permissions-20181116-lp151.4.6.1 4>$  Ap]XC/=„hЏȀ&MRlZQ8:W6xd0}ʐLCπ<5^:Vb[` LsYi>v%䥡â<vsRFw0g 'zx-{γOU@b߈-0aqРfWS7<='ݯf>Ɵj4=fu܇~B'6ˀ>SH H$_c{DA }qUT{eh449ba29c55f8da4bff55c7f63e7e556e23e18e41d54eb3481254c2311c278073eed9c23b5950afd0eae2bce1ed28a90cb8a79187H]XC/=„)́km#2JCNKr4ֶ QgOCQW$Gվ(Em7 QoÀ)vwv~1q% >˒E'YMOMIYJbRJRtf3 H+ECj~G6ktMeuvO{krY8Ci-cOV_^G3ɼg Sf-bT9)]Lw{-,VG!)s++L;`n- 7 /Y L>p@'?'d # B #,5 Nd0 T  f  x        A n   T ( 8 %9 `%:7%>"F"G" H" I# X# Y#\#\ ]# ^$b$gc%%d%e%f%l%u% v%w' x'< y'`z'|''''Cpermissions20181116lp151.4.6.1SUSE Linux Default PermissionsPermission settings of files and directories depending on the local security settings. The local security setting (easy, secure, or paranoid) can be configured in /etc/sysconfig/security.]X>build84openSUSE Leap 15.1openSUSEGPL-2.0+http://bugs.opensuse.orgProductivity/Securityhttp://github.com/openSUSE/permissionslinuxi586 PNAME=security SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # apply all potentially changed permissions /usr/bin/chkstat --system0R1U]f9;@큤]X=]X=]X=]X=]X=]X=]X=]X=]X=695fe6b30c6f66604218b2ebf6101892df83b7d9d43f77e36962e21814c56c6567fdd1987fddd0ca710a62521aac340450dcf8cad52af79b32e8c64f30c85e89254ecad52808937c3153a81d50810ee7e689d78dfc2cf8aac67cf179a2fdbf3be0786280d9eafd47119f5293e2a206e5a39e8ada9ced344c4b8bb9248c83439df13ac7c99f217883ec3f4bc1daa6c1e4c9b05a0172418f33192da49a9c50cb92ae0896f615e7abe7328a0344760d38e62ad261f3693526bc80e73368924be61c35eca1eb5762d2b602f4b5114a54eb6e6815d26f10b5dab00cda67f2860ca4a32dcb772c1e9949198bc7695bd25c20cd21aea565905b0975de2edeafb31d8202acbebeb00ef9fccc619e66ad50b5c31ac346b2e06ec7d429ec8d2181bc5bd2f1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpermissions-20181116-lp151.4.6.1.src.rpmaaa_base:/etc/permissionsconfig(permissions)permissionspermissions(x86-32)@@@@@@@    /bin/shconfig(permissions)coreutilsdiffutilsfillupgrepgroup(trusted)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libcap.so.2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20181116-lp151.4.6.13.0.4-14.6.0-14.0-15.2-14.14.1]@]:\8\b@[@[z@ZiZ\Z%8ZZ@Z@Z@ZNY|Y@Y˒Y@YY@Y7Y2Y1S@W"W@W@WBWBVV@VV2 @V +V +UuT~@TZ@Johannes Segitz Malte Kraus jsegitz@suse.comjsegitz@suse.comopensuse-packaging@opensuse.orgmatthias.gerstner@suse.commeissner@suse.comkrahmer@suse.comkukuk@suse.commpluskal@suse.comastieger@suse.comrbrown@suse.comkrahmer@suse.comeeich@suse.comjsegitz@suse.comastieger@suse.compgajdos@suse.comastieger@suse.comastieger@suse.comopensuse-packaging@opensuse.orgdimstar@opensuse.orgmeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comkrahmer@suse.comdimstar@opensuse.orgmeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comkrahmer@suse.commeissner@suse.com- Updated permissons for amanda, added 0006-bsc1110797_amanda.patch (bsc#1110797)- Added ./0005-singularity-starter-suid.patch (bsc#1128598) New whitelisting for /usr/lib/singularity/bin/starter-suid- Added 0004-var-cache-man.patch. Removed entry for /var/cache/man. Conflicts with packaging and man:man is the better setting anyway (bsc#1133678)- Added 0001-whitelisting-update-virtualbox.patch (bsc#1120650) New whitelisting for /usr/lib/virtualbox/VirtualBoxVM and removed stale entries for VirtualBox - Added 0002-consistency-between-profiles.patch Ensure consistency of entries, otherwise switching between settings becomes problematic - Added 0003-var-run-postgresql.patch (bsc#1123886) Whitelist for postgresql. Currently the checker doesn't complain because the directories aren't packaged, but that might change and/or our checkers might improve- Update to version 20181116: * zypper-plugin: new plugin to fix bsc#1114383 * singularity: remove dropped -suid binaries (bsc#1028304) * capability whitelisting: allow cap_net_bind_service for ns-slapd from 389-ds * setuid whitelisting: add fusermount3 (bsc#1111230) * setuid whitelisting: add authbind binary (bsc#1111251) * setuid whitelisting: add firejail binary (bsc#1059013) * setuid whitelisting: add lxc-user-nic (bsc#988348) * whitelisting: add smc-tools LD_PRELOAD library (bsc#1102956) * whitelisting: add spice-gtk usb helper setuid binary (bnc#1101420) * Fix wrong file path in help string * Capabilities for usage of Wireshark for non-root - remove 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: is now contained in tarball.- 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: add whitelisting for the spice-gtk setuid binary (bsc#1101420) for improved usability.- Update to version 20180125: * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247) * make btmp root:utmp (bsc#1050467)- Update to version 20180115: * - polkit-default-privs: usbauth (bsc#1066877)- fillup is required for post, not pre installation- Cleanup spec file with spec-cleaner - Drop conditions/definitions related to old distros- Update to version 20171129: * permissions: adding gvfs (bsc#1065864) * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410 * Allow fping cap_net_raw (bsc#1047921)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to version 20171121: * - permissions: adding kwayland (bsc#1062182)- Update to version 20171106: * Allow setuid root for singularity (group only) bsc#1028304- Update to version 20171025: * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)- Update to version 20170928: * Fix invalid syntax bsc#1048645 bsc#1060738- Update to version 20170927: * fix typos in manpages- Update to version 20170922: * Allow setuid root for singularity (group only) bsc#1028304- Update to version 20170913: * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)- Update to version 20170906: * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764 * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)- BuildIgnore group(trusted): we don't really care for this group in the buildroot and do not want to get system-users into the bootstrap cycle as we can avoid it.- Require: group(trusted), as we are handing it out to some unsuspecting binaries and it is no longer default. (bsc#1041159 for fuse, also cronie, etc)- Update to version 20170602: * make /etc/ppp owned by root:root. The group dialout usage is no longer used- Update to version 20160807: * suexec2 is a symlink, no need for permissions handling- Update to version 20160802: * list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282) * root:shadow 0755 for newuidmap/newgidmap- adding qemu-bridge-helper mode 04750 (bsc#988279)- Introduce _service to easier update the package. For simplicity, change the version from yyyy.mm.dd to yyyymmdd (which is eactly %cd in the _service defintion). Upgrading is no problem.- chage only needs read rights to /etc/shadow, so setgid shadow is sufficient (bsc#975352)- permissions: adding gstreamer ptp file caps (bsc#960173)- the apache folks renamed suexec2 to suexec with symlink. adjust both (bsc#962060)- pinger needs to be squid:root, not root:squid (there is no squid group) bsc#961363- add suexec with 0755 to all standard profiles. this can and should be overridden in permissions.local if you need it setuid root. bsc#951765 bsc#263789 - added missing / to the squid specific directories (bsc#950557)- adjusted radosgw to root:www mode 0750 (bsc#943471)- radosgw can get capability cap_bind_net_service (bsc#943471)- remove /usr/bin/get_printing_ticket; (bnc#906336)- Added iouyap capabilities (bnc#904060)- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093) - permissions: incorporating squid changes from bnc#891268 - hint that chkstat --system --set needs to be run after editing bnc#895647/bin/shbuild84 1570723902 20181116-lp151.4.6.120181116-lp151.4.6.120181116-lp151.4.6.1permissionspermissions.easypermissions.localpermissions.paranoidpermissions.securechkstatsysconfig.securitypermissions.5.gzchkstat.8.gz/etc//usr/bin//usr/share/fillup-templates//usr/share/man/man5//usr/share/man/man8/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:11244/openSUSE_Leap_15.1_Update/2d0af010771502e4e6a98c9788d7df6b-permissions.openSUSE_Leap_15.1_Updatecpioxz5i586-suse-linuxASCII textELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib, for GNU/Linux 3.2.0, BuildID[sha1]=a5657d528cb0ddde723757c71e22d0e3edc4588d, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R R R R RR R 8rutf-841322466451147db956c71b6203f449295b7f7e00f3ae795542366d28debe51e?7zXZ !t/KS] crv(vX0~ފFlH;_e "erFcvGS JIM%>kt8-z8 && ZRh4we,7u w<2= w4++e 1fuphp]5oR^YIgefz1=#d(s2L/(&Kza8'c#\$5=}a.i8B+E?FӷUi(f/w=s"d$87WN4>_'r҂TV򣳙Wfy<8* #k Üwo_}f_3PЇ]Iz#+IptO.0r#tnn*fI ZfX   >%sؖȺ8CX kp@>ƥVrBr­q dpXreg}=>2rrNUKmϕC &ҤMz&ڤn5Ế<>'z5B!P r;'ϴ.F:Oů܆1[Y#U$\g}?L֬YB"4cfBE<iHkդ$ i'+E-VIf,I,S| Rae'hh䋁í_z7 ,..X[WmEP%sEKTכIK@w2Jَ}`jis`7{6ˉ C4[珋mW Zd52prkH E]ѼM*)5ZJ K,o70R2oq\ae GDwP$^]iGy< c߂3hPCȘ2{b42<` HL:X/poiizXZņG #AQtU >6k:H)CLIbSևAs^yZX'qnGMi9@'XNO%34%:IN6Y%`sqNv z@֖MSp |i;maD\/Y̖QE΀ISy@ w[E0%Gk_kv=a#_r&Ŀ_[Gއ0(2ধP gִ)!X2tZ5YQjݯ{*tĥ+߫%!_C7 a]@1MWBw>;!؁ (a[P/_|k>~)+̼52ػ"G'hV &svp̑-;KUG% \`dA rpB\wq7E"ԼcLƗs%5>8L!Mc`ā 5gtz=PZPO,W#Ht PPz{odRiotY#=fi۵QOʎpJ1Bwa80DbV_NBU]{𪴽/82Yq&oC퐷k(B@ّQpٹlm!B܂}O0K[呠PU6ko; FW1R3eQzy|[VaZ]3 km.]8lf{0~gtsmafF: /yz}>}dnՄlnF\p'9M5#A$qO.vϯef.߻ pnr4zWS)ӂ`9DmIU\/`QDionPy\MQ,<\ހJTypxܘcҀuvi{P&~2X:-hk@j(8I"Y#)%429 7X3feL~%uTQ$hLc{N6z|YƠ@2ʃb%1 H( R?ҐIex:ͲIRLdفkADžO'"nބT%y~U%ݍ:;\w$ (45 HY-¢t}w7C5=r\6lG:c3 ȟ.%Q^5x <` Z&ӈ4=ef(Zj6T݃Wk62)t+_/9of\'CJ-N3@AqԦGRsw?sH9t✣mތ 0fۑqK$'ˉ0Uחr_((R0VcqCʦ%v2<"1ʛFpҼ3 6Yg<,H|8¨t^%;Pt0nx\ j_XThT0tQ_+/cV ]=m/N! ? Telz|g 7\^]}ƁR6Y?W4kndZW]=ud X8q$|0F3&eρظiwQ~i㋱v'9RXQH[jC6^nZ(vy+$wy8 5eY?jnTNBiiôa̕η,0;rqW ֔v%y`VL4?ߺ*@+J2?H !i꾜Ebv[}7@C?Cqv$hE=[ vd~LY5ۘ KsPy~JٷSq&`Y 2.r%\)'Q aܿzۈ\|l -0/w/H/ӳ>jk_E-y5ߗVBGjR{1#&%ocYA\eK?UWeִgͥ ɹA{\͕Ʈ,;K8i^C$pSZG(ZW}/mO,oi! LʖFK@!O ty2_i ]v(̽_2ngܢ?𕭧мwyq96 :f yM?#ypk&NoZEƦhj \zOS96h'#k 'G2xsяc-%T/SP٘ǓaE.>{f3nVn24^c~U#,Ś58n>߯-% R9엸}F0o $EZ1P-,B?f0#qGRD VB'1HqHM,`%٩Ö9,|Q uTF)yХIZ7P闪jʉO %o?!{BI=f fC@u`n<׍%T HulƿxaӾOǤ74f/|wU\^T?^HmGT%+qWO +(0ĸLnE5ji؋xYl*e掊ˬ3'6baq7顡3#v@NdMƨ -˞kdɜznxPT Uyb61Pqv CFWtPYHo3tQi{< ts42z:EK^]mN`:)i@ Y<ҏ:d~t XϲhBltthujA~2*F&) +qIL Փ8񅨇ÊlT/KgeͰx '#] 8~vj&x@n:> !čQZ~|L\ܩ\3 *l[51ќn6yfmlvGcP-I>ň"'`^n%h2x,4 DBѪBOιsKp 1?'>c^Y䲥2 ޓK%0ҧ]h0A,({fS<8 QYKg$ ҖX%MeqnVA޳ SnhU^>D>.is[wOCo{j+˜f`Eub$hGղhȌQIm},֮e^koQL?+iXj^M7\P(ii6#*W>n!O.~x.[b7rhOsBui31Y躸HaۍѧkK9uQ#~a 9d` B(xdd?XVJ>ImlFT9:wm9P~[W}%<4a|Te> +~zNj*҂_UᬾoN0!{yAVr̐ p0DuCuST0qK?Д/gֺi'ךL*S:~|LJRD:};=r3:.DH k22*h1]kE%iTHuwR*Y>^W~Zc\FيFQj?%@N]PG`}ˆ8~S^w2HxSwV{RO\|ܳثS@o o|*6T(\?FË8WH13g3!h>xl"c&Fb9=~׋o9[4XH9vX1X&Ie0-)/@so:m>JXXXNݨ!'S(_y# Sj0ϺDoyQ Ic5kKPy}׻[dEc&ٓ2+:1ǐC^O(߼K9L(,IY*}͏e&'}Иxql2haN"O\90J,}ʬaW" GCݍ| A8|p,cg͕s@d7}F*"8]Y ձ 4jv38?Sjh9s0ڦ 9v:/ۀˇm<| ڠ 1l`a_Ett9dkw#Whrz-oiEGӫk?t #<2)vIX!U?牊 D~1b 665?G u8]`Q6dASӴYhҎ`4GrPhʟNG);Ergii.uM(C|%>v*U/)by9 lf{n,A))GZuD;!_0[Su# =AP9T^uA>˲ˠYcolU?DwӍ#|gZPtdv²U#c#g8 tbu@$0ZͩN&4|1' #h/?TuA %o@׈֟eƦV4|ݞWa,`ԭD[07 TA ~,X'FO<6k7k7RKrVĠDz//z4IƳ#?ٽ/Hv<¹V6aPǜE0_e7բ_^uՍTA_FX9Dw Nc7|ncje$-jAIN:%Uw$W(dž0G wSS\uٗmUz7 GIL ckRDݩ0@v4E9mi@n`5lެҿ!ڱ-Dk%y384@/:~`Y+XT P+~RVVEnM% DL ,IqyEoxpOl_`;PГNк؁N ^3ԻwT i+8_ۨM@sN ZAsM؀-DEC~?NPhr'$JK)G"[ylĶW|q'Xej\q B2QV6dOFP4+ݏJi3:υiD~Ѯ @\Fjoy/Ep IS1jaxOcؖ%ب+ʲ.X R7 =n lB& ?Sv ?D*tfuH^ huE$Є<ʟR\@ E<[l_i;F_!6;DBv毬{bܘ2(U╦ #q(uOzdC%FJ;fmDƒKQ)_OF^h _ 0r%(Oɜ vg-z;oWecTm ƀQq9w,8 nIުD`ԃG͡y]RlqXPK5@Vd$4~j ՝eI+Of䲤~=stPOzjR '|կ./E1:/AA@ 2c7񚅊@2 ħIDatNv Pm|_$|D`#]Pai<2lA2jFxsNTKot cgVoTگcUJn=H9/W.0Q6&³~uBxY༱Jbce+:< QZW5SaWP|_Fc *6T&zBwY$UhsƂX2βZP=NkZt $z̬Rub¶RH rٶ\d-P#\IΥwP)D,Lŝϥ%(YrnlR+-2tp$t?]ŗq [=N˃R7ȁbkWݖwa$ 90hK?^,fm'{K!젎e zҺ&V5Â?O]7H1nBשdƥxnNr-'8 Q[JX+[jJ@i?`x<9h*_VUE-m[|8LJ٢Ahd>%|bTj"g9ݬ'%WTr:QܝEy9M:paGS&GDB;EFst{?*$01һU5lh7u:Ը?5x!qE>7KјHu2ow=#ڟiK' 5ZTk FL~U{}u`->Kv'e<E}jnz iްD7f"Ƥty1/3ܧ=؅C5IEY`g~jA :ձ)7䦾i’06 9_IIm@ϒSh^ $ 5/p|7 E]YG:'ԉQ̀~":0:q ti}s_j9]Ai¡hֱ F#q"jL݇#Tb a{ ț"Ʈm,<4v n3mw(u5iܳYkGJ=h̟n؛Hm v,l{7 `e )y_>R +ZdkXW}@1#:=mfF^k,:~Ü3%C+h4+P-vFeftOnMȸ`9v)|Sk)W CVD+Ki>!A/ϋQ%Puca4It |b `?I'e-3DѸF6j"q}0] kMJSW\UySv3\ ep!ݢSTHM_[Fͪŧs1"ىƴ2]X>O-^r,Q'|Juw \ c mL1 ̏õyxuG_cJwsi<RBg~LEtqA::]cr;,G-Í^,BdSi1;& ^_ Z]ۈ׷٘S {ƢE,tlH.-[VVNէc>ǚ-%Hە6(D+bB/ $[HLGm`/fkԢF2ҥTu,e"qQ@c=AL%#a^:3`uӽLpcR´a*G o7)! (jo_]Yb ֵc v;eRPbýld{}[KIzd6U<S#[''F`YEOR_/zU)F2B}RF$Xrb,m @ֿ9SmR*UZ.wq|YKV2>,l=<հP_HF)ѿSgBa.Å )JT ȥ3]$U 9w&:F\ap ՝ ՈEd|QPa܀<i2]%cA(_)& p SW0Aٙ|e Z:PJB&h7ך>RzǙՍfm4@10Y0 6'(" z8J|<! ǐ,vLv1 /߽tZE 8H>+z1wV:\haVk7▕~f[![4POCG~!6WtfhnpӼxĴ*= ^kLAJ0/SGPhR={2>qt_k9|!ꯌ@a>};(<014_E@-^ J%Tram˶ !bPЧ)TA:en/, XO'is6 1V4?%kaA"zшE^^/TEJ֗qNW7LtDF9{a^Feu7/5xAL B ^jyp2Һ9tsU\Tl=M]}iV Cs=OP&ɑ'Yױڻ۫Y0Mw !Hs021]s'}݄/j'+nrNx!xyxZi|FTf.u'q8%RMωZ/3aA x#9K<hd&p謁 Bm(;AU&/^DME| ~*}# paFP#>3t5:Rrq)7!( 3eUDIv)h 9xwd5Œ+8qp8\5`?<8ux=D ȭx]ZK "Mλa.b-gG@miWQ;؃П6R}mʛL锆6`}!~}II@ DdR v~GyRcD*(a7oQ+ngaN w3LВP[IyT|PAV(-Ú+/o汍Y5L$-u] %вTb[e\Xr/={|r߆![K&jC=K3'4DTwQt2,ٻo>W4RdHyw$ ye.(WX+u6scc"m0+0-wApG#gˀˆΆNXDWoJ&Qs$NHH/$*m=cGr1 n;6+ތXAy8r lF&Bچ+>  `q2~čpRn#g,%/,py6~8AtX9qj=鎿 P&3S(*ھ‰rU( EhK!\E97WG:@6*jqDqwq񲽣6$5qyE0P1s7ؾ{6C .=(Qㄓg)|XKc٫ Z pf!a?_m18us3H"c"Zn3'sR#{2=v!.H ojñVJ9T#3,xt/3_lHfȭ7L]&1j7B4>N1;Exv쵸;gIH]Mu01 Y *BqqHV ]sӧs< Dz2=l[܎r4TQ. ==j2G3o`K"KpNڌ YȚ @ֵ$JS6V<X?B *.K0b9s[4;jK;>U%MtYicoG7vH³_e16]y%e촘!]!wl /hi^;&JN!, ۜ@%@$_K(qK8MMH>Ҿ>kMU5ޤG.ԿPQE XūLoGqd '죫Ky=:qj[Rri,S iN1{矒v+8΃ A!tࡄa8\3_ƼLå&ۓ)1w$q@J`adӔXE>r+mYd`i9H|kn\aV!B"/ߒLU1>&l` {I-BC-¼DUfBy$D:h""DġS?,R ."C):?;P ]HN徿ɦWQ K'l G/Q:^b9$\]l>2+-flQ'6ldoԨs/&plI8ە\Ј'#Tm~,)/eSQޣcQJ{LՅ' M׭;7 lLt$*S?xIX\`r޽~ Rw` k{U2?kr:+?S}C#8_cƣBx\IJPx:X{ڊՃ\)~BN/Т~=1VARbf&8VIObeEŷ /"1"7TKݛ0 co %OXw2ݟl8<ChTj"p!2=ͿE_-eƃB4_9>|YNw0;U% ?t/p.#ٹ6h ͅb$`\TU=+/x7 EIjZkB)(o4*G{oOdrb^嫏 Q5Z%2v \tLn# D 蛆ENBow YQ?+ycxH!w vI 0N)3쎏kx49V)lLv8*WDކ%;X+ɺ턟K^+*DD! ]jm'{qgE<¥/[6h:\n j:ix%/M0Oy 5 (=2[ IH_5Ӆų=U0ל5-/AA:ca'pnfN¢(Cu: j*R7ǧ@d)s4:/4l]eв䇯 ֣iWԜ_I^a.O2ul,DuuqRU8q9_3r ?4"bFMoDN@s5>'N>KZjۦN˕fMw[FQ7gZgl_Wf&Avs?[__,) JgXZ톯Ak=c-dF|pX!KmVy[ii%^q{NV=QeՐ*#X<)׏e Z_If"gK$ؐ)"؁{ktp9h/έTdA_ If'3) ׮|YВ9-?K RW8ܧ)1gBJ*8^TeN_o"Q^R(/Wd;aaS-/ SUBigh990;0┊u~+ +`s ^ĐF ,>W{:nZOZeO=W@*FKŞ.?aZ^|p_&v붶܈ tInWU@k'S3oj]b,U1E[G%d;W3Ptn8i8~ J͊KM1*{]fB{ #eC_!Y{V{x)>\OFj#[ w̹`+GxeUǻ)utnqVZL5,*~, ҟȹ04\2q>KHX@gDi9K[/ᛍ`vu-δHRFŇSXh] D~M=NwC/D0V A1u#30 Kx]=pyq(, ~h.W5&lRr,v y cV<2 1l Pm~ut@[T(gt Q!`i""Mʵ#B j))[("}׮v@//1ڹc UC2=Pi*OL^V"Y]*0D2haL_˙4Dobf+ڈRtrw;a#5ȼr)K>y/.bwl1T&[i%$Ӛվ%_x((5V:dSc? }e\#T,znهlYͤ>KJLeE`M.LSPL`us9ڢ=ݽ0me"C8@ "n6ss- '\@٪emZ'7D L?!Jر酘7'of A\1l3nMZyF/A6_Z,$?:}nQu l&*[ eBDod`?PXXlRblsf暼R@KUʎg{OFC3|応D!s 1]b6ya ]v]߽XnN p</ǖ n`9'~(q Nn5Vm@Kvyhxh,L)?gv+Kh~Tѓ;SAC=ݎT/}8n| |6(K̾ȠXAVmhQ"Nw> gNOV^quQzo jJ~|fP,׋ <XGa6ڀQ-Iu]8Ywܡ=Mù>;ͩ;<`n>`GW;cO4%UcvXv,9c6ttqY]vg}J:ȟM@PRHgR4 -9<}/xcjp.'z#I4*'y#3cArMJ4"ې| % tEl:r^tL&ClIy5 hD s=c}w'= Ea Ƙ &-:T!`jva#35=B?p}`"UW6.e#fmK'UMq_ORYTv@t@h>]vbO1YZN8O(^D+7̴?Gm-i[@{Lq T0b7™AztJI}p6Y d'(w\*tNsz˄j!JZ8LWB؆(V''wsO vƍd5J#(8=%R{jcYBW[h *JԟHDuޮ+e`0kl^ l} zWRWе1D%ydw^rQX*qaYy"%}SY]^.zn"J[(f3^3N>ƛQI^g>j6g2<,{# Z8K+C1 wH(OB0d5/҂]8}_O9BK@/pxBb#1"@ $LG}:^e߯!q"ݕ%r;חpVP ]ͼrnhjgahԖ.]I$vPߙQ+WE H3VZO #gtު\YKz`% aD()Bv^%p2w`wK. Atն59){B:!/pIh*|4VaV (U)B0&pi97S#266me-Qi;ɐ}c]`C=#'eiv몲&3E%RIO̻R倁$WBO )HsJkv *C1 aBTL:uWq|An1,# M.6C3ΖX k>WyFH ?r~npkߏۛ I ixS  gۻ BL×VWA#xeYE֏m}[2FE+;e;VXf-z( 8 CldD2Ċ! ] vܺm784in8" ,A lBˬ3>BBܔhx cH{' CCk( Sz{UhDRNh9uܐa1 ]O1*_vp>jߨ|[ei!T](S#c;! LaDKZ_i ȏ>3֒Q>mA#3햙Kdb|_GЬsիǦрؿ/|Xeq)Aa e\p -1Ɓ 2J}'do~JTquLf G^| A <4Xw_[+Wu(hBE <OX}G [ϤEM,zDxW7,fe b{\~H.5JqIɪQJ&ŕ%?7.Q6+kp%뵍D".#sJN^I"afܪ+  .r.$DMԩ Ep$WXs`w[m|c\*fÁlPD"+?>sv̏]#fB܁6$>sMytN7ӛuIZW.>OCS%71r>ݨ'WGc`iJ5'Q׳Mdߥ/-dZ~԰4Rp3WIRrLx~LoqmWM!Rgu,fф&P^c^%vʧpQ2J}p;P%&d ;K@8%x0: "X,hzC~nx>q&K9 YZ