python3-apparmor-3.0.4-150500.11.9.1<>,$eap9|F#pgW3Y OB|ve[G@bp`vrH̬Dj LUe|k.[$m*a8E@,+OD!&iPk#)¥zpކEY*L"q<6F;Ȃ`:n @5r+P,V엽ѽJF9C4wmrq3t^{rQ]]4J([D> LuXr~ؐ>>$?d ' T= SpUU U DU U -U UUU*PU ,"v("8"9$:.0FQGhUHUIUXhYp\U]U^ b˜cAdefluUv4 wƼUxUydTzʴCpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.eas390zl36 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxs390x/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%e#eeeeeev@e#b`%eee103aaf985b7ee6570e8410caefeb8c900d5c46626cac08e13bec6476a4661e2044b2a8c30469873aebfe44bd3909bddbfc178df5078fa7a2a81a1d913c5b569e01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b2cc671fcc9d1ec75313b7eda5bcfb6024a389a90a86027d6a60afc0a06a20e766b7a19cacb0807dedd0ad9b166df085e2d323058172289ba401a19560dd4c64943278942f1939ac5492e15e846b019661e35c62a54411c80857420b6e0053c3fe2014fa7be316b8660de8253e2a37f33b26d131d89dc5cb3c60a96b72f87f09479c99ee85443030093ea9bb6344262746a82f5744dbb27fff8ab94acf4d6559cef9f47cc7c171c4a9b4909c702edb17fef4615041bbe94345448d993fc7a505f95e7e2006197af3c8660f9afa84426b0b9f6201bb59041b48524e0b0884a7e487eff10e4b1d26e36c2f9491794fce4d3c3effd54b11ebe1c247928a34ebf89006293e6b1e3116c6c9a6748f3d348af4308316ce8b8bf35d1a2d2f8653463ce02778cef18bb1206ce11366e37a9199a30d6454a52f52ca38c13067921348b73ad06c37642e6fcec6bf9f73444345b04463fb1908f52295a9fe3e59db866787a82817127f4102f3b08becc2a3269d8885f247c6a9b99f663482008929652f78df04e2a84f789fb7d889933792666836ccf3721ae4e0677e07ebf0b3e2a01b24f24ca5ccde44a784714cdf4fa33d20883335d22c002682f44876a653a5eb333ec9b131d47338b97093a2945a3c79c2aad86022282fa9b7eb76fb7c2bf494ae34d50dff215fb0bbbf5a8438945bb4f1aae8dc8a6c104382fc22841f9da106c658c4f0a7dfe77a1b05bee05eca7d4d2c7076ff3aff6148c41803797b9af21bfca77b390538551a7c3c46a8f1200402b94eaa7195a42d57f45d572880d075271e2d1bbd3418bab341905c0ba825add5cd1a4c009525befbe1fd4871afc04a186a10bfa40de1422ce69a7d59905a7ef3f9fa9cd474e1df5aa858fa99c9a8c181a8ad94b91ec320bb6f29456273036379e6ba0538d2f0d40a9957b93af9262faf020fab6026e7f316b7602597992eda5443ef6838e11dc790065a037ede90b97f49a39d9e87fa4fdae84740fd8c33710c616c9f119e230b57b48e19596d7764a79452afa07768616c2507877627ae91ad58dd98ef1c75598bfa23ed3cb7b52520feda84b1f8511e7aa8329c0343faa417d6f49d11fb2480f56b9d93587d494e73154a7d63443caaea741b1ad32459a870850c37e24b54f2a5cd1d1db195a6186954511155cea99a231b3c8a28382f6d33e4ea8a82253a3720e71e755fdf47a265b0f81a6e48ef1f72d06410e37225968640b28cfceb343074d895a6fa54684173e5b6abc8fd00305283cf4a6b8c3f24214fb6bcd8e3abb985a2544df3c59ba3bb3bf92d98987f49062ec5e62b2e91f36d014f9e2c0663c771b61b730fdbca9fcc6e61a72302bf49f902be3b31381234f7fd7537112dbcf58c669dbc42fa17afdf3720d9b0a0075fd343f00ee9fcc7b7fae09f8f281e808c8f5a050e89759957399a1ed7b0c8bf56e440a4aa90a83677f5285096e97458874fe9c3bdaeb4d2ae40cf502c721203a91f18f498f5ad91ead044f7556942446060726421d7bc3586516ae19f4847069e6d43ed07ff533f4b2259f590d75a5a4b2185efac3cc04d118b60f11a988d7b6032e8f4549737a25ce5b4c3d13d28faecb3d88cf1184908b0c378b3a80beb18dd18ae69aea286f2647ff2c4a74c2eafa270f3ee952bd057b2d3db84624efd350da354948af26e8d7aa73147867e02f53c35d81252500601912473c8e8c47fdc5fefe08e945af99883ee269416abe471aa36c4b650f8d078389f1228e1873154338182919a0e4142575a16a438abda2f8d492701efba4ac1129e8e3259e5863be25bd3db945cf65d7aeec18b43b2b54089eb0a0367c6d30f5d002153f935874779a8d2b84e1d582cbbe163349216193a4fe2722effae7fa54d06d7f95120817bba02a54ade1d6a15da5d8b3f5c75327fdd2a80c6c078f0f78263596c7dce8ce4077b456eb35e64cd6eed5c262028b54af5d16f85faffb43bc428ea1fc4a021ae37487b885ca4c8983bd6bdf5d6f2e00a60c3f08306c9076832b7966ce51e0c4eddcf554959459b23e0a8e2c352b5565da25a908f321eb9e141bc77fbce7cebbecfd995eb39012a844c06c1f26e904de9ea3a0a382383050bbe78341677c525cbb9294840b1807f8fced7657494f0356f2a74423373317256d103d29ed441f65109168e07526aa85d23e56cd76de93f1ac36e7d86e9e05f771f29d1bb4b14ea6f288ac8125172ae1a3e1b74b407957f702dad5e5480df705a785c1aa1592b90cc2182376954585c70aa8bae67f7814e09537c848de84a7c4cfe0566113dab77c29741187249bbff3930127122aa8a9694cd2ad2ad254c2bed67840f837ea51953e6c05d3a104d7e2263adc6296f679dac88e52631c9cf8f86eda441b1f54ad8d16fd0183d6921b50eb58b41610bed9168734bb105c03b4357bb56e9e1d77e9f0d4f5a562ab934418a01c902d327970cb6edcf17c58c94117247cd463d5b4aca05006a3a4fc32599fe6dc4f47d2a668cabe7f9b8b6ae409900c922e8d217840ad79040864987b7523111128252163e639e1eb932ddf161c4c56caecbdbdb922f7815f2f65b80c739f0518dee431ab029e119546ab2af5053b743b3bb4edc383e1eb201c5d5553ebe3b50c91a7d8015e0e48bc30c30e68fb1d7bb9393985eb5be0f096af15dadcf19e4499ae6c2d59d0ded25464e56241c75baf5b94cab456ebd49ac8c240526456014b084005cd7da7f8edea9e7edfa11701b399487623773ab7221a9a936d42d3e1e0061c5057f2a33f95754934a7ce2265b2cb0b16b451085bfbfec18866efde61dfad50c4016b136852dc8b4a4fc1b182a02a3e47d0d951d36561949259c10848b14f2a69e3f9475c1bac12c6f31d9749ce0a81e5a04e2d306b3b115ff3111e4fc204d55bb2b9ed73160684b1d9581350c4984b9c8b3482cf9ebaeb6bc5e77a9d572fb928dba6d4c5db21a47fd6172f7ef698f4a05b18a9475fe3a701c50bfdd4ba5f491ccae4a8c395d56c2f97549930aead3488505701ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546baac39bb57b937e104c1375b745d15e0609ebfb00dbbd14546119699d511cf68056386fa2f5e2de5845ae5e81d7de1f92c452d70ed17dc7c5bed1901d341d6181f28da1a7dbb0875f7cefde39c4b68bb62776092b2d977f13780f2aed32ce031c9f50c49cf90b7050a3c75116ce5e903af13823f0fb7a8e07803af337e4be04c054742f56fd7bd6387cb47f2a6b19110187c9e7af40fd753594287ad0a4cd55ae8fd7ed51da6f34bcb0454bcf123e77211818431d4aa9f10faf4e1fd63642c1d0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootapparmor-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(s390-64)@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffs390zl36 1696247905  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-s390x-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1bf568339187eb9810c75052c0b21a39c72d775b, stripped  !"#$%&'()*+,-./0123456789:;<=>?@AQRSRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R RRRRRRRR R RR RRRRR#-{ Iwcutf-8ec2027e46d49efc89a40ff804bff8af0f707db2faa96d693be1b2a47f1458d1e? 7zXZ !t/jƶ]"k%) `=l.Xthw' 3i{>@5mMfȷp?uA]QP!9ho5lB>̏줆Xx2c"BKd$.޲RDucVRE\E[Aڄ {ա ,7{?,x搠i;3E1SλrÑƐn/YC1{Qb*u,/8Đp /'}[ D p+PI i0kk'vCgW|&3E}-r)Y ooZ;#%[ҳbMF5 cayZPw0#_6| q%;@ޤ-0!+[qu*4]Y~ڎ&γɛFVag!:C /^p69pjj U!*%ףZ! _}o[VtuQRi KE!e^C>d#;^,s|jKb̗CKLQ#MXfW2hc~T7%X`*O:@FOO"u%WC S LP2p}U9RӞ֩&'SͣI6LwhN35!͹6 UcΏߛƢv$7Rܰ3&,ZBOBkIVZlmh !SxG Z2hBj \-[ wϊGbDS? ᗿ؋?KȄB/"R 8lyci#8ß!x ,Zܲ% h$=3jL h#o& lgɻi0FR|P7ne+TD13%Q&XMC3DDmEWO:9%"7gDs)̖s$ \QEj YWxWcT;' !&Dc.tazG"}ھKk" R3Qٖ` ?B=mkI8+2E/Ui'cq%poQ6>\X뢟}(rZo޸οf eI3<&ΌNWg5Ҥۆ`9 VI vޞׄr w|6wMeC\@O&g?taMK>0iJ`1m#N`t{f*"3SԣZO,;jGuҷ6L[3[HCGR],q/ŮƳ?+o0k9ڦ2̞; h61t]rN,Ae2ʣ;!_Ņfk\ErXȂ& b]vHHK|t.HeYb>~Me?fZOiC|YW ޑ ekj|[B]r_&)9yRdճ)ieшD!l=z3q}R;O1h=fsm>،L}jo&7+ JFAc+1jÊ@"h:1pE F&]!a.333w9z]l}|!8٬  idn`mpFeTBY=Ouƺ-g%ծQ9}N"ƾjLľ59rFwsӦLZQ9G@D94)Mi>lOŸc9.0EﳓJ{ɷ Punw$cLEEXC<7< z,e!vm !Ӹ 0 bNFZD^ G.٬hw!Yy+xƋXyۡ6 Kb?ԂiQyKZc IcKZ4Hn2`NF]tN4HJ&U&>U*1@'ċZm<7U 7I` fTKIz̻Dq_/0D/_פbi,>,y̍cr/^>nlWDÈ8tia¨†lR=PI:j@S3"[YTW9z}eG>/_kz;==X[Ne ߱H3k~B7O{xK1 88A,%nu[v .|TIH3?KIK"O7`b9(}4ϕM*MQ%Ύ:s'w 3ȳ-r/1[I{RDo`e!u9qb%2}*@3ӕI*lBǥIx6uΩȼ4c!Qi9Jj I·g2^ qk!(T0mZNYI/BJFL46|1({ȴ1fBҁJݘK^(z&@-O-,E{5H[,}wRewZ$/]H}`Vo]jvv0~E[ ૢEl%\e4bŵLq] heۓY!ZkQDl"b|t٦Th*Z|}W dR۔Ayx./MV21wfϗ,HcHFd+0U-^v-1'~2n5gm)d 7H9J0<˷r~ruR x@<Փ[Yyc,V<*ƪiݬz/1dBif3]RGO鬱ɸ}*u`lVUSizI!X%J$<=hI\qwЩ_ S7KEXO%rc7+KMȟ*N’]#]WS ZYu`^`(v;9\`ߓ `a$;aǏ'N+. լ sN>:u5N& "838 +P=-9߆~mGs,5g&Ց֩u`;Q> NoFtP aL:,-A7_VNH"^yz3XꞠcX53d(=2!?p_%xOzXayP;lT&n2i`3Iig 07e (ϯ^~M"6fGX WuE ԹZ0 .9:ԋFȰ ̅Ϟi𥪅 3^gT1Ym1Pgdru }840‡Y6'sQ$9[9,6ָ7k`}[g&~:OnU 톷ǜ{G5yN |Ƅ3:k/uUdpXX޼+7Ri(lrZ{<3+΋ b/NP>L)Ia"9*>C4B͹Nػ"[s}:](t/ dyKr`ܾ' K1cFROۤT!cH^sodeh,X@AT ߊ)SA#5N_oDgPl߻6CzUoCam|m85[=?ڸkf՜`Gm-Poyל*b{[%\I/@a{y$Xݽ˗~y&EY +(p :T{C!)'TMNMی^tozq1CHEbS@#dEf F)ZdxjLG![f-l#, Jt'=O pzMH ktp/CiߛF42|99v҅6 x%T_}a'-pA hz9m|0oyxZZ t-%y|B:d)@\IȞC.0Eo}#y̯I& X*ȸ>t1iĢwY\} MTb)h ]s H! =>c/o x8AMKD'Sg;j2,\ t3Lق٧s$pO%f}fDN"FjhYyFH Ty&ʾMCer}GBRjvWFCf-*fdmc/jf,iGZ,R8~Jn8lCud|2'I0gR+vOuw^XkVv>4`X+R:|.EڃċVzN+Ȓju>p-N.9vG؄Q@;C`_Z^T%ܯt`!M2h8ʦǼe"_Цշ}*SW ,r@]iFYnrn>'tggkKNׁU}Gv~cKlރz&"63wd8͌C6b1T16̽|bhB5Rϲ)K>10xhre3fiD 8q;=qbRF qC;q0ͣU[x_ڝV9JJ$ " t-v+m!cX=!7ΝiON!+ۨϻM@E $>QtoW/ I9HdAGAD1џl. c'sMs` ᩿^9vP``w{Wጰ3lv+9fzU 6jeCezິİ5y})=edE=<06mr7ʩm9ґvhb4o8[@d]> 8;}B 8`U7W(.+8lzZ[|'/3W 3K~kCC+j20oՕk9nITO"Wi>+@Uo:FU bb =!y ޓ|'8T䬠Nb>Wcal(|dC`L?)D~>7! P_C{81#`CX$`F^v쒸_JKo(@0UW;Hߗ1׆ Tm1__|;NΝRJ.a{@ #Ҭ0j&7NbuHA@9 0BF R 9uԡnn.i@=ih XjӲ(kqX%Cх1~l\q#v~-d-6A j̘m;ayk&xB'`0Knا٩X.X K&PAu1,[mRdYZ@#Up l}=P^D.={D@dgJjKD7~.yl0b!80 \LkT{"@vRJM*(\!Ϩ4I{NB0+ <=c%Dd @1(9,H! =*;kK)J+A#ǠqG_GRE8nr-*@2s":tK  -;/3!+G z!U=zъU XsӔ6tg%6Ȝl;qO7[l;> nV?/D"ףRL5ؓ75~?/bzPNVob;G%l~>ͷNTҟ3# 4RX76EFitP0T2$&IFǘpK?i 36ʳY7oAR_-i͚d߃0wm-nm0q\1+\^^C5~/FsfЬ5}sJx V~M?l>[d1նwv/Y#}}yX?q%hO9/L4"!\α ~%C7yƩ05Hn ٺ͌dզԂ%[ [QLb&PP׏e ̺#J\bG_9#TK^Cv>\DM$6m+wF{+/GBoeB^ QVg׈:zU2{H=PmZܾj_5**b>!@2t[/(8_dzm2fsbr*ycsN8gsl4ƶd~ע4>+({ !؋IZXn O_V~["Q (KLv1uxgT ^.Dpv<| J + Pqf ZkN1Y7v_V%v誔}ESql 4jP y]&2CUh4CxC>vH2E bo>SH\$ncsڛ8L瘾̙4J!4+6𭻓{ШbP! Yw[qz;|D6@𛶬;U٨^I kJXpKw@?V0ʹNǵ 8{qn.^rv13hAe:n/FpScA 3:҉x,&塞D<S9Gi.^FWEu|Ȯ.S``9ۯ½y(.O"DJ4Zu{3N[^IwF׏X˞?Vhk-~ߚނ"&B0'کgQi/uLg"2zzYtf υcꆣ'ܓk0hBj*z,Cz&%$0RbVQUWmxδ]Dp >KN hl뎎%¬ܘԷ &%X܀Y1+\%7a] >v<ϧx ?!2^Jm ՋgeC\|@Ԋ>!1>7za]y^CK"-^<5yaٻӲܧ7g[!2'KjtNڱ}6!ƷE0AEk#}gfW% r[12([ǒ a_僣oe̳0y;W}t]i9$㹄igT*h6LW5d"ŐFU/W̩O,5iv'A k"zEޕ;wavWl sJ\/sW "qΤ/{}QϓTDjPR K.)_f`FtZ27C#⸉.nn^z椠`,*cn0`P @}dz5|cΌO3[I2%dj=\,@knKXUQKM=9S"D(ď@挓X/|b|>rFh z{? J%غ_7)ϜoӭyP tjYd!gYX2ZT ]ݱ xW=8-L$xW##z7!Rm ,;=x8%6y曥V8|g^P_aCz{d *=B8]Yw (–'~LY-LtQȎR56^c/u9!Niٜ4Fa4-@0.DRL$$5"նI%F~KuSl ną|/+198ݖC%q36nZ̸/)2jE2KKv\fPMۊ[esd>6ݿ8S8"^AAvRN$ޅ8ʉ NwN$Rưk^Y(/t ~!rdn.P@42@>x$wlRWZ0ި1[go,hSr.HQݣyFhy!Vfs@84늫0c0ROߧm/ lӁLtCst0_RHϘqcu%ʱBϽxa[M\_ 1 ৑d`V 73}e 6q>)[ub v'`QXCb||_?އyyy9űp&>F\ vPih'NEc* NU]y9뫃/nMقSj |*rU5[c-~Le!]μ) _v!dS-tK;BH_;TKT+įۋ J?>m.e|g}oY)#Vo3+v^~ouH7fLˆON j)kwchcNd]'M JleRN>]x,=- b* 3u9~`aoH-zb(',w,_f6\'4?UZ]F{[>CǖmU`mj_ ʱ7~zddu9j^F_FXýf<󮞘G 牉c$(uHL4vY2fyEPL35@pGr#-w:(-f3۔yC(?`~N⺧]b=kuk9 *0+(>XݫVe6#!',ۨpk?T(+2J%a9V4+w eSƜv7o^ z <#'{@]{/4GݳN,8X𨧵sM*q^?#Z3rlgrTOGlI64_ MITۖ<Md-h9Eq0w/ K#H[xWq0n'6clUFKd(AgZ{{~x:Ǔ-ǚބh-a+, aR9yaID"6LH+3/DTw=E[ei^ZTMK`5 F=Ϗcp~ (y׌von]%P`h;2WjKNzb*+0uGkc$|v?Y 1U}>6D3^8V=;[H`Y;QqV`N{Q##t˹O$uߐ7G `Hޮߋ0>y#X:Ss4a f^~d}p{$ss+!ΐ2n\.C/b$zO/HpqaT|6W! %5QXc-5 8iT f%# n)+𠼆HV]LQB3,:=,`\C)z)JT(wOi81Sݡ?o,ƅ5HALpʑK59$ ??,`|guHo)#z'KlǓѨq טRx1:]C)[BNnw8n>OQ֮WIc*9Zm|O{,21f@g(Ԛ褁?-FM]Ց:4oGwM 8?[ *P3MN)s(vi 5.Jlރ? ZREI&8?YZPlm+wy>hфCUM@u`.Fvz"bđX64XĂ๧XΫ߃ leDșG>N7enY5IZT\ ?0zvE%S?t"?.p*t޳ .EN[Ƒ 4)xE"6s`'T:2(? Nb+d@]v`KԤRZ̯,Yn0<pb Bm%l#(^.5A v ړ&GɩV1pdxٟ#zoC5 SP*-Z?@͌3p(zlh#6Y:'_jPK~Ra\-*${ALc;jys6I$0Pa+DK뙳>_4 U]~;ZvIrEU+vG9w_#ۺ&v M=B7dt2 qFٰ[n&Ptc(+mWi G\vR}zh"\wa㯐 : !gz i`CAz  (ښ Ԅ(f2B`dEI,4Xoe\0Ϭ!I{^oj.\כZi V#jԙ?o`{ GjJ4gCG8X.~u)*m)>͏Wˡ(7cjHbmQ)ؠwsF=WLx?NI"a|Zu[%o&lyA$C+H\inʶ,kK}wNm`h姪 tga\ЙG3g|U! e:deOn3&BJY؏h%Olu,OYEȇ|>.~;Ap60XHr=֒,qG]y0>ݱT U.\O$TT/y.;8Cq!W|yP^,hE$ˉqoGqxp0HZcVdG}5^ڄ9)*և[h|g}F/rɢ8$pV[s]G-jޟ&a^p6I0i6`lCH\y/2*n2kkɞ3m`4'Bx9]L-؊>'_,``)Vj̃AXVvp Ҵ~-;2ix9m o_PO /*ǔ0,#k=E;r!GY (M<`eO鯦sF_ιD#2蘒:=I,\:K@iy B3j^`y\0!Q nw'kt)!FXn^?[/dYZyh#cF8"db_,.%+Em7cfHpup]hbbBel(MA[8Fz1=]UUF?wj%Y iA  Oo| 9j qSMxQ?+& $;EY(chՠ=ɵo)RS̖j|h1CB7* 47k,Rdi- +_F̑6,ȿ]Xp2)~+(-+P^ KL3#C2ufhA- { >x )'ĀX' a;Ɵ K՗2o,4+1tRY-mi`K[,ѶCbݺ m!eHHyoۛ' {*rjj,NpOcSZaGlz4{[CEXpA}})4+us*]hJ*1~ES٠4b TPf%G#)\wn-:֓pm#V`%0bY6қ+awǰ!xv8۽[/Da҉?~.R/Si26r\OXAq h9] DGqrCHĨ?߯"jr?܄8ho 0w䆅($X_Ӌܖq"tLijV?Q;}~G$=UUzsאx,Tp=n&[~IluT|벁ko&S{o\n-$wLnfbO 2F'o5 ZaSﰁ&mc0k#lSl e+bfW}|b* ɉjcFs1[mon^߻窱 js҆w"QW"l(q?rگs!i-"*F>MJ ?^o5E%9&Xc\b] gZPXDŽհ1a-ÁyM*0̎5IԎ'Somo5`s^ K?<>T`: wv6Y?':0@n}qiDpu )Vv@\[{E&\& xk?/IBsZV3,I5jVIWA]*ʟa7ѽZ)v)jդr`TJl{ӗH*N=g8P$ϾƆq, +RBn6)Vuc.Ȉ"eU'u2sFDx;xP~&pZ!_qP({KgMFuVVNt(+rs61K,+ &XMRޅ3}{=N,Hk?na9=ju utY`؍mjn2m&wJRZrMc_%NʭX  D~LX_MA(,T?gNI-6JE7bUꮉCň47o'tIȬz M:J'm)LSDgNN`Mgmq ?`V]B4.,kbpZuC ~+VllIbL2-v'?4 9ᵏr42H7sH8%/!z59,sF]k3g "\E",T]eS GvB%-_ggM][MoeXz 2:N5 a3dr_qW7Cuyìj;2`XqNҏiP)LRӜ1O~*uX?y.;Y|O̔e ]wjY(~ЮqnpY3D g.͔aom+}!zuhDQNٓx4S4ꔺ[ڕUY2RLh><rqogz(!xa'[` 7k:kddBY^+CMNLg<^O'c a2tKQDFG 4_zu;1ң'QKGbPJmsB0ǿ|mSoAʏRj0,jM2ch'.ZYB8r KxxسSL\-E*"qm -(Q$k*ZZ_b㺾a տbAq!@6d0'qGgc9 -ֵ" ďۯMa_=k1 R utJ" A7]_@1|MJ@}5N>.  -Q`p D`D@ T.G[Ea q/͖iVIX6L_]G _Wj׫ %"g)}/\o"VBW0bp={Ϧq'z1>Tj WcOW܎f{ ,Z)Jo/[63 f9Fv2@75z\El6*<kW!- <kK"Vvs~)yN-ZY"; b9چٴ!}6du__Ք Ȉ0 fAJJl0a|"fkʶ-ٟǃ;fD DX-}{V[B.^ ;.QÐN,^FdCqo-(wB#l tf A#FMD#|U<^nI (^ڳrA"$U씖mވWhm@n0F[y[@Ig#]-[-9pPlk >[ |~1!f1U P >5r }nfr~mQט$+ZtN=^ml虇3#|׸ejfpTg,;fKcn." K6$8Q= \1?A_x?ʬc''RF*,O<_l 6VPL8t2 oMDe)E fRC- fc!#WqG(:Ihɡ7S0G}MkFlex9PF-c BNCSӞlF$N5Ғ1hLvu/`g>a*INF~~(b=p(Hgn':yt0s&3g:3AxS{!zLN[rAVGK\yp=]<,Z-Z&Jl_FO UˏL$|*BZB݈^ .Wߪ(ZyBʁmN4k3akzt-ZQlD:G<,HByqVv牏_K[TA1fMɉ'vߘ/mOsg]mQ4/{e>݃iښs{,w'X>R~l^ԷȺ)52^M z7d3y9_FMoq]KSD?}kf1kk96=b8R3N ݲmz^.kNEjydžLS=UrR:3Bj%s~sV ǀh[#d BwcɏDʹHRRSۂvjŜOibL2/96wC1̾. 6!IW=43:%XXCH`,Pװ֪UYI3/MqiV) /=56&Ci-IYx[&D0^N`P+mHit>H\ 5J K҄z=Jy)D4P>n/EvqI=Y3e@&4BңEYpSƎZD_f0)K@ͦ0u|Ohӷ"/~BKN œ=q47RQkNwglœ[k(6a5՟Վ^Bo{to@7D@6wcrD7hk섩yHG IBj=HY<(ZKbQT^q~Pb}I%10Q]  '7g/a|D? BiOWǎΞo'I@G`4nU(̍C;0|lS4zYP?eBh #<)Ɖ_o*QnՅoW d$e1 ꃵhb?/DD"m bW#X]~gaEDsE?gïV<{b|!cB7슽F/a }PNw-UNHsj١V@f PJ M*אGi /Jo@dʖj{¿T O]XCO2ܝn-bEۋu k??FDUeBo{.0KdMB ?7{,X2'-c⍕B&?R.QW*pIl?-G \8M(FTM^D=WQLډ2R*RZk ZqWF$`C]#E 77l;(RS)QZV7o<#E85p;lw4.UJH!~TEY|$|;MUWk}wj 7x}S':iARq/֔SIƹ&<:q zW5 30jcpaթ&؍6muIW}cCߨW|IPOPy}}x9d4zkƉ!J+UN= Uy lɬɞ6 (6[6kL;H!Rjˍ֧ ր Sڹ94};bO(&5313yfKVͶ9t +,)GF4Fb6,݉@qbQ+ES%r 9 ~pd.:! j_CtkR=]p\ j=ŃKʰ4SF~Iw )}7x"e .h&sP9QPA(^5J~[&F(oЎZrǬ)fw3/8gfJ?m}c=nG2ƖR?5/zϳT]w|bcGglV 0pE@r;" P&'F*/%}ٗ;hT??2|%(np? B^^T;Ǵ cdw1UeuKt$JX1b+-n}a3oD@x.Ó6Z|nζcz'E&?=3vN-+-Sf=hR 'US]JC7D(η!IX3-ry u}9`w/]o4e{I(x)N^ym8\?l1ldDJa QcbAiɻkXZ ֖{{Tx-Btln[k>%TZTDi[1RDGov&7[I}N zKuɶٸp&L< BzJ#99~6Kb[texQ- a?Y&ϞY,yp0tX4E_Տ +>`V-?[h[iJN+1vF/iX;q7ERl!G&s(X0JX8#>jIY7l!?i54SݶVZ/

H#gu.c+ygwҍ'橻-BL cЎ0b[asAչjd S(Γ͘B%]D"޷kXa{}v&jvJ/A:H| FEv9;`Dzb{8ãj?7ˬ̃0)5oXRjiJ˹W$1&EJ&s;41WF?w/r2㥵F$<|]mC|-26nǃO@9=۳K4wIksH+~ /z+1{^;qzlK34lOyE,WPH`KdkڱޞU:I]8hԪUӏ@h!˂cnϕ'/kzM)(cqҢO,pL羂ԧM_ 32\6߰ P?vj_!3VN >sfDבѣطֹFT/F+Q $;mJ44gm: f- 1!뗠<7a NaYtV11zq2a>mvosz -Xi|0HX J](t"cwź'ȳn '>؝8>%p[E&!%9=ʸpO.gY g˽}ɑR߾x)fv-W hۏxZGV/𗮕 ȵLxxi~{؋Wa{0ڄЈ"Y 7w1m9&3<- C#2?C${j`h\FasfIkJ h}XԳ7v#v$ ^{n6^-jB9 /ބ˾QnY5d8G4:aď/|:n:mXd(p?(17ɯq^4SSU/"͛.XQǛ9LZAһ \:|z)f'=|ԙ'O_WcV7Ug:nouKe8 ^$TT}`W*-fpC@Yҁ꠼7sOa6SJ`=B2P#BY$աX ,@W%Pݶf[xcDb.ь3yC;H:KH̎9/fhJ>,ͳ31"#/bZΐg/Ģ[q/Z}Q:w]xV'OIBAa7wGfggojJ林fZ-O᰻0 d!KO5ۥxD{r}&dw QYY5:[N/E8 . _[1Zͬe{c}6 g*>rHdJ |5La2VPA@@v.9!DB[ M l<>#CX:7 8"ߩoAM#G7)AwOF2.Wh0.0eYfU~Q'1^i ze2GHx7 , 3$y ܐBy)KMf X,"tPd>Mm<)1$Ly3]( K2r&%3kq¼:hW-|3l#*$%2u"+{w@T^dSU].(QtWߥ5H(6QA#VU)qpHr< j.5Rfz~e (yzX6QRO4RI($ ><< @JD,~41 Uc՝2r&wf*Z3B:>jb iyCҥfI8cqAYJJ^Gq| 7_8 prR&K7QF eBCӾ? ^V 2L[/;᱁Ѵũ4"U-$y.y!cSn8y'.ֶRXXD\a肙: 'aJiVAߔtcʕJ|WD\NJ4cWv]€u 鏬lS~(B:͌n[cr)eN)FSA/; du?No)sb^yI Q/*b[pն;\!Zrgi}HϗUhzOCTaGsdT,kG[J=M5F> { m;ʿ'/i lXEˉ>:",a!\YVϤ[l} Zwސ;UGHe㩬'],߃FG~BDKL&G|l̀zVۊT\gRpl2*LDlHxN1w`Wv((l *RTtiP #`0 }X[5Yі[n#i]i^lT #m; 䋵:哎c@: XɎ6Ch7P0=`KDmxrCW- _5/z۰@n 4dҊ$5Ik0YB#UPo_ddeVlvqޑz^)8Ql{| =/.ooƨ8qk*Ƚ`VO pq9< u楬4`&EGWhʝ؛U> G䕳[saBtf ވ.xr8 NX[.ySud+t4$ۧdџ\RNVJ(\K'# T1gDza|= $<(eRg` ũn_!gqGGyk2ui4š}$ {7 UAxoHd3֍tYq`ԇw&%$\32 F')t¥c"P$w2.KQ̂  )J_FGeFeɝm]Ye:滃Y|/ÓȰP˖|z 7،[g iMx4/;w:vS?+w [2]^ &rةd |$H _.E9_ Zb^3i mܧ6xoYbxp`m2w0GX%…<;G@."N MXi<>fu?W2>yjk?s+ /q}4"e:)pC"WÁ%"`|a]G$ >v}Q1:L\x?Qcbp×`oŇO1 = "%wkℯ(Gy#xpؚ[sc̑Hˠ&bᘚQxOvDN4z0BME!2g %k|G\t"Mpdq4(?> oL%Q{<#PCb`柌R14}:'Z {=4fO‘߾e؇:ҊJТꪲ4 BFPi,"B̆+^q\:7b˚V$[YB*4MIrP0@ʹYP|,󣉹saT45U&lUaOV) U}F,.Ĉre %YK%1~Tf%2e2QׂK@ab\PyK$ɋ #\.@εnig y_}ڛo>|j^Ҩ{UwcՊ'T1V4wCMxC24ziMC 3?P:^?hޤ PN-1%#kYsSɣ5ޤR Lz1M Y";qMx]xhIbi~7G2uMNkU'Zpx~ &ag遨ZWdL]L;2]&alGR%#E=L%U܁ӈ [hVF8z\-'%(8*Y0 m ?XyD%B ?HhZՐώ>9C7.dsejHşTan3`ly/tǃ &=[''n(=+ZAD]2H5YN C(24 %gKM2l d'AF"(Ul$Prg^ 0=s/=0M)Kpk'N6jI?Dgiʟ.%shEcC @ 3FS&@cK̶cf qIpӐa_:`sZH]:+ߨGZUUVκovr/'# Iޕ̾>d.NuS4cJ)iDJtT.Gb"@$#VaSI,I}OaXf{yz0qDzQ1bCJLc_\!A7|̻Zp"HGmJHCqB[]z/dߛ-m(`\[)-%/lK@wCb ȟ OUW9ݾQ H.s%jz'<J-_>vwÞu@@u3m6a1<P :!$d7m/ssX,ŎtFm T?tOE=Mk^ -`<)*ʆȁT~5?!)#3:"O4wGh$y0)qVr *T##5_lAĂ4fBU8.Cc`_{2~Z}Ҳט33M>@ʭIy(I 8 woTSف'?uȽ2u.2HWG%[g.Ƈi0J"n,*iFQ=4~c7No gmaܵiD@Huɱ*Rצ,VR<~ @K% LjF 7p'=O l#(y%jbDU%8tS D 4"BA"lnA,-\V[ddRf c|4Vf;`^4J2X>u_'X&0)yt=0FA5oKZ_ #F,*KD-x_./"%) 5~dm ͼ3AdI[Bu,1y3?& -Ysק='pwc.q/.0MJV`S{60մqs1Ak)XS~蛓(b k#t 3!^ |Qz$8 tu\M2 micϝYkG#ȼ -L0IݙnkθZnbɞ? =ܪQl-_^a~WOY_tX  bAXf8${TkOrQ%n z%F"V6O̟뚐'*ZA}8^ۥmǭiUYeuZư#kBYgIID9ЄԬ"<1=x"Gys4pf8JX-4!{>cMzud[$|xX ͼ*=hܼ% >3%θPXhzɅN<;OʱT>|w;8!gs ͕C``le K?  RL>09xY}JR͖Ea7@O,sD҈h5lc$ nK.HXN` Mӳ>tH s +G#|Pϧ?IP=:{D%j3a7?jC!mc vؚϋ0P:#<0/`hx J ir' qzq_/遒0k9nU(Y?$R(\$K+9-%ka,10fAFA-1Qq?qwA͕ۖ?W %㼨بQV_TfVX;Z`7!'o6FhߨZ3coF"ZU`hbD"on-X`Qb60*`:[z qbJ '>_쇄'9nԎ)prƇnJ<4NaA4Ο!)H¼)"dT;GVqEMKCx3 ΘzK(>2oSG= YS֗{[^r xP`OxhyMxh{{懪=~Fmը`@'a/oֶ?7">A _~됞JtBYa=ee#XI&L˓ +<nw,j{L{.&_گ άK.9#ڽT;.<&PY}Yׁojx^.ġVs;ze. H3m)켡%=whotsrIz{h诚RT8(HIŸXRjݩ\&S>"(,^CA9W}mCS||O7{.ǜMG>v&i|HXx:UD0~i:>!1[\\F]XNߍ:Taݘ:DURVeaVw6l孻_Uj ҋ`^$NʐWiq`h0Cwi Q}-B"!C2An%wT,ԯ֡4xj=ƽa."57, Q˖|w?{L3;ݑtavłYOM6*lov *ee~vk S胯/']d*M$f0G{O\f&7 -=K1[Vrm-֝h&wί,PjZ?Ҝ3wvڄtw!R'Ss$ kmkJdukJHO^}? c{$bSAŏ]+99[#r/~1ޱR[V ǷHH }aɡ&G|<^.m@ v m'8QˇE⼔WqpE#_"9 27IguZ7L/Owjx04&ig= |ÁMOz7@B\NsfHܻŭ4)W -1̓WϵCq>W=N %M0E*Bu9yT/T8C!b| b pE(":C.7cG|B$ǮץM5^QeMZZ jgzw!vEcja~& mSAT z!߿tAW[3 x>yy#KĀG+j1_a+wmWOqh8ky?rd"~Wf#"Zǭ偪%o`$sxs7jXPW:5g-Cj0&- }I)tqUԋ.Q*(ZW,Td,iqpJO@cE##dxC2vG8$ ("{ ۑY>Ql?zYOH}0f|s ef#K /~ΞwD|2yhFcVZ'_;(ܼ1y+[`ua@YB!n#6o ֳ:&'Cْ#PRc1'#MiuT0b!}Y{E[`?;E$18:]khg;g~U쏠9%XZ0Im<_bOH7;PvNG8$ @C8 *ARK|ZAMg17 oԇKdwv?/ZDJF 9UL rP,31Br.@G'*3`*lzE:[oo$)CȄ(ZŅ4Ґ[G$w#YV3UUIyȪt]*3 L 4N 3\i 0t"l^0)L;m {U=Z^?@gAW0~phgٴۮ@Ql"=4c/ayC+e>kU "%D!-<~`TbR\믿A][ݫ}:k-@/ S Iww"gE˖szܘS+Ơ$H~=bdfEc ɐHAwHSQ#Ĥ,?>fm2G(o<VNt:-ANBPOyn 1Q:`1 ?:!;„|[Rv|їP~ͷ̃IWrKRK[_26K#%4lg]8V:v$aqA HZVMScAm= ˝ݫ:d݁˴xOP^ 4e')\"Ř oF`FKaWKa/3jgcbQq\?lCI_@ F@mzi#UEte0ݒg:Z%g؊\M_6[7-( ܞDkҁW4SmSFf#Ƌ(xbNNDeQvyur؛*2q9Q؀퓹?epΒ92|-B]z<tآH(`VI"}uz~o#'tz) [;yAWհ88(U 97 K # 91mdiU5 ' (=;/kG%ŧ 5$?hb*8~ȼLaI\%İe[qL\u!=z 8iA l`SҮBI`X-*g.V/}_%"c)i~RJ?EBUQuؗy&B 6&=7M6y^׭IBFӵ"'x@BN\HEBomJ3_)-0F2j_hDr#m! \,V8ol>>Xev-Kh5$t;׾|p0՝)ۡjnsHeX3>Yb\XV-_-zf3[ivFpM,(ְ̉7A:‚5N{m4ߕYB{8@2\} kHIn&#`5a}dLi40U0,at e {QlxzFيH >:)l[y!v^g%BWmtC_|@l9;qi89Q저uF);s$;X-I6])Q 0ڻIY:lF{q\amK'׺H2? `6wmKeR]߉K+.,#,7H'KǗ{M1]B2 H?ָA邶tހ$ 0[MCԃ.E$ Tޣ)F^߬08PoJc44'h/Fv{kdAOb Q-B5j6gZ.Xǔ3Vw՝wO) O+i)KA\4HSge=27<%$ B#,R;$`L7HAEѱm{\P_)`[9(QZTJٿf]&0eˉI #gD\SqDc2},ᴜ e:iІpEفB9I.[);WT2ЏiX~ B~29[硹t bY%_! 0D xT压d*$LGqV"=ꫝY?Pk(Ei;b* )y޻a^0n =sbɑetvY?3Ƀ5HLLY!l|tiDWF<(pRmȳyDtNB3zjR"%iEǔXL ͽӗ7qӏ0!W52]NDx4iF~ԅFm2S,eBzLi0`͸㭁c FBuy7IXϥJ4A Y"HWyҕz!O8!F^m /c/]LUqd|pǘe]01Hdt[n9fܫJӟ s#@(>7RWAkþeBNid{xUɋ}۽%~FU`䑗 Q`Dkd(Է707:JR]Eă mvk;#2,^pR\pF< 9rm:3{6W^+lbbb'Brs~|E93ͷzw".W/dܜJQ3FoH*$v}f$özHnd:v N̤ u*z$(`'uU 6΋h$+3. n`'dꃰlF%Nhݷaq+rˍ*+gWo򤎟.sScCAgBވGg^}m7A`މ]R'qb 3UHwe?ӳDa v'ǼJivJJ*mp;u}3<u!GDLM؜j%VNU $nZ)kpVBc%szS*Ƹ{Yh}9S5:_>}EŽ<9>WS_%ʗ '<)[kxTʠZ[{ᦒ* Z~m0AzFy'U*\ꇽZ܍d⢺ fF##,eEG2y۳84\g+J0{~kvV~*؏4Ss$dV;TmFζӎ灟Kkم@}P>gD%JuMr@`E"2y.,~O&뒊{zksu <H"[E) =sNy<;[ VR^3;6̻>yv kD@;Σ5qG:fٍU!W^>3l(iteF'%j}=o/i=?kŦCi0|C :0 G3P[M[ϵcbY,č"'#[4w/sCٿw {k OD~ &J=BQ#TUPъӿx>4`vEֱsjyz4Hpa(-CfB]HBm|#yV%T{'ҿUr?9vHPPDLa(&Ti9 #8;jWʞo*ưt6_u9ur5'3@Os7Ა+. h&5wW3gGx*Fq[=xʠf+ʮaҨ/V_h~v5Ŵ-$>r]I0u' K?Q2'@(Vbx2x Ґ=ݗRYF¨]hҨDKQ[*?ؼdd)6O&"uƥ`j@ѣAWVhE Wa$.xn.úZn҇T e?3[L%ZSڄV*7PJ,XaDh2̭bJj/Wpް ;v{+v&i{m3WOӼ^($ftHiċU8q:N/~`Z%uΌfkHhd1`l( +>dF]=^m#}W;xswBQc̈́`9 KS!- X^H)6#a4'OF:OmU?1&_)_kJ&ӀJľaJQgiC.)Ɣз n KJ ̱ۖMFm+t~H^Z xD& xZC^L.P$jj,h/&O) NYa<#HD6j.@ſ`;ӤwMF2YsvxbG$_0Sd./@3uň8{,p".T^h:>̯GMJ읜9|C R:OԀ+0C ur<'EC':v/TΆPg%?caj*zT9o'fYu'Iv4yBǒ&-wv{Z͉CMΎ4&).UBYgcoƟCNZcGvREGTA[!U2Z Bv'O6!<]Өyj>CV$QVQKDY}ܵ6޼X_SMHӈslmLhyP>^>}G® RXLAV[vPxQ[६jo ͆9PzQ&QcnecˈX(D˔PDĒ15EOZ;XIM5HOެ˭/>/V-1 hƋ8E\br1=#XY G@sjj/O|7Wvg'v`h2V."Ajsi`,FIr_CIq}9HsxR}۱>9u.(ыɰoKƂދ/hoSpBm!]HZ:zCH^:0& |*\3'VvU_$%\dR+Dm:ls ˍ48'Km( d/[-5E,E ڗ0iBde[fK(];39>)X36+;5E5? i%逅i^0,7X(epUGՋ& _i fck{OE%J໦j.Pr%ū'Lz*K"ڪ{^A\m1RAL5NHIy;;lȺu [p*@J.^,Y~ NSS'ŀҝ9Qا6Ap3̇&7Cn TP\4~pHӷ®+A'3jw7C':/  |ثtF8רV,^ 1r6@:LA|}I`2hnl^m h/:(~+Ē+GmcҔԶw) ع* . *Z8t!yT]$j"r]NXhzFCU#ƾW7Q &j Rf,Ud .ɢr]5B9x\OPp> 9'X}t !OR&HGt3Cg ҆YT c =F[Gs9T-s`!@²II~ v"sWTtu˱ X,%Ja%?b/'ҐJ M4z/HՐoBr.vYKToz$7UkȨ8s=F"0 8Ta{WI{ivK=:D$LH_ 2 \y}:wr kJ}gC  =` (;lU CPym10Y\sM3Tfܨ?g >wEQ+ꞡtn;ef%d5N? [Uєnk =ȣFѰA#II#)Rzf_ ]pEhny˓ w"oh߄vg{siZV!{ǐU1ʸo<%|:s|.`%qxA"cOf>Gu@MI'j@wMj88w\|TQYL .-MVoVk"xI#/uO*-S!2q Cz7uit$l 7qhr˷94,Y핪6Wg BgAM"|Y}QnFFXI|X#eRco@kk.MK9W6نL:?sAgR(U("\#J(39T2V?}bW&}eD[p&-{q!vlY[-~{$t/ח|fg:.ز5 Ҥ3N]+܉5836\e`[) 2{QNN6{h`'}g^.6gI+.M23ePWɬ]%ZiT }$pn|xb0=NTahX<6D|"FT{A=1], |#|tQ 3,C3[o̺Uh 2 a%%N)ZosFjTхn˷H hړ)ʙˣEWknN'MR`ߦ7:Nr$UQx ~(_p-4L䩶"9Pk$ATK( =o--$8 A'yꢒ\:¼{C&汮3턊zgO*jr@BS`;0 Eigmnfb UI}R_߳x@Tz(-[446g/nB&Vv(@l0Gr/{؞I\aυ;7I3D^_ hq8r.\6j9vSOql!\_ySHMZM ƃF"R.O^Ď|d.x{ ."  X1q)p JX7ݎS0B'5dꂙ!Ǵ/ƿAg ]xxJK/X^4W !iդY ?Zm?t P:BvMB(U, zBDp"0/+ʮdT wM]xkCZhx ,~,6[Ę,t>+:4A9:W{ʗKCѬ\S!`j]f3d˦J:n:g=2Y̲`Upc~tIAXq<`Ibn5]VSNȭSr:vqac«n uXK(F-L\G%(ؕE3ήVWg]?V xRf4FQ=7zБ ª׈9ݶ +.,>)JoU.B~p-:"{9jϚ7{ԅy%爵 d3 r`:]Y׋t&X`g,SBMgE:C#ZׅDNcX=-vnZO+ x^LJ2kӲ+<]oBI kR-KTӡ Jyg}QȎ P&ޱoaHד8?40]?ΐsx G}8B{E:2tبt^t2М%Xһ5Ѿ~E$I,?Eɣ,+$:cxTVěemN2~G 7h^(%  d_REe!p!R8wRԎ%=b^TX]Aї7CSyZnjqdGH2p<Dt'gB|@GETbӝezlZCrJ̵/n%-')dҦ: `!= ˼&_ f#/\D %_d}aJ` SiM|)9㞪8${hz81A2ղ&ʼn eSWa7f#s?_5|c#&o {@8/Gêu3R%L4̲$s1 dMu-#$ľBZδ采e9m-^EDR6G(FNsܗܷ]TVŬ e-ssE15:nXn؊8E+I7AP$Ǧf8]hı!铑`]|ϑ 3 L.5\lD"h(8u=tٸGg,ٿ=y\4;oBLQ!R#Q g%_y#)G! m<׭sBIi_t##1OY .>KRŋW wT}c,(mo(z!NfhUxrcwU NRqjKOBݺ?kN^L^VVox0̳&u=KQJc5'W9-;*%