audit-3.0.6-150400.4.16.1 < > , e`p9| F?_i<)X2fE79~TY=aY˛7e>şhQ o}$\ IzQ
q? e Jl~wW枈 Ք$H4WNgnH@GyF13f1 "Sz;4Ѱܟu2ީV+B*`&-99G6M(_nI 6A*p6%=\cw kPn긒N(Q۽ Н@yhe\!V > L < ? , d A & 8 N ` [ [ [
[ [ 1 [
1 [ 3X [ 5 [ 6 7 [ 8 8 9 : ( ; 8 ; & 9 ; & : >~ & = >
? @ F % G < [ H [ I [ X p Y | \ [ ] $ [ ^ b c ) d e f l u [ v < w [ x \ [ y 9 z ( C audit 3.0.6 150400.4.16.1 User Space Tools for Kernel Auditing The audit package contains the user space utilities for storing and
processing the audit records generated by the audit subsystem in the
Linux kernel. e`h04-armsrv1 (\SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Monitoring https://people.redhat.com/sgrubb/audit/ linux aarch64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in auditd.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in augenrules.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi # Save existing audit files if any (from old locations)
if [ -f /etc/auditd.conf ]; then
mv /etc/audit/auditd.conf /etc/audit/auditd.conf.new
mv /etc/auditd.conf /etc/audit/auditd.conf
fi
if [ -f /etc/audit.rules ]; then
mv /etc/audit.rules /etc/audit/audit.rules
elif [ ! -f /etc/audit/audit.rules ]; then
cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in auditd.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in augenrules.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable auditd.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop auditd.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable augenrules.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop augenrules.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in auditd.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart auditd.service
) || :
fi
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in augenrules.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart augenrules.service
) || :
fi
fi / f @ ] M G / n : Q 2 0 C ' # F F V +` X FH t R 6
Q D A聤A聠A聠큤AA큤A큤A큤A聠A e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`aW9aW9aW9e`aW9e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e` c90c9e248efa3381f9344c507450cdf21849945f775d7c59291b6ab54dad830c d9953f20b2be7c063e714b8d2a4895472733fc3d94bcf866e40529afc91b8726 b7c3e851e8901bc6b2895a6be8abe38887ea4bf8bcc9bf2699bf940c7974b567 2526e4ae01cd81c3ab2d59bfcc8bf3f6828d1e5eb3bd791d009b869f97d1f20c 6706201085e33dc29725b0bfa2c7b7d1f2e4083fda0c6b3297b70099e9fec3e9 7478be2ea509ee5c284b13a203455063f9318a62d216e1b903aa3338dfd2061a 3e6daba298bd163a20f6e401528b8993a8a49d8d30172244f180b338d0291409 7a7088d256886604ae9e40ef3935ed6743cf1b767b5afc10df5b7177f7febb8b 18a5171709b0c5d294c9c957a31231d9a94089db22936b1a4a0ce252fccee098 1b47e487c48d2efaab7e1eb0ad673a97aedab4bbcd3fe085f2d8528d56cefb95 d097e9557c8e779146638c65fefcbd6362694e39a4ee81000e257b32450e697a 91eb50312e05c6f542a3ab03d0987c9617a280c38f7a8af9625075f96d758bec 78f668b406dc23de881b2f9407042f01af7a65032cfd088b2e87d648644515d1 6f45b87227a2992342a0717322382f3a1c36b31cfddf3ec579fae75d6530fcca 703e57e8cd6f64bdb5631b18ffdc18cce824c6e9879f82d90b4c3a001ede7756 9ab2fcff21243d04866f194b80473d04dae4f80ef0040e763d79ff2d4fb692cb 1c6e5c2112feb3f24289b2f485f567efd2172de0ee44ede50bc267f9c5d6d8d7 3b950f95cd1eb4663f313876e1378d9e52afa230d8257053497510056f84257e 54c2cebdaadfb928f7327cc066218e38743f0ff94d02fe162a7a415e148d23a8 6706201085e33dc29725b0bfa2c7b7d1f2e4083fda0c6b3297b70099e9fec3e9 5aba151df1a4026ac2bdb4da8652d47c083b63fc5db96ecbbeaf98223ea7db2f 5fe258398c4e2a79a1a4a996c262df303c497c444fc29b630028c6bcff8a0680 206f8340e59187c1a75b161796d6a5711bb9fcc72784b33dfd9c035a9d127b5a da083a4565d649a86f0fa56d1ed0b686ba78da80a24b290924b9da9ff30743d4 d8a12f8a49f111b7aac15f6cac6bc38926d7dc9611691cc290ad23c7b877f341 0aca9a37a27583d8bb49d99b6a30f28e04958ac656d35f9b217a4ffaf7c48042 d51b846cfb48c1f6eabc2969db872dccfef2a942beafdab7fcb5e79e35b67781 95d76e614f68398ad13b48a0f523306aa0bb38aaea285b88d4225fdf69069cf6 7bc05cbcfde0664abc759bad2fa8577681007d1db77b0bf5a562b1d52f8b0c79 c97448ae2dcdbedb4c50464bfcec2a56886314d1ba8ee002f6bf63ec093b1b6b dc6f182ce7a0195e63f1ce60e0812c601e38de022fb8baf03ad6560e78fd73ca caeb9a7f4bb77ab89027f11789e02eb6e9b4f2fc4346eeaea25efe1730d83fe6 7883a1f395d181e5da850ff77b3a6c69eec5ab68d24e71da1b8f5b5212954599 d8267adb81be2e6fffb0b86341297ef0806261113fc59e29a7bf87a4e5dea0d8 1eb6a682e840cb04f611ab5f768b65d1f41c898e11ad3c6d0545d03562c03ad0 2c4e9dbd58405bc275e7e187d6ec2eb9436aa54073f557b83ef6e4a06a55fc53 ddd91b8bb35bb9559163c6402ebcd3b06e7ecf84a1bb6d5aed89a3f94f4109cd 3cf174b6005bfe0fa6cc3aa256bc96a7d335bb9cd554dbc8dda3c916a8f497de 1d6a69c3d93637b3bc427c10717d2fc9a6a786b97f33b718c4ce34c2ebe61cb5 7eb41a6aaf6737c2571b6424fae7fa53af4b41a9115b6c5732a5778ccd9900ad c57e70e8785c8465bd22d1cf832c6c1d2c29c67afdb10ec2e338de556e18da83 a6d974558dae7b6d24edf083a0d72bb8d15ac463da0717fcd854235168390033 c8e5cc97e0b04dce3524a534a85f7005066a284a2d38a104a2f87072d83e3830 f36c7a49f882792bb7a15d2d9d388117d14fe09cfc25712972930db6663fe894 76b309408dd3ca1876baaecb0117fec0f76b6fd8bcc968e2cc616d95dacbcba2 b932715f5989044c0e238fb88ccb5caa39f9554f992bc38cc8ddba55c622c3f3 0b7754e8ee41c0f579e828502b9d19cceac1db18ef740a80589e59cd35dfc1a5 34bf22df5c3e2121b431913a3afe6397e30b24453a7ecb7844b17799984895eb 88fe75a3bcb807fad74cd020e6e04347f7dbd3ef16de314c0c6a976cdde0dda0 93222d0d49483ff9c6a3dc9879992e7f61404efb65373eaab12a4b87ef3da02a 0761b60c49e34bb46ce344d84d120d62f27d593774d34ef1eddbc85b7a8b15ea 5fc54d4981a480e15bc6e1f7e703eeca446cc5b95cc424459c24c40013020d1d 52e95855b574e7230ae69fa1ae088a9d582ba7bb493b473d5f10e67f658ae772 00e0926039f166a9f8d5b0b825e33358c7f2c1ccc6f86067ba2f684c26d13f95 c06136de99e9a6628e4c5a2b007c4f028fcfcef23830a5e58557a7520d8c7a27 154100806c1128a8d0456c95bb70f934dc9ceab2e9b6ecb92f764eb8d4924b12 8655d58e59eb7420d5182aa76017daf40452ebabc1a5131de0a7320aeeee2368 32b1062f7da84967e7019d01ab805935caa7ab7321a7ced0e30ebe75e5df1670 902053bbf311b19370f1dcdecd18e5e887882cfe3a2c1fd862926035349efea3 9ea670026166dd6f362ed954032f06afead4b8e6f121feaf5933be59fe64c570 27ac54ae2bf30b7909e61f161154dc2baa0ef43b84b429fc65d028acc32d2974 11babfd1ab764971df44a1c75b56fb7ee14fca48bc73fe566c3bd88dd52ec595 a3debc88bdd2339fde1ae1aa838c437e2af73d9a2f43d0505fb0b1af92c26995 e37139d148e3c0e0a3d29e60969dfd591b9e4b1c03a9a6ef1579bce90f56aafb ea420ca865e0439c4e9bfb9e9d1d64044f0d93327d7aca25e069916ace890969 25317334b644bc5376842459b8050569caf3b203ca48e9c52acb5277d20fe28a 10d6c6a953211c26260362afddd07d16b3d246c75893e11af3c245fa1c6fd2a5 fa2c911501e9a26d563edf62bb9a5158113e94134bcbe7489fbc5cdbf0518c91 ed5560e3ed3b584df4356527afee3116c1f3b8cb12f43d5e0c69e124e4e31230 bf0850732938dbe685495d0da757e691198d7533d76273495136adad413f2c53 0b366481917bf01b313e0c5ba2a3450e517f4b4cd9400a1db6b1a13498ca0330 /usr/sbin/audisp-syslog /usr/sbin/auditctl /usr/sbin/auditd /usr/sbin/augenrules /usr/sbin/aureport /usr/sbin/ausearch /usr/sbin/autrace service @ @ Q root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root audit audit root audit-secondary-3.0.6-150400.4.16.1.src.rpm audit audit(aarch-64) config(audit) @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh audit-libs config(audit) coreutils group(audit) ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libaudit.so.1()(64bit) libauparse.so.0()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libcap-ng.so.0()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libwrap.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.6 3.0.6-150400.4.16.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 edhdhdq@bT@b? @b=b; aaaim@af@aHwaC1aS@a`D`@`@_ǁ_@^ [\|[.6@[&M@ZlZZZz@ZyZ_:ZC@YYYu@Ym@VbUematsumiya@suse.de ematsumiya@suse.de ematsumiya@suse.de ematsumiya@suse.de jengelh@inai.de coolo@suse.com ematsumiya@suse.com dmueller@suse.com fvogt@suse.com gmbr3@opensuse.org gmbr3@opensuse.org ematsumiya@suse.com ematsumiya@suse.com ematsumiya@suse.com meissner@suse.com ematsumiya@suse.com ematsumiya@suse.com dimstar@opensuse.org ematsumiya@suse.com abergmann@suse.com lnussel@suse.de tonyj@suse.com jengelh@inai.de antoine.belvire@opensuse.org antoine.belvire@opensuse.org kukuk@suse.de tonyj@suse.com meissner@suse.com tchvatal@suse.com normand@linux.vnet.ibm.com tchvatal@suse.com mpluskal@suse.com aavindraa@gmail.com dimstar@opensuse.org jengelh@inai.de tonyj@suse.com tchvatal@suse.com tonyj@suse.com - Fix plugin termination when using systemd service units (bsc#1215377)
* add auditd.service-fix-plugin-termination.patch - Update audit-secondary.spec: create symbolic link from
/sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519). - Fix rules not loaded when restarting auditd.service(bsc#1204844) - Check for AF_UNIX unnamed sockets (bsc#1210004)
* add check-for-AF_UNIX-unnamed-sockets.patch - Drop buildrequire on C++ compiler.
- Modernize specfile constructs. - Fix buildrequire for openldap2-devel - audit doesn't require the
(outdated) C++ binding, but the C headers that happen to be pulled
in by buildrequiring the C++ devel package - Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
* add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
* add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch - add audit-userspace-517-compat.patch - Use %autosetup
- Don't include sample rules as %doc, they're already installed
as normal files
- Fix create-augenrules-service.patch:
* auditd.service needs to require augenrules.service,
not the other way around
- Fix documentation for enable-stop-rules.patch - Update to version 3.0.6:
* fixes a segfault on some SELINUX_ERR records
* makes IPX packet interpretation dependent on the ipx header
file existing
* adds b32/b64 support to ausyscall
* adds support for armv8l
* fixes auditctl list of syscalls on PPC
* auditd.service now restarts auditd under some conditions - Add CONFIG parameter to %sysusers_generate_pre - Create separate service for augenrules (bsc#1191614, bsc#1181400)
* add create-augenrules-service.patch
Remove ReadWritePaths=/etc/audit from auditd.service, also removes
augenrules call from ExecStartPost.
Create augenrules.service with the ReadWritePaths directive above.
This makes /etc/audit only accessible by augenrules.service and
let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file. - Fix hardened auditd.service (bsc#1181400)
* add fix-hardened-service.patch
Make /etc/audit read-write from the service.
Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
* add enable-stop-rules.patch - Change default log_format from ENRICHED to RAW (bsc#1190500):
* add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs - harden_auditd.service.patch: automatic hardening applied to systemd
services - Update to version 3.0.3:
* Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
* Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
* Change auparse_feed_has_data in auparse to include incomplete events
* Auditd, stop linking against -lrt
* Add ProtectHome and RestrictRealtime to auditd.service
* In auditd, read up to 3 netlink packets in a row
* In auditd, do not validate path to plugin unless active
* In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls - Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
* add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush & reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid & success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa & rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha & IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream - Do not explicitly provide group(audit) in system-users-audit:
this is automatically handled by rpm/providers. - Create new "audit" group for read access to logs (bsc#1178154)
* add change-default-log_group.patch
* update audit-secondary.spec - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) - prepare usrmerge (boo#1029961) - Update to version 2.8.5:
* Fix segfault on shutdown
* Fix hang on startup (#1587995)
* Add sleep to script to dump state so file is ready when needed
* Add auparse_normalizer support for SOFTWARE_UPDATE event
* Mark netlabel events as simple events so that get processed quicker
* When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
* Add 30-ospp-v42.rules to meet new Common Criteria requirements
* Update lookup tables for the 4.18 kernel
* In aureport, fix segfault in file report
* Add auparse_normalizer support for labeled networking events
* Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
* Event aging is off by a second
* In ausearch/auparse, correct event ordering to process oldest first
* auparse_reset was not clearing everything it should
* Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
* In ausearch/report, lightly parse selinux portion of USER_AVC events
* In ausearch/report, limit record size when malformed
* In auditd, fix extract_type function for network originating events
* In auditd, calculate right size and location for network originating events
* Treat all network originating events as VER2 so dispatcher doesn't format it
* In audisp-remote do an initial connection attempt (#1625156)
* In auditd, allow expression of space left as a percentage (#1650670)
* On PPC64LE systems, only allow 64 bit rules (#1462178)
* Make some parts of auditd state report optional based on config
* Fix ausearch when checkpointing a single file (Burn Alting)
* Fix scripting in 31-privileged.rules wrt filecap (#1662516)
* In ausearch, do not checkpt if stdin is input source
* In libev, remove __cold__ attribute for functions to allow proper hardening
* Add tests to configure.ac for openldap support
* Make systemd support files use /run rather than /var/run (Christian Hesse)
* Fix minor memory leak in auditd kerberos credentials code
* Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
* In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch - Reduce scriptlets' hard dependency on systemd. - Update to version 2.8.4:
* Generate checkpoint file even when not results are returned
(Burn Alting).
* Fix log file creation when file logging is disabled entirely
(Vlad Glagolev).
* Use SIGCONT to dump auditd internal state (rh#1504251).
* Fix parsing of virtual timestamp fields in ausearch_expression
(rh#1515903).
* Fix parsing of uid & success for ausearch.
* Hide lru symbols in auparse.
* Fix aureport summary time range reporting.
* Allow unlimited retries on startup for remote logging.
* Add queue_depth to remote logging stats and increase default
queue_depth size. - Update to version 2.8.3:
* Correct msg function name in lru debug code.
* Fix a segfault in auditd when dns resolution isn't available.
* Make a reload legacy service for auditd.
* In auparse python bindings, expose some new types that were
missing.
* In normalizer, pickup subject kind for user_login events.
* Fix interpretation of unknown ioctcmds (rh#1540507).
* Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &
RESP_ORIGIN_BLOCK_TIMED events.
* In auparse_normalize for USER_LOGIN events, map acct for
subj_kind.
* Fix logging of IPv6 addresses in DAEMON_ACCEPT events
(rh#1534748).
* Do not rotate auditd logs when num_logs < 2 (brozs). - Use %license instead of %doc [bsc#1082318] - Change openldap dependency to client only (bsc#1085003)
- Resolve issue with previous change if both Python2 and Python3 are
present, tests were failing as python2 bindings are preferred in this
case. - reverted -j1 force ppc specific only - Add patch to fix test run without python2 interpreter:
* audit-python3.patch
- Update to 2.8.2 release:
* Update tables for 4.14 kernel
* Fixup ipv6 server side binding
* AVC report from aureport was missing result column header (#1511606)
* Add SOFTWARE_UPDATE event
* In ausearch/report pickup any path and new-disk fields as a file
* Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
* In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
* Fix building on old systems without linux/fanotify.h
* Fix shell portability issues reported by shellcheck
* Auditd validate_email should not use gethostbyname - force -j1 for PowerPC make check to avoid build failure
(lookup_test.o: file not recognized: File truncated) - Add conditions around python plugins to allow us to conditionalize
them in enviroment without python2 - Rename python binding packages to match current python packaging
standards
- Update python build dependencies to resolve future split of
python2/3 - Update to version 2.8.1. See audit.spec (libaudit1) for upstream
changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
commits)
* 3b30db20ad983274989ce9a522120c3c225436b3
* 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner - Add audit-implicit-writev.patch: include sys/uio.h to ensure
readv and writev are declared. - Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built. - Update to version 2.7.7. See audit.spec (libaudit1) for upstream
changelog
Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
service (bsc#1042781).
Add config: audit-stop.rules
Refresh patch: audit-allow-manual-stop.patch
Refresh patch: audit-no-gss.patch - Version update to 2.5. See audit.spec (libaudit1) for upstream
changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs - Update to version 2.4.4. See audit.spec (libaudit1) for upstream
changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
(added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
No idea what earlier 'automake' build error this was trying to fix but
it broke the handling of "--without-libcap-ng". Anyways, no build error
occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build /bin/sh /bin/sh /bin/sh /bin/sh h04-armsrv1 1707237555
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ 3.0.6-150400.4.16.1 3.0.6-150400.4.16.1 3.0.6-150400.4.16.1
audit audit.rules audit-stop.rules auditd.conf plugins.d af_unix.conf syslog.conf rules.d audit.rules auditd.conf audisp-syslog auditctl auditd augenrules aureport ausearch autrace aulast aulastlog ausyscall auvirt auditd.service augenrules.service audisp-syslog auditctl auditd augenrules aureport ausearch autrace rcauditd audit sample-rules 10-base-config.rules 10-no-audit.rules 11-loginuid.rules 12-cont-fail.rules 12-ignore-error.rules 20-dont-audit.rules 21-no32bit.rules 22-ignore-chrony.rules 23-ignore-filesystems.rules 30-nispom.rules 30-ospp-v42-1-create-failed.rules 30-ospp-v42-1-create-success.rules 30-ospp-v42-2-modify-failed.rules 30-ospp-v42-2-modify-success.rules 30-ospp-v42-3-access-failed.rules 30-ospp-v42-3-access-success.rules 30-ospp-v42-4-delete-failed.rules 30-ospp-v42-4-delete-success.rules 30-ospp-v42-5-perm-change-failed.rules 30-ospp-v42-5-perm-change-success.rules 30-ospp-v42-6-owner-change-failed.rules 30-ospp-v42-6-owner-change-success.rules 30-ospp-v42.rules 30-pci-dss-v31.rules 30-stig.rules 31-privileged.rules 32-power-abuse.rules 40-local.rules 41-containers.rules 42-injection.rules 43-module-load.rules 44-installers.rules 70-einval.rules 71-networking.rules 99-finalize.rules README-rules audit ChangeLog README auditd.cron audit COPYING auditd.conf.5.gz ausearch-expression.5.gz audit.rules.7.gz auditctl.8.gz auditd.8.gz augenrules.8.gz aulast.8.gz aulastlog.8.gz aureport.8.gz ausearch.8.gz ausyscall.8.gz autrace.8.gz auvirt.8.gz audit audit.log audit /etc/ /etc/audit/ /etc/audit/plugins.d/ /etc/audit/rules.d/ /sbin/ /usr/bin/ /usr/lib/systemd/system/ /usr/sbin/ /usr/share/ /usr/share/audit/ /usr/share/audit/sample-rules/ /usr/share/doc/packages/ /usr/share/doc/packages/audit/ /usr/share/licenses/ /usr/share/licenses/audit/ /usr/share/man/man5/ /usr/share/man/man7/ /usr/share/man/man8/ /var/log/ /var/log/audit/ /var/spool/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:32494/SUSE_SLE-15-SP4_Update/73526a089598575fd6d5cd1f42c951bd-audit-secondary.SUSE_SLE-15-SP4_Update drpm xz 5 aarch64-suse-linux
directory empty ASCII text ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=4dd8433bcd04c9068e190d3cc287cc47021808de, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=e243ace42e7dab0cc01e7fe6a2956c8bb7f87075, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=60481deff644ab94182079ca8ee24a031d1941e3, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=ce5cf143ec21e9c259cf1f3b770a2deeab44e194, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=62ff38546939319cb15686e3594c50b9ba4c8e52, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=f57bf2e2f30600e45556991acec6d29b930a83e7, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=8405f7b5ecdde06759bb7833aa80f6f725ff793e, for GNU/Linux 3.7.0, stripped POSIX shell script, ASCII text executable ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=87d2cf1965e4596532b518f17e6be2ecb6ff68ba, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=befbeefdf4ba30e8e8f9bb59f95b883f8a0745e3, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=efad0261c055c42d6ed8fcaf9d2fa54e2908ab2e, for GNU/Linux 3.7.0, stripped UTF-8 Unicode text troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)
' ( . 4 R
R R R
R R
R R R
R R R R
R
R R R
R R
R R R R
R R
R R R R
R R
R R R R R R R
R R R
R R R R
R R
R R R R
R R
R R R
R =<~fZTv systemd systemd utf-8 7635b50227b5f121702f152c5bfeb768610cec0b345950385e13c48b9b1d7d50 ? @ 7zXZ
! t/Y>] "k%rS)q
tNZa̅zB"]˽ C2;W4IIDP0p?m Y{P9CAWʝ+e~9 c7 MO'֪Ŧ^B9<
ׇ[R5=zer'կӧauܮm0zXBEO oI(b1'-XF؊ig7Iua$vnl-) n JΣ@u T)sf#\- 5 5[)|;f韗PO`" ô. fj?S9{ ;sGHK
CVkɘV5j? 7gn%}U"VE5 " 5j`>ώlEwL'h<3 {ȋ `}<)s6̲`CJ?@
VA?R_ D"d!>,BD 3}?.\2:w)HԢ 14o:Eo]ҀI%/XIX\-DѠ
Zq;< CtpRN+YFM uzN[e|ێN}6pc9=/D-xL;fUI '~q"
,ZJ?WU f أƉtϐV n[s40 2EgO H$OAJھ/N l7i.օ+gS)
St) z
E)
VSeJf*q(C"j'ݙZu^q&n#CCU kˑ07Jpódхޯ\z2E A $>H }JNgqNON37Y.FnY3]<ͭxmd%06L="?C8巔J )zWq>?ڐK@ Xȶ7PGWM\;7TK{QއPQ~H-tNhK_V'N$*7ӑ#3Ua`J9
y1ܗ ="ޮmg QUߏT=᯾s=M $K}M#8/%4bgh|c!b(V܇ jk4 I 1 j[;(y\dx]AMO _ԕ;` O\ĈGM8pkTxnV`13g%Y u2.ls5}[Rrx1z{KjmQ9o`eWn#a6{ǒF/.Ma˒&v%w@-.TSQ0 >p_%¢?υ~e9'τ)i8<1BB4= =&67 /)>g-,5N}R=oP%ળk9ډBg4;+2,$F4;GnH^ϴ8)a`zPo}M2 1i+s͖p, aS7Lڳ\P@
'=~^:#A
, DxX'ÐR2s3D:Yjˇjf],(~[.
VC1ND8 >NH
?nnO;Fu˗G ȧBQ:a8^SgjO+0ӎOcڙvCa냰 =N5 vh{ a`)c<>%
ƹ=[:%?ȁ`f:4 wd4h{I-L ߏ 0 KbfN No8|{b|sI혋lUޚS4n@
&S&2Իs b(=E?!nkӧ 茆]pR;d&#?@$Y%S!V}k'
Ūm?)$Ьs,·I!
(Tާ#@RyE "ȝ !`yIkg eϗBT,9>10z+(~-_sQ \{RCKs[!, `3O}Nmj [Y
ȇf倄n~!J{K K8^(Pu$SkJg%)hZL~Ήxu(`]=kCY28
cՍ
bxV 쮾99 ^Z X$[ &C3%;.k}-ʼ1L"ԓN4w0 0≘Ẑ ٹo/ΖPkg4
vV$/
F`8F>Ѵ %[}8wyg^P&3.Ebb c5:"MMͥq;އ0/`D 7 J:reƽGKKWσ`ia݅GRq 1QUg*4Z- a6eL+' #AD i
fQ.cZhUG -;b5$BaLDLv̊>&M'E+˱$>(ϸqrq
!G1O; >_6/K푈'vמX)ckO~l[ղ& 崾U'y4"ɟkKe!ȍ 7ngM҄O糎L Tܓ <$[lŲ15b*7!0 Fhxme/
t]t m@=-ͤ~ Jy >&+Q'ayf\ _;6kq :c hXM.',v[^?CĤTG,'Ct = 1]
7qzct(*pXwВy@c]Z
F㔃E} )ld]dEKj|dZ0yZ9iv6| >
="msp#J KL
&xLj: &@Qa! w HT)#wghi<9pRe^w02$./: y T(OZׅ
tb^HT`|{tsˈa;1lcet-D>{
wVktj
`]"~>x\_+h~iLЅ=pY"`$8Z\VؚG{DMzt +:3̲T 3<}=t4|`%CXP':y/_ޖM~4 muJuz=r־ip9[;G8~ŐR! Q@y ?~lmj.4.V;iWer1$xջ:ƺ7t8Fā?w]^(:ALjv21p`Ht
rZRr,
Ԃ$6( gl 睇˭Ը\*" GOk8j ҕ!//yxjy]m1↥WkiYl+C3j:t: 7QtGSa?<ޖ<.}+ f}bŋf
KK]e"9^^*u2u:rrbgQe ҝ=mNtK z6xTb<
& V\k^u(C$ 9[]?2V:9O*ڊgCXpM3qo~vBthqf@3u\";nw_T :H퍒݊~G_Jq7$k\DWѽ{y%60*c = ,c┑u]e`@mӅkzU{`) IsKho +]B @+90Նpx&j+|柄N+WJb9'dK e1p]ݱ큞}܈=^H¤ d$OɤMyHU z-? Z.&Tgp MR.~oPizuo+RQ; 5S_A\Z<-k~@6g )%n.V~l4O0T.qMПR=7khV`G +l#P߸ęJ?Ji)$+L -4=ˣ{qO:U 0:۪p4{D
}a m
VWߨ
HЭrfl,D`PZj)hrBT3
4s">n_bKXS%kǶ[?_E+A; XG~|U@a{#Kzqߜ'@TOzބ{t^;5ԙW
ȗxE0
O^\Eh3'`cB>H/
=e Hm,j:܍k:31Znۈ)ܱ\{"PsMsW$ f4-^3 A]%Ou?ʿ42FHSP
tDɚ9;ydAC|#SU裥8Һ`i@[#Xw Ϊ?Av|`@G3ᅓhET>gJ7Ӹ8[R?PnSc;b=?,@k{{[5r9a{ Uz/8T桍hD
;ݚh3c"7qiA,/nbc"r∙ NuR&j| ݏP%Ơ~ͻFsw phyM>~ADFY%*\~<-H<. (/%ܙ$ҍtAG01Qt HkalKbA7W1 Rų,IA<Yd atYzy^`{Й Â`, MfNmZ ״KN5%N[˴{i^ 9 Ue"zuAB*;FD[a1^ ; N' 4T&<
'TAQ = uo ~NЇhP5ˎ%6Կ!" ު)"Bon16*sO-BF(0{w#KS MLXoaA:?^B
zQRq,Mϫ7I <&pNfPpo90$+LzB*]Z[/vI[^emԯ]C`Rҳ
bL {][KmhoA ̆xe B"Q ףڛ>?*vY=hq7uKIPjժ (7/:~U6>o}> lhhZxU3JnG^qְᄂ/:{8wD)ޥxH*QZBEѭlĚd wj-e@uu+sUwf\S ycf]KV%?N[VןҀ99p]O"@TT\LaqD+z+Aލ bV~5Ix765\3Qs%`吤03ɓYqfensH$v=U/n :!qQp ?p=17//5 z?& R2) $xHb(q
S
ҙ[Hl]w (Y> E)Y$WbWNrFC_rlo!R}y#ᤔL?#ʄ0.HypMq(X1 R,
pdT;Woq_x~p/!(_g qi{\TK >D{ B}Y_w[6
׃ Cd7{,=LDN ًct:Z O,zjN\שvۤ.C0ˈ")QX jtxz?^AV^K) Iv^֙LBY瑩y: b"Qg{w?R-|P c .NJyˮ#}B{$lY8 at G<"+ 2 \:/8C>(0% Iѵ7$d#xZ@7s
8}z"م!
-8$) Z| Aug%~ jb7ahB ˉڜ?{Ӹ-={>:r\`8ӽL[iO PN.=u /><
4lW%1/?a.~xdO8U|xg˹JsU3;e@gd$$;C1W:L]^j.x8}~J
Bkt[ժҬ3֊-&_ʳk<>_
nՃ¶FKkXĠkIUeNFzRj:.̘)6% S0c顆G(;X2Xa)Wv3Ľ߂1rpbuI(aՏWS6ӑQeќ~ st i .1nS<ĆdKK x*9raXn0GPx7̙ M$vρN ~l; aiY/ E,;x{
9 %^r[dPy7=*ķL,592߷!¥T%Y x;NyGBYl h.s 0#IM }GfQCkDs4r.p 0>n_NgGM
.=9wv.ʠ_~` L9.g(B*F?x652NksLV{5]F:X ae&W`dU ~kȕ ۣp &+<5$F@7'HڧʁD:j/B ι6 "C
C\SvoQI2Ho2n,I?{Q/e
tnexٍh]Тl5
Q)mR+1m;ʤ Cr6L%Ic*)7ĤQib\BDŞF5ͤJ0_.swB/BE=PT8'd'' 3XJ\ 4 xN]bi:Z zty(ә7تN+2ؔ H
'=1,'a
ד͎eh nw~%o~Ct*
zZzֱ
x++]+X P")'5lH~)ly4_˙[͢5${+h0PVSD,`@m˪X Ihp \$O q!AHgYg5fl̓k#%PrAv\9墨3Z7A :zf V-._8l퐂+<60 Ȓ" V1!d S O/29 죌
'XCAeҊF>Jw F
c҇
xQBBfqʝP=.Դ2&885Gc;GEL=t%ݓ@yƆj5 cEҚ
i0?C{{Be@ey+gFÝ dU `%?)9b:4BR)^STC-2;9":"x-
hj vͤUPݩz}-BWn Pyd/$V@Zo"]2oэn`=~2&&e]ɣ^`KĢ˕}?# fꐹ/2XSn{TJl0( U1e:KҎ;Yp
ܡ%%J
P
]vv
{ kIDH OY c%[&k#=6ײy%#ebg^jV $OE"{D z3Lc/I}¿=%N %EOq]z*9*o Мb)}X1 徥E2 E _
S D74Y%m moN.**kuBe%A!ׁgTi7h'lmߐ Ӽ'KӺ;#0A#lީo<@ovM=ż μV/)Gr9'} XeO+a1k 35Un;mm+ՕU.'0k'u2 Q8c\MKRI -b߳jbh7 2!'GzR|֧RVX T.D2lω>ϜtӸߖ
6 "vZԫ5|$aE V89 i =̿%~u
Sh
t*4&CS}T]:i v݆B3C-Z^Yby(c+[y
~m]N'}Kf]lY% 7Z*tueJ2
8A)̾_&9i.?sEWItP JJ3IUd* 2\+%}+P.h-'
6R{ bdI;pX\Q|n#iԬ-" jѰ= CqS s;p^4y=+±݅IVf89*w= il^eC6X)rS4P<6Ep* &w)Z}kmq`Ѐ9Py6XLR"!? RA&\LGx5c'-1z*T\_D_?}X&W+
x I5N L
.pa[k P&HF<%[K/'֗JbM :r/a/Ū3\#0J2Oǥ
?Sab_B=dtL4r9g̒Mwߣ i& Gwܯ48}ت`=KػZ2͏y;Y oJ ,}oRL,b/%VѸWT'3+( .6Z+q Ғ l*Hw~k&=ms7+>,7;",tZ_ ?@V] uWa+AGA;b& G
&U"VmWU 목e/K5
3#yh ; /3])g¯
(L%Rq
!<<9sC_Nz#'-0ݸcڎpLMqR踼]^+k1GZv '880 ( {qH>1Ho|6P
Z
^ JΫb@B4[0,Q96>3Tr Y~`9@ Y3>[u^a?
߃"lQ0U!_*y j˲4 GTSH 2a
W1ޏOqaCb;4"r]".oNGI P,k~i#xC 넵6zx曲ǼBbTwúvˏ~*RB咨@M%KME8.L tmqV A
luHRt{'H"$wafF;YD_z5ѕ}`ds?0G z>]0/Z"/jD",)ҝz,I-X_X';0~> qxIg~
p)zȼ5
U7N Cleҳ~9ad`"*
ΓaZI!wc+,
9T?Hy$lٝct_h՞S /z;dz)
곌qwKJ p
.ʸo*hqQ-lj)ȗ;uZsj t<(!.Ul ?yYt]byX̓ qÖnj zMд Jm&% ?,``G ya VIUK(g[@gt46k S^S:N~D/ՏY
?챘w6J=}A2TL% Y;g>vA&
1m,Knۣ,k"LYSC
ځ|}aL٫)P9ȿ@VvP|}#T@;
|Nr FYWIB6 'Xh$^G$7횑 LBz~n1V3hھ_ ٗMXX 7B}4.ֹ,e2?d']+r 䇭= iT Rϴb@L >KZ4lD=|Ǝ$n2d8[]D W@'@'[to@KH.Ҥe, BeB@p?C5MA*U1o|i\VU*ź\O6y %RBha?2 8M1eCߨ~ƨ-$ W0Cf MzGѥ]K=jޓU%~N8 9pg7U2\TxVR3$xtZi]+yymgVV $g(D֍*9
4ϵ湾@@%J?gC&NT E |,ڏY Hr h[hdK1Sfد̹ OG4+ G,Ћ'1Vi$FRW>c3ͼɾ)ΌM ۆ(NUejnvZ*W.HF/
O>W7_iBm| %*4q^ބϠYv14Q2/_ 1e
H{/= i/8H E6xL)A_CFKHoߗ$淘 aVH[EgPh\PߑB7G(2mM.#;H]6
3]Pێ~||lg?Eԁs;ٯ{ŮZ\9$Fj8;EMz`tyO1xw=wL"S&?rdF/]%hlV,+ @2SD xü j4ryz*nRt?26tH ^ Z^tuԫ yR#]p{By`ތnQ^ui *=msu7Wy>< EgBT s/y7#t>?O㍮̥
E6 U(lP2lo<{i|%SW M!ėf*@Wy O] ]2qPӜr S8^/AfƯXC-}| I)#TnA& Gzgg;r(nCmQy_?wS.NI
hҝ DA*liLΌ!0⊹5Yn5dƬtqnhLj la۴䑆r[
/m
6!JRu9 A͜ë8 >s" Ӻ
:ȠIۖI{ȭaasj _j(d
do8Gv$ݪ&1eQ+?y@2OX13^ǹR#Xj/Ŷ[bQj
jL Փ+e"@I ohUc!k4TܡCJ0=ԉC.(C4Q"W>;FKnq \[ 5Ly'
4*R1q1x6退zS@
`чuW*mպI.CK9'E 2 2tl:G s%"*Yg ϕ E%?s&(rE,_ͼO
ʈoNtY<~ jXvWa# ,^v+;[Ů1fjۺ>՞酣@$:QK.7[ >f)ɘU y kRrDBG.ABIE@Ҝf~9cDGܖl
iH> th83"!ZѨ&:xxiKaɰfZR0ŮJk0ȗ5{>I?un}
$0FH?j7J
fVZMDBB4Lkfv|d JmM9w,lQ
Z]8^ZK 'cͳ5 V+ zZǷ f}qx;Qq2;)K"nÚl狭fHq^ j5lHE6n]gGܑ u UƑh_X[Mƶ$E
Li$
l7*5iɧuڦ!oIGl+e il|qMpԌ<㬠~ND .f)w]I69yB.YtQBIƃh~\E@3WZlC:
݃V6 x]Q0_nۗ:w;4&TIHUׯsQ&
"1η]{slLު4;^jRǩ
z XtIOdJpkw Wɂk+ ɪYw~۵'Wo^rAa\Я
CER
[͇Hv~qlZJɟ:?X>L _Howjƾ<P%uXp,]wH ue(4\SAiƼ5\L|ͯpZO j @> 8d; .fmJҪ*\ FC9Ȁa<@t4uշRam?ta
r3?s#X}xBہUf0{\%_%2Є3A; m|,%lT"3W=(r<cD\~7~ѣN}k5\vF||p+_ea۩du(s{Nsu}!f<*+D)D@W1>^6.4j,n
u ;'MG>@ @7U4=:J(:o4#K+nLLFa-?AqX
|9^&}dfl:~dqĭQt
$w)_)RJiaQPZǰw7"]Sfܭp7Zm~+*v(-#!|\!⧲9ݪ0<` ͆vw p[yr:mIP\ S(ZB7I%J25 EhTV]/~jh@ ē9+&\dqlVhjY:goآD 3h_{ŮmIE\Q
m
o=Mõ<N
? CR~
+]yL~tbݐd M]/`\kB s@b"6\Uy^phx%@: qNW|ݺmn")Đ:GS&`YB_HYށU^`/$
zneIǀVez%F:}^lPq+SVuDfK7M
0YDӲ.
WZQ u+EلOhN DL)X֠$f01̿咞I〭qrs !{@! ^OtlP'e 9
xb6ڮ &/ݱK?NL~ӵ{+7C;'gԷeD[Hĥ攏S|#[d_xϭ̿sx}JbK8TuTJ,?ԔU? h( Ҏ)5b 'Z[;6a]Q0ޝeWx]搯4~ dhhicm+0h=
ɆhIMBz2wv|U |*F0v*-됋(uˮ i 1
饱
. IV0^cݭtwzsrTUM #+|76{(sTJx_l]; G%
tނP*ql"79^$1
6KBY /d ՀvF3# w|3gX >z*8-3ms:ǿ?%Ly~w,j*< L5t 6e9x!
u@A.zMWEntdC`>\n*b< ~ +xѓ %ƈjKW!ze!݈**!'A݊[pfG4݉$*ooRvװ>s2yK^ $ڒe5ӥ$ tCq Ջ.{˪VM?)i
紓b3x Jz#Ж2ۏƣwS=ܩ#
LR%
o4iy\T2*^ OJ&) ļCoH |5hEﵓ(! 9- ٻ%] QV N-c\P0j-+2G]:g1z sv]zT_Lh4]Bj.SdiwGŝ7뿴6V Y'
7!ùw@Sbub^(CDQl_E<)uC yZ&e(T ?SCl|gЏ)uߚg3ພ3< Ea GE&_gcjT V
Rj*)!
%')ihiw1q?}̒0)t%D(5_,fJ3%D+#-4R ̕g6}5>CZ[vaŢ3RZFgG
%p!)A=~ 9a @ [H _U,7 t^,ß^9$ߓg$t{iЁD 䘣9$LdbNu`続WE;>}sIfq86^ְ~#U[x<4 3*U)Ex
%l2ZnFx"<xOgK91!6$v I={ &) $ppyw"kZ/^k9PtO ]!K#6>;m5wy< @ٝZM썢x7sQܱth #ͱq&L4,IA;w
hN )hk! ux!%e8mH=6cs9M+KfI~?i023rn!T T9н6.=ldmT|98Ah˶%exŴě9](Eȿ;I}Q ĵTE0/ACxXFAߖ2r8u yu&!jƴոȠhmJȉ.v`.u#&}Q-7l>+2SaK էD'ɳCEͩQ$[)e7e'ї"8bk{`Ȕ_5:" 6 i}ڣfфu!@#c3 G"dA|*"4 ~X:5*aG]F/O)IT-I9 22pn]x2upDKAYQ Оc.'
G.Xs l4 qGz${b:$g Z 4^g/{/vi`9vkf{&z]57cc
Xi aH ~OBɈMOFB5 C ?Hkti
Pcgj"' m?mFCsdIU:I(S8^oNRHrzo&1k\Թ2{ ?h
+y Mȣ; /gɍZq8>SbqYv-펱= 9 :L\_^Bm jߤw7b
{:Mfi~4j2t:lmw\\U.-va34ijVhhM
4*3ι˘RTfXKT]:FWAKw?$O%wo/w`Q?[gf%iwU< zdz?1ȅ]@% Yw6IZ'0svG Y!.MIJZRhY"An@HzXn ")`uNߘ Fَl7U1*+^hA EaiW/ 5ᤏ)726 Wƪ`;⎤PF
CKl]t`T >UZzQ`RY87#'!YQB
X) KZ':ث;l
gZwf0Ů҇ j7 e36gܛ{F"7 ešH= 'U/=kCrQSat0E{!Tgm_[obE*Sَ
I.)ÉehXn~ T;[v {. icZОz(7eǛ$|U OɏxP E!5 @UN9Y=<ٕUw4U.y ,*xzVH -]PgXrdzaxFm
r}df|,%˼VG A
ERiA"x?ξ ;.BiI-qT͎4H$M
Uu#Wt >}q& V({ڋ.,ŘGDJ\1 [ۃx:s\&hETRp fO 7D( |v?Embg#+z> ch%F〽ؚBe.T:g>LELzS]f.ij]ɴjW)o j5lR!?$oR>Y
þrgfZYW; ZY.9I86t@GmYf|WZ%?%[(Q >@ (]::2F
^`m*3k.۳Mm3Ó1X(&97мM2{l 'Ůz: \Mr*P69R$&rdvݴ}n+zzj4퉟kN"@9TuF1Ez钐*D
>ڋ/gHDt^'W}tsu/ϣ?PXXiP6٢Qh uV>*zKF $3X
w^k3*k[#uS `m UfධH^8#(ؑft,"$t
7hBZXOndoPʢ%HrRL$f[kc_4eiu_/:}ʻϣ@2Z ڤ8s/R?4TdנM.N<\TY>jrgN^ !Y@z ʘ0ofTC|ϑfSrjYK+ W:M h\}s}
mw&% "C3ߵHۮ9 $!NM+K=a @*\_M$_}fE ja|`v ݺ%TM+Jҙ }wRQ s|!o1 ^tLI0xp('&gz5kkEjAWaݏ2~/=CEB R
fHN>]x4?sTw~k)5!x4۶Z^pls(HQdQ$ JSsʱ@G7Ai?C K>'
mnN)ӧGG j {q|j>,faS<gM` GPHgLm:7X;[6aܠa-KO
@#':`ՙV,.}"x{x"FaG V.<8d]G.s@,v]
rcz +g20"l 2chQH6xIΥ-3$aA4
/
b7!HR
RN)y?O wSVKw|cBTN͜BC Pa*S!Bo=fLlň1)I\d> NrX7QUӹF5аN_WEF:wV3Gh-]3:
E
;Mg# Ӯo+M%
Qb YCV[Rdzruw<ƥA4[b
#㟙|@5EY`b>C+lfF4`ufF)#(ϡ\-\:8WyD]:9z# rs,`G[v8 VtmWjsEЍйT|U@S5n[_lCuoke(Xc$=
e
-ot;+{]*4ۯ*wUCϡL96u*d)%%Ȝk놃rZ@' IVЃ[:Vg>Dc0;(ɂc( &
DIBt"v1eI$qd_X
RB{QWV s盝(m"7*x8x> M%y,GL;kdfh˕),:/ԣqMl& ][#زU
YPD
;64ϡt,On<Ûλ%4~ʢJ=&0Z$&k#a+'LIL햔=D%$U*Cez$Nz5E:c:2G3O
S,& Sf]I$'_oF'mkp"2q5DzkK7%}X
kU$ @r ~ӉEMpCمgP\4l{S+JjՌ3kdy 6K~N0h5θWH dZ'AA8ƥFGE5):;4'%(3#D2CRE;o?Ĩtm=Dz1|CLZӂ`'Z^pAqsE[3+v-gKo \qK܊"Gn,|%
bm V"5_T9 .p8?hJfWLYLrx!Ihl8t_Z|Hˊ$.3_'8Ce2џ^K&J)htH:vY1Bʘ|
RM9# eu;i;0yqd׀MPeΦ_ (o
$I ͢K,#`wfĩnG#/aªIj;Ng oP7.*U[ iK%(s8k\O#mn m Ġt6nZa,`yROLHp.:s w`&4jBeܦ r|`Z^l3Z}a\`ظ;\q ~_ ǶT\H*a{gSC /if#ѻP4 # ߖ
9@ys=[KIڱAjgQƳо?R TwG7tM ;xdҰPI /r_0ҿ/,أ\=YY <¹\gO\+}5e뜲WVNyxIq
qP={'AdXllIT%<Ȉt>5Re b Yzl(h1POTC :0cQk +Pmni!އv^V3!pg)tDɽ8-y"n;>_Mꋞ$<oŐQQКK\aQ PZhR,}лF ȭn!V!Gz;%.< L,Cq WS`5=0Pz 3Cgc D(+:pb µvX-6-QII
O(GrJ. & Mcǂ6SSfY捓i.rEsڔca V73s%MNoZ# cQ>y/r~E&L]fA4~[E(4cjaa6怯0`Auo\ț: lwtvyų^u$1LJ
k(<*o՟ ]h~UhbˁBu$ <{'Rsx16aU&T/К7P# =68 =[՛˧6o/6 uTǮ DaÎ(CEP#Krwtu zjuTq[ SN"/HkRH2|Lμ O{]Rah3 Cdm#
˸VN-2 1(&iIprA{LgQ2K8Aʉ1ߡ6C!? ƽc24])a63*}cO"ܧ9+9v?N Ο+]m6zӉ5 @\ԡW8뛑Ӂf#]Q
$]ԲzPP_6 p'٣T]F B:a2(3ĺ`qP1FN y9cZjlK {e,8!}Z C7)giF9H"N}1 2 BSI 4&yT1빽
)Q ip? DP"yi:+ӊ!>,i*IߢKnRpA(s` ],!_ɟm!{ȯ5a#7
ɖu\ !Hb}~P,Oܽ)F{
T_sJ;l:(j3ݘ6u&8/xw]v(''b \WG#QMbwo0'-6
ь A,m .O
pw77-*>.&؟cd*IS2,s2B; H<" zfḰ_DZ=I!ro;x0ZgGGGV̓̎B OCbI=c>]G!
zXtcR:!iX\iV[9vM?<"&udzG55gՀÊv`|La, F0OAVxLum*y轲BDd˃m2'`CP^ -?u F*[ߡ/d|^-`!3-?_R03|3]VxR& ZES!oKq' e`dMT{ /^ Lq|=9KaE:ύǽ9X,R1!a%r`NAs-M/AO\'>@$j-'^O#<ñLW)@]ӐfCQo (p8Ŵ-yQs2_9 MhX^5 ?& Xުc 0Xާ:j^K 1q#a֗YwJ^^|7.p\C7.`DOfկeW}
Z7^U# %S]0RMց{^6:g _.]OÖWy Dx/Հ%5Øk,l-(2Ind WoDod$El$hY10q
o+Ւ邲`hM'h%ӄ|t̑9[k^ 8g%LPq A|N9yY^biEO|FLE6{8G %To*" [.8ފReR`gk|øh *i2Y
i/
9i^&Yz*Pk [:W-&e{;7LBdM
62ʕ)HU, q ^v`*r3jr0͢#K)@XX V ܯGuo{mtztvvQI `(fN( I(L)M0hZ7jS֡{àpZT =@عk"> j=DFO`=$N= hJJ"i:C*&jE,GVn =q~
Ct܍m t;ж>= lzpv w:HFgHon"Ia_9RT_^"ez_1u ﳳ#^R1kkg;ۧΗ4+vފj>W("1 C4{ۮ*g5X }k,);7~\LB
mؤaߧ MTlbt=f$JqYp|< VKas!P^=/+[߱Hf_銁7[2w 3yo:> dZeVsi(16x'u}\Mȡ<:pUo >scT) hv ܣciPiAQ)5^o`I[E"o\߽**slNM}N }U8'[oHn^|+i{;CbU#=Uبۇ|
A!2߂ A zșB6^.ꍬ$-_]0H\i_,ϴ9 >qC
LO JT>HC Y1]qR26Iu]}~t!v/};# !ќCGqs?Z@ tZ?ig.;sULiE&^q,{V*Lo骶
}dQmԵP~jgL>@ AP?ITq i!w w3Ku
ji-vς^vi //i ,K PQēKpO-Y(bݧAEq u,x KPF?= Q >:%WL yr.6k<Sh>ZC$ʝrYt*|0ݗ udX/LwۉQ2:d t< x!n }#2 tFڒ|GF/ft[Xf|3iV: yj n%-ԇ5EШ3 qx O3e$MHkeެiuZ$Bvy('AeV Owl ;kϔ^=F0 b;d urXHd$>X+1k}]ӡ
)pxR@:'st"z@>#7?j
sIŞè ?4盨S x:{ds9ؽw Fdc 7Lb> (~Se<h#DB%"TZWRYpr 8h5d #e/DDcWώFbs/}q jXIg舌rd ^@FDFosCu
Ozytӷ,P*W}SgzgjG&
}I[SqΎyԋs';l\< ves=4Z}bI
ㅽ{]>cr7 ]$8w_IK qIw@{9oudmD+8[D?oV-Й4iy#0g/݊ ]4hPqz#Yf`l~^E{М8uOHݑi ` K%`3
9Q+ڜ{Kz2ϑ#qWSUESͅ#?=X`?M:9ũZdxS }~ 5]C:f1*O47c 5 /m%+mCqGu9{58/gW8s5Nsl ?]s@s=3+m!_WQ)Z"@L( 8R"(v 5f"֣ ^.
Cw% 4.8
[?DP\ #k,Jj,HV)w1LImi+U]y+3>RQa' } +4xq r1ZAksMxt O2s3q7ȁ`ok52Q Y|]oIS7k5M<9. J$!Lܮ^RB'5Y ݕ8#ڍ47@r:351GMGZgDx0{L
ɋ0pzs`:mp#Ĕh f^`
`q"oж
uu;4Y_KTʜ m^cHOMœEZv<;:S I
gj[>ڨu|vxԿ痩fwz(sܒ[b}X wd_͍NPh@X Cr:ջ岕cc}˛f tnze4w4\i{ϟ=u=ws([ӜTy-|8bc@u:ءQ]z
HCn~9EmpM90 [>_
f'CN}pHXp.{ uBg 5)+2Ȑ E}]4vJ:n=b'jK *"Ds%^Q +Q1Ņ=s1&nzRf8Of1FyP0x' &#U)z@6 ;A2eN
aTv ^tfX$4՝@)5 k@t.g%^߲<@\-p]=_Vx"ϱ'
mFVۏ1$w֗ŜO+;u'$Pp 盒r# _*Ei`"=h/\ۉ\r0$E5* l#ӁʹU^}y}u9)u#ͺ&i8tosg(fLn64GxD92ˈ}O+UUW#p{{Y?Y& \6b߸JCLp4wfaZG.HKms:>^Mat .RLF?O-?+o wkc>ݿ-BQm9 ưvs/S38 :7#t3& ?dWBq>o G`f(S [rxB2B BflȻQ1g`xred (gJKyW
41/=l7l
LshqLC4
,qxifj)[0J sifW'~;}tyWO'!q~$-p"E TmCLL>X˒G kќyÍAO&e
扣eC210E3x+ ٱo!s/T
OE-r#\bHapVogFkv\PCjK5ei Q9KJs8֙H7=V+%q X$T.FA|9M b'yP(7,ҐY C
ö) @Nd"m?'";u;Zbjr(>;dBBrjts[õ nd Z [t3Xfxzw% RUo"[x!(s>ҡ1K1A1EGԂ5f}H_ ETA^ ^W/$+6Í&/h xWϮ(![uPk5Sxݭ$;ZI2Q*8a47Z
-3.s
twR%- {TRaAxRLr rIMg}3@ 6&\п>N ܖEwI(^XQ=.6U>ƴJpFW Eg\CwPW!/S0yæ F?;Et$|j1dT^5i06X^V}G?u: -s w{yA =J(c #a, kap;$ˏݚELٔDps,@I(͎p ZS6HPIi> ?j3 ynUG6niZ~jFdt:yq ;c(UFC(+ȸާ?R%}?(Wa byO^=)*7W >Bգ~
W(=iY (D*P20zȷQz2GեHR }k[/ PY|lFBsӝ3&`r*ی?a7V?vX7Z#USH;^&g> oF;< -<|*5 &;D;xmZޙMXB$QnTxĉ;>=)`R3
)iDUIsoi
CBfcuw.0f7 TE7K`[aM.մMuh.
UlBەfCQ'}UP!Eyh,-KT&>}'k'T$~T1ofϺVL
ȮZշsHݭ cC6[xb8oU ,1`rs $f
n56uXg%g gT: K>
Gc3VLĤDݫV9:lDY,9+x;j |! OOT^+p=S\|%L_IF=D8 ),BU 6 ¤-=̄Y\O /Ey?5 W (U
;
35&2Gj4| 8G3x($[Y#6gF([| q'`ͯHS,]*XLAǵv\ک|i6 xu?Y z?H}Ì;bB k^/9 wG}r\afm[?fm8$bN , 市F+ r`~x ^\Zh/MŸD4@J j {W 6;l"Q $w-#,%`(LVy с{%;F o ~ї6\vͬꈹ+0CeJVB{ 3dS>xj Iޗ s i1qAypFyVmL\$Rﱽ4u콕in a &4KaC :MṱFP0g~3$ʹJi68t 07s9ȱ% f/4` 06& 3 +fl0Vt+ClЮh#6K:" @|s
;t) /4_T}": @#{eYeRD݄*|Eo'+_88
"*DpAp_
=Q[`ꩍ~+NAb" B(:pXQX㙜F1 P.]rJ;&E)˨4di8K8u,m
5GLVCi0Z a"P]Q
.P{Q2Qr4w ٘w4zfq[A~^{vf$w]mjMtfg[} ]
l"(u6:ULmik+Wx2ٻ^L`md.㊥14"yψ=c
@f9 66b P vEƔ*: ;E_ңxe
'J$IDsܫޫ/n+`-7h65還٣dxQt"}SȢQ';fߋe (LIʸh | ! fAˋ}?)|R7cKmMadhm >Uhl]ۣw9EruֆW96rs,)|aX@+M3(3š(=_Nu}qb74vY]I/. ;6MAEstL{QlqZQr5A< z* rYx͵
1i
}˦v``}99*Dح͔N~KZ]Axv&7nyV<,M81wŪl "f\c9ȏvl
R{ 3mevOi߶b~bLO5faF3\t> H`4 ~P+ŧW]EҿyZ 'E,ƭ7¬0}=\q| ȁWZװ\ǪEOLtaxOX[q 2e,y
Vg {%l4vJfS>74kj%IPucP)э=HKq2fMƳB
bWز`x1Kt/:L/s,Cbvl$pr Rb
ߋWfpmu7kh|rZB҅wBF 2ܽH7(9߽^>ȦI0_PZ> vTȭ]{UqcZTG/P"89\Ò\O;Cr?NJǧ5zp5G3HFj>H4%Q|=%C~
*e4 ^2m{|&d*:Xe = _^g
mWO5 YX?D1㜖Ѭا~߱O:zbMN < &ttب5nekˢmc0_i&\hb5(,R#d}J']gFb3!)u4kN}r ,akJ"ض8覬z_:- j%r7;SN>*wo㰬 $)o0#̃63$ϲ&IZme ?d3%7;@[OhwS4 u qt93GwqpDgԟ|HܠΛ$f46|*}nQƃ_"Mg mdA&ѷ%I &S=4dkMzz*QDru&zB=f:uc$T 4m*3e/^qLEu'DTV%7
F|.g2RTIUlpjĕ'-#U 2߹f _VaMDjj3SugηyLķǑih˚p!+U& MDt$/=n
tGWw,y?li Qc: ôxF$O
- j$q>
9 SU(,Qnce;0Ru4Y &!cn8!$6^*7xgyՏʊu \A6P G ypIv=3W] e F8BZ8 JD̸ôL cvf(cB8mr .OI%w$ v)^O- ]E V G.τ &[kяA;L;-D+%h םNpۋ)#H2[ 0Y2 T
M!V5QA)C/4|ٺ1;dL *1ϲ%Ic *l@Zy8b ե;pz\QAO<$n 2糘L`1 w]{ ?eYu1m{N,Xb5*Slfn +P&x 3r"}U
gR,I^WQh&*dF^a7 \ȕaᯊ؝Ūq +~.ͣm*1s .ۢNutcCpTkLC̃3e崜j>>C$<۱3& wrSaU+[s"͵k Ou$Sͤ,Q )ŲV0o7=MLW]J?*&$fiT"x`'WW.Ak#; HKD%Xh~
[}%>(͖ E%]c̩g
*y7UZAPו>Q^ϺZB
>
e:T{+>( ìR ' S $.3| k-[FskKWÁ.֍I,v^#{QM=}r6R|8s<SNVe\4<^(ʸQJbNGUclFY,Wol@Y*jq|W$8f7^ SN_-
\LǁKNõ~. 8RYVD)^*.9o >
W@V
*reкr Jׇ?,C1F;4ZD< &^0NGWBZ|GȇM(n,1\lh."N;ya®VVOp9>tZ0cy-&P"p! |OL^*mÆۣq6U&. [Jω` Dp! E]%d1
wɁUK`n**~; Q>@ֵ} ©fnm|Q `` Jn9rOKP@3ec;_> ߌP c2.c@/2s s~6NΩ>cAIi Bs;N-n Ê`/@h8 ZF&F] CbN\R#ӥ
bZf${E7@ yz cߥٵb[[a2f$0Ay"W.@c,qlO!P述^ZȆ7 o Π h \jTSw390:jy@!A2bg"H/d5fG
.bu'\`%秢@ ":I?%<
EW|@!ǣY3)#Zr,C(7(כ/$۹}>3
_OvWY !jpO
U F t{Yp S%g|/ V&Oe\|\2EOJL{p^V] l>=cdyqW٬{u" ^g ??2b$[]dvR+$[|{Ta|V;ylyc ;\.
~=rDm{ d+C.2EtGS/-}:wRo 6JL.(GмYN6תȋ9\?x2u0M]:M]ij2NC $=hRu]1,50 ¼7J UWir#
CKuQRK.vJYh(Kv*/4
Z|cݻ=xF"N 9d
lK21ߠ6eaRpw/*`]N=g(8 ?#!q Ag~w;*Ԓ饈,bJwq.D\_Ŏfʟv:C#9IHR'Qm|>&"Ng ;t1?EwjO 1uF1 sAA Tw\M|WpOB cs^䧥YVql^gXFٞQP97ƶimPJJĢM'rk,{<՞7v 5d9+
f #g7)W K~WcIM^2U8]ŖBw_2ϛ+$[T ։ܥsy`0($js} i~s!jRfbu݈ ܱ˄)s|ȭBaf2>5G̻R ^PoLN4փؕZB"%{ ܊V;M lpʜ&қS9 f PdRන3 {րbD.$"R }c & >efpi,.e>1_nm[/&.6%b$"s 2zd{}:r(yb
E,\xziH ) rMs C§ߦ9ﰓźt|:IA:"yx1&d䗜A/=)9t ?AX̥oH+-Dnjü[p螚<ؽrvmS=IuK
n
b^骙
(s\Xx Y5|( 3I=L5h{Q&!MJXlwt \r24њ| "rJjA}L̢IjYPcAnpcc(&*5,L7 rV IpP\V Tou1RME=XGq}qЕɞLL Wѧiɹ _ϴ#1ZR~ wNʮsQP
\, 嬂R!7d+ N0H{44ܨtLy@-2< *D Nj5reVB8[vℱyԆ ox Yy*,LPa_rp~QIQhY8]d$%)ClYi=gTOALxD0bo{ޘXY D4 '1f Х Tv$ U^)l_I7]m ҫk6
;U[xIv]SI/Rbg<ٜ' Ym!Y|
ۖ4}Sߨ #Ń_ӡrf#ʏ7Jse/3%^ȝ ]J#܁;m}o&zth< h;H,ݓv5(M[Ix% #NAc2m]cSyKp^S8H,Pl>1eyZ?wZ=k5:[Rtr~r YDxCf%Jg1}hX'iq!%F{&8NI +tVLk츒AY[8KE[ <Ţ7zu< %YÔkYHteXt^k4?3lFO3Rd9L
1R p»u.v )yٔ!\S'ȂAu "cyÕT->F3~Kz5'~#\Yn"E .y^f @,K=p U`OwwUb~ &BA% T!x͂nék;KT?陕XP4Xe> 9aE T#Ĥ]rE͒6JH
,&
B)@{ aiQEu9x~8I ?А!J~{ g<a܈c5`O#ҐSw90 G>4Hg^NvJ dri7WNRɁ
y#[cZсNp~ %-9Ӣ% \,u!ZuG\>):M }_FE?4d,ӫKn spF !8m֎cPZ^9/(h6{4`ݱjP
NJR#cݡ y4փ13]{v`? QmEֶ#kF@B8醿]1 ѐ]"c8?JaaP) ~,{X
f1G}oN,\z@E v
((hÃE<
(51vTa ONxz̵O > #fh@imSF<
Q ȓIY8
$pn &7r@h)ķh|`Xjh콊 L4ެQ_Jw6ߛzjH(64+SP?P;ܪ~q,:'#M2ƒBhC@ ާTVXޖY\˵.:yf =7N;C )Q_5C*c ܨ8پS.: ~ k9!1HK-Ub.ah mL5|977E#{="ٰͳ>aIIJ*Y1hʎ[8. d_ށ.=~ /s+cƪ8X-2)g_?x ]qO nk3U!zCuo uVDZ73^w
nB{)@x;Ch FjJ!4P
q2bq7֝EKꄿfa<䬆ОHqܼz 3ƫ2 ]MvP0Tcor_]3$gp]Nn[Eer>2!:)}UǨC
Ko}DrB;jEg*JV4RHS:I`vk%z qc56b˅0N$oF\
DY7Ϡ*:Cꔤ1 z
,T2 n`srMkR&G]+fLlYԣ ɣGB p NZ6t~07| o,E¶E@@tx%%?QͪEhS3D eٓ0y7~x"ݫ |w&qC/@dm )@ptc҇ͤ^ 8[j鿉AJ=!= WUK5ڦq/wQ$F>9ޝ7y#) 3.m5GkDR):~ƧCˈ̀ qc@om(Rq)X6SQ잫,< YJ
BH Է
-WXˋ@ PFǃ!_:4Q-wU8~Tb/RxjaQ.v>140!#CIIZ$']jMtR!}ہ;*=O mv DSDR)Z$ JFZMw#3ܴ\w̼8MP.j4VO&WkGBZ!Bh^n3]Qm夝 S9
Q FbpRƮ$G~XoCkk֛d
rpZ7+Nej 4% = aK[ Ҝ/ ,0p-n(
A)ULnfٻ _պ5c4i,ETD Q QeF֨`1Q=v`*`5N"Ү dj.XF@`AYc(TuW0^0g)#%9x5cg>\5TAe.Jf䕯Kf4oBi|^~m&/+-,S_P5 1:ąM
0Sf6k:Z :3|sdүv }c(㉷J}Ch{s{F>Ƞ ju#h=gui&ca۩S)UM'$gdaqb(vCNtÁ
j:;W\p˅i0b jJh]җozaӘ|jEC[?ԁUץq4B; Ϝ-!U:!ۉd #H_Ei4&ꔬOWSjM!;h* z{O v9h}N&R(OxiP/9Z08d.(IDiDE3 93hfygzA j 2ۀ70RL G;VM:۱JmƓSNJl#bc ٬ؖ$
X%u3 ȩcXI\=m:J#>R
V 7
Gon0
̅W3eW
\ )Gm1K<{
ӛ>pP;V} ) ]e6d< gV9M5D:%E"y#;{ʾE!d<ƿ,uzO nt`z5ஹ& .gtaZ} X+c V2d%uxRNwgOtaHwn$gx.o7lbEE@S/$|dӎ\ NΕ$&"<|t~t
6qx\/
S
:rLX c]}BsV鋰XU#aݡVt1("8V1,x ;nN,+.("dR 6УlH;R) $>~Y<&DgP107T
J('hBL/펟&gK%>A ԟ_龐8Q 7>6'Pcsm< "`ٞC#;ZEI=_ҍ:Ĝ(BLI9v 0*p̲{uYƕ>/![$]^IBX[o\+Qd- :X1t
6T굸_ǽ]cd 5l3i;g3U$ \.#5{R$c5 bј9 &[koaîYIn qB0-:ƅ9-K /D8FE4haIm VL I3%d @A4CT+ٜV*c)Z{p>s22=ϏL
k}8på#4j CH u&xdyY0` C«8;HZA&&9md@7Q $uF TtF^9 +̎_1ڹR,?bL)T[%|L X+AQ^wo?S^kS
{>4E5]סW=d7; #Iz͛GLb J-0}y(1 GOhjuӈJa -YO -s/5%}1013*Qno2 fR%1|NUdէ'5̴88IVef U IU9ELTeFb~]6>d`t& a
@<; HgB0Hȧmu_$6IG[y Udk]`J
]ؓK؈O[akg"x8 2fb(* }KC 6\8+q
D{Z;U;4\\P V8Ʒ< W!nj
38TH; GMG Qnl
.I5=5nN=*~sQmWz ʑ|ѯ|.%T@Tz_~aa}EyU3 C3)܆|cĥ!Al
r7oѹh}L|Ak5ь/1'!" \tth- a C{1_.r_B-6 `EDSr>J?t0~.]>a`_#i %by [/
?2ȲtxUJ힙ReڳY&~h`mU نDj!Vu}O~>)KkK] b\Ӗ]y FE3֟ 9>hgYA)HFleO@MEVSHpP;ԏ] Fݒ8n|b}REK$_%bs
io6*sbp)=JsgO d_Qr'Nht&O6Q,G g #wn6 9ngAoTz!uGdXNa
$[GG;ɖ #BٽB%ܲ]8mƟ<1SAHjW
FMϧ Gw+ |S
ͪ0SN#(J
nfIGP !jIA%*T:Ypm≺;b,S~@ y-ذ\x6l8KPq'@ g۫DO X(ob'c}L
5~n7W h;o0xLN'~" APC}<zMvM:rBjZϨd?z&p܄[fXr~/YKv}Y {W ~(hy{ z}TU!'Y=GW?tIY f7 1?oyi
I(9qcX@;rϙC_$
D
BqJ qA{ ^7ptĦ\=2f^Ss$ fo˹Fа{xQxa#pi8Ҕ kߖˑ=Q#=n3QU\zcY;gڑ(\KLNBйfCj A(Қn_KQgJ)Ym=\DA|gEK( sWds3cp8jFI# эqທ$CQ\zwK
p]ɳ۷ ]zGhK.eTn_ YB5V9C9گ,r't.y;#1>8qc==@ {mP~DzC'ߊ7s p<*Ro#m
9'7y7 [τB J+ꁺ(T}PK :Nvn W JB~TXz|eʬ^Jyx6_zML ~ȂpB63? ι1
Q
" k>yh +*$i!< RE7&]z txi5e+˦R#b27 'IĊn}R~2KlC)z=h%[u0?Dަe\p6Q\ MF*q\З
B?Ih}S};+F QIQT E^̃N1⋗ͷO@ rcV.F1<5 O^#8SD༦
jcT4&JLa |qUnf=yq>E3 M(oTFw}:e϶t E~-.^Mуw1C߫EC#·*ղMA
) a~1 ~ IC3m 0 P=/;RN5v!.\߬K 2CkS tV2{ &J,K͖: ٿ}R)gJoCLDԤ 8q47ԫÂ^̾jOLl 3I'ᘻۿ?wE^'E
!6L.8{E5Q?I涼 >^lcj;Y ?fI1dd W#'I@|\)sb{|}ԋ+\
лE|f~{'^mi+'Rz6z%r3j
*֓<+@<^W{ ơ\ &Aj1[ $/y8/y1 5dV#OH_$=vbAA3с*@u`Rlc4ӠT#%Cv#Ox]jtpG-!&*n X;T}ɊE``YgZ NZpy|Mvb' 4OFIn .d<1\{nf~a|ەƝ>YR9djG9C\wZb煽IpC-4Zv̮8&w&p7a }͵'~'io`T5ƒCm hړěbY nXk 4 D;` өF}4ћ)dR?$k 8<8IlҜ
^m,jM
߱gooYE&X J92*dNHoGV8!Gg:"H ^]Y:'Ww e*g1$tkv!KƷ֪ `r5$G.Vs41%B(U"#5!~ ٹ}ٿpk+U =uu i-U+pU[OPɝy>YnYlu_8I #S|othu PyQer6 amŪ:wH_D QR'f8Z{|Xm- y<WM?!*+rFPPcZa0F"N%*h FMvs1s;8UC:vQR?}& pe +Y 1&|HEIDuHd!'~,d\F-#1ҕuH2Y 5`EmWc
-s,uz|{6gH|\?BP W +Y#e3bM&0'B N ڼ]y"
YZ