python3-apparmor-3.0.4-150400.5.9.1<>,̉dap9|suSI4F Y}Uߒ;'JD9#iA_A(KKv$'O2\5&Ӵu!E&ץ_"+d5hG(:9At>U i)Q8x ӻ *>ʈ?xd & S= SpUU U HU U 1U UUU.TU 4"("8"~9$~:.@~FGUHUIlUXY\U]HU^ bcŸd"e'f*l,u@UvĔ wUxpUyUz(,2tCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.dah02-armsrv2 iSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxaarch64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(aarch-64)@@@@@@@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh02-armsrv2 1694065033  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-aarch64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5aarch64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8efc55bc7867a617da3af6e8a82661b4e6d32f27, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ARSTRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRR RR RR RRRRqq%+]ߌ|dutf-86654dc3e66be854e9ba75656ff24b90857e0a4c1049528bbdd3b843867c93082? 7zXZ !t/*F]"k%%) `=l.Xt`-M̊uк )ϩ^#(c͈҅x8ֽ P1TK..#$r4&Ph#gCQfڃ ˘ a-]-Xȏ5Ԉt|HkxD JShr*pujR>!- 3UI:tq)s A7bQa:0sy[ 1nV$ ?W)5,j~pʷW_jk@$K-snݼ..yGwK ^,JDm<#9g[~9̃22F;) c{5#'v٩sQ (.92{{׃ | fI.vwٳֆtpuY-e LjcLu,$+z M҂]/ 3WUslwj޽ETj1ܣ'sa5iYMQȰ/;|ڥ TN@F3?Wa64 <>+Xeih}֭?(qpڔǩ҅CvouXd]Hw j]@ "l}|͕ylTO(KNW 3B#'N42MH~eʚqI }nLOe0[~`~ nuK^ ocv~t4r:2N^4AZ]Rr-VVCoAi5F ue>ɊW̵F0'Ů`\_aԐ|~X_.3"tGiZrodLW] (ėTol }?%gN)|tSujt_tp.1Ŷ?}t"%tݓh6se.\InRdSs*YKOkHzrƦ%/ҵ')ȋЌ -K\a?r-;m#Zʝf,”]<7+b`&A[7wZ!YwK\۾yiqROdisX)i{hxD}m3MjlG7a"_1G' ;_`v%cEYn"Mi{WCN >=0a0O|g]:ssv3IHQ9Z$sꪰ!Ť{ hε]q?{JͱK7Ŷf X;~8ൂg uT廧;=1268>-C"FgǒK|e 8bN}E4axRZ憛}1th'GVQiMW̌Bn[T fY |C*h.WnOB쨱N)4٫ݰtNͭ h'yZ䲮2D7c]Ihgj`ͦ~ct`2Ie#{FwxN4} at4jn>YSq67]IsaQ}kt΋Ug m|\%G>炫3!4 +G׋w8]NeJN،Tf^N-Y"Zj( ŭ1&kB F9V^o3HO;s4*kM ugi=T9*9lA-^yۻ]yt`2J<: HhuM)3OfHչ8_gR}ng(q'y6|jQELAqi xqKRX5PIM|~BmӞʝiN>Rl-Ѕ:Eb5#q~1VJFxr1&ufCɖ;ZМlbr)T~ -6-6g([q/en'`w$$Toz*H!ߍ!hU(1,3UyUDo=jTUm.)_&6QE hײ9n<.^NnB#KbSA{x BQS"QД޽@-ԛ{gmf~^M`mvMCQܒBALWpXn9@Z#2\dY0a;wRr7 RI~M)ef4`xJSF3']'#79 )]ᨗŇOJEΑsK#ZNN+6"󒗔vx̒SiU!"mJx-]lRR]:kqIZ<漚V6U V67hc?1?k~"WD6*\0,?K!un]xւE6aM`<ޭ, 0Qǵ>c7]C~5IG"' ;ڵnV7O0X&0"C{lO)&.Ͽ~PퟱK|FbVpD<-^\L.̬}  U(ϰ8Du U vÇ}-o1E`_KZ{+ok ຊ/PΒ2=:McjQ=-w`*k {uѺodNp*z v+(1H8W#_#*617 )QYc3 r% 'O-b&- `@ @FIojGv {*Â#_JAީ=1wI\r/u~XA3u[KDV>ʝT\z(.((i.σg؆9U A|3?<|׺eM-oFh9{=aV{nJ> IK' K|@xv7A6`FZ'k3,μjqu]U  EbZo]^-65BCB,GL^}Hu+[b,?;a Iҋg0HYA{7Gs'(ٞ g?x7B>!Y;:.ζOv&5!$.Ilf Lj*;}$x!Il6!rO[2s75_Sưw$(Tb_EsR#cEd H7 4&sD+$/EiaZ.9#W'c:!xQ:`={_ RT.xlB:?,nOsCHgxvX?"PgV7;Zm"V~FI^;Ү `FˑciؤmP`ݤ֭IAeRkobHJ^3d}i)n݆M {=j,~w izl.FST?8}2sځܪE.ğ@vP`/Ö⧂w7e*h>8~=V@R|rQg H[U-+\vГ{{JhIE{,A' U,/XX+2~-nK;QA!;<7V+E<1A!N~* s"(;Ƣ;c7bo6 ׽NJ#EM<Ná-pƌŢ?:?j3 Qriȼuax{i"_o`gyv̚+sLJ+kR.+J4[%FHDgi y2 _QT'dBcs\t¥e:e 5dtiU>ԝyS$ݪGMFRƂnrqH02S ugP,8[l?2)Nϫq55av^P ϟC3O!C"EVkzUj>v7Ki\RnW#룿l :k4i\ҕxKayCoL@2)4du#HUB>$޾YC[50]ܩ!t>aGݫn_?bY>b&2O3*B,~iTÜm `YB;OxS]b<4;Br( >sЈLKnT9}Mh^1ĻW)+lz0弰MO s,+FM>OğNk!/AF3X \Tp˱!IE 3!qP{<nW-H;&uJ5[>?I+w4g1̗k_!夑Nا{8޲T-RzSoϐ21Ę젯nFz8h$0A '%aJ_mk}lI@oJm&.ać3wb!݆%`#./{&О,vU=^k{ZNYxΟ.*owyX'1Cq,6ia)˃#М^Ȥw&0!I9O>G?h=P{XbwJptKE?>EFGSGA;F8J=E=oă,yŪi,xr+Z$,<ɺ>$WH?ۙcUqhSW =v,ɩ]^5`}+:7 0~[K5).TkG+(:+L\ zdN=TL= m^f'IJυÕF YR ͡uRMqqksf!oovmON*\;ȱ1zM#l3x9+yJW7?qpo,ԢDkIw.. 53iz`Sa/2=H.*"~Am JSNo{eNҺ3ppZ Ó-C\Iˆ=eKÈ*#ΆGl~DSzs(sX&ex:,|md߅YmrQCIįks<ȷC쮙ăɀٯzPmbF Tϧ(U!rgJ7siLhk$GJx&Mhx=b95P?$B(sJRQwwOdI)Ȳ+,/!a#u 0RgsZjHČۋI e}mEQ;bԹpռLuD֏y=Z2 zRJغD  ě֔Q?-O/kM $GޫRq0)ܓ7DGO9xz1IL};m':Z#iW.[hM)§ړ3=YJ []k*bf?yclo S`׎g6eSɣ <}'e[?/Bq'50;Cq0 < Ev4k-M0ՠ5Tk Y_/!kv#va4AdxoJmiSEQ'ȝE)ύXrhaaͥ1q9ᣑ^We&}D_onao᧦2R\ \`_Bxo.So 4i?3%eSчzyITƸdv-CQO=ucn%4VL 43;AUPBY l&?Y26=)H]9ܼ%=!.iyKbd0THGn .}+rX. p7kLlش7 wT(ל TY-|b3\m&hV$(f+*Ys&-+UfsL\ ȿf΅yKyJg]R{|ʇ xPMzNaA *|}@N TKf\4Rj'_"~Q\@`{8#pՊP,=S>,[ ~B g9˂ܥx>3djxѕ3,j aupҧ|ATԝrɳ[jhm@0=̊n/Sn*a Zr >S{f@/(Hj3:hdsS[2-Z37Æfǽ-FԾL\zΚg_~]U7sG;U:C5 (u"X98. 9'4T]Kݪ8mgK#c;j&F@U7m`48Cū9, ( ûrՆt~b3'[p ,_(Mo@ u^Fçr*mn '}yHyW pa\@q% :ȌEFݯ;iuym{gkc o37r b`=8:R^2>UuQDTYSʇ0>RBNⅿI?ˮڳ~SF%ҟދ#s )j7 gSbGiW|Dr_Ytn\vE-guï{V׷OhuZrk8/+)! 󋶠Qi>2ESU]48{!мe*Y\I|q.\uZ#I?w sUhԼ}O8Bjm@>|QvV {.W.AD6/4\JY-1]M~{xhoB 6 ߆ػ1{znqof.q e>D5XRUJCUCY+<QJ4ZƉh_K@kQǥ<~D-c#_?Z$ɞ.ΌOe'SSe 0bfXϝG8 |b;qլh5e&c A K^ E`yDI({*xG3Ԡ]o}NW Y" ^0OCiAE>$uܿyf:JF>K}9k2V3~4'%hv~ $RH%6Ua KiCI샟Vn{,8>b֪u]2L# qdN>7۔2Ht0/M{ Ql^EN^{dg^;h+Nb*9q$E4CCRp(b&n`z#/'Bk1ֻ}eIecǨ"OJ3{O吚 XC} IMcϐ&3qvrH0Ȳē.lF-sXG"<ْ؏'s2Cm7W}PWW^\ |6{+dN׷jn+EG@:&qW?,QXmB_P^6[O8qU oU&T3ߗLN;򱊳"m4,݊=Hjfn#?)ۧ<8f $PV׵$a蚂BH!]‘jޙDw<[=~c3Ouкo :m@ʩV+VaE%j#VNbd^~'\dRb93 M`VA`ALc = 3~lN\~`ekOy|?kZJhuō]eAko̢-`林Eń9R @l}Bv58A]]Q ?SqGِjc:uϘu$Pa>e ⫥oLE,Z&O`O@kM n0pČ7 IH[8e,Ws/ xZ2@uS=CD>2j%~q}dFq"n1O1Rdz61Aj?D3ގx_4nd&lp{h-hts籌 O/0@/n|U\\ ɤ!tGR"yKF2R7ƾ;~F*J |!xhy_BW\k[w RkV{07^ٻŲZ]J_zx@yM*5yuovc"T~=!Ѓ8=sh66 2hz`4y D~[÷벮&7RK,0PԬph0lMӖ9ݔrn~ /i ?$VwRbdJXVhzQ*ui# /Z %k}QJA lfkxK{[e>ho@-kE񋊍l'9œKu.WX[a[^Դ@-k 6J(Sx`c &`C; ^{ͅņ&VH-Tu{7pU: 03辇6I@: BpUxB8 ZwIaFpVäZ-cK=xih%De>Z +RWJSE/p~ T!X*٣EA]\PZUJY4Ҵ;B7<_I {UuNj]XDyG:H)&=mĺ"rF(X{ MC,H g{IH]@@|0+Jo%Pڅ զXTqoL0dߴ4Q~vP)1;hܩuM®Tsr@l#5SÕ{xZPu׵aki[; @B'g񙅲`qYMj~^Ub8o4ul;2qu"Vުz.߯/-Qxz8c/IVDEl]C0{$yw ײ>mq3Ƹ؊>io{@7ndvPR:D (15e% tH= /}rx^`;Lԇ tD f.y=3'v%a"% JR@+Xqsuha=)8#}*@ _5}2v)nҟr)VJM*0U(_ڥ\(I)=:3gfSAl^JB%$.ȂHYz h7{G꼸]2ܟP@4Q̏a[CPN Md8bK$pHųgŎ:&__5m%Z\ #+1 79Djb\g,͎G3LPJHgޱs0:T8RyvBuPyuJϷ2"*f~e;B#L=uuYa5V[t2sO<q UeZ 0U%]qٌ.4[1E#JmoAha+wdïn6{*mݰD>B@&D3TSxk!h"i4UPS[e>%2bJ>S$<&VspbnKNQH(`>?y= *B,Nj~/+;|aݍr45?>óm;r+Z:*E0(,UpdQF|Zڹqm 'Qn ڄ#YeF`/&!jODO!o՛DQSQAk9ƓgjTHi1kA08F7>8·7 c #R=ČbQIż"q9 t+QBmڐ[;<]="^Sa.BnpdARK>s#,z/L#w;Nb]޶/uHhgv+Z_ƒz֘P83ʍ2|BQ]XЕC5{{TN2i#/'!>B7pЎ$NqҔ1 ߛ,6ք^C_>nAZNءP S1pVf8†h-Sqf@%uABiBzL_Wl$k%yv8T| l)T,)5le3OV0zEL}pB2!0jlsEM1 hC SwYH?N~4JЍo*S)^r-M:(<~։NxyQ@=VLH%0L'EUY _7m]V1;(6]`I]A2ؤgg]_ɆgJ`+gW7qDs2MP`Y& ʁ4xDo#fuJ;j(PfIJZV t* Pc܎y(Tj}:TVzW 1Kk@w'K2HH_^ 3%ɟluxSL&!^dHgCRƳpr+\J  59!gk^\.X}'/yrvKk~R؈C/KܔPPQ2>>ك֣Yǘ:~[0+ɮ/DoѴ=P1} Hd7%D;Uu- Fc)ƚ>ƪ.@ާ8>Ŀ J5 |=qCy 6z"?0lJZq%wD^B(/!x 25zIo]Di&AKzXY 6.rNC-W1yb&Nh$O[o(% 97qZpvdw!/[+nlvv9vHPLIq&m1G'ji* sorK F?S؋;iɼ߽Ꝡn1?5|:mK}u_ٍα~9Ȉ-2 ӷ\[a=(qaxN w \Yq*ӱQOl~Ls9kyll2F|L6PK~5){r-lȴfV+T[_Tj6رύ'A V9a]/!3$7R EVVz:4\SV i*bOjWV XH7B(4N >=G]̙\6~PMliZZ(#lqC# '8 1~u yTу/o :a_#kTu[1\\>צ[#2ߣZ?E2ᄩi5>Sb=Mbc ua;44I f}DRU"_v8 W?@LɮμPt 7s@c<2G\W4)(5hS0}`znd_'7aF)r?*:mod3'.IgF`l_Dy=Q#@ T:1N@ ]$d*r`RNJwr-B#éxYRey98|sY|=}Ѽ\#pLo6D  yKω6#nY#ܶ_}9JM3kxbV6B$ _[Pr8KӅ3O1&HxhpL~̼\1X7Yؚ ;I9h)I aJFou`Jw.&k9҇;c2bV@Mz"b|=GP| ͊57(EfJ@@CBۥ/= 桩x8z^Y}RE4jeڌ4OjNW+K0^>yҡv @.!@؟f0JqֻEuqJ%J] Mcǫz{ٯv}*P.r R- FǪ l+I<*SPPQ5(G'EZJL}hqC/TWu^F?. B8G RFV)YMtӳYwY^cCVê%5InΡa1+4ՄDOX=[KhOX;DDn%1ͤTxԼ207t^CsUЫK%vJqnzWgSu1x{ /[ND3/C!+#ua$;G".al:O8Czi3`+7fJcns>^^9Xled"ŷdeDQoD@XY44"$1l>TFzК`i-Jg;&mT^nh+{ߤb&y6wȘ܏=D#q =s&kKœy1 ghe*{~D9+G,Xf(FȄڟ|UY<_H?ks vkEE-cmK岲W-Vu/[Cf$ߤ"E1zBϲ%a3 5w@/r{DTm CLew@S䓔 rMlUr")'8Hh/;@gTQ/I22ٟi#ZxU;W]Q?.KAd2{C5g,JF2u"K[w~yڷbGǼset)aFPn].ki5yZwu4и.>zv[g\J.xKNx$E{. q0bVzcɭIk_Notb1[g>8َwr8SN2*Qla͌ RIMPIt,VgS9eQ e=`R5ݶ@Y& #70KrFKXRq%IK( WjJ!A]z.v qX\DC_ޡ0^u4ٗ?pgg8K :2&t uˊ~Z1ڱuXq />0A8Relnj7l[Lo0-?tX|VH '%  P 4X,/q n|@Kv=d7J\*,eRMQtgFĴF@ `9^)H%^WQD"̿`=1CIO\^] -qC(P0n?:Fk]l ř0~W Pv])OL_扪.q1aN}LZ7eDg= ֯D ҖnjJuPL3"AoQ2q;1ӫrd^(c0"KR4<  t/~M#TI㡠KIh2#0̱k&"#E<ӛi  1LPn#63C6T 3A@m/RSG3B׻`# ׂ&8oӠ@'ݍMb;&P>juk~[ǜF}4DTrB\Ь;cT0B͈m{KJ!"OB/rx 1it t\EEXJbϓReV ̔dR21A7꽗GCI Zb1#jS3wY Yp^ðɯL`6- K\"vUUAGW c0PS^W̖!p7%PL&Foϒ+"5Gt#|f6{L*k܌A]ڍ'rV${ 2Ƅ7[g)셣qkܡ'OpA^.BGhgN kV>`rB u`oyX{ǜ{pMd)݊PE˴IXNLU#c_˂竎]0j3ZDU+a 4@z{5l_)_Plf}:$ש,:$hU}S0yc8cn{&L϶%EA?NZYU$¨/(׵8ђ3Z5o~!$s5[50ilWoJm߱h)a'5YXM"wTSd!|' 20z!9C ARo' B\)^E"{h+GES4 ֺ`}Y>ҡ< rb2z|Ԅf9DJ2sqyI"FEICS Or8E>דvk[\ia9EԮljfwRdA1I%ʨPZPC[wق.u_e tUTҳ*КbkpF0{MA]L)X`$,dxo0}) 6:Frqu\]Q;VFېEFW'BIsŅy[l|&PcrAwGWӣjݖ;^a΋dBT:yaw9A### @g6 mݩȋb|js!6;kQ osPet1UO&; $3GV-y3{$}~"˘&\VϵTq7:F2B͜~p9gU*I^dџ 0tiwArv">r@p.er`Zȿ<̿vHѱ];F2Yt1=T muZoG,Zp3L쿊B?\[W4'Gz}+T$Y.Inf+Qx$b7B28+WBMf7k>W*-!g`^[}6jV!,= ZQh rRA}uϰ9SI9:O?^+GrMCl Fp,/y"CtwK\a'H9iqќ13>W}^JB~&LWzO$m#-.roW mPIN\" رsTE g)\` XL4 ~lg}2r75N >T'e7색ɶ@:JGnTT4q\G\=.?E@ŊPEڔ]@`uՃ&%&K[b8 .a)oE}9011E{_%͎ב6" =&k4Ie 1>QDgC#UB7I7^ v虝jSSljOrfI( ޛoKm吹 nhB. |KRGRs6IK]TT%/ .OsmɈ]F4L(t*@pWe! V躭 k~չ&pQTY$3ݱ yP=/7fc̓2Wv (›(X䘉z=љ9$;&&~oqT @Uc2#%aJv~~`A`~|y⟑+}NX?tn#h rH0}14R5fys`5BWod6M>nY$p,ֹ Q)Y50۲"O7LvX9Sm$0M(CJr|o=a W _cu7lb~M3'y^O#g)2130%6A AĩKy3amV5NDY\ŢN]пZ#IKᶷIj6-A1_Sr?xQnLm_QZ@C4?H-v. /?reS OVzۍV,9GqPhDjDu\o5,jI3[r9 ͒YUŚU]S `>DsM@A'#(z Ktx7-]B.˙VH.${2芾ޖK3ڻ]EW0VOxӖZN\m_j0e!;g[p$/71 RwBZ0Ixx@ل4FA$8zf!-_ih)uZܒ̃!ƤyPr=63ӎ~iL}ܹZb>/sΠ~ l thgPT im;}Z2_D;n]Ȥly,)"NkLHGΖa6Qeaښg*!z}BrO ưҔp|=tRQCST%\ ~^UƸe&D8?:֥LW,vY:,Lz'WH޲yRR_DUȆ'OڟPt1y@4rE#AkmFT]*uO"U2L'2Zƍբ9hmu0ALW(:8Qԫ@sf4؞@Y ߌeuSg$p+0* E-nįC$yV?۷bw1 s 77@ǤymQsy'L'z~BOV _,=эnɯE$@sQD)eS`njwَ Zh=9H}F95@pCB).H|<@ԗuEyC 1Oߴjv|El9PcAuGLV}qZGn_K¨MG2KC z/rSÙ,Jyw9=N|TіJ_rְu񯹝EV_!R9k>44%"'Avj?t<茪lTnſVZ-98` ۏ^qZںz̒|1-ľ&$n)~΂IŒ8 F9H)gUHH^w?iظفZZЫ P|PޤOi31&QJwf7bǐ=OZlf_r-|?άY^!k/R":c Q/FG?f!_7zqDL%l/߉l 3t6noD%?5͍X1m"'\7Ysd^}iC{{4Cpu* ?Iy0_hH1\Ocg۳7Wi*Be): #Hw=Dg^, 39u??'<(~M/๒^0Ga2]ʢmQ=j}Slgcfh , f EU#|1X{:T)a5*G|Aiss«F3sb惮 I 1%{]R :m[LKn;۞x EĚ0uoW9=\>hw<>fQ#;sCs/4{ڐV!H}$bc ^4x#u0,l UA`AflZ%yPgϟ$a 0)FM$>H2- ^KbeBZS`} ׺F JģͶxPn#ϲq]RWP`Q*:@̻Hepq$=pA1kuy;qŚEO)T`>eԧLA!; bK#+,E+l;+ ']| G|&IN 5?429s\6tnN$xFȅ*lkԎ K6(8O`u~! ܵFi)q8h =GGfLH#G8ojӓō1.F FX_uC1 Ȇaa{-?Qy> u]7XnR[؝xZ iUGAVXFeR6b32h%]_gI3LC,TAR{oDG=ĂFva>ѻQZm1[gve1lϽ#Lz雵l0ik f"ܸ ^][hg?z. ~aLc-EKݵEx4H}R?FdY_21 HrMa6En9W-e0宍+Vl| .V)$`IVu/h%HU$,b1X"\!HFSωJ-n }SОY ܛq]+TEԶ]_I5 r%YM[Rhy|@9vo#FV,t\+ 1<ïRQhA+dh0`3 =:@P)x,P'X[SO"fr$rmFCBcY"$u7 &iI|ArĶѧ̖c}P0a.vvW0e#1IoA%ۃ:- ~Vv0.lA=BCVisv;qZLŠfiouU֋Ď)NU.g(sܼ@dOa*Y \@M2xS'?bNZ%ʿɟgy\.i4~675L y$N|ldOp 03L+1ef ̿c5k*-M#3ۤ/G駂!A.47NP I-_C˖QK%c= 🹺2e27.3LRM=hM~ _xP# n?)3NlLI[cgy6 Uf YOhwT1gA{+}ng=/Ht VָY}ˊU>{6ڥ!Sg- Jh&]_z!78jyOjފH-9mZpt(/N>M߲1;&1,0pR|DM Ru+3zu)# vd$/L'|hHc)See|Cm[ )H FR"l*h %wDjj%_ /Hbbw@cƥ5X]~p2y߽҉IىbDy}@bn&R%8|dZ'z[ѭ/Uý]S\Wiy]ӪaHJ>,0bFzVk_ :9_/-U CJ uoO,\KѣUaRdQYt?❲;71GMZ2jL"ГST,-L Їh G8x R[o,ej+fZ aRO`jPlIгR~\^ʙPEM+;,LȐ>zΝJF~]:yv'Tüg@,}Rr?81V -nDPKOʮ : 2i @Y,q \fSdaLF ?q|ebމމǬFR^·R-APgqƵT ?`3'M+o۫B;^y~t&ǡlMS1>$TxM!9Q:[_~sܟ-v ]a}F0. d?%D!<(r$Ń\%6{OY6DsEs}+areĀG%KXqӇ®e|m8Z s6_r~4\hw"g 4P}_..k=cWj%+UO mBFRqIF3ҷ G=WI|e<4 Y(Xȹ{ ǏQFƸ;bl|_ŇҚ G/vE=bJ ׮ָRrx&N  P|*zRki*'C#6rpي7A6{_fЄy\>*2%'@#FOla؃$0H$'"U Z ,B kǔj[D,xIbiᝊ5T2kQ`mG]64*C+O @.ܣ[Ek2XR:h[V/iբ-`{:Mj`߭(RP:g,@\}:GKJԐ-8Q- (e䰜uzDβB" Hy~6HX+?Ƿad)STTRjRNb|5 絮Xe 2gW zi~4:9OG.F7Vc[ L`B喖a/_hRjltlZ>)e*o&-3?>bl{i5 joUbw /PD=bIvhxai3(_/km^7Iuj? Vd]MSِRE7H,^_fӬ*ڱR|9N<sϜ5$[ }OR7jN-|KQA}઺ xԢ/{-f))t6D-ڨ]čc0:fj$+ݙ#c՞JG$Az4A!N@֟$H->xO'ism,O >H48K?8&"Ǵ/J(6= F'w|Rr\k/%+s8NGIRH0&#mGJEao6%il"x(G].Km}-G/ r&BT^N^9o9F&cIvWQ$zZVUx+tG)Vn>`/2S^]ױ9 $z}H5/osR0!?眬CAy.啶w 2ؙJP`Kk{}'}b=dx~/Ss* ujg?L{ G qu)@ެb݉\ux*#.okf֔Bwҡ!cD`G;n T~@Lq&+~$5ѓOER: %O _Bw5:9#Ebd7yxΣFBT["ɐh"˫,=Lx/KPH ꠺'S"9m'AO ?({Y2Wu7M.3s3}!VqrǒvƶJ5::?F̮PE Qכoс]"d9k7sr/~|S>ӣjEnKOӮIzr[eo8SY@8q `޼+8ˉ[N:C7Nۣ0]:,pEDur BcDwxO|1fȌY|ȣy}k$Rpm4;5nQ$h2꽐mYdg.|E V>/v9X޴?XiW5giF;.-rW>SWlGem~ $ۦ6^mE)GؖMkTwlW ̐^pO )aJdLy;bgⅱbW.'8  ҡW:I${7,ǵBEO]W&>C]i;v7DlpovmlS(iA؇5kp≨8*dN 68ߙ:qFz"uDG0]e*2 &2}MH"BVMNc/bv9UYQ*G+m8R&EV)4[J]`nj]]-_q7 Z?'*,\>Ph~ QLWL%a04.7SCQ{_wuzcRȿ5קAu;-m'tR!Z^(֎9Jw݁2׉# s qh%8˭OVD4hGldZLˍgwP@ј߅=`.ȋU[ o ѳy4/_[cju'%)l|iv.亴;T'ӵzTj.ӈvob=<}Nɑ驑 -qS,`O.C q۲)IB3 _`rpsٚjXX]Srէ=AI}nB7GP#s|GO@xO#ygq|Yq\ְdCFmP W6oOInߩm6b̈՞4ԀA>׎J?xe~r<jm^r#}7x#l{f\ϋa%;[jŠunx=;@|ȣCk**eE9maOiIa^ue%y!< "l'<1Y٧窮ŸMap>8³AStMFvEz&p1V{C7 X# vږՇqaxlweZ-kiʭnX#|و 3nrHp daԵMlVvBJ0a o2y~@:W]4oņ(v'o w85b^-Rwc`7)=MQh9Ƒ)3,tJSK֦]{M.$|ZbeF `jEuw]nPbl|Gwl*Sԅ,N&AAn8'-y_H[l@o_DQ' ̖[*2zCF ~oNrv9o9Sa̠5:md\M:It 0-P)~)d8PNcZ)L6ץ9-xefH<+·Fp $ oS`4U}Ʋb1r`]i5Ff[Xs,ayh]0sFeH1"洒S4 75"Xda9yD?, R#L}hܥRIʅ#X'ӝc6z/)wл!flBe#Flwϛp xE@G)zNq%:Y_dciƯ^39>CV\p$^wm߾0_F.D !_B9Pˑ':Z1.,TK ^ZqitӺZ]Ia>G؃g;)l~[LMZ=fOF2'ТT)&<ĥc7,dܬ6 YJޕ3nvږ`8oC@Whù=:%!{ͪ,#[k%SPlC/dūf̲[[)3atE) ؋PGeiѼ"ʵJ m\ -U=d}^ źB3).j}Hj=փB2%b݋R7 ]?O۽[Nr1f){'~rYq?"\`fE1/2hH9wGix?IhךUaa"Ad&\w;8dc^H4=0a@B;'>rQ* ~)h{c!j#}Ͽ9}$X+~,P:`/eaPpdRjN_;¸7h$sE\`.V/9viQ֔ޖl+@nsgYbd|!_`,V`>?[RNl.f`mgrpȅ% Á- `kUč 8ŽM!HId:PFsNX45iw.z+,dd (G6bfE>KaBRb&(o 8՝~ Qҵ^+f TERIl3xQP %zBe#HPGu7HsJMXS(TOKO;]xuPK1%#7ob9e)ԞSB]f -[?| ޳]ENm+Op K?2 s*J+1Sb6Jh$Rc˵AGhr#oD2<\ER7.1Jb,ӊf@q.` {j X+o$Y,Mn-)**{HưSeNFM|Vɮzi]@35J9S;gc &հU<'@n\Zy]tdK"wkɡ[]i;cS\&h^P j` ky aqh9u ~CQ~xn粋>kYRtʽSgCIT>B!?+W.t"ȜahΒK%ǴY#ss(oZY2R؃G2gיƽ(' `#MSr0z?[߮bܯ[sdZ=ȴsAY[1 |Mp/4mQ=-5I>a{OlTu5"? h( w& lp8+EQFȭǼlN.ۛ#6s8m)t1u\?N<.z_'R *A+Aә 8?coj86ƚz8?q)cv8E[L# XzjiD7Ⱕ$ʙ8=Á!hAl&W/A'Ww턨u;Y?%mmHbMz3yGKsAvڔː}]6@L.YsYlU\7&a[OS5%w+%)1GgS 8Cܙ5;#-k.fB IMAqs b'AרM$q_p%-7x"݃ޒKC|%_PSjb[ X)l>I 9:'^"EϾ"pcp^ǂz 2: ܺf]ȀےBֻgax0?}B|߻qRW>הq5Q7~J\vn200W.%#j~7,O%\Ipoތ1̭9""߈0h)C 2 K: UUAIԍA-wZDyw _RF(q}&RDAW;*~'5H|-jkcI2NXR:#02cfwu .ޒiXwM10b "g@&v5=̨D@p?9}%b0:;9nxCQ` luM0Yޘs9kG؇T#u6]m-~tʒyҚ#ݖ@ȺN'jVwg70amWEq(};k&jCw sql2cZQ;i{K#}ss?+:[0L" Zt|sXtQ45x}O\ _5bDsj,a]4M aZbe<쪧Ve4;Pހal>$J4F$*z6MlmP]44eKyũ>hRy1TcH+ZY2˭y+XfFmKs'sề L<*2(I5D$bYXc!kx'9o].Fhbz1"o2nOX*M+-3>a?sS&Eu,sLj}Bon?-؍> }AUgLfԡ*$s.iz%ݫAd<!P<ּS4{k}fMgW1Cf =ϵ S9{CsWV 9@c=a95sE!u|?} yVbIBR_~H  .itpJ] x%P|O'w=h5t(kMqk0%&~-ԑ`w3=K;5aH94GAG|SܫA9isG9XH{x;8}X(8 ؟&E>+D=d&QL<mS-=(9zЀޚg9`"@F$B*dhp}BNB%;g-:ol,Eɛ-H zD.ЯlSԌ+8C־Rrظ!2[3:h7b8WY7NR:h5SSϪUzW/Ԓڢ-m_Q۔΄JWg%3M!.ܼIq>}Vc}st]]ҟTd@dz@Of-W 8@DU\u(˭G'ݘdwǴe˂h~vlfp;2[S2>qF"ϞHݑEaCkKT$fG"smc>1`H~J>Sʵɖ{lVpRH+N$}l|f2uɖ1קּ:Dy'}51Qֽ`1u~Gm* Do1vv_V }+ڤ)lpT bMr9@(epO2]dY (DuDyncvyHvgatFյX(;:w>8ԯLH_$ ZN{JeVc@aSzSWe&%!hp^93Hfh$~>aKфqjƌNTQVyFGV'"(Ӟ ϳl- j1FCGH#vÚ86"фY|FCRƂ%SQ$u**n^J[ȦTzaCX\ |Aunt#]xdEFD&Z+d`8檻jBЌQ)bhNFd%':_U8tǚ={I-Hbu84Zoc/ |ۍN*^Nf xH:&)::OLGX}8aj9q͢.DGpxu)u!;.V"@.@l5"O[/EN8TAN@g *P'>b@ jW%cJp$Ր-C?F)+=_QMHJ#f6DANJ̰͗JcU UU%ّy>s,(DsM d4op J@[ijm RCbm:$9@ lSo"F$"X=ZzUK8(_v>"t5Ih:(,i1cM fF%3*pQEDf|s%!jRkATw#'%hqwm|ؘoZs,Yr[&]$y)bIǓmRKXH峣 z|욾e4o>p~i/_L cj;Tudk3mFݭf%q cfiov Gei061YOk\\˅-nMʕ|<xՠ9C2ؔiy67m =nkF*ϫfya߶H/l֛M*O 8xm_$/j{%H"_*lΣ QCkvZeZV#X d]R8nR垕*g2L\Yrfn*Az;!k=<f (2sER*sfg/ұ7/7'OCw*S1Mߋ?|\:"b9 Kd*ჺ9,TzWfA'$WzcOaz.~3!U<kLhD4UHVJ+\$֌6(WHEzP)Ee-0vzjLоq5n 0^>OD-UF?`PQeKpr[N3SYihFB!i]!ZevV3٪8'}ᾂ<>~xcBG^ܘG^n$@?A9B,l$wn?Qc$J]dZ7yDj7}wlN)=;最&QA\wR{ke^O V|3 7-‰rIi] }49.dE{7L@G 3,3֑z6`nD!R[ay3;Q#,G3}ݸ1[m8nƁ e -!]TRd32<[ǙWʟd\{YqڬyQ{Rq+DF徛te >qX+]i?d31jM*6Q@kΠutE-0q7J%nv@]?, 0pw.iv[AM|9B"U6JW`3>u<1 0tš^%G*(J }z*g wRqr*dMUKϾ{=EPͫ 93!x4_'.( /1\j 4q~e.o esh-Chx$TRʒ%v_Gno7hg ϫj\%yXVil '3uv,]z'W8]wԃ Q(D{ٟ#'gGfcDOpf[^չ":ao ْQ6Z-xcxS럨l}ZPq' QU#*uCLD;sV *86S0%Q>AYм4ӂh6GūXKw}Xt(UZޭO֍TO!`ctSA7P6^wJsfVi鸁Һ^^HdNJj$)]ʧL4B$ zP]ߏ ,4c˕q1XRcI35RY$~7(p ʔm_=z:W0Umc%JGxY@}%?H<<+S7αm)}gQFIK6a#}s,R D  >cP=? Bsɹ$}m%Srclv)""!nhADC/)te:K'V?QxmuPɋ"նl9Y;) 9~2N=7dIR> * 1t@EA0Ǒ՜4u-WL!4eͰEDh wա0qPHƹXMW<8W|\Rw il S$ǮkFH?6=8ôw)Jro{E1**%eE 'bo.ۅ%:A@߀ 8 ;[t \v y/9$$i=EDpA=~DGCC Ty~nJu_&/kOC9c5qwbERoȧ|{7QTfl]8m)ëEQ&`K Ѽ&^w5$ALBb{מ@Y5ruգϚh3^֍3LjQL9km&;3{GpVblgg7Ko(FIb[NEqjЖy="M*jh1;?,Sw ZrN2 @X&:Xi-Pր>}!Lw(v ֹV.d.…q^^r;N`E ÑXZB T{xCW}BINL/7iЛ}$N8ٶ;tD$gk:|zY'%ck1sT0Cy!*: J37b B>PF0tVWaH=!$Qۑ`1 rwV"C< S=U&O~:hk~I}0ҍBl zb m6arN of{ N&M%iCFɆy_.n]Ck.מeb|:h=C!ˆnS'nɳ(;.N[wPz8ІbY)/#=v`.`"z7Q̜b,[|D4m=[%Xb݄DR{CFC$t N zǻfqֻ z9jn !Aжkm(jV*dq&,Q ' kRA%mh^b}bzp1<оSLXym*栄*4Rji̹S0YW'$ˎU1}wܛvBw}AH*ráh(b^aci8MiVw6.]_ ي86S퐯Y8@sPY2TJF%_SOQ{9cz˃L@jсH@P`vMԅ) nZTlKt~~l$RwDq4鏇(g0 "kPuZpB.7F'Pɂlz?եe7^>@x[CC6*>6ɡ4sJ_0]ͫ JdeeZ;"b[C|7`-=heR_Ճbjz}gI0ՉEJZ#q.hî}CNb;Rĉl Wړ+^hUf1O|l1WSxKʐS% 7\0q#s)҉HFpȷd阂uKGݹ>Ƒ<$%'@P(k1ߙ])_'b.V#DgK0⯇ƿ}w9mDʲ9UcB^98K,Ǎ-v^N~&!zar4#@gӬt?ަ p|TQtzr}~ם30\/L5:y T蛣/=#'V|A2TFT1Cr J;xzb $n) 2LV!hj_18]F1d;0f7bpÖU=ٮeҷ(#SFy  MfIX~~[}uNr٣/DAKZZר'1,1֞Ȟ)4t~윦%1ѕQd*F mLI(,e?aQw[|6тwaʺBb06*6)g*~8*vS#Oal迋/{!.`p]PkwP؉E}QV_7XrdLO?Cu2F)t߫#JJ;gȮTAw׏1 7)Pe\-f_M_aAQ8kɃhT+\\=0YG xnЬA6n"xɝ2- Q<_~g}l~X[PmG A0*7RxĿB~I xT`+\,4>~q(Nn@uN$U`ܠQ\eSo]6 怽~3;c;ϧ32?8eRFJdrwNHY"V3"6֗Uiۭ~P-)Oew a?s13E I@M*p&y6); g5W1wrH҅+(D6fGX^A|C15-gz \nw^ԖbD}xE9,7&Ǯ^٫?\P^)5+Km Cnn$-2&>o󛨐0SZL(af3)'n^t^ 5{ph/a'ΘVE[/IZ~a<@rۑQ\:%k3T?pVb&/5G}#j^Eʈ3gp|tI&b{xAAë:Y=8oz M9Օz\y.{2i[hVdBZh4TbCGh_䡛0Cž1@Wfw0J;v!-Hm 5CB0Sw桰,EC*@t naIVD %hI˱@:]n {iW&YE;7Cl ΄|s7 0A'; G&P<*r.yVL6Zsa$m<G,lpz}W,MnFRvj[e EL'瀡m -k#nm~=C|% q?'#!(R$) .qKӏv_X|eJ5L"#A}+N=>F)}TE^Be_sM j9am5JF-5Y2+=r֝kgCݕ7詶@ +%UO 7T-V-6Y9Tᖶ? {jYK4*$H2 _D!|)#8Մ$+c؝$x]<e{SxMP 8Y3"gl2ʛf4Sg"ׁ 0e#G>@܎ߕ24ta$!rԢ^~.AҟteB(k4XY`eIj2Ywi" w+/)\^)z'gUڕv7%!.t8j1_v/>1Zr,L`Q9vlǫDlH Jz! 9;Y.-p$Pi*6,猴z7D~v1"kV+Hd+4˷D(/E\}EEpvV,7Fc4y~1J} E}G:ҥ>M}$$>KB(^I[}΃7mɁTixCF/G&'m?lvd BBmáyg9y 1iG6 䓦y[9ttgtI0 Ed} qq %`/iꄮs2]%gף7rD?1Rv~c;֧@TcDY̢'dwG*"8gadJ!@4'ok$(Kj<&Zc﮸ydF|!dK2Y[)) k8N$7LOh +yGR iO۪R@!T12U>rb -'Df*ā4ׅ)+蘚 _{iȖ{CqUCn2S뷭F0Dq[c|g?'5~`ǥjR>ޱ:!ʭCag=Kz^6oY2c6Mu~5(c*52/ia="?oV ]H%U "~3r i{>Hfii4mu6 &t%ͺ<*+Eq̈ եcTSMG?4 lM[{%1Ut R;2{hāWԻJ0* !Ka 77)!ds3fT39\CI$},|M_GW8+^PV=Ds-nPvg8kWnV HD)P/(u7ȫz]HmH_xHc6&l70I5rj ȇƨcjm \N4Fze%bYi<=O[ZASΓ0(DLs%4J.Kۘ3~6P(HxÖ!lQ9sO ;~8_eS|#r&}U3 q𩤂J7' UuG=P )[AC5R3|d|,;D:GUn}c(/k٘Yn YZ