perl-apparmor-2.13.6-150300.3.11.2 >
A a?p9| 7)$ν6,0<8cƛ᭜c|F8,"("ʍB)2ʴN]}ABc%Ҽ4{jp;qR|
Q;F!HF(8p<.
`\P>4-XIX0$t) - CK/TAQ`MBË
iឰ2>Ҩ$|q5Dy!`ZqAbעyW4mHu
p4oK=kʎJTp77f078b7aa49caf98dd980f0e888ea37c793a3bb b3a441f4d098c70d86765cf91c78d80ec9db58586b299eb4a616de456bbbf9ad p a?p9|T) h0)q_3ʊҊh'l3N[SG<^_TSF˹,a]#wy Z/."_Equ/H(.Ey!ŭzBIVJ5qEUuEkW}YވlXߞ&:8^ tghς{\8ۢWA`= }ٱ
ߦB BK4>"ex2'KzU[ .yO?3 V > p A { ? { d % N
- C ^ }
3
8 D S b X P ( 8 ^ 9 ^ :
^ B wq F w G w H w I w X w Y w Z x [ x \ x ] x ^ x> b y c y d z7 e z< f z? l zA u zT v z` w { x { y {( z {d {t {x {~ { C perl-apparmor 2.13.6 150300.3.11.2 Perl interface for libapparmor functions This package provides the perl interface to AppArmor. It is used for perl
applications interfacing with AppArmor. asheep90 T
SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only AND LGPL-2.1-or-later https://www.suse.com/ Development/Libraries/Perl https://launchpad.net/apparmor linux x86_64 $ /@$Am aaaa71411db1e10415e2e1017b434eee3a34785552b0253f64a07768cf5921671ee 29714d6db6e508241f0d770ed6096f5256bad67aa31b6f76b939e0c790deee45 root root root root root root apparmor-2.13.6-150300.3.11.2.src.rpm perl(LibAppArmor) perl(LibAppArmor::aa_log_record) perl(LibAppArmorc) perl-apparmor perl-apparmor(x86-64) perl-libapparmor @ @ @ @ @ @ @ @ @ @ @ @
libapparmor.so.1()(64bit) libapparmor.so.1(APPARMOR_1.0)(64bit) libapparmor.so.1(APPARMOR_1.1)(64bit) libapparmor.so.1(APPARMOR_2.10)(64bit) libapparmor.so.1(APPARMOR_2.11)(64bit) libapparmor.so.1(APPARMOR_2.9)(64bit) libapparmor.so.1(PRIVATE)(64bit) libapparmor1 libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) perl rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.13.6 5.26.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 aZ@aՈ@a@aim@aex_м@__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ lsb_release")
- fix buggy syntax in tunables/share
- several abstraction updates
- parser: fix "Px -> foo-bar" (the "-" was rejected before)
- several bugfixes in aa-genprof and aa-logprof
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
for the detailed upstream changelog
- drop upstream(ed) patches:
- apparmor-nameservice-resolv-conf-link.patch
- profile_filename_cornercase.diff
- dnsmasq-libvirtd.diff
- dnsmasq-revert-alternation.diff
- usrmerge-fixes.diff
- libapparmor-swig-4.diff
- re-number remaining patches - add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
4.0 (boo#1135751) - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
update-alternatives (boo#1127877) - add dnsmasq-revert-alternation.diff: revert path alternation in
dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
breaking libvirtd (boo#1127073) - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
to match the newly added libvirtd profile name (boo#1118952#c3) - Use %license instead of %doc [bsc#1082318] - add apparmor-lessopen-nfs-workaround.diff: allow network access in
lessopen.sh for reading files on NFS (workaround for boo#1119937 /
lp#1784499) - add profile_filename_cornercase.diff: drop check that lets aa-logprof
error out in a corner-case (log event for a non-existing profile while
a profile file with the default filename for that non-existing profile
exists) (boo#1120472) - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] - update to AppArmor 2.13.2
- add profile names to most profiles
- update dnsmasq profile (pid file and logfile path) (boo#1111342)
- add vulkan abstraction
- add letsencrypt certificate path to abstractions/ssl_*
- ignore *.orig and *.rej files when loading profiles
- fix aa-complain etc. to handle named profiles
- several bugfixes and small profile improvements
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
for the detailed upstream changelog
- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1
- add qt5 and qt5-compose-cache-write abstractions
- add @{uid} and @{uids} kernel var placeholders
- several profile and abstraction updates
- ignore "abi" rules in parser and tools (instead of erroring out)
- utils: fix overwriting of child profile flags if they differ from
the main profile
- several bugfixes (including boo#1100779)
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
for the detailed upstream changelog
- remove upstream(ed) patches:
- aa-teardown-path.diff
- fix-apparmor-systemd-perms.diff
- logprof-skip-cache-d.diff
- fix-samba-profiles.patch
- make-pyflakes-happy.diff
- dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-samba-include-permissions-for-shares.diff
- add fix-syntax-error-in-rc.apparmor.functions.patch - update rpmlintrc:
- whitelist .features file which is part of the pre-compiled cache
- comment out filters for the disabled tomcat_apparmor subpackage - Backport dnsmasq fix:
025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch
(boo#1111342) - add make-pyflakes-happy.diff to fix an unused variable (SR 629206) - add fix-samba-profiles.patch - smbd loads new shared libraries.
Allow winbindd to access new kerberos credential cache location
(boo#1092099) - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
(logprof-skip-cache-d.diff) - add fix-apparmor-systemd-perms.diff - fix permissions of
/lib/apparmor/apparmor.systemd (boo#1090545) - create and package precompiled cache (/usr/share/apparmor/cache,
read-only) (boo#1069906, boo#1074429)
- change (writeable) cache directory to /var/cache/apparmor/ - with the
new btrfs layout, the only reason for using /var/lib/apparmor/cache/
(which was "it's part of the / subvolume") is gone, and /var/cache
makes more sense for the cache
- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
cache locations
- clear cache also in %post of abstractions package - update to AppArmor 2.13
- add support for multiple cache directories and cache overlays
(boo#1069906, boo#1074429)
- add support for conditional includes in policy
- remove group restrictions from aa-notify (boo#1058787)
- aa-complain etc.: set flags for profiles represented by a glob
- aa-status: split profile from exec name
- several profile and abstraction updates
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
for the detailed upstream changelog
- drop upstreamed patches and files:
- aa-teardown
- apparmor.service
- apparmor.systemd
- 32-bit-no-uid.diff
- disable-cache-on-ro-fs.diff
- dovecot-stats.diff
- parser-write-cache-warn-only.diff
- set-flags-for-profiles-represented-by-glob.patch
- fix-regression-in-set-flags.patch
- drop spec code that handled installing aa-teardown, apparmor.service
and apparmor.systemd (now part of upstream Makefile)
- simplify "make -C profiles parser-check" call (upstream Makefile bug
that required to call "cd" was fixed)
- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
- move 'exec' symlink to parser package (belongs to aa-exec) - Set flags for profiles represented by glob (bsc#1086154)
set-flags-for-profiles-represented-by-glob.patch
fix-regression-in-set-flags.patch - add dovecot-stats.diff:
- add dovecot/stats profile and allow dovecot to run it (boo#1088161)
- allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
- update 32-bit-no-uid.diff with upstream fix - Change of path of rpm in lessopen.sh (boo#1082956) - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
read-only and don't bail out (bsc#1069906, bsc#1074429) - add parser-write-cache-warn-only.diff to make cache write failures a
warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
to avoid pulling in several Gnome packages on servers (boo#1067477) - update to AppArmor 2.12
- add support for 'owner' rules in aa-logprof and aa-genprof
- add support for includes with absolute path in aa-logprof etc. (lp#1733700)
- update aa-decode to also decode PROCTITLE (lp#1736841)
- several profile and abstraction updates, including boo#1069470
- see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
for the detailed upstream changelog
- drop upstreamed patches:
- read_inactive_profile-exactly-once.patch
- utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
32 bit systems - update to AppArmor 2.11.95 aka 2.12 beta1
- add JSON interface to aa-logprof and aa-genprof (used by YaST)
- drop old YaST interface code
- update audio, base and nameservice abstractions
- allow @{pid} to match 7-digit pids
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
for the detailed upstream changelog
- drop upstreamed patches
- apparmor-yast-cleanup.patch
- apparmor-json-support.patch
- nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
- apparmor-utils-string-split
- apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
allow groff to execute several helpers (boo#1065388) - read_inactive_profile-exactly-once.patch (bsc#1069346)
Perform reading of inactive profiles exactly once. - update to AppArmor 2.11.1
- add permissions to several profiles and abstractions (including
lp#1650827 and boo#1057900)
- several fixes in the aa-* tools (including lp#1689667, lp#1628286,
lp#1661766 and boo#1062667)
- fix downgrading/converting of 'unix' rules (will be supported in
kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
upstream changelog
- remove upstream(ed) patches
- upstream-changes-r3616..3628.diff
- upstream-changes-r3629..3648.diff
- parser-tests-dbus-duplicated-conditionals.diff
- apparmor-fix-podsyntax.patch
- sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
in displaying the "changed profiles" list in aa-logprof - add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) - profiles-sockets-temporary-fix.patch to cater to nameservices with the
new sockets mediation, until unix rules are upstreamed (boo#1061195) - add apparmor-fix-podsyntax.patch from mailing list to fix
compilation with perl 5.26 - do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important - don't rely on implementation details for reload in %post - add JSON support. Required for FATE#323380.
(apparmor-yast-cleanup.patch, apparmor-json-support.patch) - add upstream-changes-r3629..3648.diff:
- preserve unknown profiles when reloading apparmor.service
(CVE-2017-6507, lp#1668892, boo#1029696)
- add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
- update nvidia abstraction for newer nvidia drivers
- don't enforce ordering of dbus rule attributes in utils (lp#1628286)
- add --parser, --base and --Include option to aa-easyprof to allow
non-standard paths (useful for tests) (lp#1521031)
- move initialization code in apparmor.aa to init_aa(). This allows to
run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
don't exist.
- several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34) - Cleanup spec file:
- don't use insserv if we afterwards call systemd, this can
have bad side effects
- remove dead code
- remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
flag in Python UI as it was dropped from Python 3.6 (lp#1661766) - add upstream-changes-r3616..3628.diff:
- update abstractions/base, abstractions/apache2-common and dovecot profiles
- merge ask_the_questions() of aa-logprof and aa-mergeprof
- pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914) - split libapparmor into separate spec to get rid of build loop
involving mariadb, systemd, apparmor, libapr and mariadb again
(see the discussion in SR 448871 for details) - update to AppArmor 2.11.0
- apparmor_parser now supports parallel compiles and loads
- add full support for dbus, ptrace and signal rules and events to the
utils
- full rewrite of the file rule handling in the utils
- lots of improvements and fixes
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
detailed changelog
- patches:
- add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
- drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
- refresh apparmor-abstractions-no-multiline.diff
- refresh apparmor-samba-include-permissions-for-shares.diff
- spec changes:
- aa-unconfined switched to using ss (from iproute2), adjust Recommends:
- move libapparmor to /usr/lib*/
- drop %if %suse_version checks for 12.x
- change several Obsoletes from %version to < 2.9. Those package names
weren't used since years, and 2.9 is still a careful choice
- include apparmor.service independent of %suse_version
- techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
- drop latex2html, texlive-* and w3m BuildRequires
- techdoc.txt and techdoc.html not included, drop them from the package
- run most of utils/ make check (some tests expect /etc/apparmor.d/ and
/sbin/apparmor_parser to exist, skip them)
- BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
- drop sed'ing python3 into aa-* shebang (upstreamed)
- build binutils
- aa-exec is now written in C and lives in /usr/bin/, move it to the
apparmor_parser package and create a compability symlink in /usr/sbin/
- aa-exec manpage moved to section 1
- aa-enabled is a small new tool to find out if AppArmor is enabled
- package new aa_stack_profile(2) manpage - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
This is part of the root partition (at least with default partitioning)
and should be available earlier than /var/cache/apparmor/
(boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net - update to AppArmor 2.10.2 maintenance release
- lots of bugfixes and profile updates (including boo#1000201,
boo#1009964, boo#1014463)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
in aa-unconfined
- drop upstream(ed) patches:
- changes-since-2.10.1--r3326..3346.diff
- changes-since-2.10.1--r3347..3353.diff
- libapparmor-fix-import-path.diff (upstream fix is slightly different)
- nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
abstractions/nameservice (path changed in latest nscd in Tumbleweed) - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
fixes in the 2.10 branch, including
- allow writing *.qf files (for disk-based buffering) in syslog-ng profile
- add several permissions to the dovecot profiles (deb#835826)
- add a missing path in the traceroute profile - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
fixes since the 2.10.1 release, including
- allow dac_override in winbindd profile (boo#990006#c5)
- allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
Samba 4.4.x, boo#990006)
- abstractions/nameservice: also support ConnMan-managed resolv.conf
- let aa-genprof ask about profiles in extra dir (again)
- fix aa-logprof "add hat" endless loop (lp#1538306)
- honor 'chown' file events in logparser.py
- ignore log file events with a request mask of 'send' or 'receive'
because they are actually network events (lp#1577051, lp#1582374)
- accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
(libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests - add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) - update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR - add syslog-ng-profile-boo948584.diff - add several permissions needed
by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
- add /usr/share/locale-bundle/** to abstractions/base
- allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
- allow dovecot imap to read /run/dovecot/mounts
- allow avahi-daemon to write to /run/systemd/notify
- allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
- update dhclient profile
- allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
- and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
upstream-profile-updates patch) - netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) - add apparmor-winbindd-r3213.diff - add missing k permissions for
/etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) - add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
output (boo#862170) - update to AppArmor 2.10 (trunk r3205)
- profile names can now contain variables
- improved profile compile time in apparmor_parser
- lots of improvements, refactoring and bugfixes in the aa-* tools
- new apis for managing and loading profile caches into the kernel in
libapparmor
- lots of profile updates
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff - systemd-rpm-macros and %systemd_requires were at the wrong place,
move them to the parser package (boo#931792) - update to AppArmor 2.9.2 (2.9 branch r2911)
- lots of bugfixes in the parser and the aa-* tools (including
boo#918787)
- update dovecot and dnsmasq profiles and several abstractions
(including boo#911001)
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
https://launchpad.net/apparmor/+announcement/13404 - make sure %service_del_postun doesn't call systemctl try-restart
(boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
profiles for samba 4.2 (boo#921098, boo#923201) - only install apparmor.service for openSUSE > 13.2 - Add a native systemd unit which *at the moment* only
wraps/masks the early boot script. - add apparmor-fix-stl-ostream.diff which fixes odd uses of
std::ostream which are not valid. Fixes build with GCC 5 - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't
part of python3-base (boo#917577) - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
2.9.1 release
- update logparser.py to support changed syslog format (lp#1399027)
- update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
(lp#1296667)
- update the mysqld profile
- fix network rule description in apparmor.d(5) manpage
- drop upstreamed dnsmasq-profile-fixes.patch
- update expired GPG key - update to AppArmor 2.9.1 (2.9 branch r2831)
- fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
- several fixes and performance improvements in the aa-* utils
- profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
bnc#908856), useradd, sendmail, man and passwd
- see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
for full release notes
- refresh dnsmasq-profile-fixes.patch - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
leasehealper script to run even on x86_64.
dnsmasq-profile-fixes.patch. boo#911001 - rename lessopen.sh profile file to usr.bin.lessopen.sh to match the
script filename - add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs
confinement. bnc#906858 - delete cache in apparmor-profiles %post (workaround for
bnc#904620#c8 / lp#1392042) - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - fix bashism in post script - update to AppArmor 2.9.0 (r2759)
- change aa-mergeprof to the final commandline syntax
- lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
bugs without a formal bugreport)
- small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
and user-mail abstractions
- fix mod_apparmor to not break basic auth
- update perl modules to support signal, unix and ptrace rules (bnc#900013)
- don't warn about rules not supported by the kernel
- fix logging of "audit capability" (lp#1378091)
- add support for the "hat" keyword in apparmor.vim
- build html version of apparmor.vim manpage again (lp#1366572)
- see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
- update apparmor-abstractions-no-multiline.diff
- remove upstreamed apparmor-profiles-ntpd-pid-location.diff perl-libapparmor sheep90 1643296468 2.13.6-150300.3.11.2 2.13.6-150300.3.11.2 2.13.6 2.5 LibAppArmor.pm LibAppArmor LibAppArmor.so /usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi/ /usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi/auto/ /usr/lib/perl5/vendor_perl/5.26.1/x86_64-linux-thread-multi/auto/LibAppArmor/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22444/SUSE_SLE-15-SP3_Update/97f75bf3b2924eb68b59010db1ca81b6-apparmor.SUSE_SLE-15-SP3_Update cpio xz 5 x86_64-suse-linux Perl5 module source text directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=939dcda30b625697d81311ed928687caa297e6e0, stripped P P P R R R R
R R R R R R R R CO Mw3/ utf-8 e3fea6f88e4abd741448e9ee140d5d419274f09c9cd1765a2a14efd4d0b12fb0 ? 7zXZ
! t/Vr$]
crv:oJ M|nÞܭFRY"pQ{`zѰ ΄G&ws8&pX;K,
NXb O5 ny6Ib3[~?X fsf~q, %Cp
=ZUXcŹO.mĤtۻy2E8H kW$ Y/{I\nQ2Հ Wm*/߂{a/fm-ֹwg~YI/|;R4ӵgbR
# ϨP LrM:ͼ~^mN z=PCO:a|9!z ׂ(VAnX ³
3[]ج 1Y߅C3#"זlj1 db3ʮ K扒џtlfN SM.9]8@aupsC*=( U5 +k\JV xRuyܡ[xB_ 9@e6TPKlEDF>E5Gjw籤3p$RH#>X((Rp4V
*Fݣb!bJbwY4O?q00=O q 챿pMcYCg{?S?HDo:X Y TL(B_m9pW
/$@e=aDuM@x>Dz;be lp^ɈOӟQ- 1C)=f _9*? ~n:S縟 m@\] E9{Iy/T^:Z':xZ0
zc)g0OZrcǃ)BG3jW c? - +tSh)`Q}$8R4~ 1Ų/ R儢u+ MhP^}6~&|SH-rl*+]
ɉ =FfD3J邴#)FrϮ ]2qNl-b`]߅Y:e;)5S3AvG
ZFvY`)K["4DƸi1SGŚqU]=BDUF;4( ' .lYI&{"w$.1t܃C9 I:7 s>cl+c؇"^bk 4n-|;x/:d=,?);N>O#
ӟVWL+LV 1 _;Yw0O
ˊbChϾx4\W^b(=j +*=W"+(,m4}m&<8Pꎎt@F5B+M^ /[uӛz\؍cRJ] Mf;xx?0G ~S}^x0ºȓ yv m >)`2*i'd;
̇83N^)ndwUQ9ÍBkXgP`~Gv+.{8 tх"$?<o" %CGa|L?"zk?宋_]fʌOi[chD;!?(EAa@eAmnR #H00tb+C߆⸛u,.I 6 { ! 㕛 GһΒ/M|t\?jj_kVL{tPGHJ~ j OxvIQʿO:tE&ǀlրч[BYԜ2_s8 S+.?@E]CJ I0f! \l 7ǜ(ךqPl =ݤ8 s ?:]fo\>jyNIJgx(h3`mm`o
.HGB8 Ѵ^9>Z1L}eQ *5'>lg8߃WQKkjأ؊o9ۃ?8t@ˌ&~M$ 9?-uƔʲ i.o4갩so&hBmd?Z+nmÉ"bjc
"V ͔e;iwI;7Neč ^jgqąu ͛q)oy'I%҂DEq`;3{-STWbǦӤ?ЀQ(c]d< c_Z8ǵ HĈ vH"Kh$\!NB3ᦾr/ұP]d l C[c<`ue/[jǪ3slXK 7q^X o. &
#GO:N%
` t`OvթI $iV)Qy
Y͊bX4r C[h i˱76z4Gя·]|b@ I %{q w JGh銛̉Yk5
7lvV9 u!KPFCAJPi Ō!H7NBZK c{.{q N'? kJ Q5EpHTQ_C NhDV?f(iʲ""j _(V% Y .*pڠnPG
hFE'Bڻϳh\ahSIZUꐓwц bnDLS崤E/W
bv&DT[c"tkޝ HTZD^+ɜ Le6 ֍-~qU"2 暁JA0M
N [(uPpŗ,f ,r?Qw0yTQ*tRB٤An0'O.= 풐\[qtFQAРy#&jץe!;de:f/9KHq 3} %J )Id3slL=֫tK14D2."~Fkd42sM ٔ ڪɲY R1 Pu)eO%Lvs[ȞmBo?:s
jdn/{NoP6 4MTb(S[*VI<|^|Aj[0IÆ ; ,S/ 9q$Pg0SI rN#^[L"! R1J`0pF焄kmՁ]3"h(aV2I`AmDt;/HŠ{@WDYs@A`"*`zgij
]i*`{w;桇"w;9|_(9C!&sԶPܰBY(K1 ]ν`G{ݜs
P$a x J,G yإ;OSlzUΌֳ}6Xe+R _% (LoeO 4/=|_T&ic2y.(ZjX
w8v2rtPcٞq
eD= 7 =rS#zVee#[laIR
j20quBt9z Isp.e9;i PSǦc#y~-Y b^j`F5H#(R:1 "Hlk
b7/Fi?qtk18 8t1Tpcp$!ۇDg W{7j5] L70yS^3EbB%qd6TMz͒[ 7ǃ́I3& e %4tB5:d7~kuf;t? ~h`-%.9M܉rPlg;=zvh1= *_|6܉Y
o㘫-Ъ[f 2J43$(e#9fͶVN^E!.|[ \ w ωdu 0^VjbW3 F[ *`(Cr /U 8qH1.n8.l-k TPGP!\PZ)3: Aۓ 9nmXwQd a(#x^88*CbnQtn{r^jY]F-J:@p= gSa\lqBJ_{ q8f#q?
Q(i2}O.^4vFÿr~AHIsZ~ɞ!9ū֮FFD~'caQ:dhYDf W!WIc 瑶Pb E4ze= r: 2d5.w#$PzR*eb^JV&8mϵ<$O :_Y3nApȢ& i+L~vl#ս1m?ʸTʏiZ @Vsb@_ Pa/!Ub`b0/~Vٰ@R ?p~ $0I]JH婾r p/}gpHV%̅<+tC4:}:_2P"=XUuTX}]@<rNn4GҮ';2~+N"@f'3V&AtE { ӱN7 . G_vJ*#2wh ~Q9ru\5-p ^+'q3NjJ@5mY&_ϟȖ4䱶Wg $3"Jxx+Jl'@aPY lW2D]QZGy~ ,)Ϗڕͮ]z@)^yG9^;i˵})tD3etHae0DZ Ǟ~TLDd%gYxTgEwH&8/̠ )&GCm6o"ؗ ?;4Kd~&IFLq&,[t|BE
P.ęT'maQUwqȠ/yoy$4T^bvX T鲯"mfttl_A[>v Жko/*zJ
"=5t+
1c
êO)6\Zv `X
pH _ z1AUJaljc@PNHzȅ= er1KsґyoMuWnW 2x k+XXLHo˗ņ| D]p@6 [ SQT%ޡ W OcA%
^oP,a= -v.l^ƚ`oާt mAc_`)s<_Z-`eŪY5ˣ`p[7ۭe܌/TjV@~WJ*T7jFPQ6s1[HX2zzbMѨ-,XM=@%;RTfޖ축/bCے:DZp^?K ]nO?#-lrrԦd'.* KcCa, τ*) UVsZǻW F }~g+PY-]B7RNrZ}\wNBUЖ\I"])x'7lip6- enOLlWy}Ӝ2zА1.v便s<oTLDh~Ҁo dhbEQ} =_+D7mkj s!
.%ٽ~TkL6_ٜ^@t]ɒb1P- `oW$uj/)pڤsN>D_c/usӀ
Ӟ7T(MKrl~ğ`foAPix?Y#]e'
4P{Od-lJWdFh uF5૱<8e>#Y5nB&A
ڊ` 1Y dDko&7 JJ-1T54Iہ*j% (⑱:#cRLޠN3-ĉHW,:-H!"W;۾7e֎@ñƖ+Ds Z_S8/߆P " ώn#NӫQ5W ƼqfwnxG5w.F2 yp$Wǩ\]~3:5{k O*GC ƺ |h/,aeBj3瓹j^`|o ^&ь YUzwg0<ƣ2>q w^Vy<\#%R. 7/?KG1Eq/o)ݑcQA"t"ޠ|cP T
p9b("&u1PU{j*T x`x/i9 0,qDzl"ӳ8,2הDjYr .T5GQ|!-/H ec%YY)C( JC8 ~R3)px HoKA7X}JىXN =+do zZ):ϼ7/hj6Ly @0=` _Km俢 9{
][g $Nx)x e⛉ Μ@cwv>ǚǯ[VXM .x(-6C7nn M7
e auf
je xc"{3V ZT&/&´۴l "iHM~UeڧVS*"@+L۲jԜ
Yr`;Z)e]_ 92;b+44(<23PHT`C;
K9rV3sUPvth
%CfW䆝Uz ;ǡV`Nh'g<$jVVCFo[)9et0Ga(-a]YB@
QyeUDpJ TbsUF #cyG W1eD ٠fآ_1ѸYV[}J0mJ|%2s_T:&]*Tt\H~RW[
6M@),wV͵GXڈ5 EԔm|pgfO JԞ
Q650<O F=AX eSo+OX|Va4t^;0OD\R^OM $~}Zwf"zR;[%3 ڜ, x $`[e} [Sy?1'rXQ{D}4(z2`(bJU2漢@bVRX ]>oʄ6c3W `y[\0w,۬E dvO ݼ%z- [$\n3O NFrA)@ʓxk{ƱlY Q/0
n^.3k*$Tne]g)y&IJ8_ļS:-^>r+h'.,2C'+Bt#zzb?JR1xt~ E(5$Y LDvxގX"OT"N Uq$?lʠ=%P}
ZقWG;Skj>BO2 j& u.Y w+eLQ #K 6^
QrOU[ ړ%-K& WF7W'w ! ͨ8ԞG3ha|
e.B3c4t+SHޥ0ޞZ"$APz۩俫v4Dz^ $2u v45i@%/6""k' G [`N5Cj):>NQHnvA|i-_J˚J]h]̒7O2:L"M|QZ#S
8lGڗcF 4%Z>r-|5_adىMip^#(@WJΎuv1Ai7_8&q#բ;3놩^ӏTfi%/}.j T^^
h>UxNE\x >ʮ9,7s`1'vAէGeQ
I1swX|]6EK\6 0d&u7A4 Up i[kAM9*.(3Pyo<\ VO> d$
oҿa푙 {PمVd,;d:' 40I+O?olWb;ںP`0 $A[4"N nL l8Brj}L;8?mx@\ 1z# ]
,8Adn`}?p ;21JݑR71~7>#A4 $,h\|$zзw5+;( :*QgؽY ,y~* e|ۿ3z5s
=P6ۙtji^C '>i-9DQd,,WKe|wSb`0y[ͯ_zӆ0daZХg:t۾<~RxGvn"
c@TA]/_}ʢ:7yGeO{:"(cŪPtHCȘtrC,#+jaam18=Ls[y#qAYnG5e{AKb x][H)CC# ;;j}{7r-kXUhaq v#ą%@gͷF;Y*0Gdh :͕
#Z۴젒W9qzqB5|pJضNZ l~(+/f$}و0˭8 3ϙ.Gg/C r t7)ϐMǹ{0ur$)F[zE`Zwf 2&tJKab>>E@ᇸ\HB:V2M$͛^1/bODPЮ/#lQ ceVW62Xl}L~\O`[ 6?g5,ΈP&Կ>2 l4L8LsQzѦyRY7NZU":6RןGkZ!q+Y1+hmTV-[R
}:l ip7]I;CR6oui9PNvƇM? 2d=W+$w.3Kjޗ^Z7
G/W`j <@e_⬄%L~dCe;դ0* .=i[+ d=n
{/_KQ
%z=x;%ER$ xZ(jhh~:@*ǡ=C3 6 w~ڽԕKplieMdސ́bI[S 5 O[guGZ3 -O!S%=j FT\Ip앴X%mm vq5= eMk)3:0vn +r= wq/nnAh4qPHUi aMD? <<%A/ C̝@
N㏴jܨԗo8\Uq&=% pm[fxI&NђoGQ(d2̨l)g)E4 kHmM,[!G:&z ?n=R-2L^eIS?VP3c9C=#IpŢL'һyT#kжߞt.[>zmS
l1 /v@؏ Eك nXL5$\5@Htaܸ
b2h|B;v:T136ҵZ5~Le|?I<ݴn }u-oޚLUC5=߬>"V-[G LLX;4flXcg8`2Հ} A`mfg WƂĖW!ϰzm~yVQi8a;NHY #aIׅSψV< {U=6FQ# d!U pyfP|/{_Ѡ(@_ss)j0&O;v{ ]dRكH2l<4o!wƢmg7ںa[ek#dYX>L(DmV&i/,DR;D镩ya7cE h8Rl2̠< :Nє/\D۰qd
h"$,Muo T3Exӕ ?x/ord _`:E6 ?]=haWB;:N ]CY!j ; )<5og'BZT}" C1Wg$dIA ùmsREm(CDѮ_W=$&L~>DE2i&= I#2O4v H[#s/5Ͼu"7̇lr%,T_qs5Qhgҽ
XI\}qq
yAF`{8ЄhNG \7~%6qupad{Py
>Ƀx ^JͷذRÂ_::MYui/Na&P ݚ[&1iIM:N$!S. l#YHQ7^xiq Q04 !v RtE E6'- =
{YB6`=@tY>$s bd"5g]sșqQ>]m%SʕQO$Ʃ^U[M9TCꪯ$U
3Vʥ k"k5Y$r7iRAs{[{R&7$:hE#By";m+e_{,7Lò, SGAUh(ҍ*߬~k[T\t ]yy5ѵ-Nh}-ئl+T}zU{qjEʎٻ!( +(S<%:PqeS1S5Қ넎 O&~ZR-OƄ^_f
c/,h@̛kyȤ<^ I|m텡I O )Kځ` 7w>P@DPoړi{
TLJ.LzpG:ϕo,.$ٷ@ B~@j9D6FPIިwȔyY3cv qC?wM| uX6ܲwnA^De*mHcDb%qUѧU0I9Ԡ"a$D"/AwKMVF\te*
|C:`E'QF5mkTBot2'^>q.WʺpS_TVUϾm$f1Ѕ<aDVơ'3 4c?z h=N^8 ۄTɑP f877b++^?,{tttH}i$)P4KVE6ӯ, Ÿ+@ ]R'{ϬYfS@Vy K>t19RWluSt/HJgdTiMHVK/|4'&>?aO8"(%aH^ HgBwKbq
R YNcTwו,*\ΎQn G^r"*J]<ԣFۙ`?妿!L8ٯH`#2KLK
vZTnZ$ !xSWdkx yV衟$)Q[9"c|@ SA:RMC1>ZȽIdUIVލ:V_a0*b$1o0_ix| "k} H/aDsM)tCE6.F͒aD^v$h~;DP\
ռa2ecK|MC)Q}1 "fA]w^'
R<ڑ%IA ).ʿ)cZ=$µIe,`?@]gf xBeY#ny6\́D©Xs# 0u燏_XrTuW-)'A@t.SZ%5ʫ>;ͫ6 q(epC/ ? /4)jE)/1aIk_Q/ 'yu9 /,.ny :URNw}9Y~|tJl' %:HY %KvH)#Djx|I2L!h ۼ\{6Y%{ ̳}zkŎ p̸rX fLjEr[*Z&2JY$|},;]7,ո(A3s'28"nDmFZH|=QqT A:A , GVy̕tЃ(ͬ>-$gﾝ@]l _vBtC`>G:c)j5s͟ÐVoVn] {UYnR[ 7V f\Y 0:0CFQҬ|
eޣrVS{Mq zpXh <ӕ T<D[Vh 3EAħD _5T^)I(: JLRq7> "9oYhC: D a aZeXγP=r5rnqi0S${KP%Hf8W2.f_mmR4E %͖Qys!N BMC6_i[n [6o .&L{Kx^m|wQΤ;.g"Y/S0w+@BdI#зZaÔ`7kt.
38xg>놧DG~"rWWJӡeIt5
y<8ӄ蠧fڤk&[ y=wŗ/ AoUeQ a[{e8~WJmiqgr&ty-a˭!kVUm\ۃ?3@&f¢A S0J`,^Q?/ OInO,Tg1e훊X()F\>f,?mVR|*.9Sƪ`WB|=ʋ(sU~
]s2X;/{' ?{k|Aw
LS eARL
[?S\#F1%PV(9Ձf2hvc
Ixx.b4
"oZsBlSPt PXǙV(XYhTd6;
ur_㒾ɴ)%l [ a:Ә^SJC /Fqms6X ¹&p_~z"7,yRmJt=ڟB7dB3PQQCI`:Rpb?d"_UZOdw\`؊'T<"~4 [Qƭ c:t(5sK_5c?Wg p k~e6C(e2LdX ,ˁzo}o됺%:=@BNyRo9 ㏾B{x6c)vr<߱Dnkxz aE̷Z副$ټS&a k Ҡ0#wt$Rxyr&S
2,>
Q ;4xW.gfxFn]1Fi ʥ (X;x?
BcD(
u1p/e/&P!jՏ]c Ziɫ4:: hZ67Ħ)3%ty1.j w;oVO0o"-B6Q+a10 v-(O ;#s6A=um 5b j.>
kGC+ r5: Ht=R{ sqNn;>
Dj# vSz{ uѵNm
{^ԋ"aΞYO8`]PާJfA.#ƋAg
mcQ 9̿}$|c!{ Jֵ2fjWr6/x7=y[yg~m) o/Ňv$-)u2PoԔxM+XK"| yU.&,vz^/D&
ҵXL *9Hp#HR kFVMPb;㙝Qw(P})e W𤴌{
<{7< #6=)C-?CqWn >iXz1
x-=Lz c?]/hR}K!yl.<P|5=Asu
9>GHUM~@0#Xܒǭ[Ҧ#%SLf~ItZXQkrq߳b_G u;;2'j=RW>t34 4CUr2/,,MJiYѱWe?@+MdfEti3,PP6T}R|VLN]{慨u'D
=JjC&-~PN?q7|>B61?6Cpƣ8e*dsX8;σou8W(f`O ^W̏3YKVrzvnޭZxeHLo>tq0 P*aN86KY+P.ǐľzH*_Y<vx5gk&+
ff \^ V\ Dh V`dS> ;jedsyJ\/of8$;HuѮT+?H$M~UW֑y²I|lZHCUBvxkt8ho 4Ò`%1 `Bj
Nxt&RISS I37(#} Z/ (f;Ȫpq;nHݯT4QSkM²0krVv;@r0ʶe39M5yp$M,T6IqU {l%Qi$PC[6z:a t-`Q"Tߏs^٦=9Öď`Da{$0n-}$qVV8[9zw '2ߣ_*u ,Κ onj(u@ENp2M+&P[\ꨝo :}/֩C `F'V W)? KѠc8vIvR V,d+ZhQPqn4* _گ]dhYV5> b DȎI&ð>NTe: ڷ'ɎMp\̈ۧbh ]c%߅^l9 WsPvrkW
4)̹ Az1 !6rg/Xˁ\גn/xN'Kty"7&ǐfՊ(
Te9z*
I1&*9E 6ވH" :H
Z
yJ V]|MϿsKq>^#. Gfj69 <yp<, @-T}cj VJqd?ܿW8G { KޏV
JR%U PahR( .]ŵiTp:ˣ = (C: Zo4AO3hoX$zh'zp1.UsvC꛷VG@ѬnG('$DT]c\ L$?T_Y+x ^2( 걬Y/Uc{VB76
\D9IiQ4O)$1 &,x76'q_բ8fA7x):/g/)O'
A9Rm} OQ(Y(ER
D XE؏<9XCtS=˪ Œc3}y7ìՁX?9Gk8%"7`z>9)RX*)qynK d~P2MP!>!Gn!,0:_4DPc䃇 nMaϵv9-R{4>`THH @֣!/ن=Ц 37.qgi 6s_^T CpWȦN @=@k*Q-zb
.c^QjNFFI_ƮO$I03~ Q Fs{|
Pn Xw2I#bⱘ ,ڸp=D(/mCﻯqXJ`{&h}&_'D{b2
6p(t<ޒ[]qǏM uX# /c0ָO51i
NluǀŮ7Ppg
`:7K"H+Z:WsEI Bih7úo劸3t1[}m <;N11NbC
(qg 䤝g<K-c6,v ڠ}l3)Y S1YJL)==\ ;a:מZ@fHG0Y\\\Ȟ
95H<f~M 5Ҳ.\1 zC"=mZpsNj dJim^ei_ ? kn8VJ5?é 2{ =/-E]`,.b5<66Vu~C[]h/$s|E_e)ï ?gBwCPODi(ȿHC=
! r@Qæ2~ufzF#3##k(T?o͖tY K2 8q]
S~cNcD{ˤh6*.DpL&uV_mT`ɞF (&dN"%wq^qpnƺbKT_1GoG !6&
${[OdIhk٥}j8T 9?XV,OX'%xܝJI{ުHnYh[bj J`LD~}
i]5JS@t{_ Z7o3'}3ۥβqO{Յ.&1ʾ|$ou>'o }\KS[\P9 KPCP!J:H~ØZ:DuQ9u\eSޢhn
j!l} CYW*`IBX7w?dOM> %aGmx gYMBhJd.S:6I4=F d@)
.d HЭ!aE8#CJ SC/{b-yz4!`bM'z)` lbV!v)0ͺyk4l\/Կ+^_ hjyC#Vh5nk~ڹ`lߦM"ݫ?ｸL@q 0:͌ t)ʤf̯NGE|)o 3 VxzRb~{mX@8FH,%v̢LbYk07FToܰa~alz|o(Ptl(oɄ-cigd0ߗODhGmd| ,Xmđ
sd^Ju, ۉ"BUى+ n?dKQB0fOd/v\
;)xJ }dZ`{7쥒:&٤|#?bZŀ_oO(s&݄. ޫߓ'g v86QƼdj)ecY(r7}-̳$dͦ#)l`d
-A1A2( @]ְalO~3 G&h#Au/ԳE-E"DmMUPƱ Hhf'|şOAzȣBV{5,(+ rxYT8\ ?)^&Dk>)_"'T_wK}DJC o.,'i}Uıl`mKo2OLb8RC yr]g4oKd 6RV!EΪ)
uhOadLmพ'OOkat Q]DfQyZFL?4hSzOAYI3 &7w* 9m3_ }ۖԩ#tMz!S]#FS SRb(^ĺѩ $>>< mv =7V),VU㙄ִw@M[~jݙ> 3.XY9"Ebk,Z N 䪢>+{N6@QKӑY)i_Uս)Ɨfĕ3յD:;v`q록bRRPUs{D^ĖT=[aj
CN%vDP7ȍ[˘4`>;Ekj A:c aFBNa& MF֓C;vOl&Hx*Yת0{oPc(0KTO)"]wg'<'>'zeUb{N|j't4x [ @QE@ `ݷ)@A+tu&HYʽ ~gQ'n><ěO#;[f-u&\,5skū%B#Y$OW@Qζۘ bn x_d ͉\ Ar:g20BGzҰSY.
?whx<2x baJQ~0 H
MfHVB4jOd4p7#(5~.xl~ EڛġSfYaS//߇~7*M3a8%`mpLhvhFptib]k0 R~ Ӆٝp% [;7t(1fB
2.Td; Hlk〨#H[&MƇÅf|C* ͉EGqK/͕~F! 9|a4p| 6;0) ℹ07 \` 8v a_ȕcQ.;őLV~9d-_(\RRm0%}sShZ km!'
2w* 8$X00,]kQ> fUP9[HqkuM9e~D} c!~_`whk -7zF0]
$ %] KP:t-06SγnX(`C6A-Apq&1]ja>l J~z!j=>4IxV^4
p܂^D
azg'@2NH
bl3ax c;L Ҁf|?'lfB
SN{?s
F"L|BBrAS)d,Ar;vo+0X9?qyL@K
7KA+\)4 %61tJU=;w ֓Bx_m`^qtƏ=rs3%O oe> 71?ul MzaBl"xp|G9y І
Ȼ5)b*O =/5zncu l@6 I-dbJkr*:(^gI
v k"te,=2:YDT8vDsfHQ
Kq5.A`n[#5*OJڨPٞ2̈Ow> mz4t'ߙ
h I ?
"*fo+IWUac6ͱG ~(q
y2Nd#3-mtrxMe5N9spYbP ;>m
lx2 \|Ԭ
*ĸd,6om-Y:ϨLD,;r(&bLK ۘL@u8Z-R/='ݜb16q)^Lusx\ x :ve
cڄ;)©QSzSݛ834h]h1 `! .q3*8ڦ.Kabbc
|_WV9 hR4a8:t8 ϘM%ZXؖD Ck Yl ~Re过i2kBaheJ宯o0 .Sd{*dc8 Pd\IG
e-{0JKSTY,#WE)3.SVt!#"u^pu^W7e bG".*9
M[rؼ 3HY +B[ |c( =>~fa)-JQK5`)!oy
hw#g)'-KٓNwGKRUmy] re~8..(R]SL\+VH\8}` H&NwhF&YzJC2<|?dIά$vMlX{yS nZ!c*)#2 6)~aP0-f<1K4m Uq? 9lAn IafwK0߰>|40dI7BL/vVx^"TI #DI
2* 0wSBL#sⓤ$F~jJ />ug8=R;4%mߥj|xA 9uw(b!z ~ Э ,
YZ