python3-apparmor-3.0.4-150400.5.9.1<>,hda p9|d2|*@ *< @(i<@[z X{yMq}giҘռ;{ev(Ss-RO}>ʔ?ʄd & S= SpUU U DU U -U UUU*PU 4"("8#~9$~:.P~FGUH$UIxUXY\U]TU^ bcªd-e2f5l7uLUvĠ w$UxxUyVz$48>ʀCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.da h01-ch4d SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh01-ch4d 1694064909  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=344ef28ac1645276be8b658523737b9c74bcc413, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR%Y/'ގutf-8d5b06eed0fb6d5cca56a4466137c804b1f61c5881a8c3f06a09f21112c9b57b9? 7zXZ !t/rI]"k%r) `=l.Xt6 PD]f,1"8nOt1zt;zfS~"~h  #h&N/0$1X~f^^MR9گRރ- ®6BCU]9M*dx1{n]ĒUGiBο[w@ Cb8̦(nxEyW6mƠ滨~ᕁsst(TH-SێfF!!YW|>+EB<݀v7(L v*@ѐq!,ƛrSg:6iEb/~Yd%Zo&^ xB+ap_xwgmH%1좹Ѻ1*ĴPZKnL`8gۈxͪ[/ 5H$fVDy"Ϝ{Ynq&*L&i0"Tql2*CpiDkPy<՗2`w:YD{~!q:~:c}C[44zD*2(zRCBY%ur]70uIQQoOvv=E7 G3ZfD@kr{}Rˆv(XZR?R{;4,c0#;`|L$[Ӣ8t;="Ѡ/Ӌx5;5nqK}9?8h`y J_+-d'Kd3u\^L9$ 6$` &je8j;[X@G?SXRR8\ !/Sz`QF-"rSO- {\+(>:mj't\bWn[^?E;L<,GaUɽN@b=Z"; (CLڇ%uvaϮu>~"-l>3#΍$BuZ6 ',^ycda;zd1e6\9@ӵ P]BZ XY)B2zo z:#`Yh EG,T9.r:*+䕟2ͨ'umx$ߤ(]5;t`z[c/\B0F58'a^wp"ͷI}w=LiDL8!j%yF2J3]'xOM՝;-~8nj>6sk<ԩ2dR?n=M٘Q2J?󵿭#Z!2\&A/j̡Q GA ^@`I87T č݀k~munxOq}֨{A++ ̾q0H/~3t_sJ^v5 I:;R T5"z3CZZEM)0z&:Fl^*yQq:$hyXa|6[r2  {աZ%KM=;z':FUCRal{#sڠZc37 B^"DiD iv:J \i޶=ؘ,iM-W3@L&0zr5(GfwZu0p+@-K^2"h`CT1.x>Rw=i>X 2]hW|8ۗ1g ,=c: w Oat*m:fW]qcgQ,ali5aF_;⤖&E̳'+/E9]諯- 9(I9IPizKގ ;"ơrE .qk5׫ JF~zLuS'?:Vg'keJǦyyԌ}hN75%MfMl_Ix[*wxkߕL\x Ls@4o+8XqV0yf#=3XqՆQ\ӣUO7Bj lCɟeԑ{El|oesysGd2*nR~Kh)<臨& ~j|#ͼ !I"q?KD NG_ٳ:+cɔ2uM"bR{b7s6B^8N|3vW@$MᴾzGVl kr7/wDA: {4g PϤA$lYpfm63-v9bx|~ȃ%(CR'{Lqc!9[GZܲF)(M@|E릍2- \w8ʕן 8Ӣ1z]jHxɾ#MPFNsNY^O6f`;i{`p'hqrG? -ɿ3ha6 j@ҕ<Ȟ%՚a4%|uBxN9 {LN6?Fs%vVlK#{>k娸,m8G;8, ' Z=+ Pa\TRLq=k$u0$_ͷ7y!mi=_WQVnzÖ# klcGf _H,ErJ^g%8X׬e "Mz2j2'p'O'O<4O"vMn@%c4TS .VƤKZnMz-._qYn )E! "9ӔJ7?źu.$ PNx}"tFtavogT?L*ă+c U6M_pF3[سHN=s XwGvOգo.&oQ nJi+(+wʟͨ3\ct8xl ba:/l9*I꘨⬞6{Z;)&QҵAb2#o Jfq >?m'Qtzt\5֤VyRz$wX1&-ZR+AHv#~\mo2y&|2^q(F?+PwP 3鿿{T>'pY-LEUmᰦ&5@n7(Rʤd2q&Xk'BA Yuš9mUX*cWѰ7§->E*9X8Hj-+O=@ q]@F-|=<kP3e n%BY# &j(oh~rb:b|͚FJ}xΎ.VHVq|k>C  $:?Rͦ\SW>U"%KP\)DTK.V"fӱ>zÈܾȈW|KMtDTA+|+QwFqb |auĮ\Wi]d].>|rӸ,Do(.JoD&O[ \ {WpYX0# ^3ϯ '@8|ѾVl؟g u݈bK0]`mlf^5 qP hP<.baFIs5&th*jf+܈( Uv[~YĄ2{j n_*1I*)fkܼ_)vv; FdǑgsRC+Ŝ4茸Q*{]RA]X/næPae`Cimx 7[IfwDThf7Jb܁#,'51m Yq%<9H<^2\bf.}ďmc M*IR#9,sz2~.ݎ2i} ;@G娟+7AXٶT/n(D 5y 7"n;TG|1=• vZ rN/+jt>"Aslo~ w|_\sRȁ8@`߻}.帅 7Oz@7Y" =z[Q^ inuHE ddXJf^Nz΂C>ߖdCҩ`yHpK[mjaCăbQ'?Dδ Qrqc-~s%/b+u{O]i9h}CP7 #ؽ<1Fy U罀6T`SƋ %ӧ`@nJ7X~!:㈹rS 5gv^M5Ls@4%P 5Ԓ 9jk%G8m8H֌ʃZ IpR_q3S-;9 F˧%Gڿ-}9j/-jy&9O%KRd|u7jB"; =xkuMqԦ0L]"$vQI$UAl\X~qx9Ph04KQZ'?i2UK1>+Ei+8~.o!̆Qx@sR}U3ES&$LVsOJa>&3>-^ tѓ6_i&` qqܐa~]uT\99pf-<׾HAn%3.ȶRG9(obяF.Kk7rUޱ` !Go7mS t*}~VaҗsJ!>m`qMk,31'^ߗUy8G[lE$abÛ'=UNoTe t{XZNF|?4KF<9 u /ZtcxzJ?n6EΏ7H Cw0>di镇d-X'f1&yZh_7~2U؜:uཱUȗakcߋF:sÕ_MmXIf<&͖KT }!z79dUve7IGbH| w"- K6#q\'Rg|^% ̏ GbbEJJd?"dr1@5Dղu@(ǒ0Ǘ$Ȫ%$h[E*?׎X$Qb %[hZ$% B+ङNwPmLj,[BmJH(ǧLA#d˞3A'7:g"tiMT-n=߶Қ۶t+rAD\l3V{Rm ZJMx6uuʰu]dZJ>I¯I}m;}wc(8T+GNv1]}Y77)8nE,JQ_@Ęw)U},h\}VzXN[*}M+Ö+܁=>U @[:]Dl(E#p>~>@-6aSFHiRv>{vNZ3L!g H^Ҳ{ܧԉ#0JU? JfwT{0N=OUIaRĆH|mjm[M,iyvKJ̗"3#_ H岗{ޑA6WfO$MFK(3h çxڇ׺)r~͉di oTeZSNDk`lhթo(Aؓ FD: en ~5xR2ʓtMR( V W)Hv(+'1  PSV!]-<ξ7= Xt%7ȁhkr0r߿ץ.vJ`la86arB%-~cɓp.9QS&gƋ6sI@Soed#F"&a]7iݜyX~uXA[,I &4߻ H~P *HX1:4,ʈZ{c]$Vdu_g9{]:\w q;Vԋs2u`Rq{sxpb8J=-\9Z&,@[7.6ր_$ 2ތp~A7)NsbzEh%H.-,FaJopyO0͎[tebТXڿo*2r@MAޕV1zW9RLtftMp7]'O  ZArj?c[_X8CF* p3 F"tYBO(O8.kų8U`dG;bXSˉ=Op49٣%a0_j]0QgO18rkZQMum[%K~gNjIwr;3u ^e>#fƫr_lPl3փN4U"/J+<Mq/ KFWv ^RςX'b:P+R}ur5rT鄸}:onwa[uPܨA.+[rc'[FTnTlɹUYRŭj^߰ЏKc t(5uIAsCT8^@e}s/˜7zBI+=MmGr(6`Z=l1mOK*0 w2Y?:MQqZED24t࣋ŀyɥ&>f(%,R?T*`$?%5:(V]{'-C%9U@!lu bTtP`}9 zSE4!DJSE_J gߌJPc ^|"ݪ4Ϳ6nbvNsm ~{"1 /HrEztף8V5'lICMnsG5l\;>G3y@$T疽}$ &u b-icZU ֽ1N(<1`Psq~_|Jt?a)T%4'!yVYgu絼_uQ qs0Falj2ͺ:1vOFZE:&̜B$WQ_P3ԗ3kT%_F_޺ c[K,|b;*}Bkee6q¹f"lu(Zdo0 SC1zFTJ7"(E 9Vո! S*xHت92x? $`F(p*K[:B뮁٘UAљ:y -9"-js?m\*kjXSKki -y~AȤuOYf5Kw`0m]\{ XVy|SFd~h7vϾNT}ss=UBY F8H0;2nS?tiS5Jw^-T8)A\I*#dtx(D= 0id^_ q|Nfˀ n䟘\? I҄ϋ? aҍͷf> z߲2 ZaR@HI{*P@vA|իD~h;ve՚+-`owfs ."0]Iٴ=@ ׏ܘ.p Z0I XWaa[!@:rQdq/Quq?Q3r6>?f ;˯^}4"^7yփk(5'"TPF>\ W=(F ]t֠Rg1hLg\ A II-KM)Q7+0A1!XN"f@|J@La뺐qi$wY%$.KJS(cw{ 5=Wj&FUI!$馢|,RAPflDyykͨ68mZYͨWdg1ن.IQ5 d7Ul:\q`8XhP9ڟ΃*UQ58bXSKVo$>E?bÃo]MWKNS} GT^m[vj_sj%Lע][J:] /}O=摘bu<Ƒ:gFf,sF];}.e¼^PT󟐼agO;hԻPC3Ѝ/ҧ:ڬ+]3dz%_[dyR;eA:N򧩨([L*K%q&6DyWjT1g]3h]aLS|Ȼj5* OC(qN <5:X/lMW@ҷ^eafT&KMJw&we>;Eoq P)ҵWuc~}*9>{eR[IgU梠2x:Vm\ ^w}剜{Zk;F`)0)n"& !zu @lHx=W`"ןtqyK&kFis\L{ H#G %ϥeA Ѳ]2J9l{];JKJ_:ű)EtJQwK8bh(&PK7@NCGH%X;:Rpھ.G@<bNPY>!*DPTD@"m,M8 .Ov5aIVVpfKTN/ᓕoyiURJM H`AJ!Ei/J^+>\ Š<[XڅFm !K/ _VTlٓ}J&$i[Hn1!\gfCLѩ{ًĻ#Ht )|I1 h~%L4E^ƻ+'ѲxI-LM2h܀^*}AS㨟.LdA0e~YL_y{\Sdv |nLQ#YrzyGx`i`Q4 B^\&qMeT7q5O P$TÓ}, (Jk h7/ ܗ?QE>\K'YsT& J2nW<99.@F2CLtWO >?_Z: <L'G*j?B+` ^RHь^z (\Q Sm jBY= ڀ `D6S0 A͟e8P=K[2/`*y %uU~E%1ݺ*B&ֈL>j_^*Z>TTJУ{ڜv?k6񀌯X51li@ _Yy Y)Dz Usfr\)#8W7Y#&59zN$@cWV/ᩃ 'P*^-VdnbfRVPK Ay,{د KDg VWAq @~FjB CPڑE.]L.|g70 y1n *ilPk6d!(OZHG? fuS?]gqհ`ּ[!( wizGϫ9*0f]H1=:4rV]pʟ',`L7 |t6lM4e4n/G| Hd݉̀B R& B?SFvoo2퀗7|<ƽpppQß[n4mO )ޔpjAw'^@ N*jC̹UrSmQ^mjvP5'~9:Z@LC/0k=l<= BTj _z&?K{ `~GD9 ˈk[= 4#%e+8(:aõhXn[u*̏ô یwļ 7&ݥ1^AVu3 r! ye?Sf}\%Bq}$E[`R$$B4Õ3Ǹ̂S/X*r݃܀yDsSh̋4?2w4Ѧ#ҋތ\[t͒v)N=A/d*!qST7ч,wVe7*:5 'lt ~GqFĊ~qFRA.Kηs7"~Ǔ r{ ^U+pH'֡`kuB}~.t?EϸzF$m/ qKG1Ll9a옼+/}!Itט]}"ޯ!6ZG2cHKRo٩V"<=;P|PްJcL6ogP5O0CT ?Ј 1#N+9UQ)HM8ǯEla w;D0rLedx|*U w.S bL5WmQbƳ.F ޭglor!wT#`0BD2>s-t A)e:6SCB Ls> I{3 \+! fYޞEMH޺(?lCb_F"0 ]:O_5K2a5qCYIU/qE!97eT%1\t@/jl|]X<}H2m^?JL8P5IމYuDk$ 0v"]١Z'N&@+_]P*KjSV']:V0͙Vd|yROV`Mƨ=:}Mi(?.hgFU[_}Gr>*jo"H4"os IzfH=*2Q4V=OLE 33ɼax}x) A'uzBqͫփ ܷG X2 Xk3Fva @Ff$42\|ᘽFu|6 3*'{SR:;2m8?e?>u~7bzIl2KS@8?Q|&zyrdN+Y2pz3v]T0Eu#PS>T*d6_Ζ]%NrB;.$l( w3Q؃l@YýoߞGGP#b,7$ )|`QCذK6ke25~Bp mT'O\@,5ԧKOTGAOɉ*ęIW޳kyzس֮>߾ f"! JfZ?w;[˦PPȂ1H |'I]HPSm_C }㊽B5OmQiEWCYbh\R+!xTh?km1̨ݨ 7xmu2699Ԁ#Jwq?Z)ZZŽxvUOP8:|C^l=*1,Fw C<-,"OL H# (ulm"`nñe;}׽+>R8q$EiOm r&yY+ֹLB)U~6}/ h`;=AǛ%|\?8;lo>2>tm7Pnz{  e%_d1#53Z .kbh9UCi<մK}*!ʈdʜZR}ӹ]h&}HBu #=^;$o!^Q z0 ;7&z>@;mû8M*iD}g"8c!`%ulB6Du%Y]g  Mh}[r,`&w|,l?j:D&W%ck u,8IpH0W)%J`6czl$Sh pCsx=Y=l1*Ҍ` (2*`c/TsvIEcf#[i;*t-&R6r?7J]FE ط'iV%'YIO}SXT$b&V>Kl]>?JYC=Ԡ2_$!M*rwwc ФIPz県>G4pњ:J豷f,a'6KX?"˚(:y2P+xU5s\a#/Bx4RAI`5SKTٴdFIeV{ jBl]|sH[(sLVl]ڔ<QJld]'z&)|+%Dx`$nw$H< OeFш;԰w]Jv6x}aS_PW0ry8mpKs/sY K(/X5A0WoEEU|6 . wĿw`K X{^rFL̂aڿ7_qk&?Ɖ=s5?>_YPcF"eo 6l#nBV]$1qzk^:0b+ԣ/q ,z |zk_mh.6*ysy2.0чs݊ng<$R"ƨ1/_i! ?1M0r-#)!UΊ? iɪ[01cUߟGY;>iTjx#ƙ (PIC+MM|J^GrUѭhOUƝ&o{b̍,VSA'YX޵K,5eN'w3D7!}4@hLLC jƼ$r W_}G*KTC \I6bq@vUX9|ֶ ~9U88JdYA1Έ,moeܘfu_wy-Ha%%R14 -%z j*-dӏ :7AqYG0Z*BDQ{6{ӞH#^ܐQ?lbαZ˨sjIAܤS&K%%ցDI?u@mI9cz ?`^~=alN Z[=<%dߧBΗH X(.$gwy_aI3˜Cr W%nPYǢ"zyX<EY 7H_iƒ&d$YvJRo76eHDRN k! e+%oXF'zp10DuY?&"'Svp3dJ E7QLtմڭ9 8cRS^#[E lmr3 wӁ\ ܽ'ߠצA}em P)v`E/]FDMW+}d\, g+ԔYwE@2%LMc1, qsX##ClgqmI ?7"C3Y;X}@Q圖"wXm*!:ߦř4.tEQ!i4W׸B;!om! &ɳ O }i@-#5Gm1DZ\[#"=JfL#$p!"_;D`\PQRN&dH맇M &l|?rfPYa@`9КaKsR@-9 n8lkM$ůT=hUbAK9Zm@ɅF:TߊklC,ׄ5s n_-[Q*xWnbtFB!}E}L-pCˋ OnܠӶ<@bx vۄa$H9 Z{r0D +ńh˽\5ݕn\DJCkw۟\ *opnNJAanQ(1^!:Adw`6&x/g(k?YH8?; )37م"y2sr\]XQk`TY퐍5H0~GUcȄPx]|`xvIU$T*c{GrUI w/zd~q3-I#/Lȧ/\18 ĥ9c ^ܧ-nK;j]96Gf?V(#vZ]}01F5鞥qwmSc κ2jLڣ6Y_)njT@&1,3scjXt:۰@?j3 'X~R64x {I@bf3戉ƶ,;GzUɨ1.NUW`M8fhŎlwT0KޔQ=Xp*,X4.A00\a ||sFTaqxjrtD8ua(z zr$82=խySQr`穞_]mN{8T{ŵZ2H(K-N^$֖'{߼l־Δ}Zt"koB6=MF}.1f֍8M/'~՝T Rno)?C.&Ŕv_!o%VvJSаv4Ϻ9CMۍOu8΀cenkxOmq/goB|nuH"NQ`dSA4La /:KaHݼ!4nHjz>\ IIܷK:>9:[[I؛m_KJC%g7;NB!I!0=%/f[+aƯDݼϩ‰ ²Oɾߥr_rk۽g@n޹ؕh]&$/ E "S.b'5&}ZXѭ_9`t5@N{RԎ3DiPʌ6\V Km2&@_zǰoqD:i i/eu""{\M(-nz/)3D#fhUF"nXFIҜ1VO&U=q>u ZWBoKзO, =Pcvjo8uoh,!ml4%*|1 '-7&qDEr.xTQKՓ'8?|}R)+2B]jBL%▙$lVSVezC^B##ZCK`Mѐ/(/gdv4νM8U"hymI;& =B|UA]fbBM{NMHԒ)0:cL} w$Oe2nVY(וD|Jpa 0㘊տu)x R-楫"n{'cTiPsu)%f*nϾ-!-*c|W#WA]v\o7n@ M` 瓠}ַV8ȿȨ5@)h5:`Zɭ("_^SQJG-]%zN2\X%(^g뭀 J? !{~(ۨ09֣>cx=xz.(qebU$]g0\t wZwUsMu ]R>I{.vR,LՌJ؅uk:qA ,RiNN?n}߂5-\t0MgEi ŠmbdOWGL=dײ>o%jShkW/9R,z% uN71cE(K`8xk$BpܼK#wN`ױfgFb+h|n}e=E!K;l{8!أ򫦦Z W*9Y߯mIEFV>\D8JDhY,nP1[rgRkKYQ>5,\S%1fW/\huv]wR@o BD e{Lo]zی 詄QۊQA c;nTXnMQ[6\~s&L{埬R v`Oq|!7M5鬬݁~~S\#o ]x))cy+7נ w{lI 3ūW7lCHJ7^iVljybzOfDZ~vsP rS3:,&?<,XS#!tT$6^d`ج7 h;OGFe5L+6(DSnI;o zRv_¹x.AK0nKvƅ^uDIdV<]t~KAz'T,w"G&YB7C1eD6U 0*]Fp~ZT Ľ,.%E un}eb[y[q,4!~/Ӛ%UF0=K>ђtٌ$a5cJx+\)ÞNUQw2BWt [hDcZ\RA(~5/5D+ "6SjX , rP^9^muz)3UNj-=~P#L,f)멷)̎%7=KY^pwS/ sSAJ| )u¾ 8&̆krVϯG^۟~pU*z (XVPҊdJ&F\Dc_qw1nbK`0Ƃ {>;; ږԠv8tA:kGL؉g_7L AM&p092;$p$+ǵU/@9wvWH 7L/p{&vٕCM&K6j׭ +&0>$ˊiJ#L[+}[Qptx*xs=7N# _ö'܈(.̝8 lG/D~"8xM|:9OB%u fuTk~ cJ# ?!|-A8ГjnR Ÿ1ޯЎY<1%~?F^g!Y!gDx9@mCs7?TDǍal&FT@ʶ|F!$Mzӭh$'x7m4e!/CS$z>^$h62*m$6p> /gNdyqlkFiHsNP%ZޔGA@-:VV` .?8Ȭ|CmgT(Oi3cda){[xв`/3æ..iۉW")P&D>i]]ѐH#Zpo>syzAZٲK]!&zx*vi2.; exǏΑ1P S;HL>cy!c4^&~I2eylcu9F$"s3a^ &>wER˸`pj@(iL5. bԼ?$ / %fwJ!*` 10iCהۭ:SgH%>^o=8>mH`& }b둤~.fR(n(~;Hb #W<8~oaGRUK3^SL_jpg~LmA'p7 I|iS Y-_ֵi92d /Z7*r_p:UAsg)w=DyyP(+6.~ne2X!9b>Τm85Z@! ]y'2eJe <9HQ4 'b#tc$RG49҅߀B0kd4Og0Sa0Ga^UH ^0"ô P7#Hu)'!_n}`*`OE0q>ZN:LtxOH\åeDv8(6Ң7,S>s&­-l pЫm ES&b(LA֜XŧǿfѨzm~oOLa=`Y@ۑ+3]*P'W0 6lO-T[.vDyڊ+H}ٕZgYZ361O9eTzyDAJ#A+B (̬ze]dQtδna5&&g-\ O'SMZ^g퀳~(ѭyB +"^3=Zbt$mT᧖fF) '27 tvaIی v"45{-.wV|=U1CuMGiS U@2R-ccJ\tr $^#osQ]F QDSĬl>=۳i qO#IXPp&`{śGݭDX=`Ir|~a)k='"m &ևmYW^W ^xG=jZFats")Z4fj'~3<k@v@fˁ<Ê[IZ;E0 r7V{|)(aj~? = }ǛwGjxftXћbPj9siVv/ \æMA1̒J%E?Iy/w"D.зfG )Euay֔јiuR\4:SoMȻZIzXy.D?0@ԘxGbnnT tںL Zw3&/S1rH!4l Wt߀!).6Z)O~/'BT\KLL;utgƖF6[#,qzCrw|沕ֶǦ8~!rn|\xAA\Vc $>/(:NFә{4)~5v7x9LhA=y>=:s農{)N|H! Dr\z1[w'O1rtq@{Nv  [^}g,G56o7;(u=Z`-EJœ7E +t*BrIV# @g^,+rֱ)XK( oDĵӛ+UXLYewa Pl9JxKB;21Ј/Aٚ7a A/B;k}m +Qf*`n~rHQ;` {|%wL'@} =,$9G^C8p=ct9|UpZ+,g&cj|Zq!Zt*B%>- ։Oё=Jey6֘AwM2H+J\;vޘ 1@fP>qZV) Sxڟl33bzwi09ʊz֟oF۾J|/rh*v9`[R"m^D%$VEcW)&q(^I3)uǎT*2gE2,PfWʜ9J_삤{Ax(·󊆳_usI[(`EfdWF|tN ʤTà9K"ݮ;(‹laK _Xbl= 6\,Q'X9z\ p47Ih;ٹ@Awo4SgPߦiv"4Z@|"ϧpT* (}!tGs}THtylX38J X335=E1q2IQ ?(J H ykZ( A!],'ه.ox@%*y=e?BȮ ۦ&0Y-biRct$Fg0dđ5$nv!5@ch$kzMcW'@kih#4?o@RA[.!༪#P_LMd%c93Pښ |}܍Hkje8bNx@>hq.6rq &Yݪo_ڽK uWd1 ;+ofGC-$;vb#obIKgF>dӹF:nX-CAm\%Keac$=r\l)Z۷(1Nꙧ)ZBPIBu԰º;i%jcc΅_  Z8:174e3ޮҢ/y\֍4vG,Uh@pwdNkl ;k(kr2f?.j~4K#r5*H 7賾~Q+g`)GՖf ܿą:jVB3p)SW}zi9~gE?`i>]QO>XYOuEy@zVbY?r/ՎXxol/r ٺ3i7B׺dF@\25x)[g-JW\ieu ]x7 ]wMiV$H0Z<$oY[b{?(fCƭ9$/K7m_Ҷ;,ʌۦQP"W3J5zSI7`FZɱXzʮkK?*TsM)R+ݔ0,x׾ϵN9Pd}o5gEzދ5tܠXUl !;OOS.grh.ѤOxJ$goaP)Yeʼ_Kh4s=l]hQsʁ$pzye[RRǘY o!MH!W*u->55𑱬!O&.|ġwjZPx?\0 XPsȈ,62!"'R['NJ 1gUVjKcDI9X>SO~}_6OD%Cۋ3/bx}g Xplv ^PmFģK" B뽂N i^sz" pߧA-&K95`5yFrl\_[-m*#E"XB?ɦەw` -1;^d(q>I=e9i_j[*J=_G`aL'Y{I<`^sntZ¢k3*oњxo M\0v%ꤞkDV6WOSyߊY|yS<۫Z rc3L @_?23C#4-c@z(=5]`cmA&ep(AC:2 :V? ~]}aF1ŗdj`v!tQK`ղ-ZeD&`CօbqLcJB߂H/ua?@!Y*na\ć! jf|=&עi"DW 8IOzdc3:}?%=miš/,y)dd𯝰 sGtYQY2mQ%%9}_gok@bL!0-%S#dY/PW3ئvT`øGɠȘ69MM3M/5 Q?!y™DW-1cn}Mtx*&."Gfe^MT>ySDbD\{204[j??Ltr} by%u?zڭ_V|[&nDf~ͰW/kc D,>Tѥ 7^= „! :`dE4vG2qv: ޙd>mU&R 0l(6I|yOA\!yC`Bɶ2ZA7.MV|tŵPϏ-)[xdH"ٝRQ]'{8?xxjI~Y=#oc^wuY+h?ݲm)}Ԏtpq3Ȭ#~"pyIY[\ op5jh^q瘢֑[<)i%$,M^qnE;ra3p&sg|^L2\Ud,C$HN~7s[;B?)Џb '5%rk7%P.%!i);◭c[a6|:^¿'оvR=%J#p0 ׳;!Ե@T~3%YA^8?L!{JpZtD5!PPAE͹%c:h_lY{.C*3/Lɂh\w)E-ռe-_ubltؤۤԿ!aRn"q:H7$4 CAֳ* ϝtl k?{2zb#=^RB\D$ds ூ]slK}mYqP8Dܬ#[-vq=R?j_QLSFw |Io* waNI]Q~fRJI3TR@.~ce2N+2ª&IIU;k)-H$Ԍ &3BB5(orcvR>Z^ޅUM'_*؎~7rx^;y˝d͍Jzfή|U0b&YH1HYPei< # Ft}r>[&>cd"&¸XP,"wARCmZFL@6D#47ث ɼ`!E ԸR_fE2ˀ~+N^ZeaUa i J/ڄ6K0=j7PJ]Y;tED76y5 *:mN=TN9 d~4/cl#JԂa+n3ۜ=UwD~4dLf?׺Jtd̆$ؠtċ[zI9ә%]Oܚ=q (쪬0ocpU2#GTR 6; ?~W,8 e Y4dqUK>U[[쨆&5$*E4;QieVuIVP קY5V( |So>?r!Ȧ!T[AۉXD|\i 0f,IMMUmn?žo@V̢Ə#w'rN@ΜVZiw=/.]{.\UB.^ot5@qvYMktqXԢ'L6;L|W &id ub7DY!||ci[\d7޺MG=Y(fdL$Vp.B&4i6?k]' bqw'h~+MҏJWerP@Fz[px>728h2vf|M[ Tryy5mbEh\_f=h2_MFIܺp9=}_ C do&.JP!]DSx Wo`iRɢɞStb(x$c؇yNyzj#Ʃ.U^T7krQµKe#q.0)TѼ,o' ]ʓen( t)w9`E8Fv#)m:dn" h}( to6U6Xie)7K.NB30f84-#c[dsz- @)5\aoFwO16'GĦ?ń.畣5🀜m!䇱%Zswwe F ';~s cj|v@\ظa ty.l` wCym@^#M1qH[Y_c=VDс^xh!h3LKQ qp u t{;ń/%8-Lv*@R%˜,Iw- Dwsܪ$Gi$(Cݧ9&G-GFx[.8%s>W3 0 :Z3Uoxk+h)9#A9šJbuTe1\W6w 3t雽gH˝ۜކݭU}Qgi$NH3h&\d{L< a/ghPdΧ0KusVNŞ)).,:֍H__m m%@>՘PXIo<(yS9p**nF|@d?BFIT T]ߘ2C͏\c9o3Ut2PpOLFIU_&bq_ܝJoug }yHAts afqCԥk|O ؇:HxiWKCʉ٢7+n `N\Ruw \d_ӈ-hwÔ>THT>|t:8<08/+Nd›pr*:jM08qRD,m++n Nag<q1A% *X嶭kbէj*SR2(~PӐ3?ZϞ&㋸lxLż  .͚ 6nc}5Zߡ.l*ђ;I=[V,9B05Yo$!аL x#x`EHSRTvMN" /qVUAS4ȧVsЫ o'K y0d#-ŸfZ7sU(rf|HeL@E{8:4_ِ:^Za jX2EXZ"H=d)KrqH?]HL3}UrⲉEF>{ G]葡ryW,v0]qA}¾Z[6AOr  H_,8X( 8> to˚IJ%BЀ(XXVzVvg9G/rw]^B4"~ @VUyNȆ$8,)'D5,N5F*`P}u;Vo8a,}͘"2/1OmF"0YDF}<:ۤh*Rlw] 0EGѦغVh`o~60 _aaVrw2TDqwʬ)zR!C A1"{'Y>% շ/>L/b/e1ͨ ' }Pv& k/r̰L =s3Y{UNH1:]fhm`9IH -.3tS%JhX]jqR46ZϹi5>U| m(o @/^m ~B)nvD8 o3dFIN񹂦Hv4lLV>M3DXJs@9rdIVf͔\%F+i.Uú9Qv<Ș (բu3Z&`oq먍;Pu9k+.󗪓 3|o&KkZ!c{SfS$lZ3˅+[V8Cq[iT3$+w#If8=%@dmg4dm%VIJž][ՠh$e ,j#J$ARmp$1|bre'χd|(p=hc~ 8v$=~LXшF~OיIFm^sW uRO|GP]F>|W ݭ6XQ'rb6P3R$' H_{w=#ApSsF4ʨ~pJ5xϟAH0?z`#xvmVG]5M$ R)]t5 C-۷iOd%<y_P< 痋JUoéJKĬ^< _/ Bqa.(5VƉ{W8C'|c|M KhhomB -MSގ4_µ-ܭ ( ݶiwo:$Uw3,@Fp>{Glw"+fJ.U$#)ӝ$xn2G) ţDfVMg/6z4{ɼM j"͌nD=[Ft-i9[f!ML$AҸ)l />T~7dkNTio{}*"~w!P 繴vպ/k |#Cij&% e{<&?% M5.4IRd\d鲡Cƶ;V ;V욞h0V|uøۻR@&2@RԽ37h\^c68%| G%QeL]FB]v <$S`TnҢY|0 @T-5(mL2u:RP-E="ѵz15xse2<~o2TB@H$tiYMiZ9yfest{&CHV;WiyCvP\H;I :FT$']Ggwk%鋭M|AlD(FWmnlNJ2M%]dU.%Pz#X &³UϑjiV|  ϸg2Kܲ`R"c XQe%d(p@؀K3|dN& thݱ 83s{Z>^\% YlކmW8CA2+"3Z<Fa` ]ƅ)vC⪔IkDgs´$=F\{ zᭃTE=zwU O|kZR:A쇲>㚠XRvŐ*/t")m)4{\ɮ:dt6V%mEMu$ 7@qF1Fbu.4 M$z2&h:co#](U\Z4@hBrDMg+㛾hQə0A kXx CéFArLH i9HpxIo֙rKfUvl[8>9q? sGExI`I0Bк1lU1nm4/EDD.k{~0mmC. urP"5 7/HM 4-`>$&'q*X<++Txu(hCler+OE:9 Je^> JjMJ(ˌ.5;2+vqBʳRWEr`7. gcp.uRqZw~]X]\1 @.a on)67ǜh; mUD,E^2O ÝeVQl y5"E(Ȼߦ$ɾ\] 2u0ܪF|1LٞGzu&bljkP@] ?Xw}UL. Uӯ%{"=Ǭ(ʑgs艠h>";h>[HkB9T4Ĉڔ?/%"r ݣcש|}I-5y1gNMKvwpf\t"ӈsS<riW"<@ˎ,21;&Z3S#XHFm WҾc$xfm w\}ܴk^e3k,[lPcnPɅ#]r> #h=C̔SƧ:=PU\ukXvZv${PE@?Oѹ"@|mh_!_=oӢT,D'P:8Xi єZ!"gC P W\p)GFpW"\]SѨnfO#Gg k')hӍw6p>zRNTJ!MI6IߔL[LwXH[<;r1Fݥw}e1%|]5hчۭnX&D ?PvE:UB[OЁl0k;0*bo\..vw[Kl+/?uޣx:;P*ݜ7lux|0L%ਦ(Iv_-h{*sO$jze,S&N)&8R|F'F'W@RavL/7Gr8_}C)vwv߰q?/%|-|VwO€z0(%nLRLacJ& WvR\w$&U^~X_]k+'c/Wʻ (ӑ$ nބY[ du[V)wac3*SAvL䘔{s4BԯgT$iՎXl+-0BNDF@NUrNf);3γy ʹ,n7Hzx >Dm*,9!fO:.q%sF LJ6݌.;S [K(5"q 2"ĉjKȬRS%z Pv7{Qv05F(U;6k!X}5ezaj4Ys[<Ǭ 3.Yw_n*2s4]C^5#]"}v^/?U^m2 髫D8)&O*M6 #5A.U0W=>⋭Wܯ  `KU`HM:[+/o!{״yOžZ6Z_}xF_J򭾃i,®H :[.|Kqq&{ƢjE=2f/RJFX="^=2zMAx|;U!~?ނ) FwM}N/\X\zC7#3,ۈ@Q >1k5ie$HO8Ծ38,mdI3P0W6 " ڪK0-ǏT(N@5UP"꾣&-qʫ>;j~5YY~Տlexo^u!).Aj81֯O8)]UwPiwӨVNPH %;Ur''?IXp/,Ew?7DVŋ3w;zò,rɄlyc-:4DRwFО@N -tG')Kbeի x1)Լ|Ac Aje[-Wn8De o'}'ǭ nԅگ᚛ tp.1a^6@4L8(1zʾhP+2< F.!o$9K 5?.N u|L'&A~2xtbOfh=\ÚoM6V)~YAݯ̚EU?M PR~ࠧ.A No.gˋ^[ckRKpznh3V|t[ pJBd-| e* L٥T31+vyH;|[nѩb/޼?aF!&R@D `0o5{|xc/*ʌS,f~(w|;H w wQZ4bdeg\I y90#j@F"RjPEpDtl41! &hÎs~Bп-87aYz א,I91̝EnB- ڣ4x/Lh=0&S33ՉǧF»]ٙ $U]!˯j2?)8ym7:4_[*)4[Ct1>L|H# oJ= p^^Yo MZYvӏkԢqJoF2Q#Us{* *{@`\Wr\J%]fwwz$F ֭#3+T)v9)47X(OgfL=3yο#ʟV ,a6Y [.:.M:UF~ -ԯnw3ƯmgiZ`ER|Pm<- דZ/R)5~E2zVxosdi1O'c\I,DqzşXxFPHZ;:JJ9XG4,pb#'jr8.o+>*%-{XfL)fx-S$vB eZ6f@4Tg>g0df ^NJkTl x* `-ҥKh%AqKSMWb \4!g&Z϶F[p^\Lyђ/g:w/҇/-c WGtъ$2e~ͻknN̜B^qtf4L@ךǺs4ǹ.,uqQrG/c]8%sUi 0Es,<&\W\x9h!>۷oMHGF;WȘ rBO)iG /Ӽ =``9FMxcUb[}$ R&",DY*IȒ6pc!*n$!oby-ω< W}nvdOoAMƀ%nJ NWa}3!_m(^HtMM[Y\%`Vvj[n {8Dhp&roJ7Q<z1IB/EMj3i,q4:?~0"`o_G:|?՞a 8%໾pdSCG C#8.d*(Sx<`9_PenYNe'Ml0ϲA # rnӤ ) o"zgDxRB:@+/ˋyNNh.A$d%poQw3h/A9WYЬ[%$>V[+u(_=aTv= YbŇ@,foɺɅ:ŃYZ.i[~o$Y%ɷdqW$*&nU:BulzG:,wb˽k! (6/V" } t kES~_hZUN];yi ޯ~myuqwvZKTQQȅcÀO(I|_8o`O| 1#&'Iq'^d//TOQkTXncb9f0&՝yDh3âY|[چGSF"3)AE5@.||Իẻ6nRzQgǕ '7ӕΊO_7D?qqE $M[We]gwTmH d5mo40Kj=+yFie2jmu\q%P*=R]H2 r%ʹ<Ŀ%Icⴎ`L)\|ܲ :h>Qgt~]@zwMtGӀFQ[?}\?5Xo@O53vm P!Z{!*2Y yd[ 7.ȣ33Nd9YtT%`rl!<_6lR4#,X]9eMIhx6IkHQbZG0}|.:+z 86cVC$'}]Icp-My,O%SЏc|L? v5 2w(cr*|;b0Nt"9DRz gw-s؉#M䙜ʍo8dk{~[Xash!X;#MfYQhH '4@ n ^a#7 E,̈́B3N!W͎Av?}>>\3NHE6PZ X4 hmw%^^p>Z>BW(Wzlj8PosaPM':;jS26wqF㜢i==CʹM54DsuQWug${f\_bض'L`U93-B5VBԥ9eDYbivǷ@wrpX3\4`Ě+-W|lix"L );dO z)?`<˂9ɳt2<-ˮ\48?'}ZD ~Hxa3k޻X-wēZ.lzj*9*gO*s+pCv=wA |m`v{|XLQզ2,` RV x[H_UDJ:3D\xzYZvYg"2RNU >J2(m{7‹5~Ze z1=>XH,0*xŋZ eM[C,Yױn[.A/0P83_2 q9@& ϕj.RHϻSpۗyXbJ|ʆPIzʤĮmkO JCJOĕ!Am[ҪS[}W/\gVBB\^8_c`l#=cwl))HNF|,F \2[,Go1aJ)P ˄+m-yK7 DrKϠ6?Sz6:UXJT2rhv+"pόQHy)h͖eW,!B=U *gvr/YJp6n$(whJ{]5<^%z_-_6/4?{LyM 3Gx!Xxȧ6 V/0x>cWyiz̰_GGf)۲'AZ6ݚ_i1&1b H]b1\qD9 wuX_KHzXV5z%~A3#$X?6]EnL ցЕ3"EgQ״(ч'/{bNֶÃgQbv~fr剃b1򊩹`bٌ+`N@LSt_AU=23(- Wcv9#_TON8qִ-q⧷ 1,I):Ү_I*[k 'OC亓Dc1xӡ¦ʙ@Sj lR;x4ʕvߛs|f~`t`,[V7kspn#KYC!lӚaBpN=nO~܀ymC6"^4^Za%.GDW:iXCbŹLϞ@]RƄe9埌PmE֞GuMA(0ڧqh*kJyCª>>gE'dxtL+zѬ( ~OyYAAa B|&fQS,}Yu/M'Zuuz{ߖE-7 ^Y &'_o"eBdңݓN!"SÆx\G"JhJxq%K[ߵbбr=Kghuhl!/cEax?x\9IįsdrdX6 |V[WA <-m_+^FLmӀ[Ot{ֆiLldj*G]Sw,c/WDɭB1ι)s;&YׄhU??=tS@P0R>3! L. ,28ǹkfb$xitU'gbc)*$^5h</ųя;Sc_J x #-FunSmw @Tǔ+մRe~R5_'YC>%> VOE"u/tc %DxWADpa`l9,XQ(I+9֙1abj([@"=jRWk̓ZSS-6%ݮ> *&yg?t_o&HaZ2D`@7cT 8 nN$3ETjwW[Zʸ(g:ij׀ pK%#<1+j|9i ؠkXƵvî}b:"L,w$ʼ0ú^ˎ$C NH4{V'@k89B?yIxLR{oV3IrST;dYJ`0k=ďƎwH{$kc[aՏ\F&VJҽnB|0CM ,^¼GU,ĝ/ ~ 7fzyi&ۙ9XR8Duy kP@Q}~&S1lje2 fiQrXY#sNFTcW֏ctB.{|#rqcd6>HXZt HB{iReHu<im]xUPm_{7,C~[G;0'bB͜$m'"gWSF劰Z 3ɉAaGQKr"q(v;xA)h>|spC|Y@.4ꗲrTca R- Z0'<_2G"Ci^0"]LN< dFhF <|V #jТqG;|:ځ1'CChb7`f9 i'ڰl#m>}Ip~mZS7'h鰄Zi<(eP-oĹhpX eЎ L*`ߝK)1)5;ł ;Z/HֱWU \sSG+jDz ist5X@ҟ>ŰG-;0ޘn4w s] .\i >ΰ$I\.1vrDO4nabةq/P V}'eL#J@*qѩ7S"# ]$Z-W/ujNFB'ZJW.R\H&]o.;^cY IlGDaDC\[7D@p!%6D*x?pWr7#꽖CH%Ҝ`4Htap]c|XUq9JNUF7IM׌V ;,cßĕ 缱yE4AsZ͒լ_ F屘;$´dse>{^b@# T-<9I/T3z iY\f(x'%Wgt=7Oi]yx+REm -S([Vcc]YÚȢP: vM0et+"˩k%^SS1[˼7aq z_-$XF[@H^*rVwYX v#&1k玅pK=uC:'t}:%(Ox< ˎXHHfI/ 6O~ E660^CoJzN (T_`Phj!rR'Oegq{L!CKX~_mcƀ7H|WF-k7C+DE\_.4^[^hTRF1e)K/ PmJ 1ԋ|W\TJ7`_BJgz_ UPЧ,] osA M4Į]4HMm+(9lw,%+*B 81 ERPJÍUR  ;?>K5^p$ X7ndB|O{0\[gc[ZO :]Y-lՑqwiHf`p]nv~a1N%`GcϛbABD)LYʦ \VRMP%XFB['WW ('1-Y|Dz{w]nGhW+M _ p "o%1 :򡣱"o'Y mZ4u"]zv|<'r&hIkp!|嗋6[?D$Y'ŏ&1?4"[ZSWuH [CTFhzɝH0#r*Wj{<huxC~uda3pE{HY/ ۾.^m{K|7*t]w xE9.bcYČv1@wpu; D/%2f.C˄rR*}|F@@| C-`tW̳K3`b:@=E<,ƶl:4OA ZuQؓH 0?ިA x;9`_Tg"&1Ṓ߲P7ҳGcb.O_~Fx!wB+DR3p_ üBFDj8iށU$#pED` 0og]2QHF[7ͩ6H\r8w=MّނB.R)edTJh1wDֲ5J!#sR4`^Tl0r dE:.7t/ke.Σ bm~FU %O 0 e̛|Uņ?ڄG:z^]zM73rD}`V 0ڤP9D@[|?$˞t uс'A !2fc@(JI]Qu7CknAD=0ɢQ_b{diC)TQϰAHxg]0* 1 (4{b%jiwrsn43Ю}U[ퟏ'JA/퇑ymw+dJ.Z[zl !)xIn<_]#L\ ׸9| \uTo]';97x͏b6 H$@mem]#9Ŏ#P\_3 i.r/[|V=Jd'|aZ a$( 6;m]y˖[lN# 1q]~ВO"Ug"Ϯ쑎4{(Xw_w>EW+wW6QYDC=g)C~x 6T&B,aĤw~u!v\+F Gm3L©_>Ճkc~bgKn_@[ABkiXQZ76^`Q ːO &4-m5jx&wsp {DHt"{΅pT>< أ͞&\VvP[,6?1ׁF#BEwq̓LQIFFұ .U$OSBJ{9Mz@IVjb`%s\%!ʽ5Z`Uu c8Pl^WnQDwS;x ړ.oXJ9k2穈tJ 0T^,eRҢ"%q$}eZibAEGi:gￃf/*$"6w[@ו98B.p÷Q< 9_%3!Wd ut=0Gnpl0W\F ;%:UYs؇RTq07zOD%ijTz -~%Dtn)_T>aH;8I'HMFWd@C LG$5hętRWHv9Ft{1+c )SF#(}SL)MV(g+RңW2iM0"X/j! : ;E)4P+цR)zt _Iꧪq';BPMzay3̻cNeQAT')6dKEE840K5q(vuISݐ]S.!^}=>PX#$\Z-Zb&3e{I*ǻ{ 5Pܼ KwQk/@=T%?֓Y\^>(謸2"7 (ƞG^"6x6 |1:+0ZtMj :ՏSO d1nGשи_;iv O )Hd""NG{{u}s; (TyhY] ,*j^TW#].DmuAy ui1mR{->D$K vG҉[3䆵@DR:HG陛JZ2x4`^zEpN>{sG,93`T:4Έ՞'RC={En% j-l& rUL臋3dhUuDWapHPeW6Xaʂfv$cjjĈzB Ҡo >] B %3 !MKiUc!̻9;&hvM3O"wl( hozCdH3cd?x2F ۞ w/RzDΖg*./$6wEn..nq>#5ޜݿV%M8^M!~RCdPh,2TLxpD@V#CLpޘTAK^t7d dM4C5?̦[d]LHڏ*LXoBޥ4"^΃ dٺW]:Flc@R[>i{5\>j2NMsV={s@I |8;}uڻ &mX!LZDa4jW*%f`4d1n6&fN+Oc# DL瓐BB  :M޺e/I&&-XQadU %7*´\ה/c{^:dF@45>HF:&W ͙x[tKH6rts?-'lo jkhF~Z{1Xt0G)`dT#_dJW85S1 h$ZZ~dJ8$ڸAIz8x~*}, '\g3HG^+{1)i3dF`vPncaHi_dxb҉d WYA8G 7d#0L6^ s7>O̠R z{\w47J^E? / iYan^*$6{|cV7s8 1O"hR^:K$r$]E9 9^صHW!Qmk<Ճˣ:|'&EtWA bny+-TWX c3[)-ղR˯/qPNjpcE_@e>UO~fAW6e;[tH#I~|_Jٖ NٵP*rET|?҃ar,rϤKb) r l[L.m$L9:C2ڨ qt_LPXG ;8ol #?\a[H0 VkV *M蕓Mͫ=,8,cȻSucA(edwa@39O =ؤQ]jF"#|p3.65(3$9دD%W`9$W!#O 'šaL2Qy^d32f: e-L3zU0 >^x$EDZ_>o` ,셢a&MVX r+qr,Rgx>NR7dw]^-(La3E&n0 n8Of(0`E:Sw#IH>5xkkPV .ĨguцpA m._Kx S*S:jĿ-l 0ef;Y4}0>i17)lj޳TjLrp7`CbMF z`߃/P8ni?tQl3c}5*j%4bĮ Na G<)Kܛ%*`ZM8jԡak#2K>O1qE!Q_=3RJ4YMZC|a?C5=!I܏[FXN9e, ?Fk',@bW_oգ$}GFM ă7GlRbjtl'IG?aGP>ۆ$,oxd EkiI6}W%tv5Hv -;>iW?,!Łw^91gi' $ȤJgçи3%Ay6+,-h셿=S^MZHY(9l3 Y:qG(4(1iƨyVjmY+tj+$4B[ 37UR,6vuѫf;1*}1gUwX`Á6Cy``UקQ)7 (-Q>jy)v)t;XW7Ƙ\wQ'k 2/NR~ˣT/]:$o@\s֮P:9Y6;zo ؍S,ح _`7W"N{h!{ުzڡ iRf]zʔڂEJȥ4Q: OƜ="f _9Hה[ AF n-L {YIeXkVH2ջc<\ٞ `MdCvF)`6'7Gc4Ι*&CY`c;KS,.QStþq>i^`2|-]'"OוDKU 5ݓ :/; #9@$s#V+UM@t߇ OF4TWmq*2nnb6(0F FIBQXX4#*g0ǐå׿]G+9H.EK/?pK$gx30{L:-:ϟpܛ'ڍGIfj";B#cxvsvK 7oFuL+N(|~z^~.wޗt,@kTG%;qd p/kHxiWWG:п`2@4i@jx ,G%_|ҫ@OUkj_e{2 *G9ˇAR"U0D}p8U%X3xӇz)PS9@ӵ kCSBZd8 |6F-#Nt\߄_`8[UYCϞq}t8e@nɿI. % YZ