libapparmor-devel-3.0.4-150400.5.3.1 >  A cÏp9|cp[40PDz@\#1\72XÛ¤"R\Q'ethQ,I )elAB%B&2}<;^{UۺӺe4o7luƲYN=yi zV#;C n[)Kaxϐ G:sx]:@$"455v1?K}n0nk [m* $lSn!U4@G}jK3GAVW5s$)AD,tt6mZl&,>p>?d ' Y  "Bagp   <  H`h(8|9 |:|F]GpHIX Y\L]^bDcdsexf{l}uvwxy0z8HLRClibapparmor-devel3.0.4150400.5.3.1Development headers and libraries for libapparmorThese libraries are needed for developing software that makes use of the AppArmor API.cKsheep92ǎSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://launchpad.net/apparmorlinuxx86_64"C$ C z  A큤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.so.1.8.2aa_change_hat.2.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibapparmor-3.0.4-150400.5.3.1.src.rpmlibapparmor-devellibapparmor-devel(x86-64)libapparmor:/usr/include/sys/apparmor.hpkgconfig(libapparmor)@    /usr/bin/pkg-configlibapparmor1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.0.4-14.6.0-14.0-15.2-14.14.3cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffsheep92 1662567243 3.0.4-150400.5.3.13.0.4-150400.5.3.13.0.4aalogparseaalogparse.happarmor.happarmor_private.hlibapparmor.solibapparmor.pcaa_change_hat.2.gzaa_change_profile.2.gzaa_find_mountpoint.2.gzaa_getcon.2.gzaa_query_label.2.gzaa_stack_profile.2.gzchange_hat.2.gzaa_features.3.gzaa_kernel_interface.3.gzaa_policy_cache.3.gzaa_splitcon.3.gz/usr/include//usr/include/aalogparse//usr/include/sys//usr/lib64//usr/lib64/pkgconfig//usr/share/man/man2//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25815/SUSE_SLE-15-SP4_Update/dde69e3d971248bd3c4519fa7d31ed5e-libapparmor.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linuxdirectoryC source, ASCII textpkgconfig filetroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)C source, ASCII text (gzip compressed data, max compression, from Unix)PR1ц(%r-9 'putf-83eff9f969a3dc1082f7b64af7f26dc4e355bf42daebe6320402819c32f02f609? 7zXZ !t/+] crt:bLL W/5wrji{RYCķżuIm4źM]cW+ɋ^ ^Цmi5t5̢gZ jF PDȲ !xZ]fQ$"Fb%zQtŶB<-6C'|kAeWTQXoPjjSHFkaC{]D<8~ <1֖DRadk_vYnCޝ_^ GnP,X$'o]Nwp$2+X=e4u2Pܷ_z\ӻͲI$"=׶nBKgc Lax(X˟,zjZh쵫Q+kUy\(ЧoP;4M~U*ӃK+ŀ s.&xjvs2?d V~Xs& AcXp'-o |(KG~^U¡i]1l4ES E)P [~F&OO7: { ^׏o(#Ћngvcy'#K֤ VNXt;~tbẘb Ds( &cVdimA2Y@>@\s};E/Z'Ӵ.bO[ct½%:)FA[$м~c- V S! @ձYk:.U@33Yln1t?[S*ɣ4B@e~JrS'iL=$LEu+1RHb?$H\$qst8 ^[uMx Huf-*Pr]5YçFǵ>c:{ ƫA=s;WPv?i />~mAр.IB|G$l>AHՐ¹2SiXљ m >f4h#6t+oV-O4.LLT?-Z LjS7<_!g0{$nՀZMFB>dK{Ev jc@ +waX'V[|ZQfHۮ͆{_i?dki3vٯNP`O?".bptVWvWDڵ,yn c U^V΁/iLk;~Dܧ{?F(o sknF\( -z֕5պvr?oANCv|q'z|ctϣ5a \c9ܗWg &vkƻM|Șblbߠ\~ n,s,.Me~Z]@7q\%vN۳ao6zQ P(h\ 0ؠCm~֭S` t fM<]a1(ٸ%LgW~W]$lޠ9-'g]eӧ؏WMeFTZz/  e*DXNKGf1_GOY~ NiuDk\-P#世A>/~LKi,F灘&kUH[|%%մ "A8?(J^WҘQs3$ݣ*)fk0$Y%IaαUJ+Vs@opp"-3t)Op4pYeR)nf|Q{Vmt3HkAIgʠ։}l+dS|pXs, Я 1Ǐ.SdQRίDٞ'MFZu - JDH~xGSF.G!mƽSzX_ll  X鬬ndM 4يvlN1pC$Q!m^\gJK: L#D(z(p/\88 `c+s;i~xl'A=v>G2>)ͿEه1l'uniU땀Dtc5$aM=y:xa5 m}Qaxwi-+ J6@dAє۴<,Ʈ q!WX$31k/k76 7#<$he.34ZG"ꜰҠ?9f~&T̔x[4:!HdfPyU0m [}ڪA dώ(:07b:gvWkdRjiы*Ě;>|ߐois4Aj[ǭId| #?gSHSd1&v: GwZ{ޤND䖁ޖYkŹX)_G<#i(=WFauXtpco-APr _$A W@7TA/h)u Mnb̶X&Y?@67ε 6ZXI/3 ~0Utn V<3 [tJqM`q`0 4?ZfEv$K [! RE4a_o~!n]#eHm?՟E\t9490ժ-1j;W6U &u7,- ^8wWi `@*|v)kE_{ťlgˆZHFI' eAXe<V!sɠ,0!_O ݕND"ʶLDA&tH+剸]Lq;Z$NG"Qܱ4 %aKNpf Њ.A ] 9='^[{ jMX日|i†n{*h=U֘i-##'ٍMe:r˨,cCÕ#젤0[x{乼T9spيVnXM >kH溙xB'؛4x{H`?uc_1>{Vh˚6Ycs.e=qC6Ҵe.6e,e.bx 壊1igKW`a',E@nElu@&g:} ^9^+Ursw7hpjXz}ߘ ?ڭc|\IӚfu heO`˿BD" >f㵻r6BUX 3w韛'N2Ȉ~nfl)µRq)5T2(#ܿ|mE`R,g"1VA$rʀ _QyU PS6aBY7ǃ"lkI%w o4)#Fމ, `Oi+6GqGPUgv s CtA/|}ۚd:R>1&7f͉B& WKʆ$~n3Tgs*|,Hl^%cPټ)[&P iP#;];e@-3\Zﾽe*ܸ 3sZÞBʭkfv& ۸RL(Mc+Fm&Dm"! pj_CVL0Jd)fW5Fi~BFmo`%GQ!2$psy+;ω9PJtC +#[ :?E²s?ۢku;z:_TzY@lVW>$=Z (!^ NF誌n/lU>z^RЂ)6\:VO6t~CWI)>uF ޗGo^H'N%<8^ӆiw|\ }eE/z~RԽ# NjI^Kc2ϾQ'r>]ƚ_~Qd` 1R7`b!#歌jv`p:O/iB7Jײ5UO\r]NNSZW`?_P#Ea+EfG^ ^$gL5#`.4H~,ߨ_ggm$먑TP$!,~)aXQЋy{]q &ffe/^HͶgJ!7§ݺpIŔ凔>G*FPQE׸`*OzXѾ :~jc6|,$+aYuAk06!^[B?C\k "_%?0Esvnw"iI0}&eRj*k|cn/14WE#j(6YϬIY*g݈AJL쮃yT5ΖN3Ѕ:uC6`cS~"%MxC|Å8O#Nr; bKp H {tB D&\Y`Kk7pn`f!*7L*ݻ!eJěQ.n >uYiSb*eH] [6&ΟMz'03Ė;zj$зWyt%3 W-c)QC'y`{vixbPA r-ȝ hM=kF,,/4Lt)M,ߌڼ| ;2ð6ū2Y!B ˻.77zRz±Iъ!"F68ex똸hS< Kdؠ}&ŷ?" jRh1wbջXh0]d1rhx}>wZ)Q2Dwp͇Q_wKoa-,@8Sub(DY|pUnjeceLJ]B_i#*?yP@FةC:Lkʲa.*$HX:\M<-ژ<8ʨ%J7^`%bFz !˲LRv^\o[lt_l$ԁ'0Dx"sʍpvRS!1ױ[$/|OibŊpL$BMVN `kP5LRJ͎5@x_GI}Ayƽ5*R)] CKK, \5m\uyv4wiLN@WNRW.'iҙ;Pl^J duTy>bִ%Yf,$geF9w, p|sr-+ƒJ{mz,t$ 'D1{Q]t< &:ز=Opq "Ixbge5FE.po=[CS=+۠b_^"X*g"RO A|em0 +~B* :Xzbsni%[RnL膾WqBn!A;%.2}Be=*3k:jޡsK`HݷjUXeGPW]ĩ}ݴ@++Og "a qE)LQ'qJJ]`Ɛ9&AwA =;WFE~?[QXWffþ+zxe* X6zy% Xc J2kDaǎeT`6Kwrw&kӋ8O7kx)ˈF0X:nivs}}U%DV2}h P#2͖QoЛ)l9WA#!WyX4mm;oI=&.J*`acO ДWֺvG Ɖ5kXʸٸAƈky%|ɕS1Cm"҄wdt7췴gFӱNe,Wϧ7٢(kO TSȩMTqP =U.Ԭ܅u̚v=_%}C8<8*sDHL<9]!aOVlb9p- mje&=x_1yGԽG>{ĕ [@{ܛ'@R۷ *Qz3Ҹ(]3i=C]ӽ/q%?X_f&AL{)/QotKeDۡk= :$%]iPu=z2am"!9TVPjY:a}#5Y4,No׻3}GDR-vMӢ c^#iC^pȪqTs?>a k~]2όN"n;4](V $%OjTcVz#\䕣)uXJm+D9 O~\y亿7⯈}q[9Wu,B,Eڢ|6Ar&[>t%Iu8ssC5]fB6Κf2N#Q}!{MdZ][ gm &}%kdk%urDLQm&ۣFڌn]<w>Ŏ֚!J/ a&E\x'B!n]l^LFLDߚv`Ψ5B~تS9RwB/=@?Ⱈ^EоBQ!~+Z&Tn$pcmmݪݹ_r֞EħUj"Zyh\PXӝ"ւRCOa}؎m @`#*& ٯfEN%8 Ud LmY'̨eDcSyɰ=~/_p}tn*Pj[w_,~\ (PY?T(< />2FչK FlOg$FEݜ|H?2ѤiMǽͿ+֗NڲIKLX" ungp<#5 vd 6`か[Njy6C;)xVZDTGShI~恝{1Sn"HLHmx^gk1DN0e,c0pgx'!*ց h\)e+.Jϊ)-{.pu|;Mc{%0 e-Waj`tĤ{CA0j.yq6WO(Xfgg:.#pJL"r8Rl,Ꟁڈ"U<yiյ%QCıXimY*Wm=c665(7ߛ͌1;9;}B%˨D!M"h9IRBG5CzmW5)<G6fv8 P]sk}Sͭk0 3$Q/N²NӣMxz!5뢷la?hzv;  E$yֳr, 'L~ٙ.zT4Yꢘ!EfeQ‰)MbMZ8e5 0=Y_qxe8;(*(xFvsao*FJd`kNR,[Kztp#IwpK-M!y 4EjI?Յw~4Z;T~vW?N1ݻBm-n}`b&A֗9j2qkZ=VB忌F_X.x5?|Q(ێ@O+dIP߆Dj> /o=A()U dE֋cSo4 } $2~SnS`ǦV7SOhlz?Gd b.˓H5?󓠾]l (ؚ%w kȩQx7z~( rb-) :WOA}9,K"Tdx!q:AzNuhuܨU ōA?!8p,=F؃O/, 7ވ=Э>JM ȗM'G1#} Ԗ?-ʋB)lb v~o }"%q_\ r頊%{f`֚cxteЧ%E8! ~`Mف9E?ȿ\?7?'_R^.*+yjl&7''<·ΠQI8+kݐ "_SR䠶[# {1> ΕtFL1R%.hh&xX-F[wΎV@)[[{nHSͽ^#?L~-\C˱F&'҇:"9gA{ܩA\=y%zDBWQKQ'G83>'k!mqyu 6|_fsd`Kv-{ȚϨ{*Tx&5YBI1`F|Z5PZկZ{4D"‹9 qIpR-Pgg8MeR Ő(IfQ Z.Vu@eQ"}̷ҝ4mŽԕq w x u=Ь;9{ĵ;tn8vAWsLvP+A5[Kڸh6ڽN_5,_2 wd}ėlhNQ%3=5VTrq:LǮo|i=!H2L^tD_ eJY2h"3HT}ӍMZx{omfH ?f/Om~_&oނۣꫫߟ*̯y-D|FSV=p8h~hqbl Fʚ20e A)]˟WLn<%U,^B={cE"I% u9 #mCq";4':}Hoq(+R;){\y[LOM8VlIyf]?]rp&{2M&~bb…WG7| 豇`RZG!..f1xc\CtΨ2֏/fr ,̆k2{ࣆJfg'XGpnQWSͬü w50{/Bǩf5&nyMi]9.CBhKM\ςߠ]'/k^Pa" ӡI*kw#C@^_-aqbQŗh"vj^jal 37"+LMy9KxO6X%"^li2 ~E/;ڹ@>_ŎS6n =R6Xv nhX~]F?f ,'P8Z$3)vΗ[<$ˠ 3Nh/'8|ɤuhT`H&D`|\X9ĜHrDg@A#t|b1WO#.?$' \k6}ۻ˛e8NL_s: b'ތ%!;枧c: Nզ޴IAdF;M|rN󐽣(p /} gdW8P2ELOJMw^_qI꺿ydLV!|!#%4S 6t g5#vHN[eh&3Y ߳>JQZzP 8 *u'7ٞyw:3/`d9ȍq~1-7 p)zV;o{Idcw|ӜAs0pM\+G/I(nwd a踥:=PЍŋwTծ"voI EMYN FYǢ>Pv\O{Ɯme{>_WY#ǐS)H^2FEmؼKlaL?;f}aCWwMKo~al>eɡ~~U/:_A惂IJ`w(ѹ@`yi+$m!de~CRXre.U=-,HnKFfZ w'u77 Z*1;LC=ِ#ɳ;%`[(GMĨSgcǎ#0_lgAL9MFߝHCMfف'i˯1D.$-Fyt \xj!SZ7Z ̣=HKF TIO@ xG ++JQm甔F4#M\=hjY,.gʣ|ۏO8\$@@/׺8`wRH[L'/ DᾳЬox.*rnDrMoڔ+  ŵ+ɎbQSJc%2M۸RT1q Kֹӳ73,l!v_"ݐ`#|A6''/Fb9S [.>}NC!X{Tnu!wCTqGxz U%ݶŸjF0:I*qKeJmi#<'=*o2GIsn%iU dA3?4n(M]@ ?P:ab( `F1ןݤaX & jJ׼IH Q2: ;JīN3E)mrt.t_}޻jV2fĩaTtRSi448 [9#Δ+YO"#"Z-ʍ0a<wHk 2񜲋mcSzE<~@ʬ%pʴ! KЉ'.G ';Բ~UBQ74&6=s"(N/Ua!^k.9ɦ Gz&pd[u-7.]d"謋IpDaf`n#ʓ\\Hcwi:$Ӱňf|-۪کb^yc,&uM_®Uh v̭K~)+z)#u]+*d_ ;_3$Pk^8/sG&f̓_1^nR;~APSϷeRuj/Awq&}jG r (OO`O{X/KOޗ{iG9܂Ur7ø-+1JwMjn0NRW7Ps=V y^ݣm'SJACqFܼ/}]ܨI6ʴDrԩLj1? Jac>[2VjNH|`Fy&qa.'0@Jya g֫oֿ qҮ )0ag3[?=7h`GmqNľ( q)h lҴCY[ؚ"|ib۬lJH _'krvԢuA * *f>E4;C\NΧo0 Bxq}˅xz'Ό<׃oQdļ=0X0=#QU5vY8q %t#ht KN'zA6; X6>v<6O,jRcE~( T15W9! K8'q Գ@ܙU]ArwX?L |QB8m71x̊ۑCU>jYቼPbZn:8|;i5Vֱߕ 9C4:lCx^愛ZyK{G#S"QEbKBLBy8qv՟Ţ:8~|!2a/˜"Yg{w F `R,+\P~7A3, 2"5Uv&JJ)ՀF JJ ˲-@ORi7{V;6ӍFeT|\ @fQhv egLˏ̿F@kVub %(:טws WuYcID +SC>Ҡ }rtLD9p ]7ybi56cqz|7BpS&Ch?o'ĺpw<%\wSsD" ّzݕ_ /)쪘9#^h3cQD_Ѕ4(BP+z:tX$x{t@F>PE'Q2q6BNˢQ\ U4@QzXoA y,5 9RY:qwb ֋7u܀U!cw25K%,XfvJ$ƺS K ղv28~;Vܾc%!7QV=4l B_\Rƥ&QbF8̳9A H(j4C,/iG}/^u s]uQxt 7R.<*g{qw7 Yl=Xv01WeG+h<< 3?#s.(y_4xRC=-ǟ&j npvn(YU]֔-nO_ [B9L_#PB*xz X j+p0F-}ڷ ,ȹOӅi|Lwb3s^xsk-YS6n2*>kFN:FHy!$-T=㏌ lRyzGr."3Hs1٦qh-XYж?N1&ck\-U:6u/ ԡ}I]9z|r_HFC Yi| 2jtJ'IhpLu""N1d_9,IuQ ų἟aP^pu*8v'/2p<1ַIX*Mxv 3ʺ!| 6NaD#;>ܵ~:U?*FsXw[5q5VG^vZ8w-Tnk8#;̜#59P6lxq2Wf5HX+1iR{ ŷLQ!HLK=$S5p.sbSʞ[L:BaE' 01*\xeZBۢ(ټDFe۠M~\t)q]-@H@kӢ9Q2!Nl\ap{Y׍L-"3 [W˅Yj7Tt!Zs8\IQ8XՎ>u #.ZQp&\(EҜCSj/;sw`VQ1.T6E,rn-J!Ҭh\/h$z=  ս8;!#:^}14,,A3KŨ@H/.dW|j)kgn )  z^Yz/ֱӱ~3dykeќMQQ @Yhs}{8x0Y]^9FCD|^+Ӹ3]\o/c22F˥"hI? .Am> )y:N]8@gWH2$^ Vhc׌e6U(83+zb,z sUM8N!X묲!^H25Ob@,TH$mP~F'z5kor$%NYyS_θ{ ąa=QBReA}z GnbXe\#SL/]Ȉ Jp&Kn=eYx& x eלpss:PPOϺ<4nG_cpd`-fcPuX}遜:JZ|x8i/al5N50vE9oRf xw= <# ]VnXo{fˉ(IC4kjVm~Ĕdٹ @v&;Ox,3 e#S|Co=E!bSxZ>\^ڽ~Vee9vCt |1/Kb-fy[czFtC@&Au6PZ5Xz͛\~zn'UcéF{mcD^ :ۊ_N{\7oгTզVu6h*絖]ȭjLMy>diZ:<ϧf3E]U*~~=+ ioxO7P %H=h۸r x)KhجJ Tg;@:#;F+fP(5qG=!SnMsԶɗτBk2+m8qAF\;ORhd!g\GSi*ZްۃH߽zDZI@a n*+ p&{ 4&M7F -0 |ϡIxOCD(_bɢ 4 1>5.5$=\>ixM)p$SgLACצn#E$d,P)P*-;=\5#C`gF 7 + s#je?B;43CooVyEA_j_6ܕ溌Unxfėv"5I~0 &(InJӂP4Ѯ)( b~ǎM @D47Y=Vۤcm(ʗW{q /:<½ݩ xu`yݕh0jIAz? ,2\gb֒>孞EO48Sāw-yOGWqǴF郟FΟ0F壺j0cBWO#jѩ2F [kͳ]:Qre[5FMU&Y[4Ȼ+VU:V/]}7M} }镀sQ#+gj9J/g CBPԮ4{i˥pS5bAN[,iyJM_Rյ=X;GDl[|Z'>4BjzQp}3 tl/)s+*$h=zV] b8Q?-Z|Lf_p3l lޤX_H=5Bd-<5=og}ɓ [O&FĬVj%)C9hΕ:+^t?ٺ<8څ!9k )Kö\߼6 ¬/}aRnei}1z*"Qp*EUjx&R]:NS6ン⩕9ф(\'RVI+ArAa)&[;U[OEغN`aÕlz^WQϦ S&=:HU,i궑1+\eg9|Rs4*# ߪWwK#.[a&O'{|YfD(L?9`R{tY%M6Է&FQVlUU= ъ2QqmtRYKvKt-Aca܈ncLQ\X"EcKE[뿨IWR}k* ˦SFQȳԻDTtM)x"4hI.>d\*Sd+'W!Be{} Dh,r+8ԙ jA="Y/ HÓgi GMEF:<…7L:쌰8E;_rKl6م&8߷C/BtTΊk`/C"3BY?t5/|sfY lLt-xt$ 僩vX 8%U܄vuhb+W3„o}{^4ws"[ߗ/PivƂ&br](-EfyTEVj\/:7Kv}M2sv`/=\cOěP9kV&mAtqZwBb]B]jWo{ `9niZO$!i/z盌 ٵ#:D<[nbLzٶXHܕhDs?1bɝPiȋ^,GFqd߯GK1ؾb-u^Vw:zw_lZbT>Z8lE(`6J&,ã=8}"_b!; T-q5qN) _2'lmh4 uIWbG`ŜE,{蟟NrRBvTR:3^J47;|uzyCJ6/4 ?XIϹt[PM/܉:8sW!"wv!fq>VM!Jj鴔p#*X>/O+f_b)emL6]],w MSW{$SN5yPj43E *`d,:L6;{#>+Se }U%ˎ(ʓcWy?{!%M5/ c1yX_V&{_AztR_mNN}36' g YqtT&/5LሿʏtԐq Xp4*P^DFA@}=%GV1 YC!Dt~[pf(jM@Ĩ_ȉ:m/ `#bX  +5%$ Kׄ"i{LZǁy"e!qý>q8J+2y /J)՟hzo դ btglC7f^K|saЌOzƥT'KcӠ1L ( IetMUdЧv>;: E\APo隸J>޴?We, Iua;̙,gSnF)~ثs"fQ7c6ђ0ܣZKo`]]Ÿ"Ix.7/䔾 +#stľhޫtTtךju/5JvBY@.ݚ/Qv9$Wv}ܕ|{fZU,` DPxd @WVTIEJPV_SJ!!{JXŬ%MS twJalLvl{sC ,9,[K) %+J>v#]A(J/1 K|rΌ蛁&WIf8:G ʹ39U>9ŢYhF4[=gM=N!$OrJ;5R0 fZt/9Kxul\UjVcj K"9, 1ŖZ;"mk6%_;ڪnD ʹmB ai;Y› Dk6ޘMhMWk?}\C#Nذ2Rk}<3էvV~7;8h܌ \C`cWGJE9l.?ܛ+vHrbo>6niUIv~bJí|?rTG2W)1 'X 7R[<'=ewFF Cxj~Ι%Im^>v]8NUnT\tw@~Vpd1nG:8&˥~asU6*sSbO;6$~m =Ps8,V]]@RQ'.M!qwbfDv ]dUtB XX~s71zLig[XGIq,-ۦ'YaKs(rp?B "rXB H!=ƒxL$C$,?lgD6ғĆ8ALiXbKY2KCB|q; xvM/7kу>>synR\{6[(@Rˠ0iF&P/3&Ϯc5׉u u?0\}IC.blOGcQ]xS_]'0%1?A`\cq"e玩 H"t+Dnw/Ba:8=Iz~:$}(օ#5ޓip duSޑ5GBP˃F!p(ag[ZN2h\ĮWQ0d+h?J!E}|8o #E9XO;"S:DD%i7 ܋tlBB[؟aQP9JΎQQf>%rތ,LĘ/"B|f!VF]x  Nxp W=ay}#zLeQ*)HU/ K+bSywVpw#2(mޑ)Wߍ]: H7l˕_cdamv*fIZYn&fBVUDNxzcSg0ʘyW׏}$5#D:M[GP) I-9v`(6஌+f7rf+\xuPDnSƙOB/S=A!3QGb3Ѥ}9)Eu_Eeڗ}[uhrA0=|f]oDΞS91QDVM ^%+l&ڲ:&29_^@LnJ-zOp'{N:.}yخӼ~Ƚx@9ۤwnB.:'F=ˆW=JtE}]Hmz~Z6˰%tv^#~ad l 8S171 8ϧY*zh7w{wl;Sg O~dV>vVXBgmhoKE@0o6".xd n4k]׬AbSe3~E4g1ToGHX3!M.ո4_c˿0̉׉eȩj8&7Gi&@ gC (A bZgx#s Tj;"j|'n]#3="ywxӶf|HѺ-m7z|Եda<1]΅Q_lՙ&:4¥S p4m_w؉ NQl%,a;w-@Nv,՛iftQsjnkS.']@+GjDK2uBH9 9Jll//D$!CXy=<{\Go#㷢(e\-6M~E܂@C:M 憶UD{tG-,cO\A\9⡣\%m mά So[=(mE r&0e<'Wke;$ugGZ]M'j̲=ܑroK%c#˛es(XZ$UU&1les:r)'jӾ;$\Ґ蕰j 嗿P[ھ%ΝQœٖ v]qyPeDzP:SM+:㌕dxaR~o򫛊#ad q7{gs+q n%ӐvX vӺ[Q ȥa6Vz90}p 81jH 1ot}4)^NY0?ܵ%{pld<[jb(PEfqL4 T?:I ~dO\J} @iOIgZt1 *Vϡngbd^TD[P|䡚j$- cR';^=Sx~g%'90׎l Q؈9œHC>H7Tl $xŐڊ{`2 Y?Ђ2_kxr-'E36غ݇'eХpn)gO}GFAyzL5XU?ÿzCH|\STZJ%t4A9u5Šş,24]W^ s0\ 2L9-/#O cɯB2 ´F4ƚa+*cL0IGt_rgƣRFe\A$Ӗ*J fEYe̢@v\G0z74;up?b ;壄8\GӢ2+#>S3ߺ~={c3awxlhAMa9>9=Ղn~|KԵA]{ I /wmzzeK$=9dST|"imL G-}p'ȉƹbSK6Ch~dyA v#ÿ< 8.mkP%2g m,Q2(!lncҖ6uꉂۚnՍC'oΏ~MO(#(~9嘵Dޓ.{M]Ow*_M(j&5 VeD?AOrp'|wԶ7+9E~B%= p/ɼbNbt\ĨK.:OJBYщA1frr宷!h4AU=9#s2'_iʉzx7;#Ai,Wal[h^+ ބl-ˮG}&ho/`ڽ)=T-'0-3ɳciM>cȁr)5 %,BbcU4ij-r_Y4J95F^Rv^.>4<|}EzSI)[+^a(*<Y=|l=挟Ht7kQ7 #fH7 i+ p@qx'H$ S ̎@yќa-ƱF!|<];| zٳ<%\k{+l"i2esvX=q&8>r-.:J[AQQq J].>i)(:ذ#]T!f骎b5MyJ  ƾ Կ"*M%D(HugMQ a :3#oj<!+DߵQ#ǡʞ@=_7f Z56wnwI G>?gh,cYogdzrUae‡%p "%Dw)[|c;9~eѫ,r6W }3.Mٯ܃鏧{fhgZ4_e/4bhk2w>?XvH`40kDWTv^}@/ {ast0*>$ZJ)W&#,rT]VwFZT5R]tMdf@dVmf\h$b<}WC?!J\HuSXW571W%1ݨ E흝^:,WJn3Z it:o V*zeOQ-7ř@s%\ODabr+pvgIÈDS\_lߢ-2g='),h%-׊"E%ta&9m5*";fF0esemX8N%H}[s5+BTsQtHgsjjT/ 藈 G{,mvRXM4R[xPw=jʥ[)W$_R<ècxP-1()☷#uotC|@mqsezyqxQ^RJˆvKyǵ71F 1kޢ{N< 6D0% x.')KϥJGQ/eF'P]VOi QsED_pꢮ],Pw89&֑'eC cQ9N^`m|>etY7?l6(mWdhY6Ջ,UJ?+gv2~{ C,;n{>ل^$/@"yʋ-Gv6nSl)XIȆz;pΆIXp Np{y-uHC4:Rk_Qo!p{kƠ[T.qPj>hAqðY-Luy !ypAhP.Hpx=L8o V-.nI(Z$cht|IlݠD@b_4qՀEƉOaoBF%SR 16O+N46'*H#`8qG Żd?.s0sKlr-߷~Oʑq}͢ƺ*߃=M[~3FPGeYC*L7KG\},6~Vu":l $_-$L`~1.~&Eӵ&Cc-rX&36J qc3 '=l;8j:$_ *LZT7dʼn-nρ]6Ms~s}'w{j>m rf3/m51ε 2 Cs@4DAJپ_6[ 8k6ohUTrʾq VSJMНCHp.qoaq{K:꣦m޽TON̞ Y:ӂ?'9YO^!&^sz&d6]p-I隑,7lLCЧgp4L8σ3GǛnh w9}ݬۄ=2E zs.='d&R7Hh<]VpC@_4;71Ki/wR†g d=g"pٸD؟E kxU}J%tiM> o<|"Q l8& `8ƛr.wpK8ӂONfwDz\u' ~XP p@)? ` Rv$qN ? 6 :Q *7pSN׫xb{vŬ ’xh qIxQ{{}4m|@sJfw)زRxLkvNRP4!r׺0QD&މUI;1VtSΙXkmۜ)Gc% QŷfC |_KFJxy%.?&ު'/b}ZudMk~<:`Zqfy*NrؗM>Y KL}V2ykLD0 d UwcfPc&~ |/#0`n55M6MO[KQ39~HVg"rMWcIME75Kj]d}ZHD Z)u!!J6O3\&\}oxlcJ_,S~G^7pGa;SLx9>,u*  S44;Vɂ=NEiv![\ּKs*i;fqcRS =,PXr'1\T1lG$l5{ XB@qr3P1b}Q9ܥ|౰%4ĮDQ>N m]e-Qa}7`,)PyR^n}岵##]N'vHΌ,3ֿ`Y*_C!5888Y(R8jdr'ykċyFq=>#T ]R%}nʳi60Ϯc]#X/rеWeȨvq \?ezfrc ynzY2orp ٶgh2@kBI{7ihy`[CT/Z?Q W(0^//(v[y{h0ٝ95kCƅsqSr uԘϐ 3*G{xD('p,0 ӗ5 U+㹍ʒi~h$r Q4yg4Woq. f/}2lP-QWP>4g+6hy@WYYVk '6!=dMG{X7ö{*rZD"1V|܃$!i 1W_ېi=_m!gmƀ)d1ڿ(,h[o,Mw[[wD?ڍ9F_P6hrFld@G`-Gs\OD %;(I ͢DԪ%F˟Epe6]"&~X r}nv7))(w]X,3=nu'cZ[Wà%Eov~p~ h/E'_-f0 Lsv. ^qa 7@=x,x&!?A=<zVe9ˆ;<[!ob8b)iIɌrC{$Pn U2&`+|WlCyi?h˹`kMלFљ[y|wXGSB^P#8٥7p it0L&棄 U(Ҳ 뱬a6wI䕎XvT=(iWtMP!\pcaw%ZQ!S-4$x=ߊ# w:~=PxLY9 I;~HRՆݜUcP(Z?pTJpno]k^Všğ$LF=NT:BNoq{wKMcؔo$<xpüLd ZV\ιJ}-kȿ61** ]gL[yTӅY%*s}oSp%:~϶ 9A숣3x) v.T8I¸z9{Y0eY -ǿ6f_Ȟ~N.7PErxu=za(ܻ|0olžN- }yN5^Mw&}_gؿ HY"h&){s%Y=6YI X(1q"HXQ 2S\tc|lkeYNm"e.'jBsw i}3:!O4;3{2cpN3;7 ?8R},3O^jtV"8rZ½]ʚ0LsssJplwq[ [IxCuFW3/2=r ! 9!݄['gQw'`-\-\uƩXP y@VS,tΘ!/Mkzh&i?܍Qr|PO]* UP}O"#r܇1EK[5@%nA*hkktO4"I|/6K{jAWڜ4 VI(!E;H~2$L!yg. HWfnҟgC@e[JÝx$ZFݧ;T+V~pHi 黉G??+ҽxVI\Oϱȿ{Xg?|OТ r\ @!x}lj>D^׆g.;Jv pN_6GAfFBDaRHGە]h+^\9 Oe{ZO[N(۹`)zȼ7 aOA &$璾B bfÜqX2~'h0!|v>(A6=֖O#곥ॐ!m6&U`7Q'P*]FszHCI'u<[?ȑWs3&Wo`C6pa SEé;״&J>G!sU2>{܆~s (fCgs9(ĶuxWg\2";ϼ֏ XK.aEn9B;A8,?2و/0LA<HſXZp)*_o[7 \\u5\,6r(_ڜd}wrG+Bfܟ]t$Iz.jy+)fTIU+/D*kAOZ`w@A1,?Y*a=[M!1 4`#~_^+"z'G*=>v{+(F]BWz=nUycdnDU䕮O=AT#$Vq'􊝺:2IɢmjL7놮A'w-}7PPD Z?Hj|iIC"k D2{O3+&K^ƝdVu@!49ŠDSVB/0gգ E lzr:5BX /j&עɻ5͟[;*w,$t 1ZҔ~YN>U{|PalHAvx) flݮT}m&5^~X iMʥ!nNq܀e~^C"m,rCskMمI/"݆M0>v&ͯYskM>p.l/0|Wߐy6V 1W{x`7kˡ"juzmU}DT?tMWZS:y}ūr𹢄KZ/N6mx'~Xc#7IQ)۲%JP)Dhk)Ɗ<<Uج=WSw嵕w5\fX. G7r新ܩ0v&:f]mԬiw2jB4Ȍ'yq+)[ns{fa~OXIh"xݚPYynOEKmTC7U7trߓpv?Sb Ar&gKʘXU@gXE9rluxr3Pn4#` NlPҌ,0'u=S |-qCR9U[$J0l{ɬtv3ʉ7 U&i*H"%eƭ"e+lDۍg7hẃsz!Ry11靏?zf)ƑVL*FTϷ^^rͺmL\~z8]kGDukEw'f`7FxA4Myd_X%gO ׆ps5~$W#R*)c؆D4(8xLI+ ;Tu|@,FR2&}VTq.GyjIh+]YG9ͅ7? oC; ˨}іvз2xYXyI KB-EBںG<'Y&B|=?_3cE.3[=@Q  H P:7 ;"yUm:r 4駉qi1( fY-T\ZV׏Qa?)mNpS7 6>#(eV&=淇6p~b}:p^P>V"fQd!,~(OZdѯ{,S<3hđ|ϢϠīRUa)?'#]pϭlS٧c)nMe:?}έf@OZ@uRxYEPTB8hY(dZ?Px/3e[*@ymb95(q/A} Aڈr{莄A ҌfVpxLҕU3ȊlE u~͵W8Ru!cѼ,7]Ea 밚}TAއ:xɞ`%BLeYE>:%\u*9՚2'v&&S*_yL 2:_~|Ѵ>L[C.q Aox(ŕ7w?cgغQ:8@u_n wΜzVwi/ՇoOa<6pUi݅0y!~2F~Yk! կS>+4p^bs1?4x]I*HK3汫mr|d)\3+n]OQ32c5"Q&m> fsHAL_(id&)qPOqPrԪƬ퀛jmjdOM;QVuXKPp-$ 09e2ϽCYdm|Q|ThJ2V=tRKwQPQC?aףp[VtCͬO Vd;n)P)pW K,[IaALW؂0%x'3άLUv?|X2EǮGӱP?w07֑Uk4lZ$r68){*jsvoOper$΂ mBU$#ߘ烢lwf'ۓ>l;)hne1@l]2;H񨙣'ֵ[Lex#I2D>0|<~e-V6FkNO@CZiAq?pWQc-ty[j7CmLRքNح~hq\& YQ]31g3RcoY{Үurb88ds6*5Ɔ]?pͅƮ q>pP!ԝr96!uS`.kMTi{vw]?@瀵 ۯ,wv %~:y1;F {f7l0k&H*(. V1E'1n!Q_*<)́ޔem#/ M9 ,Jl(*? 1%aϴT|^EA^u.7+T-c I4Xԑ 5"G9lg #]Wʪ_i5 &4@{.J9u ;jMDQ"  :N M:\Qua{Hw wSEIFG_r:p,C|#i@F3AG2{pud7J^- mcDx*C=j_QnBoP7 i3d<Ԛh̋=u3kGH?<$ L-۪ YB] yNDXJ&Ø= :Mt(Xe8OX1e#Vq KEmw,垹Y8O(7#xFD?=@S.ǵdCDViZe=ޟ|WLyBX֪iӯe, e#>$^vP1J*%. m["!JqL*:}vRs~R3W/Z։*MQ)dl3ʍk½;mBWګby]iIɏuQ#J ;33d9 ܖ7U'$,MlCgfIpC&JdŞ` D̝FF3>-V hQ ]!Gwl4jǼH9GE_E9bp YZ