python3-apparmor-3.0.4-150400.5.9.1<>,`dckp9| t9O%F9(5ak7jY2cV-zbsY mi5}~*/,y\,k=i<6!\&bx@? Ͱ,"Z/ӯ>]e=B2Zj#ɿK~8,\߹*G3חIE; NVK0SuG{|z/ITO eG)8c :uƧE҂J)럝/`*>>@?0d & S= SpUU U HU U 1U UUU.TU ,"[("8"~9$~:-~FXGpUHUIUXpYx\U]U^ bcOdefluUvD wUx0UyȄSz,Cpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.dckmourvedre ixSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxppc64le/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d` d` d` d` d` d` b`%d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` d` b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d` b`%d` d` d` d` d` d` d` d` d` d` d` d` d` d` b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d`d` d` d` d` d` d@d`b`%d` d` d` 103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d618122fcba356ec59eff5abdfccc8905c4c6f2ac5089d117046dbe3d7abbb20e38249f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c052d64dc0a4a269651edbb90ffe4ce78e7557a3d446a43c31af274c4d6649f8118fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(ppc-64)@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffmourvedre 1694065515  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-powerpc64le-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=50625c72d320638fb2d1772ceab91344e8ed3343, stripped  !"#$%&'()*+,-./0123456789:;<=>?@APQRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRR R R RR RRRRRBwȅæ=\utf-8495a4cd3bacfe106e6641ee1667011f4e5db813e71232801d6873b4c09fea3c7? 7zXZ !t/ ]"k%%) `=l.Xv;2v4V8mn.W'ۑٯ~1UʻA!'Uaf,>j$?+b~Gw$#(T!u>s鴾~Ms'<̬7e]4ijEu-WD0ւRǗxSNpAoDAO㑈jehУe.҄1x%OjLɦ_{ )qJwV= 8:QV>n%=/]0O(krǣϚ3ݓ&&)zAc꟧1vCUh6$z =*nt9 mIr'G/>q^.B?.f@ #d:LJWy}D dJ&yp"Cu4G C 2rw_JB IG2gf5O>X$igEbp%qEw$pbצi,o@ky뗐H8뵿*6v.3r@ޜ|l6G1ȋҿiM_m@sT&0𷞓Z4wA(]Io>3_J' Oi2q4/b5ўt!zu _cfh:ȑB]2 ^>,a:%m5hAYKXe3nArҽִ@uIpBI%̨Tgi1/ي *ť!3`9īk\ɖ;*&Sgq scs㝜,W6??#8`GuV"SU|IC){PD3Ly&%X60;2l =KސWR ވK KŅ}ږnPҝ[ imbSЂ+l<,+B7dS34tP*NhCOj1!ss?t8G 5V,_0 & 㩨I7)ըY.*;7m!ٟq_|!yX f$6z{ JJ{K]|^1afqO:Q')o~KAE;?̥KDhk5"Oaf{CAeq'][,SH2j`qͨem :\Yڕ+`-!ۯͿ˨bȳT!&3$ T%PkIaO'P#ң7ȣG~C[kDBƇW>;uSH$ ;;Z !W+ qF1nY١ Hq(uk"`'CŽSt]x߁KS9̇>޳.D$$ NOZRsph 4MdFi Oʫz໏{ItJQh}P9x9@4X1_ _{wガ2&'F+=ą6^&AT~%USUIEC;3e(󔾯ؼb$ɼbo,uS$`pP%l5̙cŚ˕{2OYҁ_BvCwT[B'apuW*ȕr(pƠYF/ MIPTH,pSniD/OS->Fld:(} qNǢ0r7}_IY蛖lsҋnND0s?5|GY3)]5_1+Rk@x 6^1.L޴f.݂t[cuz:TV\&ơEK&:PU؎̲ACUь'Q<)T PN7GE*.=ZCCV}Täim <|1@єI 5ZzaRj7éA$yKgܦXӢf< gPr$7oWX꺵A fX6;U#:FvWɄR~iLOc.sD][S]1y,vbpZ*fhx8SZ-U才 +2/1/~hkom >{Bb49}Э͟ʐXaY64U$4fS\E$8[Jt6T , BJT1OFWq-Od*)rܾ yR(dA1_QS9(Vyv5AdrAO'1\ y}bz|cpGU ,]^ eGTI[ ' tTl}*k%(31H۞w^v%Hw~' aʡs+=}U/O@{'Ĭ;,ݎc)Î0:"˗u!$? 8"XJoG QΛ`p;OpqfDwscYfROd6($[;yb60d^DNܓ*`q+QRB92xk4~2}%s%#36wOF:90-}Kh@Q/ɢpŨ *[pw2DjzG`H/oU^̟rRe;9G/.l?do|S06ZoF[(w4ٚs43jBfx4BHd#^\L'iZ:)s t?͝{VƼKfy]L B@DFnISʓqG]x< 3h |*P?]s,-ڄF,|+CY`G?i-Ċ5zf@r8/ݓRA#G`wg}k[e`:%C"<B!yvbu_ak7X(,"2E&EX^]dgr<^2}PNB\k jx4Shѷ[AZ;ϬrK&CHZ4g ھ?'[_w%ŎZ ^nUJF c)FegTu8qN(NYp4N=PLu ,jRfI;3#.ap꼟P j ڈU{v?2Y!۶̵#):>6/و_' 35 ?ka4?NX¯濥bW\.p@}'C_/ hZ$'J{YVLV'}{E6˘>daF3R= ׹Z_k@Ȧǖ [c{ly ϖ6Q=}&4U5 '~j&_R`vnwuG#l;Mens2Kπ[ZLc_(R6݉E]ڐ6_͐Dƛ݉φ 4; \O%V$u_G Hf*\ڜwbDďDz> hwA %2c5 W Fk_>{q%$4$T$l@)QU76I~@T'\}lXV79Lo(k2^F56 NӉUԭ i.BmtjH#zI\Ep#a?Έ! _8 ʅE%saK_pq6¬CƾȢ<2n/XEbX h7$q.¯*-EYjs-N2kG,dՎR-9Ze&5em,ёcH* GlMl7frm}aj™6DN~ߎ"w0a7 ijڟX6RڌQ$dNBȺ{9X7S rTGApTnn:&Φꢠ1l@F݂T$~ óθ'ae_7yҜqݔq7 ,i>wN qEK~0H(wPeWыrA"u>hڮFg,t%Ԓ]7-H^FVSwqAz=oH{1?#/ŵDB$rW'x2dh ޑ-5BSXn;M]m ,}? r GbI9 g?.ge(ΖiUPLuXc]U$RԦӇu8uBI4/KfA_'j!}l? uq6/ߩB0 We"&˫' \0yTQ9`w7Wl3qkqg{svq|ev4 ߜ` %}*k$m.}^^ # WGvTσ\mUtYeɇ+5;ڼ0ju+}w7s6K% ÃK^9 |Pw'y yn@®w~=׏Q[93&.J_Tڴ"-s Vg2daT cD/|s fa^ۦ@ľ:/*VǪ) Q5yoB/\1?s&-E߷/8tqj?X ¢t6sC~ڻaD:kwDnF!xLteA5#nP&U1U?OWB{ACE,^$CoD9@PW9<׍,'x R >˗oBܭVJ8 T6M[.O@Zk7HCSE 6%cwiz\[P"(ԮU֣y"YC|[S"5Ӗ\n}Z+uy|xU(k:r&Ml\V`e~j e76@6r侷v4 *OaC0*ː_ע_0T3:VW/z錀\GC]IЛ"s [ W6{[܋)vƯ̂j oAp.BP|p)oI.?&}=VM"a̱a`v!Z{5UЍL6i53-p)t1̾}+1~VucѳcRRs}^B SGWln'mb6NYKԭF?eA>=[s|*6i M,jƗ6xd[a^Bu&cLYzبvQ B+,Y*c14N^ɆL]u ^+VU`H[Hr3glo)W ,%Ӑ ÅqØAu/OC F'Z5ݺU ^qP*+(twgS(;t. #xF^*:j'*>OΡHT(Ay( ݣU~ԗܶ ca5"@`PR񟐧Fm"~\ZP,2쇜({+<:Jhg%;N^D0-m2*sHyt/qt)B+3"5>by{3ӵ\L.s_e0;' eK9W=Lj3Mn(*rxCo&Ł0r,q^ jeҺ@m3!6E]g_0 #U)E_X$=ZY ,zyP5.O5H,Y(o'?_Emuk9IZNv=*P,lxH[إIѢqwtNWruKUpD.G!g'X3cч{v){`ӽDd Lb-׮*% {z0Z?7#Cw`Ъԅ=ǩ,L%`+\Ƿ9;Zio|+πOÑjP1?lWTSH7!k.!F®[WElFG ȟ=曌rd%OA͋,[)߸bt/șF+`J`-6Eðw8O|ӆ\QXu?C˗e+~dڸif4;R}=\,`@=X_X5X]DJ|ʐ|<.<_0UU_/%84JHe_z;J Q3vd.jY I3l"|H2'0o=4gEs!~\ip(yVΝ;8Jz2<,#b3 7@D$ XiÒJl H:m,B/ydT]HaFax;o?;mR'50 &aSu$?e3)1#_W*O@GbXUt]Ӻ#8rpރ-Ӕ8(j\ʧ3x)!@3OzE^ +x8M N97(yv>!&)gK߀˥#;giM(C RDXfrUʥ~akQyh*I2GO(ʄuCrkPJam]~O͊.u~lkTa}p!$ ~ȅc B)GQYm`=tW{/1Bo9|Mqk4hs*x16o߻w;X:qB1HtX6[70_9K,-r/R&dTsUz~mmf|mI7ߒT78` l4Rg>JbH@܉|*kקPg;ϖXCwv aᓅyxJGc \߯ 8bȮ`Ҷ]/fx}11(=tFu )AIȢ@Y9ޭ&#`sM(x"lFu вME>HWf-n5A_df6DJ(M&Xe4"w}  TC$rXr.ﬗ:CL < Xqаypyܣ#/P81CM;:Fܨ'(60x/5nH0l-C(^62]v2=Ѣ6<Z/i$ҕ2Ա=gMJ+d`ڟe68sAW4ޞbѺC}vM 1(D%,kK>+x2P :x cȻϼK<]!䝌1w>/4Vd<5eR^ʲ<JS6:e n󁼎p`= jG-䟬6Y %Q9= ) E36D5rDg)?HO*!C~#1öU8P%[$m9PwY~4#ZmK>$>ƹIts[T9$߲&UjM$'#|y=q* \.Q6.J ,7" W,8MzpYuQcPJp.Ъk2CjJ\;i:a`qXyƫ2la Y‹.HR^ؕ{ CXXev5*XdE]C49 ߇Jv VF3t)ܱ Rh 7+c7 N4N{,>~(,uwd* 0ev*tH#V!d@cwl9c|Ҍ hP2e*M^Px2}qr|lD~OPLrt+Y oH34a3̐gQGzbhBfh5b ̾8(0L(&W)%4SsFaIKQS⁕IXr,R1F`c18/{!^YґV q.hTU3Iims}4p78O'z(8jJHJa_ ek,eڄθD!yl !B$lN_h \LCʑBrşݼ9Ǎs~,wNi_sv{wu@?TR"δ5}] )jd3)(!Hf(Z,?n},fe~r] z;e3<nj׉ E)S *U&*;3Y( uR{~v҆!?X-,WЏm2~yGP/a'9 vܛ8{kM* b~IK,h #QÑAEa}I@KqA>tGw?#r؟ʑn v}Acw\c{5 ]7tQ!~i[8NNᄌ O.yGWSITJWho1/=xr^"wLwj0c|V-::[@yLCV GoS"%d3-Iڢ]M F0@ECmݒx'8cv=V bO6dpKr^ ^֬dE*t KkVC'1Pm$X^ P 'D롖VfaJ46OG-|A׃ bN+|ڸxeXU)K_~؊BfAP{(D0ڕ PL^㘛)ӭ4NUj'@6aplB`Иf  =U}0uB݈wp Mp.[yt$"f"w9 Obw,$ORN_kV$\T“NbAS?/ Q|1є6xm0v&!]xZOyET'Y o W 6r%] ֡ڽyqÇl&hy;ۙlmVYnOdg^ e%b Mqs(ۣw V,Su"-ftڭB<SH/A-gj ^U"Qst%g3|%}&Q{gM VlȐo0m8Ͱ 6?sQlYROM{쬄K1gJ m Zno(Un82NxrDP\בc1qZnX@l.߲ _* 7V8Z ZRl הԻc1/b ̸5JA5gfZ iy@a=DuQe UmS jǾh|yyFf`YƐo(z'UD;qD+e7-cںof AY7l´@QI tSss{k_w̿?CWVV*\-볮uE/ԣ<>H(!mkA.q nJe89¬}P廮Ÿ>mM[KkH_ѻ~:1-RU#v73:y9a=6 MX4Qe>}tQE?+b8o& +~4?oCrMUk@*jM^  XA;گnPO$6>r߂qHd2*iAaaɏuRö™&k КLjv֥jGF BrjCK Л@ !TG7>m,:Hƒ0R %^BrGLb1фwO5wY'DA@993Q7D-|—؏6l Yxp3:R_Mq ʌ3Et/7%8ףZ$GةdaF F@k#O ){)dVBbO @M^.-} ztY4LoW(<":Ș>熂PDxJ( J"ZWr;;AИݍ0Ovط"X4nqaÑ /6Ԝ\*`\[ p7 RL}EE<C$_z"/{h8F9(dTL{S1"L/qwݻE_&5&(;WKHŎo!M{⺿Cb(( #/|0$u1Д>*660|aQ)@ (`2=(p>۟ pLM UB'Y0-HDži,&]E*G+*Y&!h:bb]`lؗ{{cf568 b=[MxلFɢ808~;T( t}ֲflt N[dljXT"Çe0c+ܰ]| >l^2w'%;oL Ugk0`*Le \nj~Sj6* Ta(٦W4F-21@/p/ {U7Nߨ 7ɐ #@_֬^#BܗC?˂Z?U{ũ*S˖nF3F%={X @epWs_Iy#˪@^+;v儭]RvŗոDR9ZQ]C&ۊ/|8 7mFvvҋ;okb _pB?+h.1%}9L{ huF]q0$:]q,ZuGt/.̦:=顁aXj Z>n qƯ(OkҾ aį,BM/7q{cC*Î4W azvR%464/߽^I^~9d(HTQ  Ka3T~ u, >|s-gUUxV8U Fd8 @o ]瑼VAmSwiwF]?Q Pnΐ72򩗯Um2n2N8k1"B翃?A@2mH]Nslz=@A9׮l?d6:“3("m0d5[ԓGTIRݫ LsanTo2N{,nQP8>+^li+0߻5 Wӓaa9kO? v;ZHjy3NnoAb @n-gyD?% \ -Ϋ'zO/@z6^~@mٸ0TAL-t$ WSVQ:9~!e~R-=Qh/(~*KJԹu RkGDyZw% m|Ē;~9XegYt )Ruv^ A=e%PWa#2d `dAs޲o*/e= bgW2j;/ANʃK 2?p1|ł\ Aϖcȧ eݥkä{=o]:! 8@fKcw$86଩vH"aN:.Q!"H3S8A)"Nh4 ߱O~PT&q_o Ěe6Ǵ?7[l39`<|JhMcCnRm /om\iM?.e~$ ab8KdǓ\XbqZOe99kuA`|Kww"y"h-'yG ͻJ V q@`ѵD @Rm6'#x@^ACFη^ ty@I˄4kL߰uTÉph@^Q"ǐABEt0*''d*+k`1\$E:n}H4/L Z՚O)\Qca2+"#bjϵ^X$ZRS/ hn#e\h7 ln}}S~=%#wEFkqF4"\9(V- Q ?5f:xm>W9hDWg]k^9b5\)˿PC{ =?Vۥ1lRIrxhR%,N`Sh`;Ic"yvu>pBp/ؽx O *q/1M.ܭ=xB2!OH;I sjL?y:V.3j;$sO'wr7* u{$t>a:8,]Y03Pgs{pN%7 z~@X˩=;Q4'H~pf7.3sq5!bU)O>ohZiw4fJ jCJ/k8xO.z`_%RQuvRq_2[\؎!%HFNFp'ȇ8@wů \l#Ď[=rcTv]fXY´P`J1bd88x@g8)nu ƥՔ.Lo_9|)',a3Ec%ؕͩEL9$*`>u(%v[\3Z< )Xf%8 ),G %kWR ~6atu)2-,C> e 2:ډtC:ڟLN}l<Ȇ4]-2!*Gq5w՝W 7Ė@(Oh^m5R'ȇa&\qv$l \Ŝj>%sAll :}{RpD[ CYBX1g7Z#>P ڮe9X%dLgd;sD 3-̺\~12慫QO"3#8-4W,36& dj~p>8c~ϊw~t_ЂJraQ=tcz@4Q\-s3٤ K "Jo[f3 &'3_4jf9C) G7CTiQ w4磟K?6.<9Śo0Ղ4&a+ea#, Ȧ^"%G=!~)?Ɣ {E=&;4OX' |6ҋՊ>i3ËƔL9CKjVft|Rjv=Ж^gՉ: 4HM:DJ)՞Y ެCQcf+t{{I(-{|ʋ 3+7~Bµ  /dt_5U8@CBە2]Xե-<ai}-gpfV? HU#zCj,iBn-h۴ɫmG0әQDNJ/" v-,H.h;ѷ_,NCN[UxarA˭CaY7.BVeETz۫AqU+r& ZژtN{I08y fK6dyTL_ؼr[|K5e)*;'XeMMͧF4\oSF@)f>2y d#o\$Q,~w醹SUSX'At 3בsޱOةK9G;+lKݻG.L+O|?}Q3D4PLM 7mjtz+>.̑uQoG" t!3_Bybey_l1 S,I[{In[5^oA+` qGS⋢-'&32x0qw<_`aXC p 4Z, E`R6+}JvpQ ! a?|[AbMH,)+cAP4߱L\l6_Fo~_V% Çwred(E[Pf4+PQl 虿6[ĕ\~)L_n%8Dղui"O3Do[u-ڶKR\fV6`ˇ=LsM4Aܐ}s9M Z ;h&_̝툰crScWyL--?  I6ZW#Ө+ŰvoJ1UJGB/%h"vx+ |-9sΐݐ;gOR`/WnrKXָ6+_+W } -4Bkt~iѻbTZY2ttU|QH#2TgP_R5yRCo@g,~\K`SmܛוᄌN wS~h}YpaM7zW)e(XVԖYS(w.HsR*d7&Ma=}f%ɠ%Ki+2r@Fj(~Kͨf3}~&s% c/[vM. ^ 6Dx+O]1(RLH]u,}cw%?`dȄB$lN rMP.`-,OD]g'F2u{lj<ñ7o[*asTb=M%ٵcE(]ޖr HwppJ[‹Sew}z̤R䗘*/j Kŀo:q~:NkRyX7! i4[$Νz58؇Gz%o1 RdZoGxJEbx7Ɵ+ww84 ?݂3Zx ._{![>I%=Q ۄ2-K4-1oiϨ;@yAN"8Z%74c< l oVl_܇[vrJqu ޯ/[;M0ud1p;)x&b7Oj¶'W)ƉS㻍bc5 TɈ.mYE)iN (-){0:0M[r|nzL=]GȞ猺4P0kR?cمa7k` @+^=^=MPvu, wdT9AId 5Rlg)Va@@=:e ܨv;JkLu|jZ'"zYXZ8c ̢cVhb wZa$Ǽ!1G@R~p[Sgsy+RǹLF:y`Qz Zd|m#֐Et W.A/2p5 #Mn\mq15BeZ\4S S)BeWZ&dUv)O=F8hWx6N-~>%=P p1v1S*?=L6,fߗ#a"PzTffQΘة?l@ϭ`B>& ӡ1(7c)sn$ H6qA\Wᚎd^;5BC6jp֥Yu1h~w [2J3QxꬽKsᕖF'u2h)د6x}]?mfwz**dVf;G;V4?<͏%A}gwN݀f]L|`]S̾QS1?WEe #_2MH\"l"3Ɗqs:$d듔pª:SCSSXF.`Zu]؇cdY_|갽]|$M Uw\cT*.& _gaf8{x`kWtD:q/<\n|.4f1ǃsN_{CQWd'n.Bp6'-EI,ޝ3XEKDdj,2|,X j 68l)^hp+v+JzWVoa5B[A o8EutjX r':Z0@ A篘yTau8 U p7B @Gx•)Bou_R%]q |HS~P`MuUveMaߴ'72ف`xl~5$|,Ʈ-6+| , |:M em]PzCW:D(XGABla\yZVcc~])??w, ˉ˪ɔ,>ㆂkU Z\E>=?\7PB}@jesDr8b gQĴ9鋰M#`9 Wiҝ kr}Tbތ 8;x| /c,c?N+IxUP&Z,ir#oF%YD2begY=~4&>)K/E6UoeQ"t;=zߪWߖ +v_'OcNp[ulMxN`v XCWS_"0{LC ܰ_aWgqXV1'6CEThp[ F,$(ӿn- ƄW턩N=21e 76GqQ*SzϿڜU6Y T_MDnM?r<ܚM(0 %Ϲ5˻kI0gv=?BBZM<IEO;d= Blx~tO(,%7g'WZN Ge$l{D碎 d3NzÇɢ,*[q sJq)fFBN< ay 75*cYm{$Gm)ӯR&oϺ.Wޅo2 Xy(Kjڟ9aEvO4!mHږ6] aʦa͵Tװ7t7 p\0"/zщz꨼}ʚeR<WyctNoLebKqtHV0Y;dt`8vɉEKմ3=Cx9Q}dM yD!uxh˕mu ;ȗ)lEk{$Z~[TaxƤ(=n 3KCXIinc10@_ dXBOf4N$B5ϟX.2ObطvR m8 2/ !IS,<0 !Г\Y߷toHʵ[P G"U\Lj^zi (ii3uY(~P4 F|ls̬gy5NyT"ghSZ~$aa+~ 4MT)}_}z{SeP܎8 q`rc\ԟNV *SVXA҆_@b쀚5e߹+ݥd]LzH{"փY2j츠rvY3 w?K#$.f* / ?6WJ.%=qOeeԤRr(F b5k-9pz ?A}r|Ƅ{7װl~~50~BꍵKgeD$D$2Evi1f6}4ݭv94TާA_Ԍ9I_2s炠* @";-`vMVH@}uD+X Iotf5mDGնn` I+ @oz]i'& ȱ%P;s[L5Ľ-` C.' [7pf<H{I\"+>y&$Q`(4ֿ(k)R33o-^ r |$|H CjW1v{t9H+ZBA!(+ghz}; ֵ@F̣Y3S"Wt0^ 8YeR> In҂pJ}gY{lY+~3 `yY7KdP:i>eCp|ؿ?Sԧ.:RSj ]}v> ]04 aGx*k /.ldb24BʵՠR#U1 4/D&ֶIEzHpCL<_/P5SJO0Þ+X]ȃƒ[WZOF@[ů)mtp*l}ii@6 *3nэ>(j ւ;N[Ks 2HtOV|Ebdah5Gf,OuEY_R SޑHhog&NR7 ~YSP'59'c$Q=O64B0բD{mvMFkMHx((2R-iG-"iH߉?/q:Am,{v΁aKp4,H,;^gR B;yaRCϔ0ێ̲nD'`W]юX>{cE\|&C[B)V*n>W97E8jLؾ:I{4i'f ƞ\R6rqOy]99){fC &K﫡$bHĢcqJ^d^%N; 50nd(p«!=!U\[nJ"Tm8$Bi (|.< 5+`Dh8[L՘>F a3VOqyҋŦ͋A|,[$Ĝb΄7k RTF0_Co\M^2}smֿ:AY{ae+Ǩnk-e1tɮK;V`7$M Ĉai_NaU36zY4X}7ǔh㐳YR~5)5K1Lڝuķ7\Ro>]hН0O^Qf X%y'= @ZH_S?\:[9 @Ed$'ԡɅ^mj5]becޣ IP: j7fB+Y:2*F̶oft4s(`@LĦԻEr< +ڶL,a".0{髵DEN|ׁ6fh@ hӰp^;MqUJ'*L8K; eDq!ǾQi%c\C c>Ԍ2!}Ԛ]7جkvE6-_|:k?\=L;YSfi$H;RI!GƯ%_LO*mXf7M]F!qУZ=Dmm| 2ad>8 \ F >b!C[%*xO)HƲTx8(b* Z{k9ǭaRA n5Rŵ</XcN3'KK[0 lA->Tb̜{۲j4mdxV6 %ÖGH`: r$BQYzHq` 7*45x|2Tɂ 5PեbO$܈-S`)&ɼ*LLF:RL4k(M¨SI)WA{ bڞGt؆>)Z7X5h_UFx)wJo%ܨg{҂P#,nT7;@UG%O~-Y{uC\UIKvUOmm,|2K: {dб(=\d.L_9g,B:l$B=?3Df5oՊw2gADTmg)L3 -0Sp$9,1L&]f`nś*T(7K"!5^*_靇(@L!`J\Y_f;%V? >&&g57k<]˕fkGVN֓e&n M8+7[v3=Z8|( qD4a(W8T:ۯ#ML$zZ^p E ӛM+/(SixY 8"k\u 𬒇Ղ ڥ .WE;,I~ so+4,}4?ͳGeJݰW] #Y@z v2~(d._\u.sܿ(*UOkq` BԸ#c{ ~ |]L J$Ĺ;E`ު:Oa; Mlc6һ+gkSR_)"mmx {\>6Dbu u&z V"-ʥ1 *u1}jgjʹ$ϕGr x8S2x_|l'mx@trL88u!ҳRE*Å[4`x)~A20KۏV- =YdspQ0Ùrb"3#~ !4"P\ I6]F5+)-Ni%!pث}Y#)m9cQwU&_}%4hVCnM'Y+4Od'h2Ԓ!xQkU S?%\J볪Y8a|'5y)gΑK곎jtXRl\䠇3ZRBhc:olKe4I8fqgTvjg9/[ \`1xT|ĵušv^A|#%Y[晹F畎MkJ4[@gн;σuk ̻\4:BtV$yX22^ͺr}Q.{nl.=[{ Mtj׮p>9nE¸fЖG+0IDC<%[X9g68( Om4$\on:BIg~Z5z)Fa`nS7OTDMכo9 Y-j6S\iq+S׼㙺c#5g>j;f[NĂU6w pVaǻ(eMcVV^8.G69ԕ3U5 8dw[o\r2Bŝ_R -mXp2(3n( er,FWlzj}cHYrxnn'#gYw@ݸ >[VCbʍ<&&V" +#r.T-hegP9#Kx8)j7ZJ)gҌuh.^P1,}<5 o KD݉zӉiAoWDHp6?1eLM]k UӀߊkKVf( ̉¸q@ 3q_<6BIl *)SHŵ @jrKQu_KA?qYu AJ 5~}vIjo1s[<+}R@y+5^LJ&t"Q lp<ۆa0{?`s}ir_³tf/1԰d|:Sc@-'_"F%ȉ+[Ǚ*/{r=/%jc G>rwSs#={uI'n! R.o4[Yy$M0SѥkHK]$BExk$YJ͡f?jHţ9Gq=>If;Fdp̗Z%f3p6`;XG& 5Ț\cF㏩ ojLY\m@- W !o gȩd+/?a|@bS4Iٱe@.=`o+d{W9c$4}&P@N0LW0"S Bnw|~D-2]>g+ɝ[@>v<%"uە?E==xu]$3fӥj(1;b~3RKo3iv&b|^٫?wj"Q'R2qA;"kL8qq6 T =bjn%>sz7hUԸj 8ч%%;y޽n.Y}I/8a6"vuvhUyQbu˿$s4iX&P4Oeqە҆#ݮn[P~uRnqz ʖ&$8c WX(pw Jjl< /ѯ\/btWg>mUYqgBn1$/M^ф;2]gghp『ǯ08Lx5Lٳ [҆$|O{|%)-PMXcʹ廓WͰDlG'3SʳQis; E8P/@2q*(dTt$ ȥ&vGca88:7nGax)rڬT\K0(zOΉZ2?~(nͣHn` CHxAje䷣R[8g3kC&W߿.Un eBVã!́HJW1Dcػ>b\?d2mV[ZڙhTꎤC&so 篬 NRtkúsUvBS~Y"cq~YO8Lg%k#i= #d̕Oi ~'Nn} d6#})3BoS5a!cx*KQOf5B^ iUaRJ9PxH g[Y9|S띷$3,`#`@yǫP{rܟgn)iMx_'S ޱ@Ԫ{#>;Qy7h6/V'fXNz_LGEѷaaShmnؓX/<LE˷+ ^( lvs.g`PD̜Ⱓ;m>z[3sm}Ӓd \xt_| %~T(V]e_G,Trv5v[;+!cg 09 |gu9\vI1擸@_ͩ(m5KFh,d7#zisYDбa8A$U]ƑhH(^q3o& Ȯ땆Ϫ s(tMi?M=*\^C& 3r͸G^hl豀Y#,igAmRfg %l閩v^ ?Y7}B5IsB2j&pYczuyLQ?LܨZHŸ%?l~UL h]"2IHܸqev?MXmD_0y貳*YhjpBS0—ޚ}z2KMɒ:co‰_p"s<{ f,oNHe>Ą X~';KH'%oo%gy(A{czEqԥ&)~:X _@>2_%B4m2N=S,vH/3"YȚ "FcWV Rz8Wa9qMgE!Y^"qdgU8_Lt)9ZeЛ 6KHɢ%,y- X,pW(Z|Rl_!޳͞N{_j[{kN-P7Q%l{ Pm*|QG`F R'}I=0VGލo+tJG_N}"5>`F^/gMl_^c 5ι-)Sͬ17 u{{ 4ߓ?Aܠ sBe-ouŖ1aYH}X /qZplv4OEN7 Eg)gUV??NRf3խ7^&c|_\-FMrb  { ,2Ws,oG~qUM,Ǹv |+@_X, ;w#[ۍKCO*P@^Q|We:P9d|QKƶIq4s0iaq#CgJ,b ^+^ےMж4{L-)RmCUdys Gp@°lI M \"`~KW1Z0=##ȕeʴ'8-IRNk,*m 7u#|y4N@r:of9~p@R!{٦ +/ O$ rLG2ѓllL2Jiɤ|ZvѩQ~ܗGr(LzXZ(l{hK1Ea\:k)Rő :s B^7W(IX/bp<:ac7B&ȹJ l [~fK0BD)09X4 !d"|+ Z(qd,q:rxHlsؓ;( MfgΦշ/QZ.&`F~q`'BYR{TSb#>ZzMRЏ%H:VC20T"4k$0Ģ]& 7}w:@GksCyMcbuu}YELTY't[.> bvBO؅R9 NPJ`eJ)RwV^Tufϭή3Ld(ܲ+H,04:--u cmn[-@GP愲ʶIf¾#.F >"dcf'Z W<';NA~T/ (tuD w [SiS+>T4 ǎҢLj_:->z1@0To_>0g"4yQg#@LH84+hS-'kD&TB~L[9os w{Dip~7 -? 9hܑ~º "g]=!aSR3iLJ7y\EL^1RˮaVƳuT[2^r Ѳ$]mg"Uno ږţ)NajDͅǖ'nM5%;h=}8~NȹK'^k<\ Pl=ȦTu9Ir:利)a_H$6flc{ylt-4o()'{F^l8>Osӟs)_i j[:g$}9u cEN^ǡBh#>oOVVvc;GfG1 ˇxyS0óg;*PL"ն2%+w`ڀ~Ȕ&#a}h175l"J!𩯉:lxbӼ5 ͜!`߮#V(I^nj]msL{Odi[ ltir7VyDدWf׽B]n4,JD{tFlj5VJˍ rBA4~ƴz1ULũ| +iGt2 O(-5G6@@#'ej-?VѡsZ)CI,#xńF#`z?x8a*ƿ#>̰! |6X2_4{4ɆaiiR d=.`NnŞU)gyUB.z|wF2\W"J.=<C*̈MM1㰍L Knق 8޺9)%Bzukl2[?6GqŤ1`]80NCBxϳ_)6iJģ%drgC`|{*! UTzWh PSKO»&#띡2ITҶ "vz!C^~Z ( ҁ] ;mN"| ] n>X*PjC!s ;jZo1pZ 頴w [';vR)V;Eut ssQy4e1d>F)ޕdrjd&3votbjC7Q+Qo:u5y1H/n+,Uw7Y9 QaMʼLs? Lp^:9Z ]lm!5{'P=AS9NrCWIJyl`q,~WQYDXO1RՁ>zYzH Pș=9(9RD?ޤCؼx(X51,ҌHE#Gt;Χ˛Pruֈi4BcQ]oWg3v;ODis=Iwtؾa4gHҎF5WҠժ|T'v(F;TVpy՜q_V{oT=z;W$v\U? S-FC} (!%} j- 4ic)?AP] MV6I'!_zPfB),y`׶ bCt6ub3Żar\#o=j CU|c*bzjK l P֛ b cIm yS)3u^E8#Ǥħ)h+$QY%ѨDnkMyt\ `8)^ٗ hӢ)?i1DQykL9.3y[?Pb x#L(b@ju6kX_:o3 UEoI'< 0Yod Lmjp0`]A=VUkUԵ!kp+?ME3c>BB4U04<•Zk1e^g7YF(wisOj|Q[VDGh2#y*-/+Ҟ7>Xx C*wJcA)ȧ cϙ*XNO6@=#Ybb͑Qװޕm9ժmLfŧWt[#OT+b>ާ-4ބRgwV"Ex (s]ƕÛ -$;mc柵٫_}'}f>1 l|Kpudy%{fɺgc-zᚓeB` F_RR`c!cvpCjIFF.Mv0i{rUq8Fg/uOH[z0y:9\dpݼ܍r7)PC0f8iѸ.K5g)Ůy-tTB90H4oBDî0.QL(ϥ_ߒ3ù5L, 5]{lRa3} Jü\Y׻Xxk{,ʭLCHc&&d;FD5ʸ"nt<#)o/) k@L(>;)ѫ@7B4[ ZЮ>ݫW~w-)]}L2a`RW`^X(*4r 8!vhSc}gK''?˾z<)v!zTQXۃ6J i5[yߝ LmٚTI.uwXΠ47V$X:B4s沠 LdEš{i7ܘ@a2ޝx]*5ĵ, B_Һ Pr`a#| DuOFh u6 },bKǀ]^M*-svPI#!1O|]~2n(NF?7Qab9zk e=x%/iKqȂ.;cp-sn* ȏbK?[7;Mz'pI7 HHtn\.1,xj3-OX[Tղ) 13Y-(ifR^1Qk\5!(̗DVJƴKTe|IѼv Yиn̜;R>Z$"YWq7֟Z7)VU_pp$wh ~AT{R#{Ҡr W\kV[`,j"ŇV[J1x{-3ۧWݼʨ ɭm=C/Ov[R03xEt+#cjha2tpFBa3$,޻gCt ]='܃5?~wJΊ]6t;.ҙ>\5fp?>-9l,^Zm{٨?jͨ>^눻&\/ذ/sldmˊ~;)蕺NA8پGeu+Sz]\C t"2cZs([;DБbi3Ɣ9-=Γg9٭5S1`n^#lj0`4ӰyzcottTr0e \A|9 #,-S另.W6A#ί]^xbo kE&\_>vSayW9퇭c .fh|;3)tGLOB~CLMfrMCU=5r )c%_&GVht ~t TUU; z5&,"cIX19V$};FwL2k҈kρ @d[ * N !XAWk܋孲w>^鿼Y~V'54xxR;ct;I+kt}9J+F_OG[gR#=fyIظ`eR陊/Kjv>SH]Y=te#s? T;z֝}Vd]1&Pn$WP*:M&B^̴y鵨׹r`nOs$i*Ǹ QGh Ί\q%Qs*DQjk(VV^lys6\6JtL- RKPh|'&Vqfz;nX^.(G0V(Ev赑81 pR4.dhPAM>ijNs`p4n%H{dwg-:HDJ ,Ѝmkw~gȂ='іD8Dc,4Wvy2Wf=TH/_ڈwԭvboI-H{d(Ew9#qrC|juPE; ƍ?A#'c*u end{'rp2$O#(TnF盔ᆙMt} EZq_pZn@]=_l[CĪ:gRVLfmf!r `}kO6ɃK]ج竞J;㉢^[ jl=8Rr;3lԠL4S틏ޡ {.$UV9@Kan)-YPc!?wle6|n3 ?8{wr*<"X+?-$Owp0(6`SCTpƎ;֝ @>Gx s2YL PUI&rA/q>c 춖g>c^57v'֩F9Wep PLr8_/ύ?0_Vͫa4`.;z[❑'bu\یy,"o#ce{p E75B[CGNgzhb<9&hs;G i1XNkʮc2EzGD% QFu ֿ#yyUp)JhNh`yP>V?%ӏ̈wO^TTeq~2U\\SrW#Д{^rԿٚSYR,g$Zŀf#qe2&;q`3m9h']W2Rι'QKu[c=wX3\ vƥ$ ՚ '^'`X>jaqiM&IɌQ›asp` JRC 8D3mi-6IwˎWalhc{dc 9^;I[Zaģpk/~0FV6_ }:튏pHjCۦgg,>>\ţdƄYE85'o*HRɕb+l^WyQDsdU{) +>`&;u VeF'Fv}dkT_E~ [0` %$̒W3x\IPDЋv\uհY:qPƅD܇?}B_}*+BQgwHx9Y6:ϙf\eM} q3{6}01Q.qj&Z@7ToĖcVLHQܷ8тs%.( y G I%#YDF/3簵eyE@}FȆmfhYJo={=֚dZУ% Ԭ}"gXҰ`\ vTx9[s4[&WD=s@(Bc{޳m97wnvSVU9嚼 ~xcs22WIC?beZ m8 (o[uUhe oAkwk塪.TX'\%}\d>'Pnnimpv/Hr~~j%`zP9*WVŗ>ã~-Izu(Z= *=YI %oD5(e$)PI+#$v[]h= E E(A˰ VTbxVUޟ;}-65<',1ʎj"T E[ mBx(ۜ} hȩ)E(I3Efg(q S9l& e։B"`B":W2;[_N@)gA Ptb4% >x%/2;ԶOu!#˚jթ:sԐN'JZ5pE3qt))])-Vt;_|XqB旀;i̧UP/uEP EoN'$ K7ߑvGK+ ͘Ѭl-8nJ NEp|3$ G,4Ơ]hYPxh+ᎰvO{cm$Ǐ?~V]ީt| N&0Lϖy\o Q:^{0ZVqvDޫCѾ%*3mdIvvGߔFV TCˡ|%󰳞$܀5?*JE}nu67м;(‚纅VXVkKEfr3 A-o4pLr2vP_dWNIٕ ɯ e Xxz>I(k; S tCc!ӂ1Yw:8IMų8y}Μ`A2{drϒ:ʘ]gӳ~/yƽJn8(^wT= Mӵ.0'WCA5;e}PhL0aǵ'ඤ/ vv/kE=`-̭`̋,y(4I#! Iv 0{tB70psP98RVm6p&?Ŕv۴Fa]B\SgQRWPu>3.D!܀c)FY3V +:'L-rJGzW;0Y܌dPbfEO/{KO%Zu:Whv9B00S6 AC,e>l# IYSAIsP*&ySR-fzX,$[@r Kjﳝi܃zF6b.\IijXhF> K`YvnL ax>q;S{4<Nu_ðH˓;|Q k[vy'#6VX}jYSKԪ\`\d(3v'#ӟ%9{rjozCxȧ022?*@aTxrn_ &>xv 'ݺ_I9;jtzj [ץ[l8+r5=QG4Q'_VcUNd;Gʭ|ߐ<=%l֏B8/V+ǣQ "ԓhp!.5& !.)ƥy{e&>jc\o[y,}&JeD5'ysmG*' Λ5NM.n7 &uâ.]sj}*g8l1#c"Tl%p"QKi{" R^톐v7ws<W<bغЊܿW0Ƚt0Pwf4>X -6$*nDeի@;S!ah&>Bx:ůܭVd2h,b:uAƾeU+Y;m>GsEznh,߮g1!9H,ۘ%㠬Un}h#OYXBQچR7D^xүP5ާ Mv2YBnp2:z~#朋hVP/ώ|lXï&4=K[Y271# 3:֭~qEhxzoZO,e]e3d@"ߖ焕w(})В.n?h1X j%$ޥ#nW"|8>áEL8x!(@<3h7ZU<!k9ҧI.QȺ*Jd{PMfQ7 JK(0%0]n&o)2}kpy7y1]oKEd<"MK.-7xk6^Euiu Skǡ^*)Z^#No58-'$rwFr MOH?ỞREQ#vZ,\#5]d쎩|JH_@$_[nPU#vg@iQ)7 il|.ɹ!V_=vLR,>kf~ӗZ%7:jOsIu-w^i[ШM"M~lWKs"ΡlDz픛cՊKӀ?ǘ3A4-NEh\,C0s%qISATK^RO} /4n:kӇjɳS\CpFYƺ+)"v_X(Ѹ2l#!=j `y8gjv`uIߨSt( HhL 삀><.gYsHXJ ңuߏI8t h `s_dt6(fDX d21H!D#x,n k>3Sӄzlc9}a6tFE֐2>|8]S3`[icKo`J[{V*@eue!0PdD uivS6|s ^tMAsnAC}O~4]P̆x!<3^=_u5 uy _wxzcE C/Q(ZRӟ-_'D,CPlx-I iymEݮQkIeCdR!2,pf>d*J#ٛy!}cq̈́gGDT\ so6_8A9 hZms[z ex17}V{T4[D1Y13J*ku jaG!g2%}J$b\Z?pl\14(T!3)Y)B2]v^`z;Le$aP֦xdA|,=s|kiDVR0D${tfBh_[ǘӉ5Z(cW`:z^>4Ȥs߳qrڮ BL¼ jLjEZ;_mHOeߝ t+Ԛl=.P6xӎw!o,?5`]U fz Q;99S FAlaf?#jRGDՏf&/?DL4nbZ Į/t-儋)qi2!sk~,Q`UM3dD+F9a&Kգ_ѵ(O\sU 9̝!XC9ۧ<#KD@6d熍&[ 6x`PC]~\gt=[#U9b^@H]^_;8D=_ͶTW=Kv(?ݞn;(Cd,!xԖTP fخ.m?6#]uS|/x$E;+Z45u͓rSR>Icūw QݵJVD(- 7T߮g)?+"ؽt{w?v^i)mXÄFb]aA&Ckdމ{?(q5';T<n{\ԣJʼn- )#q<ooH`HoF]nh?)$6fc[/Zk8?~S\4h8ą{dz%3$5d0g;u/VP'YY.HGTH (?_L~!REfzQޣv U2^G€~=pB/KqLQdJ-`jJi"eQoh<68w>uZ}7KۯkN:i6CG1*uwA)+!\Қ/?}M?*}ÇI_OR$*F?VVĺ*sL Sli9d]ʦYwlGPf]M" 7سlD <̚d(W'c̺L?ƪG=YLϛ|TmDTwpFgof4x(qVj zA^Ÿ~0jX\N '1sfpT46jpM.zJ@#`gx3Wde2C'sK=('?*sm:,1SB!ղ:t7)kY[ LU