libtspi1-32bit-0.3.15-150400.3.3.19 < > , .h fp9|; àV9zqu|)q6I9Escubz>nM K0rj|W!p i rf`}0 ПaLI1o5EX 4M[
9h{57SDY)^DSa*pnPB 0n%ՖHa }uIԍaLB
/Z/KЦi{}V I-d6eQ02#Jdt;6(֦N(w]qrq ؐ / > > D ? 4 d & \ % F S i
( 0 : D l t W ( 8
9
:
> " G , H 4 I < X @ Y L \ x ] ^ b c b d e f l u v w x y
0 C libtspi1-32bit 0.3.15 150400.3.3.19 TSS (TCG Software Stack) access daemon for a TPM chip The trousers package provides a TSS implementation through the help of
a user-space daemon, the tcsd, and a library Trousers aims to be
compliant to the 1.1b and 1.2 TSS specifications as available from the
Trusted Computing website http://www.trustedcomputinggroup.org/.
The package needs the /dev/tpm device file to be present on your
system. It is a character device file major 10 minor 224, 0600 tss:tss. fh01-ch2c tSUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ Productivity/Security http://trousers.sourceforge.net/ linux x86_64 /sbin/ldconfig t ff 36fd5fa69b5341a94f50a12cb35a04c06fffae39ae88a7872df36db919b336bc libtspi.so.1.2.0 root root root root trousers-0.3.15-150400.3.3.19.src.rpm libtspi.so.1 libtspi1-32bit libtspi1-32bit(x86-32) @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.2) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.28) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.4) libcrypto.so.1.1 libcrypto.so.1.1(OPENSSL_1_1_0) libpthread.so.0 libpthread.so.0(GLIBC_2.0) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 f @a\>@^˳@][GXh@W,@U@U /@Smatthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mailaender@opensuse.org jengelh@inai.de crrodriguez@opensuse.org mpluskal@suse.com meissner@suse.com - fix runtime requirements for stat and udevadm (bsc#1221770). On minimal
systems this can cause the %pretrans or %post scriptlets to fail because of
missing tools. - update to new upstream version 0.3.15 (jira#SLE-18269):
- Corrected mutliple security issues that existed if the tcsd is started by
root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
- Replaced use of _no_optimize with asm memory barrier
- Fixed multiple potential instances of use after free memory handling
- Removed unused global variables which caused build issue on some distros
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong - fix a potential tss user to root privilege escalation when running tcsd
(bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
require /etc/tcsd.conf to be owned by root:tss mode 0640. - Fix a local symlink attack problem with the %posttrans scriptlet
(bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack
to gain ownership of arbitrary files in the system during
installation/update of the trousers package. - fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These
files are only sample files that *can* be used to fake that ownership was
already taken by trousers, when other TPM stacks did that already. These
files should not be there by default. Therefore install them into
/usr/share/trousers instead, to allow the user to use them at his own
discretion (fixes bsc#1111381).
- implement a backup and restore logic for /var/lib/tpm/system.data.* to
prevent removal of validly stored trousers state during update. - Update to version 0.3.14 (see ChangeLog) (FATE#321450) - Check for user/group existence before attempting to add them,
and remove error suppression from these calls.
- Avoid runtime dependency on systemd, the macros can all deal with
its absence. - Force GNU inline semantics, fixes build with GCC5 - Cleanup spec-file with spec-cleaner
- Update prerequires
- Use systemd unit file
* replace tcsd.init with tcsd.service - updated to trousers 0.3.13 (bnc#881095 LTC#111124)
- Changed exported functions which had a name too common, to avoid
collision
- Assessed daemon security using manual techniques and coverity
- Fixed major security bugs and memory leaks
- Added debug support to run tcsd with a different user/group
- Daemon now properly closes sockets before shutting down
* TROUSERS_0_3_12
- Added new network code for RPC, which supports IPv6
- Users of client applications can configure the hostname of the tcsd
server they want to connect through the TSS_TCSD_HOSTNAME env var
(only works if application didn't set a hostname in the context)
- Added disable_ipv4 and disable_ipv6 config options for server
- removed trousers-wrap_large_key_overflow.patch: upstream
- removed trousers-0.3.11.2.diff: solved upstream now /bin/sh 0.3.15-150400.3.3.19 0.3.15-150400.3.3.19 libtspi.so.1 libtspi.so.1.2.0 /lib/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:33188/SUSE_SLE-15-SP4_Update/159c6189c2888e1f144b776f98e388d1-trousers.SUSE_SLE-15-SP4_Update drpm xz 5 x86_64-suse-linux ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=24f3fd8a52b14d39095f47331a45f8e2d5df8ff1, stripped
P R R R R R R R R
R R R R utf-8 bb0bf75205693405b35488e7d92c1e781aa927c35d61c2fa579dd0a7e72e22fa ? 7zXZ
! t/%2] "k%Ɩ.ne iIBܝX揦LlZT ~ \b
'hPrGm1 E "R@[dԢ _KR2HZIjf竰diU'U [}Zó+4
=Ujbebq -7`">{:m>5
rlX*n1o\sN sODKW[wwL
.^1 Q] \8y7:lB ֶ
+ʢg3, >d mo>oFz7
94~Td CH?0 dqUWSJ xm%KEjiyZL .GHZ>&_ՓU/T|![ou]NCuX]| d/4$mn1 5X-r/penboz-z3[N6/>nfpz~'m:^D[H[lH Z~eNpŰ0):P#MmX?36s餈Gx}9p=w?AᎧqnf q_'
YmꇯFﳮ ƍW~nbNBK ^+ᕧ 9(H? ~$< Rh$_Dzf\h#0y, 6 6wE ;(W5{&
( :1wSH!le8Yp.Rs?~k>h˶+}#!'T!B!gfd3ICJ1csK |qA58W5Ϧ k7Ok:ݶZ ]},Fv
_XC\A3kpBIgg]ı/M7.Kk"&dV蕉;Dl ]QCqqSψ4fc@1tqeX}2
Bf zz%E24>p 8w BPYtσ=*PPb-Tp=VRM
8auvOV;,nj"јA o$ĭ9c=W%ٴbV+:&~eCrἔ2P3. qOI_ %Lp';#miDdp x~{:_!G P0(gO/"ZD QXK;BA71q3άgE⊉0gg9-? ӛa \OJKj_.p}5&TȂ+4ԝ3@&bqtyel H(ff[Լ;Mr缎3)Mdm RgE6%.cl7wG23faƥuNlCۏbdWy_?
7!uנ[a5 ,QS93Gd5[~),鲻q=4ZQ
B$w=SVB}5yPG 1|~4E` H
C]1 '4),k
ߖL)G Ã2!=f>AVR~w=: ]9KExFUvT<S♨w$^c`EiT/Yz83mPXLMu t_YwаN$"3#5蟒ػ/ev8e" iF[NgI/[
bd;1b֜wVCF BƝ#ۦ `e Rn.Zw8{QeL6 XLA?攖Xz?TT( =z+];JqsK3щjk,~Fdi5BRYB?vX~MspG%_@8/[,aY/ f kwf9tGKqE605 ޒU Ms9-~!E0͜*j5J Ų8-ӵ q(|p 䒳(gLߖq Q~`?W<A[(?c kf9 f4_3CUK rDn %
Jo3J ]wє,hQְ
|%%dO )a~ZR3X UPL9G\L]&3. ?)rX)5H7
d22,v1˶>2I5^3w2ݾ)u >C$ H~jlő앆@mS \Km%cʊ t[ڙȕ ~iGt
[E/ A^;^w4m'hiRvR"Bs+_G,=a' ؘp;d+5q(
-Ye±>Bi ){YaqW4Qx 4ｐ9b> pc;]aahꎻJ 煂pMg%^ 9* w.1 B*wVT9G919jǥ\Y_v!8invԿjNwnq n[^KȪm )O(*4߂Oy 4hQQǚ#:YO2 j_z&'?MKiePvcBkK:'$")jl[l(B(?o [XΈ ԢgȳZJ@ j=(ф
F4/V#-kƥ:0z$ ۄ??z\+'@A^3 2+ ZBkĺ'j sW:~)k AO*>aEpK {ul# 'xm MsnſtQϋ[j# Tm-'?G~.ayǗPBQwAX,|rmB̦{\S_M 3(;[ͣ²Dƥ>-;
Nf u7
Q1lAw=#9Ȕ
"C"c.03i -5 9 }Is}q*YוES] n;ݜOcC)YAT\* 5ƿۆKGNHfܗҟЭe$Ee"^^k kNBJY8Pً,br'J-> B 솸kg!CS:l2b}
$rɺ/Rt :2ڌӹ)V#Ab^SfH?4E y"m(,r@8 [P
o9U: _TȠ
m|y:̮e䧠!YTA?jPj4"'qֹ@5q'#
z= !&*}p4~ Dz
Zyy`&cQ H쬙 0cp' ,q}09 ']D)@
Jw;F L O ?>271MCє£#pc;P]e90OcgJ iF |Fe U#-{? [zikxsT3@'XxTq1Rbgp^sBK-fTýA-^D!p3~m MI%@߸ 1m:ow
P7K@LOO5d@[ܮPIiHW3d uj2 sz Og*x#S^b+cd.{,!9` OgVA3&Eѽ~%AJ kttBYsl!E-ź~plV sF`91<:UaI__G t