python3-apparmor-3.0.4-150500.11.9.1<>,|e%p9|)l\4EA@ʾ&/٣BLn@ͺUH`  I+5 ON8FZ¯1q\.7-&4|Pݔ{;):c1٦{r.|[v\˰u?UQV~^uZwtg9*_}^cD^Av}>!a,S d(k,͛2q_v5>40ў!֛wxU˨Q+1uc,l*>>t?dd ' T= SpUU U DU U -U UUU*PU 4"("8#9%:.xFGUHUIXUXY\U]4U^ bcÊd eflu,Uvŀ wUxXUyɬVz`Cpython3-apparmor3.0.4150500.11.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.e%h03-ch2c SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxx86_64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤eeeeeeb`%eeeeeeeeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eb`%eeeeeeeeeeeeeeb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%eeeeeeev@eb`%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-3.0.4-150500.11.9.1.src.rpmpython3-apparmorpython3-apparmor(x86-64)@@@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3ev@d@d@c@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh03-ch2c 1696247589  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150500.11.9.13.0.4-150500.11.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-x86_64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30900/SUSE_SLE-15-SP5_Update/bf7fc34cc3d034d75e6790157f5ae668-apparmor.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4acfa4e449ac6720014bec7850e8f0e0406857e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ASTURRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R R RRRRRRRRR RRRRRRR!TN^CLA;utf-8f706ac215f7e64bcaeec79c1a3d43ebc8af0c8ae0286b75e641797760cf9a566? 7zXZ !t/#˾]"k%%) `=l.Xv;2v4V8ݜ<_S1YylW ]Zo^iĺ~aO֍g>yNq 6~Jr^(iy "ӴU(v^1k~rhk^~18f| CK&v%w}(᭷FhRtH؁v_ǻX)pwA< jjo%S:gbҗ!Rs¸[c+ %L|bGJ3ĨO@_Eٳ+ b`C:nu53R$DGDP-y/lWSO) ՟J7GR;l±5cCDCƼMow'r~DB4{B3ʋģ^ .C;8u=8 Veyb0u[W5F”n`3c O=`Ǥʥͬ+D\m4RѶ sՍJe1v|;PPo(Q*}4e"ᚐgl7;" ,p>:##!\<;lT[ x;T)}X6۴HV -YEbB\_hKLݥǕ兴d(7}ʃ-+4܈FN88ŎPl64[>'ϩs:|ݽ!SFn!qƂ.>~xTB= 8('E3dm]p."ef=6W? ;&L&_ư -| $u_CچbuC##BaԆB$qD|z6f"3ʂ i#7\4A{ zZXrآbʜhv>~!|VP@³CU "g(h}B@0da0sn@s=cA40u"MXe;D&oэ<]. k3/qe.v,:.ߪP^|ΣmF[ZLo G+߈s˅p/a~KFx =#bf_zB3i'[h{RxEs'۝{o^Y'u6reU2x+SB6S2T {^!-=Z3W}:g 00 ͬ&uC/bW&: Оh/-k 9>tHBeٟ D_? M "3| !aVŖG^ej`=t% f4ih,$!b(}-%a\jvri2. xMJa v_۞C.Oi+s^b g0_ 9Y "u7?*w0, rPCR/Uq`kP B\g@6?kOkؒt˶K,MfH‡?;0sOwx>tu^kScb,kM}wkj?W]HNN ВsfRl2z; ~DE5YzS^W g gg}"9Z }_CQCjmdb>]tSڎoYiV]ڐchǴa)jd4uŋ Ƭ0 B2KNxؽ-D zh/-~Po>cڵ󈾜ɷ'tSl s2"m}\ޠƪFkcA B#xo$ФfsƵ&*03CYv[jX"{t7Tq'dEP>;r/VqR="Sy(rrK%s< ƕg*1@8C2Pfwx{yi,5V8E VhQw tP^ho=l=ծ|&?;6[\Yx{-8)5N=m^ͫ_J[!3N4d;TӔKy#s>N\SjVxmtݹ_h(>ěAhX\_ӻOKj>})QuU\oUmqTM-VŧIrP(f7 `6.Sqz'? Z5KX@Ht+q7gi]2^遪0$@ xL]\<W~D i1A8*~0XWKpeso<~& u`b I0xQA zH1OΦ&z'RzFie_ؽ_ ]^:LoI'U P 5蜨qD_g﴿P #0f;tP] ~aADJ{85%6k%GKDtX =-@UStJVVdT/y]R @FNbs`J}ۤ*`[f2pk^>6$<>]Xye?^r+>3DW3 10lZG_ז,]ާGU0~!y(crMk&ͽF\S\?J~,JtdS^:{[X"ğ#v2à E\k=_sq*[r؇uyQ;2οpFW-f?݈+^:B4# IHW.IsխNq3%PuBiZ]{)lk0: Sč!/;@^몿;v|}5KhSX|T`+hZ0 QGiCDq)~{}Ǽ9 y/фs8 Yj,TZX2euN}zH+h6|W}dfFL-%(Mch@1GY%Gc?Xq̂=S C(u|nanyAsa @\x=ցF:&S,ʜR\e_Z=`qœJ魼}=ZRPCr![ƻw4H隦[}wUgv~GF|ݤoPZt 9'Bɿ'0C,/W2] Dߢa#UG+\'.K@&kt^X5sۧܳIvrQ4oN*;V<_ /x4)VQgD psȏ7@{GӮޭl>q֘(Q>s0*{͋]!?$mTf׿sA()5R#Xy$Lt2nn#(&K(" <Fh^L E:T*H, 8dzC'u1 ]mM W!V]0!Õ+B_AjsxGPfQ7E_XXb yE ֪VF~fiF}gy{^\ PcS/Qcp!~2C52xGS5hY]PZ(5 aٷ9 Ak8n胼ЎE/VgdDX=?릉,qȱ|3Wps 2{7C`vP+lfXy"Bϑ6%}Gћ^C`7:rG *fB9[TXHo#U3xȭG0^D[&-_ќ(AVw-YbxPrkrW,= h,0 (ҔeQ^B{ҪS쀘d`qaJ"j O{ڔo0⩝,$ȚV6|wݰ`l'NuS- R托!3/Rـ4dJ1o1v\=5Ei^Itg:3@u ?so4BZm<](飖.q"v{FZrg>s``pAyjU /@?!U65~ 5(ƺ_>}TdTG|puCnZ"Ll(r,CiSZirEYۋ`!kowW%LQMyVaj2fj]{*dT!gsp@BՇkvϋHk o@.ڪ-"=Jb¤QpW0u߈(g]K29K߰h16XJ`Hłc3CU::Խ{jnbmcTł71(TɔsR?Nu$wh WYQ %ҩT.jbcY ?NFje|h @e$6yY(,(_}yKvC{xUf>JO{jIDynXk U!B!¢m;*BPފ8?/?^&.} ,I/OW6q"#κ<h A֮]A].f@ҏ/bW<M3!!2 wYV7kgޢ;2m}-&1u/f-2K䜲) w*3."oYE:F B,ukk:yYdkjG.~47f:]hy)Zn:Ѓ=x:p`Un=gclJE*'fAt>OVbkqk􀴆%ȭ[4f/so0,ÅBd4It|#s~b6Tۇf_BV K%y|(oOc^.O\ awKiVn+Ϧ66Tg=XyBIJ5.~ Jaᆪ}yQٓyktY$ ҭ87ۚcw6t;# ׬"b81Cb $6of )"n8q=|f JI0vT\Q!Fdz#0])1IsGvdg|n46 ?)[_^7}_Y"r{Pi2v (hm}qXaj Q}2j>B=]__ܩ{.>EZFg  qr'xO8ۂm5?Z3aQB<8E G#.&E`]<}HPlFlWp,;v*U;|^ivSٸZT# t3Qˑ\N\M'ݖ_lT u>lt oH."uL,M^PeQ^,dJZ {ev[RaoЈf*6 3"}Ғb,32UHC# g1F2 =4d260-hZ.-EHJ7H/J 'rx8`Un|+ֿ17q[]bγfF,((]nxz\\V'41hO?Z[Ak)LA#e,Ϋ@IkTem6 S0f)MֹT>[R&<1?Ff+ʥKtW6VpE$}/EB+n qYz. V<^M^zUH>b(vZU䍳.tC!d9(CV>Nx+cК6f<P>J\ʤXTUv} 8"πEԏ#xOI(No~Fk2X ftivMcg1 U21m+2+ԁMȣ5Ǡ!b0*SOJ AJ2Sۻf*Yӂ=&$i 2ܽt `DqT˪Q(lmcZ!@ɽ;ƁE Y>>߀$r460D}8Hq#^gDVݶa,S]+ӘRa5$DY %Z(Ge],kȫIz5CeD"2=LRwZVRuݔ1.rmCxe1bg)9+Rq{z:\_w!Y%G6m)zP~ZgAGB8`D[#]G3lpOqUA4ENB2&I-9tv)3Ŷt%.50 3 <A:t[מbE7>[Td}ʔLOyw7,󳸡x!puuFnT$!mbJV!7JqlNfVxMqJ7K"<|Xr*JU? SƷeǁ54#x~y+~Gٚ߱LL7j!5aŤfH?Dl :+){v9쫌B60Q >F[n;Rcyz}FG|n,gy)o>0F`5B?.3os!3q(BCf R@KoaX˽ FZee6M5A'Ȥ3 W᰹H&`1Q*ޝZ QXޒ|v|5÷/t}Y . IK|{S0޳c܃ʼې͝u:ft ?6) WfkYxCLm):<["Âh1&}8:(oD㒳:D;?vc38ɥL?y*iȑ[u'&]҅bƟG &0> x~XNbQ ނה}]B /6nyX lIk)0oY;vf׃BZķ3 6^ {ɶ.H mvhMn`YLȂ{)1q}L${6E 6fx m:DLN][ ʍGop1xyp7Z`*+#xRcug8j$x,~]i\ߑ,W.Cl !Qף2 ϖ= (eg.'JkLd3d9=͠)t2^\F(boP=kIrQؒ$|ii5ZsdAPm-m/iPPVϚFŌM;^7ު8'7ChSLxtOnQ[>Շ!8]#2ppKP˩DS+IF1Y7r1Fb8W@7{O_\L~dy~cGћ{ c(6 Q._i1$1SN]RzeXs `5{iS,\qN`E4O/Gʶb 'UvwV17&_YԘ9 'OQtv"(-`nԖ_h^31I bMRIm?݇UkF䕳mgTY{,V{AGEp@aasj/_$)9!(s%T;_^񟜃^kk^39p}ExfBCm›"YIg ¾f :V@b6GD&eڻCPw ?yiAQz"fG QkX&p^9$b\ ֯@qMv,u=󵂟\̝Y8u7>Ip] ا֊dK,ü}H`0=㦬E͍{hTúISW/s  :jЉ 8P-Q pرLsnoK ZӖ H?MEQN}bqa[O8OZ~Vfza6_`! dv/^@-+iRշE)ƣ-dy'3m"a Gk:$'^R@w)~jQ!uKK{Lh߶#9 z,4YD3DZJD)Bc׫J07AZ7644=ԷQeNQ܎|,a]pl✣>g%u#?hZ~% ժ,/m CVԦ|pj_ݎ$Y l~I% ?`Ef9RrƖ@36&a+0|ue< D:5}^+IXhBWN$"CǷG$irY*o q?f ĆJGug%x74GCǿHUNAm0u8+?W'ӝS5ˣD80툂e`FJ=ʡD2)<\7|:ٱ!c5C-rw $cdⲔ˦tTGAʅiн]J}&\F_n/AA[Haq'L^Ty|o!s826h (G2u\A1 mJk(lQ-K9G!^-m۬ɘFLI"p呥Do[;\T}qiʝ#1Ö]մ7`MD\M Z,6x9nJ&įT gWa'#xxԾ+454\|E &@Pסښg/R˳6b`߮m10 ch%F2k[R-X~ W5oT#U՝ath"@Q0wİpk| "Q/iNI]p1!UO!\.ÀP +uMDcz pXYE7qŹ1Y,mdyl՜cJ C$v1 {S^{T%HM?&=vꢡMo~zX'P z(s4ǡHypd4rNf6yO\;SE/ Ȧ Z9[2%Iwz;H͢ PDOƎmYuR13$-ȗxsLgtɦ~x%-6 4w&1b;lDK!Ӵ#\ۿ@"gK WX k ӭݼ b ??VXjD% *)@sUΔB.w, ~U"zͯsyP.:ƕӹ7!cU/G 5_V[+溻\@N_gv]+]հhv UQ`:ĆhV; ƃӎ+!8*P*9X_fgw8arU cg#;7m(G(6ܡS],3v9I^{8Z"c]䏪-]u>F[|~̟A_6$ŰC$빈O46pY6mS=5zꏘIB=&Bp5}slXN[QoUVyz#kXh_9 Ѥf\u:pT@>gXI Ś_`(^": ),NЏe4j`6Ɯf4)8(4zjtN]Yn Ԥ!rbؔN$`NtCܢV=¿;FZNM7-.!sv qHavW8hFv})IqgxOwĄ2bXRⳫ?e Rи) |<o8M˝4oߒAj9ՔشJhMsr՘~~Ɏ鷦Vq0{=-Z>Gَ^‰5խZBM_驾dp}]Lz2h/wxK_zx9޷UO^. ߛ @w$ |9#ͦ#yt2(,&?|Z^#M phmU 6=r ݇J^eݤŋ` #RI3łN뱼P~]!BpWlVg]#Nd*D=@awKT3k@{b]q)9S;w& T]0>8tHX ㈦5dGUk8 'U8Q FlX$ht lZm666Ar%pژ\jSKCRX냛ֈ; !SB.e93PvߋW͊Ѽcf+3i`~1 =^decyoaoDj 0vPFPt4ʃ(cRN7`Jٺz/`?gx4(ĥfL%l#V=]SB8ջ'ɚ|)_L^xESLAwHfqd=ƣb~o~Ks)FVcZg.k ֶ)K "F'˼ض0CŻL>[GLz?gdf/op8mnL+|1 M8vݖ T"ԌǵӖL}B f`|xY5jrOAnžHkVv?Yr߽XrK۽;lGwpF+Mп}uc9қ u=F 0Qi\&'?I/Ic $ Na#\(B=lnhhj^8*Ⱦҝft8J|W&H#qҭqrk;u798ufncY AQPi(uGN5O>,qЕa@Ôo1 30,B^'p uڽ"8Af,+Zל@!>-cXW|Owy3 Ŭ(^8[SKo0Ѱ0zJ"QФeboް@Ҡ>.c05Ѥ^߼M ;QکNw Cq@v | # ߳QD UJ.~x+3{'( ɋNJI`H #g%b1h&6Րvh%7f'DE$TZk`U x ֖)R!]+M8Vzf OQ5JXɒnu,Dyaqw9%Kq]ޏk7=^,o؋!eBޫUU]ݼrEI(S-j;Rk!mQp@!y1 6X~Gp3z,Ks:ƀWuҙ8[M'V5)$Q1*tV]4CtYJWoyɳ,>ȍQ4i j "\cCWZ@%ʹEIJTw,h\^ `({@Ξ 0 Pکxs9^i.N=^P k.72fXiceR*ںuor)^=,-ӗ 6vmUWFj4zXld;.=̬-L_߫/JAf8vjT@GU~ ΍Nѳce8ViPT3u0*q3i@z޲: ?#VAůu5v%fמrU%˧Tխq̷[rC.qPȷW#К] !XZfQbfڈG En2 k/S,]>ܝ!739oWS&ѮިV=j&7I)qZ BF'~) ms4!p[E, Omzl"~@Q% @_PqDM8DEp1lLķUjylj!%hUgEJZGȚJ;xɀX@)vYRv,U\Pm;3vH{Ca6yU6J *O}YߐBe ٽQ\R+*us ){Sa~Ø(۽9A(&W0.w<]_gm}*\f0;2t7nZγ-?(>ud}shOᆛɉgkcv].+ 7~7+ ^ס$PSv~h =H$%ljN2C1b!ӗ$ɫ7H ~}N9w!iC r UAI"aO]5dO]ykhGx3)C'd4K̏CxuʘLI(yMylzۛRS2Io)L ]2dwP\3»]E&Zde @D]ߴ64 jfr<<;u7\y&10΋.J7Ca u>QiJX , *Z ܳQmYZV*]?l=r&wMUm9ex¸BvJVY޺Xeey7eZ>1ywhU8`IZOZm/eBI_BFCKY'+fIl@*㙶S%W! "ǯDŽxj: X>}-BE8@^dbWkUk%NYЋ*4^ ^=Wo6fvRcx'2¶H㱰|2U?x+$ȴ. p)Mac7 {Ob9"E } {2HKſҽLܸ[:VnPAj{ԍٚ7"LmKᴴIl@c79*Bo&GX/7UeV((ƀ l;b.RoUn,%ӳ5#!+%fD/bcK{j'h` % df5aAR *aٮ B?O'%]g\0qzqXOM 2<$&VBOwJs;f7T=w8Q-FnE\&q[B.^*2f#`lysP^[!6r! ";@g}נM@e{N64ܠɟIGef51qT:JÙ$WD3,a[cXaxUA$,s9erhINU  THV.5wjjBph[/˦W+/iaդIf dhYo05OD/gtY9ʨH+B$[h}PoHC4V>;x$k)e  ],⊻iRYyj(?{84&#:RIYnbA K"l.2)nV؂' PX b]E0 Zy* zZ|pzzc s9)s\UA m֑-BڢJ,v|aqu)7p{ߞ0Rqَ7Y¸X_jiz]SD4\9(?!Simy4B*ZR:ѴAXv)h4 PKYqb#$AdhXP:'..h1?M*AP;Cp9 ~ @4 TP1}gAGWOvp m|`a;Mz ^`lbۉ-(6)hG*4*K7EzC0B?v'\|8į,@VEO"dY0̗Dqû۹u[?>HjtB3z]vkKS]ӯ[<n* I*^$mf@oy`)?k:܉DBhҌ9:P-.|#c9eF;CVTCJюp!uҺ)gc)_0&vfOe=Qv!&r=H&Zgj!rQ߅!~=.-E- >PӘKgeuQLJ_7NyK5XA2=sn>Pq5Ԇ.)/fDIM]KzCD۞L0 Le 0CHc^z !qUML:FQ$p־GǼ坢-wԭFYS( ҏxYˍE[-@JƄ'B[!= >l xRt>eNVn9VNARRw[#%(uv X.͢S.f w`P!^{[l^ U\<~#~U23`x&`u:dE:i∤KsMDK<{hwt($wD8^ UZɢ[(e ݓ[;=}= @g}V!EU>I#1dUwYx5pUKR.o=qX8NT%|2 vB8㑮-8}Qn@ewqusF&Ge:cOz*g[|pj>͈!Mq(4C0`"1"9 x95hw; 9e1w_6ꗃFx0,)NME9[GDX ?g`ʙn:V?zR۶& xGP=#E 'isT0kavvݼZaZmLSz#aNkj2g\2e*2^o e聿<s[D@\W : !fM'݅ )`hFv2kWHSħhͯ?1\p\Yyxί2đ#ς6&tH4P1"$YF4PŲ N4T0zI-WA9cϾ$ۢ7 䏶Jqm8tju RnH[B*&5@EC0-2;2 Q" ;}'&VOf9(#chQͣ!"L) t~v]GH *oBm-j5%лL; {"%]~W\{rM-~{;'qaC ]'c$?'`Є'a YۯeQeﺊhE,*npp9wp? մTh*[ +I02MĔPC_@s"*MKL 'C6%~{G6| grv?DɋwC0+^]GHӣ2 ^!aKWL5FN=~L~ڰ9*8ҙӰ}e$# "EeʦOTc02|:] 0('/8([B̥ȓ< 1ǽϫ8Z%HK5`W6#WY!Ó{8APw(Sw`?fǔD["-'MZB yb~AV\r|7{cԪ AWoбt. ..VẂ`q{ffƟJG،2(:&Mbԡ`K\􉕑~.t&WV OV?ZNeOvJ˷<Ǽ񫻫C UK{%}UJ`܁weUը] j)/&6+EMU{}"XT(u1qmUNv5Li<UȺ0AF 6Ӱʴ,>ެC9w:/2y, jC95o v+BB酿je*fY& q1"qtċߦܹZg"ssSEi`zj#--G=ªmW1FXѽ{-wֵ\F ls[?c }J^aDkW[|a@!OkP $H$S(| ?@ b'ψo5d74f-Cx'r-p|e,F|+8a9[,]ٗ frr!WGlp=`(ڬz cx cYgly<(Ul>JOo P>Y(2:PGBKwwV(Rׂ~zA}b6*ѩd-TEwОlޚQE*]{ig Jsk_U.?t/ >r4cp^t䇜`g왚/9,ȀuѿƇdZHe#EskczTQ,rHp@V+KˤƙAĝuN&Br7Gk ϗtVȂxaϤ"VsAL"Jb< }?C[x[ xur@]׉ă)v x+B7x.3+$ypuę1AY sLu+tU* '-^9'̯O0p1>;Oz31d/AAp-y s* N}9gk;4U(<;J:~\~E:Փ =v7rMWPNZgL9NG,uy/U|'BGw qǙ&i %R fFWZ9xI2O/YMlC@DZ̡O[6̗OJV9 w87'4JQFW!OVػTj'U0:X_-w@G6G2u^Y*(Ӈw{HGs4mL\p0JyH^*%#й4Y݌dbjȿcU<<ŕH\=`al@TMDGFI% "5˗()Pb7v?x԰@Q(gwՎ`1oJA˦i%4Ol&5a^&dǹ[-TOAV5Q4ߏRK"^tUNALHfb}gUHj_bh(t*}Ril_bMYOf|YIP̣fMY$!t;`nV)"ȹ~ljHeoItSXrUO|V&O9DstTKqnŵRyI#C}3XнR샔LRkVf䑅@a:=vsZ><#D&3},,L-QBۭ8FW{-~'laI=ڠyH.Oi5NL#g/9LipF!rB }p;HʨvH>@YW8߬+9˨*=z #窌9ݶ1݌<'mwIɃ7Ȱ|:KoSR'920ĎioDp(TOمN~T8!x^]-;C9wHP39Mf9/HÌ҃c&m(;hޯ{)\/L4Qnn;N"(KѢ*+[wUK)5܆ٸAvMa ზ&9U}*\^BzmjFE+Os4Ϩ!F/*ڂ=X}zaxsSƒEc|؋tT|ȇR.eZS|:|h&j-?IxbY8x`^r΋*kN XC̶ۺ7!4N1̲Ew&"$/s~/qE=jx4tޙeٖsaz$*HoHex7udS{TB)˩b*N9Ni~ZSYm4 z\f҉Q+;]17pyc~v)6xFLq %$)k/<6F~fOҞ=ŻVf+Y??h :i { ð8>A^ `8 gKCn_AXhIqa i~i.C@kgYft"['zpk,V",BVv)seFzpm~-n އx!ߕ QMtlW:9hV-2JkE@ p&l(r{GPB(`*|KgW&Y.,-b=plWj!*#q>:A&,ҿBrk2Į2@< T EPٻlEGp-~ϒS7y gV0۝o|wXcl⿣#"*ͨj]G;G/1Gp:BeQBRHYU;TQpl7g}fl9'NR[팈Hfw 31KDkZG铐%iX'(t+LK+.+bOa -E#=;~1F?5_@λ)+t= V;ȓ.i&9q(hMz,G՟>F`nif>˩eIgvv6Q=z~NH}?DRt Qz{9Dvطݘ7fdՖh'Hp!B/r<D@U͊6 z;laX[ҀyU#si+ '6kʇ,og z[dX_փr6]Q%^wCxZ\ d*#5Qny9w< ijs3I~~ ͽoysvYbqv+;KJ978#/]qξPoe.'jl^:8^4n45h)w;_a"X#""_&ɺ*b5x0nY}lI`4z G;8"imgEZ_Y~.kfXKӰUykǛZ :ۉ96L 2H艾?>byQW-6jMvUD.k:Amp`e`ݳ/5l##(7urez /aES l[ztVVA%%BC]_JUтS bzآC+tX3/XGʽ< Կ*@tn=%10ۋ%FI9sbڌ4jƥ*tG⹿~۰iG˗@V딫%pe$ʖ:ݩQԦϔ&Nllte?TM~}R)Z$C*)h[N/Uu &]]s Ō,˜vDV$g5=_`H2M")LhH٩|.j|bx&7 ˧Mhȓ'%A5'%h8~ ?(1 ࠴{yjj]fcZ+yQF|QNzOIz79fz@f.ĄPcE9!6_v=i[FGd>*@ۏK0ZY S3 *nѿ Mv1cgL^G;G}bvG4x%P~$u_֧ ָk y$ށL~"-c턯,o^9tďrWavPvN9B>E't^mA-Qb0'||0mGs,{0@\ K.^A5͌K!v&4rj-9+ 3-&m "نuŞGGQ?-9)f 'WcD+J'K^>">hxԎ[D|7+YսO&7lvb1.ޅjvzaCJ24 pݿ,}K=N+ )5` o82> vHK8h*cD:xqDl!(+mx{%$NF->,Bdz^6ZSM-w o:ǽۼ';%5VޛeI 0{25i^S߷ūƎk">9*yI}z'̐3׽}d kqְl5- jbMKxqqzJq"ErNć\$6e`Q@"[e1V| bM+2մƾp:s7IIkVY47ƒjR0= ?pGn>a Z2j_b% ˆ(5hܔ( ^CHR.r+!В-nmhQK%襯`F R"r (gb<0@_"AiN evz8+4bi5J.Xg,| |{Hg>$LuSfOMvפ FCv7zIjl Ϛ0i{ i/h;P,Ux1B+%w]H'(l,#Y{ܴۉnK˟,LڔrK,GI+?w"|  ԑ8"VLttpY0pKo=O"R#ag ɽȊ-7D0aG % ӎ`#kfk|{|;½yNJH'htxP Qdƒ|72tYnD_nLVYUhԪn<M86uOkYf,X*a#PT/N] +F?wїA?,Y@ 2p-,bQ2P@UxFE{!EzP~8H:D`T"'u&"PaSݬ78X0f8RxvCP'dRs g0QNFĄܛh;q9[@#ɠ M=AwUq `)'R*"5nh#0<ʧ-XDOd ?@rtTݦϮE6*^]%UH>=}ɍY{VxͭjJHv IMˆĚtX>t Gܯ 9 H#0u;U#v!=催g`u#!W@ئ1nf^yN5^  [XҨZ U B㠰3"!~b;?qeZSR1P̟ݓShV`]o$NP]?3`/5x:=SA<HT5¼9;e+hbyO&pM%J\xsƝ~EnI^PN׹}īFw3O,34ݹ9xDŇ.< =Xϳ+ܢaɀe!hVsds|IMeD\5 S.-9@_>Ym8Ki%N8kp/^7ilm|XV)-]ݹp$mUePuZ? ^u>jRs,|X-ЍL/,t)L Eb eZ&:N|*>dX%k(vA o O8&5 XTTV.=h撡< *frT=΍p"w7UbTGv2wH`ω"YW8x.+o71qk@U9tӮǽƈujᇵ f2m^l#NW:Ox艹~3}9V4.KtXή nD/Knsͅ~ՎzhX?q)5J_>M_54a/!} *u6 N__-4{gmǍfبjtJ7/*u}I};6p,&j6RjMpyԵˆe9ҨAC[+g ^Ǜ nW$O[b۰#|u̱H47s|y]VQv!xVIZ]F bvjOX=<*8`.y͉ϩr.>! `61'QQx]4 '9 (FuF?>ػߑ_Կ`xHA|."jN!IϵC{[œlk:cs= L*;k`ZPJX\I9(0JEYS}UbdȒ=G*nG|C׮|ٺps#ytάF-iT Èoq2?׃ g{:tBJg(1-u6Y䙾m=rTqlS]j@En^7毭vL;zTUw9fcXaP\ʝ~A|^^)*VWfql2yt]hYiUN`# RL5MxC;yk?4SՄ{I"k;ݟ-&)_P5e$"h] )M {\z,<]뽐sآ*ص,MPFcFtR":/IzC8(, ( bYw8Ɗ.}Y|GS`q C4OH#Au=W+*x5 \Z74Gأ!niyM]t"o?+};: ;htg9O> -ȻuԍUA-\/);0L_Đ拋?9s.NB *+RuEg= w`!ZꩲO1]@bЂ7c zWi]G.`hr!/bQmטyG/rnG i:bi. z}HN7ʏփH-ސ8@1B±I= X{Rr7C 䈢Xɐ $5]h[V:r~cWh*,swY 1^#h2xr4}ptojt ãfR)0ÑKR &5+{^ +x>/ufP"= VN0\gYKuץ84Է1k eb-S**:FS%ԒXx۸< F0Q% ~4%E`~sQCL/kJ@KJ"tׄ/5.ۀh-uhGǵ6|~֌uxݥ`LePǨr&[Ek֎bOUs2G( X#[Y,_}|!4 7j6 pKV і2͔cN0ώj辫w&x 28HT0c_>~@Y(Wr6ORjZ] $D!>x/ip-5<_.z ^f` f믵.98;J'X Qgұa0\ڄ}_5Y9]͐^C!iB5jθCЧ>l]y7 A&JחKyi eJf5e:)Ju p7)fS0I3R0z:iri^汆^#Ģz^sC~ojR}zWpp>4KI>?rOs<~"{W =5f!;q9G4!W%}#Ui >s1vf zlJP3ԨxUQ'>18?$ 0Z6NE< `R:xaL|Ų=GB튕^hK:[E68dO}zfU =ݧcW+^hf(5K`]J $#2U̼Q[b8h}%[C4儚yWq"îǁTk)w^/h:@-aڿNCu.gqShs  5;9#yD<+~xQ|Vȳr25 | cf94%iYYZ,IUvcuzdBF S6f T7%_Ξ].Uv&D- y&%?I_z$n8lS)S}ݖ#g|Wjz?EK)8SM~9Q">Ű,DpĆ04ܐn~8=W&[!ӕȄoX"243ݑ'Ԛ|0_8t d99i-*Ofع[( Ɠ2M'LOX:l(8FNT-b*~Zs%I :e6KGb p6E\\v;Ejr@΃M {r"5jzr^PzhB-uTA屺45\9$]GtZh_5 eLIQ5~FD&uhz4uQJ'^LacwqG멋zm~]1F%ܞoMXm~EIAl#O5{wl3 ]YOOr_Ak!r9*;6G\Sm9ۇݤe`1[x`xkN9aCo]9E,Z8ԸzMQ)LTZyPq:nrkI|.6Q8,YosmmL7x^#Y,%V%ϐOdB-Fc((Su1',t Mvfm*]lZE2stb*VcF wr; VQхlC1 ܂NU_JG#>a0U3ݓB 0U~iN2^ɡJPY%}mdHmrQչX;iFYK|aoehQЁPEYX z1[hB 'SI {SFO6b9$<)T0l`3V)جxGWcçF@p",z̜DXbT_>NЍ b-sxH;HU-!CBw1Q*ظwXAa ̒:Xf2K4iäAe}-7L9BYDG]‹\eqV fhОNIM*6ćx ^ossSl󘐇{ flHfި<1qER2,o+0 Tŷщ76P?00?1b!Cz?sb~e Ϭ70Zx17-RUΪMTC?LPjOV?BnpZo Fj1 n_{ʿ VQ#D܂2 Fՙ+ jJ͠'zpn\IxgX98k x]A.n9n+t14 En Tl-EGdӫ_L5-pU0vܵ1s7@TRoiH w4[0ˍjlzk:S1սAzDR[DB,MZ2>:ޮ$57K"%Ӏ(H "eWfg-rV,7zrUI5*xoXMOi^D\:4C+%=b+%k,af`a`jDb"%`\V蜸4$ 5ĻYU o%@rʔ[# ydkr~~t$Oh-S*\AO?1bWyާm烯p ++p}q N,PfGf=N-;Z|&i %ۯ)e2 @3si=ma"+[(yC/&/pSci1}, q ^6x6ϕ6 v6 rpV \K:1ȭDLYıoa"Qo6 j1SJp bpL׆a=LR$@U$_Sw㪥wp/G'\λ&!=@ka񴋠m#,0n] yϚbݺv!Va\'} cSOo 9RG ɑ'v[YHhJhs0RMwȫbBtSQQd%D2P nܹB/iy"bBf$ "$bnqÐЦVtiNƄ?Ń TT Nq8F>1&d@~sTWF>e>bk&t+aBr)4lMQȎV;`b4Fuf]lDRXWA_9m#>ŊS؏7 _2$|׀e] _HuwâokP1;TfXʑT=xP@y(2OJ+J vxo%-N9vGǀ4|+ Z_+ /~O-r4SyjQN!_QfSg_cy/g D>Pf#DS$ad;}/Oh2v RCEV3CE2ef&.x*WZ~W㇄oMEwM`nQxX7k|"3Ќ-G.d%ԵHw/Llj$fܨCmpFժQˈOU%JONW/E 4g,CtzS\,E"6SܢOJ88AF\e0zVP]V!#7nTbP.j0yxAa p3fɫxG=Wp|G-[j9F (;)(Ћ#J nWz%tH0(NqÇ%|ߌMG:<7Gy 2DEj$Ry ktRE]^)/ X+H8RfZRJo:#ܵHk*1ϳ쎣ׯQ1-WoxtMoV*p%LNj8eizP]Fǘ*q`u⾿]A%uڏF^/fS'[ fTҾx "B'aRuL(fXru8wib8$ Hs0Kp{t-]D-Nlh݂-hRS&sM<hӓm 4 QW/TtRVU#લbf8W] 2.Λ̈́z{YW͠lXf+GYQ&+ϔ΃B%ZYZS'E;}$4,HcrzNytg qY>P^U\۠w}MfU-'VA~b$-x嶻g;W+8{p4DJ:%HOmk@ܪN,!Vk {UM9+1 w̶t h s?ENz0hvRlVM!,׾ĩa.91?hk:!&48‹dK&W(K':(. BK||Pp< w`à l{BƊ߼AxeȬGW:jX<q\rZM?IH@B&BU u1Z&zž`33+c9/D0esvHˀ݂YP=^>SԆŏ~pd4:[/*V-A@ ~0dr"wIL 2T%lT~_8rxF_#D>g=z+\1<%l胁. \XWMb/]%9C J&QJo漢,$b4 Otmy dw:E##`@5K&3&'R(辑4uDMx]nArd8$Djsε$$ĮVe~Bzp泲xTit):zdNӝZHNBOqN!{ [0=VZ?DkѽnV}w33 e(TWhIG)$G絻:xla rǂ֝B ^ F ΢Sgtrst\ЉNynbһ~7,q2 [NS Mb' ?!mF txMUBc)`FHxnO}3,GpCɼJ=f1h#$ؔn@_ ~]c"uu& ZmRH~tar?ju6tZKJ٦:eK6`SǹhKr ,DpeHbH!TzYǩhݮ04[lRxk7$f4?(9 *p il ٭8RMݳXТ1w bbzmʆыPpˁadzܠ1*D\%lWYLEz.Zru(ԑ Zs}3X-[;UɌAM-5[5.H-TGhֵLCAe@ o;Es䮋hl|<0w!WPA9<ߺݑի_u24^@U̍0o33kro-!' ђk2zgG = OR_ ٝSh@þ`cgQH7#_FBD:~ќݩNˡA8Os1;0i y`=CMYf:!& “=-#Oз2n."4m XXO {Xo 1%I #?'Byzz]3 *AXҿ}Y. !`4b._I۹+LAcgBfɆ:LvemZb&ĐgeR$N?)]eZX%w-L"1-}y3`k-VDhW>+*Og8qt[ѻWE|4T6oLʜt2X`ZbÉxGo@[hf 0i;wIfHjM/"ZLA6)Cmo3^=RZ㕼Z஠l3PKEN˺MNn}d w@_hpN?:eژO@DrqOg `0~kMEX)S YK%813u6?/^΢z$;㋿ECr!>wz s%˲.|:u@ Eמ#FJkFY'Ä8BO˚C]{w1_^Υ|3&!'<J/ N+gLZ^%.g5T ){_"wFSfO{qZWw4)k%Z+e^Oļጳ.V&Rvnވ/ L0ɄźBf`TQy˲VB;(T&(=WS9˱\4vr|fsdO,*TTY_5&aA_n4[$U&ʃW?:6;dN;# ^&LX`NlR\Opљp'~hJgg~4ʝB}7"Gy_@0*AZH+f0G%~p6w':++FCWrY6HwAÎNn)Pk#i)E]fP -Bs-#2!< nLiIPx#S.P&\Sפ@jh:yɏh=# 5evlQ{s*@oy,h& +E wqUu97caʠC /'ؐ6v5T˘f&WyuSuJ~, $Pq46Ժݢ&j#ѫyx;v+ vaV '?)Ɉ5$爂[ysz5\;nvO^m7M%Uψc!GX8TG)fʂE/Ŋ[ٌ%N#[ኯMCkeKKCj8ھ*}#d ~V5T0BMߡa 5#>sKT7B-x4liL<-`[࡫u/?m;#7-ZۭL$S?C. nY9Pƫ)@⣗CGaVr2çYQC~BPl>åJ]S&ᵗ  zX}a8m \n]5o3!9=юai v ߍ!Py$=c'?W ?Epxz̪"#E@dƂs"mbM(KYU8[ArP> !v!5۴.8D5>i +\<-[v^f$D5aL3gO,?WD-9\ d{t&"/0a~ˑTeD$> zkRUc&/MM9AUjoqY3d K@y+;yd"8{lӀ\D%DŽdo$wr+acĞc,"-@F;HM]QdKdq͹YdhER,+u!{ƨ K3:D'7tow6@x(9O+9~WEl/]oNlbOO#EؾnOSP%bgZR.)֭IJZT T:JUfju&:'G}eʬj(tLv&~ûGa^ve"?MCϺ0Ox w_ 94x+ #~;h 1 RAJ5O*qKhCks}bg(% Qa:㫳upkDT' ʷ!+$ N+s 4& !{Y;2@x2륮x^;Oa8r[BEV̅7 ukTroX;kQퟵL1w2eKj{?8ҕeXCwb+c$TмU~O$Y-HT.T!jY³E]5ZΆZ7]g}'^'dN|$f~Ԙ0#`v l]<]^g鮠z̺,(S5uD`X7?K3f glR#0hy `[ǰ~_0zENq 7YrHd!pRe&Zyĸs(Y!`)tE/>L<낫&Ħ%'k%(XQ,_Yhzb?] A[*v4 7;:?85F U/-vTW rNӆM^vƒ~MTq㕖|*^D3z\[ Y+Z^d`uřq:12P8!7|E;ȯj狹nf}XH]C|c6 DbKtLfK.1/9ֆAbcPjY`چ{u;;>鼮%T}ISH\C&[ۦMtb9N~%JLXk(v3)Ϳv\-0UQQO~@y!n)tpwn3>$N UxY#Hx&^DÈ[$YmCa2Ls/q؆B.)\vmy#Ϩ0g|`K*:g;МU[Jo&)Gܾa 5oS=x&^ V8Q[>Ny:SI8> `yԘjK.!^fby'tdR@M2&psU~kwKm/o=mHu]4ҚPk.wȃGT?4^fvܬn٣u6;jLv6ڜ}T[]'` ,_!%[\{P~v;B_AMGZg 8Sun=V݅~[\U&|YnHbu{ /O)ak?Ll\~baUlfjQӁeBP-匷Mo@g |˽11͖r"mI]#;rj7OL"㘲-FV*p ҳS<tC?se4Y5&V’;F"BvZ IX1+a%^ w $K&Xw̠^*X?@r1ūOlA3a$Ƽgړ W\6(R\zeNɜxlb>H/l=̰;j!$A_Ց?]"yUs$EU F8--h,:(q*q^8dMXwO+G_=U+ ǎ[p[@adO:zR/ 8LdF+hg %2+#Ԧ67V6ChOrcյplOSy(ďOJ_5I/in 1~7{~Q[wvVf>֓㣁b"|@kݯiKf<*'"F&q~HL+)Ґ7B..R<" 19 9]% n۹u_[[wBFD;epHĖ̼vEvE*<Ä!S]moC),|eq.Le XR\K ooo ߩ\fÔey_@0tA9 HƔ jy]Rl ) Ɇ ;taVLC~EjGőYh$P&k),,h> &0Gfq2=9*`z^T!z׌`pb+wۓjJV=4<׍a '4YWT\д|YVHQWq/?)(d  s1ӓX!.r؎+ Em]X-k]bBF<@5(>SykϏoOt-2%|z;tJ)_&ښL7Lזwu^Ĭ{wԶ)ıKvbr_؄OZ϶j xT+7V"M/z'=$<(f1*xWߒs-4΅7(iәD8)83 %Wᇋ { 9njLU(uLcLvw2$%#{+x YZ