python3-apparmor-3.0.4-150400.5.9.1<>,hde>p9|A%(.VhfKy)&5#^53@,9"QFd4EgPM^#Na(boRz1(aϭKXtR ɆեZ1\%)ǟd# 5,7lO*{ ]X`a MI#gzK 4IufQv8a`l``z韌H ՜S}.SY>Ta*hMt8F Ś#>>D?4d & S= SpUU U DU U -U UUU*PU ,"v("8"~9$~:.~FtGUHUI0UXY\U] U^ bcadefluUvT wUx0UyȄTz0Cpython3-apparmor3.0.4150400.5.9.1Python 3 interface for libapparmor functionsThis package provides the python interface to AppArmor. It is used for python applications interfacing with AppArmor.de>s390zl38 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/Pythonhttps://launchpad.net/apparmorlinuxs390x/S }((&_g47wJ\90QL ,b2 5,(k#)<Q>p1 @ 6<tq B;?b[&'%Ui $3)E/Px0AA큤A큤A큤A큤AA큤큤A큤dcydcydcydcydcydcyb`%dcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcydcyb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%dcyb`%dcydcydcydcydcydcydcydcydcydcydcydcydcydcyb`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%b`%dcdcydcydcydcydcyd@dcb`%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-3.0.4-150400.5.9.1.src.rpmpython3-apparmorpython3-apparmor(s390-64)@@@@@@@@@@@@@@@@    libapparmor.so.1()(64bit)libapparmor.so.1(APPARMOR_1.0)(64bit)libapparmor.so.1(APPARMOR_1.1)(64bit)libapparmor.so.1(APPARMOR_2.10)(64bit)libapparmor.so.1(APPARMOR_2.11)(64bit)libapparmor.so.1(APPARMOR_2.9)(64bit)libapparmor.so.1(PRIVATE)(64bit)libapparmor1libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libm.so.6()(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)libutil.so.1()(64bit)python(abi)python(abi)python3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.63.63.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffs390zl38 1694065982  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.0.4-150400.5.9.13.0.4-150400.5.9.1 apparmorapparmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txt__init__.py__pycache____init__.cpython-36.pycaa.cpython-36.pycaare.cpython-36.pyccleanprofile.cpython-36.pyccommon.cpython-36.pycconfig.cpython-36.pyceasyprof.cpython-36.pycfail.cpython-36.pyclogparser.cpython-36.pycnotify.cpython-36.pycprofile_list.cpython-36.pycprofile_storage.cpython-36.pycregex.cpython-36.pycrules.cpython-36.pycsandbox.cpython-36.pycseverity.cpython-36.pyctools.cpython-36.pyctranslations.cpython-36.pycui.cpython-36.pycaa.pyaare.pycleanprofile.pycommon.pyconfig.pyeasyprof.pyfail.pylogparser.pynotify.pyprofile_list.pyprofile_storage.pyregex.pyrule__init__.py__pycache____init__.cpython-36.pycabi.cpython-36.pycalias.cpython-36.pyccapability.cpython-36.pycchange_profile.cpython-36.pycdbus.cpython-36.pycfile.cpython-36.pycinclude.cpython-36.pycnetwork.cpython-36.pycptrace.cpython-36.pycrlimit.cpython-36.pycsignal.cpython-36.pycvariable.cpython-36.pycabi.pyalias.pycapability.pychange_profile.pydbus.pyfile.pyinclude.pynetwork.pyptrace.pyrlimit.pysignal.pyvariable.pyrules.pysandbox.pyseverity.pytools.pytranslations.pyui.pyLibAppArmorLibAppArmor-3.0.4-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txttop_level.txtLibAppArmor.py_LibAppArmor.cpython-36m-s390x-linux-gnu.so__init__.py__pycache__LibAppArmor.cpython-36.pyc__init__.cpython-36.pyc/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/apparmor-3.0.4-py3.6.egg-info//usr/lib/python3.6/site-packages/apparmor//usr/lib/python3.6/site-packages/apparmor/__pycache__//usr/lib/python3.6/site-packages/apparmor/rule//usr/lib/python3.6/site-packages/apparmor/rule/__pycache__//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/LibAppArmor-3.0.4-py3.6.egg-info//usr/lib64/python3.6/site-packages/LibAppArmor//usr/lib64/python3.6/site-packages/LibAppArmor/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxdirectoryASCII textpython 3.6 byte-compiledPython script, ASCII text executable, with very long linesPython script, ASCII text executablePython script, UTF-8 Unicode text executablea /usr/bin/python3 script, UTF-8 Unicode text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4daa9d912020588b9af9f042b28b2b8586c56e0e, stripped  !"#$%&'()*+,-./0123456789:;<=>?@AQRSRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R RRRRRRRR R RR RRRRR3?W>ɫa>?utf-87ff1fc2458ff2d17854df07636aea01aaec39577dc20e054eabb60f56c9715c9? 7zXZ !t/]"k%) `=l.Xthw' 3i{>@5mMfȷP d>3; LAag<8VaY*~x $+OSE4f}]8׏/5IǛ'e&/ -"Yٖ]̋E*c-G8i^j9EP'dC3yo^=p3S=HK"<=hoXo6q~ mmߖ~(E+,,l5O;"uYS'R~ྞ6 ޻d KN[Be=/ ;꽠ƥ[|Ŗuġo!liš(cAmքǧu9X{Q[lzhPQF03| .a#z"^nGj6"r a$636f~)ŌIHg8gO*olsvL啱rJ'j_ ,#FK Ǹ/dFnieo:8u5um&;6-""X̠ r݌vDB 1B df.Y~NMr<#.[ksi\@9aDP}wY|#mȟpg,Ž#HجhW`ז; Bp'JPXM·86%u-#몿3݃_q )p m WQݡ=C19 m'lq4b-ySN< 8fH!ȫOi~ZS k*y,V~%qJuvڕ04T'/[-=~Z-CDsctz@q7FCįXTXWsF+JŕG% 5TSEfZ52ĩ؂@t#H07vQ@rݚd~O?*#53^>0NKH3V8eA~ 0P^R' =cXܦ>DDq6uO/4'9Z2,BPG {p5pU84Zם #&S:Ex3s`l6ѧ#ݼY)v)O+&7RSPR! Mv!hˡ+Ž؀.r֢OvG&݄SGc08FldTuX5NPx=(?'=[nJ,hb~5.ЛiX#F8F9 N8ɸFq{8g ? ,G LxɝvV76w!7 ?XK]w>'p,:wQqm8FSdGҞ`4r%ZizHAF~21L`MNjaYqmyu:ݚ#I81p÷ڷ(b+S՜PsaxX%Z*-UZog`;kIE?d',Y=X%4F#[" C F d* zP8%Q{*75GM|//vMo9mΏJOduW؉U}iJF[^;XF|6ɫ_r[^/Ѽa$Yg7TfDG{&^I 0! ]ꟲ8\3ZW)u$m)ZZ`kNC;d 9r;ɸU;dl noj7^%ُΓ'7KdK=Cfjpd, \To5g vdqyiÙɴzѪdl0FQl!k!}>hTQ3n[L D&ظ*Ȁl7 /xi(W!,< uO65n+}OVU1x0hq堥 l'WSp++C5mT%lC_N2T.QgW}`-Y&xh쩛V;;:A Z2ڤŒ=W+&n\'"\Od4jBsf+p hS*f#-Ɖ~@ Vx@oB3~no ,#@\Aptx#*7LLWJa[ImRM?{[o/2lyo;3:aH n r#=-6썋+\\ʔi1'^aZU@0΅u1j7$ ;r%:{ Q`K>1Wz drǸj΍“΍jed"wKPx~n s٫-$/,mߚM 7 E*}  tU(o>U/}| F s;4:WYv(J ZE/ޓ,[:).ɢ[zYHvEo7 ׅR矶,Tnt?Y;mB"/a ,Fo!wAFl ,tx ]|9sWf"z6,"U,,B-9A@Yl14uEh;r1ߚ/^M!>.[(`=O [LLd˧! #Ǒa L$_Z1Y_|3?x SR`HQBpL5eWTx*:ZqFD4 fp9_sjZ1SwrSf mY  &JlɴO0!kUH%@"f1O^m"}<9.@cԃXDz88@t<\ƠWdx\FDʁs?> tw%yY4lLA`=zsq̟i=$/XA=dnwxnjj|FϠ&zrýqHl9h=#/g+R߀$@vބ8$!ZuZ)t/ eC^ cJT"zo]tlc)4㱱<^:knTӹuRRJA&N>$2**HYRixC{8Jl(W??>rc*ڭ5l^.BLkcV? +%AM|8eA4$7;}AE6"aA~I qm~9+Ҽ hAgt*q'pWR,Xwv~gr#p,Fi6Wjn۞B/^~sGZO<{pBHɢw!+.Yd f)&Ic1#in*􀄓{N{][EiEX{ec" Sl|/)O`x8Yrܮ}%ߤz~}]= qůmvOabOYZ&cGuMtP`mA p{&؈F{[12EɕIjt'N $pZy_=I떣؊k̓F,H]ǟlZB.E,n"6~vwH%/CIM"yE| {K7oo)Tyoqx%E|j'@$\ӑ$y=ʓNugQɠ} JZ67-Cn *k|hF('X;ᣀo˝X|d ~/rTzp͖NݳM8WFR*D?`ȏ_LPNI+}3j{(aGPAbc Rt5/z'\[}I] HE&PڃEލ< e630AᎉٚaX6›;YpՖ8[%^ G8_Afj[Ho {CÔW:iy ,+Aѓ=4{l ^!nP&( K5kxf'u]_qy UlKCltI{j V+wnO|yҜTM>UcΠxHkBcpe1 i9 ’%aMͮdPL{:P #ioEJm4i:bguKj2ok sqDW6RH?\SIYw)MbXZK:ԻDb۱_uzuNG̓ȉtD )_7 &QVn@BmxB!W{L]zj|8@սV4<|B~9OEYJ%1ofýzyyxQ؉ iT(69-B,{@L rpJx)D;l a`tWeEŋ#¯ou.!(6" F% '}WY|F^,}󀶘´9R?TyzsxjU~$9kk;]y{Xi[Y`7/:*)'54v[6>ePoT#-/gs_^6,^6u[W1ZOs}F%yUI}Daз*#~k?]xm>!Yrwu>o~k{ʼyrqP{K-ն78-:n_BuǨݹ#Ye>w%eD}7= uJ.-u%o4t@#@oXhym`ќ-}4O5VW|S#A4 Bm@lráyC:2l5k)] ._= >E>3ưhMBfӃ&d2DLp ;ziOAtd%(F@{bdS|2e˴oi%ڑ[y`}t%@~]rs_kd &?ufd<`sh=TaԼ8=ntBY5K։i}ƅV؛DNo1Sh(D'Vo."~`l% I 7o ΅F9˫duT6z\Cc̹F͉}ᇚW[X9=3췰u^u z -#$+ 2TVLDx ճ=^ٻj:b~ *V_u{]N fS \LյZDV 磞`EYMmL]8GdOrjk_VZ?(e/iK LsJu,Ѩ >aQqJ;%nM793]f`TR?ƪhҠ a/rI]O& O.zEkQ^N ص.=%0݄ڭ%-tLv0: 4 ~Jpʏgb@@ڏy9"bl3NTPQ\7ߛ3;v:QcRP/F֑ 3 1 2+ u^#wv;tqy3ȱLn殢gx ]Gx.DVR Y{E>Fz:k&y`bKLhb`z !^I69޽Vorf/N  9Bz0If"Qa{tSsi}ﻜ&/[޺S{8E]kKL|ôN,&s:2Pǘ()K'Fv^z9<yHrTHn?{h~BEhU2-)+RHx@? ,C_;‡7i~f<*gؖ5sM^hk@^c _pK: 8<2PM\&'x@khaаgPe₭hYay@}l5›s 65滮7j*eKFኤxwHÉn?NHht7V;HTM*dhƏAf Pr,~U2ÆMb6]@fgZ^ X|Qw( CZjC+,UcrjB6A4*a'OD gXLkN7*F{Cb2J>'d n +U i8,}' t4.7G}oo*{ 5yMs9wi8ʩ %zX6@ FpKʄdG 9?+t".e7ŭ3ztPw#=rʁ&NQT):C1pP6`/Irj? { H ] !\h,ymM|sv'1IzU%; ΐ8[3;۰ֹe2$b edM k\7R3T A≩{mԽPY&.0me=y!u' Am5~ פɣǤͶE[P0޾o%KZ-0I7l? !MNfZ{1>d;6&9$o]q*Jm6лx[ LsOnd}bFr;3y>+ Hfr9%.`3 %?.>oS=x9)8xZkZ2 v=ߪ^tŦ(ݍI|:-V @98v&G B_d[AZڏ\ҙѼrNAs9[[ME89;/f/b 7-.#B!1|yKN1MMb+ނmXyp`1zq"!IH9KG<zx*C߃EYG{ Y2Mo@c3;1h~$VCvYlZzX;syAU[k X34>y/ɽZ= /Tݰ))W-qa](щ ϪC5mZO_R_SG٬9]}Q R;!̂[] 9Gzb -_ڕ3̫uN/rU:jXo_⠼`qW#e-=n\# 6[VZ;i7XόXM| 5[X|4> *WY.3f.<,y$ e; 0xDy˥C]0&hz#)ڛ$`u=8Kl V ?xt b 0F=\wPhLxL';=[kή8QԚBj ઀ːo\k5*Z@U@MP,6)\b_ [ʈGիɬR[@D׾B}3OÀ 8՞\:BH,پ- Ƨ)f%0 |u`62੼:^=UƥA{" [ᦆݣop ãҳ,n$Õ%GъН'=-ܩm*MffWYnsaU,X<#THaۉJhI[f%u6J.>QAJl?e:Ȋ;*&\Ap$5t YȸnPdUwx[zp TFB`Jn/f,|rØw9U #S[ָH"۾ϟX{Hl#9TWoR\:jJzx2(ȀQKjN2dž灲)<4l V˝g#1؏~y/ Hu7&6R%,G F>c]esSg ]9z#,`jA"`9hl kiţ0QNVA7cAz7&z/#ZYth)/m &߶i[Qi'%"_l E<{S;7m}µJk)B`הL?ڲlX}]!Ls]f,c@o2z$xvz$kL*]dڑT(I5Fuu8ocT)Fyr6T]9}Vl %7(ͪ3&K_Ď~ŸX o&"P[ݯYqh6~fʱ(%^5+6{%7d@)!?v6Ic06..ǒi` 0ȸ$1Z>ӣUu(CH*efR-ѯ\}9qRZZ\< Rb n qm)K bosKmȦ#rgUvϑͧ0ά~JrIy1xhc^ ƧD ,#};{f;^ppygkn 91<C7'vݍ#)evACJ唵Xk&WFX2C/ٰUyYO2ʔ[\(d9]p.Ҵ`n:/Yloo& qqW#7_:cwv2<]Oh)*sVI0? obxYF.=XlZ%zxf%Y[w;qNRe38-_ ~ig>uo{͇ 05b #fst]7̏,f^ m76Օɽ/5l}f,&nZYmM%).< !Z>WԥlٕC>h96휋 ܋ gL$9Q6':HX ߕd5iJ/o`hO?guf [HypG3]e w.Zf>7 < ſGlKw{SYt>|#5L,ׂ{([Ro()q8}|7W@D7U7yL5-5@JNRYYrĖd$ ff] .fUTc4ߓ5"涄W Amp>"/=+HYYuT]|c2d{XQ |F6 d lފ Z"{f\97 f89]"=~z| ~b bK#4u?c`E\&e6lf7D a')Cmb*$Ts:_s2e0~lRmw4fjcUq;")EL \NeElڈ *JQtC8R[TEje¼81 @bkwTS•HAsǧЫWx*":!Gy:55Iò(q=k9퍊OٔpB[k/S[Lw+YD~h:+'HBU.ݿ}K;Bm<ä*(ZwP^X^֏\HMV$wOFW(?3֖*V*:gH #}76+WuP'&v}ly^ICrpA~U*0#=\xQ ԣWPW8妩5rXQ©/C4hObTIV>oq X=jYil]0lc鉄!gv-"oi*A5'pD@4pEro<`\ئ6鐼?ҋĚ/L"A;d8qq-tEb>-IV{,+03f pl%`0 E|vK0=/2V\Fo'ͩ:h"{(+ Hq._V~ܤ+2ɀ5|I/dBOҡi؁m2#u m\`+gbz(|o/]*}gۋxeIT~\ W `DkϞ8w̻t_TqL Ä|d8]^ %n\ NgY9;a7=#\m~ yJ;3ŧ< Cg^P{WJ޶x>!ΙvxL?2[#-{@T}B(D/ghBNU:b0{Sg;xϜɜnuDfD(emSF5Ag&2m'oT<ʂ[Mةf> tLI=9rڕl N#6JtQ଴~90ˬXy*kKct7 *FZe͠3U0V [vNdzkF*n(Qk߀`Obpqf{A?_t]1G-~Ι >蝨&ޡ])kh3jFPȹ*05~zDTƃQ7؀h.,4lՅ Jq\*QTzmeژL \}+MwzƲX8AQ3:S&i y^@!Y4a,*a;tWvjvadO%seju E^HPS'̂MiЛբ+t]  m01< ]%ROG՚Tg̽G`^4=2X)umn(kCW"D!Acsw,8}p&iTO*#/6G~ ,D4Z.Gtp Pi@)d]|;d6u"#?oURc}G]:'5m0X6,mj3b7IX[M[T CS[mf)98V0Ro;VF} &{"XSQ lqlRhH# ;11{Eoe3H-}|sQJexݴ#ʐJR}td(9A 7 ڠ쐫=&ɣ%#kdl-0,FW`m:Eo$PMG9ygf tJNqK}5Jf!k+HV࣏Bi|Wa΃hOx#{,_d4rI^T2Ñn9vmT7оbZ{X_;1w)nSj JIZ"ZmpQUzZ o)-U©> zk"𡉼y?V|Άl}g^)wKQu CpSd֙jXx9ϱ-nsz192Y[Y)Rs=Ci Św14o Iѵsζ1L#gF̓:" PzjAgt NQuN+-g w9 -cʡ(mEjZqwhõO+#t3K'q~>+Iz{O;D\34" :`J ;~GTKO187% 3jT#0W15W1q=6=*3z{;[ /ސ2Y.EޜEJid"cZ z˜oyf>vg`pgyRRKXG=6c?QF ^d忿zIQG2cbrT3aj녆W3$7O{!55Qz) .!1i4-"/>Î'_i &v+vE$``շ8|y˥$nΗ^61NC G|"jo\ۍ ,DZz^{ rD} Ff/jhVUmLNkd<*y3Ϙ!zr_6 $=@*L3ϒBGpAO-ON`oa 6<ת2S3 F\зSW)=ܧveOz h~5h) ᠉IЈd jTIcRTUpHHv#yZW ɕؾP$ J p'<͸yq@ v2`?wN;blW ~h8 C _#nZbμXi:_b:ԪZ:SUcxaUrݴ\G(V$FKD\!^kK6 hHP#@* D&8؈2}\uccAED0hara>FٳPNb_2P΃l6!(K38B-D%m@+$"s +2oMRR3ͮ[SXt*\[KYc+RF0? MN'qqݬ<'KSI)3j) z+?й7wtSZ\B9N-~Tgg%&-/_0u?*Ivmb Z4 30uP:Vа]nӆV mP% D:r,U {Tja;oJsg_LpfnZ%tx1fa>w\Eg"yUT$ & © N8q2ZE$bCQ&GS (Sȵ՝+yޜI &$S`( D[1rR<B/;J ht3yfqoyA7ڭ0؊=\]i:>IEu ؒ J,HOVmL  S"ZDV6( <s%~>}¾x!~OdcR@>jVKgʾ7.WS8 &UQT^y&=z8OmfF`e# PB`q䌨8ڂEb}6d9;Mf{ hTtsfUh=~NclGjWTp4i9I؞$ajm%DÎ F_Ox=4mSuPU:|6t 8-ObmpEME^X3>zEGE.r@ܱ,B+#vC՜C U`%kz=]Ǔ7J!aUIL=%'9BA[JOrq^xrP/0ΏȔic5Eӊ jAup} Q J~24P_ZJ W{Ǖϭc#qaE ۦ._n$TlX l?wih||8%fBFGyOКHO Mtē2+E #!q XTRҗWt~ ~i@,![iB=֕EhRת#@pA3T*D)줲z@r7P%戓 IuoA6g2,F=Go .CxP^!+%u?(;`B>9RQQ}j9ϐ H/)Flŧ+U^f uF\"!{fa)OGݠo&7Rou$phl_aCh#ּjw#.f N(S]!O ;mP[B$=o>,5BK!0,NZEBC+4T r.9)5?$72 bv3@!lb])9g?\Fv@;+Qτ[P .$5;Z Qs% S8Sr˽?pdZ2m["Npb<*q""k)mht?#orz5o,(?c3sa}>u뾳Ss63PhD3p Rwf{丄r35NGw|A_35AN"fAkjR鍡[/v!@Bi taҌ6oԩ6%b] F9usxᴀkn.QKA4g5_lV̫<'< N3Σf5#gzYͷOOTgcfDQ z¨+U]+ C#+1"#O Oԇ5LCn_>rHs@ثToPBR/Rh5nZV[u=4p?w{|H}kgHC8j-ftmxGդh7qTHЇRR%P\! <Ǒ0 i/#z[]Q,i,wj9VwUvl&pVTY~E7 0-SOo1AH؉u*⻶0Ezl?S_v533.iu=1x +^W !ڤ%Qɛ0R'mBDUd`O߶>IM pKpJa6? 茽Ί8%k,Qy KRI4G1r5NJH[徕kM n&r Tp ޅ  ѿ؉ Aie8(O Ae([{t$9m se5ST*t=^oL*^ͦ6?J s.:D>_Txƌz-N: T෰ N(vAҦF ^qI/1hua>+rCK´istb.2E;4B&%xY-c#x;=˩Rz.4̘4CϧD%g#0;Hqڷ 4;uGN ~SؔTZ\ ! f$pHxGңp@浽9 j9b YWLne!N xl_zC UJ#{ҝH.hr7X;S[SFWǵaaNPdyuLs } V<[Լh00m:]R[ =/-ieEiD 9Q|7T2G^MM2nϥ\ HKOS $kIE3o*[B\C^n~JTا?m?2`T+_2,s# %Rww#4Q&%8>OKE';[͚LcAOrdu{)o:̧ʭq=9WL-;O("kI3{xTylcQZ_+;FgX]XyU_v%@AVv;k : ~k&q34=F|~0`\O-ڈFŽ?QENnjVb;vXTe\!y%W"ζF]pctV3wݔl{ҫ96m%O cd P̶T.cqQBM\[Amc:aE7m#Rnz jR&,(_.?,z ";d%d:yK(W@lc,dAd,/^VOg̀K2*$aD@#y l * pڀra^N/su1yᐐK*n<-JpLǕL QA7_bjQ9oĘkzl[.2/4TKj;3dNa9hz΅ǖw:QDjO3>2?ڿp4R~o5UBQgOA,4Ɖ@=ȃE ؁F|wz -6~,rmFO0W̸&,Xv8ƆčۯJmPNB`{MZi:-6(x [CM~Rר_&T;Un9.wsf3S]vA,>utMd4,r4#]_wp`Жj`[djK(|-),5ј̧p}j-pWGHao%6wfqKϯtF %@vkph6aq$ fLFK}_\C=v%]O鏈XuGMtW cl#cc2b26ŵ{s7BPu6: ڇka.K1f]!>&n )N~n;H2FYu(P֠4up5{D pb!y)(bW] m' J-ML2(Cւ\p|եݱ;C}:0)h^=3?vb(Qwbu9ZSٌ{oP~mcmYws{(㧊z8 rM^U8C_pYhY{eT%WE~>a:)i|(`?{F)tl^ԣ=k(RQE Av:wA1@A@VCDZikTP2QǰQ4-=] " lYEqDE X|UEMW?YFQSN0s>ĺTB o4v޳Lݛ63ܸ)?E?ƼݕG3,QvelSr ԃ@ZKH`2]'bb q FJ";M-%m`5a]7kZYMPމIؑ/cfêvM5  C 6:=%Ge_.efaJU3;2\ʙVYR/[{HíUWpbɅ/t54kXJ-yACKM鴨lu#r יX-_n21].\ci{#+8 .2^?{ԩ10q/Qڗ_cF=h03Twzy6.H.oC{6LQ.WsIyĒs >{CAYfuyG2=q*9BNRS5tۖ`Mhmyk? 2P9".)Hc2]y&?Y r0K$lO D0:}.A\g>. I&c0.Y&Nvb7p8A# CC@ya2U?0U XݣGs7?XX#s_=Úp8{BfG\R?+v$%y瑇ψ4YK_l 괻;#󿙰ر=>g4 ]yngfbGmEPO  &o*OS/ׄ?1_|m; 02ICCceM|L)Lf,ua1Ɂ,1d0C\?N_u7'v] `ؕg:Rw%Tt_n+p"$9yzS:x! A,a]|@ƐXwN}N:nDzZ~ 㼰,z*LܣiH8i V#`?&wk7"E׻kw'pS{!Def}跑h\}$6÷;1X1'k?X'\!Fu 2&^ c㻜?R*l5^Vᭋ(Az$ثM/jd|K V*>3UHH*5U~o nltb^d>Jk}r.i:KзڜEA,TV[ԷG]>i#ĝLqUqL HK!G݅7q(.`P"˼_ [7D:`L4bL[/WXjPOUiF!P-p=z毑|y2BS~:&4J(i]v _s=F.'ȉ<bF ES %cڋMZߴĿR[p_BIc1+wW0<y8DL_ʵH; iV.#m1,ĥFq{HUyލѥ,/Xh1 4peGk@4VߚJIm?ڂl!'꼻q鳭. n &aEF$;O;lvA("uǬ"m"KX욖x.^oja/a'e~,$IVfK+`+'yC=R^5'@n~ʰ&N'RrVX{HYdQ _ Ẍj/99|?##EqQ{.^@% zӢYǀcS G0}9YX?o*: -:arZ4jzG29݈ 9tu Pcۗk ~DҘ5g֏~ļWCi;fWԨւNpo0V\z>Ffߒw [Xu~״"FzKt/LqrzCp04ZBflO]zDV澈q-L\aTBݦ<1}Adĕ+(}Ly:T ܙҎYQ>@}O7s0hQ{g\a&uJ=Y*#oMܶV| Z~n'-7>Zz̟6xV듹^t~?G\bW)Y֌fpM”VoAkBqKԞ ~*Z#II]_ lMMF) Ǹa̯JaPRZhQ0wA}{!:/ .Bi\O8; ^H0[FzXxpSu $『#\81W(?tmz+?!:\b]B6Üw-pH7-q;o@,% Bh:tԭ5B*JZBV%+o1f8K{п+r/ہznrnsal*'Tɩ=]]F7UЙ` c@|tJ]w*QKXqN|.Gߊ]m8!7g^62#VP;'']T >Ds' m 旁; T&[sT]Jx}ʸvawmÐdZu0r$!sͳ̲5x6 S) Y8Z\#:74^\#ДHذGHd`^X=( Ѐ$ E3Wb4kyn8 M#MSؘK2s| x@z]@QwJ$p#@)$ƝQNTiR4fmeۓi]ϝV(En/h)ڧvyFRo&vF_i77KgJXbؗRkSm$j='tHZ7/|Õab[+g Ttjqj rp[ܽgUbn;t~;MipVV zgw<%zgM Gffخ'J CKN;5SS BwڔqB;aΕF3mL|Z鳼A}Ĺکm֒w<yKOZ[2Ȟx1^ȍ/My5YpkeS6xJMdRaHoo-]{0ТĎ7@.BF|ClFHs ah0S.6ܯJr'@mp˥?u]b@p/l0հ@'yXi/ wq^ LAL?f,qRb!3L3_&' ˆC&{>6B_֖ǒ" -~%sjU^pa0^9hQ%'뙵qB@f6mFqF0-QcxcHʳ*zFǰ̓/*ގ6ëțA^SIҬxiy݊cÆtdx-YD qŧ{>ko9y%  XuiWC>D {>z@XCI뭕p~vf<0TDKhs/5evZ V9MH NhRE Hͅ7H:mW@ʹ9ɶV.RDh0u/u*=p4R}CʻRXb>IdUc9|Blڇxk]2xyhR=6y&p,&ƸN^Z|,oX:5@,e;P9}8au`i#u 39Al1vML  VJ .nVu 5,m~E:;ruf[ ˟=ւamA"TTG /`ɫAޟ8I"D4/O07JA6o85 Է3ٕ׺ sw*^I|*qYǩzVչ4&*qvuNr)$w$dM&pәIM&oqŜZ @!j.ӽHU>~j:}>[_qgƴKƭ$PÔys]ͨK:K*~Z4-P6|9gGZh<ѯۨ{d;E0v`0l%TfRp esNphuf`T3(̆~PSZmXohJCyJ#Փd'jV2oĺ]G o d 㡿usQA.A0ptYfISm(0#{O U?s=)$SI`!1*?_%Q\_((!er}W`lzH!fa[PVVe{wK\䪳d s7-:VW05D㰝3j2T_w-Gf\"A{%j,`'*ËWHRfŵЭΌwFmBU+踭l=l Oِ(E?P,E^MĪ9NwyeE$S lhj,iS0(* UG2~ɎjEÂ_VAIʭ9%ގb/LV;URQ^25oReU١V&0QQJv3 lV >tIxxWӵ~w '/wivF|% ']x3pqq5ثOdaHK3=@˒w݅L7aC}HAYyqL/o7{yTn&qLKfԐWNWk{ÏPNȄI&Mh!+LBs7v=' zʈA:LY+^#7/PbLFg'8GjqT >Ȱj$&b%~/?vWH9/ pd]8;7SWyTNH7 0EM%̢x-giQ-8^15ܪr4%ÄdžL"cMVF [MpzJgB9I2^>@l '-ҰALB%iAy0+ydD0 TZ @֓ZPMsMx+T\py]%J4~"Oƿ&xk'm1[>Z'~3Ly ^rp8ҼoC&ȽC-N~5쑑:\Kr|4ASB7F\( D\QGUpV<jF{/GF',YħY{O\j{Q&C'Io:Td}FFpQ$.ʥ{tIDAOm%gEm ],6,|jePן;@]_ X16̓B-HBcBJ>qܙ^g4p.,l6<ǡn MxY=ilZ26)R>ؒ1s5dɍU+$ڣ[b(?WXƓXY7/>Pe Y>W[s6 <\8=K%U9k'N)kPrߝuoZ5(^.|˄xnXE&ꚋBhe3_]V:8)\41^}Ic-ebzd٦zU֚aC`ᶪ9_8S]dr5ӼHfe}r8x<{Ζ[T\B, )_s tR]3}2bJwG[Yd͉UJ5"~Ԗ_0Ȫѳc-"ݏd}:B>N,-0CmC #xYaIܴ(_s4QX#O:Ձ"ƔuM1owA}(ҶU>gѺLe4{B>.trn1ҝ$@Jٓ vB7ң3_#U`x$Ud+ jPtԐxߒ#K=nڶgeZN١ YlS cTeU"(#Afa~_lbWhF.zu)s_9l}TٗVPC~b%#Z^*t"T{AI<F<|'$j-C}QIZ,%r؎躢p;3h$m1o]Ƥ})YNKGEY:{WE޾_㭜QNZ9NB`D{(iqeVrǚ+UKl4bt6hz?Ӡ}n5˓#"LCP$ dTW-V,@#|Rv+Qj.淹!IʃvsT;71čqwsO3D~_mvH[ vf!{4𐳼rGȯB//ftO/NN}*NWsD87#YN;:vCՑ)|,#g1.g*\1 #|%KGl퐆|jGVx/0;9}*X՗q}L! @1~@ӉVY(Wt 'a/_(5\\3b쵢|V4t)e&XrE"h.eZN1GrtuxA5_k O(p?UK5'C+nu8S'P pC-K [oäJ(SA$rg3T[jo*c|&?0hHt=N*vğ*a8bpYvb[&ߌ$g1ady}`O(zض{s9$@~3o,~&l/խ@6U4$v6?p2xv%i /. VK,3ԃf~^ׄի7V4e8F3st]_JSS9*~DԵlt*CN>$y2RDy9_ cOQdWm{i8 mB2IL0@:#"¥f!է0eC'V =ZW ֦?6ׄRHm:,g䠵fIGi8xaEQ+eMMrAgDyE?ND'*Nk*&_:-v>8=Lœ;W=H*6e6 ZMY{oaWT:ތ32ZsЇ{#15,+ .Z$,,-RꊓS '{? Q\:P%lSaX`Se>cp=iIz:j\n`&EH.qT STa,*DE sש@⺇q_ *kTf@MӢ h(&]ՠ)nGTӍ>rg#.i@[5,cN!oG䞎 —L%@-'0X% },\u `y9RSu a4 ͯpM(u]8'Ҥ;Fb>A|aeRP.U8OM:9 ?ԣٷWrףbz*GA5\ Aq u 8]C Ahv *`z;L5[եث Kw^އR 3!(%IBۮ|T!s#Xpv@Q j- )y p*ijq;pQ qזzu/ʷs1w*-\~BII? x'm9 sb%lNpricZx_J`+25iۺnޒ:yd"ϯ'@|ׁ. I0P߭端,tݧ@}' b}^4]e:zX72; pHZh+ծ:b3?o)Cb,PnyQ/nŚ-THTߌp0#6wAR(2jr6T?TF8 >pֻaUoRç͘:
    aLDHas6˺\ZQ Ths/(=0diH)Ixe ˰2,Muq.IE`qB3Ⱥ]d]8$&1ZRLK5, F<6zNJ쯬 lUO@G5uHPo;+/LhR\Ֆ o8C8s5MA#}N{ Չݡ;HC mtu)ܨ7 #,KP[/l: XHKTETd5᳦/ uW</? k]n/sQl ö%ѻp!ul3W+G }T4q F>qY+ߩ|/z$@AC5kkKZNeҧ5i~%̗\lݢ&| pөCg fSkpx9wc6 +ae|8I>-kP ^D*EOq*" &FY2wh *O=܊_IwS=tɇw}^ ?#6o^:JG콐3Ia &_^dcM:&BXޮOaKfg`iǓQYG Af"@TX2JwOrV5z$Y˃ ԢT;>Q>s+ָ\Hk|QV%YEx+P44H *b=6 g)}#498>fr I}mR{-'O/\˱R jmG/De穷y$Q^UbL!V:es;v whVAF{ԮVsiM)'1[]\Fc'o. /"8\DiҶ\'쭬iS)]#.EZڠ?WF\aAs8!FSj ~k`"(H,<YjEhOF L0v?A'4}~<:DL 8ѿs# k=G}30Ž<6`}bmE؁AvonJY~6Rݱ}Z{`$4]iSi!ȹ|c02bHk醰J:*UDNeg6R&Fs;Wm~b"1'=B+_mJ+*DێD"QuUb{ 'y, 60Wg r}><5Ĵ@իjz*n0*'2_eRYԵ: IZJW F:^G;6)Y\?0Gb?ש9Ψ/<`(YzSL21!Q?7A̮xabL;-x"lyy,7^YeEYo~f VS;*i_p"=2( ]"U-+ L|Ucwub3) gk1:(^a|>գu ʡ1S dHsu@2?xY:O Ԑ.Zw\űʋ`SY})E!x6y=X K敕CBe{b3Ͱwx ќ#T=VuRO9MΛQNݩ*a٨hM+> w3F/r+xRWhQuxr{'ˮ9+d³ֳ BR{ jV~,1qr{RAnZ}e)[lJ@"ieN4Ũq@hZhzN(d^0ȉgSeioiVd.}1Ԏ>< d~+6ɂTOEJzYT>Z`#Wt6G}L ".48ol9Q"+l삆W]S %bq9PHʶeǥ+#ϓz`ΑOCT:s#G) >G:$уUtY[d!p"ţ& 2AH!A{ۚr~18 p{~LG~y؉es0jmN*C]z@R~%0 3v=QS2%PKV-vo{tB}=/OKGi [PZ3PKpZ ;= B3E\ ,rӔ MÈ/_ AOKyc_ rXq{ɧ|100'{ה5zѪ @}u}Sƣs{$m$IA% \ʞwLԏ34.Nsȧ;r 'ZV_cI@Ioµ ']qjnr8eҏ=ӃA# G_gQ'yгŃEj#EE*JLI[-{eyaZrd?0Zp1|++ (uf}VG)NşRΟ8id緤ƍ"ZìR[_>*hAxM׎@;cVWu%\;6 -]';ňۗzv2÷ |$*Uotlα~ t}R0@|2 fb;ꔨz / |߷ iE7vrPMIfJ?ZS_:v޹cRk{BrQ'me<$`QJNy.!F^d0DI@j318rҕs?r C>5a۵5 lۄ XDZ?tHK-U}T{E >k岗 +> T N0R^>_սƋֆ"ܞIԂodA`cԂ.?l*{w:DԞ \EWQs89+ة{pEu/ÃM?wSBYڭ0o'#H %y T X&\a/QQ ^Y\7"ԉÓ ♴̵DzH " k+¬$8d_K@:6x&|@¢]Ju ( 9b|Hn >AQfaTMOo>!C=]-ݸ?Ѕ4{j~+Z{GɄ9\:z{t`W~s`n;?ר}3w\Hh/s9oC9Xz%}QL;YPB7^aV̍j1f[7[VD)]ǽ'7N;;g>$vDҥpxU]Jƈۘf'@10.-ZF|M. *p,:bݘ%'?ZQ,ODGI ԣ F _[eTԶXdF"x3ŢofV~1]ks4Ɵ}rÊhspt=#&W"_߃tz\<='g}5j>\ 9yo/Iq"7*zZwt_/!+VeKpoG| sY&V4LUVs#)c1 jϠUOr)~|j'"RM:&-m-ݥh*3jN k(jgD"$wb矵N#i \[>Qnop+̇40f(eUJBCBtfZ϶*]8T3:qOg'/)uBCy^  q4t%10#ìpETgwKD#$;'Q=wˆ?03]xIۭ ObSM_>m?V9l0t!~w{ȩQ"GXDa4DvBqNHD .|d-Uy^zU+"G> KcAx$ τ{9wN.i,O!a>`%Fh-|3PfKcz| ^<1p Py_1qky sbO^] C&e7 t'Ɖ fMLsA\fw -Rm0 T1qHd~ķ 9TV=Z4g\{b9FtJyþsDW8.Br-/$4؁浶^hlW.i,OWnLC-Ғ]-ɛֶv,>Pp猪t+~kT}aDYS>ޖxPP) aL@IYd)wfUR?^gCLwgt3KkH#A]&ѦmFƒJGuo6N.4j߭!p)j "çcהIOё0VɅɏ~0zy.\ba Ժ_TPvYY\d9L9N9;>?idQh,&ҟQJc: ~&⿨F\OqLhڷuLFvȑ=qMllnJϙ鶦t4e~ T)oCL]WZP&dS6 B&Y{Ff%2lK n^4a%Zf V0jھuXS*I `7߰p".fFӳ.E1rӝagqA:H8Ԟs4li^Vˋo_%/d]0] :KMȿ1۸'ln;oAbXnI}>CA_LD* u$GߊLUdS p'tp<ߺ':kEҕNY!r%rZ! F7l#2x%GK.4+ȓ_!D& oƶ.^(-¹ZjVՄ"٢'qZ]N6subRvuܠX票{lk^tc_%w–Zwlsΰ9h`[FBd r]v (g@-fh73^-erQâNiW^n/z qFnn<ź.sLs&݄2m r%ykRɆڴI*-Z>'gge!P>xӐvt[3iu`5LDY4ci% ՞gg=dR3bR՜txX)Ծs>xJ<=y$5V`v*=c/Iڛq77CO^;47KXjzwh=41e0??mA {j{}C"Q lbq`WVd 6-v^cLdι-JRjLnf=-~oM춓c~jᄀ_3qwsw"-j+)k:T嘶]PX[i,9k ҢpkPM4f PAu8B!Atz &v5p"_'A:gKوa'jW܀cW!92$屴6e~vot9z&39جwr%9ve yGoD6SǛ- ,!Znd́/ƥ#RCXJ1/g1ϜrܕvM)Z%s޴?'#I2ډk֣>E*a;-V,o`D*H=MBZ8[i:dvf̬{hwvJ$ݔ-1$} WL@rkIӜt XF R(@Q߂Y@f zQcv).r~ HY#4^:-W:|YWAa2|ukһ@_fNEo̻/K#UlhEV6\ +G7"\WTHLN($o# ]uh7@EwQ}nq[މBՅ&L/gu4o@Q,kjmyS=M4$JI{Acnk4TjݐDEocr7TPÈ5$F;s?#:I4)~t}9dI<62?bYߚzY*DXkN?3Ϲkf܎衴z;"kuTʘn' K"g3i z0WG[G 6v_A[Ywq41B/ALG>=&S`~y2F8BN+1˻q)v]n5][x̧hR@SDO/鴯iLd]yo>*Yq[PsP!牨Ml%%ӭ +6u6mƧъmyePPA1EY`K;_׹: .'mSsCrݥA6U"7}9 [H{8%c_KA@۬ʿ/9I]YSOa./Xj1l,+*mKRo/W(ya2Kڮ?MâR~y$xCac-#Y`6٤6Lc~2E 82 LdW EHޖe?`rO_ ^>f"]cAyCTʩ^C d(%uns1fkj[{❝^ФC bGl@֑O%;Y/x RhЇ~V#LWg!ceD #D1/A—.֦ ,PQ/­ kk T[ k,-ڥ6AQg4ı#"L[l*Dbe8}ӻ3K~6{%E s&Ծgsr5Z|[Z{{Om` ; h Ifn/#q % >!VTbd7)e&s졐 ڿ\Z̚W K[<_ !UIkۇ DNW0T[q_kb6 J"Id`Z7eA3梓5x:cťQo\},x(jC{HO8. oDk ҋ ልFisʦPf,N/ltui86j@?ߔk!y)&`yeX/B} V Frl akØܽK1׽{=uzw۽lf.1ԣTQl?6#An-}9lBf% U~vA[9 CDbn e ϞRr@@ $ġ$Ls02ȳ@CtC+drFȩ:h-,!x(905 85MWs͝;K,~"Cm=q#$pj|$T=Jv%(B/R$㴕klUp߬!b];(ئ#άW I5hG8ӵW;,$8 ʪe6k@gCQQ])C{{'[S#2|CS[ ,0' z)QOA*2kCHY{Հ{rWOT5I} `eŸwẊ#QX/|f0wWږUi稼@C6KG#Dt=nGH;ᇺ.|D,ݱ|v4+Hx@aIlvWݗ+M2qޕՀxάuKQ򭅟3$7#2dA_'EҐr e{+pJˌ0Oy$`[vPˆ4J:Zlf񄲮Ҥc^9(\q)C5XE1 Rl&9!4p "KNR@ñ\~pO]zbDgHa@QQI2 &v<S>/it½q=n&Jw'%c{ e) V!* 7\8T*YmdAZV/ՇK'~QtβZ hbz|J ҚitPQJzgN}V@)"b5pY9#6$zє59=iU&ā;X+9)hQ3 d5" k sp!cd';K73f^!b&CF[,ؠXl;ZT/ǜx}gS F[]}($&c:9G?Ln$'ȂieNO83i0@1  NBy ReIM҄0& D>^1YIK31``h(8AH((@(MTs% պka$3(eN Qbg4ELՙ~J}>dRSK!@`Z IIZF%*BaL؈(VVRhq $݊՟싒ǥ6|w4K#Ҥx-&22\Ybd*}Enl[/CRFz@!e ޲FB/eˮȖ VZ~ӠHN7T\Wۃrl8Ȝ`sI]ζe&vǙ$Vq` UD喋4ʼ@.xeR8y79ͱYC/_:Hµ}b<hWK~ޕ ?Nي毗Ęē :A)hńmY>(+RBz kݝ#5WLL MӴuIaLơRa' rߋ YZ