audit-3.0.6-150400.4.16.1<>,؉e`p9|lSa+nh<%4_#'#=mO[\,iB*CnK%A_\+41d?ltǻU%5 ܓqWQFƇNܻ* bJPxU9)N4y3*Na DQ Jr8U$7'AF0v4"PڄJZ Īr1q 3b05Wl3L*YtL<?,d  A&8 N`[[ [ [ [ 1[ 1[3X[5[67[889:(;8;&9;&:>~&=> ?@F%G<[H[I[XpY|\[]$[^bc)deflu[v<w[x\[y9z(Caudit3.0.6150400.4.16.1User Space Tools for Kernel AuditingThe audit package contains the user space utilities for storing and processing the audit records generated by the audit subsystem in the Linux kernel.e`h04-armsrv1(\SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://people.redhat.com/sgrubb/audit/linuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in auditd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in augenrules.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi# Save existing audit files if any (from old locations) if [ -f /etc/auditd.conf ]; then mv /etc/audit/auditd.conf /etc/audit/auditd.conf.new mv /etc/auditd.conf /etc/audit/auditd.conf fi if [ -f /etc/audit.rules ]; then mv /etc/audit.rules /etc/audit/audit.rules elif [ ! -f /etc/audit/audit.rules ]; then cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in auditd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in augenrules.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable auditd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop auditd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable augenrules.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop augenrules.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in auditd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart auditd.service ) || : fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in augenrules.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart augenrules.service ) || : fi fi/f @]MG/n:Q20C'#FFV+`XFHtR6 QDA聤A聠A聠큤AA큤A큤A큤A聠Ae`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`aW9aW9aW9e`aW9e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`e`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-syslog/usr/sbin/auditctl/usr/sbin/auditd/usr/sbin/augenrules/usr/sbin/aureport/usr/sbin/ausearch/usr/sbin/autraceservice@@Qrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootauditauditrootaudit-secondary-3.0.6-150400.4.16.1.src.rpmauditaudit(aarch-64)config(audit) @@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shaudit-libsconfig(audit)coreutilsgroup(audit)ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libaudit.so.1()(64bit)libauparse.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcap-ng.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libwrap.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.63.0.6-150400.4.16.13.0.4-14.6.0-14.0-15.2-14.14.3edhdhdq@bT@b?@b=b; aaaim@af@aHwaC1aS@a`D`@`@_ǁ_@^[\|[.6@[&M@ZlZZZz@ZyZ_:ZC@YYYu@Ym@VbUematsumiya@suse.deematsumiya@suse.deematsumiya@suse.deematsumiya@suse.dejengelh@inai.decoolo@suse.comematsumiya@suse.comdmueller@suse.comfvogt@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgematsumiya@suse.comematsumiya@suse.comematsumiya@suse.commeissner@suse.comematsumiya@suse.comematsumiya@suse.comdimstar@opensuse.orgematsumiya@suse.comabergmann@suse.comlnussel@suse.detonyj@suse.comjengelh@inai.deantoine.belvire@opensuse.organtoine.belvire@opensuse.orgkukuk@suse.detonyj@suse.commeissner@suse.comtchvatal@suse.comnormand@linux.vnet.ibm.comtchvatal@suse.commpluskal@suse.comaavindraa@gmail.comdimstar@opensuse.orgjengelh@inai.detonyj@suse.comtchvatal@suse.comtonyj@suse.com- Fix plugin termination when using systemd service units (bsc#1215377) * add auditd.service-fix-plugin-termination.patch- Update audit-secondary.spec: create symbolic link from /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).- Fix rules not loaded when restarting auditd.service(bsc#1204844)- Check for AF_UNIX unnamed sockets (bsc#1210004) * add check-for-AF_UNIX-unnamed-sockets.patch- Drop buildrequire on C++ compiler. - Modernize specfile constructs.- Fix buildrequire for openldap2-devel - audit doesn't require the (outdated) C++ binding, but the C headers that happen to be pulled in by buildrequiring the C++ devel package- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645) * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch - Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517) * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch- add audit-userspace-517-compat.patch- Use %autosetup - Don't include sample rules as %doc, they're already installed as normal files - Fix create-augenrules-service.patch: * auditd.service needs to require augenrules.service, not the other way around - Fix documentation for enable-stop-rules.patch- Update to version 3.0.6: * fixes a segfault on some SELINUX_ERR records * makes IPX packet interpretation dependent on the ipx header file existing * adds b32/b64 support to ausyscall * adds support for armv8l * fixes auditctl list of syscalls on PPC * auditd.service now restarts auditd under some conditions- Add CONFIG parameter to %sysusers_generate_pre- Create separate service for augenrules (bsc#1191614, bsc#1181400) * add create-augenrules-service.patch Remove ReadWritePaths=/etc/audit from auditd.service, also removes augenrules call from ExecStartPost. Create augenrules.service with the ReadWritePaths directive above. This makes /etc/audit only accessible by augenrules.service and let auditd.service (and daemon) to be sandboxed again. - Update audit-secondary.spec to accomodate the new service file.- Fix hardened auditd.service (bsc#1181400) * add fix-hardened-service.patch Make /etc/audit read-write from the service. Remove PrivateDevices=true to expose /dev/* to auditd.service. - Enable stop rules for audit.service (cf. bsc#1190227) * add enable-stop-rules.patch- Change default log_format from ENRICHED to RAW (bsc#1190500): * add change-default-log_format.patch (SUSE-specific patch) - Update to version 3.0.5: * In auditd, flush uid/gid caches when user/group added/deleted/modified * Fixed various issues when dealing with corrupted logs * In auditd, check if log_file is valid before closing handle - Include fixed from 3.0.4: * Apply performance speedups to auparse library * Optimize rule loading in auditctl * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath * Update syscall table to the 5.14 kernel * Fixed various issues when dealing with corrupted logs- harden_auditd.service.patch: automatic hardening applied to systemd services- Update to version 3.0.3: * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids * Change auparse_feed_has_data in auparse to include incomplete events * Auditd, stop linking against -lrt * Add ProtectHome and RestrictRealtime to auditd.service * In auditd, read up to 3 netlink packets in a row * In auditd, do not validate path to plugin unless active * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists - use https source urls- Adjust audit.spec and audit-secondary.spec to support new version - Include fix for libev * add libev-werror.patch - Update to version 3.0.2 - In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen) - Optionally interpret auid in auditctl -l - Update some syscall argument interpretations - In auditd, do not allow spaces in the hostname name format - Big documentation cleanup (MIZUTA Takeshi) - Update syscall table to the 5.12 kernel - Update the auparse normalizer for new event types - Fix compiler warnings in ids subsystem - Block a couple signals from flush & reconfigure threads - In auditd, don't wait on flush thread when exiting - Output error message if the path of input files are too long ausearch/report Included fixes from 3.0.1 - Update syscall table to the 5.11 kernel - Add new --eoe-timeout option to ausearch and aureport (Burn Alting) - Only enable periodic timers when listening on the network - Upgrade libev to 4.33 - Add auparse_new_buffer function to auparse library - Use the select libev backend unless aggregating events - Add sudoers to some base audit rules - Update the auparse normalizer for some new syscalls and event types Included fixes from 3.0 - Generate checkpoint file even when no results are returned (Burn Alting) - Fix log file creation when file logging is disabled entirely (Vlad Glagolev) - Convert auparse_test to run with python3 (Tomáš Chvátal) - Drop support for prelude - Adjust backlog_wait_time in rules to the kernel default (#1482848) - Remove ids key syntax checking of rules in auditctl - Use SIGCONT to dump auditd internal state (#1504251) - Fix parsing of virtual timestamp fields in ausearch_expression (#1515903) - Fix parsing of uid & success for ausearch - Add support for not equal operator in audit by executable (Ondrej Mosnacek) - Hide lru symbols in auparse - Add systemd process protections - Fix aureport summary time range reporting - Allow unlimited retries on startup for remote logging - Add queue_depth to remote logging stats and increase default queue_depth size - Fix segfault on shutdown - Merge auditd and audispd code - Close on execute init_pipe fd (#1587995) - Breakout audisp syslog plugin to be standalone program - Create a common internal library to reduce code - Move all audispd config files under /etc/audit/ - Move audispd.conf settings into auditd.conf - Add queue depth statistics to internal state dump report - Add network statistics to internal state dump report - SIGUSR now also restarts queue processing if its suspended - Update lookup tables for the 4.18 kernel - Add auparse_normalizer support for SOFTWARE_UPDATE event - Add 30-ospp-v42.rules to meet new Common Criteria requirements - Deprecate enable_krb and replace with transport config opt for remote logging - Mark netlabel events as simple events so that get processed quicker - When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833) - In aureport, fix segfault in file report - Add auparse_normalizer support for labeled networking events - Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194) - In ausearch/auparse, event aging is off by a second - In ausearch/auparse, correct event ordering to process oldest first - Migrate auparse python test to python3 - auparse_reset was not clearing everything it should - Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events - In ausearch/report, lightly parse selinux portion of USER_AVC events - Add bpf syscall command argument interpretation to auparse - In ausearch/report, limit record size when malformed - Port af_unix plugin to libev - In auditd, fix extract_type function for network originating events - In auditd, calculate right size and location for network originating events - Make legacy script wait for auditd to terminate (#1643567) - Treat all network originating events as VER2 so dispatcher doesn't format it - If an event has a node name make it VER2 so dispatcher doesnt format it - In audisp-remote do an initial connection attempt (#1625156) - In auditd, allow expression of space left as a percentage (#1650670) - On PPC64LE systems, only allow 64 bit rules (#1462178) - Make some parts of auditd state report optional based on config - Update to libev-4.25 - Fix ausearch when checkpointing a single file (Burn Alting) - Fix scripting in 31-privileged.rules wrt filecap (#1662516) - In ausearch, do not checkpt if stdin is input source - In libev, remove __cold__ attribute for functions to allow proper hardening - Add tests to configure.ac for openldap support - Make systemd support files use /run rather than /var/run (Christian Hesse) - Fix minor memory leak in auditd kerberos credentials code - Allow exclude and user filter by executable name (Ondrej Mosnacek) - Fix auditd regression where keep_logs is limited by rotate_logs 2 file test - In ausearch/report fix --end to use midnight time instead of now (#1671338) - Add substitue functions for strndupa & rawmemchr - Fix memleak in auparse caused by corrected event ordering - Fix legacy reload script to reload audit rules when daemon is reloaded - Support for unescaping in trusted messages (Dmitry Voronin) - In auditd, use standard template for DEAMON events (Richard Guy Briggs) - In aureport, fix segfault for malformed USER_CMD events - Add exe field to audit_log_user_command in libaudit - In auditctl support filter on socket address families (Richard Guy Briggs) - Deprecate support for Alpha & IA64 processors - If space_left_action is rotate, allow it every time (#1718444) - In auparse, drop standalone EOE events - Add milliseconds column for ausearch extra time csv format - Fix aureport first event reporting when no start given - In audisp-remote, add new config item for startup connection errors - Remove dependency on chkconfig - Install rules to /usr/share/audit/sample-rules/ - Split up ospp rules to make SCAP scanning easier (#1746018) - In audisp-syslog, support interpreting records (#1497279) - Audit USER events now sends msg as name value pair - Add support for AUDIT_BPF event - Auditd should not process AUDIT_REPLACE events - Update syscall tables to the 5.5 kernel - Improve personality interpretation by using PERS_MASK - Speedup ausearch/report parsing RAW logging format by caching uid/name lookup - Change auparse python bindings to shared object (Issue #121) - Add error messages for watch permissions - If audit rules file doesn't exist log error message instead of info message - Revise error message for unmatched options in auditctl - In audisp-remote, fixup remote endpoint disappearin in ascii format - Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander) - In auditctl, add support for sending a signal to auditd - Removes audit-fno-common.patch: fixed in upstream - Removes audit-python3.patch: fixed in upstream- Do not explicitly provide group(audit) in system-users-audit: this is automatically handled by rpm/providers.- Create new "audit" group for read access to logs (bsc#1178154) * add change-default-log_group.patch * update audit-secondary.spec- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)- prepare usrmerge (boo#1029961)- Update to version 2.8.5: * Fix segfault on shutdown * Fix hang on startup (#1587995) * Add sleep to script to dump state so file is ready when needed * Add auparse_normalizer support for SOFTWARE_UPDATE event * Mark netlabel events as simple events so that get processed quicker * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833) * Add 30-ospp-v42.rules to meet new Common Criteria requirements * Update lookup tables for the 4.18 kernel * In aureport, fix segfault in file report * Add auparse_normalizer support for labeled networking events * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194) * Event aging is off by a second * In ausearch/auparse, correct event ordering to process oldest first * auparse_reset was not clearing everything it should * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events * In ausearch/report, lightly parse selinux portion of USER_AVC events * In ausearch/report, limit record size when malformed * In auditd, fix extract_type function for network originating events * In auditd, calculate right size and location for network originating events * Treat all network originating events as VER2 so dispatcher doesn't format it * In audisp-remote do an initial connection attempt (#1625156) * In auditd, allow expression of space left as a percentage (#1650670) * On PPC64LE systems, only allow 64 bit rules (#1462178) * Make some parts of auditd state report optional based on config * Fix ausearch when checkpointing a single file (Burn Alting) * Fix scripting in 31-privileged.rules wrt filecap (#1662516) * In ausearch, do not checkpt if stdin is input source * In libev, remove __cold__ attribute for functions to allow proper hardening * Add tests to configure.ac for openldap support * Make systemd support files use /run rather than /var/run (Christian Hesse) * Fix minor memory leak in auditd kerberos credentials code * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test * In ausearch/report fix --end to use midnight time instead of now (#1671338) - Fix build errors when using gcc-10 no-common default (bsc#1160384) New patch: audit-fno-common.patch - Refresh audit-allow-manual-stop.patch- Reduce scriptlets' hard dependency on systemd.- Update to version 2.8.4: * Generate checkpoint file even when not results are returned (Burn Alting). * Fix log file creation when file logging is disabled entirely (Vlad Glagolev). * Use SIGCONT to dump auditd internal state (rh#1504251). * Fix parsing of virtual timestamp fields in ausearch_expression (rh#1515903). * Fix parsing of uid & success for ausearch. * Hide lru symbols in auparse. * Fix aureport summary time range reporting. * Allow unlimited retries on startup for remote logging. * Add queue_depth to remote logging stats and increase default queue_depth size.- Update to version 2.8.3: * Correct msg function name in lru debug code. * Fix a segfault in auditd when dns resolution isn't available. * Make a reload legacy service for auditd. * In auparse python bindings, expose some new types that were missing. * In normalizer, pickup subject kind for user_login events. * Fix interpretation of unknown ioctcmds (rh#1540507). * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, & RESP_ORIGIN_BLOCK_TIMED events. * In auparse_normalize for USER_LOGIN events, map acct for subj_kind. * Fix logging of IPv6 addresses in DAEMON_ACCEPT events (rh#1534748). * Do not rotate auditd logs when num_logs < 2 (brozs).- Use %license instead of %doc [bsc#1082318]- Change openldap dependency to client only (bsc#1085003) - Resolve issue with previous change if both Python2 and Python3 are present, tests were failing as python2 bindings are preferred in this case.- reverted -j1 force ppc specific only- Add patch to fix test run without python2 interpreter: * audit-python3.patch - Update to 2.8.2 release: * Update tables for 4.14 kernel * Fixup ipv6 server side binding * AVC report from aureport was missing result column header (#1511606) * Add SOFTWARE_UPDATE event * In ausearch/report pickup any path and new-disk fields as a file * Fix value returned by auditctl --reset-lost (Richard Guy Briggs) * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field * Fix building on old systems without linux/fanotify.h * Fix shell portability issues reported by shellcheck * Auditd validate_email should not use gethostbyname- force -j1 for PowerPC make check to avoid build failure (lookup_test.o: file not recognized: File truncated)- Add conditions around python plugins to allow us to conditionalize them in enviroment without python2- Rename python binding packages to match current python packaging standards - Update python build dependencies to resolve future split of python2/3- Update to version 2.8.1. See audit.spec (libaudit1) for upstream changelog - Remove audit-implicit-writev.patch (fixed upstream across 2 commits) * 3b30db20ad983274989ce9a522120c3c225436b3 * 07132c22314e9abbe64d1031fd8734243285bb3f - Cleanup with spec-cleaner- Add audit-implicit-writev.patch: include sys/uio.h to ensure readv and writev are declared.- Rectify RPM groups, diversify descriptions. - Remove mentions of static libraries because they are not built.- Update to version 2.7.7. See audit.spec (libaudit1) for upstream changelog Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking service (bsc#1042781). Add config: audit-stop.rules Refresh patch: audit-allow-manual-stop.patch Refresh patch: audit-no-gss.patch- Version update to 2.5. See audit.spec (libaudit1) for upstream changelog - Cleanup with spec-cleaner - Sort out bit /sbin /usr/sbin/ installation - Install the rules as documentation - Remove needless %py_requires from python subpkgs- Update to version 2.4.4. See audit.spec (libaudit1) for upstream changelog - Add python3 bindings for libaudit and libauparse - Remove patch 'audit-no_m4_dir.patch' (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com) No idea what earlier 'automake' build error this was trying to fix but it broke the handling of "--without-libcap-ng". Anyways, no build error occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build/bin/sh/bin/sh/bin/sh/bin/shh04-armsrv1 1707237555  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[3.0.6-150400.4.16.13.0.6-150400.4.16.13.0.6-150400.4.16.1 auditaudit.rulesaudit-stop.rulesauditd.confplugins.daf_unix.confsyslog.confrules.daudit.rulesauditd.confaudisp-syslogauditctlauditdaugenrulesaureportausearchautraceaulastaulastlogausyscallauvirtauditd.serviceaugenrules.serviceaudisp-syslogauditctlauditdaugenrulesaureportausearchautracercauditdauditsample-rules10-base-config.rules10-no-audit.rules11-loginuid.rules12-cont-fail.rules12-ignore-error.rules20-dont-audit.rules21-no32bit.rules22-ignore-chrony.rules23-ignore-filesystems.rules30-nispom.rules30-ospp-v42-1-create-failed.rules30-ospp-v42-1-create-success.rules30-ospp-v42-2-modify-failed.rules30-ospp-v42-2-modify-success.rules30-ospp-v42-3-access-failed.rules30-ospp-v42-3-access-success.rules30-ospp-v42-4-delete-failed.rules30-ospp-v42-4-delete-success.rules30-ospp-v42-5-perm-change-failed.rules30-ospp-v42-5-perm-change-success.rules30-ospp-v42-6-owner-change-failed.rules30-ospp-v42-6-owner-change-success.rules30-ospp-v42.rules30-pci-dss-v31.rules30-stig.rules31-privileged.rules32-power-abuse.rules40-local.rules41-containers.rules42-injection.rules43-module-load.rules44-installers.rules70-einval.rules71-networking.rules99-finalize.rulesREADME-rulesauditChangeLogREADMEauditd.cronauditCOPYINGauditd.conf.5.gzausearch-expression.5.gzaudit.rules.7.gzauditctl.8.gzauditd.8.gzaugenrules.8.gzaulast.8.gzaulastlog.8.gzaureport.8.gzausearch.8.gzausyscall.8.gzautrace.8.gzauvirt.8.gzauditaudit.logaudit/etc//etc/audit//etc/audit/plugins.d//etc/audit/rules.d//sbin//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share//usr/share/audit//usr/share/audit/sample-rules//usr/share/doc/packages//usr/share/doc/packages/audit//usr/share/licenses//usr/share/licenses/audit//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//var/log//var/log/audit//var/spool/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32494/SUSE_SLE-15-SP4_Update/73526a089598575fd6d5cd1f42c951bd-audit-secondary.SUSE_SLE-15-SP4_Updatedrpmxz5aarch64-suse-linux  directoryemptyASCII textELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=4dd8433bcd04c9068e190d3cc287cc47021808de, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=e243ace42e7dab0cc01e7fe6a2956c8bb7f87075, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=60481deff644ab94182079ca8ee24a031d1941e3, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=ce5cf143ec21e9c259cf1f3b770a2deeab44e194, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=62ff38546939319cb15686e3594c50b9ba4c8e52, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=f57bf2e2f30600e45556991acec6d29b930a83e7, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=8405f7b5ecdde06759bb7833aa80f6f725ff793e, for GNU/Linux 3.7.0, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=87d2cf1965e4596532b518f17e6be2ecb6ff68ba, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=befbeefdf4ba30e8e8f9bb59f95b883f8a0745e3, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=efad0261c055c42d6ed8fcaf9d2fa54e2908ab2e, for GNU/Linux 3.7.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) '(.4 R RR R R R RR R R RR R R RR R R R RR RR R R RR R R R R RRRR R RR R RR RR R R R R RR R R R R RR R R =<~fZTvsystemdsystemdutf-87635b50227b5f121702f152c5bfeb768610cec0b345950385e13c48b9b1d7d50?@7zXZ !t/q]"k%fs)q tNZa̅#;bsd ux 2|4H:˺IǸ^kC^R]q)0Q\Cb#$խKb,uC_W |b,aCpYyfY 05=Y-TŅמ_bo.ǕL3YYx4>!ԫ%1(39o\"$Kk/&1=lbN9{5K}yn6rŗ ||vl~6+&hB M"hU5DIc2Eh[[qfw9w!I]`kj2UݝMh5b {ampidt; ߵK' `-4S3BUKꘙp` ɫ\ #ѫR:7eyXz9Ifz"ݷD. Oɓ+aHxԧS 3[|̅ Oϲ.[O1 3b%&6ڮk?jgՒTٵ<ݸ$N;BqbTx9}$}?Ua/ޞKO?b.{nߺ:AOtx'G`rr=< AROe _WbnT2 ߱0VRpvNQͦ>pିj0=.PRƛBonҜBYg_jG[m"NӕlFU|E ** 3&pj:s~X6Q MnWSg-_$`@F85R֡$=F~`p}uvJYUYssq̀=<'ͲȆ~l^jSw֕LqxhPgJ Y9Ѹ*I$3|RX~Ȥ@'%oUlBcu`Μ JNQ1%Զk.@EOc=3άq Nކ)mF(Oil"7.6|fr_YD0\hoP"%'Ti|~AR:B;32GM@MA f_6On|ug yRD˔&PY}_J9Ц_ nPouW4!pi 1Du+7gD$hEcpT5Na/ a\R+魹E H90tK'_ nڍGS$ N9QF_k"Q3OJzӺHQ}"z)?j)]@G@4@b_̮ޚ)]ԢGфxliܬ!"Gr,S ]?X]&W=γPoݶC]YWyv=X4fn*BRP %Ps;Z.yN=>+onՁtcb'uG2G1ĠO#x9`Iwv6\b|U/ 'ʾ>kُE!2*kJ'Ԣ3 !|;Y=3a §43l %saͭd X3K q 5d: 7c˩ 7h8P')]ZRLc GFgivڶ?3'^;x:i,U\LJDd ۙ>maRm\*"v{WEag5fjZ L!Ac2ȅx[%gFz&Px 0Hhb+T/wjU5Y xLh{UF"iU-/[К,U:bC|[˴UmTkBgvyL_&XSٰ4J6Eih $mEyK:Pwi}eB +Cnhn?eMJ`QR,8d?NIT#'4k.Z6]-fe& ;J9Pf}ά{Ig24vD]F:âQ!cܣKݯ-sVi+g&W\prj |X1.S'BLЏ5ݦFh!tӪ0Pn:P]_HlKxd ˰ofLu|MqhNap5ts'GʤT 4>JqW-OA g%{ASnNv}_d]'֢o#PRBvuL0% x&k杀[5|2|.HP.-p9olگ-F8?hO1# +kq5*IbrvM52!gZȗ`&x9rV:e#lIy 8cotڥ_xSK'"V ܉<6?7\Ŏrp8Lqm%` qUYbRl- nJ$vVUvE%i&N#h6-=o+ `܃K>9p밖ry;>L{g!j0yHsY׉!aR }qɇ7XLMyF m$\#,ܝ9ejr_n*%hv;J QgAq\ϓ+{玂٥,Zhc ;=kbFhtwdԣȣˀ9ڇ`u ү&4㘚ǥ4B;S/UVpdkD/@F%ls]f~Yx/8D5_l[_vq_cM$t[UlK݂j؀7)=z;4%?^U٨tϴNʒqq\ ah6e֎t킋0G LƱi>?}0XZSdz_%D` w% 1( DE*'ј_Dߤt^LI\xLl9nn80ʴ$hI쉨ٸNNH|| gFn"GuA֙OuE~7- MG(Re5VtC~!MR@}Ú9tɠA݁L;g59B`EE|twEmV'5@?qvaD`ىLWc,ά:I[C,b#!rۡ"{,j|zso:ww҂>_i? RȢ B|C`Fi`v`¤é%s dDX_f݌Xδ>*L0J8̭҆DͽLb'LhMQ &f>“̀Z#F&-){=|[s֖&|ƨ/2,$C1ghRב$8:Med])SK[ n7y B!ӧ@UVJxbwwdW4 sZ;u"'#}ELU#Ը6^&oI(!C$%Dla^́edk`Ҿݲ/YHCUe&T *0OSiԕ'e7p|zy h7+52[#&:Kb[ Z&+QUW"l6X PLH)~K=krR5Yӝ}USVe܈tJ O:n3KA4O(Stߢ7Ѡ,p=7{t4ÌfuI5o_QadZd~d>ͅ7SM|O)c4#.( [fMRQ| p⶧K*ǐdu +~ Gw93_o-M1 \QIg Q dþe2JulүΒqˁޖks';]K(k!1Hy1˗ze<$(Np1=S ˟tW.n4d78AE8( np0TTu ? ElI pu("zKxi&J,2}oŨ[[ @Xxa΋+5KK=CZFqj!Ծ}]w=M¦V!)!.QjjSq|X*L\,>>S?@?juA tyG ']/ S,.ĠS9l?K׶*u*/i a #R>םJ!nt۷5e)?m05XE+ϦSB3\61U?0Ė~sUbgM2fłk˨xZC "\AJm%QFshI71 #/W W0mkYoJXatYYp.T>,mr#,3` _XS]5;{Tx6] $ őyhd4> >" Q wR7{e۰0% ]SAZh%*iH;b&%hM_PtFr8pSSk5mqbتxx:U(<`frD ouӧptuq|sY4 ]ct|6D{C e; Mzcl38'~a@CV3~cTk2&B+2&aAOOQFHŊFm)^56)&(B:%PUL1u+g8|qɨ ?vYhUx)I=+cbDj{ *Pk8\ !'ucJFBD'3y*}=YM @8ZlEH H I[R')7)0443IP%Nbs%͊͌GW\4#}u,ӌ g8)(E3mцG8Rf&RnegтJ 5 W> ) ɀ xq4;U=dvww0IƲvcҸX3w/OĊyj*]|!I ? wB]D2x@Mx۲b|xG@s2Dj7sI0)eŪ{k|˅hFHgH=A7;΀XUslM&Bu _qYnwTz]B. #fCZA0*fR- w57&'vӮ=M]SqjVTi!A©f|)7#ˬ@ȕ|L kck d SB-O$ p|͐]^M7ˈOXGp\ۃhSe8sUI$ivxzo(^c`rZl$1x#Χ'x$:(Xl_O(\P cK\tЭBj;zBkh '83kB6 tzҝP7yt @:d;X!+Nps8 خ3NX8ctA8t9,iDlo[<.djF "<+O` s_*xe_"ۃ빟vuSo1:[<l@:o4nI*&4>M ~E_:#9yJWY}J3~+PE?đ4$ kZ=d VS]V{.y%A7*EO%20b'yo ],lp5U& ^4VIkxפz#%gTrRihՎd Y/XvْrvՁidICų_]R@ȿ"3aE3?IE pΐh<A/FHN;=e^1'+1!4OQLԛ*pǨ8*V Kт'vB?!=$Bhj7lڑaE55._DtWFE!RmZҾm?,l3靌^gZ!']?Lw {V%>Miۛxf؆ Ycjf$˜4X"L7lLTw-^r uy9k_S+l([|tjڙc)J}2D潲d&\Y | UTlz0W~Uv My#eO%品;|K6/LDog}e+PQ+!@#|!_,tpOC;"݄~Rlg,@v)1;Q'.-םB\=4j3&ߍ~#]]˥ z60蜆$@pӧ0ݥܟb&$u[]20\-> ̅s\ ߼A4ٻȃZ]D:зEp`ʸ[UNwҤS%73&T;,L4)0=u{I/*$M%<WgXPw\=av4,4p*:2tCiD Wi鳗R7P8c, jcgJˮf p1;~Jo͔#Ul89jhΥWKflX($Z+:9] el AuE!؊p`K\:hL}YeV"ͭj]+<(k/,ޏ6/;$ǚQaS6`-b#v"Q<5_NFh1w?y1pC~) e)'aBVuZmsBZ̫{FCBY23u0UG-8+UVV1To DoS/QD+2KEHP2<2+ں`Z-Q{ ۯ,[Z%U ^lKi_?0Sd'9LÚ@4zI ԛ\YÜC<(e=cЩ2>;$%Ia _Q`{KTy@ʲmdRh*^X 6s$-}Tx+ H 'h  1Ci\HC8(;+3J:g$z _~?~U<;*Շ&[D[`kU(,q-F'0fn@r#v<-9ƆRN @ !,(L; )W"TS qQ"` <Ękwiz 3wMrk}?zmKK"Ē8 x4Z5>Kt=lTYdA%ˁ-vQja.Rؐ>F `CK=c%p*M)#K%]-nīk|4*\͕t u%4Pk|C#\Pۄ9-er2&XKs%%т駓;1AQr;J_VA1!}jc&#QWSaIW-<\y]ֺBR2E(xâы룎ޯ(-= Fe|-m|ToC_6ӋFRӚs' 8zAO9KZ(o1Bgy0$br,#&,u}ұӁqV́>Ut`}=)#=O=8s*„0&ꩰD%LAQjޥ ~^!}?fQnQTx 9+}*c 8@"k;шxb5@ZEMhq< Fg7 m Nz;d>y(L}( .-9!V*t/a2heA_ H!NH]X:#6w)'D'*]tvFB̫ G J$f5(5c)M맶TSj *;L@Cܑ MXۻA@]U=pmFjo2 UysOTwR'%9vIHMPNϫ1w$yߞT*YǃoFgl8O94]|Qz:mvwMQ{uEqLⵂ|}=)#v߄K}_zqDtj[]:^2y[iι"HF/]=0`[7 om O y9߉9y@h^];ͪ^y^D1 [dz$bN*C!?sOUx"0 *?~⣃ռuE'ɥM`y^_/YkV@f£Q0d޾̈́(~Z2b׬,x^s؃l Kr;/$_lmglQZ?L}lUN о4G*\Z&ѵ[B2)yiV'P=¡ I O؊1hOlTfPßn^3Z8~"`B3ɵJ|tt5J^Wb̏>Rgj(=2އ9a1שˁbJK>fZwзƛXj]kw2h_1GЋY{}G*exԈ"DHE+v0n#I\Eع S!dU\80ᛘ߱MUb}D.ROo=} Xve}u]U>1Z'24^1Lef)ol\ _r/+}|վ{Ά}?i og&Q{  `.>Jehm&[IEnD`xDVp.{L'0K>!Mv`\L5=`5}ߩT%J&1?ͼsE wSCWà VgaoB!cCS} 2ss1-}q, Xp%* PlD^Qς)IM)nP5Vi|#J* :RܒH`6˜| ߧD!@De栰^~b*<ӵċԤC>@q!ͺu `,O/PRofA?6-;å'}3 ;{Wfj,iahJ:J{x5|7gɢ$'%N1lpμiӰvdh8V7ӹ(/eZ ~N9R:Vޫk\jL+UJe3IR5UL=jM&ة ̌(A4&x(rSϫrMEbZ~b&U6PBo^`vJ}Ӟ$wSpOKiLx{Nܷ^S%i*w 𛓁 ?FۙP;g!;{45/9 YyfByq'7_z8߬Tв;d'6eNߨ Ę#D9Cv̎飳H3- 7*6%0; (M쮑GF5"Pj1غYPFax9r‡Ytr1d`r/h5$//|Kmq{ilc%<* cps :/Sx5ԐM9.du LYm)bKMRNzۻ;VgQtȖKY0'zG/b,njvád=$UͻT뙕N8=3^ 9]8A1ÇMVoSJ{{ol¸jfD(m% / 3m er}|3[?@X; pel*6e<*@*fx>dv|K!X;Qq)/^bn,F#5-Q =-?@wewUGE3mߐ4"@.J8?1CA%f ҧ2uie)]WCIo!cu ]b9!!误T*n*ެ,ߩyŜQ>G@3EUttQ؛ZS;#L~ []MJ7Qz\2Rpb滷rrlgMGR>8o뤚E&,I^Htf]jB)f?~FoL]o+zhAkrヴ-0Miǘ7!M.ŹΞK0'g$F;x[X065sEEW_ .mj9 I~;iM1<ZHyzAz)_.saGG UY]Ѩ};Dy.^$6j^io+Pu g/ή9:fKϴnE_yA/019_qt@N| Z1qV^ċىU2"ëos[ap̫m]ZFV^eYʶ@ M}B<rPaxt /~bfq飛x+@(Lb7D慨Vd4y]wFQ\%\$uPK=${i3ŧFKFMNVwy%ap?BPTŰju3gPxAN5\[ ) "9R$1PC6v. N* 0Xd!d h! Z l(,8 9ۈ9 *1#9x?,At\ {oɗ?6DP[\{BQ3Җ и,yS&s%=*3^rp ^Y~ BYrýhCƓ0Ib|<@#.t`)əorHU)+cwK@ -ni!!yjCaH$l#yJ` X'3{5iN1r=O.f6CL6L줧?kGS *g =Ց"v} FJ$,YR*  hUki`ڷX*A<@)X&1ͶEĕ=J׫^ĹuLץ sL"dWT/McJ#"/M D ^=8V;gH[JAaOS=I+jJy=,Vd2P-:/Q4x{qiJCc^'Ȕ݃3~eK m5LAk lfr:V n9M| -}&q9rdluq FU%t*X׵H5Ϟ"\x!#f#I ) /UAsZc2涯#\&]7!1E U)Vz]KE]xO:X/mDo3J{SrMt=:)]1fVށRZ_ E?$ qki'};>ap^l`ɟ9Wrz@'P<ȑ&!H҇3xx68m̮'Cŗ^.vvK緡{or籯<lh]{p"ӌNWjua0E-:,Z%f5;Aɗ׋Oʇ.o_"i6cS9մҶ!8@CcuɜA TP,y(B*çAmF\E_ r1}68à "B29厫lS^@ǃUNu-2-Ix_QԮ ,Ny$,9{d ?'{z$3ߤ!0HElJd HSa}X ƓKah>,KAly9;2]z͙c),YQrR(ތL`| ߫M (z E a'a$G/;T[ٵ$ 1&@P6 i^+H$7ɘC^dFG_u%b'0ѹW,lќU;#.f9лVAZBs%LAL}fcB:c5D:lKKEq-*\4@KG7'J(o0hW2bIz8` eKg%I7׻zǤ۠` |Ze+"P2@HF8FrɬS7FB?U-I,+#Q!cUq%㰠?ZcqjЙj(> z`q%⥧RGQ,40{W1a+3i']PI =E^隭@ LE3+|"pXށX:Xa׷c V?սp)zLAY%-f #[s(]b%󰀴jpá`__U?23Y$E&˓3w)ɏ| C$bGGݓ&̓0v!7z*sU0h? u[z@9+bD*DAV=tn\;LGXihc 95ODsAӢnμɨP'寂ZUo$}R0܊ 킷B ٘a]USsgpaخ?GLEq)n Gm/583 zRе#J|xj@Oj^C+mj*n#^~Sk?. oO:4/c)z?qOjc5uTK¬`{ɸkst:$RSi%gWǦELju eտ*Υt±@AUzUL X ۫GXrGfaix֓U8jT5ՈT%C9J=G+S}4=l/ x׸zr3bѺ Akyq-pXWN J/DlhmEi?\ H,w?UƷHI+}t|tJ0vV2Y8V:2Gj4-72مi՛';n\G"Aa`XѭԸM*RGëT Lˆ/hi|l@(##b93DsQ+˝hJs8Y,DmsF9!]R+ܺ 3dt{l DPۘ89C/B5ɮMx>*^l76hͨ^p 5YEF}tF"†6y\Kה11ԋ7/Dq- 2d:Ck;ot*+e[? G$1Fj:폫]]ɶY4죟8BgQ|D`~Z9O!yg/^%/lnaO 联pC{LkfZ@|24viZj/и'p j.L0,;μޗx$q> p[Ҟrι#`G$XT Y{ YKH]e94vU^Gh(*j)xaAsh9џU|(@L .PMa-YE`c;PԌV6^kV m*2r;wE%-} Ss{ݪ7͠eTAV(eL0WvuJ OYM~|aҡ{MW g 1O!ەxV {hMU[%tVd5~Z !kKlv.Xb0~L@LC/g ^rrn]ugq |y\Mm-V7!CA~;DsD b{l"X|/8Q6xꆌ.@bŝ+$}|Vir潞7 T k@qPI8Cg#SuZےdhU䄞`&BB 3'8,Ҏp9 "ѴMa/'l^8sc(n!w%p(A6{u6)5~c8З@|};/SEE˪vg;E|b]3Cw5@Y@ r)O BPپXXu޼ ,6oqQp; TK_b[q"Di-B pBA3rOl=:998ZUnՀF?,x}'ɠCB ʷ"Հ}eJh^Jꮮos`mنRn}jȘd2O.YՂbՆ{#?`s3vxabq}jֺ '$aPo`rٝ4vSx(E#͊Y68LKO07%W= oI%٪S@ks4NјA7:Te_Wo;1@~ַ_ЋS:(ױ0 6 Io8#Q#̈́|U%g&wp%HqB3>0Mt=Xp PEW|;pe:3\;B"lc52XsGP*Ty')!I~ Q'خ 5~n/ąI׭N:W=7Fbd7A:,zFL 0"8SW~JxKUt*36oנ_1P'K iT푏)Fp*J"$S)_{to6.] 3SJߓTۜ?oN%mO9~ap:3;zpd"<3$%$\if8Se `E%B/'+u{EIeSG58<[+s/'xvD2zw2ISU'~M\6.|NJ7Mۊ0'f<ፏxe())1h|sÂŹǣD9[l2 %'c=y4R>o5mK9't`m}X~)i# LLg28^124sTj,=DJ'"1^n^J6Nib[PVu%%i2hum=YCMBn7|z8_sx،pڒ @& R f+ZhÚE6pxiLW3UZ/3Ad&,),`"Ah4c}{|%i 怒-q!|r@o} )QJ4!G$mƲK FPpy+*#k\{2|1/ͯ{K ?"c d s(Uq:0)`E}WDȞN8)U'[TBD~'L!bw >!h6kDja  %ǪwTf}0JDwCN&;EP"_jK#gxTr&5HbPXKElĠ&%u!C!i`䒓a=g}U!aVJhCu<9.PRJΘ4xUnw }E\[D(I|5pX,]^_g}+ܗlMb9|(^NeGyK#' /E04| j[dlܼ2)FO3^  'Zqu1O~Z.&͘F!UNBi|6^<,z1}٢(?~< 頻q^1~d[MZC]_0B }G* St2"9܎u:U,zL7!'4pkc,d W/t+r 2մiH~a9kn5?(PDDʃ)3\VM$~["68ʪPPZ\{ʹ0ٚ2 T9=Ǿڄ9 rPenp=! Yؼ#% ^G;6F([vŭf.vc g$ =r Zr"Fy!i6Zp5FA5ZBsyMRNY$؋>trd ĉt |/js$&.Eu୏ayo|G'iE|@iAiY+wrRoy͇?QNHmL k]DZ3bCK2GRRԺ®-(i^L@آVW3+!TgzJ* m5\<2A\sC "_ᨱ $v{T7I0훬jN}^lRrzY*g.T0}e0+;ෛpw"M#[6J^wnP /B6?s)KzU MeД+ReEY[2ɰ{I~)B(~lnAb~3S}"wQEź4  NSvNaOۊ94q F?2x_M?G&]" ܣ|&NV Vۅ=[b DU3fkP3gdf)2Z+6*" fq(;"ɌL{ 3rs\1<#z;[9^LhJb:`v~ 1 _?x"][oq`j c)qL#|OX#A=TI!kITD~4wBkK-Vxo|NKT^Yƈ%bfChy.$4QA^=*PC+UČ~*@3)iǾ[0QBLعʥKɓ"]]p&}!d,R 漪b`ײ6;n<ʃh+v?o( |+ y3Kt#ugqq X5L: @$bW\Jh.XF~] 9E s^>)n_逝ˆۉt?Uo'ƭ(pW' >] 80"42 6F ٱź0STӍ^P&ňVk(NCMʛ6gə?3@ߊ6Y8{ 3B0XAtE, %*?847|4c:v:l'|:Q^ ϛ`9YriIiM0Ri2T27/(%)pErqHvl[RvB@D4(uT$ {(I[G7jMZ'63Q݂ Ew[?1QQ` +)N9gΫBG}'%}@\V _YNH~AWZ_]޲\I墴)^(pWMlmс̧f>̽R=(tOm<__Dnõ4,m-E, =? -msvG}`nyXAϡFAJF5 K%bh|DشW姣{2> n_F y۴{ ?'sE2\f];Ƞ 3ZrK;eWS fp!|JLoDqLGЕ-/"IYRA"SXEwG,>-*;IWƦ@` åDw?ƞ5gw?x>5#|f(q Huf`'Y~&>\{:7JJXceGg-lƙ%/i?j^PR%5(Eu[mw9n=1fCX~f^G) Seyz\25%)lJҹ]lB$ Z7ܹmmUuzG 0' &>H60 U2?>|O?[W{}X=[~yM KT.TZyA$Q_)-;&q?fo^Ac/^pldXBwiiU#OmLv[>$̭YѸS{*.є.yg ۂJS(p)'){ti-tOM$e^ T$yW3~ ߴPjg礦i> َ4:xlS!hB7nc خ#/ tpoW_ߗ2l) a1Pg0ƴ 7Ăs8BI×̓V F?`;KtќOBjulퟦ$ݼ9)H7`0{=pd?^#l6[m_l,9y}Q` }5Ds0ڤy͏R}ƽ"fLRP [Gx=݌ԋ<&D?qP#;֎1h0aߚC.DgVǐ3tKI}HǧKF_x:k4j5} Tx+HM궎눪I tFzq9OS=|>3l hr4T [8MY@ 8E(V]vqA,x>m a .Ab[bb,˥ىVv|d!ԏ@aN!F~qjv]r|cz,-ӫ8ɗH5kєK讼wPmR8p*>ƜBe) ݹ(I0TϞBMEq+.vkN+]͆|鰢woxN̋f!J(]yVwйk)U!7k`Yv%ܧ7y u(o| x*֣.SpC?QEݕm뮃tݙH Vl5ٿxi׿$7Wr+pSƈrEw{?ax]'ݲHFf04<ѡGQ7mz{h_*3l9S vm-(e"BRV/ꁣ!җ7u]&`#*>tP;*FT' mF?Rdv\5^[I;9 !/h[YeHs52,%aU /s l\wb C=>zN^mwXJr+ߗL6}Nl!+AAjml: 45,nxz{;,pc=w,\Z|F߸ŞDe%.fnAbfg߄]%\0Wн.gQ`@,lh' wjlf;H>.G.9W&hg֣ⷄG׼l5tcx_&w!W4Nf }(tSox/Сb FD[yZ5(xN~J^ >1t ?*f%x2=(͂[<ծ`{KQAd“4 kl7ۊ}l! _nu="ҋFt@3hΝdzxy?33N+N!b>DL]"FtT-)4Fv@=(U׌M %L_gPڏKGmtI;Og5 imߴ VJϋln珷.a6WҟvS-]OJ-= X?qo~˸}֧|A&T^J|#tqIQB'ek4=6/4RÙ,HcyD<B7eV^/0; z  ^K0 UQ0jxtR/q _aX'q T5I,N{έ  / 6h~.a2.¦h^#{<vSp>j@WLQӈ3tl%RP[82y5DbF,% e,t2N94Y+$h"_u+ܶ0gU^m=|8#&zv! *o9!-VFmC0#9g9ਗ਼ B!sSS5s΅U ӓ*`YM}QNg)Hii,FU8<)}-#K:MIn:zK;x5 wF䞖cQàh&TYכB1l-K\`-l߯ xAilL^S'W\qn3yu{.?V)Zzzfd+tOdFxl6jL!`uTQ˩?Ü&!A jaQxKBp;0h&|21U-BorM!ϧ@0_P\5&lG/3TtbD1ԱIַ)Gl#S0hǛ"\1qX1b9U(98FK~+-7W%Pa fRAiN >{F6:xOHًN>~ukU N"s> zG3H=N}:2h pto|MUk[~:l',Z&%n("g TS(:7Ը ;A^Vz4)j[w*ʿqLd%} LLv#2^}5_-Ow F=/8}v!`ղ-uvQ~ am8Y fYKjB V )zeꗞfGqn񪥿MZUa*WN&[%l4^ڤ?ÅT*dY.e 83'.Y7Н* c5Lq͔i±s_O&\X-ű ۡ|5i\XaͫRDԊ lQA=31BS 6`"i긷*ޏy r1pΙL 0$­`%X@j GТde{⩇?;?6+m#s]) ]M ANʈ/ "\mIERBI1*X}]mRMLG/SYA pE(FelKQegZݹ gcpjBg肇22󯏄sSwˇ"}N4Q%ׄ=j-oOФۯr=:O3y]ut´.pa} SNnh޸kIc aklCCrݳZbE.$}gAK>O3_ hߗ+}ȷwǃA;B3_ X9h[ Rt*U@҉'~F0_>a{yC{n+=ʲ#D@K+SQO-`F!hʸK|'BZnuMI\|ПhY96t7:lYE7,6]* .E Ar8 Zi- {;@Cfo)JEM܎ ɣEF;tne:Pk]B]Hs!y  cOyǢ_} ߫]C3$ fa1ys:IfsrDSH{Cږu2#wn?F}sr_6kF+_TK sqJ)Gdv$1Ll qQmvN.UG V/p}{} >:4PcW7RuW;_o qBꩁ-;񡪮{eR 1s%w`)on.E!?><''>F 6xR T <)whQ#<Jc|,.>{G0M{$kw0l.dž ]'m5@wڿ;ENe^j ?IP$;(@,ǯ|Q>)DEMrCI8 >Kԕ8%*cËyL2s7oy^A>Nb4V#`ZfcJB@(pqToy#ap`WAɐkI0\YC"bsqF`7YaZ\ǃLJ_3t0v!8T\ Q4%.$l)㝨I%T38NT ߋgG-ʍM96M;[ ja+>kƉȉZEM ~^&o(?"!%p i" dv38wyu>u8Hqַw~" c%r`sNY-:DP`PSZeCB&; &Z]jt<7J[0OM) 1E KMg|4+_d~N)"=|/$E2 (=E ~uZ|Q맖z%h2IƧEza=qURyBnzš5~ʁ. wC=fE Yk Tk H !Zk5Rj<(:qUt]>?d/ѱuAqQv9sgJ a1.H !*wX0r [FJCr/H q_NgTN}[oߢtj>DN7 Kqw޻.hZɱ3mAU_bҡ[zIT$(5 pvf6^d (G03cEMuJ@WqY0MP0.jX^Xuw{C.`dU1ToS&( tMSz߭ޚ2:Y4cSlj[E}k\6=rk0pZ|Ypd{ Ϭ5䭒)zNNыx:/kַ%]0b'{k4=sBЪ`Z--ck;;̣nptHg`~iP,sŇYa@ PSeotQd;6RGϓ眭0rU\0Im̫]qlZ'9bX>iE>Z_۔{jX]ϜܬH mYJ gbO2eߍr,>"$6 R|}e`r"Z92xUh*[ӽ}ArbfNJR DwxTFIkʊ \m쾑5r3Jؕڤ~xw%?;p7D۸ FQp.&憞޻9Uuiho<8mPe_D}8]d -gRk D[KEPCm {)Db%>rcSA6lӲEFp󛩶E&(ot}DbS6yAٲl6p.}2Hϲ" i񚗫YC7zLW  lɥf="0ضPN#QLVn1Jj=Wj]o/v @aN[WMf|m>N!aȉA<\ʗDYSJr O6 O,$,,*q)I|&Xj9hʊv/ү! ܲbY8^=a~T'=~IO@ T}e?#ižl(9*C .K JS 50wX50dҲ1 r/YX%ͽT @ ƪs2 zuzǮ aRUpNʬF0[pN)Zh `0R.8Y.&p⤟76EtCc}PI,9$,Y;E[:Yb pv[+BVᑙ$,G'9wݷ8fQmg|uauM}(a)D0rHNO;Ext/uI, Pvu+Z=,ظ;@<(nSbyê@][UOSvZJ'X=Vrnj2 :kxģoE0*e~26Z=pXc J[:ӞDJP{ $ɽ"BS3wA:Äk9a{[Kn%?,vHan/x ̚ߗ?Ѻ Փ=vE+\p!}[#h5@L *j1l~8Rz{/i#Km~N`,=f͋!{/,Ӝo3cSDʜ`s W۽ʰ"ʍ͊?Ʒgogi&u1"^Bњ@5x.]B!j r^ǝT9sd׈Wϊug$4t)v !84i 7jEʿDTGS$Uo3!N>*;,te$ ݭoV5,}EтҰI$2>*+cNH3%[yi/~[볳k^_dMiMu;RxT-u++sSU5pܨ䧃)yy標wW_Գ*8Zy\<ѵ(̈́pe -wavY:%^?*T[GU c.Wokwړ!Z} V9Eyݏg2#29\ rݿ!Oצr\cVBWw.0Ep;*uLΐQ'8VCV"wcћu˕aa`h btYۈޱvNӞquI2XI>/ԮxF6S(~ Ldژ@'P =1f9 u7dtƎԇƦy\Xsυ%HJ\mXU6Xb+"xږELs4>͙CZ ^(,R4q*Cbo'Y*]$sW҃$+M(vX>ߛO%qk"!ۢ6#ľ@ 7ArO79kCIBŪtH,~ZP34<Љfv`⠱V) jw;._.&Q꘵My c9Үbnm'* N˒*g9MV`UOVLNo\#ڎ0wې +=;yLݞ*PiG{7(-^N1@BோIy}*ArSHTyB`}Q~=܈Ŭ kB_zeL#VH-f=^/Zl.1 {!k3llLQ+:=p&UҢtK[3{Чti#qh>4Ln5vktʨùA%r+J/m3vY4a^;j[E:ge~W):CWcԷ29JZ=dlA:a@]: mW#lYb<$r:rp9pri!@VPUޞPmlO]̥6~oh}qNZCC!܌g'/NVү(.\]6tw1̯j;#`Bk;Sgwci2זSL,pF&fVZ7?>ה$=Ud| -i{І)VelN}-a=pdO fCԔ8q#̷-a2x^OZxUj;Y )VO͝`o Gt}P sh 6mXCŋ_W< Bozɷ7j'zҫ:^ePY\tD*zNb%9.U#@8z%!rIF+!za5I6.DatLVtc eJŨ8oq&;6Re4=$U*2^B]g[QM.N}M@F76h@V)\ $Exj6b< = @_@]H8?fE<\f-wAL=iȮtg$-&(pGu<L~PO7E>RO@ tMcUӸwU./$;AJi\;݊ph̺n* sb_ 6Uh;ݓ :8~~H\lYDP Ca鉩v"+Y9[;A Cm=:&~Gh6vr;Fď~CG=Gpr:%8t]4@4"1&{'jXBݳV}bT DW4~IFX%\nÒ |.KBsҼ9&K^z<iOXF ԎcʹF}M|bz><IH{pףBKR4TfKj(u`,/^ j } $`ߢAmZBakѰnwo ~ Az~ k])^bg1! 'L`fVADd^ý$΅-6(3$WK&anEDۊ Zv^n`ʳr÷!%d#b/X: pp^H)r5IccX mHlr#sQlld&lS H=;ÝPHQ;$j5=IkنdM7R *(oQK7"Ϸ(2~QDfx3VVEPO, 4#:6TfN{#;޳9%Ҙ]iq2 A4l 炪]^A@ɦl-i>B~6'öO<[l 4U)…&΋M=mH~/D$iJ.tXzrRT0rW+Bn)NYbt*cƁ&?+C7-LOI{<`Ge4Ud{6FL䢺UM`'^ i1qkY£ٹ&%;QANP+g" mήE\c^JĐb4t=y ?CJ{wU0 =/ Ŋ44O}CD?]PPc;ߜoqE&͙h.cV*U? ^FdH+OYgn1 ^'9QHZVuRv$ ;~ܤ-J%N(uAu:a?i0N&wMG2$j Ϥqft1=+0-fʳByNwn3<#:2vy-زW괌k1f7.Yn#OF[eG)àqWlNw5_pQîVr1{6A̼-v+HǛ} ]ߞW۞0A1}4)+/N,KN] ag9/K1fKi%xMtՔ j%{Ts7sWC֬FJ8׫zrVR2~:Ot>* я:R5f ^@8.qp^V[.\@ }sWYkLȻc^Cu:N!OJ3hA8c3>lY#hdc(XbVY⹏݋aGcZa XyEo̿ҿ YAH0*||^|MZq#-Bu; v'!kqOIx ʐ`yS:GQHj{++y}P02އ)&$9Jk*0&NmHr#B۱M!CWSlxE񤄌/(}$8~ W2!]|l"H[P1y)b&%VA*gz4g7ã\_j F2%XmC5P(y\a$g`2褻Kd?#9=cL Us bLZ}%S=$Fu nQF^Tᢵ`.h{<]utv; 4GUoZ\pbD"?LJە7 ;~(p^@-VBf[WUS@m!V&p$p|< ]zT=eQ&Nn=f V^}f1=W.tx[e'n^IfSݦ?2X ^6[ [-T\RڋXt!&05M,Cw1b˅*{ըbˍV,!rg`?Jyb6F%sJJf5=Dž }Y/K[Mҏ"Pg@T<*{s. >|?XSO3uK߉O-|#E&5`ID$u|%#{ c}Qync yʓJ?0&4"WY_Z֢kǝcEŝOqKn O6afe,qa*Ɣ_c­ru*J(T$`w-3pW7qYExo _)e/U&\S~_8֞uDl:Ìg` y͎N0imENBH=9\ͩ㣎39ps(rBj xM0~ K,rxD mT=eq^dCo'SN4T_+1s7.U5$%o"/fsepN$#~LLAŨ BaĖ!vb3b6OLىv 7BL+ T8M5WN_°#=}T_`©mWV}b!tU6+TqX'~@Gaf S8 R0(96-@ҫύ$4 $ XD`rN}^0fe/+e/RQZlM@qL(,gŞ#$C.1ֿJp_*5s|(fYLiJIݒ -a .X3=#""`\hImpsKO>ywGditor W mOjH e?9ί0om ˬ%Љr/ZĚÌHIod`nb9'ZWb2%\8ICY CKIW ԲܧDZHJ4A 0s0'ƝwYd {bs4 ^&VڑTTh4_@\zi^L<(@W ui5Fp,/Kva0U1O5sӘxec^gz7w](!J3{ң%&55VVۅ)#;~{n PFb;ᾏ&`+I}YI9x?HnR K>̘ AQ265K![@CCE U\'yXyǐn;3k[DzsJ6!O;G=uPLƨ<2Gt1%궋N'}=]~o1 7'#sQ| |u)ƚBxHubKWE Htq>5M752{g_Gtӆj1vUEoH}/6B &.PGhYbߦq462/GJAѓP/z& +J0w4gcZkX\#Ng03=@/V }!21ѡpcJңo0' F`iIҤHٚ3hZC&KB¤SL]-}mVSS͂]`2'(AT5֣ʮ)Q?!|^Obbmdrh^A ]丝X2-3kB`P*DPNٌWv"8f|Ȣ &=a7Ը|XcJ%ȭ kpy0/d)nS'Zľ-Mapp}jBb7%1փ@Ӂ2`BA 1U h\%Ҁ5 zҥ3|  C2hcxŹ.j]Q&fqHӵ(L)" oE_xrIFKCc_*FŵFM,ŦYUnnBSe\%hI0@o;U % um^9Nz|G -^%x&Ο3J܏Q߻}@x7zx$iE<zտ3q^V{S W"1[H*軚'}2ov`[Ĕ/_bNf  cb{ϋ]]Tp;@NuȮsK+1E`u9A uARqPVMqZ-%W@{l93:ڔ JIհx4ܪzboœ3$'㙊ѰTzB %7@ڶ<`"\[hl)ɵN`4 gctAY:PcUBJ%æeKS+"Ϋ^~EIѷ@jF9WRRtx[P㍊P7O*۹ ?v θԟ.޺BjL񕀩W9/040BݶoWK(>&ZuJ8UMD/`@?'f*{Ɩ^}C!HxhVp%ZQ[/`XoI=~qx8لB ШΛBu;1T/DD.R3Q.wk\|S87*cv_;*)Q&_y[VWMK )6#g y!lY³_ײYe(#4}JH5eּheho[& Ơ5ߎ Y'`T2w{$*ɞj)0,8I|BoDF֍}GA=om6:7^0Muc+T>nU@#Dl:f:LJǙ |,#>C-XsX e_h~}ǷAq5Z :+^60ـS!3sqi;H1iY:29="9iT _:Zlhl|愜>ӊ ;*`֬2<SMڤ:P_{_ԍjzXd DFjkQM`u)>Cxu'0z{Jy!pͣTǜU+s R\M=QJ5Tģ"r?%AD+_fO^J8e~bW!,Dʼn[u8&5VVwx#}rED27q͍=bD;1+Ԋ0=!;A'ͻe̙iv0ꂬ_~ ͂?QR1`SY3ݵW+dI_J P\eeGsc@k M~u~sQ,Wm%Gq6]נبJ)ucӀ$v!s#?. QߋсyZJ0 mZ$@*dyجxǦk p<effGu{>ߟjac)dm-p C=%Tӣ%ѱm:V]V4}ڶcd5)e7rJ0E}/CALB4s\?ghIY] $mGfio|W?}›w]8̼q%8(Ve qêg#ގHU, 8cJ=2\:- +{`zO*RNj@gYm>#g7Kse ナG'TL`m>3w- >@; (s /| 1lJמE5&,q1?p\mVx\])S0[SjN!ؤBBRmNPJĸ1}֯#y-v\/멾Pan_0&xfFLdqBwyRAB•R pQɉ,sƣ3ʐ 0 # wCQט<e]Uea%otW#T<gS1SlJf$J+FA? bXLou.[S!D2-|_Ig:C@%r,@wdk4H-\X]IP+M%w~ 'SoO $XyyBz/IjziNW&z:'uDս+`zuE`:`pBB}tNjr=-cE+XR-RqˌcЛ'r27NAE冉6ӿX $rD:]_!sKUT]4Jwۦ1w,@wEER۠dQ 97_na, l&"aĖ?OP^Vja׏p#F?q7m;pB1Nm Il&KTl.ވ%W .sx ߆J9Kz훽l/ȻTVeDKZ6"~r׺CT;%Г8Px9G-%ddϛ65zA#l(0q"J] M/,Ru`Ta ֚X^;Z[Oa+CehYA$y: m@&@N̈v|'23]_ĦbPOX#]KPV%GXvRE{bQ=!'0AvC߮'66LR>5Vd6l OS;=u484:|Hs2:I I29팢Yms"'բZdY˙WYdg2նԧl9:B-ܑzփ60I`Mq w3/'8)6bܵ\MZ^7h( +q$?v|YG'`|ɔ׍}IDUj(3^|!RpXΓ,XBatb޿^|3|i9̸nz;)+|w=ȵZRhLHr0?og\X\[~L 15n&l+>^D߶eQ{$Hdt8~ϛp~! '-Nt]nY.>DͲ \e&bfŒu9w_n;~QCxls$|}l"40yrEkqΩ6߁W(U,s69{LBUdjI%Yr˹loA̴6IzO^>~:wWj& ȂZKWdY%÷PE.Gs+jM1멂9 x#*` 2hkb^`By_C*ɤGWM;JoTg7=dneë&(ip:i6zâ0oj3"Q^챀8bnC>;nV @/xJф{rw٣<;\,+r HRV4-Wae4RG Bw"c8;o*]j7Te{ZB?@!2lQ5&揆o'_4Q9Zcb/!0jDnǖ2\NfiO jy[W #ّ1j33ksHͣ=~7,y6zGuczܛo,]7I'!Xkw) qa{h$ʯ$WWv)J~|u27hĚHz~Aǎ'J~M=5&~N/".wҴ׆b߲g:Y8TutWn{؉i s iTzKPok~O ^7|b)|< W+3ōux!+Ô[r|R&ꉫNm 7ɧɶkU Kĵd]G`O89P!}4{'4G["!~= w!۝S5Ӈ]Ja>3s+ǦoŮ@#DvA3[qju^>] ;JAqdv5"3!aiZEǪ" Dz%C\b㼜 }lCLM%Ҋ\ߓ[MSsߋ`R ȳ< Bt:ۆbR)ߔɾy*IAN0:Ք+Iy# ,o5f41:R:4D83X H%OP l$pO GK g;x=[Dj)׀} y-I{Fl`BLwoš?ʛƈ&WzO3WJud=..F?eRR=J4xI@Jt.ƥ`Z2ĥ1z]m9媋W;P-?.҆3Q.\@@xlĚ'.0)ŵ̗TAdJf @3~Q?Pxq_&߃1 m?ߚ,~̑18k`lPeш<ᄸRP?كH,<)~ >A%ns^RW=nj9^%(G5 7CQ#k?B?j#0+?q孏XIjQ=et@iO$ [sX>LM4~lJ.ؤZDw5(os 8u3z.os {mjtX# 0hS:ZJR%̃D&R"wŽsq htU\{ؚE$*q xġ76pcX UZ7{_BSa> [P+a>qP\^#S$V_®#]u `D܏DBX"oHa*&݄i`a?p> 4N6NRj*.}{4ue=H\KE;QFd[*f$LNCckI"!ĥiv o7ȲG^,aqAxYQ#YȺkUc{3RτD$G2tºuS5= j|s`&ӽ9ײibyIY'fJ><GB Ox Y` yr&,gߊޏt ňƦ_ YHC!: DsV*W,.⌶ߕ<9ϵ=KrNb3;W6CVTLIⅼȽ֙hZc SJ?J6M%hb"̩񈞤2xi$r߂U9D] Z%f<&_.T, ڽA:\U.4C-MIV搨a4f^ڸN/a]N}p3O.yR,GmaV[bWÅ{=urz2ɺ1nsKi|IFQ rd=D;߳Yض YZ