python3-apparmor-3.0.4-150500.11.9.1<>,he%p9|?ktحOr-Pcg%vVNsgXRoF7"nSJC-&\;FL۩}%^Acd m!'`ƻk4񪎢aPu_ Ow\SG"pґq--7n YzdL0=xl_o9[!:Wh, _4֞<\v"85QO-[jf41RwP"W"~)BTnL?ѥNGQ>>t?dd ' T= SpUU U DU U -U UUU*PU 4"("8#9%:.xFGUHUIXUXY\U]4U^ bcÊd eflu,Uvŀ wUxXUyɬVz`Cpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.e%h03-ch2c SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eeeeeeev@eb`%eee103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d618125338a5b63d02343cc8ee55add5c2857938bc28f057ed5a3cec6596fe45c21759f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c054742f56fd7bd6387cb47f2a6b19110187c9e7af40fd753594287ad0a4cd55ae8fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2c 1696247589  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4acfa4e449ac6720014bec7850e8f0e0406857e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR!TN^CLA;utf-8f706ac215f7e64bcaeec79c1a3d43ebc8af0c8ae0286b75e641797760cf9a566? 7zXZ !t/ ]"k%) `=l.Xthw' 3i `/L&yi(Q6=ԓ,%.->` |>p,Caj^2\=Ckۺ H sC |tB]?")XV<9H"Ƿp{X>jn*v JAd( Ǭ ѹ8ʖL tH1r7 FR kz_Zb0Ҁu*aOL#ͷI]X[v*ԬND,)t0:?|{P6[@bMqut)4lJqaEXGLj(-#鸛 #wZ… C> PV'5Dt*׺Fj&BALskxp%_2*g9#}^}XFN"nqEA=3MnWb!RUX_v) :jI@@C3G# Уx$:0 uE/;I(R>]g)D?gj-.d+Qmjџt8ϰmMmUVF0)=9բpDbJ癸M~^Z'tHkLK窄>Ԗb2 g\zR}p](<# ,B7SZ'1dt[2BH#ZW#IHR1Xr'c- $T}~~=qi ŜX$՚pՀ%yOg2wWWr颅 tz)މOj}{{VLs W Δ9qM8A :R|,Ƴ6:սXS4$8>lǁ]ҥTcWG(^]+Ġkh3*g zܼB'Jj7닼Hi\w"m:&` 0p1l܁J o"^@R)=tkΏ}>ZqH*B1mn3$ |R҂uA˨<j3K |t3ZӑfZLȏ1mEl6^11mrK+֚'\VB>Yz"CzmаT TTc,j'U I%Z,zh64Fܽm[23ĝ*(n}~暚s+m9}b|Nnp{fj 5j|b(uc]a394DTU˶TƚyPԢcw'Vby؜P}1PD7U']atXrhfF ZF lgd81:αF:(@x oXF8⼿Y)RwxaK |@B-u P`Jt#{t΂0_Fy /eAU@ 7l1Adja'K$tADbI#NqA*Qxdt^SF(?ѝ審lQijͪt|-;s?S0R'FV*U43mwQ*碹h{qw}&1^~j2-uM)* ؖ*3\L2ϝ|;#1|TPu}g$Ro/;uwܹ֬j;@r)ц<°sZ$TwQ+sRaXmY < M=z#yA߱i.nac+OJQKggȰ9` YR]N8¡#;mr' >4:`L ; k'rQ92=n7 O"P>+Z&jYRjsVRZREW+5#-D+CRmM z$(2X,O ,v]=\3 jRmk8 @'rR U-;F3,`L-|e_d?}g{eMї\ITᐉ%>UM(x>]o}k-k_M.%VOuڗorjHOo~CRFOP7/6fEVYS "ʛgӌk1Tק62H {^_^ tճK4ZDcAZ(4?1zQ1 $bxheLgQ%դY6>|됸KvJTA@|Wc Y̧*U?mBpv0*IzhȀo`GW]df), ժvCK\В`2U>(j aY |hnˤSҝQHMbs5=WaYKj7ߗ[TUfD"0 uMEqH|P,J(4ν֬P}*Mk"; M1o`behKVST9b. "@6*Э*IJs䒛rM#50ۀ.ّs5hUlQ 9Ƕ43gKWǢOIA\r#$s*]i}@cn-ˣ5KDZM/4 MlE >-5f _/5u|x\TWj+#X"R8]]foOJ:uzqLr5}#:,h"cG 5d 9p3P9Wѷ(:vLf_l>5_[Emd|Mn-0H%Z˟bV)A7חʅ;yLa e-SFvg>U̢k;`>TffVȂ={@yKvCG|w|8Z"!o6 PmA@*p<-1?3\La}Gn+n?(GJ˂ʥT_TnVO@Q%+vH4hQqdz =;l!Ղ`^PP(>Qh1e=mBHr:jo0lig}k$4QF&~^Tf(̬=3xoB4czbDjFJɟXj`(ߘRyOTyglx}f}LjCURH *#) ƙ DA;@EQZQv8Cn0G!#m̓6ٯ9g05JW@SV!`.^,w\,kʉa ,<B sY#7UDޅm NS5k 5Xg1oeaKOnHߤl6ohYaV<82r>dcX lXaNYKe\\5;{M5-<Ϛ-oOh̾5Nk4hBpF;iZ͊ G1՗RQH(ܵT5ZмX0|!)~ Tݚ =vK`۫SwjXM]38y:ݷ5Df6$#QG>#nZbϰAp p4/Wg_M +_]ݣ sG4G7HIog`y&JLKR0(倀K ߕ. /OP/+Vv︡Fkh\=*.B1YM?^/ӮmVh䟃eκvLwַwosZdc/8C8 A垪|}NM.)ٰM^ٮ? 4Jox(8/Gr JQ[4L`L"`֩رTIJԄGh(xbea^*.?^jY)_: / <-צ t ((s":Ul[v&9~+07XxE2N]3^Q ݶ?B93#vfU=sh,`X%u:Z985(OT ؆, t/8Τ|c㦛Gwߣ6S'=58sM_S=_WuvL<#Rki|ӸArZ) gJq}䵸A!%#Hj{lo=?dGiք旉Ǒ *\qr9u渧a1Y1 :Z3b, xzĪQkW3M/iaJ%f80Xrhg5#+ NY_3q l| dcm'Ϫkt *Cp8_[3RsJuGTJc0G)nϗ)@<5xu4.͓#'{5 Ư&{Wod*LDNW bOTp/yK3 ~Cl%~/peNCv^J\f*3"e J5& u\UڣtRj6hғucPN^q>{xYTU (]+X|5`2/eRdn;AYlIoNaՑ ͆ۢI*dE0J1!Ilyʩ&X\iU הA ܃A{itdq{rȝxkLrQI BƱܮ^DGdS/?6޿]LGYsgՒ֌}H f.7{HfVM2HQd.^%C 7G.JUQv$YioF(` +u20V-/AUoU;o-[6>Ul F P=  8ϷP"0$y*YHM:[΁' x׫#xΐqS:ayJqĄf\-DMf$cJv<̒w:iG3&@.\VhJ:g݈Ǻ ?RR(uf[:pn 3P'^iŵ7W$~F;v/Yƍ_픈G*kќ6Y57z>3}o;W܁VCk>DIx̐'JONpb0އc o&Gr *VWVS+~beޚ및_FàeKFuh&&Ҟ$ 5i?z.οf{0pnzNѯneF?2!wZ"%&\iu0C&X[ksEʒk%R'PRڧXhwT@D9%qK/sOn"VsF[HDՄ蟖d#Ljxχw4eoQ]Ţ?Ƨ>/BV=jXNR.OYp". I!Ggۊ'!+;\-(&DV9ߺ؂駍^ѡ Zq*o)Hx,fn)Pեzn)8UTr e>)٤oWOHG<`趾͈~ =$&6m7*Wq\|=XOӎDAvILhSF3L2J,Wat:^k2hFvlhvŕ[dtyS~^a? t.PoDS/"Qvn0~=qA@́JJ(f*ŏuW4xq/nX$_C^.&vݖ*8ME4Lu-sDHgn[Iƥ!UjwYs8m_捋ds! &kLvyѳLO{pc])C+jf"&ZW^hέn`>5<\MQ~r-W췧ٙ(M,7w-I}tФUuRws|$[ab…bN p\ } zarq8 XNҶXM0N_$wǣ?q>e4~Hʘ 7lKL }Jp=qO-ifneHN^=|$nדɶ aGKZ_w9ja#%fR L2^q= Imܑwp|e#! NS\NPThuH"^DŽ(-qz[u򯄬wIF)n$UE6:B(2B.SRp&:nR%\LVelL̮ed}O͌L2!%eS u3(ݏ'e);Vt 0kp{'A6{RN1X*=KkO` & Bq>t4SR{.$-[O׌ai0G  0+b.;gb6 []6=?;47XljnZNΜ3w?rà|2hzfoiO٣]XRk_ȖAAmwiɓ_B/PBɪ]cL?3ւ?ۉ.q;ѝ@15Z8"W%(Omw:xQaG jk,y,HM7J,N9vPTȠ י<_m^UH"FJ&Iv!< ?NH]mK9kȵމJh^ Ɛ=G˜nXGxvqo/Z?5;a^bgo5B{1ߖ/(Mb{FL-s/<@|=I5|^ >RĶ'gWQ~Al>/ܱG0 )"դC"LF9Ãﲦ@bZSh2I<5oU_=].WrHuE[wpӀ4'O!FciӆUSmlcc@Yٍ7bʹ0=[y&iC~LmWdC0TojIk v"Q"w -%j7F݆Ћϑ:e-p0{TRbA <{1|xbNd,H[Md _z/_@E1DL^kb\m6ϜBvj yyr*M$7 1@ncM @!yDrV70{ w>gwz4WpxntZIArqUyV5y?wX:63ch~|M@Gw˶W7BR&]= fz&gHZRK51^o;Sll`)^qג՛ƞD|E늽&0}FM')S~솄]w|Gޗyb-N{%&1况S8xLQC*1[nG5F #dQ}?;:_Zdw#59_8 f Xvr4 Tyǵ w"5pʰdTZ3G}žDžo h񨥃yDnBGnȏ6>&ES:Ӭy/DZJڼO0 &#L^|l;"p4V;8pq[&E c c -7rF.,gVQ`DiVѢA;4FYrRU: 9WI?u(DRg oo媓`kj }I9Rm&PG7]WW;ޗ %<R(h{P>AㄺwJ Lgx8V-n״Ud+EufKRHoPr«R71n5טD8J!+~OQo ̲HqƶBi{aXyB Guu]7LG9 Caws3Fz ic;^)hf0`t%wa(+"316L3Eq\ Ln vFe#02z- c ΣrqO h랍Hg!M 3߬O1QIln_{[?yݲOYgiqZLFR*QҖG,ӎ}1AJl࢛яÕZ@!Q0C^~VݎϦ;v7l/KLLY,Je +s3Y8płNփ=k?*@U'TQh ɏƷuF1f 2W!WjAmr3OX.S\I,G`e} 6}[8̷Ȑ9Q87X}mp=4#+9^fvbZou%3SJʸ5~8Q"bI%[1RsaCR/q_vȖaŒ^2cڌH,"2|K<5 q '=sK+C )wfa Y)һ_r{3 ܿZY:,X:, l=ݲ-(~Dx(q,B9v<㤽3% ZjȈ&PtG12{N=\D#q_gD٭J1vnqy+q$c6r}<#6?+-1Sg/j{z< ޱqMe>(:E]K=#;v? X‚b<v0gDu.&404[:c[so@$n+|gs+qbn~ ۩HhHA-v\j|_jox&lFM:d*mism#>իٓd>4CHJu/la qn|ù4 _j{⇌"-/_"%(܄PE׵k#;iwpp=u﹈ ]=yXTn {S݀8q3ԖI1},9m|4!e@RYУE%V0ls`&ИVmVϏ蛰_JLWQ,']ͯo!j:v$NRkzL ПMUU rkLKܘ*7ƿ?[%բl~֛F9!L]a <3.Y%>c$O[m[ZRDWX=økFs~$>Y%pcR z =FH_ @J n:&'o0 ~LF {̻Zv};HX#oѨLZUXlJ:lryt|+)Y?*Q30eBqp~Ɣ"vw{OCw6 @X3<2 N;u~!Aa҂`ZfVW+hי02!ɼL 1}OK9IC#Y+5{IPETڀ)u16;8" 8_8؋􉒸U{mBݸ<D> "I3pqҀk.^PDYAic? &<`?dRInq? WBYxN鶆;s ]&>жuj"uXs_y240-oHƘjYR\c O1 u D3$;V0OKl@0Z/"G#) 4ZM ?c ۽2DZ/:'壈A€-ʰ"Q itɕ9f4ާ3X(TT?lu0PqecZ Ҳ8EHw;M HSe;p1wjvv܉ҿ̯(>jVHLzBnfkͯ0da@=:aPEŭBٶw$[ªB"˟ <?4K9lg/RzylCX\Bb=%tds0HMz[WvnSJ 2-hA88 Fejܚ)4y Cb'. UaC.X\nz$L"sd^&/Gx]t:`sJl0b]o&--IOGdSq ?AjͼKjCa'or]M"#.ץ.y<۟r!$9CBuK:wMCW|w'7^ yA ;6 9^}.[~n'"'/a7jGхȎ]iD.] !feԒ9FUy0 *8%@TonxZC-ͪk*2]wjtOŮ~G=|Q3zPH<wԋK_گkqD.eYմZKDdҠA j\,$7zzsK !l%cy{=J(DϬJcĚ}Ԏ tR X!dBm-)p$(q2T*3qL`*e$ؿo)0Yi(t4rbˬ8~ץގ sr-TPj 'z^+^̫4㥨 ,4K$Q 75.ټMj#C\emɭ\2wJveu]+U YZSOϪf s>Ԕ1 ܷUDh ]E|ЯGV;!1o* O#؍7 Y!Wj+G2Ҩ3$[#Y8Ubp-g"M鯑XWqIۼ>Eo0US:MUr|m WH%͋C TQhec{x|Fz! Hhe=`|UK"Bbh乮 .s] j!]̥=x}vS9!+#|IK6G09>upw^PpG 4nWˠЬB~1i=&- z\`i跤IbUy =c?71R2=&8sC魑-R Ԟ"DB89râ.fd>,o)h -|he` H Y^h PRθU˨Д,m"lLɰ lF!g.LbӴ<erPQ:oATVUA ?܀ꉞJ\IPBV`)$)ttCyl%>(ݣ+zt!fbh(5j DQ.}h=dNc?J7)Z@~ZL[wbl\t-.rrD3*8#Y/*jr6\m0@!5*;ӓ{k?)~έYz)qG0+|!2V*џ:fZ``U~EK<t [/=ʅo'yu#%v+8P fq-}E\X) [L7 ;gHC\PbYic&l AZh wM:-IC dй\`4N4{Pd(Lf sT, 6.AA߂8Q1^T,M婎^b,-u%5rEmG} =C6C|ײ=dT4c(E"Es~(-< e6I1L%XtwL=>Ev@k- le0s7r9]-`ETY "F>Z^)aS'O U88Y~ IQZ/aF<S[ ~ߞ_5+~MWy0?Oh8 @8#dLĀ};o<2WsF(ʔԎ~2ŔC Z5Y݇&lݨhMᲙow!~O㬜yRL;cu'cL UW;,X TYG2Dni mEFekb#D5PtW`.<)mzM~.D媼6n)ur߯1nIόHoTCJc\ љΡy5 DV$I(uPJ>ӣZҴ;|&NٷoC qm ѭi9RئɜvuYU'3YEqEPۮ&"i.'f#OX{MNt^(wxUZ70vQvQ: Bv[jDPHQТYvbK1+pvv6/bc,J\®٢-_][~adslmTw)Y v|{F@:vl>n 37:aPF -hEy"]}P\azU:lʉ\OG0g  Zz+sE&3 :Y8p9(a{an"O ݁%c "X_ EsUw R{Jݦ{?~tbhb( 4K3MD ˑ\yq[=$eHnvQ.*ĞonVS:?NEw 0Aڶ.U\].Qh$RR^8P 2"Z$p_Q, P)panUKxyz҈(jÉQD+1$4P g7$N,y+֔i, CIV]/3:(cMm޽e"+[} *O(r(+àOTBѓf,(F!w<~->Nsf=Xas+g"wG4/.`(,${bF~ָsVU~=ÚN eK 7t\vqnuk yʚe,qϦulU6Lz1 xEKz`E{HZ܁{i-,R@oR?Ҷ֏Eo_z։r9WkF0t싖+Ț\2e5|^^m%-xє1'{əNqhGgN8uc<[*mhAB (<-׶ Pv2isQrziayWZab0IݿF7if㔽.G,!k9(r:5 U)Yn?Q^QFM Xи,?_OHxF܌B+^8,6E{+߆6xXh1S4."^B~UBbQ4BE c'(KQ!2CHa8DW_ HbD~{ZE/a coV-%-4D&EM<}}*DSe@z[<MJAJ/3zsk`4O{x->IdˀOytBJt֑Ōt|W:'%ʼn;h̊?QewYI 43݌(64blv^`n'ԄBv;N:/6:(SV}q}ySXGL>KO*@D¸&3H2KFExhd ɤݷE2Qr͝Ye68^A}xZqʻ;ldvGaBa;|"ZYKHX)67qh{>(! :ߔz.6Z6%ՐML.zjĨ,ԙ|iS󫹢rdczd$YBU",(l._ۛ cl 'd]_Ll}?=nڋ4}9xb+M-CBF< _) M,VfJ%w *-.$kNVҰ FNBw\ΥjsCL43RHǷ}49ʆPr+'"8ģEw;AV4g&d%{kA,;4Φu|-:: DӪصu6xh|lQVGrfh;?0 h2GD=V@Cӗr8J#WN2ƻ0#FN*^@F31 @3w1{LzLC59ic:WFMmaDdS;zl|[L`HY F͹Vl,}UCG'厴{0b!/2D dp檹pnW+6OU*> 5>Wwjt^hx?#:a\MZΐ-G٥D׶h*(Ứ|`:0" Yj8T$;*5ON 9 ȼ:8B FpeIBM`T? P,QapqaINc;!sPª|U Ϊa/B6yjşG%  `c>MQ?,|HoO:t. 2[N*'4:.FH9=V!b)Ug */:,1=yGa62bܑ'iQNr)ք0fݵE3׳:2<6R܈z8,B#zw굗3z:s#dXWOjG>$$ṅhۡy7@>]q4qk3"ң~%#aD.h "JBSnk#($*{M׫‚TjQpt5FCSs Fo5?9,>ӷ1şZR"ll8=wDhsAtM"^e@6\˴#"O ,vdg${0;GѤID< vՋ;+7HLrU>s $MF O+N{^AY A\Y+.8vI_8zPLj0N wX u+X]|f8AF=7`!j <- 55󨞕c-K#*" <t*{^1sD*!90bUT:eѿ=O=tw m[o cEߔn81unLV9v v#IuC~vD87 .&"ZĊpuq0 7;dVM&>c/R$x_ eq8$]J>wz8KF1{.eqfRcJC#7?:k'XorVߡP~'/lklla59QмB_y^+Ԍ|^xd}|M9^=[f/;a7Q"i{֝lM! bۇKDl(uxT}GrSUm /϶%Lv1R 5E3>jsr.N<5YS{&T;cח?ps.un| z2GS|qS;=7?dlrFϏA]n'yvQwͤUN0П`!EM^_57K5诨ѩnMH~)*$CuĀB$ BIťjfB@KWcn=UD`(SU.|@(e)A3ApD|(dVqMֲ(6y~Lo:Vxd xquSBgY}w8qnoX{nC9$iJCRX3Nݜ qih%KO@9aSuV4o=a/9Wpx~ȥ?ҩzl|5Do,nO'522YdcRmm-ؙk9 B@E~p8N<TS4tǻ(ci3+ I oz]ބܭ>x] rmxҟHA\j9B\}+be╺]-ZU'}8yl [ĴRXQcQPk.Avv"eˡ!S;Kp+RC lv9[_s^g?jí we^Q$@p$?IIOtnj1Ns/ϲ}$=JńrC$oI%ºӪ&9SWɾWMp/M1+/,OG!H?pI$ )}pQV Ut"oo*yӦi=$9pZv?dX~l=w_"H<"| k!ucU*DʼHxY>3mj#`>S“lgrO$? ;%v#43k h4[UNS7H) B4z}:JI٠i-=2(B^S% O8V=}=%AwkLzTOR.ܮh /'/ʍfd-zL]&-C݊;Z\ρ|o11PxjqK ,HKiH,,SE]虻#:#ѷ[-l֏Ø%GS$9 ?b@XptL䏨J˼ȋbh>fCuYՒźZUt+ ~p v@ډ˾GX+FqjGl| չCNvm }q8pp1&`EΤX :lTcQQL ۘh݇P49R3 ?U3N,7*[$M0؛jP;fHU?=bc0N@yi~=W cnaguvGx0JjHZM ,d6zi_]0/dwڈ\e}b1o5'xԯw$_ n5J$e Dl--$_e9EDhUłQu?Զfˮ(WY_&tcϘ@!gZR3s4FC-OҋpJ._AC7>uvBs,ԯ4uW5A8V`4U3vEDŽ. :$OܖPpdҥӋh+h}I KT ȧH .iۓP!y슒o}&u"6LꂋFb[` >+9GW3x3HIk mpMcRڜa։}q'$ow:SWkP{(L .$N L7+p4wze9dgMSKeZFUi~)y.G-)8(+\/ ܚhx*AJ*jQVmFND|a6;O)"E_ݏ6B!#Et*.~0NuF] 2VzTCVI*C"I` UIL٨;kjf\Y4|/_6T%8IXg36&;UW>JuCo8`-yEyؤr,"QO=ݔaS]V5ž=^vH)Wc3 7Ĝ\56n3.oo,[ր(-cAN `_>gu9NIyV)9!8|BZ ǿ;!T7k/!_Lg3(br3\EG:˛ZYi>WңW³%"\ϹIȨNA<R>sfɲd!" n'(eȺdq/jT ¿g"~T]7{ 4{L}$h?JE&/s\)L7=첽g -#odLr宋-/cLZB9 aol dGfcK'U}YXlY$&hqB.t,޾1!`- [kvm]]ƣLcL른7D6Pv"WH&>w%+9 RK(8c&bOȧՍ7lGL ^0w'%Od*󪩳eH'>ށ=$N9=1o ` !vFT*m'6 XMҞM.ԹNJ]pWOr,vx&fl{N5:7DuH F$˰?JY7Eo< cl_$< %8fU+ٲ_ m{+́#82Yo5ڗr]PƐdK}7So߇7Ki8x1EL|BK0,㠞"b[E'}$C4V#N>Iaf=>A? mShކ^AL-1gKMFēwLූ=*gb$?J+WlnUPo[t 51eJC.kW46̞̒ὣ)]U%-lrӥBVkF ,{>l?b\.j@OXBd 7Ml g'SsGHP3 JgpL׳EH-^ R|-M팙qk^fc'8/iCcVnv(' )8E)i1iP-[;lj Ѱ7nD2R}\ ~an1aVIktESE3mC K۠Qa3p *AIC0VW5jS!DR'5MaYbQЧcC!4MpgrItgZ)e yA!^N0җK {\|qhrlosUJnեrf0g_y.e ~b'- +#5AMɭ6ſW >zxmr}xtS&wi锠+?}TUw~?oֵcر)/鉌<ٻM1Jr]u] *UW_[X,OSuM%HL EmTU0!vrh1rNe5a/cKG,-/S'8c壨iV{w4<0GOgx8*,m|>0M"\& 66t J*ҖvfIKCwX=B(^Vy0.25 FȪTðFJq%[_j]}ULSJC6%ڹ"ΝbД.DZEsJj~FlsAOI>:*4R*q n UmM؇&ʪ_xuH`67/f@qH JCJX<?h`ˢW9-l_!lEOqF/m ӏevl?M|%=b+`]sXAv}r~XeokdVRx" +q6ThxA3<"7 .46484s4;%u2,^~n0NB.۵4:`\X:"p@t#[Y`sr]I;^nNS.%Z, .Q"z@}bf hF+Dsy3IPQ VT73Lxp{G,b~)QV:h!!ql@'o*n -, 0+%s'ngt`njѦԽz BTldd2,(ɲ+S;E0:lcWEt Ȑ#̅Ά{#گQ-Ѿz*L,f5鷻LEh6v{V]~/cʈ%[EUOW|("]R oN|P`?IJio6m%n::QD\>;cf9ۤӇZ5z0z՛4iX1-`i,\znd9T(FaƔXB#rMf 0n $Uhsi JGM5 4f K.Ԧ<(>Ј5L'X)y)#(xEsq'F~%җCI KB_iJj'bj+\E`MF "tkw)NyAHYsˌ^'*ә[pgT۵Sb ^W,3 o=N$J s[93r&&˹u8VL"3o:Nm#}kR0<ղ# `YGYI*eOQr[ F}oG0_ˉjG$yUuXL {ky,+*6@Rӡgch_l/%}rnI=̈́qIPOPZiXIR'R# H\*KW>avI{w>7Ñ߹X8<˿z{AG$߫wIߪa)t-A)"9@(jK)?+.JV`Xk2W^`O`tK1 G;^nk s`, F-0΢';-c]>hŐ0Ft(V77~*ElNɁ; ,+u7%h;RH/T[ Vu[\26\%yyGf` -V* bA#~nh[6 tIhiMOf0l!Dw~oq\Q]i-.#2c環B{0Q#Yk* /h @IB:I?g:ap"LW'S"/7Rκu[y] DfK}ώ iPdXXl՘4_vs/C;f,b-s#P`9OGJ xX>-l8AVƇ>#uRInM"w~~=B(-w X(+4Lf`}ٜ mgCV48"[nS-][y'0!:A|lIX? o7I8J5zWYsƗ?tR E)uQ_dFͭ,NT}y#)!ݷR^5I>>+z#쾄==iEo*2 DT9fv?>^ nJzb&~ +K(Cuxح5]:N )$H=\0S(:R\Gě#JԳܼ7U9Fx3@qpO5Ծ/YU(j)O7{b?II`_Tcb/?Ӄղ,Gm7uapx\vqV,:Xմ<؏y]l<ె׊ֹͪspA?-x$+ȵ9_h2 Uq(?g+H-tu}5̅0KunAkwy 7N KD|DtuΠ>T G!d@nlWbЫ@)V9B 8E .s^1!IdQǨ5Cn۸{ס'uٯ) _d~)֕W"OxО)s)Qlso޳D-WAs%^nvjd\#ߜ#+Tl(F$RﬓDCr  SG%0fPQ8 t&z 5&2 q0㫃y#וy(REFF,2)Nyg7wЖFPt!V Z \{"0u-=CE⌴^jF^?%k؁>wV] ,!(P熀\8ɲ9\lƄi@-l N 'm9=gUn+b6?÷O &]bzzI_qE57ؠ33Щ7[Ҥ qT35пr.zj$'S"&!W1I&= Q-7bQDPwٿڔp牚҂".HTJմCwuk1Xv7+U%E2DnX`1ɈЛ0{)^(T!#&>JXxYy]Kv2x2^;,N=`[$ _̫Iapi}wo)y ns 2&.:QU2\b^S__m.wA&"q_\] =6ކ@xB ^NpGX#Ǫŷ>S%Fy̗!kr݁YZz,Nw3;3b][N/M߬xxDe&85|u^KyֿtIfPAl;X 5Kw8l̰Dzo j6f{|C*ZK#dq7ci*wyzG4[2^Wf$U DOwhb uC7'TPspT _)ѹndHMM{TJQ]14ua(]Ko&/:Oj]Ij P<ڋ *S^Lq@͑9 S?*3qy]orؚfRޛ^4TJn쭏 Aʮ8R:3 %ؚ`3|%W.I4t%_ c95Z.оše2ir66y\k Tl<OjeQP Xa\;o\Tn7 ̗r ԯ#pݲ0 o_M'Gۺ#z ON/l:-kńΛu.3v1bsP'tkdC8-K/iLazVm4km@b/ )qsbߛs6aqSݧjh3Z;_6Boo^hkFX{o'lccF}14TfzwUFƋ6.ndV]@`U8B:gجEC GORFO`NAS t7t((9Myc*0Mq, Ɂ(|bw0.ǚi>ZhG<8} ]]\x,s^CfEwjHٙ.T;hӒڡ? ,gn"DZW)׫u ^lq,g{=[_l,b]҈1H.KIgsRb,9t>c@-=°$i 5[#xfMcI#g [xH>,OxPWi~qb=1[繟PD5Sn)C%VRr4 Qv=>tj_EQ4q+a ZQH|B, F,Y)%(э7t`Q3euad3tZ5Å8ަ/ٓ!c̶S"岜ėY.ts_@A #eS7}UTAAwijY­+ Wg(7z"~nY`KNG#},Fˡ+^HRk#sl@ԉc!)2^q|ܗJt5T<>xR|uQ3u i_Z.`Qșo<OآIń_r~NT̏Q6: SM:d| 0FIl EwqP>j# a0I 3xם) @{t@ׁx%&.ӥ@NLۮ,θ~߼~v6bުd"^HyߴuFa)D!* ׼Ehlf DVAZ;iv^L}p~'cﱉѰ!;L6dSTKvZ N y|їUUso>Ibh>kzX8sϷk?k;к|CՇkai΁+էf#T@S]a8X.^;5n Te,f|+6 D);J3x 4z$ڱsG82ܫ~YsMXKdiÉ}{LJC;Hb4hrS:>6^#a}_l6JFyAdSIQnŇP SM dtD& +͵]t[Tia,l9jr O(i~!1z<.|*rH*{ExZH y&XVVv͑]v'͍T滺nDŽ5xlQwb1}G3j)]P*zU4뮰>C _0y4nVu U_҃bM??@IJ254Mx/|-:@Ԋڴ<#tm݊R߀lypi)A]<|xoZl>įCVF R|,>k^aŮը&ߎ-pc %i0,B}uHjֳ~޶?긧v9iBtB f@aj+RSZb Г!o4֬j_"gQ0]a|\RdQxrgr]T#i,(Gl+|KoO:Ȯsewpۖ&B]70{-ვWGiO˽ Xm!HĭRx хs.V5 R;Zދ) jleTB-ytӜdD^:ɷжY%Q?y:ҹAVl2AGg.v<Ũ'|<1Uuư9[g^g<.?Hg^*p8t(٘iy#)Y  ae~K䌋if&̍BLcN#BC]!b{ #OVR7*]9m-{G.Kxiy~)gpY(Cd)Mhl&*=FA%3tCV2RkJ"^"#W#a);n,%~ujyhp%A?s[~bU5w+}?A憚:-xqs.9E]uXh~%m8tQv#""34VH9m○ I  qxs>+V_C;S+B(mBLb$O ڹrHumbRѠSQ A]<&Dq( %h;r e0ȪR˺@i/HS]a%_ oG z2n~۽C E_9 -U/ `ar,{e-D pky\l4]ˠ^*,_gHu4`i: Jr $aAҠ~6z3{T>Ցz;1Q\Pah?wf$,BSpww;uPKD5|&_*׍Йiڦt8. !!) wE6mD*փ p9u*" \ z\oT7X(tHq 3‹) w내X@Bli*Q|3ib3^v)}̡zš(~9Ş|e1 -{T嵉MX ̣͘]>8>{ǯm /BT']`߄$*!̳E{F\{r/-G-KV!֏>ɦʑpFDžwN#o&2u]6 rYsB[Dt6L,Ӓw7P|Gc~˽JaB cfWO&n6Ql\Ґjx"y cR+,5,? fUt`P֨XQ>&66 D~_3GS%O()-S˱Ĥ vL2YKE^Β޲ۃ߃@j_b> zTϴ6`Z~XTR!DkT ןBs&/$ܤTLws8Nv\mVtdaS>G "|pҲx5UIDMd$4GDX##|4paԵ.\_+R&P{WqP* !jRN*DUH {I]_6?Xowǻ0ԱE]tt }nEd R(@C̈́HpG.*8Q$2;f}؁i+*hrBjr6 22u=ii ]9%骔"D61AJc~aIt8Evmwk07 n1]D2ɦEoP6̑Bq, >&x\2񣉙 ;,-/T4m* c ˍ5< aۇNpb?397j-؛C)#'tm@U/>I0ѿJʚ'f*輺ҧA$f#^k 'a0pϷ)HRiKsȱ~i',gv) u ~!ML W,OPcyנ˃ˣzcG½e(\ 2S텬U"v=R2#0PM˫RWSřzQ "bs/z1Lw<|^ 9cN R!X@ȡz] 81>Hi-Sh+^ gLsYѾš U=5 řڭxcvz\=7,痂ϧǼ>w;u>_79|ce?ZArϦ@)&!7<eY.=F笮 1A>$FrVo)k]aՐ#2 Zgו+ѧu7C?lCB~HV ̖0rU*LiVwvɞa5rӶ,ۃkYֆ]!Wmge*̳d*Frj=S$Y>o @-c16a\O? - Y `Vbr3iVqps"R_^l HiQ&=YNJ{CdBPYL9JE98b93%.p(M5Xصj޾V; yLNwu-l`ckyRqSL*9)A~o~mrOgFGx vs)z&jS˘H}JґɬG7S RǑK^J*Nw:yp_ ..N&xYqjb&.xQ,XQ ܸH@t;Γ_W;e>y}Pg+ Y*P@R}\p#{_U']PO;cxĝ/}tsBg"{tA/3!f6S{$}V4 g`"5A7P54O"s?ة|=(zS9"׶`$̒٢l;/p߈"j YEfʱ4j#d$+[t~!ư -36k$f0&!#8t8aK>)nКJﻌOd|kOՎUzľ4Y }陃LGIG,s(!N ӆܮ%D}BJHY O0P+zs*Odh)XKuf[WSt~'hS#jΔ yꌖ>Ɂu(4FkA~-"%C-a"2PBP5=w[/!BF%ǽ_ŔׄdYs2&`6XSaRca~\F+VE#<2 &_mVp[deAr aSyLrL]kl42GZMF͏+0Fs%^Zpe0nTl#.t*t>X};;®FB yUuS;2+oDdVn BGy}r}\#FsғJfk=OYxD·ȴ)ZoaU؉6Pl4ܳ @;yf堺TL #2(mD#Qy,@U|ӄ" z`Nx0}QH2m8L/xuIYobWV%3ŽP:b'r((9}iNeH^M2ybe'=xn mJ>؉$wI^yTG/9nPWU~%BݴO-r[44Dcrmq]|y,>CeœcBѡ &"tWb I:yEmO{Ӵ^.:9*p notx F׸Qh$0 S721K K.'&-.mAS|j}dK>~}TXz*iDWYl =?x`UFB,&ԕ_&O&c?75F}s}9㟼-FJ.atNU |s*P~".!{aϋ׀s7@y@}yy'T4Pp̾Z M^^߁ԨʕXzCη@sNQy?i9!T(_{z?U1fÜIJϩ?-g;]0 /]p_Lr~=*v6~pOSnR7D ^mY)YIm >ʳ$gF/ZP<Î?^4nKF2さ`L0?nJs'YϤzID~ѷaU3'H%U33ڑ[|CuϋwM\gt@JNZZa>R+TvJ.eWG8/en&.^ΈZ.~e %'k+ 2JJ A|,kOu+ (@%JoY[3txlFSB-fE^} e̿`GMQMN  [wȞRZ(kP׳ct#Xoq=lR_zHEMʻ>4X͐KBX670(kנbjǤ.ܒؓt͚tS #Rn9wuxQ+NUhz&[yfy@KbY!B}t }BHSK{+z~i_}ֽt2[?ZB\>'6Щ%0B:wl}XfOϗ5餮 _H^gFX+0yT nYzb+iCo͊6Ϝ;Y(,/u Z+ X%D w>3x[0E}8Ļ7x"w1۲(]f>UKc㖐I6M9$fߕF7O$'1N1^o->Tۄ.b/dz}Yj cnC N^M*=ҙ5̫vaǞ.)QBl?ڹ\H@;b^TbB ExՑ$#ag{S}rlz8$ELﰈ؀-?X;~1W bWD8Vh_cH̨NүAoXWv-aS0cE̿h2ORF0jXL|,|kq"jFZEdG1/[kqnև >@7&Y8_jl"Zh0{/:`70 73%`fqvyhJ97mP[@DsV >ˢqmqi71AB,J3r [P+I+29V޴=;*VL(Od2tI+_]!`XG?]~hYq8I>-SUf[)ВLQ6[Pg~!ОXsg<0NhQ|P__{;j>c2qfPlɌQШ=5% 2Sˆz|A9~PnyF'itb&?9D+pULہt{ɬJvx=#O2}M"kJWJZ/n'OO8Kl"|Ȓ sfIҹA7ځ8/EJ(9MT\D,~eAH޿ SY δ}Nt-]mIBۭ J#RuИʩaL%#)1=oQ0XsԮKȎEeBDR9* }d2GvNy>s)h鬏]a8Xi/g=ЕUН~Rt3!Q_96@u6 &K~Cң4fgƘ&LxcU(9X_iD2 tPb;fgج@usɳaqZs`]9SٗZ}!cdy1f2 *(, , r5vܚkɽd5eI^3XlWrџG&YkeJjc e M1j;d`C@b5 " t[XLcK4UƐUDc 06H $ 8w )efvrtRx)Đ+ݐU@cMJAzx#RC'&Ci V~4LbH-"+Ӧ6K$'M+RȾŠMIi3ħgϫ$ir޷*z_%y8dpؐZD: z3s[n 0kRp5?NaO*V.{"!`Htui:uOw J&0m % IA81TA.o"w굝uDɏ ZXi|⮅\-ž<,~Gɴ>< Ɨ9/xǘ㓔~E5 N^uS4dIħaGϿFoL$)A2Պ f҈`բƋ!qbW{ϟkfM)dw)/*tMtPFs~l$.ZnQ2ڴڿ$xl_ͰQ;F7X:Iwm 4 gFD <WS1OG|ׯ^bnףK5ED^hC"FY.QN ws?ċ4-}~tvܑ@)…-eik*s@zw29:+G |A0=VH%a%ϵz:q>b`Y{Duk tBN7YqbQlxR^2XuM[Ɨ}UkI5wkGkifoyISܱt]*ұ|P*W-y[ZT魬/ړAVfr~N R8hY6cgL_ENP5КA=;`y@kJ=6YfLD~Қi/]P 0ϡ&{L5bFL3DL"ƵLkIד5F85!XdCNR&א>xPy;^j)q,W,/z@rjkfONҘyu;G3S R#&dJ0CmYlZW+NmV/}mm5WE(jGIxMdX6CxN71R*@v}F#R\/(Ol(z iOGX)'W(Zeہl̯\]*'ALTTR 7?N'u2X`7ѮOGWԁ}b^A4cP~鎑 ]W[^QGd|ȷݙD좢m}#ngSp}D@`pь`9dj\fw/./_m~0S϶%g_cHq]{&%ҕa$ARf.Rs 0> ~x+q&#p}Ƒ%1d\y>Ĺ_8;8S&#|xΔxxJXg T܊@$q' OiJ'Xs> crfDI퉭09E=CYے"Fڟ|Gľڧ/iV&lg1OuNsp+A0O`"8[R}|r$m6y-Q(|ލ#LA4U|[0 =ln#UY°,?/LC; ,SL8; _iYC\u16g<ЋQžn` Ͼ<0y :/zTŒ)5Ҵl +فm&iTKdǫ8pNӈ< ϱiù8f<#Wp$oMD8<*C zmCu B{8[g’0>sF/> "L$G#%+D,hLt Bih;DyWQ91k¿ ''?Hh;`t'A8'W]=+ZxTwcy9N!Wa40x .t3\\TIҷ0[1Cܚ4\GJ% L8 _yJ~OڃZ%$_4j'.!\͎_B [A -ڢw}7}c=;~Sp{e'9IS!SM#~? zdeLb m*nI⶙u37D^'C%wf W![7}O }*D[ٲ{¢E$y=vť|\сw3g $zXcXj5Ui71Oves  l6D֎dw ?9##)W˰B2loü5}\zKQMc9v@q?1Wppnێ@>K5kMp@M7轖TOFZCn4>¨jtd8z@P^Tx^&퍽6_7&b>n)xO[*{sRk:TԤ*>(!푐ylI*5 TN;1~Pm[Sjx֙y9Z k'+z+ج$kHg.%y /ČmGLswIPx`p͖>s,-es ԫ;Wk`k?` R)^".`Ms}u_Tށ;+zRLOuUf~/_Jjxtl'^悙=+QR.u/92SBzfhEV4W;J(|GGTJHE|ϻ zVe_ma,T8-F\KhF/ǡ7]&Pn=X9} 2-/j"eU-yrqU]cZE i>վ|JH__?'ZV5sD"ޘ qZj%L'qLC2e,Oھ1@rΔ! FxpOߝ76Lò@𨉜Ʀ}+Χ&l(U*@0T_SE lF(lAPS]ڹQ/>3/Սc%z_iV]@Cf##Vǟhl@S`Uu•{$g@,S$ tCrHRAWBRX6bk-TWO\ƥ j v{DI jp]pt=k2FAyf4` 1ř3t3wrJh9bM[DD&oFn65_qsݬXdE /?JͰЈ= 7 YZ