' @CVu3C&JiBFnSO%nLN}feZ6crM?n5fG:s*]4ihi*+&ٽ3"ѥ5_Ljs5y s°+e.oPO'oJXn?<˳dڎ"Ӌ8)u?ыBs.Bo@5ͼKdiNga+dp,,*'; _dSA7gUAu]=~jS"ο#)q,x P95%-ehiJa/~ ךV?ƴ'۸R/ cE kazɗ"E86?Wei4 ^U$k{^G k?'d6*AihV2\u$jp<k?~o.0})Q@k˹{v&}\鲣gug[{8*`H2=vySˤ:>YdkCIiʅc rR$q'R/J{St`9E?5C:rh=+?u&"m!Zg6*O ~  xeޙ3c?)$_kG匘յ qKwοK̈7.D6/F:frB LL`>Kox^5 fн$46%3VzK{(KL0-6CYg85tP a,#Dvܙ =ҟ偕17BH$q3DJ5ӓ| j^py!˵*u+3MmD4=D=ر&2Fx)F* t ׎}c>{w9S) (2cRZWѳ>/O+b{`T{ʤڰϑC7+\9D훭a A# e@pbmNc:of7ؓ4z}Ϙ)j]pJ]oo0NXߒ͍OwE2}01TIFZ^Dm9r O3tjOmϔj9(I~a`jw,F$Ƣ[P]$Ga=-ݷlȫ\ЗAr2|2!M8o(74wzhȕ=vGF )_*kEwBxM lhNLd@y*bRokK$ QU#7MZ?E;b_]7mO1 w`kڷ>$/!PͦX7}G[g=_B[3S&z?_>-> :_`ް8_z1 0V)5&k-4oں'+,ah12`{3r;4W|m)lb5 ,;60r3l:$ai1<NQf]ŎX|!}8l/ehɿh >Y>ۗR5)Kd+郺ߥsѮ*<^>Vyx dzk cw0t-P-0iBq#ئO7ЯKο1 ZL- Ҿg:=']'4PS!\ʘ|7H!kTLjcϷj$?'jLJ*b^ߏJ+Oz)3^Jd/{ū?v|V㭴;ql}mFXP 5ΈګueDQUydtvXEp/-%$CM)Xm" @e2Rz$kA1ĈO>SAӑ'%FR GW~Ɋ`he.;6[R t{R6 )EX †mBǮ2ZW &M=v1y)_/j\9~B{r68[0VG0]u?{eܞ㣉(P是.33(T`Xmj~<~i8'6wtTÍzĩz >jOX=誁'q9HKz}$n-{v>Th ֣Ә .ޏtEte >*\Ɛ}Gdpcװ}-AjiGe;p"d=رVLw5"Mnf {S{Ur=:6v@"Ĺ9e>U$ F2bZ}Mw#`|7^ .o"0^Zm ub],0ZL84{ kL mm=qFeB8ѾT+Yg}NڽmS'=6.>p‹yXcF2X!g/9TE+m4vY:vd^\[3^TN"7}fg0]maiMMfx+OWC:;vr0;!EĬggK?.ڵowa`̨qJ[5Ay1%Rpѫ[*ZG{Q(:Owܞt gayq۟N |bID{h,x@#.b푲֔@vlc+?/S59T T㜖\|^#\3yf oEnZܟPMd؇=RMW,f(򢑤> =T9/X"[FR1SX쁂U-[KwW23U.IQOw_)p=FnhџA'َü6sfYVk>eU'A>]EX4bBR&]r($^UXL[_4 N\c N$-s; D6cS̮aRPMSw\>(EW頖EVolB5È$Iz w ab44#KIT|qc\}0Pw=^(3hN% ,q \2>S6l_GBb^*=74\ nr*K#swD݆ߡė$vAL03O%6ɹO.1d_6Xr4 S흘nVjiz>9XS1BJߢd }AXOBJ[{Vo_p;Ae %k7= MN庇uLj3^ %ZӂzĤH f 2^1Sgh'kSJֵ]yK8D]uZ9oơd2޲{?xp9%M왬'lj͖@柡` L?ð!Ҷ\۟>]q\s-A14JV@Y;dNEO4.ݗ #rWegwo,TKK/=u 07 OGl-Rĩ,Ɍ]kcێ;;I!yS<).Jj~t'\)8n9^jg7xh#o'b8s؃ UA b")&5Z Gl9iݺ5OȣrWdm,0^HxTO@C>҃i~C+&uFUꊙɏRs)-;b{ũvqޘD 7a[aJZgMK-P#RS;oTlW5>%{?ܿě kE8W8!4^aNSĊ"v]Ud;›b=qoKdJ)̈́ E{z6\uw7dvo} /(͍ZFrHkPJCS+N~ߵF(6FK}PH4^; ;Z%@'@X$ 9?/ўX474<@ nb_{ר>VȅA5:߄%،׋6c5Ci6[rHOq;*&[K\+pkG浳'qRG^j Ac켏Tg3C"^{S2{0T4y]mObEi\-p;k1MMVh`KR6gjss+I'U E#FzK^<Ϳ+\Pt6}]{Nu]+ZYͺ.k!~e=셜ڕlPZ(ns}{u̥4 kUGP ^IP1Z-{`0fl*,Q5p5=Fg߮8ҋ}8S>ZrOH;GBSz"}fYE, ǧ3ϬTB}&`z>\oۦ43)_*g-Yl(khwڑЫK !s돘pN kD{Ś0I^nX✄$H}ey q%Jt@eJ&,k_2O>mW0yQx-Us]>2te;uڏ"`s"67rfw8dԅ%ٷr)0ݧʿlȢ=qƝq3&2x+-+_ \Ǻ 0>% Dwmd#zە.Sİf69d;lfWP_/ "-8 ǸyQ^XQ75i}m-X%F4UGihI[hO:U9@Fi\A2z _Y=v{2,Db0)/7_Ù]0V#$Ag~Gټ1>^ =@ŬF#{x >8yJhlKٗdHP 0QRL/J CXJ/0PӇg] ޔ%:?˛PF{)G#;1֯Yn)иuzIbK+ 1Q9t#eMwvը]dZ,=>hGs"Vʍen7{(mkԘ(@zaaRErhN `"Pבw.݄ PHASc(Ch\"̆%/*C*FQt#͏,^HUO);/̑wِ ZYlpV!0K&oLb1G(NFm@/m,}I|XIlz"ct"ѵ,AiO~B9V@kZj~4U|#0De!eY{!xX-:V sr09܀c*O zF̽͜q^%^E^{ly\2xF]PEs[jN +YFD=8z[/qkQ 2/n{!2yޱPōeH>j5l |W>'0E'C ("uBL[{p~q2 (Q#ݍ&ޯ.^8;Gug^ʔ;'o r/^s.SQO_\OO_0<ͦv=<@(>ty+nc<TX861u 3Zu G^ߙ!Ӑ lqj;5ʌ[?\3.ċ'+~ $(GF]]U.Afpc7Л?K`.2 ,}`/ܵs>" & 5M m%Er%`XFw{|Z@<;ŤĤ/ 6J=VʡK[:R>UNVR|W¯q Vuax֩Ȣ$=HG5[a U /LJ^3 Rd1|( |u)oAʢk*Ŏqۑ"j\XVιv SM6bg3?я(lj+Qa{1`9*6{_`b  \n$[`%qGфwG9pyޭ]̲޶bto:E|7yCД.vTC!Oz۸ ky.%|1q4sAIYq`}?\6&=)OGiw7 A%PSYX\wxx-hC2<3MK>Osl5/ɽ`ɛ0BR$4M`VW0ۿ#X2WE/:d9DpmђčbrVW@Aة|B Z\{n.&g?Mh3؃*<ϕßOXXӵ9/mUrWx:7{Ɲ?NdX:S-|:\G'~VC@{oHBzkr"_VPO̍(> P`ssp0F!!Z ;Uk& հCHلIXl^/msF8Gxq| _UQCJkT 뵴LտQxwS6c<m/! o!jzcUƝ5qfeHae؍{͇BmkQv*xl49,ns, 4MgWQ'x&n3֓m$v^QB>a|*PLu\QϬ{6*=_5ߐsh7L~b*K2<)KXy-..Stۄ˹c)It8bzlOk3#ġP5b^cv~S)^#n;_(J{|4 ՎYqqxϭ$c&,T˲12 NvVF/3NɮY>0i=-KLx53˺G2}0握//eNShhLka>zV1Cy[CTKczJ;VcaO% t9\Cz+.civh4!4ҰƌxVۻ/<@~ l i5!| fujrA\֜1$ >D\CJHٝ @ R6+-nv[I hڥ $zhAOdzKﶘYǍF{̫I780EcFwPH=@R2|-xܙ]Eh`z6VN V-p]{e{GNfY*~v r&zA]j3\3VKCp2Kp+T*K/ƪaρZ[J 10偞{E 9 0 7|`[PKsmے _i܏}]b#i5?X~ljQR~.Ĕ@w!lHG!=i- f_iaMsyӞzVz,RUZ$W\ < (&9,)ptz9 1?}N!4}q \bPN{dtPݓͲԝMϴv]{ZcPk GIHbNHf/Zҧ)ՠ@YZϤ/E]j(I9T ٱQDw~!*,IH[[렾^i挸`~gB{ YK+- %YgՏI~ nV[>KBI߰ zg +MVO4aj9lA4!kRRpJc&DAA(|fX0jZc-hW=??MݿʋVÊ4#SXm'zؾe”oc;gL70%hCwË6rD* P(q{ϯ0oXtx~}X`jۡx!ӬO8n7^F+˽5MiMNqq ]J,کI)שgga]!CtZ&Qg{[c"stR#7q~ N2DojhxZYŮ8-zUyS}"PN :s}-\!N3K,%P'>Vn\҃2 WĽ*uU0'Zx4LI2~LݳHs!9}8L>#'[PY%NDTV'r" f-27Prx׍x5I)n8~r12g8M!Bn;R2YNm|s&-ESN bVɸ%r+O1OlՅOKNvCq5O|Gy|&p=q;08vz.>s6+zN,C׆_ZJ7m%Sxv[J[൷u'#OI%\lV?"Y81PDd%z%?ͅ8lh_ngIk}h x+?Pԕv1 8;7俪r ,jJImZ~Tk)9sU-|0 Q-DA*S=A'?D<)*{YCyA"V8Ooΰ- ˄3ywzbnp'o5FM>--")ؚr F*]ſj|Rg0r<5xs͞ר{ C `]7=vػgw1{T> F(,,*lȘZLvlV82& ppM9z6TOBF7N(p]~%wy<SВhuMaVtcLSĢ|*@܃gy }~cPP|/VkzـgMS$Lwͪ0,&0P[MD?Ӳ9Dy@"!zUlpTjc񋻿8{Qĥ qĹ(;0p9S.&Cq)Y. 8z@#7hA\DыS~=Ϸ#FM倦KQҏoZPN=_lӰ -S+-=2Z!'9Z(cd` 7b Leɜi1[R5ڧ %>`^R!qO{9L~9톽 "/N-%api,췒0vy.'HI*:CK)&[xU*r %zVlb Q[9.ȋ8grn ݓI+et 1 @s#_ghXi= Dˣ]+ 45%sqK LrpKLS&F\I *]UZ}`~5$gy`;9I~@hp^Iy۩uE0RUxpn:7jB=Em :#pa4^h;V_2uaPwY𷧜?9:nLdEUttombF`t,/IK"vPDr'7ͮG~0+n R1~HW(1ï-Q먊 <>H67 -=(;jzNͭ$5'Kˣ["OTQ]Q!(wOҀcr't섎 <$m_N9Ն| >%$ F1@*gM"8\HFز/ hzS=;hkc'=A(w$UG%JW64["!6#$^h1ӟ$g#3\2'AI.<;`Lv:j# qL I=&g`="aeGz#w5л+_}*D»X,jka@,A, Uȣ lyS& f ÕwD| &ً'` xsgWxm76̭ӔpLq -j<ɬY ECw<3hd5WQ ZfIA|@:vN<3C1qq\4lncck־RnS_ jU_:z##fe2MXF5V5($"0OC]rzstI3-2+T[T_fa6|lOgq65%kY3}lV(%6jr 1O=-zehC*Q%2@)%|7ֻ|7o` w~`bbHˆ8 #|!w̓ɀs[]̐"__ zj)&>NJ氦bz==HHkOiqt]A}3/ -엉G-sٮCvAPw)Έ+CX"~٤'$_~Pv[x֪t )WWWB,<-M~p4&Q^| Q7va"ğilYЪ ILCfI;92h;JՓo^\Wb]yxSb|1犧jA(oiiB|<Ӕ @X[Ǡ_oļ+[ ! 3W/c+;SgK6,le_'ɞ g sYui< |G~Zɜ,ߠڸLHq}N8?Z2J)2S-n; @\ߡt&Mp׼İSA/Y{'yhXf'^S"d&؍1 ECRyLjye>XNCGE`DbR!5T2E EH4 bsz+*nTQV&GOjQ$;RS]4"Zx ^UDVXr0wP!Us/d|d 0m&R꾚b` 9)EEG$G0b ~4qivUZ?g3Ў\ *Lnv+ˏӊwĀP_Վ¥AAAŕ' [ZfƮHm{cޥzWg?Tz1L v%B#81%h&l܅$aAb#>['<_^拠w?6 rIg)< 3Z~(quɀpLV /;'Y>̐tck:+o )C _ajS9, s]4GȖ+-,5~F Jlj4JIVмwV@ t|W8MVi1gF^&m3ܶfE#MY{9o]9sR~xbL Ƣ  vLm|eL$ZQ㛺{ϽSAjj~­Y&;G#_1&+p6z' Q4Xi hlښ#8̣*C,ۚ> ane]Lrgx&mol,H0KM ߝfepB1+<(uk#)o6q)<2Q˄o1Ͻ_=(L P +׊fE%0oSpjotmA3kDLN-!_1$9:&BtW=v2fgFCf5Fu B8_;=@h ( ^S()\ʩ_/hnQ@Fg-yu]X_I)'9l*D(Nq9 M>m.0A&tX `YüBu[-r%TK}]5vثuWF Fֵh5DxRLϳiXBD.L_8"wi៻;5EV*w M팠A(/I@s_fw-۳wM>ɇ5hВbd޸j`(Sb4A5Y4#9JCc0WPudXˌɚ 1Vhy0Y"9Ob79UaGpl ʵ&غk5'xʘ=w0RzYGwFO&՞X| ovtD5ߠ͖ ..Fܢ;[=ե䡏Q?2DN'l|W&aռ FJ1lD/^p8hpSNݕni=kFVAlC&~z%݋tlͻڤJ-J`3p;s̬F'yYԷ6ק+ma!PM`LAA0@0wB-ԌբhU=`h` /6%hP&` V[tDVɬqg[y Q@DA3]#QQKZ tx KS#P\֫Jg򃣐/+T\Vם yu/A+YsDL5#gK!cPw;z#ҚGz5Tf,/< IB,*žןш +4ct{џ"ɈmD=Gו`o*EnuD3zJ&Wߏ2Kbї:7e#Fg+͏>=̏jknG!8vإw7fc.f#`#թHN~ڋ[Çd8wšW4k &܀sJeC?}R^<G@OC]S" ck=ju/]\:>;=n lROJqf\?JX| - Ս 7kqbFmﺩO`EArK?VuP އ #"0(\v*QMYjYh|UGkLOMϗ/qAL[~z]5j\uwSxJGG7{!QPU\sWv+PޝԫtB3g&Œl5|R>1v~PI/ Hu3ǵiłjBbٯ.ؤ^䷂e5WZ۱s6P+M8AfBblE?PF)0mr |8'#f;|c0nҬz+ɩ#)63}{Ov=]l؁JWqxJˀ֢WYD(kNb(D :O+){oC-JԦnz5aG)A 2SeD^Uv !sjb5қ\eZ)e/-{r<:AC~=?N*Y2]PۗxEb4TN1{6FpHSrK-ՄW6Q,~d'^$sg2~(TMqH p}$ωLUQU9>_t (rTј?ͦG<np +U%XZg *"q D<ĝ8G `K3JN:J\?%.6[:{qKbڹ1]4_ߚ};_ y++91 y ٶnA̪DŽ6,ؾ})g6]pBH~" 52~DCsK} s@{{Č 8 4ǁMwR4dw~H~}uX>S]gp"I-U(͔0=ȬCTwY$+Na?[ i@L]V1ҕʐ]CyO6cxjzx3am$MW?e\5f4~r\AX0[߸%k+B'lP涴r_Gs^ObE<حĻrbvOXQ28uocUq4{**tSrdM7C@=/ .r^qRKc<, uƼhxsu{=s?`D|BWިR,_G x\z9+̓-U4Ѽp萙lقh!B_Q؈}UC r~&9兌`tA #/ʼ|:-e3{CXƯ&{=RTL^_ ( V'cAhjB9!}0F4׆[cPLv9kXǬPesUZTuCiC#D=76|h6"Q9ҳ?`KJEȫm( "xid5 @ 9qW6own[SןqW?\=UyOd-Yy!6in6y*7Tɪ k¦xcrFhdDf\26 l{JgզY8oKcQZ>;:ڄz,s\ G-M3YXjr>9=W߰c30X[$AۍiwB]3=l[MYq2$P3C)'~лyvLqOUk 7a'2 _`L=/<)V"zCv/-R ݶ1rfɸ 2m"eH_}*2ץaa'&ԛ~d,ЀUcE*^,1 Wտ*[riRl ; hف@- kXY'w}7{li*׬kLj[$mrP=-\a0kmHlBx vžtX:|;xjDջ=5 !b~!G3QXP7. s̴ڎf`&)S)b wMɌ &"Lɏ1Hu?s9-flp6`lPToV{u:,p2%:M~yGC Mrf}30a˂PRܰhHҲ(芔L4,*X2M]z4rG1 Y'\]#vVH7")WLn3{QpʚޜZZj4_«pwWB#)N B|gW%m\sGmƝLJ9>|+i_qCQ;eo??ґT}ҢX/ߊ=b!1!)֔ /f(^;H;겑hjwtw*-'txgj9u7HnWa H wIX0*ذLn@؀ڋ‹|)}Fϖ'(מ"eeD"?LTŅc0dI9kZ&|;HuW1?/f2-bkNAa¢jgp.vlHj8H5W2.6^BbQ,wQJYbEL,48ec68IR =T J 8Ӧ;UsUVR bk yOFZl Md `KC-ᔤy͒jFӑQ1So#2p)ތ3::H6yޙ5S]u* \@m/#ʆfFөY84 }b`pر%v@(_]ՙT`d Y/n;=+Y }┟c߸n~!ֽ )DyKs*QbLiAsqf X(iHԦ |M]N$ gd #vq|tIJYN421Eb6ALȯ楤#O'li 5yDG!#,[rz_&2 #>xx l˄""H}Ff8fT2I]WbqGw}-'~&* rC΢m~@6F-2yfhK(W[;~ IVӖ %8:ioᙢ"P1*2t43)P\HءP+tGR._|ʿFODś 9aW"7R1*߻DRL;tMI>Vp֫z C4,IK˂PG\Q6cWn_ǏG/b|;Yt;w1*(K. U4l&.QaVNsR'5"jl!a2 .obVB7'fL_iGrHbo d6X|=+vcr;(xգC]'a0;&"}8tyRa}+cD:)LJ͟8~ϡU/ jó&>R3^Q<:5nֹQ lⰾGY嘖sI-4;Ȇ =*u!ڞ$G"[IAS_UϪݷҴA8M.jė<$'k`UrSw G1FOG~\4˼u^BQvF|.Eu!YD,C.O'HXV4c]~e4]Ib܊FT<F.2g\ clQGPr(r98i9o q:|5_<@ 0*]}fU:t(Q {F):pC7{^(Բ Eb/eC@jCe̖.pt:#mw)aTd XDϛ5z5;vX8d~P|Niĉ+n1_aP(Fx-gAci`PL6tnHba$N=1͂<`ʇGѿ^ƭJ<ĺ Y^/)~T,@'ŽpSG"j ы yLl[O}v_La)fkۛlotzS :# /&> ;Mw&HlaBr_>=Lr0.YUE0wbAkp"4xo1k^򎡮k&6ȟws$`\x`:8Q͔UP|t e{U~{.魩0Ot,uHP0M-{] E,~|iem,]0I[8\Rv: 2"0t"A$]2,Au=8g/Fz3W5홱ףx*: L'Kv_ "UKcEQY@?f.*^3_(xBwh#k,FC|cރzca&]C%? *,eHs <umƻݥKyRb7]y$K˝"H)4'I\tdD}Q<"E݋NqH efOr:I VqDL:w2;eS2xttSqW*u1Rb_/E 6ޭ Bhhj:ziBA"ȍpJ\X 7M^n QNյjHyJ2esV=~&[P4>w!ȟbYxB(S-ᚬSU>k[-c܇lsU<"]A8wZtrӂqgNr22oNУwƇgJ 䀲ڡH%WS (G4sAU%aРr{ n!PJ˛R?dT,TYT &fZr t|%Eݙ!4 Q]̛z`}{WUڗZMcye8:&A8MIYf!)P\CƆkfpMNv)0~oEǔSB࣭b8 PM0hc>)MƔVi_:1?t=ӗ_HMug=vU}BK)rGQnHq*h*}p(Q0z1e*~I'-zl."̀+?wh&b #DQU vRAh崯=\ɢ S?bp#$2F#$`Tӳ3Xa[/*`(ӏҳYt[Ї=Pz"q*\i–M˷zƔ wsM:a[]E t&-Ws{ʮ:zVG`t6p-HRZ f2ܐhm9::^lُVUWkm*`<8>I['/F1ȧ(ԋE K=x<>n1,F+Άͅs] &(~|n0kwmR,'r'4Zj>ϥ\~qPp>;ŏ\y0<&γZ% p[Ty|W~c;}Ysn 0LV>#`KLҩQL[nk*2q9d٫VFߘQ5J@ 4B-U.%9XT>EZh:HXF&8mUYSݑC?|j$"m=ǨpJhac0#\}nxAвI9 +iN8?flUp.Rf+V' $ :S9OC"_{0!-їb3G_J7H)A;`ꡱqE Fnf:ȿY3kEiQ~ū{XTWȹiVʛ>]N|mrϖ/ԓ-c(4e>(6 }@{PM 1Q"3{젥I"Ql0ϕ' NW69VG9_ ;4_j+De`,ib^z 7;~pP,PGX"iFq)>No ^PI/m^S:Q|'c<)DΊW!<ټ`L2 #0Hq@oCSA ȣBZ(ixu#/Jug& 6=mIϧUkuA]$$'u(i8|7$2ƻ#HGb=)CX?za_b:f'D%Z~Bohh(VAudb-|EםN"䇑MpeR,=۹Yp*,_d{kM{CC{ wu72:,Z-."+f^H1Y(שJx 6wDo^,"7*2'8F'N^= 2َ:4Ղy?8o]m4zc2>m&JaP;AҙYZOf|-wC#1 D^B}N0 |PGU;2v6!.g? 5jSy!\"MeAv6X<FOIMjm϶;T@9[['8ԆQݥ=<52 o{ AWoQ%￧`Ev̓ǍyA.^~m՗(gG 5%A? tMTh[>>1ľXL\57Q{[5]\D) `C7kEnS-^lE6v)FRƼ_"MπmxQ^4f#A$2ir Ɂ Ѥ0_ZxOe Ju͐@9}ga…7icTuqIlQ LzxѨV95MP0lQP?XZ/R]4̫UhF({R/YD#?Zv+>PzaE"1qGHAKupiG5GU_b~c};[dE}W;.k.J64ڑboMA8~a<DXsKr: QE}v8sulSX?FVJf.S_OLGkHӪ蝰rU$IefE"C*'Y ܹAP= 8!(j:\*bWgHgd~XA5HwKc GWU)ɟ(mA .g8&Y00)Yv`lu Qƀ[-LHu\U 9*^{#&ld[̏>&XkY>݉=b:k.3GUW2VTSၦ|Q3.\F {wp'qjm4M-S@{jS)/5$JZ8U܀,ˉA5 x^L4Cڱ5zrY>(C⩗o}l*]|L,*J& lVɢEҲtGObT)#W pz`ywl75*ׂyI7U(:'h!j.w%r1.?zb EfyN-BbyԊ3;<$aGh(>oCWz>'5i1<g$.*nj8oo0Cj\YYN3ԭhz-zC5t-(K&n10AE8nY.`^A+.j{*w[,2U>lMJ@͡߸jm2S!^Ǭ!3zU]OFٲ baMr'﷛("5Eiby [ }kD<ot^F[[I* 4Qzkk蠱sC Ɯ87Vo MN&% EwaJnGfřMcq k}2Y`Ey 4ZaZP;Gҩ8kc"eۂWACUIs2[)+,&/}„x钤 ʻ;6Jz.͆T;)=^=1#hQΧM7fF9w[q"XV./uJUp,4 0#mn q~e+h~A;W*ց~~$䩡ɳ\;WbY_v=OAq|~2〩%Z3;Ra6}}|$ϡR9PѢ@n1íƒe-7i9PSRZ?'QV |OZg1A=&@  Fi*<$/ ? x!xYT1zUln)AC,i^}W3Yx2+)v!{~ Q\= aƷ^($7z%Xݩ@n`Q #9MM2TgfL/c0g ]eOYEP4QHSN]j\"{ gd^1i1߀ɍ#xB(m!B R4ɿU(6F`HPvߋ/MdCE1cB<%&F e2W VBJĵxXSƟhz5e .u1WA7#*+ T!:pPFmV Ψ)=~аBAp:7kXOrpt0 _f\ P(zdOhH׋ƘXo<O1vpy~޴*"@&7y ~LOE ie"ϼ jv JrF엹>m͜v __9rXAgF+(fٕɟ?jHҨʯ͡AFS NgbsEÂڐtW8`ZjILi^sA;K0z37+xV* !ٲ߾^Z['j$xa]Aj^\~p[zM=Ӑ3^KFD.fs}"#MթvZ_vh=ˀr 'ҡgf]vF7,?-i:u7lFچ\B*n ]@,CF.VޒSc^"c*gKw]TXcr ;΂e[4ԠU ZH`q{w ȝU6wv8Ҋp"@qn;HKL7× m@@YI>%P٧^ɪXʷ,X<>S#,'"EF. HW+^N &.8ETǝ#Yc[מ}Rbm8;){>1qu`L&mCADq;Y]Ȟ+Gݓm?pGYS 9j!>0 6bdȷ~d3۝hW<\zc[FX89,dXK{a]ުX$عąZ',M|iʜ~h{c2:~-鼟qN6Obw+uj%)Jo8)lVпoEuIe]2/#Rv=p/<ܸ_;CwuIP]c*0r*9t\r> Yl3(M|l#Zp?f4<niK5f s>"<0|(w>Io47,3N5+Yn]J_}QF}Du(`j'{͙W H=]̐.".V9^E:t ed n›!kS253㏶Hj3xG"WãE~I.Rah~b 3O(*猡Qf^PǩE ^lgzL5h-M;P&S] z.T$Β4fXx B2'pa`Z_Y RrP2e˯,KhYjX#}'lVp&<û)hL.Kt>5_b IiݭX[Ϲ\dMg82 Z DњԚ : a][gy5u[g?E0_{͋VQRG|JRki{YIx7}lI;OUD|<bae=.~wྦྷٴ;~0z(h\"[38(qrI2=9vE#2k@ H π%kO=Xsqqs9A`W[Z'.\}#4z`%ȏ;8_c+7%ܲ]o]jnTHlIih;MkIp+r$O WXV~oQd|pvB5#~2fLHY}U L1ܜ1ܡY03ӔFXJCFzI>';`4` 8j8D:9+ET( RШ~oLZB#ō_eKY mu7~PǻX~R]īRye0y4r/+Ge΃Ƒx!n6_РlɝH4}ҲwaVLy^z`w"N]IJ}d.x%i7z܇Vĉ?f*oWP/QJXKv|Q+e-˫.AZ.Z=0)X8vSu5j [ =xg@ (\95z|kG- 9u~A[/(=b^ۑ)&N#[-:<Ѝy++oo0$Ŗ۞Jmlqx Oz, ^hQRŞT"R/|ˎ>"熣]/5*Am$Z;# jٕń/}2RWk16XM|$7[zbv;ؘF FO˹Ai:l8bBc6a`8$\frzU2|.'%%u O6 2jXlÄԑ#m fгmOX8\Q*7P3%P)e辶_cC|3!綠_OUI2/j-x0 ?UE҆f`Q?4L}Ji4Sxn [ yXNfKx:Ķӡz<郓<;%E.U9W׸Hj-QXHhKM`ABn"E('n,Eq2փ0.`h][6`-Bl%t}ɸUv4Y5s^ټ6gJIT~焜dgIens5~ټC50 *(W"͝\:gRمCY#R˰ +XmWDz+&lؑdSo ei 9ՕC0ђy!|-M ?M.*x1GK88ɂ11d`|{I)26o *H]?Oeb-nZ_y !:ݲu5{:YJN0I6vwG(=u~i{[dzqMXAK,vByucsM3WE-ωgG(D`ԕ_M Y~ךylU#jʙSV7J"+C얏>ѿ۔_kEܐ{8MSo{j-r9ю 5s}<1+QR ܷۧ(koAm+Z1-m2{fFVَS' ޣg'@[冾r4 s+l`񩦑#Xژ3}}zOTZH * f]Z>_pl^Ŧ]i!7JCăm,vH0Cc\|.QUϝ[MU]B쏚_I}Li>{,qg\NTQ/w7VŇ{2x?éyUG s7l[PV{ޢ񏱻7?ojl/xDKPj͒N:eÈ ULN4R|Kvz3/h =8ɾS_:3PI|L:ZwCH\^=aT'J;xQe4FDP|61lXH-SpYJyuc% й s7oT*89 O3tBF\1itSƺd3Z* 촣nLa[8)c,Mfp2[y8Q%]6_Jk&+v YnT)u%z%]ξׁU k%{{nYW SzOi8y,A! %6&8KM@(OX3n\IT>t6VaJ#( ߓck{ܷ,5ˈ[%TnJiG=yqb,uƹUDmV~i7`jCA,΄GtWVd` ڒZ۩H,{mɔ{_T-sb\,d(Fh8Uݨr`{' _i`Ur3QX1 kWi.T!56g"03x"0@x1BpE] @S8ww=[I+`g.8!|095KH%7Ts1k)i&nî )k|[A7*6c`jNH$$ntKaSd*pn2|)&Zy/瓯AXR+s\Lj.$c!OuND%+~Gׇ_oYib&Iyϑ50j"51dtmj޴vՃtvXǝH#!J$r2} hՂ䎰 zZiQ>{d$EFu4(q=73W˕4UVJǾðw cӢm#wL,ڒVV=39H\*n[ v:]6*tN,J[ 4{:6-m,xIɧn{q#Ma]ʼnAZ6 5V#e8xdo%/206EJ 8}3!Sob}I/mH{țE(F͕z֙ՍAWq8էr)Pa2z0'J魵G½۰ɯWeN h yĿ2S4t(LY( g+"})mW1Bb0r^4b@sWJVt Q=ilW2bj_7WҭcF¼&k;m *1Zv0u?\]-z (/),R 7hʐ=->C4=OiFgtIs)TVϥ?Gi:AÿD/"Isc#eV g [p /ݩ-GfoHhƠ&7=tNA4I϶Q7FM@ 42Ȯ;hWKO.\xIrHht/DU#IBYH*pL=!tUzRu eZF< %y~L_N ۹"/ԇyJ\zj,\[NdFodjSلVZs-oq~\jgQkx#i)\ 鰆X`hgl=Ho%B~ T IYg&#p1@pd'? QbYe!k <bs\,}h)e.Y@έ½p#SਓGn7:!zx&L3m.̍,,8$5+:p<Irڕ45p3SCZ`5}OD猿XԢ>X>IBJ+.<?&~r3Ӌ"MԴ1A 7A* JW0iDO48uŏ۷!ԤNJ,[0A$o\"#;pw Z1{?lF( bF!㽶SpIk4c 6 h5)揩-?s C)P46ݧC9u/ѓůB_Ico&g-+r>N8ж -Ov}zTtwqrBt(`tFIjuY ϖ˼+4Є~cy eiPZxs.x2KLB٬z^BEDS+3/|Ffx!QLRt5AF@ßU2E:̆h4xn)*;,^zYx}Nكjj]G7P *] S\V5$i`V l:ctu.0֟5;p=H~/UFC/5?9J NN,Y7$Xiʉ5FbdZt$JƼ o?Y-=ЍHbmlml5a0=13zmd%RM+q+~Z D$wrV/H0 #!Xjgz3I؟!UQƖuy1s۴Nak*/;ePk-p"koD ˨LVFC"pf5i Ӊ:(>O~]޸Gô`HW,ePSռaوB}ߟ$YCzUdGX,4U  e$i%i~k)?p+j3)$AG6T=[ʱ$3Y0v24xy]E`z/Xv1gv&L8M*y<!՞Էo2GNsTɫJ\."^5(g kCt9|l;452AWMrͭ ekS\Xə.o`v'"5+rA h"HjpOVwX2j0w+ 0}2Lw'+a1k:OXAq duVVO96B1lN4[saݜ C2*x5: y?tq l543LGK/!>6L aJ5 xES@(̬X?e@@E_xMe&͉Zhp% |c 1{?lu6Fgi䶕LZ+'AC.,w/uGcy|̝yR^~%Tréc8xd5SSfpz aWhfz*FkZB0tnqOv:=:o4dpze=yinRұ3 fS;|K?jNHcPWiCG`s dlM4s~`+r[3Mz*bGFq \+G qAGS篭79+wJftT_Bwx39ErGWlJ_ CP:cńk^o@a* !czȴBv<ã`)Q:#7x[xS)Թ }a8XTʶWQbha.:~~@MjF<4魌[K[pYRXu^,mʚY]  gHA}ĩC+fkΡ < ݥf AHBzFxK+YD/>=`Ur)(W(҇i0(tQ2'Ǹpt6dSU146K3 ˽:"E%[O&>Vm; #]:N*@rz]ͥ*Ogm|eD%:M3muEswA:y ǘ$}qk/k!KWjdru | pQWb<4ش .hk~JVa S"GQ\DiMG{c6su>x.笕-^/:0$0zbFGL{q{i,)$3B)wBI&bSTK&A/ r-`4" e~6whD0=[sw-jI+Ƶ`}iyuדBUkx&1@/eڄM2d7 i$i"ЃaA"(]ʣd!'ui\9N5EܒJ(kyH6 `0]>/Yzxi 9K7VVq\6np>~agN3el~5\˺h"UOCy bl$L8QljDm.|`4ޝ@RϘ&0~>MU tLras/Ѥ Bi7AgZϕэ:.l mG{FJ@覞bl ckjDb !HOu;&!ȹ0W*% F5>g?Kc4\6 D7@U1 E"=u(xiƝ}=Pb=ך! _O(zzZLu mn܏/tTΝM0r/7[@YJcHsfH $EcX k[kuxPCQJ*BMzNBi0ew(^ c7Az&hCxȏ{זgj+γ2$94 mRNt Cg`Lظ?z}J'S [|a:Un7ߚ"Hljx)I7*Gߎ eDxw ^QzX J_m_\/F AmjxQ"KgcTv ^^Ɗzrk T`$C o;; w?Gʴ<`s7}P`b6!xA+qDB}#U"y?s7rΧPK!X*}I--]Umb}mh\s 0eln9YKHTylKcC 7M ^ jMxoqb!_cvNe}"@E}Nl{v& .cfY>%]%%Q&#=\1RXxD,#BoY_bl hz z57|(ok8*h"wKOs9% Ηv D,_R$_%%`cQ7Ik=拍P~@q%\6BP|zͬ=҅7WW'F BTudLosdJD6Xv2jX۴<80]BکK4x/qpUcÉ?y=44ufe ?z+kcCHky&uo.:3ͳ112`'OJ^SSEEh8?ݾn3[Uf%;4 Mw69jkJ!6s?8 ~o|t&%veV dȎg\E mN$ K$S2DkoFAP>z/9at~)0) 3*c&Si2:Fq6W3HԱD{dBQ`x&QJ{w{+"L{ &3I0ffUNߍŐ') J<(,…Ȝֺ~v2}&-Ų$˦vl3_l&p[,Po*EV#CO)lSEUӖOkt[(L m:15ja;h ńE8c@(L㲸(-Vo7Sڞ:w6.jW?zYqҘhJ: N &Bb] .WAun7âI[y"f^b@/oh}L Uylo}(8DCN0 ȜXm:x "hJF0;gsܫ-;NPREeRm33ӿ UQ1zNOgwkʮ~οB̦$6RZߵ{1N3aeTjmԇi8{Ef!J)HdCޙ$Z[4XY;.$o]$d{-1lȯb%$lԉWH) E܊Uw(kn(x͖E6N9tGl2;{7 "cQ dQܾQUL=FۓȅhcH:nJgb?n~A;$|a  [mFz_/p^qPGLKAKcx:zeCrLG#0ǑVHgߊ})ٚ ^5_7ٚ-yN(|g3*j@beY&!j{;iU)8_(Yh=0dT49GM(gT} H@h r$X$ ztñP, X=u/8Lk5g C!.mc#;~["AqkQu^Ťg68TCnLcLjϥgȗ! TdSᐊ`٬ZKsƋxeu֨͊ 8!t]8ߏ)'M?ҽ:ePQM" #H40N:SD`[˞kִ k?_"!:|u$`S,/8MYetn]2JN ݨG1+=klrEVDlV.ߌ]2wpD)S-!3@K %&?*ԭi,ҙ~(Dk# )|vgXgs@ɫ7!SYAp N8F/*ˉ?$ X稹<sj#:-s-V vvs,Z$]딽DH0q="f&+SriϏct-ͻj.Yi4}L K,GyS|t4V,05Wt ]dӁgYbS)dJXT3JLZ,Y}ط@;B]>ԏs ֹ6nj+6 FWjm'iXovHmfgJj$b]|1#쯫7fъZ?mxL\^A+Z<kz8 ?OV|a9lg ^<%ӎm}DnW|ĮVo ]0)»o)}a8~mnh31 N>HӛyQGVךKs X4EӾaoU"Zz/You~'a/Q_&AÂlP M#- e: "aە14fՉdk!]J jS ӍF.!kU$> 2UǫyW՚MA,1x]Z_n6s!q'as9!`b *LtVWPt@3>BM6M_7xY%Li2ՊJ\Z1QuH48&Z80 شIdhr Pcp}T p4/Z)"9gx5[#'VIr s%3 _v꼨6[ \=|x9n3oxUV+hxø+1ncyE Z˹4*#=yx xا,J̵w Bش0cvkOT#!)tPgǀ[bޮ XT-#F.TA+}'(&|ax7svYʋ~ vZSDugoI7P\GMq^vk*; 9྄:--KQlMd(Xz£O4Жl{^ʂuˇt[Ys$^;G 8uJWTrs p IӗXt&IC*dkURM]"Tzu~9x'V9K:s<{f%AJY~#CqU݋7N_D9nGǶAԝWݐ;R> Kn{v.ɸ.n#j-'4Ybr mbYG 9%]Dn#a<a*Hzγm/(7f%@V,*EU(^8Yyƾbf$LH5QɫUYыњ~ݢ?&ߝa~es:fBxa VtFm9ZI\,3S7057KÝ,m{ܹ܎=/Rhmz֒y!NK]?Ljh!ޥYBdN)rLN,ǼM?뚟{_oD5pDyboLHnCk*ۊZug|,ey]x9~mà{ 4 ̩]; 9ԫeTv1fG&A|IKztP0ekZwX "2BSPdaӋח*H䌛e\|b#pzsT/IwKcC*,['W&&TѝhTcRn'`p:KU0ߞsNrkM&+꘠qrBU`{G? G/5 FkXH1 \m,vf&PjD$YS#_-E?{l|{qf?<` ե%3r(r<]]T>:2סI%`DE/|YOg^(u2o @MV-T 6r^}^Y;݇_ѕ@ Q…u0k.A-pdk%LV@qHYg?:B"Hd?P%vb6;L@X <O׏^}`>od 'hR]I n_Z*EgH*sر ,LLL7>V?CkdlS<ǵĔohLC؅h Bnz}AXЮwE" 1,*bT6J À𜤅gWer=Kx`%CJO@a&!j@lj?|c[INUK]g6TP g~;=V(,'bɯXPPG<0vӱn]vLn a% 9ŸTW9Hˎbƀ6>` -d+mI6̟R-LIP܃ ziVwd ,7ӝ+縈3Y-:%kQ⫿?l<æ$̳Qfc;8~Kg=Ab8yE)~?_oC!W΂5|?O!5Ҍ.L1OA瓝ŕQ||n*W:I6L V~Ə]nbQkjwgmKU'\t탁b?tw@{la؏&Ee&ְq- 8;Z<LV̤D;w3[]aDSHs`eƐ_*wM\?9FvyFs'v溢w7ʌkgCJ;Pb#@[ vF"=Lu<{wb6D> IÏ:oaF[\g {Xcncxk,ici E b!LN ^5!Q þ_k, O/i2Ȣ?TؿI) iPʓSb"4ۆAS )E S`;|93QTwL*1N1;[L3ˋC@2abZEX_QUb7[\dh|idʫ2hjM!E&Q.yU}qÚJFMB nrC@}z*i(y7,%zn?( GilGxm׻!{a 2%ېp;{1e =%Ji3=~;);nCѸUsשMuR!T}1@"*>;f3#JjIbُ {a#uB4wMBktU2с oJi\͢%71n#Yd9]e'%T!TQpj cJO~l0H|Rػu[4q`,3b֞m{1rkz+`?M(Uq\2A#uJ}έ{-P!UJTXT^Ѐz7ݶ 8C 7)I8LJNw%PIY+ Q Ac0cH#fgnIspQlOBɴIكU׳PyE̱?ɂo9ظP o˙r9V{~PDcŜ +$0h<ɓm^żaJ\{tLF=[G RTezoyGiώ0'S 8Rd;I#Nb*x ؏/FP*L7 T bPBL31)goHZ?*2]694N7urЫZPk14/Wcl\|LͺnӮB-t!+ǏHU\6y5hs2iWa/;8 C{YQ|ֆgDSItL,Kf*$I±Db0t8ĥU )*EȆ .lj`!QlZ x 6MBh5 q.( #s(o?mSr/-_h٪Sukf)~yY4鲕[dHF[!CId{t]{LHb^[sj][j+9`3S@Uo3LkRer$'`1,7I٠a^be*]+bp6}Kw0u1Apz3.//P4|PbtJ%O}䞛F<\)b^{LZ׈b 'YMB؉3l %;ojA`/ ƥ`?BԜTS8]lJ7TFyo(na:M~͝-FޢVŃyc'ET9cTU{ό‘{Zf'dh-R=qb)V#ߖ ټuC1,q^q&R[*si&6ZksdgOA,[9iHarʲ[pV` )O#*IQNz!eGw )lpfGB9\'IK4&bǟ[$x2ڒDZhע l4w{~{;HbЕwQ@=Қ^1/ǘ"=F!b208I/{![k9iOL+Ind64s-','R^Wks,T{'/Y<Hl5G[xpg$]B-h(R]yɟz|PD+O򵼤!qCG95kl7XR=eo.0{,LSآc$%.'$=&Uj|vvd^|GE%B[;ql HR\XZO1at2=1ehi?On)|vzp PV+ͷeI *I2ۄɭ8^HP <&ĨJ~yE4- a *fu66\1u,>lHY:;6bF5t No-y߱U,gf AW5@dG4eD?m/a2Tʶc@ӴjqܯhY swT #+p.pJ#ɝYy`Z06,aQ#<+]ז6Fdi_`G-Ϸv4o23Α(}\7ޱt=VNLlNfWK@M6IY̆Oj^c0@CE%'Nӫ+rB(@O3'R+]U Bp"t>R7U^5 S[ed\V.28Vt[_& C @) ?l:&ԤYj?DЗf;`)V=7ئK[WDTo77jL2EvI+{HP-s^Q=ZC(/뉁J.ArkcӘ3'alQԟۭi?QY{1odw$T Y~K6rnWHp3`@~!I;rL>2wRϲeBhh~au&~^ɃQ% 1s;bahQo6f➇ĩOA9ѽDR;N#zF h@jvȒ:ȔLɞabƛ4G eavt~[ 8֡||@=Dn\KrÿLCe6(S!*)2տM˛-04)!~<@X@R xbm'yИN~ UJbK6e d1" ˜KR Qs/T^BBy֍4`C.ꠄrrj;{<S{SK gM7sN̷'Ss@pAJ$>wתeH`?K2-7mY@.cޗWL D 죳(*=6edE.ǎsYxF7/.Qlm-29:I/uBv]^q: 4bUuIa\ 7Kn6_#; VL`dnͨ) I-w"e湏z0-t݄"v2: Ph"GI+4 Qck' 2=B*2f K[KsJ+ ^AcwKPeT($'O$SE V_5Cr$YQ,3/`(7=#j3';5Z~RpU:W:YթOC~]&xl~FePg%m̵1 MSgT]P:xy% MY2E:B,:mBKwWD2;Zr3s-8D\ߌzE o 4 qZeQUH oע]k#a?%"rrx@ʺNۑ"x% b)6yL!9`چo+ta4"f{5f#Kfጎu;+ܢ\e)0[E'LͻIy#*Q`زn5%Q%m POL_'.s s<Z.^>ҘS2aFԒ8Y*\˨~wu<`t۩TGyN BWss ] z=m?yEhhV 9T.^ zU"&4ճz./˘TLJٜbI~go7ΑY mn7Vi"gxǿv1HGn=??/ya(y`A !])+ Gm E~{GɌV[I_ѭ.0U)F>,L j":`.N;/t2c c"-l;.֌e?tf*btdW0@~$m̵ a9fް戍( BGb觕}vE8e߾Hw\vMtqX%ɽ>4Bœ)#j#rl{g q^v}|я*HH,ehm+R\1Ěp5Vψ;d)>އS8~|@=ǚ۽YU_J-vضR}۵sJ8СoRt=/^%g<5~G~וNxaĞ1T~Zy?ߑo7|^CճЗ =/";nwV0BOIz'oZI00oǫREod>&cߎ"yhUW7(UW.$cGW5~ m?auoAk>[G8ܨW攸D}jYRdJ|7Ʊуt-DS V6P3TIs6{G[@{mp`oL2pp vX00-@9; ˠJc @?Z&pR$SGc'{DP&$j*Vvh* O$*Hθ]NjC6rU_lӌy*;z(,~FbR{- ; Nd9VCV)h~c^Q׿]/Y}]JYWA˃T G>]tiP@F!X9mZ[4?عq£hShcg0N3>\䤤ؤĕᦓ.uu-Ry!)։.4pJSj)% C1/:፪F(+F;MSh+rxUDr.|"=n@1n~.OM>`k\v2{ XB.B;8_1N)7ne%4WKemm7p_Ej=:y#֨+=qcJIXLQ-\K\LɧW.sb88"ه} 9NX+Sŧ3=l-~ ' J~t~m忁=(ZRwM TŖ%\ks4 _i"i. *;XEpKyB+"4}j ~YaC Z$AOeça}S[iL4;Bo|<̪%Y]31InK5P- 11X?FOɆdv⑤9x=˒Zj^\r vPh#-@`-9G$a1u '[}InZHEx/ vwa`_eӎ;tf')5:Z4AN.ef.øo >pYf3pdEM3KFX p %.[O,~%RHd7炻+yQb~;ƣ2m/4 !"؊kk,I^rVWS 9ΰ62= :-v }^d+1BcndRpݮ0.&1wtӍGv!}Kk11BLe-[sP 8ЬO~5G'lq n0 ..Gݩ[`!n`_I`OEH0%l^x ƒ-{7!#M>9: ُꠎAHuH؅:,Ӿ Rg"`( ʢd&)xr1zbQ uY?Ȩ'G{~ DQ2#e@&o_ QX?U!>FFtIs/ @)sDxD- ?v cA}sL"JZd@y&9YT% +SW' ;,<G9ac\2>.\}vjf jvɁEBzPmzfP Чk[5jQq&yd!N" # njC c3۲i煨Jh 'izޮ@y WZۮ|YDCݵJ5,U;&!9kh+* q6Id;^]UpWl}4:bb>ˌ3DʀI6Ov HԊʰ3Hdzqu3fhRv. [:LT":G S%U2>TpY&)ΐsMր8LDn%.<3"f'4M}:MX+k彊;\P"^?ra6N?$yr gAnV}]I2$8Zzx,Yb3hJStEEHOE]WU‚񹖜ORc9*;b:wK!xU3/]΅N$e?^,JaEU:k& ڤp5X:L K& UoưKj0JIF'yݭ2-+4&|гVG}̏۲$-AhjSu%E?pDVˤt~e z!UuJl`S?T'rh%F!/t*6(Z!o֤P Pb:†%(3aI_"'STumEk[U6 ѵ =JJц}bV3;p-Z8P~HRS%e,eS7CR{=)! VCI`Otfk]ً)fI:LzˍQ:^ǒ(|@ilQXԈ WjQ;h?/0V;k݇ҍON$nV#f"* 6sԐ* 2TE3̖\-ij%s)޺@exO0Q1Tu \drţ4 XJGk[~]ͫ7p@9Kʱp./\[J*ʵ2Yq,I흲bPM܋R2$]9 חSyyRهyDZZۉrϞR5uFkA(s!%\f7^#1t&'&V#WBrMH?A_$t_NOZ_rylr[!7X '_4"7,漧cBYGX3SWS(xq'=*WL40as"o?!\/ 6 Y_Q$>&8MhYU%_&[1X0Vt ;Rg 6m6vO@e# ɿr-7˳V!h5Eh-OWS TA != Mau 3ƶ=sJv8OuTPs1~7 NPi%!Ww͒'%ƀ>.)>N] $q/FƳ+,E 2UgE'#sW2BS$-$ Eb|je dl~땮u߾_J>qwgpN̏d1sXwN\T V&;7'I6?%]a)DU}mn+GDW*h/ovN7Ay1QfIf2;fq:,9 ~׈'ff^#0{:޺cX[()F1⽪;?0\6)LJ&7!+*c fnB+!!?Ƿ9BAڍ]+ hfSl{LَY3hHU`m4ocΚN,'f_@C\э`)b,(XUɢ >QXS\powBy"Qf bQuMI> p/͊v1V S>QvL{NVի7I 1/_z|q !^ոWN-vo0 qna2"6~MD/!(1FT7̡Q/<$G䥸/q~X?IXvTQ&o@t& A@iOAU٩HݳjA!IU\wSuلx qO:QV\mν(oHڟC!uMbp8`p˺ xr[AE%?uh޵oA_Qz~yFOy2yfC0"nzNAu 3`™ O/טAXNi-]dBD?޲iR[}X[x&E6ʎut#juN^6 u{1Y1*.gmD,\Pix,+.sB:x5Iۑ`u'4Ui0{9n iE-]tFZ'*8Qxm57V9 i> eZ૆N (\y FBbخ9f|҇7ƞZ|w[@tǬ#b8h,T7=yFw781gtGy⼱`ַ/bu:E9T@^@+];j r,k,uzHYT 8+Iȅni1h8'ntt|L3A(`gDߗea.:eH.C .ZY)25؍9p˒z ؠn'^Ȇy!^&]- YqO\ʔTBbJ6ɮN0uTAS&f۹Cɦ-0[c|y_{%ŪY-m$/\Pj[o*;6fd)OUoie]9L ag;1V&Xǔ+zlnAWKPO)˴WS _9˹)IT' 9hKyzmrkˍzvt|kS/4`Hp *4B A]4^@a};DLN?thjȿ|>Y5E'짙I%@J;frŇ2 Sm\P*L`ƻw,Eeш * u7ߜ q2䚔m&O2Iv]W|.@0pX +PWՙq"&TeJ%dRge.[!\7襅V}H5v۲ׁQ{$ j` =J֠Dڰ\M$NREzc{%%aszeW8{l$M%w#*ı%{2=!Cev>Sl(O@laG*%ѭNYI یZBZn3KTRӍr#+o$ AYP-N?Krlŋ?=M=k#"_g'& d.2O]ϧy6.tE.tC%11(W7S5El St07oTK^(A9  .JEFZaeUR X댭uYx4cխZTKcYs)y\9 XJxA5j]H4˘w`pR`E+S4KFeyn5ȓy>=aC7_]H.oJVX(b'&qCfE͇'fKze \nE1VFz EZf£)u 4GCjDĂĒCit?.W{r~ev,+9o]sWpɾsشLZ-H5ФQZ0vԞX)R.SuLO JRJΗc.;"LPJs"6:4,ql6\W/ʒˬ5jvt%+AY1o[Nh&'Ge^kFMƒN cҁLnֽ?y >Rh0Z<| jjPv3{ĉy>x堮)r.CѳY\:Gwd ~7(Tx';cz0jE2. 2؇N0Xt).ʔJ=!dv ;3z|Jcg-hôNp Υ>[=P+ Sl"ĵUzsYޘÜ@|XaY}fOdȟNŽwˣ4q}~bnҩ~|N&> /a|m B@w' DR;4o<(,xQ'xKCۿ;|@wTq"M=RPc YZ