apparmor-parser-lang-3.0.4-150400.5.3.1 >  A cp9|j2Uf77pzMn>&uB'KHrGͻ7'̦Uű}8 \aJd_I7 ~@Y:/ w{a.qr @ ]~+blĈŔK!6 %9;E}Tdx#>ڍ0Fj :PU?ǔCRƟ5} +Y-{*EB;"JM GNg+\/a˭e7acc26fe3ec0bebd7272f53bbb75cb27b95d8667243caa3de92718395c69c8ec4302920371277807c864518b81b0717a2e74259<cp9|ti=B7K8)NA~U~]jԧY[0WsY`AkdXTI͜"%>d̀?Lz:sdȈ)Sܵ{q9eWAfS0KMu',_*,Ij@\ @d8K:GI[}`Y̊غ6FPj#i17jwρ<龋5~;)^'-ɢ+1=uqU[S>p>?d * L $*4?0? ? ,? (? '? h?d???,@(8|9|:%|FG?H?I?XpYx\?]?^4b cd7e<f?lAuT?vPzQdhx|Capparmor-parser-lang3.0.4150400.5.3.1Translations for package apparmorProvides translations for the "apparmor" package.cưsheep54ǺSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Localizationhttps://launchpad.net/apparmorlinuxnoarch2-L*>)J{%'G@L0E E+7X&,pzDnG1E/ (*6+o2++X9YI;vDDzT''́cùcùcùcùcùcùcôcùcùcùcùcôcùcôcùcùcôcùcôcùcùcùcùcùcùcùcùcôcùcùcùcùcùcùcùcùcùcùcùcùcôcøcøcôcøcôcøcøcøcøcøcôcøcøcøcôcøcøcøcøcøcøcø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-3.0.4-150400.5.3.1.src.rpmapparmor-parser-langapparmor-parser-lang-all    apparmor-parserrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.0.4-14.6.0-14.0-15.2-14.14.3cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffsheep54 1662568112  !"#$%&'()*+,-./0123456789:;<=>?arbgbncacsdadedeelenenenenesesetfafafififrglguhehihrhuididitjakmkoltmkmrnbnlpaplptptptrororuruskslsqsrsvsvtathtrtrugukviwazhzh3.0.4-150400.5.3.13.0.4  !""#$$%%&'()**+,--./0123apparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moaa-binutils.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.moapparmor-parser.mo/usr/share/locale/ar/LC_MESSAGES//usr/share/locale/bg/LC_MESSAGES//usr/share/locale/bn/LC_MESSAGES//usr/share/locale/ca/LC_MESSAGES//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/el/LC_MESSAGES//usr/share/locale/en_AU/LC_MESSAGES//usr/share/locale/en_CA/LC_MESSAGES//usr/share/locale/en_GB/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/et/LC_MESSAGES//usr/share/locale/fa/LC_MESSAGES//usr/share/locale/fi/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/gl/LC_MESSAGES//usr/share/locale/gu/LC_MESSAGES//usr/share/locale/he/LC_MESSAGES//usr/share/locale/hi/LC_MESSAGES//usr/share/locale/hr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/km/LC_MESSAGES//usr/share/locale/ko/LC_MESSAGES//usr/share/locale/lt/LC_MESSAGES//usr/share/locale/mk/LC_MESSAGES//usr/share/locale/mr/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pa/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sk/LC_MESSAGES//usr/share/locale/sl/LC_MESSAGES//usr/share/locale/sq/LC_MESSAGES//usr/share/locale/sr/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/ta/LC_MESSAGES//usr/share/locale/th/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/ug/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/vi/LC_MESSAGES//usr/share/locale/wa/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25815/SUSE_SLE-15-SP4_Update/dec7ea68f4a4f9dd6653cfe22c1bc2ec-apparmor.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linux EEF#%;ݜapparmor-parserutf-8a97320e314bf0bd4d9e24bf19933a80ef78c21271078cd8238f12110f68d8ed6? 7zXZ !t/%] crv(vX0'k IЃñQCԿ-VŁ!W $ "*'V^]H1=3,VY+7+ ;v@Vt< &$ bKJgIGLmN譐Bڪ5bد&ۮ-sZ2X唳{P˭1؍r .;̤E#Dذfxn1XJB·zrsTVm?[ߧjÝNM&21AM;p) onyۈ6iܼƥ |՜Kg&tbFu~KxK£F "`4w/f?Wlֺw,/by2X}]oC%U i DeDӲI{e\;fତl{O{m_+f݉_ϋJhw2rVuan L8]?`3_ YX!UZL%3I0v`{ݒ"aُJs,Ծ.:|ш#O w3,t-_\iӏZ6xh)g Kpv5Qq̵J3 hIkc7Ga?ucMaPclX| s(U_N"*ޭǢP͝Aox( ⷚ@3/"iăuXнD#ʧ.[<;pæ'oš1>%R>4Խ$PCΚ8^Sdׅ伕K}$&9 0(Ycāy)"p{5Ovfq9/A[c&Wi\%r;׈ԡ?Fַa[Dњ7_xUs"4CNmW>rS3B/3iʛUCƟu V$L5C  \ Mȩ`G-wFvOڒݪ[ \HXNuX#Acta[ uڒHݛM[P_ q4/E6YZN^+&?]='_u_9uFhɥJ/M_HB g-)>!\Q8U}G\R^`DS eȉN3yˑϱ{WK+_CRy 3w),?Bel ,=@ZG!OX`[9J4Q*~,#0֕z S, |:J-&</qM2|^w'|['[JA?[ p/&ٷ"!ꖡM57E.3ݼ_Јu]iXuvef9.pIuַu3,XrSػ0Ɵ,8Z)J 8Rs)Ztm<6z#֮tžEcWBq+sgOVw`7})&F3Ra-F2Q+󾝅 W<͜փ{$Ag걃ۇӏP)9dVJ Z ܿ±v* i" [E|1 D_M4;S??[7ұbSe'H(\=U~33d\6-|qBf"k^K`vKEaN t`Un.wZsgkEIZCk]W҅u03=8d~՗qLu3V)֋󰀬VӳHdkesڡ;U>*aq z7e@6= TK|&A ^NW~m8fn>`QYtL_+,#Q(\i*(J!Zrfϩ!v*E|8-"@;|SnY{"% HwM4ԟLE|~ي=!D|>i 1xd~ aY;y✬?-6"mYIl}J0=*?f&(٧oT[$"!vE`ķl/49ɨh4RC*6奷`q"_P5"x B34Oz?ïޗyX؈H b%ZCV MߔN0D/A гuydW|5w^9*G|:W! 3CZ~C'mDG x>9edO' :|Bo`0yo7ŌT 2իb WT+M \ E!f1E; K;S{(&߂uyw9QCT{`G}=ŝS;^~*3^=g"{\VJ#r#E;g\xBLR/рU@&ĪT=1S1 l[='lBipKމk^.<^&8 1Lt*9u%Ty& =vZ@|Je WVx5=Y8)!$-Zr|:E<]ho@<2'yJ^<]L :Xݬy&փNzb!Qʋzf w!Z e>aKn\bGVW0-j0LY$O4~ݼpRT#!P)F&Ey:t>(돸Hk56 €K^/}DJz4ҿWiۀtl榎|2fݢޭTP6])SbE*wKn(pzx<7 Q 8NP2 Ī^2{zQO h̊Jz%8 o81(F%93@{%k- ʷ幏5T f& "<) Db{"F3~|U4q4D̸ Μ&*IFa6Jd˪ \oZBTs[prx^'+̪\邏*J %'L ?J#3-(W:U=D6|%Hr#o1"`Ɣ$K#hn*v`q?1 %s%64yTrJ7}azZY.R;oj8:.RY{\{H+5C`c_^'a ޺1^@lFI:& E(Qb&fߵ'.l-HYԷ\c/׶QH *\EWʣ$`Y71Bv&ʂ6,#t!v]*IR@ zR j5Fi6*x-`ד]jɐ8Uv [?Oh%ڣ}*`DQBmY7U"<(REݭexS`}4~T󊀧$]ȤHaڢg;;߻'(TQ#xw>:_b¼&:İM7zS7FN2"<n">43+a9JӚj  4i?9. Xt5dD.qd*(`V9LTC?A퐎)@k7z4(VmD]_wMqϮGZT޶JE A3_`rMJ~VϜr5J.VR?3w̯ße4%*ĆhZjvls8}=}TvHO=|- ѺGsѮ:*8+m˵ؕ,xRKuۥ7 $-o0ǓR2bU^`6"lG ɴ9Tbc۹(7Y/c5˺5ʚDŽ2XVPfLeѼٻN&^QO%›0=H K3jĽv=[1߲.;72 ʁS(qƦkNS1k'ErC) -χPHj&bik)v6᪼xdeF B(^rrI0K wA9KWTa>*ʒ|dg>UoI1VRN0̀pQlI,:)1kM)JtQ!(#n ϧSxnYJ̻hqcO+_aZP?FIxE2`n?w6aUޕ݊wd1˭qIױ|!α(UGXfE?*x8IIG-kuqGoS&<ӎ6 jjNio/MڪEI˜bZy f( &v w9[^eS[R,QI܊JA(aNeO~nyP Q}Cpd.a!3=(fۭQ5Qwxj"UI[eKBA-oͫܝ<*nmd4MXM'QoZ%{27;e}s0[zCHRwObkO.;z$g@<_-r{yA;S5Gϸ!hΝk4G?LQJ/N_$ycc6:AO$x\m5J=@D=pSS"Mui {>X ?-8."] Phd=-q"E6pukUXVXX#XlI53iF}od/H%=EFeYqEn'W@zi%ZNWֆjq'yߨ#[wC?Eإ`9 %yJTrC66s^b~+7Qglh%{=dc;w@o1˞woƻ8\آm/u+yJ~'(R ;G/`c_4h%jA;[{4|IؚtNbcT>sZA,5}РeFJasc%15cp-˙qR"ApqL_m].;aCIN(]5bM۪I;3akENF]B?u_ >K4\fO}D"Kݻ8,Tcq@jhv}#ucDS[ά-C.~xCmyh6VQf23{x9ڋ=8(b7Eܢ7aώ~{v5&["Yґ`Z A! g6tADz{C Dٳ|4dc[ PVPlfxA!]_H[~&T/^<+Bd-PbT OZQb,s :(x\ʮDXQmXruҏOd{ tQBl.l{D'J] [|`},(!J:ǫmnN슾 i;svP NW% sBDvp[JF3XXadx_˿ɀ^X%t~(NnFpt!T"wiS$d/{"J?ThB e3-|cG >#g1e@Y!ytѢz h Ý^$:щJa| u 3xXSGf]UK?14Q)'*EVp;=/ɠI~'XKڿrqŌ2t%ruwGIuO !ّQNi65Oܲ«\1Lִu 20$6IJ8#)_u;߹b= G%{u"&^aL8$Q74PÊ/027m}SM+toe9φ9EO-71Vrc^|byK/4>/LQ? b"iB͋ QVeYweeuA-YM:dlSAst0}ކ [+8*JLXne9DtwD -y,2CY>Z͗ e>A63(`H7bSݑ}v$eK:f +jCwF&]#(ɼ7?͊},Cyo9@jzsyAQvCntL VYxrk[1~| O6g: 伒\Z`&Z9|'@ h܋[V}7ZCcic9rgQEl8A_h)?|T#BSVBP)Je89sќb!cdN,o=|kV(YC#[BA:LQKRB pOy@Zj=. 5v !u;o^>~;N|~n״a<]Ds P3o6VqԻ=_奏n6mo 'Vݼ$g`FdR!s--M*0Nf]KKsn`iee"t>J :] ?h^T5%UOwjEmW5?;vaY':_~^̎&KT3VS#$p\)Qi AT7-T#͏dIwe| W:L CJgPi~ G*<$@VhkӥTQk:A?<";c6;HK0qC7^ټ4oZ;/c"_ s0Ed?Mә_zɌC?(6&pF:T!m{$1i՜8?NY4:[ (¡|5yu@pz+?;H$'tCmUn$YgقۭaT̤u( 6[@$\wۄDa}=fw+anխbHcwU>Uxq2n%s-#$?@!z*^^3))V?.л"{$+3Jmhl+tF8!=8LRCȔ5cQQ*ZM0S777w*+q~ϦAݩtEy%*\j ^(F:nz)^t^:Y:/Ot铂2NCSK4A% 'L'V@f_9I=nX/*p ]/diA%Az]TQ&a'[,25B7~ eeQ]/N{u'6SqY{65znܱbFRz=UO ]o5f#)!6: byQw$IJWTL5_\'o${ʭCO@T  'va;n >zC[EX雛{F4nc;VZ_{04K$'LmotB2-64У{ bv5'mn ~GJs{j")Tf~+@%NSETT v@(AC'X e6,3Lړ\w(}Ѧ|h-_z8RA^c& XM'8n _âg4gO '(2[@hǴh#E\Ixr=Uf(jjay~NEб?, 5tnOLHэɤV^kME8H6>^ oL~F`) Ia~^b20Z#zP2mĺ2SLj_F0Ij\˅XD8쵠7Oe e(0![H 0do)N/B[[BQ?\3n %c A„}H:L+!6wӗ^2<2XzbG^<)1"p0K,wەQ68X$cU/w҈m EYQ7ˬ,19EtM8 f|mX$Uߟ@`rp8.:KMO*H|H8fWӽrvv~5Ea]GU}M KQ4LX{o U9-|9#=]b]ȗrq{A}W$A!:|^<$MjE=l/Lq"F1{njqoLtݹDK3kctEׇ-~.|A`ĭ1S0kw 8t| .(.߃Qc}6eڨQ^s01(ӗ4=dTJgF˃ٓCqЭo(;+ݼ9539GuY*mM؇T*G@dw9UM"unL$l쐝}MRO&BW{QvaP^|Tp(i}/=![TlgBm'=<ቍm. fzlea2 KũѾ6F"a؊vmC6$LyV?)/tX(~C\X(QVWǵ2Z/QgfӅ)1 Z%RnoQ-%)sͭz\#{zP|4W թ;j潞K(|hrx>F8S)0c}GI̭qsdZǸCCs. $5)Lv=;6J8ٻRbJwjF.;u랤;]t rFJЀ[6~n@ϠVAw5t# p#ǘR r_Ȕ`?zX7\={[Q4pS!pj.)vۼ *.}!84W{"=ǭLAc)Y@Eb9-&%#v+{C]J{2P&ޫaW?dUP5]Y W3Ii^bCD5Lu]d iƛrհjLQt$.g@S}* (' D.-7=R+3edۯE%1RY|O2[\OCulҔψDEV=(*f)PNgN]7Gp;CI6o C,.Z7Ա |tlE"H&F#`M ŅyD4e=Ȯ(*GV]v)9OK6;[nʦ:zT[&JЇvU5PFGw~( s Jp&hTotRvwMX㶻j0EI!UzS}5C" ݜFq:W'qʭTO@d#> f{~E $V'7Oud卞+..(-W,U#RURX@!/Et3_5vt¯r=n\*YUaEA2P[Vk$Y` Sͽƽtņ/B%F;ֲy4.qq~ fɗ~qI8!'؋Hj]ۨ@J kF~v:mq־JH6{7k%fa~>Jud)W)|U!,i8M#0e &>[E!+RS|D!ͭSy!r"y"mcћaf0~k[+[w3т%x¡ X#WՙK_ =g0ؾ5T&?0w>ٖs Keiv" dz3Nӡ=.Ml,j4 B5,bN rL|ɶ[݄݆_^E)@Mі/K(Io[ʓVN6Ӄ~_12< !o=|FZYuԛ6 +5Ip21]U ٍ5țBYC5G7"%qXTL/95ҤE̩0߁-"e=pqnS7YefPU%CBo41pHp~%hErD@VU%V)1 ѥ(l_| )}xA$=!Ga^.(Hvy@*_#(T- [ljV ~Uazˆ 32qz}X{œ,y[PƥX+4ճP4 FsB!`&-^BugYE?ɚ+`EvRUnHQƃ^RNvw2M/.;DP9!EL +1ыppw%[^$ bJ273Q9LЉ|JWs6@F^'4~8zSXE- )p9*>Ćs"[X'DErՙ ַgIKrG(,DÜq*"%NI RB'\KZ*G xĵI(͸l*=\~c0_ڰbst[#vfsދաɯrt1Iw޶<=B+.IG92`E\f79)五AqYK)w;G6 w~"ޡsT>+MR]jƷA˱c<Γ q 9MP"l3m; ɎO'%ct#uvɵ^9?O(ST~# D[ ;2Ɨ*gh#R/+M5_w Of52|û͖=r<]K7Xbs9Ukv/!HEq&.b@#pY:dSN}=x@߄ w`neԦƑGna]Rlǎ>Nn}D2hP'/1v/ )*TI'X烲_t&s;Tެ,Rq1(+a8 6Ǝ@p8qYf MoyE|,.QEB=h*04J|%RFhty4T k*hpFU׃!IDnέL;5dO74򟗽nB{H~%U~YF&15s|3--&MJZN +x'ɧ HX#ҙ;dBTQU"r)Xv]&m+uW ܤ{T؊u"ޏwz&3 3;oPkWFT>&p\og"E44.fX#Ccd1V10P JDN9@Ši_|F`*r#^t90l$^BؗD.R%.R-e7;&G`O13܅gÏ>[|F k%a-|E)M9ؕ)sf'[.56yVөUltf57!n,[B]9+,.O/U:uqU"^t eQh*e +˵1iW 4eҧt7-&D'&Ej?ĊX=L,0֎}RJH 9WR^Ś&ˉ ڒWC9@* 7>NJ;<) !?ʯMo/8-Yif1)ӭgzI3--:h$B?}\ah>o8Q`DvJN D  U>j(B_8WIVtuhx]k0-4?tuy2` ,94*,}$t-%\jE:b'Y ne-#\SuLjo(ҵY =]NBGEz ՗R~gWZ8i): J5T6XC`1HLHz5>pE҄(N3'̶VaϮO FBNd1+9tUY7xkNrAl3aUդ\j롯F:Ժ-)0eՄ3fެƢ29u1T:'CK`cw"Y9ȅLFKhFHzB&-l-rB0ne_8̊ƻ[[# J[ ilk$B1d|b0H(qX:OPXX 9fNe{ǖ ~ N=n\m)fiKXS)틗?(]Q0_d4F`9 yS%V|joϤ3(@P`XP}QFީ:c(B%QKkqβNPJYdjЋ= /^&KY?59}źG)R\YAPAB=4z ?r67o^Dp/TE,4b@T'!% 0^;B%@Ms$G_Lh`ˣ檭"*e|jawrG!qi5TkX}8)i)!},KT?7{F K m5 })a+LȳockTIJYv{&gSkqrV}xΓГܐɮ_F#_gv?;eo`*Z.u#g:%T~9sեEue{iwԠOE:RC`s٥"oN1\՛aێ'/+0/JexX۱@hHO<]0_3R`^q:!'Eyd^Æ?oPKSv:vo8%10Yj#Ѣ#q1 !q 9'yCoH^xWҾgH?Qwx=WZZ-a S3@}`]-1N'_ٱ׍OQ6ߋX3^͆S\7$}Zk)]O,_>lLԌy.FH2Wy;8y%r:i` NS(ub\>uWX2ba~8雾jDBLik, 'V[9&_2#\0,n}1I+I۠^[vĥY ',^tkTցn~mٯBFLe/caQnQ)[Af䏧ms’$JP:%#IX:ӯ'x/0Lw_ʮs^z\Wxa V/pSzfXKeI).i6L3G0=3N&Q[ԈU嵢GB2:"Bݻ /mRxYe86AY*ipuEY!u?>I+_{n!UZN@΍SgsK! ļ7M0Kk߿ ƆڡMwjH}q  |: pVX p708c99AX>F(@NpM/`15&q(쬀/s22 o`{\:Z1j`3 <jL ODĵ^CћH8`˱ilÆ5DR(ts YRwT-B/8r]L8㘁C&oq `:bL?3r-!ykcXD *嘦5r_չB? lGbv;p—!]D.ߌļcuٚee$=kI`Q2ԻJU+GA&-M1KtoXzI> 'J&c38 #$53n$+2]1_3׿\DRQ뇏g4w)4?9|fDoZPq&oT'RXꞰl-Z.,-^T>&&[ȵ#k$o$lck6!$1F7 cexRcn68vfo~z4_dG}:6#֮m980 KY=юqn ~|<jVz>6͋,17zp5 \\R^d{/9=T=ԭ1h.2\웺̻ n_c=*A.\;%S=QN7yob:^XMhgLk9$֏>^ђR^$4YzS=̤ndXvQ&(*OIE- 8 79? f=Y:(uN9X^Ә3g(]BR:D|h{>IAM 'x@䪐lOÉ=;py8 >7nf:˫e:7t38?Rb u тc_W/ɪ(On}?^]#7nʛĬe~[FILTb,K2[.il^^i>@|,DR ">tf]"yO4c`r"SؘAJ6bd< DӚJ5Yb0q`0f`PwQ:s ej+@ =vSȹ9'2OŮ<(zXi:=sxgOj|΋RO12yܔ{ɼ$f oVFpY>isiQиi{+۫;r$gkx{6/ڍsA=A)$P7\"7_y& Ƞjж4Jc ZyOcDRgje:)( ?P]ڿi02&4:c ̕|hVɣ.N{Y" 꼁LcC W7|(кYǣJ_Gq]̜E2 5V9s>^@"R$= 8V-Rաqy4X*jA?y8]yTR5$jIY$G 46IȆFw+F\HH.vąG-qxb &Zzm\_;ݤaͺKgo }Nb &Wȳܬ%4&خC>ls+m@?8q:5bCdXU_$DSbt T9A5tq݋nbK ϮX) UJ5:#3 /|M\ΰ'ԴHaЈiiM=_ q38m st~6!b͟@T/QIj06)@7mO/,W5SjcDxx^1/a9f7Fw,VI \ZyX"Θ |ٶ+A^gb~=5])畨q[RlB«BX3z5pHn)$IVl`ӽ44ek[.',kSN|@!X FXm _:jpzI@9TGr[J }Dإd^zV>i7 `r ca/u9E]ohI/MFɘ(OD.ZB0NB){ҳ),Z5؆+%Ns8!ޕZZ ]x} 5jmOPYKhwd겅/ؓj5Pa"1쨁 )SBg,{H^)7@ hb  o9B&*6}uCo<ϝq\]t4?H&NWg,`1Cz\п"`ڋjv]#K,>ȦzR؂5(s8`-NtK!-Fzosב,\C\u_#,wGG&:㤛1}L /3j&bOn i3]Xc%u7~Yi:ԃ6gI*:q4iЈC Ӻ،ި3\ꕟ?4WsP@oFLt=LofFeڭ );fsTp:[qP`Y>_YY,3=:ɣs':2^#T'iSm[_(;[^?˾QrY_I*yv(lE(JM%+fwl4n9\}}L7< S{BF[?t7[Zdԑ/@?;I%eVKSLo;Ϳȸܤ\cv/:済S$1Pu8P Vēn=91 ج%Fy^ GqS iQ™kL"^%#`&SvO xECߌIuwGՋF/J9A{e)4GBi1D7 !d'λP%`l;xK[ q0>m.GXU/~A 9aW}ͩdZ*vO&#A!X0wj>b-D[$j8f,խ'SzqnNQ@p%)n|ͯWyJ]1zՎ f`Ks>QU.UӾS$6uE;׏ A-^"iQ)*OkgcK[GM2KJt1=C6:AkY&yLl axv]X=8C3|ɀ&GEZI *қ7$s)BKoc`;l2]JO^@q Ci֘i I>ON3k2s`R p@?d+j~YA>j Pj[3r0@L]+̗ٚr.4 "c@)$$I̳PK(;T!1,emCD뤑*4(d.W{x׎ˋrR卮?0#1] ."tU. Z%v (?"}0'|b==n"t ;T18ݘTgA_w!)* H u^`:}}BHEf-dry^hd CEu&@<q? "\^7.Ӿi26Ǐǀz,*|/0r^͉bVo0YZRm_bHHxH{pPe&+FvSZR{Ҷ*gV E+.3yVDi$xЪ͖9"vT/Hu4Ii- gUi8 ŋ8ƢXo,k2T`a2ZS٧^`_WMpL99$|٫w0鸶wl E"oQY3IL-*OW݈k4 T\z<9w'MO68Tl)1hJ>\e0 :!TGAGǘZ{Ma qݳ$vZ@ܵB ;nURo(&Q0.0]"[Cߕ Aor@)V(&ګ\jzD52jPK}V,L"|`K0_hidztW[o|@3%rk|4(h3xǢeȫlܦ}LvVBr˞3TkNL&&Jֱ&738s<ݫ}h 9e͍;^ގGa`8yhِdnquљH ?1$8۞lo_jE3q7mB8yN{GKBlވT!6=@Rl?y#۝9/_7e_.\y#yLd!@༞ ,u`q\G+W5[;/ I6y:džՉh Sl#c9\ ZJ z[T saFdaS| G!aj{"t6c,qm«a37,.ȼ\ yI=QX1R9lYՃǜ"ϊNH^ ⡣lce3\桔l6 =7t1bJ$ݯX}@ l=8$s]ݽzUv>tWBmN 9sޣ>xdb-4 )' ?xt݅\m/a Ч7l79ClO70Ϫ) 8Wrn4N)m|nWvvM$7,04>Dy]T?%ƲQq͑A]7LiM(ٜ(+6G @6.,!l8!:9%yiSң]W}(A!)|gLB%LiJ0T gO %ʍeRd H;js rKgGzŐ Z NR{4z !A,hӧrltǮȖѳ0Ce kQq9 )HՃ?>6(,/;s]q<y4yA#\/ױIU,(( si"4t .s@NnuKgF@YGZ挏ug|L1mE6+ih )Qf(Edۄ7m%CNoWP:Wvnȝr0m9NUL"v5I&Y+EH㒝sWﳔF28Tex&-'S%6c=I8,-X7*2RIC1?LUrv\ȭFs˜;݃ S!+;vY^oaf z0Γ )LRK+]J5\92|f}%P_ PE\af( [>km`$@uh:lZsIVPN`K7(u9xSbbuɔxi4u\C=ͭ8z#(s)֤K-UU=@)Ae=+XMڥU9Q#MЗ t߽Xv B.,\礧h`C}RW6*)6ϝ3U,D}w^<Q"Ch$wa0pLd8i1ņe ltI᫦"yɀdyKs'-DHN87#~4W{r)Sa,.WGbv"6P3)nhG{T{<1!xu1r3f?K`i^7j0RZ{BOrA) #ЀI.z)!0~0fmW憄}To.{Y;` "8G:p/LSh$p%)QA>^^ڴ|vWlVlH[+A @q*OX>[Lu̕ec99^$yZ/fTs v,zÁʅpi#֋X/̀a2VSuUԥY(Η!W?wY`SwQa !@-C,XqԋHRewF>7 ZgZݕ\\CE1ɣ R''n (ƞwe?rW:AHJ TPeIR#՞އTȪA:v'oqtRb*L'=żA{O⢪R;MN<4JܑᷕE== 's*ow' i6c )L (vrl9h₈.@հ=D8ղm1n-Lp `"JQo->55iQjjƝF_AHTsvJTrU-ԣqf~jǟ^~#~#7w5xY@'xRnrM-IW-N~񢕫`)OEB4mȢ v>6Oz EfV&C%Q #!}A댐JSwaOCBxbIffVCP`A{?qۧvL ނDd_yp9Pτ"C1kc5A`ʻE oC,+I86k, J#݌|y ݼ,X#$h`bH$1X,li$L6:$dgP]jr5M?u^v/}N^" `cu9'|*^>uKAgX0D](hN}4: yWk͕A>#"6+џnv?(Q,i^ Ē}`@O 4Y2YnhZuRF$meFèx+4gvƑ>yjd&M/b,?IRU8_b7=uv Cibd?b>(7}>{į9H7xRZĵu;xjY{C1~.Z#ߎ]z{N=*TV#yq8镕P9nKV)9+tgyyX9̹>r@'s,I[0]mBv'o2oۍsk怐e s&W+Of[/#}yR۹̆_IJ\C!VuM(nʋ7R>Xe Jb][g$gCFn@I R)Af.4WcowݐLMdأDu[fe P9T1z>2u0 $, \cҰL~ƒXV6a`ϊW":Kb;bZNhď{_+*#h-ѽ<(&lJ&t'/d. f+J*U-״0Vܑ9Cd0͢!E=OKsfTމu.U JJ6\/6voekos/7ʯr< Tyɉ]6S h;@K;EkG;/H-")%>705 ~CJ=hrJ'WJBݞq!Z),j#l! t!-Äi_]?3́BR/h|~gU #B}UbR9G #gឩ%E-ժ|Z-G &?[:~aO7gT>X$`IT.`~!̭8;}c[h,mLGm2:IbɆ7̱v ]MPmTx՝:zAD$\⻤nҐ3R9۹Jxa8Dy7-'U@cajuLy.+gح?QF":{]o"|X_*J0(t)IdL2R= s4BNGA3}:W]B% ثs3cpXIu|k5I'2Չ|-~"| y|7A#8<҃組$%_҄+F*mlNw\-1/R!{hP}w7LtS}k$ΐ(wTh=J-|+!oxj񑖪đaH캺#fR^%v NPmsw^ ~j6-7@Sv0y4YEqpELd++̽= J(ȟ!R640{Vt@0'HF*'_ř{K,/yCq'%>A=2J$+Hj1Da2e5@3֕Rq\bҋFh[=H-& {NIњHy|^w_XK5&܈%(`$ $|5:mM#<.zfªQə)hiV!gteM(k>#=ɟW^-M|/N򸠺v.{͆i |eBE|M ՏE^xϩ>Bz:Tq;EK@ ~JE6u0>`%NQ#cdK838+32%5 P˯: *Kx(_֙fAlwg"w!qǷ*tT` Hf/ik2 YyTHw+lDe\/'gkf<3W 9F0 c-{bJ'+L-b鄔!P#nxiOwGᆔ6fRYlそ j=*f )22^n&{ .zm6nkNY4?r"ѹs$%l#<אiRDz0ry< $w-Cg|.>J_Q wQ,_=ӉY,;(P3LTf)X626x=6Y.It=Ա4ܞBlµo]H(楐Vs eJC"K~V0&g_LJsE+|Iſ<&WoQGdD6uKkrAK?2q\bQ_t?lؔHkGwؐ ދt̀*%5Iz>t례 oMMF_J:^9koCk餍D:"[c D7 <\'qAVh%//nVG+JH먢ZJnx7FZT@Hɧ̉2_0CD0Cr<%~Éա8v@&g~ ֯A <|]iN<1-1}wƵF(6bTWDN 2|4Y+m}^`0ɵ#]L^+gS9!YQ?L+ON:!0$M e/zgkf4cay>TNtلxK{v=L,3Xp%Kd6=?RƗ/)(ᚶ EvyF.iYo }"CԷ{)%}0߻`$t|VlTV׷)*EEZ`J~!/6H0*cɋjuy3G>prfyCPfF5*sCCa, 9CM }/.Sͭ, < X\?S'%c 'VZtq <}]^x W:V>@*Yx 22=X,ɖ?J@hk~gxvV#MuIaB&XWjwNJ!}Ѐv%ӑ/7/p(yVJu@?AM g^csמՐ^[Jq7HTk/z&P2dk :W[feO1VVp{|` fvzR]fjE2K}4J #K2 *֤z%E_1~e&@nFdYS=dB4KnVf r6^&3S;xHw=N/Im| %;{GNG\&>Q*zIZ:#U+L=X2OG1V8{YͰB}zilɸ)<1=S򢔭WLzL~k}lt@{yA,R?e"eՂ $>ٟn3v7k䛳goo{+lx-e8n`ң;cL BnmX ~#CH( :shq3f'[lΏH3rgE|w(L[6a)'Z{+Ԁ MJ䑏HTj՝"g 6E9{8 h71%G'R,V*YGђaF6pfjYg )X 9IR\c;s:;zh[)"HFG24͉AB'>%S>(9#?SȿiqgKҪ+;IAbCGE޻LHzr*L" MV#zL_$K~n&IpY1 =L ge0uI&'e6[)p*y{Jt d4IJS Vw&̠nt x GSm˿3ZBԍ^:)kK! v.K^!@h~j޿c|%ξ;g'>+ Vǚ cECȰY[N5\EtQ7W룔Z[^dHsv~+[ަB^K߉z`f9Crsٯ׳ܛ$FFqhKF{}5i7[4P`,nUJ4ȑ>"̙ϡ5GWb%k$أr;+"d,Fɼs?2S_&p`b_v7Ce=u]k ޙvodJۃ[wc[f(eiH6=4nѯ@ XlYƔ Mx$D2޽q>5G_T-:![?17[l<h;ˀƒp=r{}> LZu2 )nFkC>sl":r=kأ7nȔuBm;83G♖n lگnepu^jG{96YgG0aofDcy](6'pot-7kX\cyv]/7D;r~S6|Q:F/a-H'irS lL.J6<>1R,C̋=٬އ5>$;Qt|-}Q0T3_XSeG9&_,#p@, ;? ?B=U)wI?~Ղ`9A)`Uh։50_[FGKvuw==5uީR T(5uT|m[dIc=[!T*-7Jxڃí|wiV1R_y&(JuuT\ṇW hhE |#2ZTR*SyYMtY, ڝdE@XDxrYʅ3XDPUզ‹CHqϟ/#hug@E:z\zotFl.Vt yW/G.G[^dM(yv~)Ĭ/~D67rP$+.or9z7τ,~ =sJ#6t6N;X$m VPfQ9|JJqTw_k/a-&|h ТW=Q OJ5 &PĜJ*{VB.bxmA*OUU-)d{9QH@!>˰'}A|rƐzƠ53ms;Ԥx0oD*mtUkJ} 9B=1_==x1?w+*,H1 o]d /n"T<6!#9y<"cwSUjoAġުN-4S[\/GW}tPu?hJk ' +Vu %;\Ijɲ#`$E0Ax2| gW@ r"Pl62LfD D;oh9q&ķ~PM tǿ*aAbtcAs/-n`»H7uYmCf]VJ7-Hř:<@LY،6v6tdpG=maghvH }R YNUIxK~f|c+.Z 1pBt/kCUyJ%b\>6˚^6 f&?>?~>ѩ[{'{9X|ty_ 8, I2IM"g42Nibh<iV RD~':]zAsEyḯYԜo^?;oceHVZht;h>.uQfc~}'/8ҽw%?ASɦczy'F*`ÑV+whwA 2ϱ^`(=ſ.W6:!Bp[ZvBVrO,{&6_3>C fYHF9_Bk8iGxqw٤Ys;cS dbbq3`nd%K({{*6c aZ<-9i3l <y=sDRNh7"HzC7د*94pB;/mXݬYSZ 4&gTǼBZe{KNU?ٝ1ЁLɧ禩nS~t5 fMD&)!LDda$F1L|OVO 4 7v;FOv?e$WaB&{̖NHMRlp'F?Tζ&>7]Db\:KR.hsbC?'/LDzQ3 #/|'jiRB% hHaZ[<5f &2{{^K;3e|k {}Ί s;Re  ,Y ='tn^5F[Dcш/o`^Ԯ35g:Z.3W9\b0ÛL7I'טߪ(]?՟FX&]D:RNoFp%Ŗ ٌt ZdP> w;Wbbǔ|"n>cc u s?m'!eve(ׁfF__\fO{8xo!+uA۫/$LڅoV Nu䧈xr=fvlPHATA7\Cr؅<9K|"aDT) "i|Jk^6[%Fa~aM=im̟;<8Aڝtoa?u {yx`ڱ]؜x#5l56t;ܹ^q  RZV n07)Q,FL:MgR0OfI.xp; 9cVW DɅ/iԔ 2p[Z#ELC+Y"iEQj~="]0탢bٝ/5 mBrb{ܽxx-)vj܏jT1dS&_>(֦D;ks &ۂ9m71͉Nh 3WTc叞iÖ}%) M6}4m;Q摐Ҟg$DUBk+ăbHa[_l-3Vlk ,s*) +;Gw < Grw-}ћ[<4ЩrKhGJZ8pMe0떳yJD<0Y◻YR~wU,'sh}SҲ ҅ 0U ~P!@M8.4^=3IP5Ko67tv3d ȰBմ `kEz0&+WUHY:a@4}ʓ*@V|n'B8YMg$oqL,b`:rCfj{%z~JD:>ƥII@P[-(Y*' ^u+W ' 46#tG"!5mU$Q f:Y +hj܆A7v2SIݺB-b`'3Di]u,ewbR½- :فۺ(nsUl omm~TdakZylJwjfj締k?5ԲSuB늬[DJ$xū~Z6!ֱ傢. 5l-iJ\hT^VٖA7\^?q.]=/K4ôwnA!pϤ5׾t sV"(7-rd]Vw;<@2`}'~RCUqʕDja(3PCuȩwq7Ơ,KvJ,%3iTELu(:NWU'l/hTK\6pSZF񗭵uƩEF&i>u5:gi#Q\UD]IV@8S"16pTH2ULCb37H\e]snNb Ӂ?S7V@U+!^MCJ}\Y2 ͑rO*/)t{g CdlfsQwФu\e I{jޚpcL:"#,Ȉ?b"OҰJZKN'TeR 9cG(YQ?4Š,BkJ?&;̚jeĤ?! 6"=>r b&Gyy(UPS-0Vtqbbx W? iRn=j%Ⳙe6H3tDh'Lf$_/*{P.AYnɳ(n| t-]j?Ymopz`ja$uߘw1ek,UG!RX}ة) `G_ZY]g3 ,}ۢ{dV"$/S,3rv'ǼBI°HYA,;Oht,Wˁ+y*ÐcotPKJ a;oTbg 9.7͇L`<1o">xhB>|%[bō,oQv5?N7uczkڍ"*'$țfY :<yh֛aFƫC[,q99UBM%-2 ,&#!fD';J ᐻߍhI^OPq3;^[<<J弰 ߂;SZ@/TY^×"׾^Mir"} WtAc]qIRW>CÓt2S_ĸg,ߞE2;;bn U?vU#edy-KU}m uС2 H쬫TȂ ;&զ5u|݄< Ȩ"Msĥ'w[ӵw@hhFUJ#d!8=^w{Q)*>j%!.0ckPhU"8m Fr8x4 ;L̛)5A4ϯȖ7ìtNVX̘)ׅ+J/jaqQ(lע`O=WLo$prtp?v`"3\crkڒhw5bZW:CP2{H 'KzOBQo`&lcT\HSEJ-)ٿ"Xm6+"Zz;^C$\Xm?jɊ>Q C**A=()sJ~1[%U۵zmܰ~H3/LS<}<-mI pFY H4mcjٝe]!}\/mNr v@{h<#(aWɓ7֘j1QքEDwp-= j"P@oQܙ'fh)02vMC> &5pGCV]T_UX}(>=Z( 5:c 80! ]_+WEl_Ý͓EtUA7>_d1 Vfn8xX[G(6\/ÒߏkmԍZ^l7vi8ݾvOGJ:FdBtL≜\,?DL)c#. RXΫv<Ɖ -ڐɍ̊9@3/i- x=2[ >^Y R^H SLFf#5C-@2#--_NՇ˒_4fA✁KuJ@b? O5rFZc2 , aQ0DBg][PQ{ᦪr}xHx ÎŅ:{x^B|C Ȑ+Lm~Z4ܺ)Agvx%1T$Ā/|stjs4 .|Y%,U& ltI gz{>l (OyzGJzuxp=[n*-q^'P14?аn; ,cZK\ =_vt4rێS=(_g̰"Lx-jFJjg=ُ)i`Uki"WS6yUXꑠǚ8n3}rK6?&[} SŝAdmS>tgp_8ɾhyFrVՁUYG0B kAf *lpM}{e)0Ksj)u6}~q39K/y}}T H4 d{0>vN;o/]<& cj`sh!"@p(w)${Diov4qa&z_4Ӯ5SuG#K Re8m 4D%xFba&ij$$4e68CK0˲gdpqXO*9x a~s ;Y֣$)7S u?!TEҨ(kE[bq.=pE^'%+oeKYe`=jn'ᐼt~:' ȎdVmo[=X r[.L3*% o鑎N<:I%>B Bbe=(w᠎#Enj͖I"I<=]OyUPo8!-9IZF؀}Oc>\iL/a} ۤ9i0.Õs46塖S7*񮹮R Gveu_Nn c~Sd'9e.Gγlgw}h#yЗBcy.=bȑ3g/ノb֐/mD+ltrNl^0i\ro$~{^$Ϥs GW-SכYv}Ad֟ԥj"JBTJ7ʵ*mb}UY b'k?vT *#_j؈>6v/j?j+@MNc5k o)ΐ+K,rҥuUp'T,jL{C*/ mgvHQYL{Uo牠l*߯4q+{B՞ŝQ/=C|bsW >Ot)z ZO}ڧ-E r_Vr,d:樐dM>\rFc`qfOfU ߎJDl՞Ǭ`j;g\ww <׼/shK?I/}wge򗢥Z RaBMGN0V >.T*KQv2oze2vǷVnWjGuһ)aVurȫ(;2r؂|SD+ɠRvNטW-/t8u 7mQJȴ&X$u8͙qĤQ|rdN*-KDbr~IÍ5xU{h"oUT[ 4=}Uqi5R+ 1-C՜sdu|_9#G#~ Fu9 Fa*QU~/:AsS&v9M QoŴ(>lkS" 832x_e~Xts|) ˽[AON\GMr% OYeg?̑Lit>%- 8d+Ty#?ΤM}r堥pO0տ0l >_9"޽M GMι6=OV%8u6\ЌrBYð)x v.ᡒK<~q}s IM N挆Jf%6Vn#B2 \]3s࿱%^ݔU/>vyP_r8BK 0CkĿ &Ӱ=B V")@DɹW7V |?6#= + S Uz)]dmp5z[ ^_OZ44Lwqf78ψջ"e*cQMB۔~{U=QDU~ u䐌 nG0T,eR%{La^:(={|r?%s0/Y|~Wi--ѡ1N-*r_r+3ImYSR/lE#~3g/V`nz ӖKɕ-KrZdJoUAz_Nzir Ͻd|A y GcPFDV4p$DR0,Un)X s> 6L fʋD iez)-|e&O~q{)o/]󎕔ZsKTgIַ`)m.Hu}HSvOfa+6 M˵e.38XZhLQdxw6&D`yIގ. 'u84]b@rÒw;'iNR|Hk ō,0>v'SϮYđhsE&,\@7`BFTS9GXhc+}/Ę"碭'z6N:u`dWHpvU`f:O%`q?R7UIZչFET,tAr{N-. oLdhx |]}/zONjN^/FBgMP/eZ 0ɦ Hպ   DEB{ _"7$s'1L` UziN\2҄ w9t7疠z˄3?#}eBa<ȤY5(M4Ձt{WlKynh;db؆xe6.'U$R #M˞m 'T[Z&ŅPՌؙ=4vq6μ" H9BͤS=1~$u$ĴEփRcsFXe՚-j(-yVܢ ׽Sos"=4܍I46ުd$ҷxdJ4 #56hvDu9Q*d|yU}: qhe*:D"TYi9cD 6#=V/ ;6\AAYn+,Q!RӅ_xN3SL>YjG |!L_4 K;]}zIX ua3b JJ0# +0,>m K]ar;=*Wk17qBC<ϕ`pܚF "FДzm52n'ܱ5otUG N<ݺ/2,+V̹++V)I i"ǿ{>LjG9WBB4-_J̿o=jF衔GeW L=ad肸 s;duWG=|=r-g)#gDծtBƟZ݉|Ï$kH=%ɚm9OX?^k дGMw5q|8J|![VB^CxuYUjS\BFў: e_s\K; VQNqZ;`fLa~2P=jjl9y?Xxs+蜙:i,7R|DbbKO\P4TYTx0ICV"p$r)pϳJLvÓݑimmOuA,?>$OvNPhT&wrO_ˮbҺ=r)RTscK)0ԍ{MZT ZK$h%szlޫRAFâ,JJ Jx7pܝ@+&؁|l5EYvF/&Q)%< Wvښ6-8zM{x,j܋3 ݒ*q ch j|ݢ{SAZvzjtQu絁%Ƭv?k.Cy{͎4ҧvha|D&0 Je@qa+ sTj-O 8@*viCoOƽq=O_~H6Fl`-mo/0; ?>X-}n Ct9rzVj kg<9[ 8G<2(jN9/&- \htYCB?cl5ۜf>4W-WTL1?$JP-P8#bӱ%ex"h)#VkT?f@Pz衡9ǛQaևpϒïX{w6;4[,a.F>&NQv+f##$H]A$Dvmz KYjL!`$BJiu]`t_DY b*0^|`٪[ 3-5u,VNV+pl+JShxfR ՍnlVmnL9j|ǹksOsXX  {B7c]H|¶G `mws-<9 K3贜-jxށP<ҺGc;AhVy`)ƯRDT1 V[?wS;e/\ iY[3ҩ_. M;W_^0E:{LHV-\x/28Л&o 8fq/wJT[ް HI`ϳ_/c ~..5@m`#B ր]SIC1rŧXyW>=^^ӂ)KrzV,3qمKHx;Bˬ[9c6 'Y{QlBӈ Le^ ʁ!@ 9,um呥?Bs>Gc= o) @ l}M(|J-Ϧ|45 y󔳢.5SBjnߤ4Vř\^zǽ$>ޏ:/aֶJFF<Դ&ѽQ, P@D%v;4uyk҈xCMYA=fpJ Ա5nC!S3zk)J3y3zǜk;E^HC-smǐzڢiy*Jp6xsy]Y][?bo~Sh0 Z zUsuRu";t($yq,Z¢26v1Lx @{t5݈;W NG] kpڍ ?Sw$׾_kbg*jm LӃ҂B 0ld*$at92/ y"juRa[.w=Sz3ٛJ`oIהm1 HK3яA3_ 6ᶷ(U/%Ŋ p -U?^岩>Z,mIp*%-rlDI .'`.|~fix>S  (* b 1l(WBxCI]57)e/rnoV<ԉ2',m\ QD/9ѵ|/ $`(g =R%D72tP@e#xİٓCdQ|Rg[m,]ޔPXyza1}>\?#u7L$McaDP"洭g$d$dTԱSo[$G6vNc,w_p˓c߫9C D)K (|ed2dssT(ς/CڱlJ7豆7⣠ŐTiX-;IiU%}qTGIjyVݚ* %ܱ?I(hM^9!mPjK#]~2\?2K'螆帏!:ֆlRSdK*%Άsa|u"Re~]cKqXctcsxOl]t-8Z_|RN9a< F]:-zox/P~V\#KԲ Oʊ&M)1ޓlK~AKEp/Ɵ6|>PUZx܋AL=qc}Ϟl$3=b3^%O\k/kht{ŲJ>~$uSq;+8Ry3L ZP塯CʃɧY*A=>UKsY`*;O je)H0[xrp j0`o*8O EpA% tރ5α@_0&k@h,sLa\{1W%B$*?څ˲~ss6o5A]M%Y >o OpoQuP.GE '!D/B=)tČ煼Q|26oZY m~OZtRAelm9ں{gci3I+f AE< Q ,u?"3^UE5.WT ~j\U;# .1f,u|[NroȂ"ai^_ڤQ8 <SϪ`TN敪ǎUmUzdl%}| h'5n^&Roy\Mx[6%PIB"U L6;vjG"H7n526f!@ChGu@M%b@vn}SIE,ozu;&Ag !*nKiW 16Q6_ m 9o{!/uyɴ\&4!|s#FN}벿#*g9XLžD}|Z*#S)s\ ߃=t$]3jL!dZ$Cl݆sx-2\+Qz3.::Dj-N1%=8(<0mqI5XqOa-$d0@J vuޝ(r Ll rFHdm 4S$“867Ѷ͕ H|U`5ۆt/q %P% Sb"h[n+44Uul S7I0wlYIN`%d̐;e.AN7ڨ a(6?U>5Y|6TFW>ƈ=vSunh3% F'sb[NBu#h#*3kϚN$~1\ bTOA.Q{ =_\B*q1X G.3 fE93Z3o{W=|F72ͮsu,2G맿#;Eh{ˍڂ*M Ya w]%LW9MOE,e[e\:p8vBH؈_E=ٚ!q)˜ʤO"aBN/cN/O/3ߌgϓ;_&G {#%u5(bgbE/ұbk5 o#*b}IoOg!7Aop{OR|=)2v`ZIzX;b엯4tJR`ax ,ȿňq(s>(ޡ.l\)ɯ2Qy#^W $ e d^?|B^\'k;nT ~~ j r{WF&lrxKG8*%\QK2F~L ڐ5ybP£;[OmLK1P5AД;s^晃αnO}2u t$Θłi3yZ_eiO8N%*/[v4Pk@ 4kN_'!n> D eoVLu[Osb8ew($K.K0L@Ʈfja?#Ҭ忱DFŮA˱L(ɄkHvwh%CP'ۤq-pJtMTaHA=KL'QK zs{be~g~3-k urJDՄHZ*IAfNTd}VhɱޟYDzOn%'T*(D9ߦ5OI5+\4ijS>94aK:[0kȇbN)&7[h_y^c0v >NEgC%8LAQ*`c?#͚Թ0J6\ yj-bO;Ԡ3HFn|X@ZǏ^G{ %dԳ<xÌez 75TFAGՖOa-Y&go ~mvCvO6arKcM-䭨ݲvNzJEMs&(ҢjǍ;j,X[G&/ V {]$#̫Ueft^;WA尤Rßk4C=| OG\:6aw4I\ac-`dB-LyA. X+YV|$nTcLՉrfS5E͎=0Bf[B{>$vkp85,N^2;#XM~IҝB}#B!}ԇ kќ2 "]y$҄7J{yۇYNnFL ;|䃝xc,uDP} y / ܕaB+}>ޕ^kW4a _bk!ofQKiXN dx]eQBRY=D0[ tMPVe3?Gꠎ8wÜ5݂;R),߁qRd^+!q-'7t/m3_1d'`b ixw,{J xet.mlnڨK0ĉjzCO%( C 1&(++CK @aP䥽)FK_E͹m,nCcKy!>}z>OA 5ӱVO=ƤU[z(8!*5|o}Sj4R` 4=]_6#Qz}93ڥsVEH(f/!T<QFUs[In/Rc !#ŠQoE @Ejwv>Z΁K̓p;HkPF0$ՙ8H!AH"Ӛ(tZkzMs7Xocvo \^{_U>>!M!_~h&K:\eάc,R/p}TɼxZ"b!68x*Us>5ӡ'u7aj "J/HIIL9EFe@~fUgq'T}k]MFs|~w.bQWQIe y `8 ?6P[Z>OmVXI2^Foto=y̪1f.Y=M8A^,YmXFa;ɗdA뭇@4LOzNܯs:М9X;vgphj$5- 0ڶx@Iyw)GDi,%y( [:!}^+1Ag{]/(=R0^dy=NU܎ Ǎ.EyWWɿqTu8!d TSBmh0~,7PmLc3"1y krSkC>8ӹ,V1KcE%ɻ(}S+ދ }:?lW5TUY{.JmuB'H=UסdjGۼG|Wu)2 ^wQfˢ]&yd0(![6&BBcJlG ~sFzż:_PCLi 598my?; ?X߼9~_<)$M9 KRNv!6ת _>FS%@>p%HFȻ%;ٌJqbNFHņlZ&Zt{}=|7<_IHTȜ~!:TM^Oy4br4V9,C𡙕 d5gVTZm< ӯ/xs&# l5a!N&ۄ-bWݏ#Y9\B,ƀfw\iZpLrČ'e4?R nr1;}nW7 8 ͏-n,-RiR2;k6H.j5y"j%`c 2{{>7/fҰu2Y{p ̣eGQI5I0,eEp2!0wriAf8/8H`03L{K"{~~_\eY< e¤AU"OIR|1EѰT__hإ^/M&bM wʏhqL*I}EӷnCPtnyP05=AR\ut)H,q2HG.DP^hMg=nFR>K@,#40ڣ"$‰z%Vrmip.6Q:#ؼ1rʆ˒j 0ov Իȧ=}`6@"tLc|<2IMb"8ZS\K{D7h'+ ݸ# ΄Y&8xC/X_W g:X)/#@Yz[B҅LnH[TF{%ewn"dAcaA~, X-Xֿt?`rI{RYř*!A\_Yn.kL`o܃rju~u lI_Nnߩ8!clꤗD F`e&@jU.moWHEBFF=t^mI~U6dBOZЈ'RY}.C|4 /DAI7`D%rqź)4b?uY5k~wGQȱJa$4iXgN6һwƷLl~^kdIa3+ |@:4^ `vovB,,aqtQBCg:Ddbc)~1.}u,86}Q2męq- 爒_#ͷ>e~hfmApoc;E PN &1?n?BNZWק= M}/z[NFHiՠWƲeaf|PBT;X̰6F՟wR v F|4*%mG+JmWLgWX6 Gw+8ZXc?A˶vioTP!³jW ,ĨCu"ӆ¹Rޱ"@n$4.IJ4>hmhU7w!ui%K.Aw:! s-g$LpWPҤF^Y:G&!M$MX@kF)C n*?_8{uwLKuf%֜7*L m\f'&Ď4`a#%xt[ZhHpvKSo2 aHsA5Llϣ yVնջ<*[Ggؙ?Z5tڕ \ɱ!ku3?m 4C@X$5 (T]rLJׯF($Y-XPQ::]-9C5Fb)8ôBL`MVx4v0\[n 6#ܪLfy'tg=z@4aW Qnw+dAy͙׊0S*-xfJxTc\t!]RSAVoF3xϏq]J}NRr8U}t %ZNd8˛asZE?U/=2HfYD ynh@XycZrù?tƁ ~HVjDG)v%M #mZ@vZ崽JwB"1 Rͤ[!&Lbze}>kU6Dz94'XDV;Å޹U8LpJ~yG<nf2,xgba!@@׎V/?3$LwϞۉj#~wJ,et95_] DŽ'{ډș*H]n8=y$?ttє{ &< %C)\l|BxfP{вQ,T Bt>meLF/эg"ÙPx62v%99̑PFq9h!`NI +cдeі! ڹIf?ز(nI ɞn D}ES&"cI3 7$+WFoV4-8Tfi['1r!Tz|VcVC܍FXg߲zxόbJ(¿(h 䲃6j$Mб"ӄ&d.N`OM^(,4ppWq؉7]րCBote!+aX4kϦ}KG,iF0RM@^Zx`ز HsS'\#Eɘ0O&6 DYܕuq)Htnxd— +BXv w4{0'(ˤdtK,g,1z涃DIv1JVŝ~._ thjwujWCfpb215|%-^ 4*àeH|"aeá8UgJSW}WpgaY#نE;ֿY>c7wQ&q̝|g͏sBuB}rmg<hBKCpkHinl2]Sml`h[y^U>A~rbH=nD~-OHcon</4ۇkBbܛ=s 8QJG_&vpܒ#?A[]{#sr%BF sf\ R#.[fsd>];s{!IDݰΨ (Z5 SEueLB>U9.Q7;i)c`]ٿQ6qevjͣN-_m!G`0Y;8$],a6~\'Gh?MRP.Dr'd̾|YcQesOQ)mS&K>HO J㫳YCrr!#?A$6~wK!/2I +nqiwjoPΝ>&8  ӥ8T/(GpLx_c~D m mVrF ԩcok) =6,IswEuC a0Z͋)Vd]_bS{EČ)jpTHF*h0)y=d{@#,K]P Km6nau r'brgُԑsaYDEH-UApdRU Y 9͐hգ> ȡQ:!J&w F>Ƅ{`bTQo.twNV5 D;X=fL.~O˲m, >ݹ;ek6ЫR2Gcp7+K\vB KJdT=! K7H!0Ow?CoRysW1S,ZʒT3wI'L_YL;.-08,TEwkEKz/.Sg zD`_ -5pcg wN2AJ#>Ђ$1V2s4vrH{*j:ȉQ&3)&$Gx{DƦ_i1Iw=y,a ? ,eO<ھ 8H,y5+-{ l ';;D,č}Z^lGŻs~oMb6zJoRyә1" 9ץ^8{P">bK%=4ĵ5zXm霌!ʮS-[Wj6g %yFvXEk!I4.."T-F#Ts`ԼB Uvš(`N'T~zeQQrJ)kHSԛd"e.%zn{3+k$&i [/2F@87q7׏g?7@­qJOɇ (w'`&PSPUiآ|saI G\duAH7|CҤro4f-M˓K'na Xn 8Pg |l֢Nxwg-8'EѤS@(HL@YȫIVouAGf<s~TJiJ#=" LPOL`=0d({M~O ZUGz%gv>5n2rN30ųwVrGaO~kRe+X XFnSTv$_T$ؘ3h6K\N9xCf@8Z~\}0*$͘#pTGN8c31b̈́MÝN,Kǣ yO,< 8[u7]IQT\J4|;WNZaRFf Y[0SG "HQP3?ǮA'U^B?Dwz ௦zDZbxDuy(_ RW+ȇg묠e2%pfoYGND''-T3LI+-x2GSh`H9+^9,)OuXG %})2|hUu~g.z@ ~aݟV1Ǜ~[QJozRhE'Ҋ7)a} ;̸Zc3m3*e}з_1KUӯ@3 9 cߔaiP Y'?On Z^d >`CC>~h45h>qR ਝ'7kj/n `$uQ㚣e d!vBa:aܳz=6jOsh`y_*A_BG7 p6Le ]bNMyԍ0gq(߂4߉k%*fb\^Nwh9z~o~#-<q.dھjm z7Ekza>(pa:%k,bꉣRqG ˆJArcwVphbR  O, Sn)VMӺt:p8I&wr5:؃(s<pS4{gshR*4a7,mą^~~^)|z8 B*ޚSބ4ۄ`y˜- S[PJM&|piѦ1ݒkLqF*H1UEzVéE׷az=b\)XS6jrj] Xq*]w M;c`bdp5PXg7"VP 2PУY|__χzA7Pp}}T"n֭Dx`IG_p:m[^ɓNe‰K,x^@`TpwffVO sC^kY |%yg? _+!X0u8L!{Q\ YZ