libapparmor-devel-3.0.4-150500.11.9.1 >  A ep9|^pչ-7'w$JAՔ=~\BhM0~21 " ZU;҆8T nC_o!+GEzPV{Vc43gYW- ыcW8karǦuf2-ań[`wA(>p>?xd ( Z *Jiox   D   P$ht(89 :F9GPHIXY\,]p^b$cdSeXf[l]upvwxyz(,2tClibapparmor-devel3.0.4150500.11.9.1Development headers and libraries for libapparmorThese libraries are needed for developing software that makes use of the AppArmor API.eh04-armsrv1ǍSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://launchpad.net/apparmorlinuxaarch64"C$ C z  A큤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.so.1.8.2aa_change_hat.2.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibapparmor-3.0.4-150500.11.9.1.src.rpmlibapparmor-devellibapparmor-devel(aarch-64)libapparmor:/usr/include/sys/apparmor.hpkgconfig(libapparmor)@    /usr/bin/pkg-configlibapparmor1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh04-armsrv1 1696247225 3.0.4-150500.11.9.13.0.4-150500.11.9.13.0.4aalogparseaalogparse.happarmor.happarmor_private.hlibapparmor.solibapparmor.pcaa_change_hat.2.gzaa_change_profile.2.gzaa_find_mountpoint.2.gzaa_getcon.2.gzaa_query_label.2.gzaa_stack_profile.2.gzchange_hat.2.gzaa_features.3.gzaa_kernel_interface.3.gzaa_policy_cache.3.gzaa_splitcon.3.gz/usr/include//usr/include/aalogparse//usr/include/sys//usr/lib64//usr/lib64/pkgconfig//usr/share/man/man2//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/8491b80e00b1b87901c7fd45c9f7ab64-libapparmor.SUSE_SLE-15-SP5_Updatecpioxz5aarch64-suse-linuxdirectoryC source, ASCII textpkgconfig filetroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)C source, ASCII text (gzip compressed data, max compression, from Unix)PRp ZAA utf-8d3c74ae807599732fbbc86a83ac7ed2438e2677734c28e3c21e29ae88622a290? 7zXZ !t/'] crt:bLL  _!Kx:^PӐH&5KԓրJ/ @FЖe% R)荚d8wtD-,C@ќ wi? >¢D|OzיeTN,[^D(kk|~FSa:i8BwpEH럷 y8'Fu`PKZB.btdTE۲F?sO 6DIN3 QSNu ե Emji2W Gj>{}HK jmU/ͽS>L>ھ B+6! ' tTOG@Rs#phYƤ%ސRDUU3!4Vc(@d1[5N-̊=aBfxteUv!HDβ1n{x8-wz7Qڡ\#тFsJ;w W H؆*]=H!o0m)s Zvw& jlL2Z Rsi&ܟIn+l4@+V;I1Ƒn֐ Au0|i̓na3kDǑ:C6{~?WcQCW 'f5wMŢ BU@L[ 9 I_`"g*ޒ|mڢ2GE p+kB&4zӾ,Eðb08'/%+28BuAe ΋T$YAٳ~|&gPd7|b Qg}_ v2FڹFEd`,;Yy86?K)x ::^B,p6b;q~dNEJ9Cdo򒙈-Nz% h j0Os*7?9\5Љ~ڥ0 9KIfk!Jj v.aҎ`{|z~gGm 4HJ"DAL:gf8`HI|.D)U54mvI],^4;a&A&k911['<XO#9 r#L$rT"{Cs ) [):oxFF=iR\H]b)!" ^K̉oB1"ar{(xFZ0;4,eA)|Rp8X>vu|hR~vaBoؔ1)']_Nde<ۈXxx85_K1Z%Bfk 3«JD `\]:&Wʭr_0Ѓq2Cktk$*PUе*ȷ?1T 팟̅Kw5i(\N};Rnҙz$; wL`㺗:>J^ZB#H;R=s¶@nۊ'k\DKF7R;ߏ' jP uW 0 nvndcI_EQrcq*%M/(U+>#t_=-Q.0(i 0s c\~lfdtavE)z36a0KI,a9G>^pl᧛r7sxq0]u]['_D*Ɠ݃F8Ñc]C~a^6Z7yBܟN29]0N[ :H5$1"MaѪ1vnȑhfxSAe?rם|b a\F~dE{`{#L?EghVڢ?2xvUvN $[FlHئ`=w8}YpVZC.xR]av\O3yiL8z(-؈9j?.N>'7,1{*%"ڌ@-\J|=Ҝ$r5vI<- xOD\BOޅ2j6:H ӝL}pubEuMҀSsȹns'`=LWC̷$rjt#"Vn/b %T*W}<>]}w]OϺ̝Ԙ.Dh+u%=3_,iR=\5^ Ń.YbH.G#8<.9ے6>,tY4 j!zH!ּ{%!;GFtJUHG [><kpZIc Yາ ۯw+T~ů'uVszBJtkDd1?hh䣯 P]́m #Ad4~5L}4O0\I B0U# 6͓^QZs$uzaJpG:8kq\x,5rm8tX |;?eز˱燽YUn*lR4L:0"k!"pc^:pvzc҆+罜vd}G#+8M#u$7zpz3`& /Kv,3FzK0w0$;_d( < l5s?* Np_s|_,}wfPp8gn(ݚH/\əđiGJvc 8P4m牸H6%beUɛm4ounMN1)x,Lǫl B-?*|1!}*a* E4ό m,処XQ5],!f!k7DCu k[z>သŖg2JoSL#m%K>"ֱyKقUYz./{:g㎄G鈉ӟ$0Y$cFH^@LW"I2 6Ro,Q΂ E"N/ɲ`L"JT "aV8fAwct;2\&l *Άɵ_*gp4,c+YʠsujOeWJx8ݖaRHTf2/~ ^S[VjJ[RN7]@#<*-­Bw˞М;_V&"%+D&Lerm9 }n?juZdqNedpd)]C]O61{x2۳唀iM^p^!t'H=CO]R\\{:܌ȕ=o"5Oe[/_85Sfg)6}@j蔒<mXVZ2qjD:r&{}{!$+Nf?/1 ڼo:AִٴC1t=bsB$X3گ[K} /XebIHSK#[ވl~>Ohǭ˂<=B bh]PPG3Y+g  鷻_!ED:oVX1}S j1Aop3xKÏ,͹H;jNg G##OAݭWc@zTv߱jɀxGfTO^Y>W}&C˔j Lϝ_@Wa,zPS$ϊ)VՂFVjL&ޮRǝVe ^/N4KIU:le,Y ꠃpݕ "7F]=-"s[]әЊi买^&55{Э#b;"YL ";bPi]00}[%>e'N񐋠4O݊(()X9(9wF0}9_~Oali$ͧGXt9 M(1zd; ,AZ*Tl[SpXx܋J~E>0bKV*0#Z{f`OG ?+mJUR%gҟsy_RFqim32󢱮zGWO--W-WQR Tlu"!IZ *ôH-:ژ&H9Px(n Ll\8͞v,j4הavot27|Z6;rtY^L0j*|1 1p(얰r)>-R$ll.[rA#@ *)vW.s_cT@1k>m` <.\UE+ dM7΀D 0A%3T-K<] -leLI1n Ы4飥N+T4Zn3Z]l?|S(*jn .?wKI!e;%O z4V$2"p )"cR&]?ҴѬm5!]?N^; \(g WfszϳLn@ԄsixY?'<'|Lf#'?AF2aF?樐nwHכ3 Orqy1kx TW-Ցlpi t/&35w|PjFt6T;ʧ-Qb .rP׭ V Ph?܏LLId;}OYtr7e,2$pKeD7ULAuD̶U*4F\*~jI!P澔o%sL KSERϨ5+"S<;rNYUVW_P<8`kqv1F.læ2x 2B.xrh$6x|/{ Uɪ%a.V{ MʢfO ^;h 9zogyb*$bj"=AQ-rQzjV&*Evu^{Zרįe*>{!(L 8{{ 2x*` x;yvռ)c-CP UW_*1??j$|=C%Q92(Jcz% =[Ţ暌oh,eG>拫34~^OrGBE/_s$><#˵gfGfꛌ$yHVx.vX{D=AndƷQ3ɷ*1r# npcÄUCgeKP.3c>w⺺;.b3W4gzߚ#%S󻭼RT?>I%ϿCAF~]/L?Bal,`XGjY gR44&_r>NA\P俞Gfkyl 1{L*7>q2EzV`9Fj?xZ6vGtMᾜ1I12PmJ/a.f sdo~dVzg/boTM&ti>tvgBzdhFq̸xJ<mJjًZSC4)i==_v' u!_ ;`{S8ڟj{nj/nwPſ.S5RacSPxی %F55;^}fX"V ᳹o$Lx D5FrIF_^%R0[׵Km41_^7C À]p9ג n.ĺc&k#\\#3J͒6 {,-q2L:JH(58J eImDTT478+6WYBoSBLTe}m8 ? 7u_84 v>e7!`߾ \l#S)F g_@Mkrr`[;'Ϳ2)y3/b>VRek Sfek-3'2xPXR` %zb Ė-.)Ķ>yXq`Z!4ZILop2NZ^y}B8ҴE(nyN5rP.R{+&V$}#I+|ryd_GV NcΏ\Yy,`S2b$*/=l$&:TVnfwx7?ܜBYYZ+gDT4e3Nx99y· 6tSqBQPѪzK;߂#rRcPӁwf߷Kvsys? 5WQCHiz^.>L@@9iV`EvDB7iV1zYǼ7P)<81G&|gC2TIk~1P(ｌAsݱF-=|1[&Q@@XPJ[ 7Bpz9eOQ#V 2>ܧ qh 3;2dĩNtf<7< aӓMlSCkܓ A#ga:06{׿@|HriQjf)sq"bLB(v߃ӫ"ڹkh1[b18l e#Pr(u 9GӐғs" zGM*_h` CҢ[ )9<|]C%4syýyJ(!elEQVB4%s#7yj:\;%(O_6üM#dJڹc1R`dO/#5_fb~tfޤzEa]js֘yCa^p L;g L$?hH QީA]00reVPD6,upb`&z\k; [~kHpm!P#}z~(y|{$PkG{KϬDvV㓑rۖٓGNDȢաuf$ Gg4S-/r讗-gdVۧHW<$ dvtzj5*//aA8Y HOtO_@;c?Ks $bvrF~]786A?mX,ȥ[Drw>8C;sHi0mtf~zצ3p,JFn#n@{Vd"|r(DY_p 02EbM efdzy]kY0K] E.zԗV8e8cU#AA_K}2Cj1[$BC` [7 sEe^9v*[&ÈU| jFC7 2fc@ü/k]^/ -1ȇ"~UI1Bb!NpXd>ƪ~MIWWheym,y֑sw8\Tf<8iJ>Fz~%1 *ȗW<ږGwU5:It7W:zQ:w&Lh(`BPJ|!&wn[hr)Ӄ%obtj  쏮cGs~v(zt4Qi5Jlm=Q#7f"?g6q{~=$>_;)76^P#3\Hp΂Sso^!.Cσ.@,Zؾ"c_>tضl5X8dg~js !:&m|D؞C@_گ ϊnJm =81ޏf $KG'C<_Izņ9},RmKCG讋F\Z|H%NK|Bh<@h xN0ޕFs`Z*qްO5I;#ǯ_zbpaOҟ3 LDbn|\zLV?s$Qrl'X'YgoP@ޥ߾] R8ћlcm\QVVor&oVI!".Re.@}EL5$x0 _׉ .Yb'_:2OCbbp1s Wrp@SIa-Nu+*FWd'8W{sZK^8٠ +hbj16.x5 ?awV(c#zG8=T%X;&:(Eh3d'I{rwu͂. ۸~q:tQa`?rϐvSˮ@[Y %<|(&t@V?s.2-<܃z$_?.H~)s]XDEƌuwYomlԔEq~!/laOdLFsC.JEz7cJx[)! W pdS*E 8`a3~vi0ҟ~{*ю_dQwq(֚W]>_z *㠅EM#"H܎~ N#p7}ڟ!]&Ȍ -?x%ʍPXm%ecI,pQzKwH/iY =M7GG{LZҚ|hԣق˚N8| "@زW0{E0G۬D14<=k~vL舌?@"Iw|KY,dY{{fp]- .N&sč1H}];oM hg*0' l)p=CSb* P_txqpO;Bڅ<wQ*/]C앛 Z_TR ӴXC ty<@ f~ۭu\x5@RL&7J %k qŦծ.Q ,C0|.cQ+}{Q묨ѴQ+3@@Ṭ]̺Dܩ)YDcc! a#G[uD)1^|&>9H oy+)qvf\[bn5Ꮱq>]@>PykM`YQ}AG=#O:[zMf%Y|uة8|*?)iw'A2Xm6<((s2::{_I$8OF[OGh:nz |bYr{@VmUY٩L;xSqà{;YK7N08},z=%)}48n&S}8B3#G]q-kxƮ_3b}W"S>4Bi9 i %,x{J, Vj)x:۶0rDO|mia8"!\n ϵZ_lYg~!XW?3RJve Dte`ǩpL33>MFP$zGhLD}m`vWvE[uKh񠎡pt4~L*;6L 0Y9qNنB9K2#3%xr]EЇ?$!LF_mnPN- kjBR]kGr@w@SH~=ӶBܣe?Qmaj:ЌQٺ"Yl]BF x70fHlfow5x/F鰰$ͣIJfaY#.= [b_KU.o--n$g:T,SZ̔w|gxsw-Qאy O>KjRIR;ΗxO>PzZb|LW{ MHNNْe9WQNX'#Tam8#|+YR;]QSLV<Ł%zD9a/R\x*9a4M/;}+r;J'^JFˏvaRo`BI6H`^b~BUphZ!0 ._<*I!y8s݂s l^X o;XC b9Hsf,'HI83~d5®0ɕpO/){! dWꤊḠrSD2i{8+w=qqC˦T&f=SnGP<:(7d8+ԺWrX-d\ᠦc֭xiyVen3X'&f9c-lt9<מY?Vʡ' 1m2Z:F"nlt{2n|ME~6gu/snQj7o2e4?0ׄ"HaWAhHC=ud~_Dg|ܮV7)Tp<㻔$hlv>+X@OF Wϯ,q9Oj iʌ[\zJa䆰b"_:|MHׯs7Y K:tP w&Ha-谐<9sB=3&sȽT0Ϭ{s/}s=Gnn PGcMkK&jG'\ Bo֐ d*?ԴE_yb[CkN 1q T2 .շ4iΈXuM>UkJ(Sg,2In3 9,Fea^ki|׋ Nm3xh5ŝޭ {{sZ՜u-$*렸zsʀD]J%a ^kp4a{K`IOcW&^xh(xܚg aٰb^ն7]Ѭ<İ?2gيʊ"\N `.dX43Jp* k:$E[)uקKoEX/)w*` GO!}eo L"}yDruW#6|RSdK e|羶(7k폺 4Y^l6D\OV( Z29+?_ԡPOKI >2TYF_ѣsFǕOL-4/vX!V75I%PI MRњEJ(~h>"7RjEQ2y(/-md_Fr'ȧss%5(BbJ5eS3f2o2쌂:%Pp(cvPQMn~S5k"5ᲥRк<.x ]d S }Zyi'6k.XvNiE1 ~ʩ`Pe"4B뇅O'cN|PqpN5U̚D~9t*F}1exV+4>>,Hȿx1q$rG73| 5}^w zASݳV\tïcɓp셹b09g5㟟|͹+S>$6G$M׍>?C Y>Gv|lBb&uTs֫mXMOi%igm@1'[0|BeXq[b{,1?I4){7< mlnqG2m^-@(g?Y䯖T9m=>&x}9f|^Ð$#ѧu ` y e |h f{|#l-/{NG+`ǶlC嫫aHur=z?̈́j",(vvDV ikz]}5`7}ևXD4a-"; 8uVe$Yn6y1: *gن.CKv6׌Os|9TZ !5kDI>2%B5hDF4`]z*p#pM<{^oAe9&y-PC9k{M$8N"cب=녁OZn`8 EP CmS|eL Kgho! |[:_q&A0_`YVɝKyf 8 s:I0uKez@~g;'ݘcJcV󛨺̟ҵqEϖe})а;mm8:#dJ.kmH ZX>S ~X-vCFf9lg](žXSm}+I ̌5)"0]|,4@[ڶx=v?|J*t+O( ܥoߔk M 1VX{NlQez<' WضqU-ｱmLe5eOS zI-q#%WF " 8]]MFZ(Lx/Tw]}B8gW9XOFE\@ČMah؊8/>Bτnl\)t)tzx&.i+ͯLΒiы@wQZU4/Ȭ.VXr/z9dR7k[վ4㡐͙XړA+:xmzW|à Yd:v,'#c,Okr7a G;j<<7 c( tCpH|m'&98+-l6uDFҋJ"nTroJl~5"'ڬtVE(MwObޞ.\ÁyVg.HZlpgoէe7wo}HcX{#b6wK*Ei]_0 'En"]y=X^ sHh@j'L(ib>nTn!+enGNG#sht!SCbCw $]I_8ڷǜ³@_cw2r=!5۟'D*laqv{A`>Aզ\\Qt4rLLcKXӵ8Fa_fI/:M/TD k>C0`6J˷R%-nkH]m)g4kd)Fqntm4Jj*-)`kІN{.Kht@у d~7 1<t tb=eP9f eTE*$X@N޿J4ދ[‚[ 뛢vl= t5xbr~o5&c%:Zf `4 1o>aRsك=8t>~zs~[f갳1vp+?[Ez8T4\0;~d21[k?*g)?1q3.+589?!Ý3elVS[4.Fk[7gD?td9ne~1hӘ bWuC\oi>}=#$ >b{4烖˹#T?Joԣ9߆ZL@/xzA1 :{➩CB,MzszZF5`zm-BY_gE6J㳧qAOQ-p;!ӁtIJ \9"Z(X%EecWUˌ= RqΨ8HXj* ؔu^^8A6bKI_Q{\&9_v-!!OsҸd2cX ך6g@АL Wws&򔝽 #wPt\ӎzZ ^[4Mm+0f^7h{ny6B 'ӹq-VRbP̑ E7UAGNmz,ZLڰpީf3bf`~Ҿ(ZW9e6pNOϹpW e~LRcTHAsdP-I'^f.R#qu ۍyHR|l?|,-}νt' (V *u04[ݩ؋G]ڕX.EA _K &5ip.wYN՗VJδo)01Pa~9/Ȯ{>װюy\"ʹ$l`}d$m% ';"+| %mo5 {Nl@Ȕ4q<5WTi+BndRX=kU|Bȩ'j )8EQv!Hx \{q o-MQzr^!rTipDJ:HWICI_E !8fw*mgG 2rB~0#CقT.*O,<MR#eGUC",a_/-ش-[ÚU8G؋LY΋t= Qk!sW] 7'$I{6e /dY@UO#b2\Bsr*ܓ[,ctLFRm'' 62 MCo.f{,kudq{ pٶLEcjpHZ8+o"-i:hz̹;c9=Kc0FP+5e]VRXaݕ[ jFIIoH-B.}R~Xgžu՛1V=#Z"(q格FYn Jb +92x+`{j՝6*aoG'ؔfKo 6Fn:zf65|מ0R,ԬQs~_byrt1%ُsj,[ gٌٽ~d }i34BeY7`NXqwۄ1Qf!/esn; = k .tS8UC5OH_]):J4JX3*lϚ>i@|ml]-u w}E47yx%Eć+76a>!D5"&9;([^B"q!%QI![AͧmZDFbX|cY51<>JUMPU e[׬0as5CaoAfA{Dg-_eL9eԮ7^{lsW<v|K7nr.Xy}[/0_˘{\VzgoA_D& .-<0:֭w|xnOpd=A6E9Ǎ4ns -Q!ٜ Wb܏zZ $2L0ܲ@潈lM*&e կ&łaXjŽqX$*.pU[,SJ Vb,wsc<σJSN{ & ˵ cQ`XCh{(jI&Nf m<_d:qz$ZYxǪQ8CZIeU 5tw>س U78t$8Pu`GQ SoiG[dK)%3uj24܅{PdŞəb8ApĚu=́$W.sr/'f[aJdeUơؿqNAD1 9B "Y~7^4d}Vk.^a96EBDxjj_gePH#Lʫ^MVSQkni4W_.gXFT"ܺAJ~\*/!Z0mVf:rōH5ǢΓZV#HuC?1!#=BO[NN,~Q[!XbuGQ!H=nb/-5H&n¿Abj}?}}3,MԻ͉&څ"Ȑ)_Қog\UC kg57ˉJ˪҇gZlh},G6uIȁN*xnW薷ʇm̡C0ܧʸXq'?Q:% %-tM.'{z'K۬.%_.%T!4- &  : =LJSN,(8wzYfxBCМ?*tD?-tA1"WS-Y҆Tyu`Yk] hS mKjz(~y{9XЅ )cj/0)h^vu>1xcqsIfY f/Y#.N(m5r{}|Z N3S-9~798C-ۭWP_T̋;Ъ8'}F0oĪD<,ϒs Tjym˓AnUI+==W5yd"?|%CtA'f"fXBp/OYcٍfnnFN[ASj;azP14NJB{ ]!e5Z_]ߖ9"-^k@xEHR@K? "O R}zű׃$ [w:a:"Ytt0|H_A2~1ZCCNjBV: =}k+KgAUv`I 1\!?!y\˶Vyʽ*^0 j&F\t\F2k<8<&n)$n'A:BŲO͒rC5Q|n, cA_KM>u ݒYvӤ]4'RVM輼i:2@|B[Y0So?Gh{|vh>(VpH?P7o =YD>ȭhÓ1A,dϑ6 :]P 2>N ww]0?0S) ٩ _nΧI&(qiL g< i x1wm0)ֺ#x> M%|"aA4\|j2[\ _ 0Pؔyյ#-itx,fE?}<{^4ߎdwRUdY [1/QB\[ y0ۮ3nByl\2i(g 6r s0>OXG((Id P7@95A?7Z JÂo@ ?*‰ }ge@"*P_)ڞ]6dcї8Tp+9;8#i0T!nyO04]XC YO1oX[:_c4>Ip> u mFB!( eKޣz:c~Z%o$Z:[z#Fٷ[*fBm)!LR$& TESʼ'^=pgMN~ꣽ!Cj>.\aqo/>" bL ZREJG50eec/ 2O @|?*ŗC/qwBuZF?t *?OK(*bSXo4yULjT^ 9<<ދ^Kj\9JҀ;gQF\ o%e:"n(_ZG :л:} Ս\Ń7CzbԻ=yt j=>x]SkVN;2ކF31ݳi`Lp@D bۖlP/Gq'[yIUTv5+F[j, XT$$Ѡ!S bLL 19k>6Q-=÷4KW@dOj.CP܎*1𗋵mgG oxWְ_›]RZ񥺗0x$o~EƱ|@dG!&~E0$GJ6p␰]l fdyyp`de`v|!$/>X'{V ۦSY3,`D &+r4 5{GpMwpTQ$(NX}gNz= b= _wĎGw0y'\|ё87)L^̠DN ^!ㄬ8̾, smdUaGb-{KE`LTFYF=yC4\ރ*-wclk7L J#w' 8׭N6haʵpQPNA/5b&s[g: %XזXf1۟R}~3l [HH=m9aT?.$v mhM-🋷{iWR Ti Es9U)iܰ؃ :ՆO@;<<2<-z}plj+W~/M Cc5SQar "aRTte0~U݉1pA=omP!uh0>#GUzOF(OY7(;LHscR .7NWA>TE8mC *jU`bѯ|Nto-[ +roLƕRREA_ p:wy2o:)[]WE'(x^jMCAJqj{ZsȨWv*UL,s  Ր.ԍhMq 2"8$߾KU tC/%E"Zm|cAbly,Nɜwnm_*BhDBj"31)U"rl<-Tirw9ͮRV`i>s'OJ6#'B7X+'MAǾv㈠W:ihMK7Qѝ|+6w204 sy9ih{o. Žc;R5Q Μ'u᪘=!l2*h|D2uӜܓoZ,()od)qh(tbs^'ɆQd'fԚ 2҅7IԚb%bzv'eِ ߴI` |Bi> X~}ǹĪ(<.;Y]*ԋ6gϰ=yZy!&+4.ROF~W d6E'F ;,Ev++O23˓"?v팳|8i}2:uŷƋi !eJkG9ؑ=foVEEzl{U^8A&%4DU]X|rF dģO SD.FO7`<2R{YerHL0a?Yh7*,_HC~DtQYeC)mCe~(NUjz~i>[ 9Y4֘=JBukŦ]۬3 Q@Vovr{f+SҋFMvBR~"njlubP=l2!=$AHzc [ KQJחл&$卉~}3~Q d&7؝uy=ܥlt`a̭$} 2oZ˹F SC_* I1!Qh3L!4SF㙐EXLZr =WE tTܭ| n!0b:uo M-!RT$6wgkՠIKzYy']msrW[:d.tm07KC^% Ϫ|.KeֳFuBw&3W~H2(.tffhutowW-JUh+Gngbjh2$0byC@fS"6U1Qq "hA_.m[ߵЍ0Oح0K{⮈"?Z>[q>SP ,$>y҅v#=[ׯ_WPO&[6֟`cw?DSi֢ԩ"Chkv՚9Zlڢ$MŴ ;! !4s sn\UF8 vI WEV*M wD^oKr8wӏ_2۔q9_ʓKVF<;z" E50Drջ& @} o)\CGfHN|W )4{pnv* MȿHp2\|n !k.^W$MFz0l /k ЩjG%HdHsl@/b>W$(k~|?^.CR.3wՆJBcŒ]!b{Fv d&fH-&{*26d>sM1Xx6@w#L򭡃<\'ry9;/G RB5|O`9[eCx;RH _]h@Tg3]AK#oBcg1 8c_p4=,tUN|<߇w`轈"}ƶ@w 5rK0ʵ̥OI2p!VpHӖx7U4щ.j)"cj:_?cC$vyk / Au4s\GWahĴx5%#k@ 8vțcVw%kbgl.jAFv V1)@ع45-i i ߀@WDŽzK'iګ'CK,9Vʷ&.Y,!,8 TAN}^e>%*FQIdi9,σ< [Ҟ}k МwiU9$phjr`dp{EB#ȩ!A|d_r*R}$}Ik+{`s0`YG·f.1hs \"t0u% r& [d $iSu!;0.nչtaP4V2L-嵦@>%2?\}^3[tɼ#R&dVݶQe()jsԏx*LEOs:m'`E%T?/ࢾ`uLO M..]_N"# 1hc?m'<¦%y'qUz eR~,KHb YN?k ObfeƼV^#* k+k쯡蔡 GjlD y|Ltt\M);5% 6y`Έ;=.š幍'tBB0 NR7TnuyqW쯣񒥸 0g&AI( +fECw${5%2lEku7]ȦjɃc"TD@c`>6@Yb+wȥb?pL^[d*|Ry0Ym[ě1W\X = p a<.sPa`*z3P՜d@H"`T#MyZ%Z"JL=:n@VrtDi3#A6&l5:lrga;KSP>R-+WYyR˺,L5:CX O>HV.Nƍ+;gh_ˆb1T K~Ӻs[OF)D6SlGF|s5BN =#Db7) bNPiĄ<"|]<8cZ^W͚k 7:QT{SCz}l;5ǣ셔rCIvB20оB􄇯S&bȼZY2ωژ-41z\ _؝} BxRl$A_n{Cds{>#_M]S/9y\GP\,DZ3&&"fJdG;'_I4Y2oŌAD88*;I3sKlxQGŶ2Ͷ|{ mt}L%) ~\7Vwztn0Y33#i=>oe^[L{ h Zw j @C/;xl%M{2 j0O(R1a]UVQ/|cjTXǬPlxT9CVRgޛ#AgS>rC(Cf7oˆ sU*Tb:0+e8bI)K Pߔˌϴ3c7ba5/KZl)C(q [i9AG[3\W *]cH\Cޫ!vL0&f\r"^-&"dN$~$/ġ8 ڔxy3_,1 .!ADfY?Q vew(*M3{qKq0܌$ P1VjUo [j) S> 7DЗc22\-!ƿq~0ݥ%*g(u<%_Q<;f%樇4u[hh"A6]f%-'2k4Ck7RļMلxh. S@Jd  kȇZ(pe)g_?Aڟ'$cwu7d!(Qmbb%mJ9)\mlӳڳ L&A D!P-ڬ~Wy_jR>@Zq> >QQf9o` Bȭ^J*+_&`2mJo]@(ù4 -X;V4mYe1Ϲ tLOk9I/]_k1՗*`O]{β0 1I:d֙n Ϛ , ܟ:s;u0evFV3? gH ۔-^fas1pܬ]4iBƧLw;ŶU +pzl\Zi@DV̬ cy+z :v\gB$,NܲybԈ GHxjĵeUey/h56!prDX1cTUc1x( UDs"L`B "ȧotLU˜$[ %I$x UŢ|Ybh#o滅᪕zMQ+!9׽tRV$/8Xn?$¸2TNJ߰l;%lНc&Ɛd3EQ!9tP e11 6'&"ܶH۱K,˶5WG#Z OdW#ߨ>(fXQ\:1"]ڰ. U%gtFY^jl" Nla*wkz,F2A>Ԕޝ4O}^;y@HWJ]5a "% X'bےaY]6\Y-4!-ex#3jQ ?Lܼ4xj2b HhGdƊ((0GAыHsv A&%Y3MSLF~_5~˞Q-5 zM< MϻkA̹<Ŝg!XCR4|%diL}w2yVБuচy. uR&ON4_<}!xK34RzA:ﳰ:9U Qh&UH@_YdR++o>m|\H$N/ѱrJCĴM3$:l@~cX !F/2/=y!&Chc)E=jX6Q{/Ub?欠8t?ԊcHtznH4 MZdM]pLNdR_|eWb CRŗ4w*[\uCNџqI]ӫӼ̓x{p[u01Y)F1KX B/ttWHCUA}f@ZR|{1ס\Rqev c=6Z2u'3*xrBH ƗT<`~{ehPH0T\z1λS+tŪLNyH8jF^9 8GErnA Y0ٯuyHZsC+ܭ-(pDYGw[jk+Z?:=tu:;rsҞX'QfhC/KxS7p ӌqһTʳ2PV^逺s?ڱM$RR*@AqAV'M_cڿiΩ^GCL`7Ϗ*PD*]? YB< %BM?nk>%C{T!*Mg` _6VXzn%vyKu)D/b=7w#eP$3fuLF 0@cN o!M$&df[QI uRUiェN/k tXH-q>1ڍ<&eAPA*Bm'bI"R55'g0r!Vg;5z|bВD7I;Z(MQ^LYt)e fK7L3LKN:̟K[$p=БI/jPj t~Kzx׹ &iHK44e>u6ʮTM ‹^j~Nvttןى(*$[+X4擀(<_Ol\װIr 0ۜW)jV `ͳqF¨ӠDbBAMwy\YJ3VJ{ "qzK_Ԇ*bt&X&z:w^+ Rь]O{V~>N[}y%uaE06oFY(JuJYni." x\d[핋1;rٝ;Vm$<ڼ!ޙ%*ρO5ՕxNGe>uyf?.\yt >Y'3b*Ac>OLAMp ʴD ˭IԽ(٥O)Gc kѿΤ=z 03/QNCRM˿X <19ʜkPtM,$|oI}'P&J[Sߩ?ӌmK~u?6cU ˥Žat% MchV.q"G7`BS"@#30V@Kn׃=?Tu ;jB%ХoiYNPe`.•5t\P wvfzqkISRFFz J#Pk2>rs'bﴖ\*:!,]g:K55 v8Eq_K9,̫)HNxe+a*~+VKE LQ/>YW3ipOowav\vK׍\:h^%ĚIf,`E6iqg3JSHaC9W'dzPg)\f|%>,-q[9+r0{nj~V