python3-apparmor-3.0.4-150400.5.9.1<>,da p9|4U䵟3XKqbqV-e0TǸ9K%wK-w& ȯTX:yA{]pHJ1e%@Ib7g}\R fnPI0X݂x Uu);pN}|!w\E]ciChR7}⪎|extp 7DxzUZu|Ov7}(:3emL̽ ʑi vqn`* v7>>ʔ?ʄd & S= SpUU U DU U -U UUU*PU 4"("8#~9$~:.P~FGUH$UIxUXY\U]TU^ bcªd-e2f5l7uLUvĠ w$UxxUyVz$48>ʀCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.da h01-ch4d SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d6181cb4eb4dd4251fd2b969922c4ff8351309e8010cf1083a56542b8e76cda84679e9f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c052d64dc0a4a269651edbb90ffe4ce78e7557a3d446a43c31af274c4d6649f8118fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh01-ch4d 1694064909  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=344ef28ac1645276be8b658523737b9c74bcc413, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR%Y/'ގutf-8d5b06eed0fb6d5cca56a4466137c804b1f61c5881a8c3f06a09f21112c9b57b9? 7zXZ !t/ ]"k%) `=l.Xthw' 3i `/L&yi(QqQ,H8EG~f[e; Bk(q@,Wf2nX ]?kyϒ4>|5tg{lҏ4Pbx"-qڊ'TSh~H8'.-a( gm0" S Eʰ\R) 2 >ky5*eM2CHKlY@5\4=w."9pi,m~v)H@BeNXUc^tW2b/{0 Z6SρLx3"}. l &S4$&l F:ǑBxB˘; WcEi|,C (M Pt+Ѹ0K%k.ƔA|4R lKޞزeґƎЛwQVwj{籃Т7CO]e`\NALzE3IQ;stiV}@2e8[OWׅ"ݙ A!rP\ @1 :ŶY¨!L8] obYzd_Pم-ůa-}R~6Up' >F-&\lC)p18,K  GWu~yp tH !2+/ZY˸B׹@i RwrR'mt_}Xf=fֲyUSvyzNЮ98`Jsc zJ4ϸ67 \ #07&.>]TeoC`"`x7Qcq1`>?wc"Kڡ@„3JMy+& \ emV^`)Q.Ja<4% }BR kLN6h4$۩ Q[xSTuo86xQ(ًgCu@8:K|g CKڌ~T[!$J91>zx)ܾ9ez8w>q3ՓK 2Iq b)hr[H5_dŀ '+n%HUQZsoxlW8?U(cm6+bQDÕ鶑I.KK^c?xQp 9t$w4 VU.1qlVb >H*0} *?c7ix%?ur?]0;_qPAA{E+c=~+5/CT>`5"ͺp :_d##s-fB XMj Rɣ skchEƽc(8NX x?uZP*/g(.u$X,nKr ixUcRj1=6XBnK$Fɋ54}n3Bly'.R`\Ȋϵ+$T;c88qVf}0ș)l2'Sd80R֭oHo~2p-W@k 2|,EQ>Q1\ˠ%zw9gBٕ!.>uHeکre܈1JkDd;x`ֱ.!~j/7VC GPVĻűFkڈ{,XErMZy7z6'-5^Js]<D; Anv{pyZ0Q=D&rj^Q]mZNdL5XdDI"zV5Sq8]$dm{ m6:Ɛypؚ]tNi;m8S ?cylؔeIXYf>57 |BHC⧓RE\{1vn]bzIosNEI2߀JO@5ٶfosBLDݡ`6i CUF#  &M?L;u8s sT/b@07򲏹˕:^ZWf썔|,>wTwow-nwDSIv[n#m0<%˯Qv&V^LrKeG^!R:(ttִ`&Ubl*0Ep%.>P>yPHn!zP,Wat hlz_ QSiYU+'KĆL3~)LEdFk_X vk}UYu*?9aGy8Qeȱw`hϟdo.e5 `F3$BRofŏ)@ 䙛|'Z.&Jq~*b-8i\آy[Z~U=;G-w1cB" ㎑ ix&Th?zV.n~VQ펠a @GU|'  k#lL&3@ SbƇEC{!O&QD [8}~+)|9U<[# _B rW(GK|']{wo%ZoPxz+sxS08j[Tλo ݪn)H$vh H堄 xm$)\!DwEqpGU֛MHu~u§4Q.o/rg^nGɧ>K<$`Fz9hRÂ!H4y94No ɝLf7<7\n3.x@R6w<}4ޒsHpǪJ{)/|>62 _~F{ǭqj smH{:1LC^$RAr%ԏŽq{6 ] .oc #yz#qTugHgr? s>>adM t|JZ+ XnZ]?Y>GhZQvX"7 t~0 tՋbQ6T4/kȱ)kz= [(c_7t_dqw00 Hz5 ( kڭP> x:\Yקx49(g#MHD3TJeg4W=yERk:[L`R5JHMjphoѯ6C1* ς:T*$y'֢uPEq h6DL"2#sÞ/_Z"j1e o") 's4n## ,#zޏ,ʡ7D P…0wg/p^{M1=Aa &z=}IH홣+H{ŰL٦6 UD*!DGHz~.tZ(+#'ڟVH5MOI?$]@̵C?u|; ;s6J.7A2jDimSո‘/"7xqhs$wo-3a|c>Vo^ܦgS_U%@Ic2d%*PBwEXuhs쎸qZI`=ˍaNZYPAe U K3eM?f"7X@j)f @.mqte;<.Kuգr|# sD2m8%X! roV"569_I[P Ӈё)b݀A!{I\=.L2[JKj_[[+U9>GZAtJL[늏vFl H\hn=aKnC^x56C(A}#H_u԰{Qs lKr#lٜ@}XP=ʘpiW܀OC͸]mz9o&@ȵ`JQ %H[ϣo"S;7 ʛVlKV 1a<\Y݅Wr7==z!r*3#p r%娛Aָ諿iBBT~.~56G™̟qdEZ@])$5 ~2 <ÿڅ3*? 6 _ 6@g2e|mIV(DB 3TdAMit|;[ a!Gk|X;uڡB؍42 <1Xb \>wOXVb @߀P0&JWQ't#۷N/&mbuK"*9OZZS-r O/M]o#G* VM`R=6# `χ*{9kW^.u`FK[/U1@x5 ncEO Zm^za޾_$u5  jWă0jL"=ӟQLe)bs63|y_`KqXWAyEh2ĵ1iއQE7\?{|qqdXp2Ug6zDvH_(1_-teP <+yNAׯ{>bZIi)&Da l a9TNb;1דDx8NLn36\Wp(9`ǣTBWm1FW('ϑ Qi-.O:3 <|Z$am/=)2^''}+ zFH~OoDa,;ʯ)wAl@+K'h1{U;mTj@_xezzxү_;8@ %C\^an-Ui>ƻRΟÁa$8}87zUnkIRz,qt}Ri'Q5Rh T:Ss;J)O&$&!Kiΐ`Mp9l@Y22ޡ2 euLrz5Uz"g]JpIUe ڀ@ _p;ՆHQ9ʉ'x|^ǥ.R=L a^ CTүb`<8k a>~y՚t};%IHǂش2' @t|w#x I6@eױi5d7- K!Km!pvͭIs:mb' TCgnZBa5҆Ryt~K;lPj"8暔b+~8JY&79EI{j>b۰`hMX! .OZoO2g( d'3Gdz ӂZAbv;dK BiRɠI0FffQ!yTq 9qiheY,uo-]&y^ali|][si'"$6 Q-Dh_*WB=wϯF_oͥ?i>> &cK㺕(4n`Co H?>bpV-=XĽ"l\!yYDsb;{dI11Էg(RߖetBلaЈ-*{9#8wo!jD-pFP]SWaԜ+KY^}__kipEzS+B*ymWN4RWSfGP93SEȫ>)tg@- p+0ijP`IZк\2^kZ`}g1:}>ca\u(HW!JHìus(\@h[k*Oy&lFt= uj[|? /.yI=)chNΆUSաe.<3χ Je(wz%K$eȘi>|t!ـ}tqWhVNeRgwlܞ=oӝ؇H|j< _~$hU z$=U'd9. c*.CXG&a(+^k0m$2%-Wǘ%VO y3~ybԠo};FU;,ŤĢk.nJ d^p{XZ6%Gûny*D.{xc}vCh[m,'VwqMڍ4l>kX7s ! Y`D R%V_|tQTedܼSpoCEߠֶ*ҙ޼)'f (v: t.!R? FqI4wVeI3M/HZTЉtz@?Rx9#s4ORVd /L]JQB4&" iI9~p!npH0^.! d_(*6QoL JӉ05+4hW>kp18|H&hKLۛyWv,,í6ϮP5!mòBg~ 'P.5_&<VC"5ZF:0)[kJO~³Oe]"u`,[gN_a)nja=L< 7/]k5),#J9'v-)n^#GmD"AV*\} ~φOb>GWҩckqm_ȕ“W^|vv D]dP<|"ꌷYxt7Jmuy99ne61JŴa=cG&Oϭ,HӜG_* 3AP{o7>;+)}4F̮gӛ=EMBa{!0(k_vRH#::h藯ε4R<6\8<)}p~;'!\/DKI$ONJ\v^ Ք1cp58hUG̪b/\:,p]_'rBYY|VCH<=߀d*΄ۼ\06~Jѭu^BA/Yw(-(s@ R:$ǫT\$^@ɸy!'#7aj{mJF)= YX1iH"zˤj~ xKeW[5<5 thlOX/7A%ڢ 'YX%:, :Z2;%@IS#Yi^6W;g^l XGz童jf`ЈsL+)+mB}n*ђ/~<ܱv2X2JQkz3 A-qM2S\9ޙX hɛm:WT W0h'sdӫE\oF&4.L$_-qM$#(ԦAOѫOd>&Hߜ7~?[ O{|$VsϨRЗ}7!aٗ>u^*^cEmũ)I]h|IC'SoKjnmEIPTmUB/i7?HaexTx<=\[a/총R?{vngp =N0όw5D[Tc)ItObA,mZˉ,x^m[ꑧ'yh,QfՑtz rx<˴#r1tC0`1"S q᪡RzO/ ފxFg;O2 dȓtoc-?ú9{N:xc ѻ[W,lt}xlhЅ"&PL:7 7l.5]&(%}ǶfU/_9DYw ٙx(8q"}ͷ\s8fQLӓϕ1ϙ9ahWNW7cS| 42bݭ\/~8wRwpn#ަ}`ɑ 4],SjbvS%57f8uTxj~-X2-ZidQptayhCR}S ZB9ݮ=/ >5%aIx'$ b؇-Z:OYnH+īQx˕{Q1>R Q!C}L.? Ժ\2jk&%bU1H}Naн/ TsCU[g#0;{,{ CmuZ"wZ0E( ׀7 Ñ#%Q˙??w3 As Z#MT7< (i(" =Ú7 l ge&.30_p5յSDBZ˕Z c0 )٬߯ŜX5$ʱ ,T.הrSjejJ\1n+7)S\2f(ɃZNj{++d_/"죄Tib7=UG|lk03l"k}o3qܖ1UEsdc2cHc/;!`1V=~6b>hT[Kl$ƴȄ^ 5ț:b8n:!M v/=;mfG'2`ave+Tzľ".AG^#֍&Ψ"lepy{&nU!Jf@%})F_Jj+jpllWI?!\dX3S1_-yN=fhW4g[%S_Zӥo,qZD4몕bV :^i qI4g:wgvi4C悞.{&9Ò+P.9x2Jf":ñX=,jy aH-; jt4f~%=%})%Ag4m|XJiC97 iwzkܟ +-HI\B=%#6B|+uZ"Ba(E +ȕt`EL\ȎùcgVDo< DH.Oثͥ2NƭK:zJ?Gړ 2 #`}Ş zzzϱ,pY#OYP7( `1g>wP7z t1S"ᤴ+H҆PX64cJБQ;T;UCf.qyg\n\Q> h011Et]"sB`VQV`$:*H ҇Q`$썂 cL,ctm+{MyGll6eyV&~qPMnwԜF/S<?>7^qlg@e{2ĺ,;o>sX?{ET\;r3"!Y'rCx/GtH6wn®>„Ss_z|m䔏CnJpô?rΎ?"_c_psW׮b^Tnɪd%ّ[]^Mya$Ռ뀦伊q 4+АC38]*z8yu J6 H8FBqԖZmTSC2փjFx" ~ 2F&jjUC "o^:"K ./SwJ}mŢ, ~o*9G1,OiF).=/Ug͢L* sq~pˍ?V gmUa(&sg̉ Ԋ<+Trr8~d"{;|9%<7i4 owg7oZӬ9*\ՙ, j 5&a=~'$QaVMtRNcal(4M5Yc_ֺFfMܸi5r-l{D=D&yA4$#@0 RaYC#̭Ge*@biBOaΛO&Xr-eesԕ xt@v\^(I oHnCh;5ztW9m o {) "|8`s#G6Qj_j+e46UTr ^t@v7xcT^KOWgĦ &q5 CNuXE:ՎUGEhLNGQ,>HjfpBS;T)l}Ơm1e[B0ftpB>ʡ+{CڽS]tBzHN9RrH㢎mQ,z}Kl5??$^#Ojd6лIY,n;dý/.t|ifmf*+VfU rSQgog4NJ_UQ3g̫nqdY'0d].Ê}/p:o7zyF2Q- d~$5"WJoyZVRĎgFiSM:XH#gfx\ K'`@ wA>&vz> \ iT7y&t?FdX&78*e5=|־QsO C:~QDn%V8!uX­artÆ.5&FGʎrr@ІFw ~Vr'L#l%;3c>{HyVAiFSG-_tZ;~-̌H`Icf]4o6T;}?.Wh9W:2#}[fU`n+O?mnLߣam>6Nlj[Lˏ @jIU9ƕoץվ]HwH1Ma[Tn48: f(h\8KX*!rR]4ˁ42>:2@ :,VG%\8Bщf WUt<|G^WJn+(rAUy:x F 4?ic!/Ʋ gtkȊ*#Zi^5s ^B)oQ+38vz1<*o;H#P 1Q hdu ۚ}7ft{S4h9Kt ;g\@T"K<LnWTi;|_O}5F1OU WK7gt)xq|peFSP՟CVX6)+Ny>,h.tp3輀!#l3QaRKsVj]-4&k ~~{'ӥ 0AgEO>,YJJ%y4/ZX`A@@GAIJDb'' |R]m(/^d~bf*/&ӣ/a`ux&}JgB.Nr ,K~:Q t˘$B+`]HR=}M/lKݑۑ;p+B@B)Dvi߷IV֟}#qE[TqZVWV7=J;Fkd:~ '{KP]ppe ڳDq,]豀2K*:a<ElڣMg++7Tq`g]@VAX;7e _ 8I-v[?!~ Z]fb܂2 9@ ipL%#:vjȲh#:Y9ÉU4Y/"*.3}: u&EBOXe*@ѳX,])<%DmK]?# oY$]ɡ()dmgфL ^%O4rSs  8]Qmم7?ݍ0|~^FSW6nF>){; "/.jdÖb֢ OZeOҙg(m sХ.QLPՒ52$- zCduBˮ|*Y;$֕Z[̮v2E˷x%ًW a? 0-HzLS5_+:3?PX)w|u/9Yrm[HeG.Ԋ tْ>l |`771v7@75gy-ڶ>.=J#[ h#QB{IMVv di ZyK^HjQ*)(|!K MkC9aߢuR䯲 8Iv?\J( /dcɃܕ 6#Ionx+t/VH(0.n{YR~yĚ#S1B_~ rTORhЮ*P(nE&G Wv3/zzUADњ6[}w.0Bݱ-`crk,Llf*^TqE"| &rgQ#.X`YڼJ ɒRJkYSORh#rw`C|LB& x^|Ľ;6-<]Fl{u5' Z`4'< D@Xp Xn `;Q0kԘz`'Qm|^Ln$%l/_g=?u?)G,{\oL91uBI;IZ.+IĐ}`7<G9i˾4ﭢF<볾 NG;R\-nVZV]ϙ d .h1tk?\lJ.)x5:i1Z-8 &*ҦX2Y]S *QP<3&5u#ZB*vKmU2VS.e.fUWג}-TcOK)rQj;ʧL )x_+(!e̩Bu*CO_%h;Yʆ]1zWHkibIJWimRS)RB [&Nfe|>z:^N.9 B0g%`4αbodVN,Ӟ_`-t1 wRrqڭX ; Ҋ/߹3Bߥ ھѬ*R%^e4_|J:782lU2=7lm]۩p .\"2O6̱`Zի.+lRL{STWfۉTYAb[_nXJ6&oE7wR\ Ky$“QWFKPJ~Ut_QmH/=Y>X;Fy &kcy8L*UܡIxw G9چ/ }:@~PE?fkZ?FOt>ct]2eoкz&0nMyFWS^Lұi`- ;PMFf{48U>pHN ?%{nҌIKkCNAL:f`%Vy,E v:O-&Z4t1\In[-C7|eDxg WJd*; hOD'sP'L̒V)QC{40x!(]41J? òNg1!ҰL7nM\X7qCƒeL _dmĔX;7XBv'4@(FQt>M@?DBT }?S=W{`W[eǓUHv폸W yA )-eE9eOduM}w1t` 50;X>ۉ0wSJϮֳB %yc-a7 ?YBCRw'ts-bծ {z3nODk~KR Bk/]dEPw-P=D' ' B;H$0 XQ9\ @`PHU$OV!q+G\N2H%zءp#1lUvd"A>[O_G_Ȱ7{_ #< ;%IP>08AA31>%?പce[m7wr4iVPVuf^sI;vrBk9-dkLYrPoאrr@è 7*ZG!dK-'dD}M Q$Պ1mZq^Y*YWEAQS- :$x"9p9ʳ2ad\ƔJ=HכU>mӣ.MT0mԺJjX E5`>*>nNok,xW?ԦAf4K72P!$k7q=1Ra71eWdhM8]Qawq[/ % {B~vGͨAz%ŠP^hD([ωH˻=k=VW1_∲+yr-ԭ;#:ԡFV{@%\%ݷe[[;2T=YǴKv@~ mL]Lq)ZmUvu-xo^fK/ H}o^⠚!~3Xl/{cN2) y+M\wrئ]cl1}VXsѨHVá7Z7UL)04)F%5*F H_8(ο`H xwO͙9T>ܘ=gm.А[x+\brם :H+Z$0+/_.TXD(݂`d%ph$+} /1ie`8aS.+|Oe$o5cMH:u_JIWA#4`,Uȝ'HŽz FcN"WQDS=A>B ӕQ0;n&zf0.VU*"GtD,Lx3`q1v&G/a9/eؽHlԭ>0V!2-VD]O*M$oK.˞5Ղ u;wYv8Պ) 7AlTmzO/v<ԶS޻0zons~'s+yͻg4_/nlZϬ|tB}R'x7Y1n 3ƫAnwW7?UɅ7:DaV-F3 f#&@l~E \;pCGyB Unf;8ɏ$9"D' N/gƽ$ 1!ظbiT&۱n(MJǠlVhPլz5{̲O{UDիֈbx ۈ7B4=]ǿQ vF}B5/ح?(;rӤm,}@M"˯fmqr7vɷ?Bȱ.FP+/Q'%J[72>șl8fjǯϏuحXZaւMD;:<K:,L@Er%|CO l Xa0ފƈ*c.)Wa*wLx:"f.攤JM},5X&m0X7V( iv$x*~^bdɌ 5e|?Kn9NtAٛo "6b*hG{zU0 ,k&O=I;%e"{Z&ƌV P.Bf uk tbnO4 3Y[R)]NW$x,l2aѺmj"I^W D)yٳpy^izx@ KPB9}:*,ÑPx,65n[!O(po.-Uw2M̀rkv&1=Ks%^-qVM v*D-p 1o7k.,)dEbr>WbU~(*y2=2otٟ4B9HZ>3^Jtk lywy j Qr*j$@4徝lBT]yT¤|,Pipi`| L WZ`} x-pi0fAN%JfMgl}E"p=)|4$z ڔ%>C=kq$x6q6]^6T0v^'B#w f{ȓ' = _'N ;23AT˚ 47O8_t~ %r+yM8hVe4w߉i<T*6I8Jp +;!ħ؆:.g-S J]pO77Ō""D,z(iKsilC-)a3"5I/%Tk'0Z'ȭ"U%yWLV~ \} VI p'bo*@X] uoZ#-dqjF^3O#RQq )c~ˈ ^DS̆?= ۆoXBb)1>ѿO;7oi/M 걔ٯ ;Y> ݿ~&ILd/0I#֖% HIEּ>~UL넊RJ)STtrF$&i^,֙i=%܄tQ} bx?[8 e^-5^Z\(̚A;ކCCe&xJGo-pćnכU&Ū{ Y8s]T}QPZi%8oRb{.bwﳳ vH(~)ɶ:žZ Xʨˠ;g!ܪ_c 7ú^EZLNypɄ'7ٟ=_4kl(<:T~r>~t^k/ؓ=t PԠJgBEe456ow:vi34P͛UV}B=[8ٹmn{SyX o`ړWhdH6ѱpbn] 1/8+6W2;@yVoqcB'֌4nzUe& be^99ظ}CGwhkPH<ܝ5& x ^an2~6ˁ5 yGos ;9NR7&rˈ"Ry&:Cw>4(ϜL'5+f]r36zLM؟X3/U!H*_)?QHiNX h2r04R`2O٫WEr m#Ǎȏ_ؒBsЧBm_PavĪNZ;Apt ܥF6,wdz} JUE a*D?F`rtIx.%rb | ?,7DEinq?}{cV$./ z// ,b,7vd|-dY2ʓ%쎍Po1f nǢkLv5c+uSR;颞&iuȪz#\ȱ߾6D`fyݔ.MK<>P ^#EA(65҂oeƪ*)H /hb 6uE}G0~gH[0[s.]T?1z.N pbD̡k{6ŏ:|xhAB~A%Fh7L]|O<WzMjӏ"oC;*niYJ3~DOR7S b&@Z*F/5u-֞X_a`_ #Vzk珑1ꂵVRkڇ@>#{Ҏo7!*7x_D.3nJs02< Hs3%~!Ef=;!\#۴Oq έ'IDX=|L8c9e*ޑ&Y=&$0eӡ>^ɀs1ZмZR7 vDװ"`^Vx:zF?wT[6T4+IԤd{'^*~=>jزh썎Rܴb?}UIBrr&䍺X i|Xrv3O[$$~I4 c~ASxJ$xy5-7X]Wj؜I$aQgun M쏍ex"4 x?b"]f n~N<0>O{5OM}*5ϑB}xm\欓v>TXAoW<NS2rqHAW{0'vy;@#l4:u,Y sċY.3ԺL M#:i/5j¥.s[ub@TB0!iIJ#@ݴtYL蔅u?ζ-ub߬(evkvaw%!yrQRBRp#Fs0&=S8)Rf0>HQE[de7l(,8OW7{pK7PcՇ<_fXwʾAQ'<0XS30K~6SWNӾ6|luѾ~H|ߝz+_Lx=)EAd!_nfk?fg)8/}Ϗ|j{d)'?,bpSMJ#D̂Qu'7ZP)]44J_d?w>;^hyO֎젴S Cq3un)>-.Byk=ς 2$aP@I@M#kmg,V4*qT'׫m¹I]TDq'ufBLd}G^$KA)佘Jef4ШhVj1jw8(youdVuqcsUCjIcGWV7(D;ChuW~lUF-KLDquq~ W`y#5 cnL̆Z}YS4qËQ'+}P3(m(c _Gm 'ѹ֮{OVXIXH1wQC!v}QkMDF9Y!x;q M7:ŋH:P=j r䎩7 gs.W%lGL~ä8?y}JVdj[vquh݃tŽKS2"'ae WYecz/.S/߼h9 7w2t%ƎƄkꬿ{bKuZ G (ahyf7C0c |i7 JtŖ(nH7|2'2Ԙ85܁3YąO.ZD(-QH+[fY5E ˇ3':GV(%nfE*rrК&=q/dC$K~xn V+g|y,|59T[/SM?ᄾb`QZIwVHn'J2}ҡC3Yp*OƞW܎hD=G]jj7}y7= ? " RX.kL BH8k="xauuV7)C1 ET?<6?7tM +X+\@}n/@ 6ϳ ldF#FlyŐb>IbyUx,3mLY^;a俏Щc|rJ=~Tс1`͢OoZ?i+) , k|~ߒjliG\؎>X8"҆n,FcU JEa_\qb5[AxfXb,Rc0LUZ28{Xv ]v)GjM0$Nmj|NDv`bn }_nQ2E&a 6Exǧ.bN|y?p~{.'H^56FcXJe9~Rm Z;f=?tQȿ>Ͱ8aMV0v+J9x?c2,I`Ђ/AgMot 9zǣIe:l/%rїј\Jnz :ĨӲc5puJ6W5VNP s>`ot|IJfk%>eyBm[_>$\ҩkqXP S$WZ*3MUF~&`ѾIKժFᄉ.oG_oGT%39wYl^./(M:+5JmQk\?7!};S6V{30/S?*r̕%'9s#01_BpX#Iѓ)oX۬J; F0ƢuP+[8C[E`qX,1^1.D &|26u 7A4ŻAY@̅ &F_Òv{E+`_aw[a"SX 㩀z̈́ jqw=[^8M>;Sd4 ^?Z/]G L0YjOh\0r QfF?ϳF\I60`f!笭dD!EXR dEX@y6r2Tsif ;ؙJ[ڭ&4n7wdz_ZypZ.7֛[N+vˠ~#Jص ~J^M3/s-Uy=}! C.jPgX0oaM : ˳Nn?VACaPҡTӟi4< BA5^,þ{E:I!*Bua1֭zVE#)'Gl;y !M<=vW`ɇl}`Bv蒊+i Qp\)rw;梻HȚhs^}/0!L!XೃgQlx}Vpׯ0B[>w5r}FD.&,HhCSϳRM)D`hpWs`arlo3chT uͤkf`J"F X` sц@^ .BGqaJ]Ռ$ Υ#|Jj‘B"J! q QtV5%?FzcWNh?}v=8wd/T|_PϺd sL@ld]{hh.O/Бրx6Vz`>{U[YC#ީDy$>USK3u ߳1>Bֵhk,Wy2S&^Ff) s5yw21X,,) :)ȓ;wrɶc.L,@7_,%U ?jZb=0hy9̸e{Λ/eʷJٷK ;3lg32 UNB rVRD!J]P릏\1ӊPTKcл^*J񎲩7A,_f۽*=O-߂  mMK)֍=zΐ{SsI\<ÇV0VGIJ "0aq%_ &40_` 7,A|8p\We<yJ=R%[]mh/HJ@*VidW=#i QoO;r{1k?,1)x&$.;5/AY_^Gh`}|(~܌J?tꊸgcXLX -f9]*Jp,(tD8_Mdu} ._>9旜jfOMtf2uDwDkwrrì敾.d&do#q cyhV=u'OzuAc~lOtnW@e]jgsI/u= ]rSIkp/狔F1z MI:u>x+L69;ģϬfLD=c&h*T |4@@ % n ) >^c& [Cuj hD/]`t)ex:Pa ey*.^^B_^T_%!e-FӲ* _fNxco{sk-^S Bm\t GSfO.wZuhu`%|5$sZӌOƪT1 ~3}HAO%fn˗c8l2f~ԨK,OйWM_pxp{T Om yR.9kY g\"ܚݖ3 v9Xy zxȬ7C{zHv6%k4$eh$30ek !& eyyL'Qݕ<}Cn&xͧ]TB;s)ʕ:ӴN{QS柙~SW0N#7\>\_x(ЩEUDPq\=l4NvXO2xztoFϳ\6u~<}xWx-N_+/=Cĝ0 $Z[LMz?}Ok.= dx=i,Z]fg9,"Ϸ\ l$k{9HDt i[ =MHg$}H@3#YUe>R|&x ZYf*KN n* ;B%9()`.C6>.`N A˅QMpP|st0``Coj$!?AzKIu= )gk {+jL&nLdm9[rvptWU`!nB-ч}+صxNb%V.xMܯ[E_ z#_v2GY/b] rRVh}rڳ,% nj/5)$wR;pxstep?YJRQռ(usg?+L㟎Q`JwSҌ`> )fS2u=d.W@=-m`q{Yc!kO=N6i1o^tL݈|n#vq; ;W$ =qo靤/&xXfYz-iO? hP]vSV5ݸ+$ "mMkĥv#ϼ)쌁^wef|8BV.cM(_K<[T=,#<[aسpj8/4סr3-O.㵩fiCB*4&}wgjvc4,携Ox "9>,,qj{[ t-W.ȐuX& $4@!Sp851 f~ J=e1\$ vC~fP.i֬[;zpH6 sizLq "T䑍nPNHTw".,(^{M _KpivE3,klhguo7?Υ`#5CT'kZ!ViFRL{O6#@~xH(ES Mk GEQ|M*jkoBNcK r(UP ۠yk,Y ?}3e\5B^;}9I 7qL)[pNnb-@nI\#k=.7i^9TU\َK SHު^@`rp 3&;9tS=ҥ͟ +0V#mWpŷ]T.wlH] "$~zdpC1j4ldt9Cਯ 6:Nrvp. (:\Ś@! `Iw]6@Kz#36sFD8`4xQ%_sF)MfmeB,w:PS&ւT?ܵ8T2a@ldA_ez$y 02}:.C528AFP]=h"ɸ?>}A|T_CX=2PU/^_\M3| $`benV1w󹭕 |դ]7G `' ySq ?KHk>3#(_B^EzNU7d2UV\'[4g W&Mcb /1x>o / ̉;\m!^$)Icl%'yȻ^mB^)@Y0ErwƼ;0jErTW69ć58IAq&KwvfeN(Lþp#VXȔbl)Rl䅎rb #b_r` P^v|նӿܾWdp} oZ#TF(uc.4}g4tBOah˭>$R@cqtԨsXsl-Z-ŝ"CUБsne/-L4d+Al,G֔ Q'ViʹNKxF:2ZNEi?⋁/H S]&5F tv=Э絘۸gF1" V ?;myy"uvEA.% Q@7^##^ J鲸w2=ڻ{F&[/`3$qű( ԇӮ,ŶYcj]0cυgϢ[K0M K۷|4B0n];LYʩZ,z-J'0/g'5s ͑ FEԬo]㊵CaAg VYԁAedJg~c]֩ˁнgJy2ݔLAd/Æ^pE~s8pm,k[e oiDI{Tm?|As3sqM*I\1} k|p<,Ǫ-^vA%RK X ٧BX/j xG uMVe!.mtƓ0T9d7ᨄ37m}WeTf+n Xb i,LGJ>̾:65˗r\77 ^}wT'SxJ|e9ӡ4(Ep훈P  VAد0w!gx"nd7R=BzW]kQ{ 1M(kx=+0mZNV3cFPI`IBMmۛ!o-Akqu&=в)KZ_ޜ~ 2+ಷ{]+߱^#jY(|DB eNk2%D|-zg$w!NS"Z׫54۩IZFYˢ™L̖LĪ\?NT'eZ\K)tTTKZvְV޷'0`#{jlrA؄qe Σq||FNu /q4)@omlj6lrD 7? BYGԈ x-oA\ k2}3iKĚЂ峗|w7Kbfb1'DS}Wxw^ MQp22w>TRw*(!+~|cjk8"]rlC8_g<QR-VALٽю_8jl5Əxk8#237(rDދV9Z[Jj)r5[1nSbT0l;Ѣ@`bb悷t8Q_|H"^E +R&Ĉ&qK+G;ɖ] iUUkLz?)#E|퀤ڶ'8̣>/>%.-;?5{Q{\C4O0A ,D4XDi4{6u^Ben7\0 nzZ&:;dU$xtp4Tѳ7lܧ`Ka҇eV1ӟ,f+~]¼Ho.ߩ7;)x L'ѧz 'x)g8i2[b[|][7_F%rCa<}Hy+a:֫-p) Z' wIɌ1migb NkzܢeM3:O~'D>F!z6IJŹ`$7W6ʌX)-riHC'%QCjjxaX I|.kƮOj rBJd&*S㟌Oy5QR1dLKRŀPOAcp-S׵Ra ˏ`uakֹ,-V8+R%aKΗ:rًEX=c[;OT;E1+Y{eCʉS'i N`> LDc_:v=z}O^"[%ө+[bkdܻzX_]Un\38gn&iCʵ2YraDO{ #5ďw Z{oU]ryFȅ|Wt&B6 󏵑`W|?jѱQ&o\Ia:W3d' m(5e1A?F5 pS@*.@vL˕N Lm5]J}>w$uNUd(Q|doGR<1cˢ.)WK3 ,"XSJE &p*f/p҅ݎ'bQO#K ry7S#f0Ym@)Kჽۆ 'Rq SXԑ!tR}de+-1B'ˢbY“rpLJI&`;|/d"" 1-gX6;#DɏXKw&4HTZ~e^1+*(XN?6Y;<@Ju^I@.mnsI7MR'40N!\)7GAg][ot Jd70tȤo 9** `FY$i%Շ` \9/>3=QNtCJ 0{Y z"2\:Z-d3mPNٽ ]t=V.[t>1dӗZQ~\'70y]ܡ/S9c,}kR }Y'|8 -1 ŐrKt $Qtx)EyCЮYL!5o0ƐIwkp }QETz7tD4ա*QVq#GAڲDw:^9@<5D 5Us_0x|Ԩ)1LmiG5]>,~:%~eѷ=|b@Cӫc%2{3^&WoF[_c~|Q^-2VC?Žaof'rE\.;(Jݜss|/^Iρ`W DDҿ=JMʖYLfze}ܨY+oFn؞p 5sG%?E=Iz#iӹ1FLRpUUڷ>=i_òH! CY![3E%6 4n>2 mdKgθ4OūҘAj!*s{t]AlKh}VӃx^^w y-n# Nd˜/q`R r j4L6A~ת33)RT,i^g(RbӺ9A夲0n,67*4$l w -,״;<Ź\YZv]*,w3I\ ;owԦ\[qc9&+_j2ޏfob/xyi_0N%E@/wn,&)x[X~Fm,Us % jɐ{*Tl8v2<(h\r5ѹ4 u['bbOn`bɖ{i.[cn˦$tƝrzE]_8|{#׵y/rh_*Rޘ$W)96[Dvxi3 X/˕ g3r?6LZ P<2Rd̲ ^:\0꦳D&26ߪW䲑iq 2mQlp3O9]XP/IAޭ!%g$Yl2,OUbh"ZRݏrJidҤZc0KM7NNAuKٱIXw vW?kbD馲]A DQVHf=uX(*,;n3zZD!CaǪ2Ut%:Kb h|M)ȒIY(fQ5/h֊Gߖ#GCĸdͺeJA.ʀ%H hkRaxg+ m9E.Xƌ gPӤyQkm]&9vϭ,¹.A?6 }Ggh H%8R~HUەe4Ӓ/BԸh^m\?b4 Hix̪jSlKݻ[Q|g\2KAO9moR$ҰR8x0.h[<]cJ6KE c2VJN~}$/x1if\ڇrq~dY#ʖJMtqD0 m`BKsPOds&d@"*$q {#897}I5  }7Lׂ9hW6fC$#t4VCaxh-)늕#/2X'& RěEBp?njoxdsLuj" E(_/}B{ťeW{zn8RSYApx A ȵi UijܫѤ5C"oTZ.(A",.ZJu_:KUg9^RF>\qu|Pc)wF4E?.>Il$5E!F3yWw,\ˤCUqnƪ/5ة42EAfFa=&aCX0odCԸp ,R))#eNI{}HiMVbpòS@ۯO~:^Qc-ep)Iljrb6 ֚bImF5 \ݓͤs:~:cA` ğɫ'Kp=xd 1&m&{ Z 'ab_@dIoKu-X\$ L73 yk| m!d5k{ `z-{]+Nې-_EdBWVYm&mt":SE 4RGK 1}ɪ&t>ز. <݀hߘB'bs,CLI08>QB8.N'ҦSA, 05Y<ŝNkwǭ $ ۡe6"g \ZeV:A"j%4kȻ4NڤW89ދFZ kMƩ7T|)]=?d\J.T@K;oaVXtң w7P~ 1{ٽ1lv~*ctؿ96XA;`nn;†LqUP>ʽT^ZO)A2V耯p(A;j.7llM7Ck2Z%M% n,}F2fe gfԔ)mUQNJm }UDndi%C .?G-ii{v!;I% )J=],UXPԋxCZhN/U+:;kZŏx{C=TE VL! h>1Kn k.RWѸ%|(9P`B i[F;Ԃts@!gG}E|cb{9PlXl֮$.9op 9ԭV rͨKE2Y7据†h7vH=AAY0URG{ >,/(.NcOj+Fs0;m0 c,P aå*.oe1>̺Y(8R JXQ<"TDtY=z1 LpDlF2 >h'^C0u예eK ɂv}VJPZCU` Y5޼U/8%ַ>KLVr$6lKS5|9?ww;gu +["5ZoT5" |k/2,u]ͲZ i '߄)aPm@XT6h\b8TA-> XZI_-ckD['9o 4 PiD v8ᓢ_jl̥Oq=9chǒrDz|oԪ2DIYpTܮH6DfAH^IL6eG [up\})!dʔQS2ظ-Ȭ9iPˠ0U7#q}kfN k8i*ş*6zWMNv%Ua۬*4WOdNBa>Y `^^Q]Ψ1K ?ݫCBDyK~͞A9uaag[/H d9mEgߥTŤOT9jKvj01mOrٳE}ͪ@fM7TQ2XGrT`T҇6϶v! suR"0JsddzfhW ./ft`MQU9OJd=q K4X!SY׋D7qk,wqp|d*0nC0fB„_?+YF@&¼ڋWh e<Ų1Ur(^4c+~xUKA@}B OFX] >C溑1psU5,iylW&4ܽA@V ~h5oFKnS=%%屬';UШv`i=1~|] C;ы N!05'jc&H#9&rA{$Iڽt 86&2rM;oII'&.6Yg?o`& 1hZ>Af׎i _ocT`ŻF€7-XVuBCdەZCvզ|kJ!BQFMF5JKRu10;NѪDWCQw4 W 1n`,^BTJȁDb3BƵwX}X5˜r^#DBiIi;Q2N۷y5Yf,9#3K?xN(b_YOنk1co ,Ie>~?yHu@Q'NF\]^%kPGMBxkJ5D432#{R7Tnsy9BIU,>(חv!/]Ҭ:R% fSwcql]2gh Z5JքI EF֧,(mW\oINa2 M7%Pt0J[YQJIXyvV{c\MO9nwg. }AQSr fͦs>0h46XY6-xL"a/?m*[Ȏn 2]#[a[DFȖ22Њ*"F c~d aRPOk imhˣx -}5>XvR]ɃJcJaN(W:ũ-5W:m;*ŶpӋ-ʱ(HO")gm^=P^@YAvKAPz\zr( 1͒Y^2vSJyn B<_"?`sy%6O,I`bK+|B}0EQ[- E;AŚm͝^!׋LJrJ?IvMR7R}|l+;$RL Ouۯ##bZd!<_IL :lK./GTQ~8zQr,Y3TjAR:O|Hx1ޫ*Y'^ĂWFu2$[) >8clj`j&A#JU IKߍ#U;DSFrQS9Y4H ύw=39#AQjyOBXqdgSa&;azQz\Dl Է $F0 o΍ tvSNn]Iv/al3qwb;ɲp߰ wrSge+u_ʇUGts2U\MCAw:?Uw:a" :tL /K_&F`dX[:<'K8ٶ1љ"{y݉U㎦ @ϵI^JVG4x\dyB$S`'Ўy_}B4N*ˑ9&ء!֙W^݆wEvVÞj:݆u\:A ~6 3vx1xX]fJ9᳷dT UyY_z֦3>͝|AI[I%5+ j4 9^VB6tlK7Њ*/G{aQ4\u6mVRNP5pgR4'PDc31v;I(E%Vm=zRV 2{GM« !.5 tnШr>ŵ:Jn·YG#$Iu9ggQbG_qYi͇8 <)v#do u㾞Zn> atZ~ դ;s_:[|hlXB]kF~|c^UDwIrgT# $3d`Y.S'#y_gʟ&G_o˞M5{ߥ Nl%"юog29H8M)ެ @OxaŁ 68,ܶnk /& ^<)#gEZeV@vlOeF3)YO۟b_'9 {+U}eswtIByԺx0(ҙo_ffyP%]YJjVqTS/^΅0p*Vc_W@!PLW.b+ )]%M]fθUQv3)ʕɨy> !DJ0) gj auö"Z ;?(cSl1&r8bfgt7-]g~f<Gض YZ