apparmor-docs-3.0.4-150400.5.9.1<>,&pda p9|V+X1ߢؑD%j3"i^j sB,}W!u$ȒVhh<Pv%? =WMIјUhodb"ߋ.x`4: `ÞcPwJ6G n5 I(d!8a(`)Z :2jA*t`)T_{7!N4Y(Kk.$g;@^顓d嘦ܹ6mӋx)u$ԩww΅kDKNiJJYeԞ>;?d # B 5Ihnx         G  T    @P`(8~9~:8~FG H I XY \4 ]` ^bucdeflu vzsCapparmor-docs3.0.4150400.5.9.1AppArmor Documentation packageThis package contains documentation for AppArmor. This package is part of a suite of tools that used to be named SubDomain.da h01-ch4dعSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://launchpad.net/apparmorlinuxnoarche%ME.VA큤A큤d_d_da b`b`b`%b`d_b`b`b`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-3.0.4-150400.5.9.1.src.rpmapparmor-docs    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3d@d@cbk@bi0@bZbV@bT@bRbBb<]@b@a7aZ@ap@aabaim@aEaaua $@`#@` @````_@`%@`!'`>` @__ǁ_ǁ_Q_h__@_~@_[f_P_-B@_@^m@^@^<@^j$@^,-]҇]o](]K@]]@\\@\ \\v{\I\ include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527)- prepare usrmerge (boo#1029961) * use %_pamdir- update to AppArmor 3.0.1 - minor additions to profiles and abstractions - some bugfixes in libapparmor, apparmor_parser and the aa-* utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 for the detailed upstream changelog - removed upstream(ed) patches: - changes-since-3.0.0.diff - extra-profiles-fix-Pux.diff - utils-fix-hotkey-conflict.diff- Use apache provided variables for the module_directry: + Use %apache_libexecdir + Add apache-rpm-macros BuildRequires- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in de, id and sv translations (and fix the test) (MR 675) - add extra-profiles-fix-Pux.diff to fix an inactive profile - prevents a crash in aa-logprof and aa-genprof when creating a new profile (MR 676)- update to AppArmor 3.0.0 - introduce feature abi declaration in profiles to enable use of new rule types (for openSUSE: dbus and unix rules) - support xattr attachment conditionals - experimental support for kill and unconfined profile modes - rewritten aa-status (in C), including support for new profile modes - rewritten aa-notify (in python), finally dropping the perl requirement at runtime - new tool aa-features-abi for extracting feature abis from the kernel - update profiles to have profile names and to use 3.0 feature abi - introduce @{etc_ro} and @{etc_rw} profile variables - new profile for php-fpm - several updates to profiles and abstractions (including boo#1166007) - fully support 'include if exists' in the aa-* tools - rewrite handling of alias, include, link and variable rules in the aa-* tools - rewrite and simplify log handling in the aa-logprof and aa-genprof - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 for the detailed upstream changelog - patches: - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 release up to 3e18c0785abc03ee42a022a67a27a085516a7921 - drop upstreamed usr-etc-abstractions-base-nameservice.diff - drop 2.13-only libapparmor-so-number.diff - refresh apparmor-enable-profile-cache.diff - partially upstreamed - update apparmor-samba-include-permissions-for-shares.diff and apparmor-lessopen-profile.patch - switch to "include if exists" - apparmor-lessopen-profile.patch: add abi rule to lessopen profile - refresh apparmor-lessopen-nfs-workaround.diff - move away very loose apache profile that doesn't even match the apache2 binary path in openSUSE to avoid confusion (boo#872984) - move rewritten aa-status from utils to parser subpackage - add aa-features-abi to parser subpackage - replace perl and libnotify-tools requires with requiring python3-notify2 and python3-psutil (needed by the rewritten aa-notify) - drop ancient cleanup for /etc/init.d/subdomain from parser %pre - drop (never enabled) conditionals to build with python2 and to build the python-apparmor subpackage (upstream dropped python2 support) - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed - set PYFLAKES path for utils check - add precompiled_cache build conditional to allow faster local builds without using kvm - remove duplicated BuildRequires: swig- update to AppArmor 2.13.5 - add missing permissions to several profiles and abstractions - bugfixes in parser and tools - fix two potential build failures in libapparmor - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5 for the detailed upstream changelog - remove upstream(ed) patches - changes-since-2.13.4.diff - abstractions-X-xauth-mr582.diff - sevdb-caps-mr589.diff - libvirt-leaseshelper.patch - cap_checkpoint_restore.diff - add libapparmor-so-number.diff to fix libapparmor so version (!658)- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, cap_checkpoint_restore.diff)- %service_del_postun_without_restart only works for Tumbleweed, keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x- Make use of %service_del_postun_without_restart And stop using DISABLE_RESTART_ON_UPDATE as this interface is obsolete.- libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253)- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547)- add abstractions-X-xauth-mr582.diff to allow reading the xauth file from its new sddm location (boo#1174290, boo#1174293)- add changes-since-2.13.4.diff with upstream changes and fixes since 2.13.4 up to 5f61bd4c: - add several abstractions related to xdg-open: dbus-network-manager-strict, exo-open, gio-open, gvfs-open, kde-open5, xdg-open - introduce @{run} variable - update dnsmasq and winbindd profile - update mdns, mesa and nameservice abstraction - some bugfixes in the aa-* tools, including a remote bugfix in the YaST AppArmor module (boo#1171315) - drop upstream(ed) patches (now part of changes-since-2.13.4.diff): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-fix-utils-network-test.diff - make-4.3-network.diff - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch - apply usr-etc-abstractions-base-nameservice.diff only for Tumbleweed, but not for Leap 15.x where it's not needed - refresh usr-etc-abstractions-base-nameservice.diff- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch (bsc#1168306)- fix build with make 4.3 by backporting some commits from upstream master (boo#1167953): - make-4.3-capabilities.diff - make-4.3-capabilities-vim.diff - make-4.3-network.diff - make-4.3-fix-utils-network-test.diff- update to AppArmor 2.13.4 - several abstraction updates (including boo#1153162) - disallow writing to fontconfig cache in abstractions/fonts - some bugfixes in the aa-* tools - fix log parsing for logs with an embedded newline - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4 for the detailed upstream changelog - drop upstreamed patches: - abstractions-ssl-certbot-paths.diff - apparmor-krb5-conf-d.diff - libapparmor-python3.8.diff - usr-etc-abstractions-authentification.diff - refresh usr-etc-abstractions-base-nameservice.diff- add usr-etc-abstractions-base-nameservice.diff to adjust abstractions/base and nameservice for /usr/etc/ (boo#1161756)- Properly pull in full python3 interpreter- add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657)- add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)- add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys- add apparmor-krb5-conf-d.diff for kerberos client- update to 2.13.3 - profile updates for dnsmasq, dovecot, identd, syslog-ng - new "lsb_release" profile (only used when using "Px -> lsb_release") - fix buggy syntax in tunables/share - several abstraction updates - parser: fix "Px -> foo-bar" (the "-" was rejected before) - several bugfixes in aa-genprof and aa-logprof - some fixes in cache handling - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3 for the detailed upstream changelog - drop upstream(ed) patches: - apparmor-nameservice-resolv-conf-link.patch - profile_filename_cornercase.diff - dnsmasq-libvirtd.diff - dnsmasq-revert-alternation.diff - usrmerge-fixes.diff - libapparmor-swig-4.diff - re-number remaining patches- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig 4.0 (boo#1135751)- Disable LTO (boo#1133091).- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by update-alternatives (boo#1127877)- add dnsmasq-revert-alternation.diff: revert path alternation in dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid breaking libvirtd (boo#1127073)- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile to match the newly added libvirtd profile name (boo#1118952#c3)- Use %license instead of %doc [bsc#1082318]- add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499)- add profile_filename_cornercase.diff: drop check that lets aa-logprof error out in a corner-case (log event for a non-existing profile while a profile file with the default filename for that non-existing profile exists) (boo#1120472)- netconfig: write resolv.conf to /run with link to /etc (fate#325872, boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch- update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch- update rpmlintrc: - whitelist .features file which is part of the pre-compiled cache - comment out filters for the disabled tomcat_apparmor subpackage- Backport dnsmasq fix: 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch (boo#1111342)- add make-pyflakes-happy.diff to fix an unused variable (SR 629206)- add fix-samba-profiles.patch - smbd loads new shared libraries. Allow winbindd to access new kerberos credential cache location (boo#1092099)- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing (logprof-skip-cache-d.diff)- add fix-apparmor-systemd-perms.diff - fix permissions of /lib/apparmor/apparmor.systemd (boo#1090545)- create and package precompiled cache (/usr/share/apparmor/cache, read-only) (boo#1069906, boo#1074429) - change (writeable) cache directory to /var/cache/apparmor/ - with the new btrfs layout, the only reason for using /var/lib/apparmor/cache/ (which was "it's part of the / subvolume") is gone, and /var/cache makes more sense for the cache - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both cache locations - clear cache also in %post of abstractions package- update to AppArmor 2.13 - add support for multiple cache directories and cache overlays (boo#1069906, boo#1074429) - add support for conditional includes in policy - remove group restrictions from aa-notify (boo#1058787) - aa-complain etc.: set flags for profiles represented by a glob - aa-status: split profile from exec name - several profile and abstraction updates - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13 for the detailed upstream changelog - drop upstreamed patches and files: - aa-teardown - apparmor.service - apparmor.systemd - 32-bit-no-uid.diff - disable-cache-on-ro-fs.diff - dovecot-stats.diff - parser-write-cache-warn-only.diff - set-flags-for-profiles-represented-by-glob.patch - fix-regression-in-set-flags.patch - drop spec code that handled installing aa-teardown, apparmor.service and apparmor.systemd (now part of upstream Makefile) - simplify "make -C profiles parser-check" call (upstream Makefile bug that required to call "cd" was fixed) - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ - move 'exec' symlink to parser package (belongs to aa-exec)- Set flags for profiles represented by glob (bsc#1086154) set-flags-for-profiles-represented-by-glob.patch fix-regression-in-set-flags.patch- add dovecot-stats.diff: - add dovecot/stats profile and allow dovecot to run it (boo#1088161) - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) - update 32-bit-no-uid.diff with upstream fix- Change of path of rpm in lessopen.sh (boo#1082956)- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is read-only and don't bail out (bsc#1069906, bsc#1074429)- add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477)- update to AppArmor 2.12 - add support for 'owner' rules in aa-logprof and aa-genprof - add support for includes with absolute path in aa-logprof etc. (lp#1733700) - update aa-decode to also decode PROCTITLE (lp#1736841) - several profile and abstraction updates, including boo#1069470 - preserve errno across aa_*_unref() functions - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 for the detailed upstream changelog - drop upstreamed patches: - read_inactive_profile-exactly-once.patch - utils-fix-sorted-save_profiles-regression.diff - lessopen profile: change all 'rix' rules to 'mrix' - add 32-bit-no-uid.diff to fix handling of log events without ouid on 32 bit systems - no longer package static libapparmor.a- update to AppArmor 2.11.95 aka 2.12 beta1 - add JSON interface to aa-logprof and aa-genprof (used by YaST) - drop old YaST interface code - update audio, base and nameservice abstractions - allow @{pid} to match 7-digit pids - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 for the detailed upstream changelog - drop upstreamed patches - apparmor-yast-cleanup.patch - apparmor-json-support.patch - nameservice-libtirpc.diff - drop obsolete perl modules (YaST no longer needs them) - drop patches that were only needed by the obsolete perl modules: - apparmor-utils-string-split - apparmor-abstractions-no-multiline.diff - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in apparmor_parser - refresh utils-fix-sorted-save_profiles-regression.diff - add aa-teardown (new script to unload all profiles) - make ExecStop in apparmor.service a no-op (workaround for a systemd restriction, see boo#996520 and boo#853019 for details) - lessopen profile: allow capability dac_read_search and dac_override, allow groff to execute several helpers (boo#1065388)- read_inactive_profile-exactly-once.patch (bsc#1069346) Perform reading of inactive profiles exactly once.- update to AppArmor 2.11.1 - add permissions to several profiles and abstractions (including lp#1650827 and boo#1057900) - several fixes in the aa-* tools (including lp#1689667, lp#1628286, lp#1661766 and boo#1062667) - fix downgrading/converting of 'unix' rules (will be supported in kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for upstream changelog - remove upstream(ed) patches - upstream-changes-r3616..3628.diff - upstream-changes-r3629..3648.diff - parser-tests-dbus-duplicated-conditionals.diff - apparmor-fix-podsyntax.patch - sshd-profile-drop-local-include-r3615.diff - refresh apparmor-yast-cleanup.patch - add utils-fix-sorted-save_profiles-regression.diff to fix a regression in displaying the "changed profiles" list in aa-logprof- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)- profiles-sockets-temporary-fix.patch to cater to nameservices with the new sockets mediation, until unix rules are upstreamed (boo#1061195)- add apparmor-fix-podsyntax.patch from mailing list to fix compilation with perl 5.26- do not require exact X.Y version of "python3" - require also matching python(abi) which is arguably more important- don't rely on implementation details for reload in %post- add JSON support. Required for FATE#323380. (apparmor-yast-cleanup.patch, apparmor-json-support.patch)- add upstream-changes-r3629..3648.diff: - preserve unknown profiles when reloading apparmor.service (CVE-2017-6507, lp#1668892, boo#1029696) - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) - update nvidia abstraction for newer nvidia drivers - don't enforce ordering of dbus rule attributes in utils (lp#1628286) - add --parser, --base and --Include option to aa-easyprof to allow non-standard paths (useful for tests) (lp#1521031) - move initialization code in apparmor.aa to init_aa(). This allows to run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser don't exist. - several improvements in the utils tests - drop upstreamed python3-drop-re-locale.patch - no longer delete/skip some of the utils tests (to allow this, add parser-tests-dbus-duplicated-conditionals.diff) - add var.mount dependeny to apparmor.service (boo#1016259#c34)- Cleanup spec file: - don't use insserv if we afterwards call systemd, this can have bad side effects - remove dead code - remove now obsolete 'distro' checks - Replace init.d script with new wrapper working with systemd- add python3-drop-re-locale.patch: remove deprecated re.LOCALE flag in Python UI as it was dropped from Python 3.6 (lp#1661766)- Fix RPM groups- add upstream-changes-r3616..3628.diff: - update abstractions/base, abstractions/apache2-common and dovecot profiles - merge ask_the_questions() of aa-logprof and aa-mergeprof - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor - adjust deleting the cache in profiles %post to the new cache location - silence errors when deleting the cache (boo#976914)- split libapparmor into separate spec to get rid of build loop involving mariadb, systemd, apparmor, libapr and mariadb again (see the discussion in SR 448871 for details) - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but with minimum BuildRequires- update to AppArmor 2.11.0 - apparmor_parser now supports parallel compiles and loads - add full support for dbus, ptrace and signal rules and events to the utils - full rewrite of the file rule handling in the utils - lots of improvements and fixes - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the detailed changelog - patches: - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed - refresh apparmor-abstractions-no-multiline.diff - refresh apparmor-samba-include-permissions-for-shares.diff - spec changes: - aa-unconfined switched to using ss (from iproute2), adjust Recommends: - move libapparmor to /usr/lib*/ - drop %if %suse_version checks for 12.x - change several Obsoletes from %version to < 2.9. Those package names weren't used since years, and 2.9 is still a careful choice - include apparmor.service independent of %suse_version - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires - drop latex2html, texlive-* and w3m BuildRequires - techdoc.txt and techdoc.html not included, drop them from the package - run most of utils/ make check (some tests expect /etc/apparmor.d/ and /sbin/apparmor_parser to exist, skip them) - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) - drop sed'ing python3 into aa-* shebang (upstreamed) - build binutils - aa-exec is now written in C and lives in /usr/bin/, move it to the apparmor_parser package and create a compability symlink in /usr/sbin/ - aa-exec manpage moved to section 1 - aa-enabled is a small new tool to find out if AppArmor is enabled - package new aa_stack_profile(2) manpage- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/ (boo#1015249, boo#980081, bsc#1016259) - add dependency on var-lib.mount to apparmor.service as safety net- update to AppArmor 2.10.2 maintenance release - lots of bugfixes and profile updates (including boo#1000201, boo#1009964, boo#1014463) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression in aa-unconfined - drop upstream(ed) patches: - changes-since-2.10.1--r3326..3346.diff - changes-since-2.10.1--r3347..3353.diff - libapparmor-fix-import-path.diff (upstream fix is slightly different) - nscd-var-lib.diff - refresh apparmor-abstractions-no-multiline.diff- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and abstractions/nameservice (path changed in latest nscd in Tumbleweed)- add changes-since-2.10.1--r3347..3353.diff with upstream changes and fixes in the 2.10 branch, including - allow writing *.qf files (for disk-based buffering) in syslog-ng profile - add several permissions to the dovecot profiles (deb#835826) - add a missing path in the traceroute profile- add changes-since-2.10.1--r3326..3346.diff with upstream changes and fixes since the 2.10.1 release, including - allow dac_override in winbindd profile (boo#990006#c5) - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since Samba 4.4.x, boo#990006) - abstractions/nameservice: also support ConnMan-managed resolv.conf - let aa-genprof ask about profiles in extra dir (again) - fix aa-logprof "add hat" endless loop (lp#1538306) - honor 'chown' file events in logparser.py - ignore log file events with a request mask of 'send' or 'receive' because they are actually network events (lp#1577051, lp#1582374) - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) (libapparmor-fix-import-path.diff) - refresh apparmor-abstractions-no-multiline.diff - drop upstreamed profiles-ping-inet6-r3449.diff - add %check section - runs libapparmor (including swig bindings), parser and profiles tests - add BuildRequires: perl(Locale::gettext) - needed for parser tests- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)- update to AppArmor 2.10.1 (2.10 branch r3326): - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 - drop upstream(ed) patches: - fix-initscript-aa_log_end_msg.diff - syslog-ng-profile-boo948584.diff - upstream-profile-updates-r3205-3241.diff - refresh patches: - apparmor-abstractions-no-multiline.diff - apparmor-samba-include-permissions-for-shares.diff - drop libapparmor autogen.sh call (broke the build) and remove libtool BR- add syslog-ng-profile-boo948584.diff - add several permissions needed by latest syslog-ng (boo#948584, boo#948753) - add upstream-profile-updates-r3205-3241.diff with several profile updates: - add /usr/share/locale-bundle/** to abstractions/base - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash - allow dovecot imap to read /run/dovecot/mounts - allow avahi-daemon to write to /run/systemd/notify - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) - update dhclient profile - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) - and some other small updates - drop upstreamed apparmor-winbindd-r3213.diff (included in the upstream-profile-updates patch)- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)- add apparmor-winbindd-r3213.diff - add missing k permissions for /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript output (boo#862170)- update to AppArmor 2.10 (trunk r3205) - profile names can now contain variables - improved profile compile time in apparmor_parser - lots of improvements, refactoring and bugfixes in the aa-* tools - new apis for managing and loading profile caches into the kernel in libapparmor - lots of profile updates - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the complete changelog with more details - add new apparmor_private.h and the aa_query_label(2), aa_features(3), aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages to libapparmor-devel - drop apparmor-2.5.1-edirectory-profile patch - it's most probably no longer needed (see boo#621394 for details) - drop upstreamed samba-4.2-profiles.diff - refresh apparmor-samba-include-permissions-for-shares.diff- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)- update to AppArmor 2.9.2 (2.9 branch r2911) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the full changelog - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and apparmor-fix-stl-ostream.diff - replace GPG key with new AppArmor GPG signing key, see https://launchpad.net/apparmor/+announcement/13404- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - add samba-4.2-profiles.diff: update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)- only install apparmor.service for openSUSE > 13.2- Add a native systemd unit which *at the moment* only wraps/masks the early boot script.- add apparmor-fix-stl-ostream.diff which fixes odd uses of std::ostream which are not valid. Fixes build with GCC 5- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)- add apparmor-changes-since-2.9.1.diff with upstream fixes since the 2.9.1 release - update logparser.py to support changed syslog format (lp#1399027) - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles (lp#1296667) - update the mysqld profile - fix network rule description in apparmor.d(5) manpage - drop upstreamed dnsmasq-profile-fixes.patch - update expired GPG key- update to AppArmor 2.9.1 (2.9 branch r2831) - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) - several fixes and performance improvements in the aa-* utils - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and bnc#908856), useradd, sendmail, man and passwd - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 for full release notes - refresh dnsmasq-profile-fixes.patch- Fix dnsmasq profile to allow executing bash to run the --dhcp-script argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt leasehealper script to run even on x86_64. dnsmasq-profile-fixes.patch. boo#911001- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the script filename- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs confinement. bnc#906858- delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042)- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- fix bashism in post script- update to AppArmor 2.9.0 (r2759) - change aa-mergeprof to the final commandline syntax - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several bugs without a formal bugreport) - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java and user-mail abstractions - fix mod_apparmor to not break basic auth - update perl modules to support signal, unix and ptrace rules (bnc#900013) - don't warn about rules not supported by the kernel - fix logging of "audit capability" (lp#1378091) - add support for the "hat" keyword in apparmor.vim - build html version of apparmor.vim manpage again (lp#1366572) - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 - update apparmor-abstractions-no-multiline.diff - remove upstreamed apparmor-profiles-ntpd-pid-location.diffh01-ch4d 1694064909 3.0.4-150400.5.9.1apparmorapparmor.vimapparmor-docsaa-teardown.8.htmlapparmor.7.htmlapparmor.cssapparmor.d.5.htmlapparmor.vim.5.htmlapparmor_parser.8.htmlapparmor_xattrs.7.htmltechdoc.pdf/usr/share//usr/share/apparmor//usr/share/doc/packages//usr/share/doc/packages/apparmor-docs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30575/SUSE_SLE-15-SP4_Update/509e71de7e3059801e8af2f2d82e38e6-apparmor.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII text, with very long linesXML 1.0 document, ASCII textXML 1.0 document, ASCII text, with very long linesASCII text%Y/'ގutf-8bc141ff7ae09a1486ff3c29dbc806e274a4b2b9f51dd5b6a88bad0b1a851ca69?P7zXZ !t/)t]"k%{=CQZuǡjע|v=X&I}Uٞ\obCBA)٠sRI*(d"gw#ůԉ:px5lꩭ^\YQ؏tpîis~2v>u ef):u' >vS;㈣+s5C(o~`ެjI%N>+t6iinQZSM/pȑ)Z<1s o*|<%6LlY?Wq]sD5%i#+@wGG1J&!oX ؘ뀁On5igH:O+ K`'l? o%fS64Ușbl4.7-ኝ܏=N>›o^$Ytv cZuc;%^2 w9/ŁViE{NАr?-REXbfmlb[d4}$S3Y!.i?=x6mМeV vokWQ $C`6Ru}\n<_s7 P |79Q2kw"썘[jmQ,j(j"o)<я5+hyDa<Ϸ yh/̲.c,emFWGq?(S i㜪ɾleB yp5HNے0% /uh[?ㆱۧ)/` -/*pdUb06T Jk&U[7葷9U.l#[#}cMsdž\@d6ͫ7;G-#qcH8PkؔS$C¢)򶄧 wʒ<!wh;e8g0b :zZ%ۙAOh3^tjpxW90B3rE맿s]ɛ5 F~̵|:d\ P[.q8 +x1PI~$ڀ(BU&yaaOIJ]"f7!gL,NXN)-q`MGg cMJҡ~v|S'ǤT9V.@ xL~1M{k<+%u\}ވ\?!`v V$Q $ΘZTTj#0 S 0Ac(HP>ka!e7vï c1M?/G=JAJp3wҋ!mg|4v5AqusZr58`YpqhsEۧGpXz V#GYK'k'Ņ{%HAswST8m &Yvc }_wϔb|jxE]ѳEu rKC*XscF 蠵-] ꠸<깘 {G[i˷@i's| `z4+qR!qEJ1"LG$a}wvT҈N Q!9%{|aP{{&a3*J7\(6}y =a R ?zj3#O`fJ12 ʛ2eݘ`qx9Us!ܮD_h3:^}l[6;LIT1J/dYܛS|eC }UsQ1OwN{-D)O]8R-eCi;C>!#/tB[LBG(p]^ݙVq0rNʕsb u4&5:SUFJ{c(qèp{ޒ7(NL/Jď*cE-JRiaXQOiw>K Id2E.{E2y$}n?@uOP̚?=7 7 *v.d}@Fcq8rv qZŸ,μ!aɴ=P*b@{ { ;V ^Dn`v},5OG15~}z:@A9uYdoKV w~IV˷LޜWxgRK/y4 Qm?Z:A9yl7+sRJU(k˷g|Ɛ}-^\GI1IǧY{A=-.JAS$<4yt^}8Wt=a9B_ftSW˽ ʺ=)+tpb09EI?@eW3$[Ӝ&Cǁ"Vœvj26kZMxl`jj#ix`?} r4y+;8+ ,7I}7r H3ß t%`/Fw`=e%Yh/"%>a T[  5z#Nu7ph~Ër@"2サX*=wwi:Xc&ߡea0ehJì _(~Ur b2t44V0OM7nf[) cMל>4u8tz2uW Vch׫n\D;Y`|/v/!j "7>TG';Dk)jy ރˋؤh>Á?DlOÕ"~bc5;ֵK)5d>ݞ; YtW]GkpJ k5^Gk?X(hװzwl!C[+K֛O5ثr#DO.$"JIT+v~7oo6D8) f7H4AylFH076' :QiCb,G+fk0JS͵O+/:.yMt9࣠*,xNJ+4eH}CU 0;>{"ꭖf?:+mfAܗɮ<THq>jx0Z,D\@EpVnBW;VǺ Ő0(hg?5>V._)+h_U o2PNH"T{EŮҀCyVP4K-'p <a|5'Kri")lA-k8_}3r%=:Ε8=m|dG4ǭb؏N֎V#(UɌ!jd5?YlTElv l|+8 q$QRZ79zݢܽHEؙvM<=ԛwtZ9 Q[]/V!ϾR"ؖNQOۮ/y)pyP򼺩.)&~@7',.qs#CUZ/ (N-@S2]<>7hGYAiD ~gmx0x+$(Hx3B㞓V觞'q Ng+z n3!UxV⾳9 dݬ.bXVȸ)+$T yRiXxp)d)F*%CF+{Cî XFtY{x2~UOPVrwYև}t)#<-ٸv cA©sEfD]wE묹7q,!qj;}cAV΋hdҔjsvI.!!ۼb *_˵bJ!sJd y5;]gPrt_N)LԊ%} ltT`Gц;[)2')#CXG<-xFfkϺ T4p0<z TըŽuesRFmm@}a&Q"6ۗ Խ?gLjIu35序t3΄$ 6-Z+ND1_ng"$ ƹ܄w T@^k@K9<[F-_‘iջsϹ:̙2`Z55kd˾Ma ɛEOx˾ P^nS`lƬOmRj-aOMY ڠcIjrx@)ݏL(EΏørl q8wLu  IS]o<.zRİ|{fwhqg\!NDAC[ cqR!k#4s:9=3SRe)DӸa- ty1aOE脥//PuoNUJ94 `Ik5\wy:)Ht 97+/rA3l4I.[_^K,͜sgw E*]faPF޻4* ~cajl~> /pׄUCt_`+d@y?<sVeϳgf@и\<`6nZD\257ޏ g@i v\I'/Sd̨ԃeЄL07d2)$̄k LO/Cxa'pXw mf5*qc/` ˂(&P\߈>&k1߮~*r^֢ m[/ AjF%KU5(9P[p¨T ϕ!ni$]Q(sW4IE`sj= +>4g|0Ze'NgE M=y.~gA+V{W^g\;--0n]d;eSAL(Os Bܴ&g&'3+WPӰ9O 4}pl#V@k=J&=˗YaNi=R'#V2î&=Xj'Bmj*!0R@@O(=*hQm 3;ihl_(yzYGa弳_z9Y/-۸K*XLt/k3({(0zʼn Usͭ3+>62E2b-o/eWZfIT}+߾ ՀAsD#M e4eNӀ_FFfK.et=)g/JH wB8fsj:xLN@@Z6xy5{.Xzߍffb3DL{0|q~QO-CzQ]+, 'n&*Ug\q@_ݸ>Ќuj*fI5  ެC?_$~__ϣnL?0|o'oUśwK8}O`MUAw$ݗ;ͭaE5**NZOk*Xn Su/-xM.&ؿhA" )QDs+rC(o.ZOOm&hŸ}Iϳf3&UI^ :zs7Զ9FVL2i"$ =p*^:‹/LcmY6;@3o@v}_PbIS0Wb{Zߑ&BQtEFӵ Teζ"͹|퇜3C1ۛjdKE<׉~!QÂʃ [lrz;!}#Ǥ?d:{ .3|':b(+|SEY @^) sTfH L:/NLÐzcE(ͷ;)k UtOs`[qe$m.l9%zb0+g "_l.F{^MI6ޢ?^<%j71md$2"j?>/"c3>i"{e})jAТQo@+|dSE;'t,O6IQNA,TM궴D QQ$lk+uB`o'Lz'̨1@ꬩlD`C^ /'wVP>KɽIk+d$!-I[@%nY[fV &htn%5$yLSĹ0t yԉ\WɷOA5yb1s 1=S?sD52-W\RԪ[b_J !nw:Hۚ^^S:E:'($ܿT`ɹ `xU` ^0Yp"6E 3m@ m>O-wy4X=̀:k]'Heڏ6g[]bz;!k(U,\LzBah$ ̙ ރmy[fKH j%?m|C%m؄MK Zu `9N?D,v}/srOp@imҏJ[suŜ*.MqF"=NI<Qw9=[uzBJzWVO"2;I#4Koo[2rqo~;[!u@j_h-\՚O?: '8pE(N\hW4mroϛN\&fCi zSVy͞Wfbp3jCn;Nw{E\5iϽ}j6FzL9Gо:?mHu=Z,P[3ɀ=wlaOJ]jb ɜ ;ORf5a:#GGŮ|am/;h+IvV"^El|)Ia}z'ӗ2t5JQr8n$m)XUf^*ZA;h@*7H2iw8L$eQwSp` Em$΁bU RX[V0dp(̀à^&ngƶtd'jCsUU(FW cu$gR J(z ٞ!d8!0u\ߨƂ]c]4KkR Rf_L]mropW33Y\ G/3a:yqBÏ~L9]!M!Iy25Ӭ6CJPSROXkuRTe4?\J]HVXlUx` @ASmX粜WٔL o.Ea gh<~buE}wC33rI7xLɬJLwvCn!a. x +G|'x=B!Pւxnʄ&Q3]Vh`=uEt΋1% X`$Ŵ}y/\gAtrU UE%h {; q&wS{-5 pI`V_&";a0>{T<𾒶 ~oL^j /h_8=vʗ,IU?h#"B3+~=6ia쑬CA{RBrwگh}G*4R_ZTx荧BUtYA辤G)`Z8,#Mssxn5Xa0@d^U8=m~bï yLck+pg~$+xC 8*s:dN @'%po3>~f.m҆:^{tW/~X5ogZ~|RS 9I՝bL40aSV#xٌl/h% vbÅId* .Nͫ4`Ь 1 w3)ѓgs%tOWU;`XqAqρ;$\];bG ՅR_Qi`%x$GpXdIu?* |]) Q?l2Ba)&1*?AH6ʠydѩhӘ̖o[9\%<ģ+5:5AEhU$c'9,ljj7HBX*:3~߸bLYkԧlG/48GxXsI;_ ̱njS"_0 m4ifWS.ZOT''Ă}8Z]8 1Xd5KBǝ!j(-s&Ru|AHLn>hξwVJG`Rt:{;X5Wdg?ԯ6.?ڏXrové,Ϲod@(FS CۜZ L1Խ$72mry)RIcMZw,ք"b{O7˸}[+G谀P|Q.RiEjq =UټASU@; v߫Ͷpۦ H+|F6R>, n&Q[QI142&m(=Z_^&PaW3'jۙ PH!6oHգ*vn\pn@ tsږн-`Wجɷ -TL=t=.HQ~;eu?21zXCz3qcAQyI6:b\"0QvSn>{ecmRnFM0%&U&a4+IugpUZ ltl2RD 1tlUhEZOQ%4AWgOIg+N#s<|YVj gd-r:  BOQ^)8v){3whȓ]A-m]s$CK)V"O7BÃ)M ?W(N0 >wTE. ѩPܕ/!(J_n*Sǘzh?CQ5@w>@:d[fzHB`Fj;۪qo"y7{qmVdhròAN㬯b(zD}N aB2D:]UFD.kn& Nc[H;5umϠ)s!c'p+ʇL-'Gn<l\\Q›~u4/GcU7ӌ6w#LaVʆTZs ~K j>G"FZq߅XBřu(L \OMA44dƞa#G A35RUYbEJUnB)Sx+L!2q74<=ϫ':c {k&7A$Qj_))EƬ$Wi$`u"NKZIw`|u!FONd>~![?骯еߩeLHht\Q#ۜG4D =VgiMvpj&6aq,U#I) նSW)z>{1}Y1UWeh"{L\bc)7QcF)޵[ 1-l76{,n8~ i4j]CJ%tc NPgS͝sKtpYc';6ɔCN~R1NN`&v>wIV?z/8$SAaf1c`[RIL:e,a%{iPq70I"#T>px銡5)> s?WyAodv<ӥ|.ː4}2,Aiyw>1! rfDe(=%queF$1dױb0.KFŒK-X"+QM^O;.^+a!hg#Ja_x)/rN?R1B(~`iDd+OIwwrL~dXºS-Hb\y"Ds@DAE77Ø+s8eYlw<"*nѐ7^4p>0#V}"ïSgJJ_!NE"/hN?N]n3$Ar~z%lNQP zļ EG3X+H= OfA ɞb@] />0=$hLkeܚVp?KbZA[ LϲRG XwTJU-tY=d /ȺJ53[n=u#>]v4nA|D<"(ʍh @BgFĸNZlY]x !nrq a,l~㤙A R5&yDۊjh%@d7'ῧs#%x)%=Ja ZEG~[nbx͕gMVA Fʭ(a 2X{fC%8V=NLg5D],]N0T?3v)T>׏ݕ o qvY7>FID!|9wxM4*z!ܶ{}\;<5JݡT!>iw mOHfn 8NEH\E"HP6wv|h^P\[EdLNY_x0!@ORa /]Gn=,D?ήD붒>!rLhws7s$BKvQU vX͊jy=ba1z?-jp/6шR6N>CD4j"t\[+~yRdZ؍ B}or4_V\~Ƞ,?.701j%n[2t^r?H=H/ъdG 4#Up|_ "MccTHUSkP;-yw:.K rY\k~384Z`evX>9ɩXC$/@ lhFÆ> GtpX={L!kC ɳD\\pOOzuW`M6@|$Wlf"o)Rl Cձ 6ATtB EOɮW;q^78W@bg i]z b8JF9o<{&:48W=O bQpzm{kavP7n܂7\^p "؛W1p B/6`ҡ 8LvfUJ ΒVv %s}l~.F$[KP15hr3:4 V1;9hW|VcdkΌb_^(Zt4$UPS垊N &'H#2ċm!; 2O -NnFCs:&š"5SMKq|gTI64?`>ۘ*3Shĕ]G~h_;3wK`b$ _]w}=Mۑ-Rg,$F ;yyk W5s"vFּפsU HC =ڟodb>s`jHwE !;faƿn MMɲ)>OᯤwED߳r(BkKq$ލFDYix'vfԦ; #j"m6c—wu j! zF[WDS>$QT:9yxnl _ VHhp0H~)X#"ѻ&Uuc쐵 vRQMq޷E@k#U|e|/6W*+}:CD!6B뇉,ʮW }ؐ|xA0'1k{3o .&haJDi.35ѽ'@N k W#./o]2vUWQcPK֟+vۦYXw`uʾL @ v@jVX律 3k yC:VM^AU:pvtB׭ɼZ[3NurWI;b|>ňy$Ud9R llp3[~~ Qg^6SjqQp!r'7>msds{<{:̼C m;Lţ͉,ttQ'rxҘY7dH<&Xinjq|H:SZCq>A7A{~$~U®U-)U,_j[:T}"=\˿,D"o.OlZSzW}1Kbl~XOJ2{Ijȵʮ쵍lZ=V™@CbM?΍4JU(_̯=&}I˵Ћ; G WT!˿Oʱ -CUA$E2RUQ}^riJN7TP[zy4s$ 5^ a3)p`42P,Aͯnf ؃T`O`{ dͿ%L qAnBG+Gխ 錿s&Z: qȴ31o&c1fVhɑCUV$ăL\ [m&U>l^ϳeIu5# ܎1>[;VЃ?;H=eF2]굾) <5{\CޗeoS=l[.Oy *)X[#VT,Y ,j_hY+wM=]ʒKDpUdhK)NXpn}b?ygUi%`x{(vBta]ApbaУȻʘMՐg/ A< ъ BcRTikq|iJ!@3y<8vn t kZ$\~Jִ!MAewG,%{ 4j K%." ݊><CD,@v F%V,γP^@&\o N`yh+%f󓻱tPi0]P[ يltL"a@pڒ&E{Q|LqV ?)RtJ2X\yoPxVm2,~'pr$nGCzȭ1.h*Vpi˾Cڰ0T T6}Ycd1]M Q Yb re}9\ S ,߸cVcz\z2|/$2K x߹o3}ǚA:)gPܫ֬<lM7zK!#it+2zkݥ\9˚~8ד(.qg+'Qƌ@`;.ŅYnS/,@$\}YhŽqbmDNjS`;cFaQ3Ze^/q~R5Ͷ -yt1&}%ٝIg*Zġc{喁 ,is'Ɯ¬&މY v&k!D)8] ؊hꑜUُfqm'8$nn24oNCx7`GDsrZQO[nBiw=c`EQφB>gokLl.D+-♭.@o!-MV;#N<!LV]ʓmRԨIpҏDɃE ^4mYIl3 #w>(Kc.lAؚR޷xhΎg c4_54eUYNtYpt|&@O]@iLc6ܷCEكN)Kmְ(ĕA#+:6|on"4Z{7>wi[N(a:fAEoM 0cb4q/x7vN+-5[|r6,Zr@lQ4$_F#Y7)VO W)[˜Lc2xY(: ؤ'sa#=;QptḾx?zW!C czV͖@,O9h'o)|Ϥ%9O r]AZs9/#{(K}w}U;yK/7d/ڸt Y"Ĕƿnb|\ee 2NɼfhZiV |6|Tf{j &T Wl".r͐Cίx1O~h㴓[]FXJw \ɍ(.6fQHK67-u^r={L{VtK7P#6W+Kψ@I1fQN"ȗ ;b%,~ dUYc@i\>ԣ(>K D 䌙P'`nF$7M>ME|@aPnJ`vа$iQ2=88.}U< MwVBtw o&slm?9~tƣtkHLǎ~>-y4 HؖcQV[Re{-e|EoQ^0VpТM'I^"D>#y-$Q]j7ʡ!ܔh1UP?rixz-q%իl0DJpmXU H&.X[:;wAChy H*Lr6P#E\εp~; pG*^e4 Ӿ/@栴޲NR{HR0igOFp+fBAτ`I1F\Uif%E |zg srR(s^!CXK܃x [7zbd Aȶ-O=p H LJ1?hzxTdAeTe&: 7Ӕ?x7U1C@7TwThBoxdz6dO1EMMN2sL~_zY3!sd'79+C;~7)pVE+|o.ZD}$u' y@r+rY[@d+!%Q^[: '9c&5~#"&WaI# i'7EȑD N#/n*$l&E6%[|`޷@!%xW^3`'Fק= },$[XDyA<^<\UIBBdgj 3|-!s3϶eCe1*~%B`2GѪGƢ1QvX\'gYwҿd > 56nXāYS"!@ԚZqӳ*M6}qF* E o #g䷧v$32[G2b/Iko/RqM!FZXL w e͑T93(vaw<@WS26: oք˲>NB )?[:  )Oq՘X_7Ғa=N4zy;7؇R MK@,&I_*2zwY PC6m[9aZi>5t#`z#z7Y2QꦪZ?UַBJʮZ!z+ƥ٬|8'D0ߛ€MJMa$ew!/- !SNd}ޜ4teF$]y4㪾Ai/{@?v&;0ʠIPL}zA6Cmwra f.soB# 9f *WBf`OI)E葞d#OߏS<6ln,;҄oss9X./xTㇿб<~5Wm^bȇzÿq/&c??1Z2=c~NđiVp7#lde8#rdL 6uķY8Ȉ\<7FV*8v/dS*y`vUmiO6C.)栜Bى t4BVbVtsCʧ0k(xmp ;HٓWUF Yc YsAxn% J2b5[z#I J[gři!+N zlp {?q0zGCcgAųbp8_8ggG@yY2Ij{]p5li @ JDBkق_u2y v0,⌃| 8lcwս^~f8bp%-"+3ܢq2U`y6z[Y9N")#eI\I.D\8+-`.q*ls}$mVS =Ӫ81۸TX$']ۖ^7gTiIDkd?*;ep3YYzeN6؋rnzni^Bo81cy8M tS2vƪg WP`FV4YBގLk7}դ_b7Nq@.XLZ6f8R<ٷxQIFQQ4M2lhT-+m}꫘\,5a>Xϕu=M`tiOh6jUV:Q[t$y|P,׬`YT,9vyZr"}46"%9z2L' aqb:{p^׵'x!3}wO\=Z#i'ׇB` y߻R&E`8 ~!uyVY6;ֈsqE _Bqe2\`y 2i@׵?|~hPn_4yNh 3bl$Jpw | \ (MFD2HHl9!~; VuH<[q$=3ׂ'B\֒r.Lrvx@v~U'6ulk-8}/CiT> ~Ū67CAW)7|_h@'x(d'Lx(u&jMr p+wS=8b0- -gZf1wݚ6,aO|Y 8<97g<0hh_DAp2 -J:6Ey:]:jh.%1Nzps~lP}Wlؼ䇳Gdϣ!5]V<ښedr9!{%;^P5B_w-!jTHjρh!baN*yϼJF{!(.}@3sA>e.Rd5yN}WZzIrHsM{hK1|Mn +k_WlRg;ʝ8)Mr.Q%_)LC5}iZ H{xY%;5(UE0Puq ,F+ˍ-ϳƪELk9;y!?x# lɏWEC EO4ȥ`R?aT#P=wtH [}*(:|x10/& vC^L򮙙f; &،̏(TbF$qD(G" ))܉0 Ž_. $WD19D,W}VۆgF%l8`.T$KXGWDV}ac(@Di7rxudL.$u-\ s҇s C I)ZyCxVP:ZI{1zA;@SEIiK*w':_O }Ű^6pWWj)fk*}81Ը|cipkIpvx5~|EZ'l'lZnubXʈCmM&SԎqoEAKS,qcQ[+cqo<|] ыa[Ґ4J P~+̊z;+?Lgsl`[ݢ YM o?|g]FgbI|l KoMXP"_/#B[ /5EƜba:\r2%ÛD7dܚ)y5i!@Bg堠 2B bPNw2"4iKSnc㹍,e,|}"+=ٰ3ő(FtYHɐ `AZaOf 6kQN qSfY궕LQЊ)NqKt RHSzgB*@3F8ܠ,\V#?CP!-`)z;y%fSma|.O4kS Bs6#@d!p:|ǠL oMnҍyNr"dY_Y zažZu}9InJ݈~=hτl-ѕ1g*ଵK_md#arjJh*p-Z ={C<ȍX^26ZZ G&̿'3*ߞ$b:9+?`B\>^DV Ґ`y 6(2I0Y_!$p٬b/<0tӯ-cOB`i]| JeϪC!7ծ<^ u&,4 6.=Vq 'E*g9cn z5:}~[%4VP0rf\wҲ hQYiҞsjILNd5o=,J=\4sΊ. GB-*@"  X)^zKRvv7BJ{goQ750t\Tںp*:7ӀDaQ'%½D v.D~d&3Q z'@JIP<w~Aq-SfWwU&A]/UpDxAy?"|R"4 6.U"R 8ݰi9ޙQӣH8Eюeŭ8g3."`_[=Ɠ~lfN]fh EGh_4 LOVv7 Md >.PooT[ˍ@F?_b аyz!jv`[*2na8 k5"/_z;v9^|5 &;E-0S.؏7M Sz[P:JUȜO$ #ocdqbCm"D~,b97b6 SzRu/N/-$nݏ-ܕfd߈tllr\[#FBvzZ+:} -[(0020j=a/;R{3ȈWsx{w*}gpRAT꜒,,WLYe $~ė#C4{Dq^QIx>A0 !e.H@d+YE+o$2A ˊfϷ 4;޳6ۯzR[CVg9U-˚2ᮇ΅OZD֌`GyCf"9Ѝɂ{WYb\Ɯ^T= BaṠ1.9,ݳfkB ^<_@Ry҈6PKpSOVsqM _a[Pc*}?e b\ۣA\¦kj:|ۍ~ޡ۳Qp =s-{trwė }"unGYui~_N_e8` 敇'0/-g&Dw~?s#v5IjaL."jz(%-0S iTUluCq-@blS3avmց6m̄FC",yb?ˬO)Mi i6U#'11xtPO,9!:qhlN`egO!ߡAw9gYs;:r!K;'aHT]@Ǵ٠kmrPom빁q,^S7Lh>1kxe/ѷRpNkE(ILçЅL![K2bImS3謸)hh^<,ƙjRG(hN$A6)I* MJkrn<5pOfVϔݯ7yOmN:#s38 %=3wߡI`7I^Wz(BN[oX*XH xB=-Ag0&ka]̪o-r꫓ ܇~‰)YyƗb+zo))|"Zޗ}lN@|Co#% R˂R$]!gjRjkd8i5sϝu+Ti4s7\y\As*aR:./`;=~~k<F-|:n9Z`$R;1_5| ]x:o`㕈&C*M'ɕPm3'۔8|i񯿟m/j/D:w=p<-[,ѐ΁By'Ns4$«ct+`$&q ~}_cԴfѤ6`o1YNYmIP~v_धi(6ڝXYF|:%A0σF&Bu®~Vb&ڔ/$!8M*X: e_|zw33RNr9A3J27跶q쪗D&%h: s?/x >]gY.g l^?h`Ap̖ڥDw{葳`ᠸsuocSRl~42JE/~1р uw[bmmPƤFPBp) 2&l15I;i$!\YŇ|*>;^sSG)DPT5$ aeU۬~AO-4Pd~*ly񎈦r3Bįn]%&fM5+ ,i-k)wbV׷X_,(nwYS'i̤5/̗Z~#Oل4{< QzgZP$hFrz8#%n UEuD=fNUiGp` ?WX =bA1 4Pw3уEMlK~yX[nudbIDFJ;oor2v:iRuP3p :CÿZb(>gscjap,&'iLƸ.*\ Շ"@ά]xXD9-g). ǃ@+Wֆ Y>+,8n TߧQ;jc9eA@2D3{>=GrcHRvJWY_lk9$A<߭%P0jkQTPX  fRwpCpSf"0j]oݚ rh?NPTFPp瞃'?VIr\T_3v'0>]6icC9$b5Iitá'5#XJ]zmbD9u2Y%ca(Tuy!$] 尊k׏<ԕJMLD|R<r4[9zH+S lFqfy97*%^ՋIƯ4s߸%[@8jc%\4y0lw&X)EbmyNpHyas9 'v.Pihq$UHc#"aeG>!$Hg wY{PY[K.ʴٟo3X8rŀ2rvK,: 1$6܈'"r"o*z.s/jii6tQb`bvsuY > Z[$Ӷ3_l1:XaQDx$R,fX# GSgX؜aOo VDɺGxLϪ7`J(%ƛT4P*›9T(gtHyyY烮k-m $vJ;[lj~G(Dgޙ\YQ io#V>y!QUqp_C_ǫffmuGh?,!f+*%~3V(\!a  "5HR$>)8Tpa}B׬Ϙ \=.mHνXk/K5mcdK. lnq:#HV+"A,dᕢօ|* EH1mg 9&qdRa\+-X)uD]R;Ir*| yQB< j 6ʡN7$rJ @;eÚqs3MG@,迭_׏TZsYA#La? 9Gu5,K'S|Fk▞~cg,~'fn ޓ]a8uI cbTrw Mi5BSvhG%9'@O"b2G>$#,2ȆHX-"VԷ:% DdSw0 ~0Lﵘb ltٛ1;k5{4uJ%,?)|U #fȅ,i~VKv-XwxP0q"C'pEP+(y|qCZuZd[薟sXT~ɻPq*r9BԼ:OC>|ԉ (g$I\ԙvia $>DR&ExF KNt▹ʵ)1Cx+ ev%luYkϡ_0GQZa)\M?| MpI=L؎}+ ,V3ܘ|m) \mkf(u" g"Kyi%l4DWFEl&.Iv:o!_s1JI*2dۈyOfFCmt(&$NwJX S4۩% L%4kJF8ܚ`"P"=2̧KLagk`{K P]V(ls[<|נN8Ύ$#.Z MREWBEeOumKE3ܨ3DQT"Y{QDZã1->򗢾Krqh:6SNeaO}bdXn15Y"EL#kgXfZTAqNIY-){*n>0WjHI$?<[ƈF %i͸ loV4vqAEJ 9.[,=pd%4܌q #'{1-l#Ke({}q9J%V胧I>-R7յ6rDZV> /Q?|/P?!; La{rdфv7/U1Magb|t~CL^g"߄?mDՁOf984+\xn-/H_w \BX|^ۅ*|ʼn9k:g])`.E2bc 9dLP ?IKnwI4ڀM;%$mu۩e\ZDGMkjZ=ە nR/*rC !).\8Ϊ+)^hV+[eU&~ xN8k Laio?ܙM/#`J3ytՃ*SWÎu;iQLʰ#1} {- pU B/̍|6ȸlF. *0{\"ݪI}xҗ"2qAZ9kԑ!t>iϱ!7<~]Az!|:AvsuR+*G p$WE`U yCM*0~<;Rt"ٙcɀz6gPos{w 4(nzR}wre%Fc[k]98UvdKZRr>TRσDK_kת=mMsozlKPF悴)ȶ42pX)CENe1,Lk^l E3zEj(YR"A#ŷXBⒹ{ibAO\XRi;Uo Ś/>b˙YMJ-`# K-9>OcVCX :1pqpѱz/b(\V^YxL4֩,O䐶ֈ8zg`\!a`5lB5)T*u<ԀS h-KFҩUuG3,ȹs~}5д@,ׇSl]-KrWиx!6T~흖3\k(-lg]$N]m݀řd *XZ>2?z:kG꥟ߋV_ǡ#^Iχ[/u4䛯71߰]_\jYǦKbo͒,U2wYduB"('8];*LN8}I-2M^ic6ڲE:B&uGFk L7JJF]uꤽva]BhpWguȟ}LnJaqo[i 6^.Jјrmշ+˰߉JADh@ a(ж`qϧS3?p :Xd/&96Otb8uR?2 .Uga~3'E;/Da(%DXrc]q{dp2n%N.Ωй27вR"Od~z.fkd<騼j p2x ^)S$;NP~,"LqF";^P>d~Yy(ХjmvRW mﲼ 4YbcuQE<2QBy,6F:TgGʕeI}'*`Xm'0yA(Y8GdT"" ='J8 ª_I[ ~2У{|8.(FvXCh^1uFiތ8Bt a}1LH[ YZ