polkit-default-privs-13.2+20210813.1c5fb05-3.3.1 >
A a&Rp9|9 ui&Ufbo_6r jcG,hť;Mu dx
Ǽ;ֹ"8-k?\jP-pRͺ_df|4x f"fAX5YF8XtEH/%]- &@aDgR~J*_Nt2Mt;;ݕB%"h.O~О" zG]Eesr
eac919ad0d82243bff2bd0c2114ce9474ce4caa2 210fa26e209ac5379fb962867535580d2d33931bc59491f716460f874ee8fa44 a&Rp9|V *KM..l3. '\g1ަބ S9k :C+M5 avQ^+Bzp;fϖm_ gmMz [z85)4g!b
YHDX!YoZґǚ /{B3 ZCML)B{[KDt+qt
iγ s4 <ġ.*>FGϰsMZЀ@BU) >HE)F) ˴ > p C H4 ? H$ d - 3 V @ D L P i
(
, h
<
( C 8 L e 9 e : 8 e > A F A G B H B@ I Bp X B| Y B \ B ] B ^ D b D c Ey d F e F
f F l F u F$ v FT w G0 x G` y G z G G G G G G G H C polkit-default-privs 13.2+20210813.1c5fb05 3.3.1 SUSE PolicyKit default permissions Predefined polkit profiles for different usage scenarios like desktop and
server. These profiles define the kind of authentication required for various
polkit actions used across applications.
Authors:
--------
Ludwig Nussel a&1sheep63 ďSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Productivity/Security http://github.com/openSUSE/polkit-default-privs.git linux noarch
PNAME=security
SUBPNAME=-polkit_default_privs
SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME
# If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR
if [ ! -f $SYSC_TEMPLATE ] ; then
TEMPLATE_DIR=/var/adm/fillup-templates
SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME
fi
SD_NAME=""
if [ -x /bin/fillup ] ; then
if [ -f $SYSC_TEMPLATE ] ; then
echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..."
mkdir -p /etc/sysconfig/$SD_NAME
touch /etc/sysconfig/$SD_NAME$PNAME
/bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE
fi
else
echo "ERROR: fillup not found. This should not happen. Please compare"
echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and"
echo "update by hand."
fi
/sbin/set_polkit_default_privs >/dev/null _
c A FA큤 a&0a&0a&0a&0a&0a&0a&0a&0a[a&0a&0a&0 6a278cd09c272b30f4b4bc15a874a95ebbd8bfe9ccb6beda5ddedc1eb8a846db 308d3c9c973613feab8eed9b47f2170e4438828cec53b8bf89d091cd0d466985 0c4c212e618dba15950a75144329daa35b137528e179daef8571a30d8e8f53d3 740ee6e1e61199c5d7ea59c67b6eff934e1b8a608f817b7baefba64d9211bbdb d2da046f9f7d01547a18d6458caeb2ae677eea801098d80e4499175fe31d1657 f9c1a3d462d51700b6ed46662ab56ee0c61d952dee6ceac0bb6a73919cf39bd8 8a26be6f4a739cb827db75360ecdad329c22b8db12a0bcbbee93a34cb3b2474a 7702adeac203dfcbd87451073eb62d13ce48c459b6f1a58be3a6fb21fda1ef9d e836b1a4e82cb771f393d302b42aaead7b2406ce40bc5378f0fbc7bc931e1c30 65baa2b85ee7fb24946cc70075d477e37613988b73a305cda7e0febe539aae54 @ root root root root root root root root root root root root root root root root root root root root root root root root polkit-default-privs-13.2+20210813.1c5fb05-3.3.1.src.rpm config(polkit-default-privs) polkit-default-privs @ @
/bin/bash /bin/sh /usr/bin/perl config(polkit-default-privs) coreutils diffutils fillup grep polkit rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 13.2+20210813.1c5fb05-3.3.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 a^a_м@_s!_q@^@]߶]]]p]e@]_@]Ik]B@]'$] @] \@\@\\s@\-@\\8\,@\\\@\u*@\s\d\\ \Z@\Q\N\J@\@[,[+@[!@[ [ @Z @ZZZkZqZ_:Z7Z @Z Z@Y|YY@Yn@YqYoIYZ1YI@Y.X@X@Xe@X*XF@W@W֘W^@W4W V3V@V]V@UJ@UuU_@U7@U4@U%@U#TD@TZ@T5TxcT\@TWn@matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com jsegitz@suse.com jsegitz@suse.com matthias.gerstner@suse.com malte.kraus@suse.com malte.kraus@suse.com jsegitz@suse.com malte.kraus@suse.com malte.kraus@suse.com lnussel@suse.de jsegitz@suse.de matthias.gerstner@suse.com opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org opensuse-packaging@opensuse.org bjorn.lie@gmail.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com krahmer@suse.com krahmer@suse.com matthias.gerstner@suse.com krahmer@suse.com matthias.gerstner@suse.com rbrown@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com matthias.gerstner@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com meissner@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com meissner@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com meissner@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com krahmer@suse.com meissner@suse.com krahmer@suse.com - Update to version 13.2+20210813.1c5fb05:
* malcontent: loosen restrictive ReadOwn actions to prevent spurious auth requests (#56) (#57) - Update to version 13.2+20210811.0c80127:
* whitelisting of GNOME malcontent parental controls (bsc#1177974) (#55) - Update to version 13.2+20201209.96f7b21:
* libvirt: allow the active session to create read-only connections (bsc#1179126) - Update to version 13.2+20200929.fb820eb:
* systemd networkd incremental polkit rules (bsc#1161328)
* whitelist chvt action in logind (bsc#1167542) - Update to version 13.2+20200928.bfceddc:
* whitelist org.freedesktop.network1.forcerenew (bsc#1176215) - Update to version 13.2+20200421.207b724:
* packagekit: allow system-sources-refresh w/o password entry (bsc#1169540) - Update to version 13.2+20191128.c2eb3f7:
* fix ModemManager1.Time whitelisting (bsc#1156961) - Update to version 13.2+20191122.eb9cc80:
* whitelist org.freedesktop.ModemManager1.Modem.Time (bsc#1156961)
* kcm_sddm: incremental addition of new rules (bsc#1145182) - Update to version 13.2+20191015.280c25b:
* gnome-initial-session: whitelist polkit rules in
20-gnome-initial-setup.rules (bsc#1125432)
* Networkd rules whitelisted for package "sytemd-network" - Update to version 13.2+20190905.0016c47:
* whitelist new systemd-resolved actions (bnc#1149216) - Update to version 13.2+20190827.0cc2a82:
* make new systemd rules more restrictive (boo#1146300,
boo#1145639) - Update to version 13.2+20190823.a5f89c3:
* systemd-networkd (boo#1146300)
* systemd-portabled (boo#1145639) - Update to version 13.2+20190806.841a06b:
* libvirt polkit actions: Additional no:no:no action (bsc#1144077) - Update to version 13.2+20190801.f0c6234:
* calamares: whitelist pkexec run as root in X11 action
* mousepad: whitelisting of pkexec action (bsc#1143216) - Update to version 13.2+20190711.953db4f:
* libvirt: add a couple of additional polkit actions (bsc#1140151) - Update to version 13.2+20190704.dfb36ad:
* libvirt rules: fix whitelisting (bsc#1125314) - Update to version 13.2+20190703.9a076dc:
* libvirt polkit actions: whitelisting of incremental no:no:no actions (bsc#1140151)
* backintime-qt: removal of old rule name (bsc#1133680) - Update to version 13.2+20190527.64d9813:
* polkit-rules-whitelist.json: fix syntax error - Update to version 13.2+20190523.efe368f:
* polkit profiles: whitelist lightdm-gtk-greeter-settings (bsc#1135695) - Update to version 13.2+20190520.a67a2af:
* polkit rules: whitelist libvirt (bsc#1125314)
* rules for systemd org.freedesktop.login1.set-reboot* (bsc#1133843) - Update to version 13.2+20190507.75c6d67:
* fwupd: add one more follow-up rules for bsc#1133082 - Update to version 13.2+20190503.00651e7:
* tuned: add new plugin doc actions (bsc#1131858) - Update to version 13.2+20190502.37ad64c:
* fwupd: add incrementally added polkit actions (bsc#1133082) - Update to version 13.2+20190430.a4836d6:
* backintime: add renamed gui pkexec action (bsc#1133680)
* backintime: add restrictive config, too - Update to version 13.2+20190411.5775d58:
* gamemode: additional polkit action for gpuclockctl (bsc#1129967)
* NetworkManager: remove wrongly named wifi-scan rule (bsc#1128560) - Update to version 13.2+20190315.3da47ba:
* rules.d whitelist: add systemd-network (bsc#1125438) and flatpak entries (bsc#984817) - Update to version 13.2+20190315.b904805:
* polkit privs whitelisting: add renamed wifi-scan -> wifi.scan action (bsc#1128560) - Update to version 13.2+20190306.b56445c:
* whitelisting: systemd org.freedesktop.hostname1.get-product-uuid - Update to version 13.2+20190226.f884108:
* polkit-rules-whitelist: adjust format to better support follow-up audits
(bsc#1125314) - Update to version 13.2+20190225.0ef150d:
* relax change-own-user-data action in the restrictive profile (bsc#1125110) - Update to version 13.2+20190213.2f39f9b:
* add whitelisting file for files installed in polkit-1/rules.d * (bsc#1125314)
* the new whitelisting is packaged in a separate subpackage, because it is
not needed for normal operation, only during OBS build time for rpmlint to
find it. - Update to version 13.2+20190207.4d86620:
* add manage-vdo privilege of udisks2 (bsc#1123747)
* further improve documentation in /etc/polkit-default-privs.local
* sort the output rules in /etc/polkit-1/rules.d/90-default-privs to
make the runs reproducible. (https://github.com/openSUSE/polkit-default-privs/issues/3) - Update to version 13.2+20190207.9bb8655:
* man pages: extend documentation to better describe syntax and profiles
* install README.md as part of package documentation
* set_polkit_default_privs: add warning about unknown profiles
* introduce a new polkit-default-privs easy profile - Update to version 13.2+20190130.b2262b2:
* Whitelist additional Flatpak action metadata-update (bsc#1123653)
* soften authentication requirements for flatpak's appstream-update (bsc#1122116) - whitelist newly introduced network manager wifi-scan action (bsc#1122262) - Be explicit in service file about master branch is the one in use
for tarball generation via revision parameter. - introduce service file for pulling new releases from git upstream instead of
using the old mkchanges script from the git repo (bsc#1121841). This changes
the version number of the package but nothing else. - luckybackup: initial whitelisting of polkit pkexec action (bsc#1120403) - boltd: initial whitelisting of polkit actions (bsc#1119975) - tuned: add new logging actions (bsc#1118117) - chkstat: adjust DO NOT EDIT banner in generated rules file (bsc#1099754) - spice-gtk: relax lowlevelusbaccess requirements (bsc#1083025). Users already
need to be in the kvm group to access the setuid binary anyways. - blueman: relax standard profile rules, drop unneeded bluez.config rule (bsc#1083066) - polkit-default-privs: add renamed libvirt rules (bsc#1106813) - polkit-default-privs: add meson install action (bsc#1103811) - polkit-default-privs: fix syntax error in gamemode whitelisting (bsc#1104135) - polkit-default-privs: whitelist gamemode pkexec action (bsc#1093979) - polkit-default-privs: fix switchboard-plug* whitelisting. An error slipped
in that causes `set_polkit_default_privs` to print an error message. - polkit-default-privs: whitelist incremental libvirt actions (bnc#1100328)
- polkit-default-privs: group together the large blocks of libvirt rules - polkit-default-privs: whitelist switchboard-plug-* (bsc#1088472) - polkit-default-privs: add cinnamon-control-center datetime action (bnc#1090371) - polkit-default-privs: add lightdm rules (bnc#1089436) - polkit-default-privs: added liblxqt backlight action (bnc#1092192) - polkit-default-privs: whitelisting new resolve1 action of systemd (bnc#1096907)
- polkit-default-privs: harmonized systemd comments a bit - polkit-default-privs: new action change-own-password for accountsservice (bnc#1088780) - polkit-default-privs: whitelisting renamed kalarm polkit actions (bnc#1087714) - polkit-default-privs: additional tuned rules (bnc#1088648) - polkit-default-privs: some more amnesty whitelisting of untracked
privileges. Two more packages are affected:
- bleachbit (bsc#1087326)
- systemd, systemd-mini (bsc#1087328) - polkit-default-privs: mass amnesty whitelisting of untracked privileges. See
https://lists.opensuse.org/opensuse-factory/2018-02/msg01044.html for
rationale. This allows existing packages in Factory to continue building
after the tighter rpmlint-Factory checks become effective. Following
packages are affected:
- blueman (bsc#1083066)
- cinnamon settings-daemon (bnc#1083067)
- connman (bsc#1083069)
- flatpak (bsc#984817)
- fwupd (bsc#1083022)
- gsmartcontrol (bsc#1084693)
- gvfs (bsc#1073214)
- laptop-mode-tools (bsc#1084695)
- mate-system-monitor (bsc#1084701)
- nemo (bsc#1084702)
- nemo-extensions (bsc#1084703)
- PackageKit (bnc#993505)
- pantheon-files (bsc#1084704)
- scap-workbench (bsc#1084706)
- spice-gtk (bsc#1083025)
- sysprof (bsc#1083055) - polkit-default-privs: adding more NM actions (bsc#1077504) - polkit-default-privs: adding new udisks2 rules (bsc#1073216) - polkit-default-privs: added connectivity-check for NetworkManager (bnc#1072702) - polkit-default-privs: adding new sddm kcm actions (bsc#1065563) - Fixed usage of %_fillupdir macro, needs to be passed to `make install` such
that the file is installed into the right location. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - polkit-default-privs: adding flatpak (bsc#1064011)
- polkit-default-privs: adding connman (bsc#1057697) - polkit-default-privs: adding deja-dup (bsc#1058935) - polkit-default-privs: adding fwupd (bsc#932807) - adding more flatpak rules (bsc#1012961) - Added new tuned method verify_profile_ignore_missing (bnc#1048961) - polkit-default-privs: adding new realmd action (bsc#1048025) - polkit-default-privs: adjusting brltty (bsc#967436) - relaxing action "org.opensuse.cupspkhelper.mechanism.job-edit" (bsc#827331) - added polkit rules for backintime (bnc#1007723, bnc#1032717)
- relaxing powerdevil rules (bsc#1026038) - added polkit rules for renamed kcmwallet -> kcmwallet5 (bsc#1033296) - added polkit rules for tuned (bsc#1007279) - polkit-default-privs: adding blueman actions (bsc#987141) - adding kde powerdevil gpu helper (bsc#1019644) - adding org.freedesktop.login1.set-self-linger (bsc#1009468) - add flatpak privileges, but currently auth_admin currently (bsc#984817) - polkit-default-privs: cleanups as per discussion with Ludwig
- polkit-default-privs: adding rules for sysprof (bsc#996111) and networkmanager (bsc#996110) - polkit-default-privs: adding ModemManager (bsc#976945) - added brltty (bsc#967436) - add importd privs as default tracked (bsc#964935) - polkit-default-privs: relaxing firewalld polkit rule for desktop (bsc#971580) - polkit-default-privs: adding libvirt action ids (bsc#959297) - polkit-default-privs: Adding new systemd actions (bsc#955626)
- polkit-default-privs: create files with consistent permissions - polkit-default-privs: adding rules for cinnamon settings-daemon (bsc#951830)
- polkit-default-privs: relaxing some ModemManager rules to avoid typing password after screenlock/hibernate (bsc#948728) - polkit-default-privs: PackageKit (bnc#929212) - polkit-default-privs: adding netvisix rules (bsc#930195) - instead of auth-admin, disallow colord management for inactive and
other users, so they do not get root password popups bsc#918594 - polkit-default-privs: adding gnome-control-center actions (bnc#927508)
adding realmd actions (bnc#916767) - polkit-default-privs: rename of powerdevil action-names (bnc#927275) - polkit-default-privs: add urfkill (bnc#926288) polkit action - polkit-default-privs: added gnome-multi-writer actions (bnc#924062) - adding storaged rules (bnc#915770) - adding KDE5 powerdevil rules (bnc#912121) - added firewalld (bnc#907625) polkit actions - polkit-default-privs: adding _keep to ModemManager rules (bnc#900813) - Add org.kde.kcontrol.kcmsddm.save (bsc#904313) - polkit-default-privs: relaxing pcsc rules (bsc#864178) /bin/sh sheep63 1629882417
13.2+20210813.1c5fb05-3.3.1 13.2+20210813.1c5fb05-3.3.1 90-default-privs.rules polkit-default-privs.easy polkit-default-privs.local polkit-default-privs.restrictive polkit-default-privs.standard chkstat-polkit set_polkit_default_privs polkit-default-privs README.md sysconfig.security-polkit_default_privs polkit-default-privs.5.gz set_polkit_default_privs.8.gz /etc/polkit-1/rules.d/ /etc/ /sbin/ /usr/share/doc/packages/ /usr/share/doc/packages/polkit-default-privs/ /usr/share/fillup-templates/ /usr/share/man/man5/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:20949/SUSE_SLE-15-SP3_Update/2d8e7db4f939027099ceeaecb0f9ab76-polkit-default-privs.SUSE_SLE-15-SP3_Update cpio xz 5 noarch-suse-linux empty ASCII text Perl script text executable Bourne-Again shell script, ASCII text executable directory troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R R e>5'# & PolicyKit libpolkit0 polkit utf-8 e8eca988105fd3c49d36879cab4134ab3d8e496f8371c6a6def4f1cca9822b79 ? 7zXZ
! t/˳D]
cNſ^J0htá\!gʩ#Kw 6R+FH~r9`w5 'pxgRe
V쏈$o R!+EQ:=\;&߹ 5GЉGyYnz {λqր`)DJP;ۼsι~j[ ~>z+a2\bloBǃ/uktbZ&St LSպ̚ :=Rx4yCU7ȟCT:O!@[).
iy9./PNDRyqׄQ@3j&!t_ kcMȇ@A~&&RѽMUQiB |+A>R M#$xpR'^&"^e\XB.cXRgVH"J$G=:d
;;_=.jWQE:O H4e{c*@,L|LzkR"~\Rn@K<;+cπ3O/C,"CQ }: ETGΤjn y0*AANQ{m z#Ļ.>SPeeʀڪüT1}he.sm `y6 7_+ }AE\P<@"q# EdkRPy!go|Xrd_Myr\"k_Vkj';Q3)}>N͜bK9bccb쒨(aɧȎ.As /oUߙ-rF3$l);5@jcvQ Z`h
klV dPS_oa$e mjvN)8Slտ4Ibð6 ]ߗNeshDdN0Jd t$<}$[e:Mb|V
vVO
ps`ɱvaAA-Gb>T0
Xp\=*%TJCxLvs-:XDt^tha>ªh
w筆ɨkL ҧ(ٵqB;5%kRib& F
ixR!l9DLT(zhD_雃vE8(| 28^m{K<5#L?F
mFrp(f)?LuQbԯ LӶc 9oōm6 FCdžq90+p?Z ]{6yN4ֵh 4>z`S$zEi
D
f[Ս &N_˟%h` K0uL|A 0q VsҐ 6M( Le| W0d֯4Žb E!Sڮ0oGM̦Wa"s "<6Jyf1{M{|& pS2x"Rk}4Q2@"N z9 lvc y-:] \*pt5#\9Q >D.[_H g2'j#)VA佉9{7,R = =!d>8ȀvXy<P& w>GUig vel-&M?{]f #!pbX\z Tc ,45*MJ8Q|KC8WPdV9x_ΜI _@@EY,=!*ҍEv\Ϩ~Pqg{ k{)Z8S4x;_O8S4RW\JlRD+RXzn&H 5r VV[\jTZY!%%jY[ z6ƭ M {jhXJG4lncxn0MVZ987'h GԤcÏ$ɰ6;R=(mnEZSL` hF_ ,[sU
};Fz i*Jvs\j F #)s0`bJ'796jmJnoi !4H@ o6fS 1 Xn3EV[gM(T,J6w/K#醅1P+.
}O=̉y`,-TY _:/'B뭗 +t <qE픗 ;ڊ
iFq{
O\K {qEp൷A-@XP)*oR"Pkz $qiz:l gd/5I7LѺ|u gD{U˯yHiD ڒx| kBV݂PSm; _zj9ځLjFtqs0YdVrYe^tQזC[2ML4_qZkrdR \/Hv"fެG"CٳvV<|z rrE 9jbKr ӱLzi]ђϣ NN|N]J>; rS9ҷ+inA60H"V
r_hҙw
툞p C`njYd/Y]wNpr7m;w,r:-]%ivdTժ,>3zVR tOOY]w G3_Z7j}{ 8%5 Ҧ7o@{ dFX `nDŬjj9w%Vq:]PCиY:pSnpY Ō=rтÂ~an''Xr{FߦZGI35437T kڹisX Ni9Qb `pe՜ÀXfJN~ +Oͬ1|pqt;4 D0\ǣ Z:<ⲉ'2ʊ%&|bʶ6)A~`DQ5]fS 's$`-|v;H9<0!zS+L`}֟nnmQ A"%տݲ">I&щ$U klJnB:n4ҰƇG ҁk7\v)a$
">0}PP9
c+.fiP^av9?p]߮dF{ќGpt ^9$ 9W~]=<`]-% J̕]o
# D
{ @`$J~T
;~IѤKp&N,R O%V $'5`iKǝ+#ơlLZzF!WYՒ*-Fz
ƅ']x DRIV79+uIpS\3h ;H# rͱ[%99[#lEHi5ڕK mGQHRBU=>mxH0]udAR?2B_J Z.!b]3Y!JvH#`S"nP:kQ$8[yE-.r(&IMc'ax~'XdU!_igyP~~+÷EŶ˙ بP¾A P2>6މ(~K
S¼['=BunJG.` @i(G6ihB _yį<ݞqxL(f!/.B iqm*Un;R/&{j^kɘ>=MP-9X)`'=~ֹk.Z7Vއ 0 1w eVϰR 3nj*|Jݕ 8 {:+* ߨ {^rr(%6l 6|qȰ
&
Xыi > 'ķ Gԭ Σ
τߛ v-H8@O`)w;-3ʫW5k`+ 7@ CP-Zz%!f7eA' ?uht {2RuMNݬFn%yx*e70Clo6;) #OOTo b̠]pCY疍J2 #`Cֺa1[=d8'NS"+֛BF:20gm *}jn9M\6X WJ `nrr֔!sjJ啓U had{_lQ({RJH=N7&2C __g$
Qn$T\
mS2.%}MєZy_N>?8#}tiJ.u0 UT~=ıwħ8;
Wd
1]+wknF=%!ԈąHpwstD u#lܫc?̆LqsQK;lFdjQ/&M`Ө3H9
CfX1zf&?*md# MյCC8v>8f`1ng5lNoS7=ˢۗ>P(} SHo[ p)Ft/K'1qK Ƣł6[nTwV*:6 9
,$*"_~FT3Sg=nу=ϪFW-$\W)WzmQ aϹ#
G~o[E
7C#=VAl/ 'vqaIsrNC6gH? &aR2otM vgjOS} QmR Y/ YSM[1Qua <}W > % ؎xXq@u_(O
P& mAT K(o# E vm+#Hk|$_ P yx3L Zr]D9'ҵ ;^v֖벪E3z=>;К_W 嵺l]Ŋ 0`Q ; 8NDL
2|ҧRs-d c:Q, oUp"{ғpQ6
RehW58
j ^p%oacԇRSf!oQ%މKAK]b {1vqG[ c7W*; Kƌ0JДf=2atMdpAֿx;ڶΚ+#F }% Gv:zs2R %WE%FLmHqG>~$vϝ @WH~KL/ZI5#Zs!̭>;{XL<fqt HξvPſ 8 %) 96lO/o_fu*z8iYl}]xto!Kn{[P:A/!CkZ :G!Uqr*P=6h[R9r^(8ͩ [07Xo6A ϡP Q͕/qD`A> p!dZR ,M
DgtdeWYˏCB
4pPqUDY٨+َ(XLLˍ4;*9lǞyˆZU+F*B99_~ʝ,evKƯy7TMqTXmlԗn>+2"7Zq !T&!ݗawd<˪Vڗ hwAƔd* {PY4$a.\ڮ7oɸ/R4Gڔ]
{7nJK U
kXۯ4{H}?1݊Z̛[&W.p8&"y| $ul/l wj?,捧_[vYm 0W|V&5ftQ]]lsD-d^Di [y$ <=ȅ#V 'xD"c F[cH;j6ir8 T%1$ nl,o8l`Z˞,* Z/ )G#B;߿Rg51<MLso5\|JѴ Ɛ,mF R3" S-ӳ/5r 䚠 Tqk/0ſ6F] )0Kv#.l< 4.dT'[qjE8-oEdA# CW.eS>&oF|]#h7m(C7B5>T dOsx{ 1=PyX0|_Ըu8 $2]`Yr0tn`E.eѐߠ d~-f-!|k Wmkֆ-;fIT+Si]S|}z4 0BUH`cp<$ p>uT ܙ@CťJ+6m2
MU0z 䊅Ptwk,ɊҜ_洤s(݆K_ 4O_ Fۊv9
h&4?~-ek4 `Dzxڈ?Y@&9V)-Nfq37
u^S #lx *O.]v!&ȑq
H7GXg ZK×k$eã}n4xy`ь\m]z` 3E D=T6yyKxtH x^ K$ ƞ(hd͓+Zsll!b$=!b}8L͚E 6Kh?k84eezP+e[ 9τMGd]լn2QB pdmĮh\>mrun}yYH5B
;+똻̓?C" ,ηzWE."#ݴ8nqpX"Ƶ2xfvgsL$Q~
?N`.G}>\S:&e" [ۇڎκ𫓒&s./v3V-KD%pW ʥ*#KqZGc%p1ԀmA._b|uks{
3!!ˈxL6Y fmW^鞸
\CJ̾d)M?*utd=s&ƶcW| Fw5r^/hpҌd#;8^Aꎙsۣ$z9eR/L/u3" 1P:M6!rK>PB]ͷe
81s(zci>-4+tW䛟>
a`3Ԭ+l @{o!6X2+EI_' R? 0V{cu F)QP*D&M}GR ~Hq$VB~ A oܻ 88geǎTjj xHv~ ;p_"ɜ99A< /%CTCqbk
'2&h14%82|&wAȵ>8
)z)ފ\#m}P)N!y: ( J0zvI{'@N8]-
""
=4с 9z`R-cѾOuݤ B5~p?S%bzQG] q8 I~w Qd>+>NTq7i] @"*5MvهvV6OfË1HB^GΥ HWHƽ
ޤc F=y4Ֆݕo&R["\yH (٢L0?0[5 XqSvf)959U~E8MO'pdE 3#ӟ"5SJb;HԼo Ԝ][uF0hVH6[RB6 ͏. N%YK.>.MTnmO
AE;)3ҴpJ«mA)'d)f(OлVr=t+BmvFKxP>uIsv)\"Ձ\\^ضO^c}&݈S /.o< K
%]!yc[\Ԩexh E(>:Ź'ܵK;yұ)Q f>x }>^sԠQ<"woK6x-@mW7?O2kdFm]l UATYTg[W !u\g*Eq"J4"I`ԪOVB |usK#j&0l&U;*_m;l
* BiĠ\ەvw\SMk&v!^ ~o_
ZwzZRilO9({dsѕj7ӭSzT17ʉJU nj` kAi=jl(-+7M >ezD:kB rt?%BKǻ%d\OVvf 04(p bZ0.1&!
S-kpB&7[)uR pyn Oehd`/ՖM<`Vȧ_-
|/ P,!Y7
߇p@Nߍ/agi+Z#iDN
Rzjl_= yaEzvPhwQb vwwnG>s|F
J sm!Z&8p,}roB釘
sQy2d6m6,p^}9Qא OaB1Ըx@7 RBSzȘ|Ǒ5syUWg Z5QJa a5Fnӯ\Cߣ_ .p)CU>C! S/Am=i=wH½h{5SXҺ_r寽jXH)R푾6Kb11Z
v/?oP`ܧŃ c;Y@Ghxk;k\EV/QLm " @/ǜ !YӜ봒f 4/qR^B; <@rk$- vҚȍϔfD j>F5t_1%NٔP廿X%Ms']Op%Q ;J f
n2(d ) Ik+C#^m6cK>#WFh >9!4eT*9 S }W \-: @nX_r"s:ǯ>Oߍ6l,zPS\[j2'/i5i |}Qt6)JȖ)04 l3F^BǗȁ `!i~BTNڊ 1Zas '
(k\FfGж? Ile:MBVcⲀ Y(sLd0J9X _KVug x4:
`TCdPV ZQcB^iZh{2/Q8HLm) Ų̀h5 q( 9Tw&skOu7Z2Le¹N5{FؓC= ]~Q1pݼ Ok~Jb, Ti`WOI"Ut?n2=*h`&!ښ$/qq"NhP,=^F '|jY5``ޏȉ
#i\9zGEhF(]MVIn
_~zoy34xDJSuT[
Q< fyPLif~P+%9y+'ZB7 ]qHFU? X6 Gg* U-y U?=cD }s^{sU
~%`i?3h){G .+߰wٲaL ݐmp*1= _ơ*tw?jɭd3߽@sD/H`<8sM"$ǘ7/o~;.zm!֥굫"%_wEY Qa`DVL`J(Z9jK~ | Ϯ9u͜h 4;nq(O9MS1 :XOF0R"7>n7!DDܡ|?=T9'oKc G`MSq (Wblp Cd܍:{h-|tc["2߱, (*# ;DbxDhz
fFym
?)CK[ @rW gspX9ul[|E );J ueBx$ uny {i$Rb$F>jV(F~m/`a;wV$MƔG\|lʗhBOPӱ^*UV{=:TF>zQ''c.Eݡilҽ/}ӜZBM3y3 S͆m]ۄ N䢖 oB`LS(qi琴i8Bm'$X^)1dsֵjrh.$3jo_Pz0OUWI\UکHy=7H{e{! !q:`#ǃ &AO]Drg2i8é "r2:4r1{RoRUǡDٔ~4O̤
5d+^b0q`]/ʝCɷQڿ
\
vs
l19 +] ZB02 +-PrJT)RR~>x M(07.K31kd§[|,N/zXiuai7 y !?9O uMd{3p="L͜%{N/l)s #lfi{S[ Qw/IyCV}9[C!2Cp >/^ѵ$W
w5v߫;,9l²2 O`=KOYOal42ޫ5K
i'O>Y,U'H:pT'ֽg˩Sn2= 91?q $CW˚/JHI`J%KMZVmu0S{!tϥO
{GkvR|˺KMېk Ym%%W xԪB_q
~Yq zCEi *U~5j"ETk=N <)Jvh@Vi<R'YQU^ qTlR> CMP}; /!#lR7'3Եo 8 :mMT2姃 kO
6\)\ pu+ <,zO+K-o&UD
s_{4b6ʿG.5!=K Ae (_x&-s
.k"bF1NIل3\-E4 _6x; 94SmO(l */[y֏UZT8j09ÆWHF2!я;X!y*qM$R$c ܹorgNw=aX[w9
=z˘pًSCa RVK%MM 5tQ0hѰ. ÿ́ÒywNF+0a t
bF (5GFKX%$wI܉鲨 *5F4xs$ӥ,úW^izw%d&;Z9 &湩hh\ -IZ4bt7%1oYsHX`YvoiY. #/Mx{)r0QM;X!*֪+c>7i $+r^FQR mf hP u=B{dwț
2jfנ͖vn&T1ZA3hGb' %i賈 Hhv Fg
i\ "hIR=p7s Wa +]t66WU8G
Oզ9
ry?N'S4Qqܥ=L6wNM4&c)udZ;!Um/qݐ͌A8\: WɭxF '_Hơ0X4svn`.S=
A/YUMA ky8>A /h#!Y*jY@ `{)cY1|} EzLОw@aHs=~_r 4
1h'ŭMjs"6:K9 r5PW"&O2Om~Xc|QY%c>,ؓFi?%d-mb=ݚG q\{ql>VJ E1+'V/({E; }Zx y¿>9/y.M(M6ܑg})pI{wOboDz @d}]/}pp5۵OuAg GCt -K7 L@+gpH
-^q_o0ǵ? 4e*J{EK:r4eDrr~.* ]7Z
lAg
j3J ϐ} h;"1G!n8I{j-PV
+MStQoj!:TakN
CHjf{'-fzPP0 Ka٘cե3H%w/h/G H˸cU!{tT5xQ$;γ ʈ !
YZ