usbguard-1.1.2-150400.3.3.1<>,dBw'p9|_Qr^` TȰ<78PbQQS׼!3 AEh:&Sjl,QrIJ4+p~hI!g 2aX=Ty$>CAS9mAvC^IJ\9Eq/C? z#wFTt?Tdd   N1Rc yE v P      DHl''s'(89,:=I=>IE?IM@IUFI]GItHIIJDXJ`YJl\J]K^LbN1cNdO]eObfOelOguO|vO wRxSySl&zTTTTT`Cusbguard1.1.2150400.3.3.1A tool for implementing USB device usage policyThe USBGuard software framework helps to protect your computer against rogue USB devices by implementing basic whitelisting/blacklisting capabilities based on USB device attributes.dBw'mourvedreW#SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttps://usbguard.github.iolinuxppc64le if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in usbguard.service usbguard-dbus.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in usbguard.service usbguard-dbus.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable usbguard.service usbguard-dbus.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop usbguard.service usbguard-dbus.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in usbguard.service usbguard-dbus.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart usbguard.service usbguard-dbus.service ) || : fi fimX8 .%skKF + +"AA큀큤A큤A큤AA큤AdBwdBwdBw[.dBvdBwdBw&dBw&dBw&c&dBvc&dBw&c.ec&dBw&c&dBvdBvdBvdBvc&dBwdBwc&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-1.1.2-150400.3.3.1.src.rpmconfig(usbguard)usbguardusbguard(ppc-64) @@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(usbguard)libaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcap-ng.so.0()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libpolkit-gobject-1.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libseccomp.so.2()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.5)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.14)(64bit)libstdc++.so.6(GLIBCXX_3.4.18)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.26)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libusbguard.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.1.2-150400.3.3.13.0.4-14.6.0-14.0-15.2-14.14.3d"cbL/@b1@b bbs@a __w@_^@^2@]5@]5@\9\=@[[@[@[FY@VՄ@V@rfrohl@suse.comrfrohl@suse.comdimstar@opensuse.orgrfrohl@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.compgajdos@suse.comrfrohl@suse.comrfrohl@suse.comstefan.bruens@rwth-aachen.derfrohl@suse.commeissner@suse.comchristophe@krop.frrfrohl@suse.comjengelh@inai.derfrohl@suse.comrfrohl@suse.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- Fix build failure with gcc13, add build_gcc13.patch.- update to 1.1.2 * Fixed - Polkit: Always allow getParameter/listDevices/listRules in active sessions - D-Bus: Send reply on auth failure - Polkit: Unreference PolkitAuthorizationResult and PolkitAuthority structs if needed- When running autoreconf, do it complete so that it does not trip over different versions of libtool being used.- update to 1.1.1 * Fixed/Changed - Use authentication instead of authentification - Restore support for access control filenames without a group- Enable dbus support (bsc#1196621, jsc#PED-3789).- Fix build for Leap and SLE by using newer gcc version- update to 1.1.0 * Added - Started building with C++17 - Tree-like list-devices output - Added CAP_AUDIT_WRITE capability to service file - Added support for lower OpenSSL versions prior to 1.1.0 - Added a new signal: DevicePolicyApplied * Fixed/Changed - Moved PIDFile from /var/run to /run - Fixed linker isssues with disable-static - Enhanced bash-completion script - Make username/group checking consistent with useradd manual page definition (with addition of capital letters) - Fixed multiple IPC related bugs - Fixed race condition when accessing port/connect_type for USB devices - Using bundled catch v2.13.8 - Using bundled PEGTL v3.2.5 - Fixed usbguard-rule-parser file opening - CVE-2019-25058: Fix unauthorized access via D-Bus (boo#1196460) - remove usbguard.service.in.patch applied upstream- move usbguard.pid from /var/run to /run added usbguard.service.in.patch- update to 1.0.0 * Added openssl support * Starting with libtool versioning * Added interface for IPC permission query * Introduced partial rule concept fo CLI * Added WithConnectType for ldap rule * Daemon does not apply the policy when "change" action event appears anymore * IPCClientPrivate@disconnect is thread safe * Enforced loading of files from .d/ direcory in alfabetical order * Improved CLI behaviour to be consistent * Clarified rule's label documentation- drop useless build dependency on aspell (aspell is going to be removed from tumbleweed)- disable system call filtering in systemd service file for Leap 15.X (boo#1173750) * daemon wont start on Leap otherwise- update to 0.7.8 + Fixed segfaults with rules.d feature - update to 0.7.7 + Added readwritepath to service file + Added match-all keyword to rules language + Added rules.d feature: daemon can load multiple rule files from rules.d/ + Included with-connect-type in dbus signal + Fixed sigwaitinfo handling + Fixed possible data corruption on stack with appendRule via dbus + Fixed ENOBUFS errno handling on netlink socket: daemon can survive and wait until socket is readable again + Dropped unused PIDFile from service file + Dropped deprecated dbus-glib dependency- update to 0.7.6 + Added missing options in manpage usbguard-daemon(8) + Extended the functionality of allow/block/reject commands The command can handle rule as a param and not only its ID e.g. in case of allow, command will allow each device that matches provided rule + Added debug info for malformed descriptors + Changed default backend to uevent + Fixed handling of add uevents during scanning Now we are sure that the enumeration is completed before processing any uevent we are trying to avoid a race where the kernel is still enumerating the devices and send the uevent while the parent is being authorised + Silenced 'bind' and 'unbind' uevents - Remove PEGTL build dependency, the package already uses the bundled version, and there is hardly any reason to unbundle a template (header only) library. - Remove Qt5 build dependencies, Qt applet is a separate package. - Use pkgconfig(udev) instead of udev-devel to allow shortcut via udev-mini.- update to 0.7.5 - Added daemon configuration option HidePII - Added check to avoid conflict between ASAN and TSAN - Added daemon configuration option for authorized_default - Added devpath option to generate-policy - Added # line comments to the rule grammar - Added ImplicitPolicyTarget to get/set parameter methods - Added option to filter rules by label when listing - Added the label attribute to rule - Added PropertyParameterChanged signal - Added support for portX/connect_type attribute - Added temporary option to append-rule - Added versioning to DBus service - Added optional LDAP support - Fixed invalid return value in Rule::Attribute::setSolveEqualsOrdered - Fixed KeyValueParser to validate keys only when known names are set - Fixed uninitialized variables found by coverity - Fixes and cleanups based on LGTM.com report - Hardened systemd service - Rename ListRules parameter 'query' to 'label' - Skip empty lines in usbguard-rule-parser - The proof-of-concept Qt applet was removed. It is going to be maintained in a simplified form as a separate project. Removed: usbguard-applet-qt_desktop_menu_categories.patch Modified: usbguard-pthread.patch - Updated usbguard.keyring to add new gpg key for upstream: 5A2EC3932A983910- link against libpthread to make it build (bsc#1141377) - added usbguard-pthread.patch- Run spec-cleaner - Add the missing systemd build requirement.- use upstream usbguard.service instead of hardcoded version (bsc#1120969)- Fix RPM groups. Avoid pointless shelling out to /bin/rm.- changed zsh completion location - added rpmlint for zero size rules.conf- added signature verification of tarball - add usbguard-0.7.4.tar.gz.sig - add usbguard.keyring- update to 0.7.4 - Changed Fixed conditional manual page generation & installation - update to 0.7.3 - Changed usbguard-daemon will now exit with an error if it fails to open a logging file or audit event file. Modified the present device enumeration algorithm to be more reliable. Enumeration timeouts won't cause usbguard-daemon process to exit anymore. - Added umockdev based device manager capable of simulating devices based on umockdev-record files. - update to 0.7.2 - Changed Fixed memory leaks in usbguard::Hash class. Fixed file descriptor leaks in usbguard::SysFSDevice class. Skip audit backend logging when no backend was set. - Added Added zsh completion & other scripts to the distribution tarball. - update to 0.7.1 - Added CLI: usbguard watch command now includes an -e option to run an executable for every received event. Event data are passed to the executable via environment variables. usbguard-daemon: added "-K" option which can disable logging to console. Added zsh autocompletion support. usbguard-daemon: added "-f" option which enabled double-fork daemonization procedure. Added AuditBackend usbguard-daemon configuration option for selecting audit log backend. Linux Audit support via new LinuxAudit backend. Added missing RuleCondition.hpp header file to the public API headers. - Changed Qt Applet: disabled session management usbguard-daemon console logging output is enabled by default now. Previously, the -k option had to be passed to enable the output. Replaced --enable-maintainer-mode configure option with --enable-full-test-suite option. When the new option is not used during the configure phase, only a basic set of test is run during the make check phase. usbguard-daemon now opens configuration in read-only mode Fixed UEventDeviceManager to work with Linux Kernel >= 4.13 Refactored audit logging to support different audit log backends Made the configuration parser strict. Unknown directives and wrong syntax will cause an error. - Added usbguard-applet-qt package to allow easier user interaction - Added usbguard-applet-qt_desktop_menu_categories.patch to fix category - Updated usbguard-daemon.conf to upstream version - Removed obsolte patch usbguard-fixes.patch - Added rules.conf, fixing bsc#1071076- updated to 0.7.0 - Added Added InsertedDevicePolicy configuration option to control the policy method for inserted devices. Added RestoreControllerDeviceState configuration option. Added DeviceManagerBackend configuration option. This option can be used to select from several device manager backend implementations. Implemented an uevent based device manager backend. Added setParameter, getParameter IPC (incl. D-Bus) methods. Added set-parameter, get-parameter CLI subcommands. Qt Applet: Added Spanish (es_AR) translation. Create empty rules.conf file at install time (make install). Support for numeric UID/GID values in IPCAllowedUsers and IPCAllowedGroups settings. If bash completion support is detected at configure time, install the bash completion script during make install. Added new configuration setting: IPCAccessControlFiles. IPC access is now configurable down to a section and privilege level per user and/or group. Added add-user, remove-user usbuard CLI subcommands for creating, removing IPC access control files. Added AuditFilePath configuration option for setting the location of the USBGuard audit events log file path. If set, the usbguard-daemon will log policy and device related actions and whether they succeeded or not. - Removed Removed UDev based device manager backend and UDev related dependencies. Removed UDev development files/API dependecy - Changed Reset Linux root hub bcdDevice value before updating device hash. This is a backwards incompatible change because it changes how the device hash is computed for Linux root hub devices. Refactored low-level USB device handling into SysFSDevice class which represents a device in the /sys filesystem (sysfs). Removed usage of readdir_r because it's obsolete. Replaced with readdir with the assumption that its usage is thread-safe if the directory handle passed to it is not shared between threads. Extended test suite with use case tests. Install the usbguard-daemon configuration and policy file with strict file permissions to prevent policy leaks. Fixed several memory leaks. Don't pre-resolve user and group names in IPCAllowedUsers and IPCAllowedGroups settings. Instead, resolve the name during the IPC authentication phase. - Updated to 0.6.2 Wait for disconnect in IPCClient dtor if needed Qt Applet: Fixed loading of decision method and default decision settings - Updated to 0.6.1 - Changed Refactored logging subsystem Fixed handling of IPC disconnect in the IPCClient class Qt Applet: Fixed handling of main window minimization and maximization Fixed building on architectures that don't provide required atomic operations. The libatomic emulation library will be used in such cases. Fixed several typos in the documentation - Added Implemented a simple internal logger Access to the logger via public API Improved logging coverage. Logging output can be enabled either via CLI options or by setting the USBGUARD_DEBUG environment variable to 1. Qt Applet: UI translation support. Qt Applet: Czech (cs_CZ) translation - Removed Removed spdlog dependency - .... ommitted changes from 0.5* series ..- split off a library package libusbguard0- a daemon and framework and tools to guard against bad usb devices./bin/sh/bin/sh/bin/sh/bin/shmourvedre 1682077479 1.1.2-150400.3.3.11.1.2-150400.3.3.11.1.2-150400.3.3.1 usbguardIPCAccessControl.drules.confusbguard-daemon.confusbguard-dbus.serviceusbguard.servicercusbguardusbguard-daemonusbguard-dbususbguardorg.usbguard1.serviceorg.usbguard1.confusbguardCHANGELOG.mdREADME.adocusbguardLICENSEusbguard-daemon.conf.5.gzusbguard-rules.conf.5.gzusbguard-daemon.8.gzusbguard-dbus.8.gzorg.usbguard1.policyzshsite-functions_usbguardusbguard/etc//etc/usbguard//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/usbguard//usr/share/licenses//usr/share/licenses/usbguard//usr/share/man/man5//usr/share/man/man8//usr/share/polkit-1/actions//usr/share//usr/share/zsh//usr/share/zsh/site-functions//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28685/SUSE_SLE-15-SP4_Update/21667a367ffcf1b8d58e1cbe6834b840-usbguard.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linuxdirectoryemptyASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=2769b97f95fbf8e4f36b012d61df1918f35db36d, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=59743dbbb950bac09e6be9b8b7acada3fde6c98b, for GNU/Linux 3.10.0, strippedXML 1.0 document, ASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R RRRRRRRRRRRRRRRRRRRR RR RRRRRRRRRR R R RR R䨕p^i*K utf-81de4382946defaa06c9719638410ac0b5d76067e9abf3dddca5b4d811b5a51a8?7zXZ !t/A)Q]"k%rG4JZ4 ,X vPWQ´6y[JѨջ9L|]DMX@Q:ò?w=W =zB ~ޢ'ZOFj }ڋ#9bGQx_v,$ݣMhY,ڪg8i "3mEDO%=%k< JQe+f`H8CaM0T?~ ^]9k<ΫCp?] ٜX?V2‹&9=%;4kL9JIh-Xڀeyf{\XZ}!d,qMFHS#klL6.W,}oAX 3Q.-}K!}Y/C;mE 尮w(z8rm2w!]W!@zM;*Dyz(7j[6Y"ZIHWu聻ܑi?onݳY߳^!KO$HJVtƚD  >#pBI@!>O|6Apƒ8X/wg&t-#˻/_ BX W^Bzha@:l 7X:1ph@U+n^6'\}YeD9vvjz' Q6ލaMeG)U.3)t^$Xh>SYKCTݝ_Vz6uyUی_)Lm̵½!MՖ㭍&ܚ__YԔ}D$}?`CD 7 GwƄf3?'y|:vX f緦!s~:ySYP'@"t!ODdkJG8_OFsՑЏ7FQ%"w KڃżVmЃv@+/ŌQ=u0٫~d*Nc16OSJ#hLcwN,e ,ꏬpe7Jc%?\cB>ѧE'͹rK Ê551%0RohvyN@-5c}x8@8 UY CʄE4k2۠cg3*LڴiPӌ< 0P%DA^7+u1Ț+w v-f:k2(d㜌1`J՟hd"/)+n`?LͭpԦK,!2I$Nj?%@Kx*Tve$dh;Nu6uFg2;:EKXy&3:SԠVڠzY 5.,r =)cL@" 2Tpy=O+瑁 'Rp[j:JP^7pZs,vǽ% 6.3C N'b { +cd%w޴zr:F҈*xtXT$g4Se^k)퓼h'/<´|n 1݂BTCLיYYc.Rx)l< ;ML4N~b2 n5gf .B,BЅygE50 tAC# ӎM}jnW$^UcAS,x,t8q4!:#;,"Vvκ^`eBuhbED#gOP8\꽌>6Ji/9!sL݇ej02Kke6ts~](J5W/ačVp>wl%*Dn(rGN]FhIJ-@y4;:٠ >:̕&BècK8s%IHt4'n4i jt꒍ J?ds,iN 5s+XX4.E.k88_(PBC a"6 YD)7d ПOD-^w$e {FIdpt+˜^WxJ3TDwT}ì/Zmfl=#SK]^\8؉{;t%=2R04Se^]0zBSG!({6ĻL^ՅcKE ih0.kiůh PYPgSs5@p/T}MA/<> O؆FJ?M?dvd{ \8cGW-qKlr\ G{bI< &nL37:*I2YA-0H>cY;e15kCo.XBP VPaY[ǭvycH86bmB{kLKrg g f{q醍lhk DPJG+TJ`߶)Q[}a`m{;B[V}wb:^"Z ,@wqH'%0ԅr%ZraZ~߀ t>0C_RpWidɮgz#+Ns2MtMJjzuc in yMDox63ouiWgntVnz[:W]R>F\RgܪW@ʽFRL?o};~eU-A֖eĬFIhꞒ^߃ɝaAt۹:A Y2 rBĚOR8cm]FmbjO~O@K"(AȩE F|Ah:ݝӎP8K s!,C;e?M8~61njIuš7$ @H:%< w߮BE]S7Kk-'ޒB|JJ"b)|qm\$b u=pbV6`:+T([D  `,;uB浒+s9 D΁3ZT9R**SMdMJz=4眓 P/\MC9`;*׊@ShkR 0bXcuӏ!H<>fқ@YO$&II&}vQn ˱skSZ}hAɴciԎη~,[_1qy KMFϛ\4c rY߽D}eP<1 |W^qEu BڦD~OU:-LE/36X9:AC&]Ԝsk<@ȌN _?epbFrʮOVlZtjbd!ܦE!Qj39R˜6.ﳤ^glJ1ȟHa~~'MҲ1^[8Rc%yl]_sc#YGh켵r')o/RS 4+[ʨV@##Đbcm<|?IGf•MX6qG/]eDJɓqRM.C==}"Cܻ|J$rL]7XL#$hh/IH S=⛸ FYfze7˱5G ['QY-SqA1TqD _8W+Q8y{JF-KXc##VvnzW))礲@K-P$,xl@OD*cr?, (UrkF-$S*jʊYLW8ͿK60Epy޲l'ypp-uj9`>}`5H% w+R z ջZRхVo+3E}A–R9bU_fa&xs0Ih|8x75a"~A8Oum^s^u)ciنC j,:3VΣ4s޴??2!&vى>˓"$D(֘6Q.(z^+6 "ZS*Oa~}d6EY?9)ӹ%GwAc:4[kN (M`G[Dkj \ I9l&, v(eKEJz;'JzU/XdGYmĵ]r=%MvOdW9 gV9LSZŹ"OI=_H])^*$:Ep!nzfٍcܹhˁ.9o]嚠[MaVq@s'Škad:? 2g8e%yp"&KnuѢCݗͪT _|z#}XcM  >2$t=V dqTcBkq%fF[߅ 0N4_2ic2ot4sFbywUƆ@:]$u2i hד]8mi?Q@e}NBs.[fCZ>js@3w"։.o>9E) im=FzEc>v2qtN@c*b&Ϟx4gޭ-qFyBfB/ %<I@Rx6V:W`@3P.Ϡ -s5F*{11@).+t^Z8V{53mxۖﰰGon1qşƄ9h&6ME/KzD)/=[R1z ꩳBcޥ*}EɺLm&3egB`>n1D]JRXt6 PzКR}&K"n?KA:/gi GJ/*5 ҟڣ}]0.]ZmU6,lDgw^Y %`WYC KQ~_Y%Y85X"4*`mhrL~)bAI8"ҿ8I=ry*'YK+FW%H*r.Zv =ņP|ҭhHau[ATfs*q8X&bl7M8 F<<^2IVoh@t6~!\3W;@$T[Cԕi<|])Ihc$:\ϠzE`d#Kxo#~+?:0?RTupd5{5HN,v嚱!4 ?H2k/n}f_ ?>j`;08$)'迂%O13ߌ?1ˆ+Kᗫ̨- =U5ڋn^E,>w;YBj29]^'4 {s#trToC]/rߘFPwOVXm ƫ) I+Ŋx/5UGGkb{1 ;&prX"wBd(2O֤%ϗG"X8 k7K9cH+{3[G@N1\AA ; |>0qpVBL3mMTU*Zd涆TuTàG*TC@e u : w9̯FT{\3OMU T@8;nd5ʻ4KΉ@+5s0`eS;*V5,QFF$Ĺ wC#^^`#?L*Nz~VfL;ogEpOAfbb= 0PӦ%0<[6#L^"'.˟0=a <;vӅ͂ݮyŢ(j _sQfӿ Io82*`f;s=RM',R`Fڀ\-2O~KBb8C ^3s'^k+,'k,.:x ,N/\zm;=ҹmrO6$ C TcƾtX~uɃJ NRoJLu=CJ0ոaKE$&HKW;ţa{3firՄ-©MPpƅ*p~_VZǽ9dPO8߱Ú"qCK`9`,I+dHрb@?%X3}\ޠNrJP@J6[H՛+MWrTнhr:cs< `>#vڶKg5VHOR)r?n+dZǻ]5ݚU˪(M_vq7T׾)78Z m-a_72U$_=Iq .t`!BʌO/"7aYFv`~;;_lUftXV+XWc.25±%#/?qT_]Xaj2<w!^lxf;[8CBM^3Օu@uS1 y`@W2 fV˘UD{[gƦhvnŽ=^Qp"+. O^p^6^VA\u7F:nnbzK/t_< ~x4y cL`ݔ k-dlݨ>I.akaȪvaE.u ^22~$`oQxtsejMVޙ ttW*- q:j '<'Ujpق~ѸEM\5\lLDs> xaǦ4Zqc3zxdԽtn&ӰF3O ÃDDٚNJЉKSn6FVi)l\Nn.dşku# Mg3){c\gVXϼ&9 BN61|!UϕK؟_3$^_<~z)'I! w[QHӰ9\Du bHX9I5XX?' ֛gxO퓓HZ"@ZS8`)T?E?AHX;axN"1)(D'^_c!{C7oFm7w,rul?DMVE0_7\QsdA7"F\SjV4l^M*dUc8; DKʨvR(CzlAtό'@Ӹ? ~nR 0;'IwEl=8/ w(qu!ͯ6tOu# S}tQ]:U#Ɏ,Y iʠF7|}\_"N#&<¡Bw E\Vl)m C~MO8`,~Z[aɁݭ'm O:ơ r.Д䱐XI[( +}(6  8#[dzYa46cOЄZB nGJ#N˶N1H:IEpԮ/#"ME'Ǖg&P/k߆$4R?ȏHntkn[zQ$@Q [ l. @}.bMHv~dL`mF'nFb05qIF3ʘk=]0d"V#o1i'.'PoVu<^mI'qr jݽ3t/o;>LiE6K,_SW&\x) @ @\" DӋ p$3LmKa%_:1mOמ^;6U7<_˅)UJ0bϦ-65U)}(|˃H?`fLkwKaCJ"=p-P9I9$3%ܱt\^Co-̓!u2?5OϽ]UmzmWTzo(:#h>Pm&B|AbٱdkPo1[$NѬ$I/QT_m,xn~.%J,z :m2%WGda<><;h=񀇩C)Fq B-GB8a$kf*PdQ$~0gPM|#xP2z?_?i o(d \tWJ꩑fO= FezQ:sSvԽ 2|ma{*0evF3,ʥj9-0; .g)RɁ? AQpsMtOIHL3F3&\ǎEX|ω8&&nFKs!4ѿMϡ9n'd⹡olK0Y{= mYbJg-L$'iMH 2-訉ql =͝ fP 1{Y GL҄Cd4S 3èM2=鼪cpݵ~K ;|4ey:| qB4);YL*~Z+i;^jv^9T{2s ۈ*&Xv۷.P'[)HAjyX 5`?XDM-a4ݜp5VXFsVP?*ph;YmHWRѴ=Y7%Xe2&8i-Ӛ}F7"z9",_yMC$dF% 'B,Et[G@O_h0r]m'0? -x7.H*OUBÃcmK8:y  RJPP ] g)w/< ̍+gMeP1pnfh[C4"Ed4$SZ`;7 p/kޖ-seUwc6 & q>q!̻y~7R䷷H_QUg:tcԘ1/ɬ6>ȅXhVkG,;X"YҾ:)'HEx]@yR7>ޜlx=U&CxzXфd/~=^(԰ɚ؊XF!["$x%fN(Y{IQI )<> “ `QyD4nÕ nѴi1s_A :𜛃APϬbEg;lj[Y4Q}|Q vt *W1 DF_>=/$Ys*6jcEx(ep0C$WQ>二&qFlNixVd5_ Cu۝F 1Zu3(m֡#GGqb9"¤v3qq'%PewAzhV"۹ !JZQUBud+DIE lfw\P  XUQVU5gۓg㑆Š 94@ZB6Q9߉>;Vpt? 5XF u?"Ho9M5Cf=cwEBGgE7l^/YL2 0}l)ෂBks: l4+(kU>(~aڵDez<ut^^fgW3iء>t!R_~fd9N`YTU?WcƎuWʔ[b(~sba& U'*ɽFk|uEd[9UqO>k!Kyq"S$ b MqȌnumucaih?AHx;t#}e-›!ecy#;֘7іE*qm, 9asoA'6Hs6w\`$&Y.(s;άAI2g,i$OBg&,uX|ynDe,7^1"sa< ;WMwz }%p#-x Oe2t\nX8\s$ |+ ǯXVG|0w7("AcB8X?d:WN#"$`P)nxݖ TH ~gc[gf ĮqGSP/#qҝABRVWb g"wrKdߠjuD/{C' @9ɧɢTG!{xDlvn+DP}YHyv?;X՛7ޗ^/Ŀp^FoYfz" :qMRM_]*iI#60czcVbnJo$e9^ th*=Ŭt[],H[?9 O@Qsi@F.Q( c;ј|1_mʢA=?E ٗ#?dsv7=O 9VT&^G$v^Ǻ)ɽz+Pn6<_Y |^71U~Bz3W.B6ot[ЛU6灰[*c)᪤Z+VQ텞M)@T )b\epx-NT WQtPkڊIT~lun?s&p\h*s=K&,fcC> 5fYaw,(S]ӎl7mih}uxALMKn'mtߓZ@vF[ x8u͒Xo#JCѽoͧ}1\Kx~A>Ae$[.}; 6G+:mS/N`ɩ_4Å>mb< qdwbrv5rG2\i7}-BOKMp_ /XG3pO0BG%~VcCK8 ®{f3n;͝<\'DyG {enc}4>c9ިm\UDf7Ϊ]݋l4lW!?q&wmZ+z@qNf?ގJ;1i<׮lɮ2JZtWF*c;{$_8 ^O/ԆPDfKJ\aoұaHA^~ȤXٕ?5۽ FR _ \ߜ0:.?`J"4:5sB7kWM~b#Ou6Y䍂TMGMhРHv6B-K pv m6C:If(@;wìP5G8;ʆ(SfE~̌g(q9pz. EjLsyoƕeI(1NxV3ǘuG =8Gu q ex 湡n^N0oɡ(]ntAB !͈FEPR ["Vܹǰ\=Wؘ MIJF=ǀ e Koگ)òAS䙅#Bd:V]*7YTjȱNZS"/sSL`iy=8E iwyZ'Lm7,%^5JPw~J׎/mTʴ-T7k,w\ q?Nޜ鞎O. efJ4|i"3A =֪p_Meu$͵`CW? ԩ4v݈2VV0Ȕ~;whͦ=tv㖪͍ZOCg;~&_!åfg*<xVLsT Zdj=F[(.툺3iJ_9;o76V[rsaw~!9nU0*5:< w&9ʅ?5|uI`y-G\ugޅ29;NHT(Qf%2ҎXmL˨}y|&iqYF[oP:gml.wA>rP[| ī|9\5lWz3z4f>$;K,e^ PD_h.sB6\+$|WPavU_'3$폇6鮴PTiK%[E>wp5 @@D1 ܨt52D߇"zn7o Al)24V $- GnYp8Eb#U~ ƵY7+ HgSS0'g\-@-}OMarJl눺^nȥ:c O-%39府3Euf.K=OE:NŶaJ`ڧzЦʁ8XEf =C$Q@54~ğڡ;J嘰uĆXTcMRH6כ-̞8˂w@+i<+ Ä2*l ziϱ -p}dY)Lέ.6YfQp:37gǖvcW{Ľ!S۵ԥtrXXho!W좙\k\or2.`\Bbk$j3Y^;?[,vSihE$O2Fʖ mc 9ø$3I!{s#jT̍3  ?rO{KFSI56%4LjvXu`2=6#b>V,G% HTTWhb, $BئbY1bW괕I |qcnx~ε;F*1 63DW%H93m;ʢ ARm^G/:} { }y SOsigڂ?j@#rEhE%e6+UA>hQα G)LΥ7A ʏδmխmfQsimnuP%4?t? [_.z%g.>c?Mh>Zf ?ظ5 RqQTA9ϥ}D41[v2w`Y+|8C`S[ݠ=>1w",/Rbίw> B߶ ~`s IAAy2L$aS0jE|nh cSU E^8T^8΢) $•$.T՜|DٟsIyEr,9utף;̣tNp;01E1љUZO8_b Gx"P̭07|,YnE/}4T7Ġxi!*SWF o` ^t=,k30)`MCk5lkCY_DK;^'ѴK!б7CGE0s^:jɇH XacBѶ?n>`U6J5pbUA>aXNu,(2 -׹U:|&vyI懹h4?$䎏"HBw,7kۇTVdYNT% ]H fjs:ǰ&dG DDd}PqhNsKG}mJGl1v;dKVTO"S찞D3W%'0MzX0EF=p=1b\D[ڂ6`/[7۹21S|4 eH}rq|an*d! /ŗ\:vyK> IʋwD1ӧ!{_c>Gf!& V>o"VLYsn\P4K\)Ox3fjqmPщDmOk`$j`bnm@RB;[PxjjCŊɕ'>c+@+Gl(3 fCG .}փmּ|06ypo^ }+͠B1x4gh?>C6jH>N)O㬪a[+y%aFQ>d[Uu) xR]!T;8ػ?59]NҾTo@4Y?F,;Tv^٠ۿF,w;S 6 a6m-]"$0xkcV4Y}Lx}\s=ys d骦Y([E5*vnTF߃IFx GEQ1uS`Ώs0*ooEu8]T .eH+DmQ`6ycLXmq[w͌UѾ=C/s3,1yMky~ W"TPaQ\&-S~R{hX6gb;:ks5J8;ԏx3A:d$ȧ"ZOi%_ 1!R,ƾago#5 iu\!^daM~g7)zXWل,6S Yw=kAOδ{:Ĭ"zywvʹN3pB[ _j+pZ[Ǻ$⽾"6hgdy (JN8_8W+#/lQ_ƃ8@rX_h:ڕ@r'c|hw[7 E.hfOL݂9K:]XJʎ$0e$%@i\d6Yg;H؋7 9e `ɰ2l<ҳ{*f7}-M=lߣ2!gJUVttQǤ\ai}weZog4J+rI nS| ӲKwL!nP8ثxb)By,o+SxMǗ/0ЃR-R0#0*m5}(m>!Rtkt$5Jgs=aO`8]݌t 0gSXt)GQ=bp/,}Cܙa0ҏ,QY>tFrNdֺsRwxͺPEC߱a[dh2JH"=]z0&#|H̡b] ,oJQ̒, hUf đO4Q ;vZzUlQB-/e ѥg{a*W#KN%., .sţxQ{gxxw]`pD!t4!7tM|RYtL̫G˕ANHÁP0ݯ9YC^Ӿ !G6!ݟT|r4 +rB芐_PuwN>aEuڠI']diJBsҠAD4$ȸNO#6gP]| BO#$7--ع<|>:~$W.{;oY8Nr(&_ (ަ@)!_j,6;aI/']àݔ vA4N# =o=pSwr=![LgE1 )| g9-ǎcu6!Ͼ}}F'Iy\67 ,$oWU: @Ltly f&>/Vqq.Աĸ=0jb̸̍u>RJwThֱ0]:NQBGG*K D*'9ktAT)nE;J)gk>\SmZoX-UbBP(@3@;,oـ^j,eRc!O8&EЎNBRݣY+oZ"Zrkb{4_=cI ڮRw39$5ہS$!Fדt |?Ƶ WF#^aaj}dN8Veǁx}-8Ҥb4- REEpsrE`ig1Gaҧ[hDxTn:b9x sDԠp8o-NM˃pF)(r9Wq}gNmƙI%Pvxf?} "8( H=c _q0& o/$a > @yL/KDބ!:?aا߅1Yy^iOx}e DGl :՝$@=ogVR1$ ͞],{u9OL@8lx^bo)#|h i$IxBj7,("+x.ɏi&8ne2_)e߬(mpd'iyo;m܏4|ɏ 3ZfbK6 mZ"FW(zYyZRB.g)Bz#%PFL 1'ijA _G34 }rV 9Qt<#m\lNHm\Dzنte3m.f\:wff骛wQ7G55TNB ܉7^}ms+̋^G3}qA\U &,Jb=F[y 4ޝ](1fGWAh2cy`?*sx7+% ҩI͏v6ek$+tL C_ N0 oٳ֔QS\ʹ#u}c$wxQծom@C̉!B1 UWJ+=řU0|W  kpqLl[4j}?8KϿ=a5=1:B{ߙڋm{?Ӌ۴GY4>Tԋ˜y8@{#@3*lƓɆ@;d(5uYQ&*Y65HAP #~bQJNX j0C82,@R1Q2mo&,:y-]s]gs"Ǐ$^(9Q_)-&To G%wRRQӁFʀDE9=6W^Px@^fz5gUO JY.jŇ# s~Ƿ& m `j#v,"逢#\"SuSB{!sT>쑫aN__5ph+FAj錧ld lhEL4b7.'ZxY)aW7fogZ{xTi9) >**}9zk> DD 3kB*g$X(!? ΅Ox:Du 'gT%MGy^7n8*1 J ]1gE+_547^̐U Ӭ(3SMfC]?koW&/#>X\"Wx JR?he LBf~!C 1 ͋8sE_!Ahxy)ƫK>#'\uJurT7wa1õV Ty^|/~th geJ‹{M&,3~-Y,ieT8]i[k^]#/} UNvDr̚ג:Y_%heMzXՃ*Džэp [yDzb; \cFIɿG c\%!#-}S$&91Qިk١Ȥ gZ[w4ˈʊE$ <`O4cAZx1 $$i*T'ڍmO);0M5l> U\njԑlFč\11&6f=/8Jh14/}!Ưc#<<۟uwOQ_zyɂ"qy{c; hu>"ΈXztR;Ʀ;\}{!9]$nyqyѢwsc!kϸt6")6Hkl77Z$j"&0a?p15GB \QjM,:>]C.f$M` 5wR^S9쾚23mπe 8GkR^:U" N2:W91ޙT$L?p'B`%sJH7٢Z_mJNei#%u\c0$ǥor> ;x>L/B%bOJi:5&SFm<#ªpp\a[P#vgH]HʵC'4ρXt۟jP?䳆ZW^X@A5 58Vr,|Q\ mprtlbxirrO}e[2U*mS-#2R0OI@l̀׻]'eA3ٽ'Ų-]p9OSX~Tga֡h@eֺC]n`d{^a! _:WU.N ~'S\o/z]ux\y*m겫@zITFY "/`~=(/ 0z3o LClLQ?M(\(Xy8H&F(Wg/?˩ TB." amo$vsPv6H]nwĬ6$?e-"4}߮dI郫@☺M䵁*~#<F 21߄~nG d] MOUv8LTk,.O&_lQ_6qp}c5ybmJxNQ~5OF">MMym_7SP4pP1#F [# WZ2cM] V!FD`wK Dk mՒRX)[K{%𰹢evy:!9zI/A'_oy=e_UI+x NewU=V|[(qJOdx;[bGւ$H6d^`m/kEfWKI0kS?v=ƹ#D"􂉓5F}mA8*.ʝ: K\1RRIG_ ᬽI m~OΑ}w; >4A HrnI1H+) nODDsQbqv+TTf`ۄJYR֣B]~%r'pa Zv.^?ۇ4LMz&Vd"ld;EZ}5vO'z k D=)UazkWXep![WZXTC@Jw{(x=5= ;Њv}ƣAt4[Ȟ*w^&-WT+#8gqW{s=oUʞzihefQ׷w9Sn^ꋆ-0 PLg4E~[L[zC\CFI$ܧ 0&n)d #^ȂlIHq =O+;o=etqZII B_ll`^ w*,U#Ӈ Xe~Z9 T"gN(B|vic!ߣ@>tu> -]}@b *^V[m-_;wO70w`>ZGig 6foAe9 s8=nu550ehd0&eԫ,e3Eu[07M|B&/Q(Ɩat787=(+RNȥs㲢Qc,!OX9#ƿzEN ijmչc;Z4.-*ԓGyvؾV%iS/x/S2F"%$f{{jsbq"/ (^y%4ͰџÆ^/yCF=@s %z ^[?bOY(dGƇ l[UlVGfv)X-m/Ly#jwG3j?P$x&xFi<LvGLy'ˀq@NwqnC93]V~P7,@ F13J(VRg2>G<*f=q$<q)G=u)~]U5uR-E1j,wͶ! jm7yρa% [H>.r?]v fzt \嫂`t4_ V &a(6VB%>L^O?ǒ/([YcO]®0x##p/="H GՔjP$W{u"} WB e`7'ZGlbPBK&U3MHpzAfz:8 gky.g4Իk{!r#gJAwK8veF|kfwnR7a[aU̴yvg5:Ӭ2vĉ!@׳+ -:N 7S(zC$aА[Yq /H p)yfŏW dïm(qZaNq̼BܾuđFMCf_Rii4+6+#0Zgj83ZHbٲ XG7PA+LhfoDUàQ*[?55 ̊@ KHڠgxQM}U&" ͣV۶9+1K %rBsbjZRڌ)f۵Sb\/ᯧrZ(ga#Lp>B).Pk.g>fLJU*':PZێ6>fWo{YK̭ذ}ʞ-ut| [twBZ`JC`%2ŨQŭ}wrcnuĉ% uf7_9Y.T.P - nП$lݩiϺՊ&j~t}n Ջ*vީ'̈́vV?$<۰u I[sBDJ(q}l~-)фj^zMgu*9(]|tZ D `uOX PM_Wi|ZSۚ'S/‚!jhx5of,N3P8dU!cD+ QnNm3:7ΎHm2 YeX1Q!*9NFKA0DV?{E0?< q099ϓ(ٟùf ~5y] yECsٷ; $ 7"ݙ,R=qFy9-/cq/Qv4o'.0~8u WL3[88^~Y>'ōe||VAZ qq28tko.\ a:XQͲѵDꅯ]Qz{{#ZdY3˕o Bsoo<5)vD?7"a23 =WCB?7_6">9A\s4wY:X-! /'{j@jݿKԜ$%DqV"I1Օw.UC.' '-dGt?G[aC'-R0bcվvxacQ0PؓwG7C<t6`ByUڲ̷_VxEfh',Y6 0zli%~6 /M:D1Y"^u|F^=]ENπ daڎ,oRCO 5>DMU)W_as8vc! \ M[?|ϦdE'=_ur-J cШ{KƝ;wx\:VކNevK ܇Dy|Q7cVwBs1l'W̳E쎼Wx LjhgҹoN(Z~,Kaȣ v 9B!hEEߺ*`b"7&l1;b̽0/_yxj."vKEh_28fQuI@ h≇J5:vqZ㗢3_Ug,7E:;5uj@-D[эZs v1Pkv{oRRAR0֮r$N NBnVF\a=ۃbu{[L-]+qOҜ}bF 5,FsO^(`@_Řl.R"+qjeDcY&HsI}z 3ʒB>ut2Ts4TvwЙȯt)b'ϦORG1%q9hl5 㭒yÖOl<b͋o؁C$SVx"3i1E2Y;xB`I3gf,L'5 UNQ?rJ?qFR[׿܄>?Iт=Ôd4C#%>\#n\e2(2[ۓ z``6+iW PdJ?c< ; f\Q,zs⍑*OEC9-+4#6x| a)k2̆蝚 xW<4v n4)P,$e3Q'JM(==pReybH f:2"I.]lr"2H-֌tK Bb&=~10[# @ #,5b^ 2>aQ`p DUx15*bniWA_=`\%@ $% !Poq yj$?e?.V'/1?@+]-\ ˀ^au[z]O>r٘}%ym{K5%aNOHs8d@GL~m9™ҟ Ɖ#^/~w}M+3V7m-`kG;S3K \>y*#eZXs/ bKWɌC\-iOuq5Έ l Ycnz "㸩LJl'@"qJf06l?eCOg qs솸Z 0~ϸJG4N#|)[:䷄ on8l:je!,xim:5m4<~?4҅$G^M j.7jpкm;_T=@YX N6'].֛qCbI_JϴH4vu>ۭ|'K/f|ojH'ؾsI(Q_轓i]`Cdvlf;6)]^?j˻+gي0j?3]?Xh9mtzԓ޲FG qA瓏~Ƀ9vZį*[#ןQ6$Vf("n'?^55Zf($.+Hjŷ=W! laXҴ>Hi=`DBU2?gޫpU (dG'y7ӝ/Fe$L"/y̫`RfM*: f`،bs RKE#gK5HV3>un8S1~e9h? _3gAǝj{5RA7*1g_)̓p)_W@bw:R2'?Ns͛R)a3kJo޿upSC{^ła2万Ғ WH0.k/򔬙X]社]U?QPX*19RujmW:G8"n Sdq!}3粳gmvȊ(hߤ?'H2*ԄvȪ^gLK&S0SռJ s5'Q)*S Z::ld5@ټ]@Snfa/zaA0U".EsjXT\{fT҈8ͫSamab`tQn܁Ĭӊ_"D&"