python3-apparmor-3.0.4-150400.5.9.1<>,de>p9|-uq3y߀E ,#Y*l uW0@Yumtf%ҎAKy W(C}IE[b\ƈu+Bv͙iOCy/ 2Jhԁ5FK3*LG 1nD]yqf#m!-y]FuΗXമ)X?&C{Ϥx#bJi-pݘjӑ!{B)3F:jAƉ&bjNRآx#>>D?4d & S= SpUU U DU U -U UUU*PU ,"v("8"~9$~:.~FtGUHUI0UXY\U] U^ bcadefluUvT wUx0UyȄTz0Cpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.de>s390zl38 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxs390x/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤dcydcydcydcydcydcyb`%dcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcyb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%dcyb`%dcydcydcydcydcydcydcydcydcydcydcydcydcydcyb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%dcdcydcydcydcydcyd@dcb`%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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(s390-64)@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffs390zl38 1694065982  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-s390x-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4daa9d912020588b9af9f042b28b2b8586c56e0e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@AQRSRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R RRRRRRRR R RR RRRRR3?W>ɫa>?utf-87ff1fc2458ff2d17854df07636aea01aaec39577dc20e054eabb60f56c9715c9? 7zXZ !t/ &n]"k%{^E) `=l.Xt`g -%dwCJ+5F{dZy`fGus/cf[NiX 6I쟍4y_UD& ڦb ]R,S&ڃ ZwgtY9G* 0˽ds(I#օr]\ԕvSa2pZ#? Z[.Kt@ަK\vJ7 Iܶm}tl[hZ"1 Ī]]:>0+-y]6jTVҵ%`Zg0ʲ]\Ҽ6V}K1S01fPS/Y*$smvbx4 ]lm׽1Ij6!ǵoxdg0$a0 ٛŢ"OY hOy_ s$"d;OXZ?bU(ܜ,)pbG-ïxDs " eωByđM kbKc*q#Җ v75"#v#Ot4YgW Qq x;nNVVzͺ-N}}R]u] 1S{W On)`e屑ZvM(t_&`+5 Kg@KiΫloՒ{suH(9`'>D#Bk_zk$u3~CЯӾ~kq3)g՟s* "\V`17 kPȈ!cvՀja!_)6Ҹ8ҫl"4R͕g, GxbvjJ얨l]2E!L3u]ȗ⥭W YP)׳KQ7O3q9S)x,ڊEmGsnzFaz /\ MZTmYNJ؜C8h[Z*Wui_Hc9 1s6?kv)+if~paݘ1-\rh~|X҈mgi Vt@RJ+QU`Yex;B g/Zbi8 u -}Q>H K7؋PU\:2Z !n2OHIt~yX,^`{Y3TqB̌P6Lnk0XYxN~*p͖k ceV>~|xZ-ˋ]9n(8P}$&)Ĺ$w8D~^73 H,'=Δ+մѮ $k?bx '] `pq ;gnoQ㔫 /sFIS0Lmy{tmbݾ*mFuHnW9VNap-"4'&d-(/K8w-cT 9oC7{"$ٮ~Ar!1#VyFU`tݽ,7Q3ze EtؑI zepydK3t ?Exe%'߳"2cd/*4HA%GsAMŪ7P*F\P@[9BjS}[kq Xd(XC&AB8$mv> nQ\ "jLk|r3`Q2zC䐜MvDwL֖LX)[$ad޸1 ᡭB9Qݶ%ү}*bW4QEڼN)cSX7"xY|ƥ_>-84:Ix0䕏Ʈ, c?cbǤMkR@aRZ)\jX;3xJ_34xaԟ97G\6Mp7>cmq]^𧦖* Fs$nq뻮 v/F2=PX.ݟ'|PoO o$WЍ{Lu:fT[0+{n莶],8!L fCe熿Lvܲu F Bh6kR[0M]GJTܨ0K=(G{SϋD# |d 9QzhA`fz.VΫWpBȉ)j^`F>)d'Pߜ^89Bry4U d@<|N0 9Rp4In>O') |ij, 3J故|}/bvHwYkrt_n|zݕ^/- PL+]l/Ϭmsy"YUJ?1,w:l57"å ĕVh-"R :'$1g4;"zueN,#E,/v^]S%;8y5g#DDb:IY揷3RSw'Rt`9_1e-nIo?,й!S=}xPDI~@sW"%q4.v8AOSI9K: ¡OTE[E NM\%wZKd=ю+KkO )lPR}I#o@Xi͇V܈@4#J6#ON4{Ple3/Jnp +Ҕ$cyo}0(a 3p s"q?49AzTwd5+e&x]jؒt/<tPζL\Zzka#MkSj-|^@1&,Dv27z 9E<yrce%cAoX64mBOA&?K:baXk{*V]Bi"^#߭P~5`񟵍UȠ"l+`@O}e:fڽzU6k2W3J8zteǤ {C7j;Ƞrg7{%`V۰:V %Ή԰ H :m/)3q敀Q h;Y@9Ri!J|u6j}4姞Z%!65_V)bf [z =JW>0g " 5w2fpI'Ӽ |g%|4ՠnl =fћ\Coj*t-΂c/+9L˯Ijmyl 'GǷm s3)1lBV>2N[^6'+2Y~smحju߲'pR[}]07Ck(e$(MrÉ֯3-.O׉eBwmqY7Ob@'NUpjWJ347:L!* LhE~Gֿ +q61v.'wTvSd[VAI&L Hbۛo`Ҝ[b>O{C^/Ǧ&[xOh Ȃ !?-T鄰{|hdry ]!ƈ'kq`MO9rT"Lp z\N${B{)挋/`|0Mg~rx$Cu{T\l3|Ӂe60׺X\Gw,RVLS&ʤ11j6zdybǔ =p|A˜,iTQQ!eΔDŨqٔ[P_E%K$ͪ0#, 2vrUN@-IGCL.QBRde~YSѝ$bvĄK&/xHRC6+OD¸4З5q@Bnf }XyX#hSP@0k;byY z$3z|/DJ0SQ5׍(䒊!)<0-G&ܹ˅\ gmeȜ꫻~O. LӪ׻go`f=K nE4]0i%$.B"O ^`'1@߱.fX_2/斕R*km[iɪjtڌL!E< #Mi|9d$@}0YA> Iy,DkF lK5o!T~gW4YGS3OY3S"cG IEA57@ p)% 1'] 'kshhuc܉{̇\ 8{ 8K)ґv1Sf)w_e~!Ő/B!yiEıc~py4!a)Y°e+ȦO`hl,sxu9_ލ-Du>a{JPt`LO7(nr\iOE^9ɈǙtr#! .׌d$L!?SښR!.`2Bugi^/˔q>P r@&)wu@r_)ϿJL47>=-bZ׳qr2oZ`)Dfhߍ =zd-%YIشV5eRbN)`GlC<& 9XtsteA1>p2Uc>9 2k*7Cױ1 o%쑣~+.H@.54x-`d]t!PG BqāX>Hxc[Að~  mDb axl3Y9p;j8LPe鉒 (~KbOmr<0Tٺc۸2L7eBas[,FDUpL4h<wBbEתz76ŚSO13G ]'&GK}r=VQ)xda@ិmAAlڶ5Af:@ PQ\w HLTNInb TjIS\}25ƙ)HU|@&<+j~0SPgv5ʲHHaqzirfv2 g}tKwOιu ]Į>а@jRd]{t -v #x2%p JmkX' P{}۠NUyU]x54jpcg 4wY|[EHx 57;E岩u*od_OQX'( wZQ;*А?wOi_2Ipid]8AeCERx&i$Pjty_ޭ WB+@~ _n t*tn: l06ߴ^,Ke/Qs`ԨA8)5X?I 8huY[߿drZg̾|4| X~-}|5M?CI( ˧J#)Ҥ1z0 1j.BŀTKtsqʹ^t1/7r|w:$`G%WGED_47rq<$_4 FE-:k?>B=NcPی+pܚG lrJExC%WBN,frNO]twGl ʖSDVHQ͆Uj0HT@\{o&luX`RO47 ѷF +i%O /]@yWA;Od0ʉ3&]FcfHz/Y4h2AfIX>֭a&qȕX.}|}㭡u}k.Hl+c"bb#Ud mb´t a!B>)gݬqHCDFI? JyeC&f 4$h:i 98uyΦH)'/d=vUHH2Op^S(Ѿ6LDg`mN e"dS:`piߩÔ?mhv ޥbZj{h7nA/#'ggL4@mEDʐ#k%or6)Uu,,/\-ބ/o6^Ϩ[=pad,0w2j_ kp0_e]%@TLP?pW(K~Z%珸:.Hռ "u"d&`]7!xWg0Pr1đ /nifb;s_IwU!Zo薩Br(I6ud ZYP&-s, ^z4$[^WmoXDxڬ=R\0TTNFvg dw}^>Er=q>ˬ)z6SOva+Ϳ29 r#S VeӪ%Zww䁀Zi7jGC;JC1%v#&L9qCʿ%)>pgAפ-cW&Tlƒ, յY] kn#Xqu9_N4\;uZ*RC̼vPC@Pmw[ ٟ2(P2W}yw],Njy;^4V@Ze`{- '̂bA+iG}{}s%lUbRWWLީǞ+YgOEbDbBGl8їH 1 d;Q I}R0aL;RyAa0/Dх~, <M 8ەdy'9/Bu {>`aQ> _Y ~BF,CKobC@\~29׵mE &OtgP?*I4@zra("7?&B.fONv~;vc/Z t%"ʳp<o~=uD*OZM!qPU5KFYep<9Ph/.UnB%o=%abeXϷ7acc̶X@4(-&dg>[t uaW熈0C&('-KUdZ@J"#!* 'Z]<6K]urTH5{Tay~8<G^_yXhL@ZNalCeŬu5vZO[RX#93m<8DE(y&Q~qԡBX*4 (? ]4ݜ,Uq<(AYB*4q~Stbg0w&΄|8uztI.jDӯe tMCRlF  L2r,5ͰIeSUM"uJj˙}lC<޹^m]Miajot{E{$M黅WSwV13QVNa=QI"4i= bѠRxFAe* fψfK*B::Gԥx\"+ĵȥ~([U 2@c`j0 :mS~A/JࠫFrLku6S_bQIQR;Fzܠ:i z11ZBUR./# B{/oHe(Χ4 gĬ0nX)9xEӃ8f,(j{)SfπlpksmK+sWMuBd%Ԭ3ƓSixC@33]nTݰXb(w}{Iaէ**a*+$2 J Ӱ@n]N70|ISp9]I\"'u7%Шa>Q,p1_VWDF ^\ C?+õ`iT5ԜqBwŗϹ;mɂޑZ85O&Sׁ. @=+LS<<}Lِ NldsFԬ'-(}L~<_S<~/-W@[_1D`yq[]l?p\ lm wTUnW5{.|q[p:N/}-~f[3& ˯n=Y\KX=7Mq g6/ On}ү6.E{<Boت 6h3>&^ymS_Oͼ#3:3}]9m=[-=zn4gG* Q#:yޱ؁ ೪wYkdm8/a=$%+G?-mDgN'BLĥX=m X(̏",c:3DW,rLJxvⱪ!0_ vh૓]u/l-euNve{/ ɈeuL KٽWvy&4]w˒W>լJ*v#Y5u1IcDn|3>7D712] v`VJX[fLzI˸oR-(Hail%t\_ҕ~J(TۭX+qd[DUދ%48?}ˆKÿu<&1uPX`&p:e אl!?}a j/YwFg;t갦ƪGX(..#@|`w<'!< G ll6i^6U}ea>8dKET&5㮾gC^=W7nhaؘ1jɽmZY\fM4[? b4!PNp~d0vTI(ȍ sDpëTRޱonu.Rnd.;q?=(Kl&C%gd!ZTiGKG 7W;3DL/^ 8úRdY#$Ӗᒬ=cݶɂIⷦVUAںx؊zb!P&C4UdhEq5R;aX G e4N1xQ}ް̩T6M&PXibZ!Un3+X憦GFI:U,Z>u1|v1m& sRAi! Bž'W..VMN?HjMagm` c f`upx<6s=dwNġhP5,>wU+//3C:{=")k%x.*m`VۊJ+`6nRcl|kwd?L5F/[Dw n=nP'䌵JQ,gu_)__*MMmԶoH!qRR5D9fauT^_/XY=#݂b ~cFw%!I*ss?/8`d3ŵ0 sVd31zVu%4xi ϸEosjQv$ڴڍdv`yJ+U|,kyq;܆](wdm rmJslӔ|C_yDZwC BrJ^ H!õO= v>006(>6Л pO]K E=É䐶˃f% N`Ya5c*0D@m~sL.f֧g4jxu@^:~,Ct7%ٟ WXJhDe-+F%chsD[ERmdS7#ϳ $uWtʫJ;D\]AQsvi8hr# *T=_"dr|Bۈd~#j"\]{$m$06Хdr m$[sm[*Rb{*ZVR>v{[*Z̕N5Q# lP09W`15ۿLK@PbiA`'@F jxtչ@u$#cۯ ِ@Z\|"EuPz!E( 'AC,,m4ƍ/}DSi7,Ցlqcm2 (yQ0J*n+*[ou E(ԃnc|A#o@V_E$ !b7:*;d:ţ(tb,7.0F_FY< yL В]-Nz(ӽ.F=먆gEKP$ $%;C>##vt|U;|ogQ㡁uj6 RmܗIiP1L{>&@.b夘v;hqմ(c[m Έ3,짊}Q*9i.D0gOu8MohF;^ 6]nJ|lE4ʦ_=ŁjH[$`T 5JN mMoDvwhI> 홊iab"U IVl<[{c 歖um!+**ѤiyfhCqW+zM߯,VDCDa$כ~s@gkkm|rya[>:wk+}.y.To'T6Y(%ʡJ o2;Y-,$ќ":,;)G)[vo{R*Pu.j9EW+VPX<7A?6/PyEmD\ouB \!Yőérɟt.01ȝd|p\SW^0A>GA4fK֡@]؂-3'OjN(Ax{ʧ(Pyt֒@,>S! ߧϊ)@m5ANnCy?3Bj/\l\\2VN}5:`#v~jP[a0yd iGKѫ.=1DY9G.3x 7x:d{DK{x%j.!K0Jfջ=Z.i$)lE8P<,ڻGR@kYI!c/ { y'+'Г(F֊xr3/._YcSklF9Y oBĵ)tBEdC.d+CSDy哇s:|jG,6O.@(W kh-@qY.ʛCh21cp)]R2WStWNJvշ7OPd4<@oܸ9s C,)t.b|!LpuCe0ZeU1(ϗb`epX J@8DxZ''Ք{qN1< sZ_Il *~+<;Dd+oن^\W)hP'lTx_m0IN9^g<xbj_otAP[JFkw1!W';Dbl>MeW;#jbڛXP #WStt89]ʍ+|͍H8HdC%T _Lmȉ/j]tWzlATgiK_qodMA;zĜ||W!cƛ KFqW,F*jt(H(E~(QEsqa^3@Zn#bTئz `L*NNi+s^9xU|nW;/Y\1hpq%h2N}B@pMYpR6.2OtX! iU!hP豌汁a9ՕM:uh!qkΡT(#{khӕ1wUK3!o#[}c(yp ĝ4}ҏ`s[pԯ(PckLb+%jU#}2ٽ`Tj[ly^},VK Oى£M^D; ~}U"pq&]v.Do)@jlR*dz`]>Y# ?kZ3%W#b?+R8mm!IJ,Z_y 7?bPLX܆Y;~f,WAfky\>~6Ǭ*-!+B u'كWinOy1.J1RQ1Tm:Ta*K0X<-2ɺG,7TSkl/Ѡ@Ѳx;ӄj\m_;Atu'_% 1VU;ajZ#څK0(`N B)P{]֟P mr(b~7,;ppܟ1Zw 9BA.*5V#xxr~W ȖQUrBPz%B~tNȈCk@dEx4^<$;Ty"ߌ.e*~[r,?+NDFQo@_UPȈdQޒJBl"Ep]$5{ms:ʘfm+2Z-ΐ9}/ '\C;[4BiܠLeG3YhKV;z{CފBiԢ}MB䋙MbR/)fL@~"yu2)&عKHPەIhD]I?qVhwǯ}C}Æqf£+( 5fwu2" Rem~)`1ܖx:^8܌~7 WR6زbw'<N빠.aS_]al6]#׽'{Xm`ߜӪ޼M*RXS\\hXc۶­W`Ve)QtKUzӄv US YU}р~)6'W#j:.@hxԕ;t`?: j_&cy2B ʣ`P\5^ùqEds˖uGlҺOt-ݯ_ ܓGOU"rA6ek@7 6>'cj9AL!}? d>QKDQgBX>ut#|G˨fzM#|L 4kEMׇzjO/y1ۤ@e' W! ܰ4?MDzG 'ew@({f3BN73~q^`z&t BL;0H%pf @3Gw?V٥6FuxWsW'sE~gkj&3vҿ37h/&V.(rϩol12K{^pLetaa yo6Pچ,jrWK~9ja Qѵ_{La2S3 mc 7D紭vLiEk`r|xh< QE6BMQ1.Cy%hNuu4W]&OGEo'oiL @t/lP6{b|ƗjNf֞xcK)g|IdD*RBrY˜p3I6g3m<9t$ f7tOWUs[O>5A [Qk׬a]dLOm36]I릲6rWTЊOs#u yyM !Ksdg3}܅SM3b@ 5Ā&y5$ -+@w6@_򴄔~Ew%}a 'wJm*qS ]tttJfRSiĻL)*x1+ɞ# {5^GDz91}8ˡB[Kk}7®wWpgo8BMV2N>0q%7!-'Rna \pRͦO} %VHo"7k{ I$\F6O6_x5!SRS$f' Q^\HQ~SvA%gՈ!rcJՐ'{\d ) "A:D-+@0KԎRMjK&')E녩pbQMiRL Qk>H>~.7ƽBd)p묜5)I'ҊPLr|69wTpkA7>8<nJDڑeN/Е@nmi;@ +YG0˶_i.Sqd`x&H'(_P8?~!)rvPBGSh $QⳒ9uD(YBq.dƸ܃6 If1˄W15櫩’Zwa;IGf^Cpk*<\ݐJS8Gm?ְΥ5353qloOTaw!4MkLt#e/#=<71 nv^0ӹx]ksO'6tSn n=ǹy~Zօ[^{JT|A17uotyMw#")=•8#]%P4 _Fb.]?Hd"d@,7wk,ҕ,r `S?(~d`o)SoMc2֫.'ߪe`(H j lBQv_DRbYFno؎+βf?MTGD)2xwӠ0]8FF#VY 0|4/} jdCpYEZ㨶%tr۩-5{(PAk0!J#Rru-uMQ6p~!*ۇM{ېx,EU|Y MgV&jkT6-4:Af Uo G?hm;q`ȎXaq1?;śo`9xX(D̑#,7.I"b~i*=}2g7mKF}aPrXމ3*켛GEfߌW|"7p-e/+w3+J"T㣁! М)cHg/C~QA;0A7ﺱ/oT:4${SUᖃr`qtT`nC"23r>YEjrK ?5Ri ș r?O "V@jRXex:4xj2й K Zy5۳jR*R8d5#S pE٤^o籛6D;ɸ[m݂BuyԪhóuXדs~݊D֘fC5 EHr<;:Cz SfOE{NO=9Xc/Ź2r0GSmkJs2(" !z c$Curj_Ѽm'9. cFHnɊtȒ.LЛ2ȷV|_vr\dY:<;دHs=f)_q /͜M *FQ~V5 B+3FL,v C qGLɢc Ή7rxOzC*ō21>pUfU꙰Nhķ_v'_(c_O{R}+(RC)DRpA7F>#ܴ4>f3[ޜK\g}[ 4ݴ}ϻGH,MR8R6BWIo[&VqzJ ϟ7"|at'xQ>9Ms EIP.2bHs{Io::*e|![g3^rIeSڱr5|r8>-iQ_hfV6BO͚j2_"1r{WC~寗oskP_6:JJzxs>=Z*O>`'oRbpAp&-G,=Yh`K:0 z= tS_)v}N8>!esj`\?53_BVf@ҷ mzz2;.F[QkRcJ9%dlV^(#5KҬ6 EF *yD!_C,}75'&$ր̹`v)\7kƠǥ057юW˫ %ˊ;)1TcRj%O8Z!(qAi+t/5O5/Z]}1?Sd&?o O3 {6UNw9Qgj/cu`!L؏{4.k"&D3z.V!d%]ʡ8:|CZ~@~2F<@-2 #p6hѡ(Vq~Zإl PJN)^ 8@}f@ۯf\HeňmtD:݇9 8ӛì9:ڄzz*/4[Ma^r+l ,3f(l^]!)+գќse)[Am=BX53;~xL*F7>+>~AA,a$?KrƔI1790AYV]Eb6啦^;cNK&r#TJǶy0ixc,W 3-pՏџ=vf:90k'U ]B W9hUһf%Xrv y51e2^/3U6%.6NɹnX.gRT X _qiԥ&7ۊ%l ,dLGɡCɹ#/N/tpH rIي+|8̠!?d/KH . z ݎT5 @z7gF8~<|Q:=-sGL(Zk{\-nm+ڡ%寰'ыtt^ˇ ,GֿJga{დqr2,!L,!Y PK"xx꿟 {0 ^W@/ɯzq#PF&^fn8!ؔ2ESi0 J_`\->tEՄ툱۱#x1JyC 'F*?к֖'c'ݓ)IG:@I}[ J\{1K׽'d,lԀ;-G32@tc̨PUPDΡږ .أPOT=<PӔ2>h숃v&*!אƮT#xQf)epf.YS졊=DZgxtAG%>6&k`<ҕN⤺gM@GQ5)Dj)3>W~#0+$Qn$h"ݪg>epp#,z ߋdXՂf $5c$T Εa*ߚ+U)$JnpqF9|m"M@@S :%09.OGq)z| X+~[цP>!/ۂؽ#쇀UQ%UnAy3;LcW4 ;,I3Tm qPS[6*N'45af 5cQ3뵂$פвZԡ+@Y.PiܣJRb1~q0pF6ҩ}hl.a$bi}30Ͻ|_7-3GwfGnk<)o3N{3 oT#L 9T |4& [iy3w_WXlRӳB_65P~ %<6>j)i"]@)% KZvr58"c f N).ckK1wN@e@'WIu⑼P5Z GBNjNbQ<Y<m0S{BLZ/2l`Ơ>)aT -ؒ>MgJI,^`]R}$6FF !\:S~;w]jh k!`lKT½)$#Ă$x>nwJ2Bv;D7.j@5j-qKD2WcYAOҥ[ƈšs𛚙w:vNca\m ~?`v^?I-5<߉80QсDtw>Kϱ=@3g㼚OD`ܙQR_ve 6UzA^w, %Vy~NR$b{݌>L(;逿Q~WO2$ѭZP6>oz 5{Z?C+x G,1>:R}CalЈ 23$VC ESd' I)eUiޤJZ]g5Szl3R-o{"#^v@CklTkؐpmHRF:0H4KYYe>1Ybbr4+"X³=p$.o*v*l[/t_}X7g o_W|BH#Yrt3O>/(Im:U|3% 2*8%[˳t-}}n$p7lN~Џ@6_(9y!Sd+c)]q sݱVJ,$NّK N*'$[cK,3ȋW _f z6\QLg]ŕ=zeD)冊wmLqB =G rχ>\rn>+z侀uQJ?i*/#'X{mWfO{"0럿 p%wGL&xmG)ܱ MYF !Gpn$GH`XrTsό p%Ly#zkW,DYP SbBC>]$`ɶRbgЏc纼saKA@`k >ѱ8aR;#u2~H`t3ֈ<=%./8b(GE 6ȚreNr@ @f|0u@j#EJgg5ܕ±:&*uYNvH6ץՓ;=Q"NF,lBⰆԦz__ b<Ի`x+^uJp5iԍ+ 'x1b9giYf#-AhG{א({#Z 6|$ k?{Ym Cf902"ԅ*gTL? '& `حERНTI~ "N Y/({jsKDۂݘ 4D f41߉Ru[dxa]է0+z 4pQ 表rMY/atN͚* 4LpQN:BM+2cV:Vq{C!NQ 8վ~_8uQpUtr1d\ŚȺ\]KrFsJ*dvv -1[)G檰ixϱsUǸ1N눑nKXUݭ")ʪ5Hi6,)WYj:ΙBY.rY!of 6_q;uEɕ0#W/9F{5ekPjIQZ44զ\2bY.P}8j@ tn{vڻUhqRMn@V{.uA/wC\n?LH8F 3v9WZŸI hzw :Ƿ"e=TOm\j!ўB6^6!GT}og^2HVY]qM_wgYnHP0GJ4si NKӰc$MF( :-=3NZKon^S7OۛDJk"+zAGW9gp\VT9yRdo}V٬<2kӮy ȁ"7wm'$ˤدs 8ɼ:'csO]_Yv'ڌ%~H! X^Uy0H(rjn>%{LX[ =2SPJd+OQ'C幺p*GDR~("5:%YŃwѹ˫л}uw2 En@1 ˅0qu]{΃Gm*v2[snGTd(T"xc{y٭계[+&86v x<'pDqOHj$ԍY RP0Zp\X0,4t>ݴo"f ̵q,{dUr 1v~kV`(mU.c cO|9!^:b`Լiu( :Vҧ ]kҠ~)3/Ȭn3G~"dE(䪅vb`(C@UnQ \XyRF bBc nܘ 5;YڒeUx k<Yl_U,Gi|D_m_ cjW)*:dRJs@m9!1ygsL=Ï2j(z0m4k_d~r~Tays^Ǣ\ Y5R/0 e6{ߖ@]6> ݼѱ ^O; $ftø%jWdg0H!OY 7ױz-=5TX: ͯg} b1]GBdt^&_CN掳!B9n&tjp<~|w>\<Ӱ;͍Sk[%]q9B'̊j ū0I@t$d[䆲i #$12i.f1VPF ݪ[N~]JƦb@`͚MƧ[86OMМ̣'䜋A܊9 .N2}䬛iih܍-I ˳I~FH|K#k̄wqcUrQP5d Dž(Q#6nPҡ ~/(*YI;J&ὗc{ s*!ƻQN< j!\Z%qY i1 1\dhڜ4/ji m `7Q*S MH\E$3tKqXZL+[Ps(DUv Z0!gE0qy]БK 4CpD汁ך2o~4?EM iXb`֛Q%p cE =e f6C?wRNV mGUI5I:bsWAFa9㷾&fiahlkVwi1D% ~hJq5+v$[ZAג-Ji[~~ְM;8Z-7G. 'c.10WOAٗ$se-.C DWغiMD }5wHX`x *VSik 525H,Z1Ќ,A mI$Q%|^[\cQRLJW:#no6U ϐ}'Lxhm/Mnm&nPRۂe<C}OJ.m#iqy[?|jcGrK1PN|TF[n_ /yx%̗һd1ZYW$+_UϘ7YP7p cA"טybfYqךp%?p6ыzIˀp'Ol$6BvxqsӈMbdY]|n;iH TPY<)c8l}sD\ %7̖iXI$6~c!T1!&C/Vqsfן8k)&tFCe!޷r=Qy}{LBY muϬZM"fQH0knF~ E?emf6\Ii"ʝ c٬3|9 ˈo8]*DuU 47W}[l7 مV8Ա I16x,VOfȧZy. ؉hTIZke޺4 VdL9mYr﹜" B0jkgw-A?pˤ%NZo yIowAT^}9Xz c#)=3aH_W*(wפ;U#8+3Ѝ DFc\%ooJb/n\3^vv䚲j/n nT\wGR8KtAac fbxeZtAmC{,RŻ.d>;66QZK@+Dm5 ݐ8YHALnr2dٶOLZ4Y]<01]λ⭨J72lq>*0e*\cd 8fv R%0^Zt(Nn;`0:$x7Fo;\ YHnnJl[1$T!UzR6G^]"U4xPgm!2-f8O˺N ek0C]1aH"xy!Vl8g]zhڶ! ]Y4] uzO8t9+(WŒ` mėԉZh5KJz{OCu:e)~G:)A͆9{DS\jXzbz#F?؜׫Hl % -GQ]3]wh@IK'dW!&G۰ͬ>w !nIqߛw:w Q0X.폷$c+"ދ QiȂCR /e{ȁCr 'u"ͽb X'jHFBoB6LܱFdR<]t9`\4Vd4ewOqOoryu:L[7S~XWh _I '\ fn5@YnůmՍ[Fۈ.xv b gM!F-`2f=8a>T@Mۡa2smCL:y蟧[P̗%Rwfp2\ ;_ ՝|>g{,|q t"YtEi@͎C(𕲒{!F[]:Ddzb wg2vùNɒ&]*[T\lʾ9⥟?Ä_jIy XnS FSsVXnq\dVh_dAH'5K{ DZq[݌簔[5%զԙ;yzV$p ܴ|Ɂ>ꎗ#s2Mp4#;!jF]^,xƎj2(9e ę)sPW{5HkG^ ϰ=<`hXoCCr[%ÍWDF/:v)J 6*v{1)!8hjdOc/91 u C!S $ڃPl}F=VT( >9]ˍ-ԍ*9|<@BH*4-yǕ'\͡h~9 =|M5,SJfQv5-ss?_cGc˜p6MOB4GK~[ Ꮹ1Nm2^[.{|S*9W9Fߴ'f1O%YU"($D먮 4Ff=;jzxdRZ22c䎊_6镳xOV5{S' u.ࣗ12Ts؏?H.l҆Moei #2 |/-hox6cyz0K{]"n"FMv2% 5ndeQUT vI%b,t5vs Zq؋d5$Z W &s({.@ʝeɠ?X(}Rol bM4 PVAjb;8OY^$6xӐuX<6 t=ĸ}Scnoʙ sqw@\;Кctv[yj|J j"-,:h]**W1sÉ g`~5dw\T)ML6F:;iNwVtNkBXMR}DQ9VV @ ͉~oScښBr?zk c⚞?~/yL0wz[nJ60/*oE6^ϬqSq})ŹVEf}2%S8@O7x/3Q=cPԽQ3-4CM!{]C+w߮=c2|AOqm[ˇ' :'Fg㠅B,xZBƀҬ Vp^m/'n/ەذ*/85+|kҶv'k9 /Q#Mo{QicYsʑb saBR+v=x* 6fCB¦VQi.{^uRtň-kQ* \u8Z@QǾ0W~!#+zeps(SSDz9 ~H kV^^Glo֔C],^Cu= g{rh,8VP _h)1=bt<;{62W5Kر15޶U*=Q96ߓAt@C`2KX)2V v `=& {z9Oߨ3;s]Rs]]ЍŚoGV+XM%~wΚiS+D=3\"6,5[q" n7-4{^\+O0Z0R+ iHS( wq5ik;T%{G#[Țy|GJj3䣁$[coʀX`@ ˮ̆PθF֦EH`%Ätg۷:Uz5F( reMSdI=qpu43GEj+Õx h +3+GpG:Z3q󋃌`.^<X`mZ8[wbz$諱Dӟ+[\-XAgkr`$\/c@֫5;W4[5͌}aP۶.DSc JsxӒ4$7bj % ϟtqMD{cp]GU:Hk D˗!$8`<m D鹚QNWV u srP!Tڰ܈d{7Ø]#_V9r E*"[LqB[H߮+)N)Ԓа*|(xϳ3:L{Ύ4a2pL&# Ͼ4( 7$l|x mMHzN _ENum~s֘U7:lca=R;i+m:+X_ao_R7<Ǥt@z% tnFi:ji X"c~ŻA^l0XM j4<ϫ<+gk۸C铖l$uҚց\}ؖlݻĽރa``5 l}SOb`3J3XGGh 1<8~.a KA h 1頁hxSl}ZqQU jv5+唟E<,C1s\;я1 { VIN0Q朻%Du`lr~8KAОCz xw%9vMJ C޲{%2DtYnsT1?;c4U 2<8{]KdhpZ=",[3mGt6Ӣ/3Q[ ʡZ|j[e =Jpa2[ Jҥ̍.*p&i#d=, Ŷ1k[E? ZLs+VO򯩬6p#.Ig`8T!֍շ?:R|Zt> ⨓8'Ki u5]#TU>!YPO%I0Ngfie~5ĭlov*Mdltz!JIM6گ S/?u`V96.lh3n 3) ]L<g^(Ck`F l*sCұs27seaNe5. ߾<I1$|-Qp}d9~>AYơFX38 2Z´(:GUOO):9)16";ZE=Ff/1 +38xv$p\gKLNBuQ19tu*Z(ـ_;Ufg|>ng[9N4-B8| wx"BMȝO X\+3$WMIL.^+PhѨPSŲ#Lrٰe5@Xr8mSvp0QyCLs5n/c*@E9A${Kφb^})v'ԘDuz<2U3 ۈr;`'R^i`@߿k=}+hRoã #:u"$.dl@+aLΨ`Io-Y֚Ǩ5t}wP[DΊ @@1xD0Ebi5GNҁi/ Hcm5"-4HTmxYnFI'hJQ)RV/^Hkj .7%n˕E⥴wX) mJ~dmRi:+#ƬռWL>,|ށ̱:ۚF(67bŲey$0^S5m['Oqe$LzbH >TW>(~Z "B^ziWRDOlD1ۯ(/Ά›=B+,0I9ΪSvgx@NJkt_LiK,JY~O+m 3cy]9M wˎQ m8<&8ۑg-s rurRL3}ܞ;qUdZha_+9_JK TrEuڄ[ϭQ%W l[;z촞eZ_k+pȊ'oPŦ7z$yt\G_L?6rXQt?{~<Ł-"J߁!1佰ҌW7Oؒ`ASfD/pQ)$#EC;'S5AgD_i)ʃAQ~P{MQEJQhҐWh\#5]?-,9TZ-Bh Z|9܆gmhq^{ l*ZQ !3r>dBЛN< Zd7ġ I9n/r:f/&/ൻ³!ğ!{0A2$/_-:T >JN)]XK߀ Q  uL@'qȉJm+R`UՊ#FGOfـPq uu,,z+7-LSy"{N}䛗:4~nj~̴yR9ؾ (dPG(.S>.wGxCo(&;j`&|QԂ3^h`4q|Ӎ=$"Ejvm~<V3J_^t>hUWBfd5fS'Oä< \҃ȉ2 +EHk^Q&~k;}6 H? PsX{'l\MS(3Xi핬%$uePUMMڛgOƠ Mn{ٝ !VkIFQ:j4 ڗPw9*ynmn0(~ RƝw&GyIhȑJMmR H qTr-yYdp Ddr@y)`leK+ I]noTm{.n𰉧>rC h,Fz Cdpo|LMB< wH̳W 4OcT^pnE9`ݝ>3ᐭBmG l|)fλh|0'~Pt|i&m'H|eC-*\@hmQ۪;$8rRteCȎ?q]I͜Vd)o%^"f8h-a A螅!7!_ , -ߠK;aNo !lFK_7!1~wI%b٤qTF5 6.<<65Eu "D ·eHuX谲jI"4Jy{Zd$S+.R pW"GlVSKa9j*X}j iU>͔"7-浵*` ƪU7-w[_Dȱ_|LiC Ux>ELFN)| h 3|')p-a SRT@+O!"l9W$-ȨG}ZHTirj%ȫoQq[F#fZbsKjNiwuv ߄*_FV8[[A~TY-Tw/A1Lko \Wؠ rn|c^;;LU::|XlJpJJ4e;.5"U؉,Cf*")1A+ż1nAM݋ H@ /4HT]H 0k;iȪux S7cY# P0(sci8.Hvas$Wf볯137AQ,|!6kޞ&gҖ|i#^rtH3+6gC|RsqP7tRz'o!}D"Z %9 G^h~VLq7v,dD#\# OO5ݥDӍc&U?LX$"=;on&X&<2wZaϡ2KO{#Xy[O`{]" KX;WJeA'`O,RXh\pL-8#%jE9QlqܬPYUzA,!^Xz,ia rwm7Y99*\V }qw #t+9Dn4^{^mIgʯ\א:ZYd,fd Rq6hn+<ۃ"j׀ &lmAP}U†?bsLX.ʱ3]v#匇"X v(#vTl+Bn&ο&ݢM災;>~<ƌ/'uknvMY9o:0᱘, ?3GyE+6q׋(Yݴ|!#( h[OAԥ;Xe`;oC|{R}|4N`ZWGQ[%HW]@s/%Rb0Wt%/rTK ldhj{l PR@mDSsCB68.Z󞵋dsiX`zN}VrsX*}Qܤ؀r҂3E 1PEaNx<7s?QZ dz3a=Ή &|6YGQ73,렝~m-! ﭽ[S˺\Zy|OuL7 +ضE7q ;=TA@4y&t|*)>Oo]a*vǣ]<{I&!XYo~p'q.|H!-)UJ"VGj%G u8wv=1EWú,)b|[$ЊLzi>:=/u@+${F>  kQ1]q~ HSAG ;cZ7)cx fkɮj\eS,fCqKV,df> lx3ݟḷGtLvHcD ?ޟq#!^:H?* rDLwZb2yhćsΑ JMrw=(DT& d/ BO2~S{lGX,]y8I\fJd&$*BT<ȟ̈GМ7ShL\{ɪa(S~9`)oC#zhkXE :lI\K)'!Ρ{d\ܸjgٳEa/'k NZ=R 6 6i7^堜涫Td*M=.s-+FHA D *qV(%0P1E$/CXPrmuPS7 RȜledVq+;e{T)f׸fHRG-ىڬ]?BM`Z?[ˊoE G#TSt ˴[T: \="mH%Lw"2ɲ4x3_dU'NuI셊_M}/աEREڮ5nzy >`FA5!pL[9pBIB~@_&!3^OԄZ %Rp֎'r(22IpUZ Xp|[#.9§EvFE?H>L:ꌳw-R [dCoSH ߠdyhc>\ dH n f_^LNzcQpXLHU0t*u,ն`v=ĕ7™i2 v, 9p;x>sK]Wf}\;&W[1XE >VtPVH 7Sn;Pk-eƕQKPuLhd_!=N\dۅ-eidSן>[q|5Z)\+zq%YmB/ lCTGrgoXS. * |b {\˰1hY18۔4]os:A-jHKC3cLm2kISPМ% zPYBTZ#-з&!pc(!~J [S6I(7tp5ZGhlی_;@ZGF}ip+H7<[EKO{"&G,x\7JF!λOTJfjCZ1B[W) )"FԄ`⼃eq>{*E&Fjn,jc+-#01E_?VL9X%jU.]- =»T[/ .T[_X1D;g6YwI)~XZ Ye& tG`V=D>iy`MNU#:\ۜV,fr'(5|EӟS9~<.Mcڕ}QQt:$?B3> h.B1Nt]~A9K:M6Wh>!I*MklBv;{US(aK{{nhc߲: he}#S+M@kaȕxQT3dݲ½{; ­9Ӿ:;$XyC3Vq%qibFRorϜ%*U-Y[^D` O9\ фYhL~ {sDt B;xp |r– nQKloc'P^-DsSN&_ؕ[5m И(aاsB|ӏoH⼫z#ǗvyۘGw;] j6M%FQ3BQܦ.b~76*5HAno_-'oO]59mUGpGmRЮ>Ta~%0~Pܑt}Ez+0SQJeQBfmB>OuxDM,?d2B Ս-)0v0uW{E^kmGLC|Wj4AY݂.B6@Gy^#MTTrMo?1ڭ^cf0iWTFʲ&ںp y>?NtBFe Ҍ"]`~p5Hz[gf֚k k"ѯ\e'CCG>zRx3b0먕GCcP]\5%j"^q:|{{ ȞOr*|'džW1_ Eӆb]#r >7U*[!-D iKQx yݍiPЙFc8A0#_91/ L0{% )$3Fy dj:⤤?&g?`n=j6^-RQTP5 JNSnTPMȷث9,>P e}3)or2Lx> ̑Vq}KͰƁC#Z3#}wю{~w)3᳡IǛU#ZXюmgeb Sj9^d@#l^ovuw&_;%)>M&'(jdÀU,-< 9z6e [ (>eЛOvߚw ]jo'u^(FviFC#TEiAnv:F%_,LƲ3n"^#O517c>N*U~&7w6̹$N"oZ>\X6>GВ(J]TMenNTTOEi#a-&goņHA]%tmDZ"+%ać;VM9y- 1A4q>y[|S:\r& _Q7q!6y :{\l$s%2UM kf=E$?0߻TE9J 5s䧢ք42|lqf'iIdp;\\'FFKtfg1o+@VDsjT=pgγĉ}wW4}{_my襃&%A#di%rڣ`nbDM粸%!+ [}ıZ JT8f!lג=Cz&F2ժ&vxK^>Rx ՌԞ{u:JH.j`1CJ]v{LpbƴlU8?vx98u9.6(t[@5NvVO(q^omN#;6b"Ôo3SޭK ]A()fuL,h_ )wH,ěrHMI3!F0-j w%7f_EN'NFaܘ_@ GX; yJr3$v8?Ŋ@KwN';xY94 Y'kKUX{#DI3SQ8}9>?4vVga D *d"m"J9)i G{Q1|oҪ#+NDVLUUSQl*Dbsj섬xhz417w!|} *ZW~<1amhƂHZs`Y /pi|Q/I >53_ U_hj`)Lےf$];j_ ǛXֶ{9gpkg31SdzzK%>(K|YUB(i|ؕX.M˜s7 e:U8]Gx)L-Mo||`5tL4IͶr YC=P)HPДWPt`l` 8!tl)A"t5E<] dHQV'ǐ!f_ԫ7k.1mɇ9:PWGE-}|m&Șx lč%_ WU2#8M)'ZşsUמ'UT)haC1({[+3 r̂u|iX>ҧY!n5'>RM𚲉xܦQ$r܍jMq )3}3DWu[j^j]Ps7 *\b34ati!'^O$ YZ