libtspi1-0.3.15-150600.10.3.1 < > , gp9|e4ZlRF$R +>ǶԹ}&5Rehpq:~gR %!Ώy xPl
͠i>1ڻ
ss ˨k W2:)ݑ=#M
E7iqF[J^'F PjS
$RV4(T-B=&Oc8^''@v$)|+s(h'!fY&<3{K`t⨍ֆIL]s}C4:ty}(
P8&_nV > @ P ? @ d V ! B O e {
* 4 \ d < ( c 8 l
9
:
> @ + F : G P H X I ` X d Y p \ ] ^ b c s d e f l u v w x y z < C libtspi1 0.3.15 150600.10.3.1 TSS (TCG Software Stack) access daemon for a TPM chip The trousers package provides a TSS implementation through the help of
a user-space daemon, the tcsd, and a library Trousers aims to be
compliant to the 1.1b and 1.2 TSS specifications as available from the
Trusted Computing website http://www.trustedcomputinggroup.org/.
The package needs the /dev/tpm device file to be present on your
system. It is a character device file major 10 minor 224, 0600 tss:tss. gh01-ch3b SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ Productivity/Security http://trousers.sourceforge.net/ linux x86_64 gg 7f6dbefe965a837fe98cc61c2a0ba3b0fd65a336cef6aa78863e5d08b1191e05 libtspi.so.1.2.0 root root root root trousers-0.3.15-150600.10.3.1.src.rpm libtspi.so.1()(64bit) libtspi1 libtspi1(x86-64) @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.4)(64bit) libcrypto.so.3()(64bit) libcrypto.so.3(OPENSSL_3.0.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) trousers 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 g@f4a\>@^˳@][GXh@W,@U@U /@meissner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mailaender@opensuse.org jengelh@inai.de crrodriguez@opensuse.org mpluskal@suse.com - make sure that udev workers have finished before daemon-reload
(bsc#1231071 bsc#1236457) - fix runtime requirements for stat and udevadm (bsc#1221770). On minimal
systems this can cause the %pretrans or %post scriptlets to fail because of
missing tools. - update to new upstream version 0.3.15 (jira#SLE-18269):
- Corrected mutliple security issues that existed if the tcsd is started by
root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
- Replaced use of _no_optimize with asm memory barrier
- Fixed multiple potential instances of use after free memory handling
- Removed unused global variables which caused build issue on some distros
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong - fix a potential tss user to root privilege escalation when running tcsd
(bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
require /etc/tcsd.conf to be owned by root:tss mode 0640. - Fix a local symlink attack problem with the %posttrans scriptlet
(bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack
to gain ownership of arbitrary files in the system during
installation/update of the trousers package. - fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These
files are only sample files that *can* be used to fake that ownership was
already taken by trousers, when other TPM stacks did that already. These
files should not be there by default. Therefore install them into
/usr/share/trousers instead, to allow the user to use them at his own
discretion (fixes bsc#1111381).
- implement a backup and restore logic for /var/lib/tpm/system.data.* to
prevent removal of validly stored trousers state during update. - Update to version 0.3.14 (see ChangeLog) (FATE#321450) - Check for user/group existence before attempting to add them,
and remove error suppression from these calls.
- Avoid runtime dependency on systemd, the macros can all deal with
its absence. - Force GNU inline semantics, fixes build with GCC5 - Cleanup spec-file with spec-cleaner
- Update prerequires
- Use systemd unit file
* replace tcsd.init with tcsd.service /sbin/ldconfig /sbin/ldconfig h01-ch3b 1738925250 0.3.15-150600.10.3.1 0.3.15-150600.10.3.1 libtspi.so.1 libtspi.so.1.2.0 /lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37368/SUSE_SLE-15-SP6_Update/acab3358446069a4d3709cf4ea8d3d73-trousers.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=064bc72c7a785f15cbdc8a3da9b893c92bfe91d2, stripped P R R R R R R R R w< &-* utf-8 a0c2584b87c674df86a87d4cb9f5570bf4df0f42ba3b33e684fcb85be4e0623c ? 7zXZ
! t/?] "k%wdQC>~ f,T:YrcC#iz|
QP |},L?;iʠ8hr edj'
_|VcBe ovah e
9ݶ\m(C.ld0;K:Yl nJIv|
L{|G6C@W
Y `Blپ\О*M(GCU:0:7|~x dmEYGT7W y>hf- ƘzHCnQbuس*DUq |$SmC5]?40⟘6h̼AJ-@ ZfJxmuj E1?v~HBᔕ:"RtLqG ѭɛiq %V˿Zg`,- rr*z(
$u%xϟH ~
/ lέG&ެ2phu`({NHe-lIsE>W6:K(!RM(mvx
{:k< ~ `H04up
NZ"ǵL*R֧~Bq^-ڈhT=~CzpvI!ML;Kemf% d|`J{EC M28no@g2,\(! %
YZ