trousers-0.3.14-lp151.4.7.1<>,cԉ^[/=„B+֘I-o_"2pMҜMz蔓Ll`N^ (ɰS^4 8Q!gl#y!b$WTw9N5l߅@f7v-afj00^OԟH5`?5Pd   T) BXy   L x  f I4`(&80 9X :F =)A>)I?)Q@)YF)aG)tH)I*$X*<Y*H\*]*^+ b,c-fd-e-f.l.u.v.lw/x08y0 z004555 5LCtrousers0.3.14lp151.4.7.1TSS (TCG Software Stack) access daemon for a TPM chipThe trousers package provides a TSS implementation through the help of a user-space daemon, the tcsd, and a library Trousers aims to be compliant to the 1.1b and 1.2 TSS specifications as available from the Trusted Computing website http://www.trustedcomputinggroup.org/. The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss.^[goat17 openSUSE Leap 15.1openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Securityhttp://trousers.sourceforge.net/linuxx86_64/usr/bin/getent group tss >/dev/null || /usr/sbin/groupadd -g 98 tss || : /usr/bin/getent passwd tss >/dev/null || \ /usr/sbin/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ -d /var/lib/tpm tss || : test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in tcsd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in tcsd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-trousers-update-$service-new-in-upgrade" fi done for service in tcsd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset tcsd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in tcsd.service ; do if [ ! -e "/run/rpm-trousers-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in tcsd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi /usr/bin/udevadm trigger -s tpm || : # bsc#1164472: adjust potential root ownership to allow tcsd to open the file # as unprivileged user. Be careful not to follow a symlink target. system_data=/var/lib/tpm/system.data if [ -e "${system_data}" ]; then chown --no-dereference tss:tss /var/lib/tpm/system.data fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tcsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tcsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tcsd.service ) || : fi else # package uninstall for service in tcsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi.W"#]~^^A큤A큤A^[^[^[^[^[^[X<X<S4S4S4S4X<S4S4S4^[^[^[S4S4^[eb009b7d1132ac33411e8f838c7e272606c8dd1d8944bc8b82ee28f9114e82fcc56f762ff401646eae0b25769c79234e22cabea3e3b4f4c7bc581a23787b36f44b635e9ae00264cd370fc62921814265679e2a15fa6d6ebbd468e40f00af48f4a8e8d4b23a427f15ab4b3147f39c7a2c7782b529432ad7536a3962e98d08df87044545f25f9cee244dbe733e6209e3dca1ed294a34558faca16a6a0205e72f00147cdd6c7565a7684abab41d23ad7e5867a5e8a2f9f28b3f20c1c5ee1a41ead41ad596d12e7471549663c03e280b5b5d084a2e853fb86e4d766109818f9d7dae4a6bf595610b97b05728f4615d54faf290fac3f8bef836a5d919de070f3cecc4842cff0de213dbcbe03bdcc03c3dcfaa48e03bf45eea9d18e970cef4411f4458686e9d62dea2df5433d4a435602c3e0522b3bb68a2e75c39c80552d6bdddd948e10fd3096b3fca327b01803d91959817028371fe8d9e1970256bc56aeb1bdc1138547b7d669844a1d7d5b9075872b6f5117996c0a21d78e383e79ce7eaedb8c07ef598700d70a9cd14ba28950c7b048cf21ec2ac2297013e5789830b58ffe8baf09355ad0bc2e91d802c18654c2b9219ac1a26cab805879a784eb8a030e02c437cef9d8224b158378505c02b77fcdaa05a2f9ecc1552e95ad6d71b5ea96b690219a3b32565147e2a9d085f67d3c83fd4b93dad037fb966cb0cc5499d8fa6a568d7c26f86aeb0e601cd2358475047161b619bb46872f84569448031f3649619e35e3194d734c81d99d6cb679ed5c24ac97652b068ff12eed215e1ce382a4fb7dcservicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottsstssrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottsstrousers-0.3.14-lp151.4.7.1.src.rpmconfig(trousers)trouserstrousers(x86-64) @@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(trousers)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.3.14-lp151.4.7.13.0.4-14.6.0-14.0-15.2-14.14.1^˳@][GXh@W,@U@U/@SS)R&Matthias Gerstner matthias.gerstner@suse.commatthias.gerstner@suse.commailaender@opensuse.orgjengelh@inai.decrrodriguez@opensuse.orgmpluskal@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- fix a potential tss user to root privilege escalation when running tcsd (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent badly designed privilege drop and initialization code to run. - add bsc1164472.patch: additionally harden operation of tcsd when running as root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group. require /etc/tcsd.conf to be owned by root:tss mode 0640.- Fix a local symlink attack problem with the %posttrans scriptlet (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack to gain ownership of arbitrary files in the system during installation/update of the trousers package.- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These files are only sample files that *can* be used to fake that ownership was already taken by trousers, when other TPM stacks did that already. These files should not be there by default. Therefore install them into /usr/share/trousers instead, to allow the user to use them at his own discretion (fixes bsc#1111381). - implement a backup and restore logic for /var/lib/tpm/system.data.* to prevent removal of validly stored trousers state during update.- Update to version 0.3.14 (see ChangeLog) (FATE#321450)- Check for user/group existence before attempting to add them, and remove error suppression from these calls. - Avoid runtime dependency on systemd, the macros can all deal with its absence.- Force GNU inline semantics, fixes build with GCC5- Cleanup spec-file with spec-cleaner - Update prerequires - Use systemd unit file * replace tcsd.init with tcsd.service- updated to trousers 0.3.13 (bnc#881095 LTC#111124) - Changed exported functions which had a name too common, to avoid collision - Assessed daemon security using manual techniques and coverity - Fixed major security bugs and memory leaks - Added debug support to run tcsd with a different user/group - Daemon now properly closes sockets before shutting down * TROUSERS_0_3_12 - Added new network code for RPC, which supports IPv6 - Users of client applications can configure the hostname of the tcsd server they want to connect through the TSS_TCSD_HOSTNAME env var (only works if application didn't set a hostname in the context) - Added disable_ipv4 and disable_ipv6 config options for server - removed trousers-wrap_large_key_overflow.patch: upstream - removed trousers-0.3.11.2.diff: solved upstream now- trousers-wrap_large_key_overflow.patch: Do not wrap keys larger than 2048 bit, as the space on the TPM is limited to that amount. (bnc#868933)- Updated to trousers 0.3.11.2 - license changed to BSD-3-Clause - various bug and manpage fixes - trousers-0.3.10.diff renamed and rebased to trousers-0.3.11.2.diff/bin/sh/bin/sh/bin/sh/bin/shgoat17 1590516663 0.3.14-lp151.4.7.10.3.14-lp151.4.7.10.3.14-lp151.4.7.1 tcsd.conftcsd.service91-trousers.rulesrctcsdtcsdtrousersAUTHORSChangeLogLICENSELTC-TSS_LLD_08_r2.pdfLTC-TSS_LLD_08_r2.sxwNICETOHAVESREADMEREADME.selinuxTODOTSS_programming_SNAFUs.txttcsd.conf.5.gztcsd.8.gztrouserssystem.data.authsystem.data.noauthtpm/etc//usr/lib/systemd/system//usr/lib/udev/rules.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/trousers//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/trousers//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12745/openSUSE_Leap_15.1_Update/fb94ca4801ea98fa0f7c90ff96835d65-trousers.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=e8eb2d68026528da1829dfa880cfe2e13b071b71, for GNU/Linux 3.2.0, strippeddirectoryASCII text, with no line terminators (OpenOffice.org 1.x Writer document)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) RRRRRR R R R R RRR1\4BrHaT# this scriplet and the counterpart in %posttrans work around a packaging bug # that was present in all trousers packages since around 2008 until 2018. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files # from packaging, during updating they will be deleted. Since users could have # created their own versions of the files already (by taking ownership of a # TPM) we want to keep those files in place. # # to achieve this we use the ownership of /var/lib/tpm as an indicator. # Versions that still wrongly package those files also had the ownership of # the directory wrong. Therefore if the directory is not owned by the tss user # we apply a backup and restore logic. [ ! -d "/var/lib/tpm" ] && exit 0 OWNER=`/usr/bin/stat -c "%U" "/var/lib/tpm"` [ "$OWNER" = "tss" ] && exit 0 for data in system.data.auth system.data.noauth; do file="/var/lib/tpm/${data}" [ ! -e "$file" ] && continue cp -p $file ${file}.rpmsave echo "saving backup of $file" done/bin/shutf-8eea14d402a4fc6a63318d93ecbc0bf62215d4445987e3f3af09a3ee169576f58?7zXZ !t/R})]"k%{f60c>ͱ8e-ZJz){+$\mB Xu*#Y1,Ule+g ,c:0e˞鹌/u'So }hWa$%\O\K5&Êm+E*-:6/ - 3)ӆiD7Sr, ;`FQExgIKV6婺E^ : ,0=;,}= `W2[`Q0)aWb\p#6F^,zVQmXG$v d;{Tz-޹&}CU^W [][Z-9?쬋eH*CIRe>\(^ /.ҵܶWQYT`H¿d;a͞VR`>HC /ȖfulwEHו i# b'gSrԔqnK#@,K+ CFwXRG_G8vRpLOC8VC@A<ТCm|4ٙ"X#2/r [FlȮA#F vHt)E==Q&]@u 2LFΎ](!{YXYjtOUAѮ82}AFVf%3aO%@D(^cQ?3TAWje=춵?)R"G (jLFJ]zI' $dBK:aˊd0Tܖ+yN'#vH:8 aR0@^KqĎѩXDV`htxScꤙTt R۽9U"x2pm &kyrPv)Z`3P{]0JShAS}b)VbDڛ VkIġ܊_MwED '?[2|9ppnF"[gLL<(z@Œ|%rzN*T!գյraǾ; ?kEfS;%*$6*H:,% Gݳ]<0֯xpl#8G r?`!k~SyfJτ$P/@ GDX,~^iCU7o) TcOHkk O~/-x+H7R?Dѐ L/iEcTwq>l7  2ީ6AT˞j/vJb;nA)%{,Yox;Y6l/&L7DK 0)V1h*Jo8&kx"~\b9ඣv~||hɻ K!~Ox<-<8t^Tا#ԆAV.`mգ-MLuB}ìO{̚4&r&<"b$n9p+NOG:Q-H5Xfy̆ym ;eh%\(iWlsٌݗ67lCEiJV8^^f80ۘ0#gwRY%!_}(MtΦ?Y75.Q/1օKX"G4<;27~nQ˫׊ 24/7`aID-?Vp}|%D'Jo%s,[h`'GM5<öT;3 #oZI92.Ej޴4}葂9x5ޟ-7;#?4_k`ާڜ)FZupKk1ZM? CS֑<̗)jD4sq 0L/Ȕij$vF6>[[_(<)=/{.(j:,qX-0<%'emײk@'@5khshIP 22ݞ%EBE Eygڊ6:fVa x\>ӐvYpgὶCc~)&r9۴K܌:֙ģ2w ^ndNHtg琑@3a>`~gv$["FLWDZj+f_!Zm9(LrZ3 ( ӫY3m֟ ч RXP, M$XEڝ)ڼ\%@4aAXg;䐬;ׄaeVUs@wPozؤGP_x/|w`bFJv.`E P -AC} &꺊>q )Ęy@z͓[VM'= M{b4å.&]}>$BA} R(X P2,868H7沣)VDf$⨓O5 rDf.k~8po!SiR`e4Qٯd@9=\C%<.ln֣L!8hZlT䀓:~(񷧅J~B"$WH?^CƕvoKٰPq.;+A3wFR! H00R+r39 n s/Oȃ(>vYC.yV,[ل9[t!cp 5cH^AJm9~Qۭ ռxK#,sH9 9d',A-S$07$a,=˚lPVh&X5-H䥚G  !c((,P$ Ds8>-n$(< TvMRaݚ`o-[Xr#!} 2Ym9-yEʑ{殤1MؑMm)#%9 424>0[Vu7'AB[' tQ'TlX}*"[ʷJJm= t&"S!T=h0FM]/ Nߘ\)x6NNk /yݾxVu23 |3UK O NTY~FY`OL|Ԯ ̞BW"5D7'x75pTɟͽӓ5dτQ~gb|4+t9ǔ+nϢl5aN6F]z*%G- :&=(/Z6rQ ,ԫԚ\ W4oN:v R(yut}β)f &5f,b0w;>j7UT<يƫ un܆VW80u}pu&zş?Z 9Gy3!(f:'%bf]qlY%E "{+EsEHCp*)U;.^S5c,vei{y~J],eUVdYX9f(d9xEfb"$s!Bl2vt_|NСhyxo5ydu) -7gF_0eBN G4Ts7Z2v5jD y} BU|O94cq#VU=`THZ,#4Cm&^7mX}='^SV |a?G[ñ.;8XwUš&Jg߸@m5 I̪m&(H4^X?%µGSXZs ,)[|WVbUϐW5A\=SwCY}QP3\)#D< q~Zfު~SDY W=X9qcg}37)apxT4n}jp+r_zdQ{C8DNP ZZۺ՝sRȯ^X/moMtO;[ o;|HJQ}jnFP#ݩ~[feyBy,'W |]u#$l 69RZ1sp {mh$ 1_RxX'@ &@[AŽ͆tc=d|_m*v %yԶ z$rS <{9ucAmZ "1ٕ |i@ML:6"x]}4&_/iF{J?Z'i3A Y۪O(&dIj-8=[XPcWhk L. 8c3ٛbThh+"_c%I$C8θp{&4br4 yl2;a&?"VeHr~ 'QJCU3?5\LMۂ<Ɛ߆z䝡ꇽ&*vӜgY8;4@Un)ܶf}'Hw7я&^D(뾵VBU)nB,/Q SBWʍdbG[ǷzqgS'H:3{M'DPѦ+@օƯ#D]qԏeq輾ã:xU!pK OZ@#0Na bxTrܵiL'1E,gMɌE)" iKI-PBMMD]#2ie##̆V3M2A} :%E'`wL|XSpSY[M^M*Oߧ)~6  =BwNm^{wyD 24OM}{^r,ˑ )U9!BU=q5Kuة+}\D3e꠪&œe"nm3}h*Ui$~tXj:4)[e(F :a<*28>£U2l3c\2Q쌛WEm"1t`LuS׌d [})8bU6j*o[;Xnk N?5˗l9hjJ P)@~;O PF]z]/>#25D$6>?v`G^= q)"@ lk<3bS@WLT CM8Oִo~"p6FFf|c~j`R%;Q9`,}\nFg>팮$y f^nvV:\[!P20=gGT> 1Ԏ_<x.g2#KXMm"mn#r'i7ˠScHGa ?>DÙezV\o&f:Y1ٍJ?آy1IP}-ha Ѭ%l0mc.>(|*2&;B=fOsb3#ɶud*Em6R>fl Q ɠ#< <A+m ? 뵄}7&TZ<,BgKi:dŒ zoر:uzVo! . A:[3D[YY!/mؾET] C/SS"U !>BV6g㗲FBu4l[_i=K*a`6^vx?4kec<]S-zWl!2ϩKKPJua%|-x JKiyuX{,˥>z8FSP\sv \@70g|)joO,;w>36dpW yM>,OX@fW}RH ':JpP%znQ/(ٕ?z}Q.}ܱ NE2W|;n(Mx'D$ۍOŠY-':_c͔;5S6e}ě^=_z+붖ǣ{"sQAwxpb/9!UMW;b*XQ'_SܶiҺ=2 qJA,P0GP/yzw ,\;:ZCp'"pmʂ:Ej"+t-N0Hͷ՚l5lĸgs0LY_õƖRKyV 6y/aFGUj%6 P6Mr ]ޚ)B:=T4FQn= J7;M 5$ս#ᦴjo閩;| B+^dIp~~ʬ% {&&"k T3l$l,%o@ypNHh$oچ4%y+fy H(, bԛ|"zuj,ba,'yo@JuW eSrLa w]11k# #;-h` [RGb+]c'2hQK?TqvͥR_A "~h"t0<𳋇MFƗܛ;nnЗ`]~HklJD~]L68p,vo}lM?^A{ a%9HUQ(Bg!9A**ʐIv?LbhZnh,Y@Lp,RRO&Y>psGW'Y۶*PMB%ïb%IGYX**چW[̇"g7L654i&pUkb/y޶~<,%!6ɿx)fL7s#aXD?ZQxrIO)I : -h] R.PYn*Ei"r jO0!5Nyz< RZ*_}{u 1x @0$:ě;.أ{*'F92o%) j6PoCLA9Xpn#JDI1H )ijk@M[nVda를Ot3*~okxQ~,[ d${Hv Ǝo8ClX6;ԨE ɐ c@3(m °vWG_JѴ^س+[$G59)3aX\65ҢDM<7r#ߚֲr^&]B9SO~rWc_)ߵW5 N$pn,7dFٓɬM7:ߡ4儯)\P}`;Mlq WG]vӣS/|s=BРIPW}!  uڷ`}_y4SږEIoUxO}şvm?fQpG4E=ǘL-&+@veɁnꇾB&"iH:hPb`y;5K)o ͟J7 P+~Ј.*Vag[>pjNT&GԀ ᚭy/2Cc~AY~հ1{XKG7T]|bWlo#B< ]mz{Yh2wH> OT:"x ZHwm~a%lfUa?mbfUB(IT4P;Z~ s3xs9xz_* {yTBQ{-#*(4 :UA7q߄霟0/]ho^h68*&z;JEWd @ :[n 54ppW[gڂK: l4>T2_Eq,E mb<"2oIB )X[UUSc? xP& 'iDFN${+Bт(ߊ,>vKc($S6UK/鬀(.K'5N6\@ I/(S  YZ