python3-apparmor-3.0.4-150500.11.9.1<>,eap9|aatAQÞ`<jOU:E>>$?d ' T= SpUU U DU U -U UUU*PU ,"v("8"9$:.0FQGhUHUIUXhYp\U]U^ b˜cAdefluUv4 wƼUxUydTzʴCpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.eas390zl36 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxs390x/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%e#eeeeeev@e#b`%eee103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d6181f28da1a7dbb0875f7cefde39c4b68bb62776092b2d977f13780f2aed32ce031c9f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c054742f56fd7bd6387cb47f2a6b19110187c9e7af40fd753594287ad0a4cd55ae8fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(s390-64)@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffs390zl36 1696247905  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-s390x-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1bf568339187eb9810c75052c0b21a39c72d775b, stripped  !"#$%&'()*+,-./0123456789:;<=>?@AQRSRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R RRRRRRRR R RR RRRRR#-{ Iwcutf-8ec2027e46d49efc89a40ff804bff8af0f707db2faa96d693be1b2a47f1458d1e? 7zXZ !t/"}]"k%{^E) `=l.Xt`g -%dwCJ+5F{GN &GIFڀB}3 VVp%~ɬʱS;p-ncJE"Ennj_6ʃHY9F j 7;̀ગOS&SrjPZvmhOI!(1oXr{z{Hti @\W\|!k1\KsvR/~lHYh9vh]pT'>(WBy<;o%FΒ4YDDi egƻcseJoӏi9X|JWdn`G~|D+ECHO.eḉ&h1Ȱv="FLZ5W|\vc&N"zƮoH m0!_DVՙiÈ>zlk ˯QM Bz;0qb~h*B:9l-ʭ9_jQ .RC:ad'|=N30PloB?ޖf {i囫Z}%lxX m|= /K6h33L 9E'xɜAhivܳO Au+*%jg.lXV4FnHx% `C%!`E l耭azP`am$LX|(845)4k^+r҂4Z`4_pDz_9OiS7Ž%JO2˜Ƙ.H濯Tn){C]i5)Ģ`OS?c0Q ̪8/Xv#֠Y{F!oEYNǖ|≸t.+#2`bXY e*4{|]:Vm0%Rxt{tJh9MˊNM9d8WVhB~ 1ٴ>pZAu2OLB^rG#z=M&H ^0F@DM[;@D ʄ.5%m6EtwoS:J/E7972Jj>'݀r0S(ڂDIirI}ͪ; }v.hqďՂ "*zn;]Oڕ? vJG y􅼁#jW-J qΒ~5s0(\Vf ut}ثtQcڊ1!O!BI>О =`hmIdr+H( o,ȿtPP.YS>&4AOEI 酡9ĶĈhLyCG_>ҌjWtx7q@w,U'{)ʌ\Gv-u[l?$ ߗF٢3,> xIfu/ˣkYѣs8g815Oڍ{)xf2o[m!f;lڮ a`y U !BHAX`E?FG/chqDEcq/hZB EԵ./-C\~6r>}gQ6BAM6YO!~$ڣ(7ǻ,=vs_Cy*~FTDxvnKIAR6ϋᠦ{f(l>imm׭J&t#qݴ 4|8DZ|~^dC\`'cnfSwT|e-_ߝqWhAf?6f7f"|M=B iƬHְZ&5[(þ\%D y2٥7O?ZjZ˓9Qn}B }Cl_Ṵ,EZ?a$`T#jXp{uָ`k{,_ƳD94(bY?iyCV;PKd76pѢyyG䰜wH-jGuX 6ܤ=Y"%uZcK}Sඐx6N_{l{[Էx:Qq|v)P.f- VF_^Ќ &4^ 4ݨ%(>2WT'ҭ~X jvcXV OoHLb_,)#D ; a#n~rYA#\&Y]l$׉DF)juz#ŕ`]{k;%3ӿJ1Z{ K?CÂDS*;ڵ J`rG`1)GSc#Zwe6:_Fpڷa9 y}dB g qb-h.27 (,+ihVXmbֳ5ufs{LFVxz&r0FQ6Oݓ\a Lz=.lFGS+Zo9DǏL 5ʳ*EA>x@N<Z6 ;]P zOg"h՗zu^Hɑȩb"QXɳV+R٬lzJ !4GbuxWi6]j\6ub.a۔ͨz&+8E{%6n!m G30L|Pfۤ} B rsqD+OjZ%PKCǒݚ?7!^r0S1j(J^/1CryD;:*^Y"^D d;}_$F34/2̳*F!Ҙkyq. ;{ʺBXc9]xi+"UrSSDBZ}dsOG9Oo ݠ:Y.L,c6бU!YC'lxKrm<{;WXAs ܻ[F^=h0=ΝfH蚰Tw@[C,RԘg1%dw*AP?]ğ0b~[znlpΥ/D y#z`Hov:(hckj3b=LWub}},T>5$]Amr0RZwf ^_O~m޷,7gY!+/[. Ϩ5L09,]z(Ip^45Μ꧍*Pg"ZG 0z$@SoJhsjoPd T/rrqPޠmsEr4 gqtm_^y~UWm]y07ߝމBʼn˒Ln{~<2G *DۥnF`"B 9e<41G ÕӅ>=ه rWI~D{f?v'TY]~q+ef6YUȷ9yak H}=lJ0, K@^(ⴻb3]**pO)QGrA]>;\QD ?L B@F9_J@܊?t*cP\rt;Y oL,;̈́: mg4^pay?joۛEA[$G? 79x yk r;~Rj$^,EM P\gv\`o?@KV `Yt!% \*>hXbHΦ&,"BN+gyԬ^5Y,%IB 32ۡiݸ.kTN Uh= ׌A"+N5kq:swiu2^Ddmu=oOs%u1);I_[ .IKP6yxV83!{"- @XB] q mB 4)mڿXA6.52F5{^k)WL;kaZV`R2!uS#I^`lLHlFpP[EY$-Ԋ*QmG;GCtzt+̚ RyY["̙yB!W<'n2=x5y 15A8cݦnTl t$E3My̱ثܢTOfS[wHp!1SԨAXLfe< kpzC)Sw} dzd !*u{/ DN1:ꐹ Gp4b 9hoOkZ`hKbNwkWՔl{-J'ZYlJz4V9^ \4jXR>xt9Ԁ$XPd'5_r%HrPu#JiND7. JpU{B/m] 0c CQ'؃^2:t=evCHqQ_ U3Otq<TH7AX M20j6ϗU?0Ytr#>e$}^͔S yՙ8Bx8.P@4'܁,M (L jrȏNP"1ȫ"F]OO)r˜e:r:2<|'URr\oÛm6OCfGLJ`AAx7Kdz` [ !Yaiix޾O!&mkIɤ_72$L4ľERC6KƉЌ}駸3"\` |sјެ~6;XdP2[2r3fb( $sp,sAck~];̱7\܅k1T5[_@g{E:: Ijxre5Hny J΍ ĩn'[$8"9QA"ZnLCUhDfILIytA |$]5]ªg1 `(VvEM\#*0\JKIyjy?r]*Gv&f\ir go[:#*SPdHw?I'~J&F'<Pq UP t,H?@%㴯Ӆ;nj@x G( 9ddr<[t5䒎H ɽ Pwmk w?Ku#EQ-Hk:"= Ьh_PV [qUZ*TK:?RLw3;lk+Qձa dot.uɈ xO/c=^ڋ5|~*RM`AwS+pm7T(zӲ[$!1LW `:4ACk"3€6:כ ڜ5M) =VR~!V^AvcGq09!˸( 4C]? /ceN&EG>]!ύO ?6L9hY]!j=i\;m7 Vb?@T~GqGAkT6qԦZUWM!R Y}8uLP=7f%Cԛ#: uNBvN*L\2;F[jK |Â3ffN:;C PS0<ڇ17s`$'c7wV3f LJ݅%$QȢ50%cx\%~vM}S,۰ګ Ѕ'OnhO Ÿ.tL-ɨc+?`Z,g8@ZKWs.(Opw!~`MP&/;lHȡw)\عN"=nPx]Lu Xu)RCCMcD zSYw)Z|'>ޖ`t)&ȁ6168~*t~!hDl3.0g^X;: 45 U;H˟>;\2{hc6%]y(EyK{@6ҿ&]3{8|?&1u[]8_ fQ@,;T,q1XJ^{܍`̕0;rn <QInCDz{Ž_.0iP;x59> VQ x"F^tn`zye77L\AYjr|7 =CVB< #6d4l_ `TL"b ܵ m`\ NA)UI JݵAuC_RDZhuxZ`obXi;zXP~ 8_XqhNZ䫫7}>ٵ ҋћZc1ͽ7:@p6JkERa{F;~raq,[1dzL t"7ęʼn4lfa!IyLR'2 ׮rl~W;;:R09e^平8jgWrkaTyYOO Щ`v J#Bd _ECȫ&M9Ŝ$b9S $SWU)ۉ~ڥP=}Ǘ3dv'YD`4&EF"#z6wK>AoӮV7pFQ $Ҵ%H\l(Gg*(w2.FNMNBS\c8x~ 3LF'|*!Yh(xj|F#f>=S=~|Yƭ|ymchbIOWg[[L0:!bY}sϽu҆,->1M~؏ZVG x8xv1f;Ϳ1?J(8-.XDܪ1Kj5M=r G\D>Oh@)hӶYù?JR&*_y͡zn@z)>1BЊS7c 4rZy z!ix=-W4Ɯސ R hkrP85V3DSCW.nRCVȬ|&ett>-WcR|q7] `uR, g x2) rfBK9l&B]΃]-OR*ת\߄ɇtNgᒙB"<`*ع߈|(!ݼv(3V|_)҇Qsj%)&J_# %eT5vJ^N1qp(`NPZ pk1YRu6.za( @h D$-ȾOPÿIV4c;J3` P-2<|@#X8چ7@8Pɴt-a>8G7U Tv{+A`Zdߢ ܪq )2ת ͢7 $nN&$4^Mj Hwc:"HsG GL4xI}RSa1,!NaE FJ9BLlI*]>צN^9_[uNŸAб6w+$n:/\U!-y0>{ H R{W/M7" ,Ge"aF͊}~{m 2һγ8ľ#v㚪Yj*ǷeML#<^cQ;׆z8 b3s[ |Ԟ+X͙D DAjvcW!uGIK(A xÉ O2uF:WO@8O^N/  xOaXAi:ZxNI> k.V0ekfu|1# _:;9> R<]Oµ,WR>bWs g; Z ` r=̝ٙ&tsO͚\, 0|<2Ah84ktX󽞔ϋ,q?ĥxU׾2`<_UHf" OZ Q{B vXzP}ֵyё6py>h7mCpы?ȕ+ /NUQFz5vgd45$O2d![{Z7VHb\3]DݘO`i&`#I܊GAG_hHySwb33w89rW ij[.Q7AlQ㊀ "vas> /DdB7qqRfv<)ÞlW.]\lNY룏p tuҌ2fu 3潭70W!Aa#`5P2sfn(Сv',  ֞!r8|BpkӑӡRu ? VaZUwcf~xUXp:8X)պeNVG"{~i|D08@M?:Ca4ImTM&?ѿ`+7)cPO'#'kG/Uj}g76ڥ+s؂vŶV:1"|,MS"44= iV|9]FdIbг IZr,iu+^10b!V!xƒ MLFw:f&1J%qI.\0oIq輡 ȁʥ1vJ,y'+"PKwOoMTd+vߊȊ`8bNy{$-%:8(Q7񣱬XM۠3V &)ҶEpԗ0xgxs5vRcʓ,f[ C›plD>2"|Ɵ胖,~ޫ?!n8FL@ҚYg[ SɲZ̎ʅg²cX5Z aWRU̞<ˑ4ZZϕMr[?k'Gn0Og|J0,[~C#x}6@K:㩟W% ,`Fg{QYp?)4Jo UJuM[ـ!"$ß.9i~xֹ"rHÅ&PާsgO/>*}?<\T$RÃŕi:Py^J|G6^wLI2^hD=r` ҋAE{LZe #Ͼq2WC.u&GpM>JM1,D%=S"\:vF}5T<yqRUkE,/N@ m,dCV O kցQ" Ղ.tW1A+58Yyg(=>+q)\]Ȩg )'h)y#6?JT _êp-.LU泌^mY`l?Ms)ۏ>uT9{ݹ寍=gB(@29R4# ^+Ͷ=&]߲"kQ$|O c"*4ź1<0{ftDϴCMsHt+Pm}HYQol!ڙ],-X_-?wBFWd@3E]L)tӭ?sSz)7'q)&m2RBBәjdޤѮG$6ǛCo*$ ƛ}`[ p8s,Yax*շ u //"Ԑ{!VoԐ>֍wB S\ܕ3o)UN8 bRvӂziپ6/X% xǢ Y4umWY3^j?sz)I偧(dpCղRȲ~4$2|۳l,*wnE`<]Y&0uq8'^G୶Vj  YQ?7Iv{Vnx_.%$pVE#*?& .EgͲ倆dlcL4QʛXa \aX a b0/a]Q R>,8Ab2R<åyרR+G87!}b!j W܅}2=&fxѹ3:K;&7 +0}휻w*tf ~؋u]S_P3w eh\IŏŔ: 94#T[ s3ĺ *MbQnv8P~s|ـD=$T+WäiF&{hXGP2].}EAHU!wgJ$ӣtiAld$ǭD NR/so<6wݴ9:+/M͒S lO^k?sFݷ'O$9|r Xk4FoQ}9k^h蜎@ALFʤ?~/ %mOe'ªcv~dz'OKA88AΪy?}wS^%|#~u4ڔ? \k%=Ͽi4|HYf;D )L;H˔ x1?ĝ}! JO { x`M6x~yLf i|4QDתݸBUO'D_bGT- 7Dh1;veNS'<@ڥXo<,-z8٦u;a/5xhg-./$Db-ho;-徸*"3}X&i1DnFqM؅:RxSNXSJ=Rr["HJ3~*q*GcRh#7tk=z(8gP 5}PpkL$o&.i%:Cq+ AwB͏ M}g %xx + gKpY@ okܬ:hH?8;&s 3v4uˈ/i0 "faO.ztv59=f`YQM{nP6.c&I)ۉ+(GcDmؿF gTwuJiW}Vh7$&e'lЉVuޥa>U&xoa|M< 'jˈ)+@@17ts(%2xI4۞NGi ~sӖ # /LK *8s+GM܁:FNhA-.}t_ /6Jg:3mZV{:WBA+@ =ɣ&lMyeC^:Nsmn|}M]4<_Qn3kZ#2!-"B7xlU& s8X!Oν~'X^o4OcLP򤪶`%)" ٻ ;>J(H(԰ӡmo ">YbLq(&hJ$w%^T`TE# $@#.lF NN׉yQ*UARlrBl5q;(1[kDPoA٧An^8niMbd8n6>3xvDY n ;Z }ۍ8T|>(,}sGa'07Em"0}DҹE[ ι]!'։Vu~*eg%{4R\h~bb8vAFdjB#^z*O~V-z2a EET{3LFT&ɽ>4^< hfZYrlE٦>I<֦|pR$#(AFG` "H%_$qnq!at3} n1eB [&Mu%Gi֔E%h7m#Y 2p򘏵V0FF߃j+FD7SeZ`u\MJ6)Y HlUOKs1K1jFp=,vЊ)4{nI>oO7|c& 0U3Y饿$@aat`X+k`*8TLKIܮ[sړFp؊FUQotTjtJkB8ڹGڗM~M1| ]f[)MƃFqFLɊ?v:Xt`ID]YbQlEbO h7[gr_;zLCE:M`qJFhng=#g?+?4x X{lO6liHq$e~& +I|9 [–KE\֍ uDmД _/q<48D+O4tY9MӨ {_ըxD%M (3#4mAie~[?J}P9o_6mѣvdSU( qy^re"*u]5|( {*u*=> UC]6d3(l3-T&01o6C#)*wjc6DtQ|yfSH71%*o9WWJJz8u7w,(+h+oLv!M R$Aw]P+W>S9 R %DsE;G׾&|٥O>h}8^Ӷ`s/ 6JϽNr$tQX[' h𡺶:\*{,/ex<$HOI5?7U< _sVZZ)#jZꉻlw%bwcKO&ZxD`jUGW}V'CO^*UDS&;!ѶsK*#d66 %&#K1.^gܕKKW" S`& ؕ &haVM_Ȏ77pي&GεwO4wȺ駈p$2S)QU$Jپj7t̓ۛT`G<\*Q .tg3Q w=O_xZ_S[|~HL|γBf2I& 9a^?<;刍%M&z'5{ܺ ,cM:Tl*irtzd(}e̋yd[>Mz%` %O|{_-;,纷!5N6_@p Z';_ 7ւ[i:LWJv57NaMէhͮIxY^q'zjpψQ+k@='smit Xpm@.pM͊b^-g!uS۩8Psjv:B>* !<'CE`nR&y呓ɨ11W_ ץc) LJIF 'q X"7y{lmˡ_9xܔXCa907qBzƧR*d*!³ ckŽ13$$+3{ (~8Da2˫CVk@$U;@تܡ_r{K%'މv ^]:r㭻_8Be86twFgN<].gP'¿i}+z2uxVKzL]~X>2v~DDM]Vua>TP8b캆eYHno.t;ӘlU.Yg'lSKj,V@rhl|GQ?J빡oUUa۩ޤ^xx[5.F&EWC1.MX\uv֖ 5yeΎbܘӚ#hTEhH| 92o;&.k,ڂP }M3.Я:[飆*a.$P*`7\(Si{3 hFxNQ)ęK; 8Gp^cF́%+vxލ[^9q 8|*68t>ufeK )k&_hbSm_%1xg/ [Nx=6SDr|-CdΤ%_m@ 1]EgmR"p[ gp>F?B (s|irKt <of3̻j|i״91rG]7eY8i, sL~5~@zuB'͹ӂh=lńp|mu8y^Y|FzLq5ak9 &Xڵ -̳ '8JRd)r%k<*0!վRR`A }+9LƣN6\ 5 <}jZy 1 UpE#EJJ36i`j ~3c7Y|Od$u] ŮG$/]SfQf_!80=A\#UΌBRrV0`xʹ+*wGhп M9ށ p\}<íN,-|mJkIȪi"]7֬l- 8#H"nk Ω.uV_VNx-QTO|7 RŽ:dh}<]qӆ%͸6: }?5gQ0)ϸx:A1i^L) #w0T&pct,m,78T 3(*Nbo&jת~IW[aC l*w#l/Bǽ릙giUhbk>$i>fN?Al,L*:OYJ !IgNgHtz =󇥋F0Z朶s#iNGn! 3#$ R2 eRQ7i 'W_ѨUޣ>I$+*O광گKPw] M;_w :N{Γ*7#>u4 C ȩί L?UHhգd NK.J<٘|-\{Y_܊2籃kuPl4.˞3GSF|VÕ)[zxF]Jc=Kנ1k{Vd&Z7C?2ڌB=qSn:JJ>LuZR9mOP˩=I~Cu8qj/砲q)4niޏݰ^FL+!w|6L;oi0̇A\U-RX"12QJLC3\IFbլMM-Q1y릈ˋ$GDp: 0NnŤ8V<$94\DlZ}Зu1sT Ϳ"Qf;W֗,"n~|g9 az$у/9ؖpFx߾-Tx~*gYoq?GM꥓PtK(nHh.[y}{=| Gk@p=4,PDȍmܳ'` 1.=pW FЖ CGdZK!oNsĐ/0K})+[vFA?ӎ+ws ^nw%tXoh3k $L^Õ 35ZtA6{p-P+!fVs-ēahuL= la!æ6c !MWIҍ ǟ887ϜvԿӟv f5kx,kYPVV5֪h5Gjeуx@ך 5*H:"-~^ A~9o^* \~Vh0m$\!z}+L5P/$j~3;cj mYUY 6}#O9~VPqzYeҲY4&wIJXwvdgz̨$@(E Qa~w&BgH.ZO߿RKZYZT`ϯ:Ds)GsW)j6_5jC@'Ӧ-[MfM҄$ϯ<-F$ &U'SҔ^}lTf007F:2l+]hF47vwI-F'geʟ5;0$}rbRl 0_lZ8!:`^ r3f*Uo(1>ow6*+- ;]3pQMz8 !\*VH|B}ڏWed *cώHv\ ЖjH_2DC^EЉ(˕,)&b~x<5+gukFhfO4]ޏoPwC` 47 ̚f1.h@mu/Ї}ր|V:/FgQC:~\Bϛv ~@ JQwɁ+8 SpW,mDۙOwe,ӴDRf0_6wV`,(jl;f-PπpbQS.|iE e<߅(sϒUtUȲGJ KPI`9pJр)9G'3&\<yEr+sY{|Hd|'.m+sq.*#::Jw @sB<gr-nӣSI"1^Sy iziH @ ݻDE/-5+ƞlweC$D E+<#+E"p|mː"fKhJVgQ]^y?`(jޠ4X_ ^︨Iuѱ! åp#EWǬ>370< C nQr˜X)&ik`mjO@?l,GIP%Y VgAJC4Fo ĕx*›~ٓbZ4A7|\SGZ&c~V Q-TYwEkg[S-Kr+20J(ƷEcKʞu@BV:lh!Ӫ8dFeg@eWj!־}-mkZ|-ج5/xɰ,!;M(bZ,_4P4Cybn:mC*x!Lg WZcHjpL\o:!r&;{Kcĝ9#pc>SvD!naoׄ=NL87{ B<9m(GAe:[Oiz 0䁯o‰>|1e \TL|+DIeO>]:9jӞ4tGŬl/YMq=cBr[>]5dzUg39+y񭽩jf9C.a(d "{'o-2o'Le}0P9 h:L^,?/+0/ĵJ+ͨI<سB#Dzqzʎ}N ;-jn#,{4t)cYLGYB\0e dB[u+qovSh.'{-iemdT' VzkBW= B/ Rl-F(o*;ZE#uY4^)NS/ӚR43i.m$*IN[w/hf\ѐLXiwً eeց͉R;:]Kk1^$g4'ۏqIپTtѷXNn$+Eσ ьIF&L kED@@dR ݳi>88 V*4pcw~]f@9'F4ܓ_ptWv>,riC_@@dUı4`(vR%Nh9- Ω\i%( \ UFY^=V{\ ƒ e1^-럆e@6L}LJɿ߂R1g0C3*EZwya_3"0= WJщ/ɝJ uޜCXDQ|6՘ ׃>m'3J#狣h;>ᐰ[7ZtH):LWK'2zNK{%1B8Y#Lrc`s?<>\_YyK499!p=6AZsV 1ߘ?B؂=<Yj&Liz6#{l6_Yѯ }[s}8܇*zc: SgˌiV)N\yֻܔƱ-m5t ĻoS*&D0l@g眧DC'AH+s u݆g>] W(p8x9#| hm9F*MQYmm*^\a.V!/JD \k BihmSC9C؆x4IZ_AWjJV}Y^&GX7D{lg& ȡ%1v{?*xj(̳nЁ(tTPۡCRZʿ3OtܞjhX&WjfحkP&4*5P0j|]'껉J5lf Og8aקTT"E; []5J;f\nP+28YsP}{5^Td¢@Bc }l0E`l{'TcGxu 0!] vh)tcBP`بռ#E?Iȶil9pK ^D5 ' 1c_+5YGȏVႠ@ U+֬,{}36e@\}M*dz K`gFϼH!]Ű=bN8^K\xF3‚B1dݓ VoSd5*-b >{[o⧭e%(I'fTKu#KQ6?i-N52c,6NxH6^b)BN.!WASm|\(Rs ?K)TcNRrDXآ`Ϳ)`s_9n ~¼}`+"߆/m\+^`..>!Ju(m:]t̖8@Z(kG73>jIL^ӘdN>}b\:Դm3/ c鯌QmOz ?mϯ,ݾB>yƿw!ļv'RٞWm*W @D@b% #X>.ĚpċNd?%FE- CCŜ74CMF)(deA؇LJT|WOCD {l±k.^g ?ŏU9b]RSy! Zל +:u4QU"ֶxp!hqYN.^nkP;\ :Nl2jRg櫃SRSUnƸ>Vb&J.(2g]` PUu:9Q3fOɡڬ(UUjۖ!ula_ UVU(.vQqwItͳa~ܹNTeN!lu|x$:BIGnd1f˶( Q&N& *>j[SK̀-ϟ& ݭt^@2E ^{f,3=;"mߕمjcOvD})&O1bsvGzZ"8u/J<ޭx5 ݰ0lsYkdޔæ6l3s^ihCXuL/7_m.kRr'ʼnXj3M(,hzGbΧw_ٮە]@ièR,EPJd $4魻K{WqCXs<'Du Jtɜ DA}}nI X ύ2!\^JqbxmB6\mjܩWBX fx.%=>WX|POtVο%9Cow^x/6eYqWfOV\F=T%GTj|Ejsui;pcTխ7Bv $ x7m:/Tӹ9=ȐgnѴ%oz~D{>}Q6>`?HE/(vՉFcTO.I[w8Enl:E`RUث:$jQ~l,ΗqmCWҼk ғ8Cny CQA\cgwl=U%&=OAz+miC`hkzS ̌LkMğ`*>bCd4{yzDd8Hlδ*,f~XLݍȜY*HE/͖Rj.|+;uf?IŎK3u%jy`}v)\}O|GĤ**CU9J`磏;Fg dŬVF=BzS>z`>ť5!8U0Ƴ>Ͳn~@p/~D)1,j1p:藽N<*͎MLlG1v}5Q4:xw7aK`?'ßP+OD|F<W˿0R^#fCbɀV1vup!=%FW_0qpkK2%mfƆt}tuH@o լC땣~!QfF#@D9E"_7JLdb=#fhh?C;T5=:v>|Eax?ݍ!"_](<@.C$n{ْ&Ip \uwp\8"'9PE<,bFݎ%zN̆NM"pL_QDib}G90!ƓzpQa/L|L܆*DU6$d K+(Pze@A|$;ЖY`}ʐ`.H3opHp{~iw˺`c`zw}D?̻H!)HƯ{ؒ)'MZK;q^PWefL͛n:1(W10VY.gAHL+?6`AY%5?}Q{Md(Pd8%aحW^A^n^YN"պ,KvK2 ?N MI+@|".D[^^ip|yf/$8Tw`7ܫӛ\VJtŋqנ2z85@η?{!d7POYbU Y_HDԜI^.>/6Vg wB7uZY.WJ%&UA 9Fؕk)3 <̣;7_@ K@t 4a7eجtI4obI|We9aGTZEoöЀSey[jY7z[$:/}6s&ЛtSN9 OTAD@.jO!o(م>Q LDND!|7YmxYJ a@(y>Q/؈Ǭ#z+@!>l/E޾KXx~cil7f#4P*9;?OK%Q >lAzR+M)Xӂ{߸Y.RAbBQ>OhZUGNΣ WReun^/˞^qΟc\b?pϖ7M ԢjP>,NWmq""]3X>wg|> L.㉼rh/czoǥ aP/'0z AJb5ğ } ISIpdbhI>CD)RXU55CSu0n(RoqJ< BӴFx@1m;{3F>֟n@`22XJor.XsdzS'B*.ڭG|E-ԧs!2 Rƈj^͋|Hf'lKdZ]vq5bemJ3)^>_m" ; ~4JҼTl@ 5MAv3:Ȟk1 l Z^-j2hJB;iD}X.)6yG4 e'p$ /lZA:Q:G)p%Q'jJN=s5lQ3M,i-i;bC`L3{)Plu q,&F˺kT $ArRnf$ҝd'xRzQ'Nac,":Vj(Ocͱ̪W_+ ͔Ă=*\=)zõhL;"tA孃#B A8rxd2NJ^個ݾU8) T6% JYj%tk#ݲvRɉ;%yg8_[X#$>)t0˾~A>dFkFc6CqqMabnzCcl^ $w@S\lğ/mUxn*xNuBl4B4eL9 Z>}uL-Ժ0z2 KT,Įs@MI\tV+d#濙-u*;P(<-zD,"&tVqpo -^C$3|ru:6O [|iWX-`'y;R=f͍ -UwK*d[.iԫbAו-G$5crexЧ]383`@JHi;;\#oŒn( Fk̡G+- -g LV|OPBQE:'l/dI{,`MRW:Xhq)u]CHg;7PW ?+uBN RD\?,^xoDw)UA]3V+e/]I%*06G cპO+>@]o=%rN0U'uBB6.~woՀ5J8\U+߱@JW軀:G+`9:,r9Dye_>VM ƯmKz717 ."[W0 aS Ojb.-[1PrS·X(v%陽b('x$rX"y5tX.MƖB۬U"tr@Λ@fۗ˩cq<.#`^ujx65z-ёb| )1 HcQSauOrPa_yܖzm\W8dV  "TbHr:ᡑ-yFnd. u9Rjֻ( +Rv }rKhX(!PNUooGU]i[\-ڶBt1|t*:4]hW, V9&? ֝j,5H&=0&S'8^L6h#L"KByۊ%U\}NJT |A!:&&І FD*8}lqeN)pqÀUG ވ LNBF=誗yYLκ"9g(\Hܒy#fcZRYWEExC#L}͘f#S?`.O1_ˡͮM@fZ/&I_oheYQ `c>̀v Xz9"Úe *O$ (t!2~|% W[:ZstL;n!M&t;YI DbeRH\/ٓRE7_zdΆ:$3*?x"7S螡V袏՗tԅCІ(ږ 7bV]׃dobgєd3G! Ϟz֓~0Y4t2F8o% 0dB_YCWœ"nk+EVg@d$^]eN4 !7=h< [t+^ ­GդB{|0+7꤃iGb&#GƬ=?OdVQFW:S_[3CZ}em LjMF,zjK `ḅ ]8pr[R+τuamݢ ^Fx2Ep\>vm)3\=TEP^@3UX]N0gQKzyzcdbuE~rxF$ "*w|8䇡j^V12]'tx2]ͣrݱ_wϥLku ˆ#TF媟ـI(AYOWd@)P!@Koa'Fd |'YLlyF4@K=${bleV6= Xlbvev*7sdcY[FdD_0c*!O#&IVɼ,]^׶D8ReڨyOwŹ{zsЕܓ zq] -I|#r9TvdD.W,coN/_1:<)hԤ,$$_#=og1Lz#JF9"Lqe_o6ȺL\d3 LJc2p,YՎ"1n[GvJ\=$jEcLTtTRi)]bRfv%{fyҐi az]g (5#Mzr nj;gIG̞Ū0YZH[,qhHqnKWWV5"|5qhށM܂)hoMr€W7q;NMjZM zݕf6֒1[tF}m~ء#J9{QEYӳC n*&\R(Pw3wb`'5q\Pg0KJx0TOPNfsX/F{Fֻ`R(7g⣇ܶ,2Tzr%j"بyA66»9'2ߥs}gj&v5X* {Wיcli&$xwC_fo&WxYBlu6$kiϻ7-]kkgƋOIHBeja2)y#+8 SkYs""-όaJ%+lOE8 <9\Ke㏩?o C! Ϋ2d>pP_ ([F]VG7gjћL#-xxx#{Ov*q~LӧXvn:!@l: P;K4?~KrF( khD+U<3̆Y`فCX!D\< pNd wUqbI>5Uء10^>G ڷʸzvS'we^nڥ%P~r,頓Uh9K"^fiE%c7hhW~50dTuX (`2TJ\Wz_e)i^Pa]- k pC`͞•tKoZPCo) .&[C,k}2&qsqE} BRfE`];]ėLnCIͲ7m\NwqM/( Zet %f9 w#c1bEšyu]Qܽyp:"nyrX#37j8'hUfN^FBRY9VdkV5U^=b7XQӘ.iЏJ(bu,Ї\+ ׭OO9k_S`ԧu/e q{< %6߻V !}4s󈒠{A el" acX~鶸3!d&[Sb-YaS5#hỲ-)U^GZ d$<ȝU1m_ (2|eJi<`C]5؁󵙃#Ť=5V2+]G1a^Nh/wF \ugBk UPkķ1xS;[ xȥti'~n{ŖSuszvrqj%®\VO3χQ偈0oo0V+|՞A'RjZҔ{':^#SokEQe`xS' an eg@ ٌA{@E .}9YkbK+<`YOcEÍGGţډl܍lT>uEFU ya0jaj4l:bP RsxRB ,q&{VбOm6_&*M}|sZˤiBU@ ֝\bHpqf] E&?Ib(6t6/rȠ4)_qQz[݂9=ԁ^ۮu/vr@xZbyc4fk%,4ż,y; :{Hk BB&RB2v iw=VHOseĀ"h<5E(jZhõ\P`HN%&Uv?m"!tH,>eUWKn_\qlOT%pՏZ $Zǘ 7Yd?v S[-҉6i`R+|{`JDw%GA`a`TS}XN ,mW38TM2 ^ٌWsc.0ϬiNaS rޛ?'3M*cAQ<*P؝L S4qI |aȈI197w%V]Kkp6g%jz(gW{ >3zHg}~BY7q7+.ߐ4KH`@\&as<-܄l<Ħ * " )񜨍x osj֝[<`qwD5o}Gʈޅ >W~EKtBxΦa]-#)G\L.{=pCbW), ܖeYFiW/[ Ӊ*Ek8UZ'.;"(qTfEsF7n[ckBHߩTd+w[65o ؿOs 6ekX^u՛Mʼ2K_(n9:^$VE˽3(j>G\`;W(k)F^<0A0TnvRagFS؎RaLn< 3({uਏapN+q=h> `5K^^/A =-*"cyqr*71sQ`9,3PHR^͇̎j3-1o>ridR$`X:$Q}H\nu/ݾiw{Ù5d&N%Z{q$=wFkC.s=ˌAq($H"eKZ~2B/M ~vpαQIh7i;y#YLqK2z^l Xj9h#LDK@fQ8 c 4&n 8C@:@=y"VrGْ0_xv3(?L#[.gDͷ`'a^6+Eq&\-/Izr cӋchC.;bӃ t W/Mg(jAzkӜH'$|ڧ/ V1cboԳE׬oxq[2F{55[:sJè1Z*%_X~xRGП^~ [ƚ)/1e*xm-`űS6ijW'`3@K+=yZn>MG5%93DׁkMC {˺E(duw$^QsvgǺYa?MT8ϛ2[ö"Xp8PDp%%N*%TA{za&Wd|a2'z4FV~oMwV .ʚR %mR܊UM+٫O'ۺ4d0uxj1Qy틹ȟ Jz[ oP5`e4\ MckC|.Vghovr(}{t sw?)1 2oZ򤹖~uϩDx )]%NM@fR˩tXO).-:Up,vMu W Ј&'ӹ)7H;46wk]&R#t>L'T!*`|řP͈5(&ܛMwo7*ʲ<1 QepaG=NGm&o1* e@#z玿N,G(*ҒK-pNpF3QWݭR]1\!I.V/gDc[gu]p7eZS%zf&#MW o~:ښBM Vɺ tV(uvsi|˻ebc` EogoHUaroHu+&e/K)t(0wɢ#tJ8#l!-qj9-qa2G.٘HԃN2g#,𶕂Z( 5*?K)DݾiߵLNwGe.93ڇ!NFG m61s,r$>řZYkbe阥QqӦikV(hUq]ee;Sp}\(/,^f ^:lnZ&15rJCi *n Na-9WRH3eE z]-%_3 O;n饎{W=tbQ UqhTdlo|3j<≪Q p"$oaZ=fwRiK)f `^ ҩ[5~ ~[:6~^ONyo/(EʔXoB4C@}S%˙X:"l|W\ vE] mU?3xոzly~iljbėPLetack|FYWLEIgBoV)# DǙ"W9 r<זa=i]Yt4|u eRapN巐1(x;ҵ-|Eeȃ@Lwi&m~2(yFmHQ7=|ېaP=y%K2rUC1bd4jby 2/ b /d ˫cJpxZpg}$|o=*?ie0KQlk*2|A򆹍\˲ Kqً8kbJ@ۜU{gx0}MLsk-v-]VZcbr***߳ќ}6=@ޙC{9 )7+t/ZJ* *JbUKIdRܴ1u Aҵ zBjPllk PқI{ _G/.5]ˆI G"ipeMO/k'}N}L?P|S ߚ_&M[cv 3FM* D-Ņ̊[ZÂcܛuC}qҬ)br(PPS7Ԉ(1J4 #G#c ;{3y=<`h:Q-u,ԯNVȚЋ`t4źɈ9k1Fϓ L㉸hRŒظ7Szo 11p{x* ֩Gdf >%}*g o_c.#F=+Q= b-k2]m$ 9ϋjCjw/bSP ~nrbEδUnê;a2\T=ʴ͊*i_xZa݋YujD3qEL `PQLy>9RU) %lM}U:Y5e2fgHoH:5t#<%֛ՙW`\1v49SUw(X,QK!x<_n_o0̩{LbjIg(4GzpD]5S]q@NiWc+¬Cż+p5ovwyS( *ߕ˭U8Hb9iD7fWxS ϸl5gY{3bg&~Z'Tn+ ;X [aQfFqp0 S O*uSW-;^Co8xZj xa_ߍ}55 !SY>_h蓎\&lc ]Bj=Yn?8Iy#r Xx݌;rr*d9348 e]X,}Sr4(%:yjCMH#/"PGoM9R"&y8A/6[vj~a, /YO_[!aYOb%i~ufߘqL:)';-$F[؉;h់>T F<((9Esmm۵')آgiv7dd ҥI|ȉbKX1a =Mz πRL.r&a e}d +}~EAjKW $1/ 03Xbamw-h5}>*:Ho!lm=uJmeQuL/?oYd)3UTei0`j..΍|ɚw"2 A%%6SC4V/"m UƟM pb&NRM 5 _abfJ`Q%G ӽjVĒAY;-P.Vo[dj'vF̲1LR.cVNN,T\^wic\Xb+`ꎊ݄hCӉќ|߈ c'1pUqpn 3OLr|فu\Q=\~>+e](,YTfsu(R]>(s<ڏUp][q}rA/Cv`q(U s>_7x~s_$ޓ֫Z&ԇ*8<C19ApK7L'_,:)oâN:_"%Annoa$%2)SVBV?-)u~26;NxyȚN3vd`Ѧ|kd(4*cZ9%fiǨ &Y= El4isa -jOa2cy֐ 8aV~Gv -2 7HA yK!N-UI[Y6_-;xٟR{ E: |H̹g y@y)$#S6fֽ&nJ8fH1)^X8Z`F *C?q]*Z9#̓ݦUB{|lR16f5,g3DdP'lUYk .B*[4nWLY[]uJsZDy cI:bDznͤZi4s̙ C;}@ZBǡǚt)YN)9lp\qA$@8!웯Vl>>P?G\d^`gSyEX\FPv7s#B uL1X$h\o|!%"$^hB?d#͖Z;*EYG^8`#4}XiY&z<; ܦ4NrBQrWnUbV@szYv6*,Ub m#fq$1o*9s*0xjcZwN]]-=|h UD+L.s8 Qã \-9kͷصdc$osyGw~ߝ>uiQ3Z+Ml<%|p4%GA痚f&0jE`VA,(\ S*UPU.g: mUN B(u^O7~[0)*s}oʶn҃W/ѥ րۧ6nK4W.lp!rmȏfY58=dh=[egߜ#e̓-ÈqZb]!f86\FO#[EJ:`!aTj@\Yڱr _E@|*GA+(x[(|^:;l opFrטñؾZMW&0ú̓СDwF(%O-)3T#Al`]9;s%a nv'hy|ѕZE\@ti-{K-Tt%Cg^T8+@;%~(VpLK40/7B^}S "YN^N"CYr<?*h=Nr5#J# DHZHW]5.fhQl1wPM۰p6B _ɽ@cLY +g`j3VJ!/˲!&*@V}6?5 yV-7wפS, 6!&uQramGH(wW|\MPb[-كRDG|joA?ݧ~H\f%a_F/JkzMewD=U970/SbJ97b 94T |&e HuɐnfNK?`| [Uɫ=N6g|k8튏8vqU^ pj{D;qz*2bQ",q7 8QDb |*nGsv\ᄺj}r-:NdSĜA;q%퉞?$mҤdNB?ڀ5NvP4m J 'c!a#r97D}ʆar{@)%jEJ89]z.ss6EP;Vn9{z=VdQPaea[qi|X~:9JHʿk|]b$[q !WTw< ,#WJ"Ҽz=_dss~֓6^9ldn6!]s7%2&=Ʊ+x=YT6o;`tF1nNצs{XHPT7 YZ