python3-apparmor-3.0.4-150400.5.9.1<>,Ddap9|8tj `pWLKtE-t;X8&MP~=`U2z㎫-vRaq{ ~Ax^E8חH`t~gw>:4(Yapf5#>ʈ?xd & S= SpUU U HU U 1U UUU.TU 4"("8"~9$~:.@~FGUHUIlUXY\U]HU^ bcŸd"e'f*l,u@UvĔ wUxpUyUz(,2tCpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.dah02-armsrv2 iSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxaarch64/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤d_d_d_d_d_d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_b`%d_d_d_d_d_d_d_d_d_d_d_d_d_d_b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%d_d_d_d_d_d_d@d_b`%d_d_d_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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(aarch-64)@@@@@@@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh02-armsrv2 1694065033  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-aarch64-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5aarch64-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8efc55bc7867a617da3af6e8a82661b4e6d32f27, stripped  !"#$%&'()*+,-./0123456789:;<=>?@ARSTRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRR RR RR RRRRqq%+]ߌ|dutf-86654dc3e66be854e9ba75656ff24b90857e0a4c1049528bbdd3b843867c93082? 7zXZ !t/ Wq]"k%a D岻N91nHG-Ŗ Ej8:Z p_[^`7,h e|JlņE$CˑrDUȂnVr uuᆁ%an3 #EHB ?GOenB oE "aMua95A}]!R=ͻ\g 65@rc1_8W{5\6"_f}  ˋvNywDT`ϋr̬W^z6"GMͼ dGL8CΑE}LG.p"{BFwFpbYF!xɇ Gu4)oߡ&y)O]mǤ .}"&Ӷ *!bi1PE݅{iq*c?_1 M6kƳEjA41y$^u52=*ijpRٵYnRqFkV!ޜN*|K~u S(ES<;#"܎7;F _Mhv0çr">B[&8F_]NTReP$rܠ^Иi*>0Ʀ@zݠI!E#甕V:֠9}`DjG˅>! lS3d ߡW?RֈjQF_OqJUAg&{rg|MVuZY: )+ 6^==Udٸ0-{or2Ј`ie{q&p21(gx=hqNFok:_ȹU_5`qUmkL4T+Kkw7\CZ$.1ַ+Qjz*%T#D޵+GBJ ^AO^pAe@Uٔ0k&ױ]{HH?\q?tC.9ݢ0YiYJ CNE3 LXg0=wf-IT`$qjc3pr*_EeN5> ﹻ2F.Iޖa̶V:P;B< ʜ=S~y4nrb/[i'G {Ff\,Dl 䜸 WFp#l$wA +0=XZ EV"]V4 8:c( K&OCXIñ pD{ 0XfH4kDZ{y롙GᙨڣZs|<dQ|taEiR3 t rJ{X#q\_q`Б#\lj5,4Zei<92؃|&?l7S@&e:VJNG/5$k϶Z,7bwVt1骃Lqe=bD<-]T[J,?"ņ{ph[1O*׬`KA6'ڹ6r5m$0ͰG{|bd!M3־!%N獓2k}G%>U.$t>BPT#.K )\M31V Loqi&ބ2V"_ZG9eZ6FA a9Bzh*koJN]G 2d p3ւm۬ˢ!sj(O5`y!we/仫Pρ' 1,P nW. \$l噺tB}b3K#?D vi%Qm!wV깢;՞Yb JcY"U K+b®w*TFx|+(*ܿoҁ& xgt봠1ՖxΑjoFyOMi?Ac* yl|Sxw!u,(>DeQ;b倏q~5]ĀLaV= 'NSJ?/%mhzj m*3ODoog%` MctJm#G"z-R,,Yd&OnCubx-GkC_oL_Y"KTE9y5$<3IHGfmBcR-Jţ LΔu%[ET%W 4jou_@afxf*86kĞ1R* pg ͈XޕS>w24ebc6^ژu1򣚁-?XD9?vjY02y"a`DlTIi+.EZ6Ll lVHfDozX^YvJ}9ڭEG׏Cv"iN`wxnW=B׋UElP(M)! (qȿY)1H+F)Ύ,# YQ]"&$z"2dcIZBl',e "AN2\ 4ՌRfCsrm(._9}Rt 2g2l,7s(/3ZշA-%& Zȶy8!M" VB?ⷳ"A0RD>bY o7;%YxNCԘo@P(3 RDY& [ Oɭ2xih-4ÒC݀:)A 6X4+qs4q-kecS3>] 0?f)RO=d,E~Tf /&W_?OH p4=0LhjXYݸ}]ͷa fE0KxyvB%5 +%p -|q*Ȭ/AsḮ U|o8e{WI;YGwY z~ X}U%SLLu+Pez?i.Y9r99E+  |t1S3ie5vҽҙoF8%01߷I4GǸẦ&:ٴB/r)PȎIPN $"R2}ӊPy f,GCnP͸~{lš`uHId#r, ⅒T y3{aucŹg4l(hi)I\,6k'iG~ZLSkdۼ@=Y" ѧX{QQ?A£",*?uY[|.зD{ِWx|,-Ɇa{3IuR߄ l]91ZZr)/\FP8 RH'`VbָB#{M*艮́uf5"b9,j#1 |嶒Y1Z(ƫ90I)ŕ~IlǭW?1kbECvFp~R6fazQ "g71ŨaGs`xg7doIN!inP66O^DA+|y\Nu|6 3GĤ6 ArTA"6vY\JIQ ;.ycvG3GJ{oR~1*Pwz" <@iZ0c/`54-Jg$XAX!bjpo}i!u9|HEMƁ4<ٟnج5NՀ^jiY4{?"}2,; rYL)Ckwλ;S'Z=0Rh&Hlɩ,ldM?z(B%Jd EZj9(-%γhh8 -I9o^ ͜c7t=19 4cxmyieKüe-hґ%ktQ·CpVA 7ƪ1G}l3HPv d UKw&YD6yи1;\RhĖޔR8J %bo{(#3 ı|QļƘZy܉& Btb?anaR8m#((.޳_KMl[!WJBuC"%Qa%os]Iպ+~g!?aR68Xĥ!_n1ɽnS/~Et]|e0c- mKtܔ5\&k_/gX tqljhjǙ֕Чp`q+sP6RH;hr7y9IO-a<[R6] i_q&S"tX73ի]͙<#0UϦ'h{qh}.Ӓ;&T`6.D|y}MݝԵooIz+LW9 )߉ >{ǰ,KAЋ5 ferW:̎LXn,bh] W-^Gj{7xwWij=P}PA:Gj"ZxmM5zP)cvniVBJg0)9>.K?C%e7Jc뒳nRcCLpW]:Es _gWS~ XׇF않El2 %O`uOٛS/1 sgDDbJmbR~f)oq:E4S7d7(,>OG־YD^m4U|Sl㿊U@6 _,jl~>26dM>A }-M`5F\K?>.%x# 9`~ sFknm-~{w؜No@EV~3e(Jjk#[zС닳Y0D\I^oԭ$xq$`9~(^Ŗ#*wD{0nN@ט(${7@ Z7* zp۱ (hnđ fjyh&PBGr!z@ƃ[6K$] M;=f̞zq2~΂"}59*A`?Hɴ*v~[j\IZ3MG2udɵ%`e6xyr$$4kCjrIV#=xЏP{m8\zٲ{_;H-鍺jA/l.VʎWEP+)}5>E_Fb(X T sH1sm.3< u), -u4F'3'f XJHhdAkj_qD:aa*\O绲ƬI-^ 75D )CY^q(0lA>[n0QC$-o `@,AdzJ%E曾GxuBM4oKB.|sY\s̊)-Mѵu |PqI'W+8/S݇2Ezmb1=^]֠/ Ojs@^OA,;$ L9V={gji-"|l -| <-*x@/ lxLJZGyf#-hWz*`@8=ȼ k %۪pMʂYG.h\2 a?|R[%1akHݞJ۝hWveUֈãp5Y5֣B?%\tU N*Dǫ8=*^?KRwJ\^8N4O=wȴ MEV30%Yt'fvXl ?tF#8FyL8lVfMf vt6u]UԓSfzR9{of w,w+% 2n1~;̛Qӓ{WaR8`xiÚoUc?TkH!oV.&Ĵa7`I'G,sZ{*e>^%5VFGj ]J:dlL-'3*A¹"0Yrk{JnǖpiAOYu`¦lg@ >m1uM ܵ.n jz7*rSFy/:Zr*1RHJi¯)AHk#ܪ7cOFnW!pH"DtdQs+AKB@ZVc4qt2|5^m= 1ڦt갶s&#壟 R,+ĚHZ\0/r[$t |f*G핼IuHm#Rp$!,O>3 vJ#3♲ :Uu vYcRCV ͜m|7Q;BPZ \]# WgM2+"H$˗ fH"da߅uph\d1+ӆCBR]n'E4# 3DNtfxW]Sip,h/z*f_{y-M*lcT@vP|3[Vߜt,WcZm\)?AXBqc#%QWg+Ǚ6%\oZ 5K(ly|C%$8!dݙ%o$dE?|ⱇUyrf̴I>F$|R=: ͘5yP:E;BBJY8fo z΄8A t"k`z$0yR i>Awf(p̌Uqw?K7)ew Jבk?EB$Fz֦^l.~0FGAmw ݊{b1Itn+~]44) zB8޼G$h[K']K}j!G{`Իt =$F/`KM49#Z6jJ3QxxX&y[Uky@=x<ȱt6:UHfr{ué0]Ɯg|b]nRAXU,nH&HuݥZ? ͚nøwFr[r:7?"@1){U5QIgCSTkyR=; O9Z 1Ʀ.Qewlt0~: s+"uD#Ǘ}RG|@wahZ2NOI2?sOiKbmj'$f['1s_O mOMsʐ*.kPW%l>^WoD;p@[$\bAX*1gE$@:2`uҒх (6yVw Ty9 3_-)1K :nFĬD3 U6;`D3$䁈ݪD?!Nt W"J/PKP&+\[;z91Z$2k8u3 37`:Xlb+Yks°gJ}E՟_vU_[úVSq8ZNOmC뼵bpylGKiw ${Ms# "xB.±͸<; OGR[[DmD.Zx_Mfד\aF *U}{?N%G36#TZ[(t+OnrW&,]2Ԉ_+eDž.i{_$#pJ|^@}9nW(voy#(:)<^R5JmT=U_B bI-@)5o Ci"+9aE K) l܀=;fn6l/kkcFGB-А?oӽ"Q xzL)|1 lb< ʗ,7ZJ='v r)$;88ܵBVԞ,6[сZQ❚Fz]!H%r%8 SϖɆ^Xvd2x(.TȮ20JB Q _⎣VcG:2R, qQc<w7 Eb< b9Uʈ|g‘礬p5eV,=,|͕+50_rHf.@\24ÖkMl*:JhvQq9(挂7C YcSC t ^76"k9=¥x9$8#Z@UvkLZEwGd1jobpW*c_ENT+ +3s(̵(ïg(b6##X4Szol|Q)H7!g-I8̿ Zhȸ=d*#Im -e,URK{kb06Q`.ǝƹЇ4<˫Fu܏l#x9;W& sYʹ/o^RB  #7CVge;I/Ha;Va~!Q{E,Ofԍk)4 MBfSޏmq[&-ӳŗB%Ej⺛n6υNxkˠǠp.&o$PbAkweQ9&/S(?,ͫwf/PN0:VĹcd!;t*]e2b$x.][Ihdg!P³}AOp{1N]dOߤ6.F q5?L$ʟ [9;;d\Ov#oS`dxN-uvl9j?G)/[N9:O܅tOZ}d*MJ. %$Mb*xxL9`Eҷܓ)k/YݑݍE`X$kPݿ|=m -(61^<\!XK-2l` CjYe׫1޾ @CR7\ u\ΐ.`" ;uޮ:gM07\5x]<40>d %`tyM Iwn# $hei|)# (sF޲vj%{(V]-YnjHzZK @>4>h'-Y)_?ͮ'X@һү)]/ xLFKy}ƞ#׌MWz~ޘbZZP ?oPyx' {ܹc4~4̶D>N1Z;^ ꧜mbB=e=Y{ yіW$a4#q 6|6{m1']-J}T7<.J<n( n,˵n.x8 H#rۘ]AJ_g]³ r|LGC{bx;礛W8l-guv\F^;+Njchvi2WT&°OBK=ILuƴ"e+8j$1HX4th~}1n80suc@W]Ȫo 5a;7; nBz=!Ƚnl 2R Q'^w?4V5m:DqB3lsi 9gVE8VZ B0orY঴"dƿgW⢤еF?mfҠ693!R̄yC͡,Nx0MQ.^Yվl?OC녡n?~RL,z>4{pIo*6gh)#5Y@*VZzwUd7>;f[U0f8$ *D$kE])OeGwn ?|VyAt"Ni9+~ \SOLqC? -85)3֥+@R؜E(x)ʡFҍ;h|C8ғ='?}4dCgp/!sc^ϥO#nR/C kw1K|ѽ:Pl!\ia*j =*qs,vfmAH!jDA)яC I4@UK؟1*1SfI_g :WXrj|1RW i?5kJzWLTP"rMkYix% ݶB[N"" ;UFpGX) RgQ&}Y}⣭.n7i=c{vFĖF9KeQfuF٢'Զ 7S Akn(10M<؋OuLm3raaBNv"F,gE/v#{ &Xަ5hU&K"#i rDL8*)u9Ǫ^K&Q1>$ `㎛lXӄB%BRv=5j.G/)8OY[e  z BbZ&- ]@B˳?6U_nΘ)]xhF +qkmbo{@pղHXT\r59a?"Ƙյ\! ~f馍=Sc]_, %N!NR-b}ZdPqk˸]L`|3˒[5ڊJ[og!uypߕ&zU)cnqU,v#z-D <~ ֆk4%Ś4ɰLgJj&S H#ޯ>U0uCʠ`(o=a$v  \ ߒ;Zv&}wKj0y 4 vz[ì(7 xogtѬ3 c>﷗T&7qVC+/ Yqqs,2n:޽;>$_@];o6YsU#[iWvW9^`% 77')c ?7pfE+jbNwq'& ~J*> T:Pg &[</h@|w,s[~&d?J-%x 7gƕ}bÌgjW1S{ł>Szm5I%_mLm'U{ ؖ/}ĩf'-٨4PeNʈ`f % ~df1l.0kIoƻrAfO`Cxik7A:ʺ-T3MT9#@i٣)!`: Sg6=$AK a;[٘ID|Y؀1]ԑ a!SHGM^ c(s7|e܎VhΧwDZę)$en&u:+2b|K2'~#r9cX4ض>B7yOkP$kN'c%ŧvĀ,#:~z &H * .DmJ}dOà}}Hʓ G &W1ɑ*0rjw@6b(SET?|qC#WCbߓp٪L9:4GRB}LȌ>!Msef*˄YW4QY$jvrR=H ۑFd/IzbRb)*{`!8S__փNôl c8} ?:vϡd60AiH 񜤳zl̩wEKBϸ@g6Ki<-ŇMe|SMֹWx=@H;B ~ի*ZmB!Vi;WQe(>6?ʆY)B dS1FWbnϽ۾ 8ܙ|lL1ZY.?Mn盁ˆq&̶O:ۗyvg9%f?|)7nz v[.yZbP!噀z ]cr]cvԁb SeNp`xQ p&(^y U!;OhufF2NuOC{BH2!sVoY&BוvzۓRx11&?RS0;5($D1]EQu-I*JB.6Mvl[,VH\‰@ 6H˨\! häW2Of \ͣ]NZ2hFz{^=`FԄP)3v%`i"y0JhOW.4/ @MS7q  5c8.v[+zzNܨֵsњǥB .  J=,;Avi[f G/5KM M>f]%bPձZV XU^:zU?ό+S^RZqL=Tvz!% v!}:ZȃMهEAZuUO n 7 hOxZ|&z"Y=1ESbS(Rzlrw51Ī Nia 5x8ʗя\ Iڒ~XpMzGc̺͍ 6 t!A@%V@S%E++hdU%-$Ͷx9K҂HЦsʒq3ƐllF:6pX-Ͽ @F\笐TӍQj_Jнx&OꅦMZ6YtVO1p8̓N'78`- oݷ)<(R٢YRE^X쫍6@%UKsa6hV8LLDl' Qa7 ATjd R%2H\lgR:?`|zTQU`pS:[nAQoܱ?>$5>I{fD2D;vވdjT.x6T C{i,>Hl+ GR%+Tl}U)Xvr~{O:;^uTZ+@FR-ҵ w*LsP^YA(Ý%Ci‰91iWCk3M fp*N~s,˜~3ʐ(4s%}A3hHgA R9EgeMcKЂ:Bt!WnnxMp+trx`87v`浏}{=S6;ntPiB[A@t^Z5otd;TW,lMEN'D`MZimn_};`jNB0Y`7ѫ BG@`e h GS?ρ k,ZAQݸJbvrd7cSQA꣒ ֥7ѲWyD>X%f@8F[* pӌc0Q٣]gTn)ӬimuƢؘZi74rD벱`e\ـKxffdxS+ԅH9v|4 X"l/1(_v̖.M?Y>{٨ k%m:≩rO|8 ,eS~XE1_沚6Yj{ '&Ꞝa |9S I/sʶ&4r篰EW,oTeD:O2&-WtFϳRȃxdnaElWӯsy}PKk|el }tbXjE{3F4M);#^o~(0#EE~M :3xWDEwa,.Dʘvƽ-qnV:n:4~mKt "R'$ |@Yxk֟ΧWl]ڴ+q@"wĭ_Dwӎ<Я}2uMf'nٙ8o!YEi5cR)a}9Q:9piD jTXA[690/~7*JcH߱-P^ҬBD ;bk@i)pdpURʜ5+A,_n͚Ցg跢-CÖA]"(2W|-plq;a+/R_u,D&]y`YFI#FWjcFǰىz PVs' GFgYP# bVE^gk?Gw0.%fdm":!),`?J`OLÚWvWgվ$`}7D^yXd60yўaayoD|yꮌ@RZp89u 2 >ijQ- %٨\}άr 9M>ρ|j=R0<5R~)J1?E4j7/pȠU ?݃?Lbz  +:+E9&{uܠEܢ f .MA;QqXʎ T@9e#ӑ1M^BdYDk=m8 ߢMLE~B]EQ^d+eX%~:gU)jKJj_3AjM4 `E.CBjwH 9 kQ~Hrǐo|p`#4݀&>$-{q#hSXo 8o2fZt$0g}GS5orAEW]tE!|`1QId sI[xw=Ӑ^Q uviOkZ_qqڡABцeE1ɚURY+K0`b.!.PN-u{npi05db*opp꺡F{ӧ(C1¸?Vf9RtѼ4lY8i/dY_B-OiCn>Z $7LBUĶ.Na=,H4 ]$jd@) "D |␙A _xoM+IBRJMvnhTEF"l4dRe.,Je T$_=6v)=MZ?{ 323&h- TPT-T0/"=1VN->1X ^?@`Os;5*u= 5Yp?3c͙LOբK C}:@mON ]Yy V \bmmBx {EM-?A\/DW4}%Qz<9oi?k6$\֠MGb voj@BMU8'|i.kKAMICt|C}ίy|Glp(|liyې j5l=|…a^ҹ[݋ri"$~f ڼtƀ8&ڜ̌yZVKp\'4rdz2^FY#u=.x87?/]>h()ȏQJ\A{ol~5t*OR[7^֋;Ӿ!ɂ'tV)+PqŘ!ƻGc<%JFHqNT5;ޒjT5@KE|8ٟGN֋'{ӦT^Ly^a.ɳ{ BP%Uc=g CxYvm0y+wK#7|q5OWDg%z'ug=v< ~xQXZvP_m`]H@dP v8f@hX8̈D=xt*%Whv}cҹQ}X\&sYA Ͼ+zKˮ5A_k:!@^r:'yϼD<[N j.^$hP}H]HHLSd_ɢ~ cMOI@G;PZhx#qYhk$LSM*.-+h?Db_S8P5TvaQ_qb ^V [͌kZ-k~6`X VREĝfD( <'D#O缊hov+0x-6ySp)zXkoD{t2WNDO'>쾮w2k>˷,Ws0(6 Nؿg˳vHNAx+49g#wV'bU+݄~/ ߳՜.fqΉ9f2 fFphBuu"|]n14C MFP;~Wϡ]4٭?'Aw}_J,O ]7*dS*g #䷤@QlފJyF_2^ m2nϊ;r9 X2Ags ^-9 yO_duP`7$\u//XmtCDXdI}#efE¬>n;UFaT5✖Gވ J 痚ֱ߱sDY>뭜c;uQjѶ8楲r!W;oll`X]P@% ۟0Ӫ<Si7e84:(8Ƴx]p?ԶCVՊeOs tɸa f8lz3 vq4*(Rye16=M'G*±І߉ءӃ7#y. >sxlyiBA̺=lNHΖ npGGt1#{bAOvqqBc7*GƸ8)Yyq)~T hWXc׳GoY`SvZқ5 D'G$="M$0Xva%F O36;?߀nǪ@g-G۝ǐ4hV P8DKWPsQ@)ߨQ.m蜹0Ƥ?kZdDpO|hu&o[b[t PVS+USU7.1k>»m&{ͧ{q${5&W {$µ%?͔hRr~Uooo)l"DYҺUºkDdK*=ljPxӂMjm?=. J,s@8C+hwv2b!|Wi%zOάķd=#~OfO:U],u2;UBvdE|B5zdxJTh @xy;<l.w |Ww(8b"{Qi 2N=G;^ - >?:+cR,{ xPZ`u&q"M@s_}Zz9.u1 )hc֝9~wkcvH}( /L-7]EXDfc {L9K$-"cD,-iG~N[q7 6b"K*Si'j@r]yD?QTŁxf2e!:n^a׺oxW<Ig3I(AZ%Aұ˨ơ% w:'{9?s ?Ꭓ`Dv(k[)1s;['i<*w1&ݭ΂4`MdEHr +E`_en78|NocwEPs W_ieG4Hh V@d b*NT?á?24P+@ sӻ`.Zdbse+Q)Msy!J*x}P~_^umcm 1:A/xsAK@EٱLH0߫ C3J.A~XC@>GhcEQ.ͭ@J \Dbje=xz9Of:VrsYd8\0ܷwݨ!JCDHyTJS#;l WF<_{>ȡ0*IN(DӶ6~v|}LGLxxqzXXm<qUmehUfg8EHV+-κ@k4YSļkWœNzhM]r0f>0Zeȹkm'CϫnV"|\;5j%<=+.5%xh'2-mhŅũ^?qlyĬTwCOKڏR50d)p刋qP(','nuHjyI㸮{Aji-w'#l@̺KT O%k:M[@iC4)ԗ!+ C`ȣ&u wAvG/2:kDu9W5 J#ֈAkl`-c#ٌz\'yEvhi%#4$){5AN@JHN٢ouAW5nbys$U hH̭LLY_Mq9=5ddlQŭIg ʒ9F>dhպѶOj5 Dc3o%_A~A\ԉEy. "0T1=Z |Rw߾wS AᡎJ96bQu{;z3_cbWeXq πH GRI!7bU7_.5 `lD[jM텵z>I=W>&Sa5m}3:{+pc`* TT6Q3RpFpp΍*$.5S${0>wOd:Ū뿽\`*bZ h\oʒ3eOS =N-p4_wJgPTlLÑL4qo Ӄ`Ziȝ!C{E@ZoDmI{U5&k&I eBc*N./<m/5UC:w_O8ƈH& $6+e?t6)AR칟DA8qIK_wP=*J2v/,|ҨB2Sň\.{ i5K Ý2^Ȁ:Dv^O~f!dЏPՍ3^ͺ 9ܑsQjw,POA*mS# 9O1 ByC ot{ZԄ OR'ph+iLaр!"ɅW+ I;/ʉŅ5լĄ[È};ϊP}pą͎ pXb #NHVgXVgfX᭜[l恖}DیeI`ܜvXAo k~As1ʥ% ?cV*t3yDEO`ܥJcMlz3v.D?`K(B>A?W3T!c2IS#ܥz=zPo Ed.aҫM!?! , =9h#GEA,p uO;'HX45TՁFi`#1;')LdAQ\WTS('Ċ+Va= dZN)U9h2T2j3@$恑1pWG?;>4I awML ?'V<>SϋO|iuFһM7j& [ ^>CA4h &*7yC|g`zCp, bPa㿎Izu#?by_ݶ31xE~-YVd.nh[HTj* #;h bn+x> fP<9Mcaԡ/Pl6ғ_Lf#%zcmW~@YfsDc% =c҂Cqg ?H6߻F9@^Txm(nYOԷG8@ KfE56rl3%^YA2"bcz#+8h KgvHZx#9*&(O&yB q~E/#^ʙ,\1% 9H[8Tx=]nW(g7 SOhL:xoz ;k2s+|'ƥ^Q;!7ͯs7zOBQZGg-8ɁGG9##-ˌgT;lOjXÓpCƉ^pq"F ;OvY*;]:#^뢯@ hH0UQ*nt?  c޿Fۡ<4xSnvu><[-A}"  ]UZ25luCbՂ˫n;G%)"1:4ezSKd,_2&RW G^" S.@&tgwlmcW(`!n ܾ'"#vB@fXb؀5H4OkIK"$^J%C$-CjC[`NSU'ziWwVG@a"{\xZ [bel hؼrMN<s@|ZWH[Uw6 \,In%HS$r^>4ϙV :PW+hx*|5*T!6W!):)BţFɔt꾻CЍ'a uS}Y xde0/hxtrĎ |Y!ƕessgMCs$x cH{V|f9.IaI*2eg6fĸJ,'X3"Nsl<߯LM"1{L[+RT`4̅qĥ;w>6HrԨ ~cZ֯4eIcafa| oVW:D!n;D_t;'}?B99 Vh ӿBo9G4Atг9"zwhҊkE"V+#*KMxflZae1K5r~WOJ%cJn>bm#" RBrykZޥ60зaG_ .~慑A1B=&TW&W1cfܓ[B$D @{mŠ cy:2ɐ}Q 4KU5wjo $iT%i.!BN ooڵYNtr< !D笸6p%uMˁɞo+dtAM+e])W` "3FO;mI*#tOá84u<)pg\n[`ewyn>ιv qX*C[Ahlwp:GvYEdݶIaTjῼ uq$Ӆdݪs?y'H*=@u%\$FCKt,B ,03 4{]D vfIiOBcj^~[o!O1&ww/ X+LF0F•h>|Q-v/:`󵏸rm-nWV A8*W|hwS ({U?=DEfVbg֨W4dY!6}a:!R6Y^4Hя NVm 㮰\*vK t2#ǚh 3ص 9tC <9"AR4> 5Kn+ ͼ2Ap@_g|y2~lf D]apM%x_QJk;` P +9azO,38AEdJL6HGQ#) qp?KJ|=-k) _¢η᾽OƱ=dJL)\Ƈw2xn]){S%Ir`1ޢ9Dg߲!nAA\S2,"48iq~'/bC$[MߐrQYm2?帜+3L %b7,}qGgS!Î(sT))-ÈTZYƒvNNO@*ё[yqv=iv>r&)t?̔ &Y~"QtJ,'NtlCf*()2_$ř=]9[-0+gpOv{cbE(n}8 QC0` ɩ,ZQR-9~2/I!4QPQw4Mw=h{ucUxmh;Z]Zv3nc n#~1RgE8*}=(fŌq%@ҰZ25s&u2ܻ#'[ߏ-YUd?-}aS4|͓3XjcW]]J5aš:hy*)xLXén׬jcc_udDU#0 smb6y(+pkb5DpyGFe8tm;a`O_?e6~HksHHI`s@œ>T~@WG{:XkY&yI/_gI|Œ7ͣ->I~y]oz%uDܚGy‚x.VH|Wվ >Sŕu,LG{T5t`&/fAaL@L%Ї#:#)Ǡ7W$M/c! \U"}t[՗Mͼfޑک25+Yf0W5Q.B8̍:)_|Pq"pHsVԡ؞Y:D'kJ=Re$gW,05O|IG!rCȩRWcu,M< J1VX[220sdZ Br؉ޜ/4toxa? ?<@2 r{4`jiRVL^Ba0 |JWUޗ|]Vw{_7NX'' LSjG˒D[cZJy (b5^I BBw Vk#r"J "~Ud&W i8N:ʭ{1Lk\8Mwm̩.cNlw´U{a@YS>d57_0HՅ>QЌn5ED_crAX BdE#։A"RufyugKQu#TMv[)c6Pf։bF!P*a,1? 1=*X2Q${r0Ɍ]& z'!!*~1P? %2.HP%"\+eu_OQU7}!CJ9zA/hTt<B&WAR%bxS$"v2l)=xjrrFqLmv{JDl Ţ2YpG$/?RazؼH&A쉃{8bc.nDW/< )@z/LH}ؕ&0C,œ)M}QUM WE9mA(oY7/tؐVU-7u`˹:|f ? p෦YEHKݣu k6{8kqyqx˰zJcu7`}=^R9hހ mR3t h!0NHbG P'V{\Nl䙖Ŕz>Ń$ԯ*OGkkU?+U]ˡS?}&IH.+AV1g02I8OdU5_ Ӥ;fHȼZy@b{7DB$"pOVzxQjH*=H G%ܺރ2=p^pu[[ q#>8K/񳤠 G $P/ʆ2uoX1Uy Jond.[ͪaV7к19q ؿ z/JC+ݪ|(Pvk؝\pTB'U3j U91Mz7۬Sb]z[~hpˊH`E}o|)ПdpTܒh·Bx*9tֱBm6E:j:;R[BQLl .2,Y+mK|~H'ZL^^*j~ 92k(ٔ2Ue[$'&,{"0+5#x`h D 9~IdQ)OUA UƯg̴Lg ^BX>g,t.YZOKi(^`doA%DM%z(0[4t=uLXtot ͨ+^YX_$U/HN>_?Lݩ_ʯ@7 3wڌ4wì+8kVw:aVߵY ӂGN<ֺȏhb'b%Aްn 7!]Gn!"/OYvؕ=%M~pif0\D򚧱6/>ֺ 7 9l'yȰ XKy|{I ITvl"Ju>!m9>_+%3e)͍#jyOizVQz ]Ԃ\U›8!pKT> PC]c?%av+KC Ss-Z vWgdtZ86c3 5ۗ1<>S4UVM$&ԅ@N.O=@L4qN"f"~5ۜߵSb4lx}Kh՞/4*! +"$}cVT bl|o^]|&f-) q|GR:% \T3+Lݾ?@|/|YM=SZ!%IV3/$EضКs ,$ׇ@B_05c̫TudU[VƾJ^llj#tMs٤fϹV2ywŚhx$2,^lX\xK S \8n"3XOm%da=*b3(N:>+e`z̟K:孒Q.x-Mq(p-,T'}+u*<_\R<&MZc}|d.61?1e? ;[ Pհ!ğlnS~K ?l%QP-iT wYãFݻVVwRӽ5_bʤo |n,?1,gW*W+yiD1_zOiCWf0e֪fi5jń`]/,,>) xʒ;F7@ V+@y`V{|0N6 z8Gϧw'-̧\l»`9ä;ˤػB-['7W,mMYc_avyEc5J cz{]Z%=qex mFdZJYn_u3_qL k7S]}(6~i.Zq(zh;FeF|o]/0qt`&jJxBͩl#0$odPZXHUFZz^W7>>#8Č eVMjy yǟCj.gՠLcԎeAV0Ns2L1^ͤX3 B2JKװpVM:a_LsKzML3d-lx2ycb EAVޞvm%Fc0[+?z<Jz6sFEpV?hs5(9˸pj5|:J_'uM[Fn,CqeZz;A-n:vk'͗e //{DCGk+LC]͊٦V@ sl|תۧJV;t9 l~5T%Sq/ q:G@Gٶl§YG7"0_yۄ[_ƻr 9|҉B kr3d(U`1-$m%E/;xY 5 Zf9tNԠRZzv2|14z0HvεBDhtz 'Xc,ԟ4CB*oi ,>'WAv.RgU`\E?Y3/ui  ɵBLQ"wLqűm)6}ekI oӳ8; e808= ~z:855_ڈ2W ֞caƁ8Bցj e%]PjU)SF]p<}F+d,태 [eM`n\ҺSUkugSG^iJ(%ARmÒI a_\Vv5\S'1g3_ΰkC:X'~3O #pGch'7~A e*,LH '|ިowuvsK `CL 0\|Q.FEhQɐ Gw X nU>-aaeEBb<5.+<](-~fwQ[/rn;!~+o2˖ ,g}bIgQ^gcb"X#(գmx_bsTd^ :P ߸;]{2'A܋ pӞ8IXvf??/OW&/&]އ([K0 К m!;Y>$+|Ng9̜EW4*Zo+&cxb7k<3L="yK@֩:^ʚgybq*wJ2##f{hJB-%b 8gIg.ȫoeI쳕<$^io+y;ã_cKQr+tNMy'[a5=0N֌Ϋ(q"ZA!lg5ѲOa A'!r^0:9PQ,,VN.dV.8+l+N"{hw]젌fud`}T%*,4_$1L KcMKr<)OԚz%Ot]+^ݖ9^fO H$7=ǓnϮȯ62^oE\brJJؿzcN}e%;\孏b%< /+ٯxݏ)LO_Uq_YL՘C<$0ԴH\8G7YYʄdK?4Fԟw.5ۜˬx:[PJCz%EEvqP)n-(syDC1Hkz0YK@r47lo+^-:(jA\/x$6!*fN!s:# `6}q9Ĺd9ݫ[4C܌$Q--h(}UuG<)^'+ ى'w) @8q}X3νCOަ(!%.0kMApx. ]3b zmbəI9}S{PGg:&7Y4QI4xǦ4t{nyx>g#'0iܸ֭;]yThY\W)hlC+(E^޶:yR3LWkUT'YgQ4B7#vӴt5զ꿸 Utd# lO;sQ"/7tӽAu[7ch1d-#w kLơMH/X)_ ysIMQeŻPd}o&:Ol{P'jAmPQ:+" ف)^?uv@trb"^ mIh쏗CXeH<~d{*έ<6b6v ?m)_ȓ^{u/R+Q gGG=YeP0!=ܵ+~=nK\qOcK?H,+je' ~6vl6YPZ6؉[栜#mY*Ghڳq>/7myRq2GUMbFSDǥ`q  R?67Oi=k`mD=>Nw fټXh*DuNbgVpOPOy_uhMT0*%M~.slUJBs?vP0q&dQ}Rzţ g^ #SbY0g%0NޗjFx98"ϔ LԘ,0Rñ0?L)9! ]u) a&;^J&YSM :Acy@9ZȂ8uyR0g:O @z,R)S@>$2/%ebN1#f7Fƀ#@^;.J:_+Z 06%q9E%U _!ΛX-B9slN]_ $usukꐭ; O@mZ=ŵww䉔bwl.sC6}s}sx#)G|A`;Έj=)J6G9Β4W7Jzӱah-VQN-px*^0c" NoQP 8Q2 >b3u5G~ix.4h5sa~Kze N.Nԍ>5='i%\gtc58q,ÈF޶)^〈&[DUTMRζ#VjD;p4oe` dAuY$ݚw޼ d{,|%%ߝ7D fYhI%8kZF}fά*yix;fGl#~m@"wum aң2I}Q NO>ʓM|_u?V-L VdiΙC4o#K ś?7> 5yRFSFcħ4_Ҷl0^?klÂ}U-ʫyS C (1}[Is9'IOI%a%sIPD4h?oh'NG}|z@.tM<@DYރq!7R}0X.KTj?']׸E_vgZwF fw#h*upYDi4Ә]??߄uK533h*[Z@7p[̛g2 Cwcqm^gˡ|7'27!Kp -L^c9e`)6Z>^?G{T~Tp(i')`ڡŠGSwaU҃ d1O\ KhhmָRQUm_Mێ\6и)UKyrl+H,-:gS^>[ xe L`QwE,F!ʟ|kiݕҢ>퀊kٻZS|'8>o6%:!*7^kXN^3M|? '/.ur:Z5I8MtSxQ|dREݔ] yڡCW!/l'C7^'+nP͐!T˜Sr]ҪL()pyr{|C.3vHA[3, qJʛ+ހ =:}>iB;JapKBYDwjH֐{G$ak j$Z*w b飪 S/,e!}9b1wXZW~ׅ7|-s:X[ ptm9QS蔨K= }`L8tGݡh:®wsלՙHa{Dr^(ӻpW7☢(clp_Cxqi#LoE,BG9RB()d3[dƘu314C11 "Y$mu =%}뫻vG\g@CMˑggs vu!=2<wY˞d=} J|_땦0{Q֓w|WeS|q41Ej -OQ^QjHzrG!)ۯOp=w)1$w= Dz$pM% W@&+8'H9Gij3a@/!k噞sNbSgNLz`$m|G>0GbsNJ⚅TiĂ&®,%'%)qv > 47UG(^.-GcǬd(dÑ Fms_g#J7ЌPl{`G1DZpVgnNЪ sLT)K +dg.&?uz/ f J[-ر wf. 6ex1B@2,}O~^^E Sg!af˙Jz&Td}YP`I[ 1#@RkBWjW)DE?zwHH(:i5To,>=Ϥ[Px)+N:oDy nŹJR 򯔃-ﾱWxFْσ6b_R Z"P#TlQ_\\iPu#LAo^N4TpAFzDm<,\[OV6 76y"g[‡dc5 6 e-/ZFq=a21(cYl&QNOtaB?32:m<$,\ru D$^VQ@픭A jGNɬQ'' A&e8Tq!vuė]Ձf#L#L`aH2k Hkxf)yDAbC\[=G"[wB^g%֭$C]*փA#!B̬m].aea8؈ӟ &aJb V Kh?Mђ \t-A,69R j$yxXQFI[0N{mS;r!aq7K4^F暹u[0) no)ؿP, y*VbXj;Xx .@=#")g9#\4lw'b؜zd^jx;fBgwM=:h_WR,P R#b8S눳,\»(CXs.9ODu)%'gùIfBZdavZ=:`E^Д/z{W.a \ojS|9s7` ?L@Ut--&W\%um=8 `+=v̨~EXؿ_ɘüwLk `-YE+nan¬.Ĵ]>7.Jٲ  R~~~ǿ|@m}H3J =mO?rk*7zۑGYh#j}ozWMs\5tLkF1޳ \.p$wHpJDw_QFoBwsv m*w5yL"۰l690k^{^G% k2M.Q rCJ0.vB`t0*l4:[Qz=p6Fs s'Xue&Ӧd%4Whc{o֊L)a-Rid67L T%^m`dwVYv *ENɍ W@Dex7g)Y8tuݒ&r0HN:LYD]ޒ@h1h '*hipox M>49ߚԍǦ,=`-`X@^z 8k#ɋ (vWþU3;4ȏXtȟC[ҟ'SyP҆C94dc "m޷A&a1؇PzXsReN+o#ᵑA[:*[+ֶjqu^ɫma;jq0'qzr䃖ۧ _{WP3339̴s_Fy#v.y[*kCge񕻴#N E'$;4y ?'Xr ܤ)Ź+qu"[IջEl䝴QLyK_'}zD_B.^&[18N"&Oκ RŪc k>x_;\mT΂So3wz CZ>EzvC 쾱Xӎ"5Ih-fb̦qT .P W7s9Z7$}y"ˋP>h248%eДWR PF.W s`ʰDQcۅX'ہe {^~_>:SjL:X>86Fe7qo N d_}4,lVNkT%jßx/\?7mH–.dnҊ*Gp JcՒ? C*wD׌CcjE'' ls#ˈk'ys4;Q l & U&$gY1Lv;^ o$G4SAHGF&9cm<=5?WZFjc+`֘168