python3-apparmor-3.0.4-150400.5.9.1<>,xdap9||U=k?oQ p5ub<+aNzSνz9OhW'H+NvC$7psFO(8D.1UiUH|Jbg6eЇ4MN 2 @w$L ًumt80\0 䯙(3:E_0I2i25x; Z[W*k2`){-Ҭgm]81'_aZ4U2T$Luy60Mwz>>ʈ?xd & S= SpUU U HU U 1U UUU.TU 4"("8"~9$~:.@~FGUHUIlUXY\U]HU^ bcŸd"e'f*l,u@UvĔ wUxpUyUz(,2tCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.dah02-armsrv2 iSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxaarch64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d61818b374e21d53a9fa9fd2cd53f5c57ac6bbe3a5a1c9b540718f2140e0eb8eca59a9f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c052d64dc0a4a269651edbb90ffe4ce78e7557a3d446a43c31af274c4d6649f8118fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(aarch-64)@@@@@@@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh02-armsrv2 1694065033  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-aarch64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5aarch64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8efc55bc7867a617da3af6e8a82661b4e6d32f27, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ARSTRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRR RR RR RRRRqq%+]ߌ|dutf-86654dc3e66be854e9ba75656ff24b90857e0a4c1049528bbdd3b843867c93082? 7zXZ !t/ R]"k%) `=l.Xthw' 3i\1 3jF3*dI%Li\ å1M=>7Nkjmd$҆/zI )pKzwcX[gٗg.w#]u+`g{.-vm9lSC aRc6hf~ag`X) zQ:p^h~ V/]7Qɋt^u*tDm!3Ive}ɘ׸>򒦫%H /Y \u&WC'XFo4m]%Ŕ+zrS gJV,Hψ=q˱E0>HU he`E<ZVF%/Xݜ9sPHV9$^z9c&{<2ʓ ;g6BQ=͛ WڃD!?q|$v&Lɘny|Ԍgκ} ^q8g;?tF{Vn†j6zx2^mJfS0Ĩ*SpFumO#!k ba.,9Yd,Cn0"K*bQE8c}*Z1 ~Xgk6An{& q:^~ٮ8QPp6@h0W r>4igBfS A_XQH@RSXY0F (Ys'(jC}w~0K0|a)p j{J(}Gۓ=`ܷ/s%>V)ܝTCm,l"<|[Ϗi"LpHy V p|Sv!䨋6j^X rrƤ,U4j-̫~ &m.,OdI039ΑP#{(n}̷k/-|k xv.kSAxk}"ړF<(jSi kj'K&4 ϣ`^Y]W2t\6$V?Gg;N0#zR]'l-$~do_;70@ȉC(\{$ ^Z"P!{āHhQt,qԯCR*?j >Gz|L<=,ywֱ 1$@*r_%8DXƜ]R~j/`xȟ<6Yl8͍!SR޶ޡxpi~N$ݞ}9ei o{m0{>}MahґcT ?rپ0w)3(fY|:]iA]?ޢc%;gyz }G/%d-zUA!I!<-Ob3Q1p-]M/#D"P7 BjIpabf,M# eLk,pTuWڞ:9Pdwۡ+3@0cXB2XIsB4 Ѕϡ`;MlLV5yR| >Sr6d(pkէR*f\=z_B :BWL" x6߳^KbPL&4|\V.m+Ckoh_vmaZat[]nj')tR71DzzBsǵ%Wc>iѦ+a=I}(F2g{l,GEoSlev\(#~7e7SȔ?msBbh[ X(җ Kƒ8FY*˾Ы&g#GMFң75U})'Ҫ5ؼmB$,DslgO&o3XEc_c5ޯZw4/X$Y >3|9.gYRU-cTW'BQ&ALC ,i Cv}'|Kd f86I\+ڭ*q2Ӎ [zH+3+T.Ӧl ~ UMƞșyGˋ3J\SC,Uy e #R"ثk$TL Q͂i;u3ؑAϱMp%,έnܢ\Cm=0mezwi1-8NY6ةsbOTL\`)2oslɥ9s9>@}B'݉}1݀UU!5Qxd6(c14Ǒڰzv |Qt U&ig[x}o E-/ cFXӟb;}@?(#EeYWEJ}cY#r%FͩCTe9Ot,M AX2=!ODuiZH#&rbn_H)гO!^f &sYyrbSK+"{l-Z*Bȸ49nd:k~`ߦ/oV!5'#d7 X_ })t[!j[H#2 .+C[F{rMw~ujO6UT``C/l "j)v^07n4{QvG L+/$su?5LI_Z2O0t #6_ նh3|%ү)yks\U#J庯8 ;UeDzҳKYg#sTU)]% D2Pkc[4< 3V.~ jg+S&pj@ԴbC?]b+ PM/A"ad+~+VB;D2D߀la%Q:E鶕su&H=f#@!LCbpG0ߖ(+4ULrKJ R˷EK 5qոD¸ y|)*EDN(0pEx>By5"9a* h}Uz xUuĊ| XA!ΈR8Kg׶KԠ=_fp>C_Og \| :U,?Jv(!yMF':*P؎%#mp8`w _@K{0iP0PibkHb*禐AR"h81^2>$.h Aamn8V0G ?C$uDTw.l/=/-AJUA }^B c HnRP-0VgaPyJW79f_;ATx=3鷄N;={0FO]p9=5&k3N~UBso4!ǹwn "7zWC+HSH27Kʻ" ʕn6ī6ȼR=SIr+[\' ɘʍE -.)qUb5opci58vQnDGid #>f&S .j0)e388C(? $l 2]"RLPيr7 6=P˛4?hd5^cgʻ͋d;uBм(A윫҇Yp3RB+u2t>N+]|[@+ʹ5FacQF18gw%7ӚWwV<RiDujP?\8鎚*U޶dBFlՠw䗸Fs}c[m0f6)Jw^n*YK۾ O #pw1FDxd4lbq/;"@N.C*3ӧX-H|A4ުthh7sk|&Oݓ7V[)Wlx\P޼˻5|Y+!B낢NM(f:4 a څYH$7)0N@LDND;x(~)R_ovE3d^1EEjl0x{vn ۾3)@ΟʴS+V=TW_pC?_]W9i/I:D}wTJOHa^ OKBKaA񅬽c)]B5j O,͢Rt摿UWX$Yww7ˑ_A_A{ʺ/?F 99{U䞹 wy۰ 7E5T|ڵS_88T-z6[^||W|yn%xYwfA>V2_-2 B²(FC53xTAvA6WQ((r:4wwmS[m^RfR @1Ӛ`&oK{6XsYl |Ϩ6G ]yVf?x ,ER%g*?8)70@8iw#d6~k0P< }]. NW =F$JFeDWC]8-cEYl;H]wzxj?l|/!mm [Cc9 SI|h`QML*Ack>~J)uy 3*OO}rRJW Qw[ClJ1i,7L7(- tW=_{GkLq)G֠>ڇQG ոޔӚMq_BJ҅i?'$ST4"Й墰yI]Z1ƩĠ M&~f|ݸ !Ez1ؖqOZ,T/GrL' Y<e%+ߗŨ@"dx%0yꮜ{dN4ηelRS<(tƏ'e 7{Q #i1q^ km |HacCd+ͧ! q3T?D`f i']v'һN2@>OE[f uKu.n֊~<787!ъ \ .9,uUlV+lz7TFJO (@+s?j@-9-@廂{ Nj抾1:a%U7lqMְkGZHj$6 qk{S`q "8 oY.֓Z7dfPEЃ_#~tPWi޼jivgۻOOn͊eAf}M¯%M寄'qOȫ' p7EYơJ{@^0̴~;dzF%8N1Y ViЮ]2w- -I(Xp3 LP)7kU2#ēg9E{ ,WF^5ZS7%`G >jx$ZZ6WE~[_Uy$7z5fiItk5:{˲}7 BҸ>(X51_v]X'rMϲͽ@JtLQޚPڌ%!7 V| !fpb.7IDžg+ױ|En dΗ~y ϙXaRæ=y 4 %tUXeTeXHrӣ(%(dDD ͳ&4(ފ_YGΩ="['\֌ɵBg*ΖIܗ](V9)^lMז+]Wȥk]Vzk3Nqh9[y)n\В"(=@Glm&bzŻOv#QLΖER]}ZtBHs@<^PkcMkC %7= . v,cI/4lJ? F c8f{+ %(PM*HaZdq%*7}_3F"Zs©g A괛5~ 2^+zQ$5ufce<- {S K-)ƭVIÔ$ք q9wWZ\?@7bp43K LY)d9yo*B( rEVqNwi Aσ0E#e{M9PoY)Ni_cXpjnnqq"D CK¡BrO ; %Sv7?_nݨpwg~bh^Gev Y] dDT>eT,?q{{,?ڗu$ȓFO0̾ &1D$gpk6c v;`Uͤ TKcTSez_& ż糿IQo|pbBK/(o$lΦp3a$l 1;'eAQѻ]Bq{Wy O7G-b?LH13 qյUo&@F%hRtaWYsc}M]J|)44WNf .a'uc'@YRduY{{pmܟ.A襼^!877!-9 = -Tmn#6fTadž{~ϓ8a { h`cN^g-?k|ľ!kvĊH'I#nj&`"7j>JDvI#iuz3X4Pw^}:9e6POp~,t48W[ y_LC>Qs =ydSY-[:ec?v4y6Ebrwz $ ZwEEIi4д̳9C-[g!j(Ƞ,;~U(]n 9.xgN:Vf@-OPZ J J?"ȈW9c+wdOE %TC^5$-I:#>yCxa@ HĎSLl[fw6SK .G3͈.)0%2Zr)u#P91KflfJf)ha{uH9fW:acIA]v  7 tO))$#öwCnkl:dp#МGB@ȯrhR^ehkLvB }`|Z] y>fs^ߏ?Qxнc7,o^gT0+kZb6YjU=oW$vjiΪærdv?ɮW׍#.2-cį=%DC$tJT/oRzw"3PTLϹ.rqPĮDu721'O yb3"^ Q^)SP"Zó'W7x ߌ0E+p~#>u?ᝁeRY%Wb4.H# ΡhXK5Jk幵@,KU\>2$ꐭACiV`&'5J[k} ri輼'[5u'FN$xw3_ݢΛ&vFq5U|Α2e, +:@AnH ˶U ~ :>B|z(,NuN6М-ARb&{~;歆&{]4{:CO$=[%TFe#bH*W̢*,U(Z)2'W5b! zLO 2hn@$t?XJvVyTAՉTVݭ{AwZ ,ei`uMKUpF+T2{Uy \g2w^FU\#Ò߽YMG`'htKP뫹6O:w-)D~>52L ɥ*%>`PݘVĵ#6:39;L-2= t8wi!d!^usmtLӅBQCɸxO?Mv z׸{M m gk戫OI;ψi֜&slf*x!}qҬӝ ֕J<_l=-#D]F9T4`bM EȈ`{X-W Y~[yv}4~h0)fY;x~X.6}l du;&+U}E@Q (U3kSWKq[j $H^,9Uc_e9yPx#D-IE0gQ)v8ѥ~ 46sAʶMd\mwϖ͍!ܼq(`#F q-j YOA0#u#-B9m_bu2yv*ou5hvPHW zQ%$]WIgڼm^c%.H |C' f^?ݨ.2=MQuJ=T ZOCd:,?As穀^x:\0d|k*:I/ /6 54+gެWP86+!3v^@`_RKx)jG|qb5Ul8ŁBda[3ˏ C{uS-di Xz_͛g6NIU RƏY !7ד2̊6h;B|m BNO?*Lj́ :ͯ\Vf%FsѩJ*2T9E,AD_$uL-a8Mw/q` Oxo&Vӊ\-d^zkmSt%;DP8C$,z M*(6 p*lno٘To]Z%2'lMW0ކv2ND9ʣw8H'>غL3CGBTmGؖp amFxo,5cD7l ,v !,`;[-"  6a8 p/K ٶ^.uW-wU&& CBGv뚋 fj2}4`@ɡސ5E~T gx=}Oخ)ɪY [(]`MjX 36>&¿WupKV1K. B}V$05d!jW3}#ڛ77c ?=!؅zN7@` GɜIPE'i5Ҳ`oradgQJ|2-fdӜH/`2YGp hpa3O?L.{c6ZڞNZ\$l@j?rjm<L^ zۄQѮS{lU Z 6&dW-v5qf7>rzz[|EC ?qCsk0/(4hadX ?dCۭ].^K&:f6 Ve9{}A_pLtn?8X.1CˆF/ w sݘpF]Hֿ@P8bԟoU6=oNa)B)!]S"G7ev&J@ >Ms8_rբIT^ V_ \HDd5W|gGO#H ?:-\u~[h=O@_TMjeޘfc&^wj^_S[j$࣑Rl&<^'G82ã-z4?`dGD/d>0_lt;[$H~< ״ pDQvv{Bn{fgp+ӈ$jh"Fj"%2 )>;msqsvPO(.6~KǑdُ$$n;cY;UuYdF2j@)=~Ls}rrycS ɤPM8w4wJڈZ9ߦOwG&Y|ͭOHcgr b\ZM]Αfcfq&Vaj=̊G/7>E-ajp> U }(֎H4GŚb`.?|[;qtB[`Z;ҟ=K%7|#8N$qwX=GK>Ѭ-d%\ZVEi)UJ-MQ !{`jtNw`%%U2Ê~spMA3M'3BjJ-LtL$7VDfT+l~bϸpJ$`AHaQ֢d{ -&XP+Io0pgFFCJWN[#+` $kLVFG=t(kE(lڷ#2,om<.Szs+NLყ֑VX#T|my'r"|uttmg6BUFU:@ .M% a|/w,$Җ, Yqg*3[9e=bb10:͈YR*ޖ%'"rsrI5s6,C] n=8Җy-<UT Wb L 0ɍO3.s;4ײ&uiΩPB9+!v SedbYBK}t[\O,-Bڐ}DpONy5J`t1a¯LtK M9Lf\һ,*ԈjCQ4$x+Nz]Ҳ7J*gyDuG.kcΡreid(O խNEf>2xD0)jeLGɑ@&715.pŽ۞/BI_ ;3`&#e5^%:GwڃPx[uB42-gB4,_:DCiH_VgeWBdC55[.*;R% PU6A%P YX>|̺NAҿ4ݔȞ)mEz)kZẁ05Oi*1Gʃ}TZ6LL"ヘH g(^lk7;żb\JsjSS9|f{sy/c~eTdIISH#^>sL/ uiAa ET_[Jdͥw/"wHtJ+0ŦKe'j>nSo$\h(nS(7D-ʚ[6؄@W)0/)vF-%-&?*1Z,c|J`˸G<Q4R Hh۠Z dڅ2sp%iw"w{AzfO)k("= ^ɼSA#sdi7掂G]}K߃JgE9!5a&sDXDĀ/ZMDQ6/&~y3j04ip|%.rO,F^"zfRGn`b+A@ dBZ|T 2/ua2|cS%,TcEoL۫nd=z0_ $\S8:d;'ԝ)KFM3L5ݍ}U_EM ŘzdCk7 2:AV6f -ń$c<ԦRZ Zfan^zaЎ\дc>x0;;kwgL>%, *kk]@H8ØNBJU} /.Yt4&dUhTN()ym*]}~`Wrg@\{0/GfmXi+E4B0 #LHF9o5>n)!&m"!iE[f4clݯB>G$3Ppﴧ,d sWcmD2ނ$TSAdۧkر&y*a%jE-[)_SbvvIܮg ӿlcﰧՑN\0N ~[&}ӗ'xqnQ?۰XR˯Dm k7M˴,L~6uIh4ن\LBх azF|+nSګtF>3җ^ROƍCW]2dØkFF~f4R/ɯ(`pcєkQqvR<8DH)P55啖, +_20v |'.;9 ~+!&W7gOȾ5( 5Cehd\kfU9gzlɴ"wBTS*`oM i;+︯pjci43wʾRb!ytfZО*s&g;hV0,z'EelQA)V Vw8e/$L|KQ˃HגE‹!g(Z^dٝ(w/B?>aاpRLJ/*M.18jp!O gҫo{D 6V?afXfEGvJO9WNCT6-j" g(q2z*:@TGs,تyeS nge33q۠TZsr(ŕ bzztv;Tkr L$OO|@u-׈ToЌp$(!!6 㔂qP}jw+[vmeC4pŒ%ݞrXz C%:1رϑR(N3J3RLpQQ8 zV#J&sqm{ڊMyLohz}TɼU峱 w\j.&Q.';VKjv>h"[JGgzz`xK&y@6C.L)kjPJO6,Tm{2%}l/?{`P) #/Ah Zŝ(sRv g`1D:뭣36D tm{Q{ 17SvU֮;c@?D=)Mk1]:SԤGjiàUD"3x?XQfnҿpaZFZP 6N 2'3N)TuDC1&BafmpH7xhS@@ #sG_4眊&;buP/q>>Ԥ&ēٝ=0>U=-~JõoHYt~[?>.e-YZ _:k *bZo FrE$~9D~B%GF缨j<soEicg뱼~ҕHeO/6ʛ_W)9XL:]u飏Nq &UGd'sq68I1UC01&oZDĸ**d+AA2f rDH>JIZiP.^X)WA?5#,gh:#0cܸ'"]W-Fq UhQ{rqa9K7LYYyC4@NL\UޗID)r_$0|D"n^ٽm_#x)^5\j_.9B߇igNdR^V^BN1cF"72)hl]ƹr2f8.[P.O岯A%gFau#ʷ {iD+Fې&wL˞$)v"G) aC蠕LQ %+ hchbͮbLr9ߌs2@]oPmĒ0%j̄(?bNeHB 5id"(O9!J{:fOݖ5- }=K[psʣ$|[9kH('7{$JuaH'MɢtԘM1BGy.̍|nizgVHfES_bUA CV tݣZG…Fj6 E`ޤ멄V?B8r۳ =UY*_gb[(`0g|< A?ږ1nrH0}zG"b9FBV3# UPSm+]BE[{!2~..5?h1!>A|m<Y;Kj!Y<+p,6N5Fzs˷h)}[_LRdTG@]d*Ly` D܂;0b#s_CyeyKm9 TWlpCqEFr$r't&dxI읨ҼcJ$wCkEp_Ur kCB0*yFIV2}R/U}0wu%۴r4G5!yqK@u/@D61ʨY\51 HOlKсIw& t{lr1}BB=;Jv{ڃ aHL2`gF3l-^mٛ P$IwOƄ'o sW0ڜ,SEc /J>%K adS=ck6۴x?Ө0o͑W({!B\--Vp bE8bNs.yPSV{b՟r M4mFF2ٮ} ef-wX̖.V{ )E4@QnP#e1߾}3H2ٹk7XؙxyWU[w<ݯ}Fdy7n+dq~bQfI.gG:NXzH?AspCngf̣^sփ}JAh5h7`I [(.TJ(!IŪ^nid$ qjOŐڃcyJTk+:zV9je>OVگXY//F~9EbB+힛0DV>n1 RF$ q"]:KBc?Or+(oC!\J1Uv:Onl 榡a|YO"w%I4dj$ YBƉ+N4ӸhY 7BjPP~L, ޲SZxJU !I#lMd/HTpC^W{pפXB߲nX)~*)#܃V1"3fqm)˚iQL~6U>*FCޔbD!W?HJvOBm9qh+at`X@ҿ%K %f#ȞPyuA#@`  vV#ı~ƨy[@6FG}" I{/z@8A%cb˿5T5nqXAB4?;* 5yqpW+J))$%L 1 '@'̵~#} {U+:47=߱ܢ$W(g3rtKcuwgM0OA-ة@D:R;BR[_6"s !}EXL9eM ܡA_FVհXdc߄ O+.و %ORY0IMP fxM {L$6Td[* _Sw;ɿ;*o0QzjuSt'ڸo];W=C-F;G6a\Rvtט*Jphn&BщвZ[E/ðPI4Ίe i&3VYI\S&>zb3pBU/ltl\!\)X#!U=<0F 'nXOV/5_m,$HN^qB6Qϋj 봽Vyq)`sD'*1.ʌkJQ]^9ai oI ^/A.,Ə'ޮry̱sEޟNwӢݽ^B=n/Hs~& -!]$g9cR$I"4R]`ݏ9Cv"?T\mj7deaόAR56]V ^g!:c䅊LGa>>niʼnW /?_Qi4 Ih1Y_,&eHEfGxtA *K-]ݵ/֞L.l!M7< c1ͼa_k+BMs<݂jQ1KA s0T^p׶ {ɑؖEIb/r8M? O(>#҆favnCMA}i$ bBыLg\艌V 17 k,]ɖC3l#xOB$C "WA1q)+=:80_w[=iC^IO7.%~~G31|M_H8]4mW z%KsZOHL{vA6,C#o|FYqE`a#wtO\Qhxl>1dlhVE:%u"jYi#6S6drKO!ԫیS3ςg'hNK3пAAkp,)"fS_9D~5:4d>8hV.RA>~I>Z-WyXgm%uP<9cWV#3ﴃqgDDH2=8GAn#;ApE )1Q,)žF]e.WElәVWwVb4Rt 0ŀme#΃M%'\A=YmJ(KE7K R-Ů vВme1[;i _SaW`w#S72BOwD|)SJDnx 3諈LoBiLIؤ',tedB].i: ЁKi锜ۓe;FlpaR6i1l-@ۉ'ejpY'iy=%t*AP<8=Wx!YfBq Y/Z/xS-jU)Z aDԚ&/9ـ+igtmQ( ;kX,љ1}XG^?k$Qd7#O-CZ(\D/L߻]p 7NPXRNTFVVaTI-xez5:kcu~uD4¸*XNe o@!iwDfUG.Wgšuq,Vp#~8g_WJT6.r3g\>gLfo孪̢ԵANc,M.IK 5WPzGFVs^H ƻ]QZ]. ]1ӎ)5K6)% R^|w"#UtysMytE؃:s!RigI9$3Ukns&V'Jf82'Jx F4X`)b`#: G`g5M|$9[5,@wέďAC(),WhD glݖ @BK f~g*E9|Z9R3Y%ؐF*ݬlq HSG%6W{%/^C'gg))y&Cn-<(wؠB/{ĄiB) :[_8y `v`!iHR,Ж[1 / i_Ʈ"bjR8y-(GgJ;`K(ˋD \A[fbY͌(/}NҲt ,ݧH$_n=jh4bqUX!,s)Ecz2~0˲*9~l IF樫`Ţ:1w.FcVcxV}bLr>! ɒ)., >c&8|$`:j^]C{h y |k'qb5 (fJ0CKS.q{ PcEӁ^s ּ=ku ]{ ܽ:lÏCMKPdkc=zo` v!8]^jX-ir @f:7/sq+`qБ+x.ޯ;Wop 0P_v6x䤱$.uŒ!z6Zf:һئf0CE\7LKa8L鍊!rU ]fP>'\7G^)- ccv(T[AGtbYl&"Es+4s4lr25"GCX[gx =}1iiN'`[(lJh2{ɸ"Q}]N&7™e >#٧Ƥ'밑UxheT('rEBUjC_΢9~#XE`x.oBqGxX&ՉbY[}H\626x#)_cXSσʻdXߞEX û_wFjRXw3Y\kr(ۆ"ܨheoK1όAqS5˚FlQ8MA+ +K3X%U=EYZK)"m9U6ϳ;Uy bVI9W[U1RGӚn-$\LQ\^M{s5p9yK~PEc{\uՇݜ"lZuuWh@\N8Ǧ^i7*Dht62Gp5l Q#`IqMU|"ZXWQnU[krWV#c9msT LoZ s5hU>n SO5s p SmY ב+%f z'?)Jk\ R_@3"i껵2qn,yϞ6]*Wsb]]nFyZo\n. 0qXY`.n\|X|~402/o}2u_~dQ"clH'!rQDE$zR+y&ss n i ~nNyϸ!޵1v|By ހ  W)y/7Bye"Ʋb7=[Fqq I;X'DÛy~ A;CUʞQ.>} dd:zSLAy|p'w FwشAlYMq1S]"ާ԰:vx.*J i)q8+ ']`T)&1r&swe\a53W%^htˠB]LtaataF<4qB$@OUDvZAALܔ9 ̚Q-c &)GL2eBxj]qk]C3]o sk3 Ľ/HD4PBoZD~㋕_c4Fo^@# X؀΍=JRW L,ac6*T{{oqC^/V.?hoB[74Mjañ*~,K|"<΋>xXn#YR]$`lW8YD#B!fYձ}SŴS\:H,cz*#Ӎ= (vg(ytrѡXⲥ]!h= v8kJC.K(?jغ /9)95(asy\Sgt16 lve¡/5A`[.߭NtDH؍)%*b6[P}4wݒHl%e+̩Оf~OJZ̭X_Ÿ!/ C9UJeu:?jB}b3,śM V#ܒJJo Fa<`G49Qg|D]fV&emly^}a|3snBo;KkR ,FKF#~7{ӗYW eWS@@͒dGiZL=X B۵XtWV5Db ZOJ:n*Vg֯B, ?ItCܲ>#=ͬt#~ 8 ,ܹ!~d`.x U#gr]|WeYQv{0t/s굖Q2O+뾑⍞'3oX!8YPr3 7aMoTnh]EEP['f}ma³O8752Y 1E\,̐x)G^Pkp=-k2>h6M|\ ʺz߽4^IҘO|[œ0?IœIY]q~r"M _jeLϰw -0&2)loX U:O E`ucEY*Gгx.aSIJ k2|e-Mx llB)jXB?gC?@ lVա17|U-R~VP>juJV+;ZqT"@gIES#` DTRDA1=-U?T?3鲚_Y6QsR<5_'z8t|q)^5}PW>ٰǭ |~'B+gS4Tw7R`%3A> |<]*Ǔ_a$mO= ݣ A4jbmZq\"|o!)c"͵/,ħy0zAױ.IoQHsin:EpItL5ݽzڧ_vV g9?Tz_`毡^!*֯'@]?; )myEĜެՃ$k[}K"3L8 o#ű0UO,{s_c GId #߄H_o8fŰœTCuMyKT^)mkk,kS\J2Hr')lEgGJ:<1L-DB2NG֏a>ʈ%+mW R -kD#@/9#6#(t96_JM1wiigv19BHsxL%V;ǫDb'Hzr{A۱f@gTbW5 )[8i1/3Rm.%I(q/+ ?èЎ+둑~"Mho4%E_My1vzlղ#]ʮ`۸*oxql@[zF5Y if.؆^ȹYoѦУ,MA֕bD 8/+B|utM>Ԍ G| Q(R@bjiʺ*czP4ĸ>Nj<$1~6'[uBƛrxUo߶^P~Jĩӊ >T5z=t-?Il:@!..+NKT ^ꊰ9a9>sӤ$Ӗ^͒uߞ3 QdfG;#G6^H_T!>~_YpHuQ${p¼ ql< }KޝF (3 =ܸ:jOv;w~C*Vk%3 :WƘP@!C__˃ 4mƄ;_Z-Ғ!Sd xGkCfuFyt~Mp.+qZe[Y#HGpI[3 Q ĮHm!K蓵?4Qkg2}J&P8W./E#rtҮ%'ܾ'UJvA|#;6i6|`c)-ZD_RX< M'!oED 4WE)n܋M3:n'Y{Rƚ|Dbdb[餃Lwq_K )6ѐE[q"'n$$E͆-pL3Mv\1KȚ[4P(Y\`4V"ϡnw*dԄSS~Q)iq_Fz# HZ}Z]L]΋q>Elf.;v-fkI2Oh~js0&BkfILPPi/$=-LVH\@FftUvLUt Z'h_M,ٯQs/?,@dIXMH+~tz6O~{^}CY;cŽkVO,^dY`xOw40EkP q;[B\)(5<Ƣ'~dtSzfwLzF[kpY-m6'vHWvٖ[wfSy|%2,5}xUdjHċ;}T¨ULs `ĹE)}v'wPvɤ/.p<] î5ykG᠊4D=G~(^PDk*$9&޻ް?aDaKkbF0ΎmVyByȥmhSgt>W+e6pxK WqTk.>Y^ b1Nk{:O>LwBGpoEa ee![H2Wh/&pH܈Iw=$hǦ h&FJ, ~?c21vb?qLjW5@h3ߒjo 99"buSϿnqLuhdU'I^rTe>FKxNO4u?T C"n#}/͏o3*z:-Х% 1#lOT.RfmzΤC3=m0'o;3i[a:7& ?jtXr)Ad~2pW K|S%2RjyCRR h9UjdFOE&:tȯl)L4Kdp0(%89t?oЗHQqm *%D2ޣ0*繤>tk8~Mg;Ú2:2;5\տ( Qρ@QI-YIpv=xgK8]|A_[vJ n]qDe1*'-!۵+Lporb)DeD 2of=WJU 92v2..GFHkifdRR43c{me{ G 2yM ^"T%ۋq]USxȨx4pI~E? _5boqp"Eƶ@(*f5 o*VIZ6u#i:ő&JH<iL|yoJNIk{?{dLp[IG*هH[mmy 2*4H+Ip>R=Jk.zID[i;r{(.Pw2`/u"H O! jZզ Y S Q`8*r.s+)jn9<WzoLiPih\%aipyƶ9x?EM_׹c1;%ӔW〿_b<30YŎDRĂA fzdR6LYZ{Ѳ5@"o-W!!Ǘ(0#Ld-ǍV{2g%\ӅϙZ|a\Sя$T9od~ҴVG&2N_;z I#3KnWWx̀ũ8*,`ثk&wV[5bAH {650i\?'Ɩ?Rbwfp͆zD*Z?"WK_Y`k;,Y,1/׾UFsȟv/ǛKDa.E@<X܁񽐈IΈNds{`v߭ڀj)[ m OWκjZEhn܃@:- OO\ӟԚVd=euH_ewqoђj(lX q!.|mT wY~HNS~c44MrA [q'GiֲL @;p1lW |g=EVsHOm5o|z%Z ٿ k)T$ir͔tR/&1_8 d=,;DB_H+U00P`g*y SC\G>Z;`o>aD:]Hb-jޣe7Rgb4J:0b@֯͸b"c 7&E-rIsKG+!/SzFдqቦ"ne@kWW_Hvt {tb9Rs)^puJ: &KjяMEmK!jw6CGWQ{WS{/0SeA|uݳRZ6OZ˦n;#6=*)ejU4.4ld5[ t8dF QE$^%W#=7W &`&ڳ_acU")dW\W\W,+9חc%٨1> S٧ (&'W'b 3~BVb_V?)?C KCj%E.lclfpjX:08eHxhQo6 Qxv<@A o>Gh=\]ruLN.;JJDO.{,jԎo+GPPmI~ #g :hIі%19wXtkߤB}NC'P``@x2(A6"=v}Kjiyl2A&CA::(taTP_ x| A&(+XqyYpQ~x~8 `l_y,?IV>g3ܿge v.=ѰP߬WDTcuq aX #AQ !F}|PPOGu5 (Ȱ  gp~}v,oU`8'`wgI`ݠM!P5}dh!K ™6`IӒr |k+6'FkeOҕΆ@Íva_ ,=m>b"v%~DN9M#'ilf;rE. 5z{^TPWVp$T<a6oYfV\LwFE#BoZME#E z+AV->م'"w) YHvhhpz8;(]\5~ VKl{R,8޴n#qƟ4%t`ABnn"I* ӠV\9ʪ@4Ʒ<Gk;Q!Q(Xd:H[&G Me>{[fBy)@c {Jd1%1=G787Lسh/cYxIӎoiA;YIpl`KG25zO,#h Vf\cG; Jv><8Y 朏%N"16%Zʉ0nXF;'8~.8W"+&D.b)|01Yo֢ԝ6gO e6Mc%oO1dMx:fAsUC4XO䪛v KsRKf,ÌA |Vt>r5;Gܿ5ϡ`7a[ A]A[~؅ ȶx~5> i|i/ G\{r] 'Aq#fDctj '@7˒HQ!7 {%]179m”|#M6\<I >2\?cwQj8 |)RR)/mC~̕Ԅ-Qb$$\=@M7<-YX+&TyiG QA!.XdEc2I1C+8 \7$\Ł~6*A%ьҼlnZ͞'b dBS=V/H+ 7?QQ"[ܧRnoJ@礪Ӈ)CrQF翑3V3&ce%[K bHb88 1`=h,O9#N8i-t6m*q*\PJ{:2@Yz.3K;e(=j9Jsƚv~TC77r$G.(uu)v!x% OӘz},eD33+QZ74}(2I|V4u|b;XClp.p9cZ f!"@e#/z%CXwdK!G"AW >$gu,w/Qj3J) DHMҊ |3vT!%seE u\ǹBL~6VSnjyγ4CLMku#6Ũ{_e?,~J*kv2h1?>8Eh}Z .Ҵu*XX2\r4PY JQ S, \r8؍6PPIco܎;{Ts$ҋV5}H8mrm=w!Ng) 2$UѪkďPc!VwزOW _3)r@|1:Zz5ik8DP lG:R)\bgAh&\SԔ#nGAWP:]z Ἳ͏D <.[V=2AF'F ։fS s$C%WKd[bй#Щ nrZ(X>% {4QpP6^RY{ڗKGDioK0^3.0QY)U 5ZnnqɊ:>)&8PH~~@oU1j|ӇdOuÓwUzQKNfk;M6հQ[F҅x@7Ыr~Ңb'%_3`egeZ wzGxJnqRLDFv>l'2SC FHz3 / DW$e;&n0jK`=~prvH5I8)n݃x=gc`8-c7H0ATD?u.rbgVvFJiOTݰš^L!2lE RgW`VE'X9JCW՞ %/pe~g8RkIG8m^;)2 M42nºvcp"&ųBSG?~i%6rϠo2 ĥwꗅzj_(o)&@ }%5UdhpA6'`L<- ý&0;w3j]R.v՚'/W`ݑ[}'c!YEh>S,[<6ߩ t|μ:8x= >XUl ޱvĪ ےsf;_hPyt]W_HKD F~ oֹבݩ3:/읝;g#L-E c Ժldž?)LF2냖:v^W%hQ9N.@ov|1ɈMݓTsQWIӿ|jf75`xSXTw.;$bVc8Oe?I?;긍;˜mJxf>c-*BN[X|PPOx5-<0b"们cai-~$ovDė;5:S4/0ى +.%fo?*XK4 ˪l3uUtIdV;.4MC>ES!3#{حWDԓi=M9vNk2<-fz/U:C.%}ul( Ny@HU^'R j5ru+ N焦"p} HC_ncE>笱n cQQ}2 K#~tIĬ"$( |.A]孧#ĂFR] M7G8 -aFmxftH€iHK[ac HTl5XN0' 8삧V4)AgݘC?F Yk%rg;g4?+wI̦|a ⨨=cfᜣ鶲!WhwŽgu@ C'Sl$=މľT>1zy7=O͢rT|l^~T A_ZgfLGA2qT17!#;bO/JFΆ07h `G[+1|#L+E+x!*;29=nRtxd _mk| Tmٛ8 YW@g5$ݘ*!@q%h+8 SE*I^X (oOO@("pT`q> s_cpq?SefJo4`-ɀ^"tʎ㫋]0𛪏?Z-T6Vx`ka_k,) *~YNm\8buP#فC6V.F"Ͳ-+n"hpt{O@;e6 T )vBmxFр8X=\j1HsnT%u?a"ĢLW`p779]7m& E>bA*!#0&eJ^Dc> lt_]:%E^ٟn'}l@Hrm75sH5L_r%ƿ棸Tƀ*UmτA-@JD֪`7{h@!~u[ia9s$n6>.47B*D,V/L+Vv@O 3p)ziL!5NnJ`I9Nv>lJg4}uR2bgh6s&c_V]->{WYY@ѱ1+ʶ{u593N2(%&XSwk$dtso`=T: zZN0p8ԃY19'5:Ĉopz ֜L 'vh`xgt[wia{b  >UYO-P!W=9Y5 w?ղw9Xr:CUmPz-HȆ :$3հSCrb^`vE\iҢ_E}1׼it]X_@Hxh=- t#lw0lG`K>ϔwso,]TvOβJzڷ{D]BGE@^Jsc.КFq Յ1HyɬN"*tuփ2r_IUݤЦW/ml ŊFC {+l t[NfɚyokSMenkβXSnX>o##Fnб{k'Hw+an1%˹F28G_O4rURJ ɞbDx U8!NE=c# =#*e+hE(֌p\B]`\6z(t2C VL ]|'0]`NS,XF)ӹTqC'YF9cC,}(%wL(潍7r+|a꺸/A92 &X ApmZ;=hP<2" ;qo0w2L-PRW6?^/D|iW{垹j 8RꗰTtfiЇEwc ! ǸV΁`=}-6+粽5z{GXgElD `Yl* ?3WC1w]Tb11_ύIV%EjZ &%SZf/#C#~]⯟IL ދ,b-=aAUYΐEwZ|)'Bp/{Pb8"ZSH#^U!a,u4=v=nxrnLz'ݳq,-l lr7OYrg`dg&~tMƘxZ2#-1* T!2 <^lhD ~O~ôkdw™E4Eٸ1O^tm ,V>ou̯ ]WZ%tͪJo3t[N9}FGlBjbg0t>g4mEZsHCq]#0 рKoea- Ϛƿœ#H_YI _Ku,>Ti!IKչc vCC_G“]Kŗq.癛 EfGǺG8 Ri;pjsq E]A5 =9-53g_I.|P &PGu cch;fX2N=C4A^&(.&|0|x>|&F B Bʶl8ΈVDZ;{xXUQCd65u3n)2qo,1(L@(-LTcImA+c s)d:/~XDzK񋲛lM~(vs\ իy7SnX}&aM_ǭ!X"ONíNU~Ze>e'-.ѱvNfWȹn=jaS5K:p f) WWj=a}S;<Gۖ –Ѩir`iɒ6reN5N@բͲ6Tgdb 54)zI%V{^}즞 U-/VxJf~Bik>v lTۨ*G?[S{~ytJQNY]bUǰW8{kرqGchϫ 2da,< ~5)ՔkCTO߯ȲͰS}4 Ä}Ii4M+)ŝq3KW;DgPQ@eL8e`tN@Y8pF L'ï& rnq|6ck,:-%?Qd)| zj&cSPO +YTAenA Q/Iڡ~X'LbNTW m^K1 %Y쯚@p ka]SHJ־%3+prIwlF&xsax1( VSkTR$&̫\%Ƕ0}O?LQ!)<jH4hQD\_^ݢ./ꏲIH`TtN>ROۏcz M RX)^^8ԓ"AabZ.OdþavC,G4hQ e`y D>4ddVj{j+xQz'qϐWbpD*?(jD+m75)E>WŤ1VQn;W^/T+g\oZEu~ T? D2O1gKdE{J[#Cp}1HQM^E5$= O&{?y*r[#IO$w=D&˱V6*܍k]FԢKjwDT"N)JH.1> 7H414iH _wĢcwn vIBB.@@{wI4\{>1XiBglVs E~l;V )}1owZz{PNd9 ;_yn)&M*$߇k'(V-r2boΟfyGHIĩ$J5$! ,<l~&f_RrQ,e4 `K"¥!m6U7~iSUv_݂&_A=i?2nq5΄u Ge CqBiQǎ%CnL4z7 p7=*,Ke UC\zQ4O3ǔs/bT%G@_nf?;EQ=hЦIlXSS]76GDt>!4Qwݧ'Vj">`eγRC 09X/Hް1A65-t-;yҸ]80B*ZCw~=bqv(ucz̴rm;H&LAqݰUcxz'ַaU^IAУaK̆:YѐcO/>q`藺3sIk>uvd??e.9|\,#Fe:LӏfB*iTg.KW'!23AzbS[_1FO:Kab0ৄVcX=r&:۞ř;!̈́'4o3 7 $;mg]%7܈#jf(qJN%F:Q6TmJX? ߑ:K"* qn]F|Q,t":=P$\ۺƒKqrzgs>`'q`ޘr9>@ #"껐3A|;qI3g)0?2T(?t7T(㑄R~BU."SFc2wg{lbA2f[vv E%rwgޢ, b{aR3 lM ĸh~=66qLڼ;P@'qȩäyC>Y&i]7eeڻ~1F)L} D.ݙ vXwI)!+h<ͱ듌ڶ%RX)`!G;[p)c0YwPlT P٘0"+cڂ['-L>pG N MWH/A_JVSk F]8#gPfzzD]ׇgIK{J$П"*ggtouXڗt}͈1y޾.S@RI\ҼF]8w'*A-/~cA@r$'*3}V.^NouCqS񴌫!93,eKyF0B~rN4!AViJf lF126;,V&_jbJ,uIG̉wIn&xv}xcXqRR92APOh(xlN 4VXnH赱< . &ٌZD9aA>:TR&bZ9A*j5$/lBX>NMۏ{W,T֛<'> .Xާfe$RŸ?=&v}L PVr^/jC:iڔ3YU#VyW1U&OS;EX>kc)\Vx~g>o$)ę|$Fo<Ȫ XBViU&ٲ m]x<5f2V$`I lƜxTW4{JP ɵr5SluaN&]oGD&~o+{$.asXp6Zq~ 1iL~F1%]a`F'f.d4'F>"NhxK\nm8$E{.$% 2P/kx\:ͯx[w)U%C;?ɉ mzs@/6{YpQr%~Savz6 pz)XfT Iu!n>ˤ;}ڑ* F?u?waN},I B6bF*z'͝k4e Gy q=,pQӝ@]l$I㫶Qfs$<`lC9D=vX.&)Y܆*>֐ &n,//Nq/*fD"4.9ٚTO"tE?,1q=}0LBu? do*wg}x(@%"U$-l. [nS\47LØrg?I@+1@nS<]xȝxQ]?e"8GtFUR7H'6 pJ3bk:,RgE%4e4L S}*kjҁ]$6H(2/mz{orhv 8 Pf*>9!9juVXx*ZCYwpRKP$ TYtԱcC1 hfFMo$KY1ƤqW4#4?`]}N(Zʼn2"}jJPmHIZ·4\ SnQQZf (<r<*즉al0I5'1x2R GF[=_n!fTy3OW~1o-" AJ>8ƹ{:k . <%۠ha- cmU$8_D\˫s*N e՛a,Ni #L{&+~M7qDv@1m"p]!貶6==T+ nVH*ݦb@?-X]3'J I;nAK(G c|3cc[ E( dcLxXBz-*D/kjH@z$GarzRp@kfvGBI2PnKD1ORI`i&^1\t$J{1Z0/h `lo|4*} "TS鯫&yUE]^) ,*?/V"oOZ?9hIm8DQ5qxE$-ՖpaP_l (ٽ'~/ww. &M鳫=@~ ۼ z fu 3ğ aeoԁU?w" Q@N$4>6:S9 aURDF:QSMnҎ;USx21"c BURtMdN>hG7 a>%ͺK &[ɑnMċ1rܽ-N\'WM,H3e7䓭 i45A\j2F;34yzccQgf @g˼(dLڴM+s<0)F6ZPi~ Ls1*=7R 4C/6tGy=S5^/R.d vK`큈9) qxOCTug+,N8xĹX*r?x Ԏ \L0![*caE]gL}̝ݮaDMb'A( #S _|N|t^A> >Jv>Lq j٣Q;3|DkRu&| <2 8eT {Ũ_fh#|"=Ռ 1qYͥgtQM(kw/D;m .3P%veG#o\o)`Ee*j`LwWId6mҎͻf(iOx"JJ!ƀL!c G@EB]}=!Rr]JF"т1az]r' T0̄.I8={W>HrH48DH\#B6~yEG`8QzqC+֎)A)D$Pr 1W:~KY}~' IU<Y8bpLV n1#M0 j4-,Clyg'8 ;F:QǜJ]9&s[z5/HHW_ !8w֭М(}^'w쮣@O5g/`nFa H*8|v\cQolf\ {o'>7M o%R.4cY`nzTq6fekщ@uOO&<<,%;A!(hd _(#'guZ}s^msE:vh!e k]dz t &  2Ee̖/o; &G+Ud-7@I4+Hv4,cf 6w ,.O`u=vQnLSQd)~'4!>tz;zMAs ɤiwM{gB?6@RsGgqW (>Uҷ&Sd 6MR쥥pM)6FbMGѻӖUݘ3\C? 4@z P?ɳ{ۯ4^ME\zXH\)f oxs'وLvv{dΧ9Fa `[shn%r$˲6K#^@Lz\}D1ʻXl’Uroq$KCU!~J{lNLpC~M(8߀%ŷ8, OË*(ohs9/"9Ӗ4R̶ YZ