tpm2.0-abrmd-2.4.0-150400.3.3.1<>,cgp9| cpc!iǹ N1*~}0S.}*!u͐59@乫[6[^ƊƔb5dD,qJ!2|l-8D|[6 gV=#ŴS7m"(.[ P&D5*1*q*!`hwL#=?J}_G *cE2eo,N_ʇ8vR@^ E7JVQ ϟA"ܻZ$ SzQt3¸;>FH?Gd " p(,8<Uv    $ @ \  b x<d(i(89:d=A>A?A%@A-FA5GALHAIAXAYA\A]B4^C bD cDdE:eE?fEBlEDuEXvEwFxG(yG`zGGGGGCtpm2.0-abrmd2.4.0150400.3.3.1Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chipsThe tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager. This is a daemon service that coordinates requests to the TPM2 chip via Intel's TPM 2.0 software stack.gH01-ch2cSUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/Productivity/Securityhttps://github.com/tpm2-software/tpm2-abrmdlinuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi [ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tpm2-abrmd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tpm2-abrmd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in tpm2-abrmd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tpm2-abrmd.service ) || : fi fi]"*U D) 큤A큤A큤gggggg`!Z7``gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d301c861611023337ecd42c7234aa6d03b5a02cd52bab8735a89ec6fde7f14fecedefd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec057e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd75a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e5833611718c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpmtpm2.0-abrmdtpm2.0-abrmd(x86-64) @@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libtss2-mu.so.0()(64bit)libtss2-rc.so.0()(64bit)libtss2-sys.so.1()(64bit)libtss2-tcti-device0libtss2-tcti-tabrmd0libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)tpm2-0-tssuser(tss)3.0.4-14.6.0-14.0-15.2-14.14.3gd a@aaz`@``@_t@]@]c\\@[Ѱ@[ @[t[[m~@[;e@[:[6@ZZ ,@YKYYp@thomas.blume@suse.comaplanas@suse.comaplanas@suse.comjsegitz@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgaplanas@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.com- make sure that udev workers have finished before daemon-reload (bsc#1231071)- Version 2.4.0 + remover syslog deprecation warning (bsc#1185154) + cover update to 2.3.3 (jsc#SLE-17366) + contains reload fix (bsc#1166936~ + fix tcti loading using short / long names (bsc#1159176)- Warp selinux into a bcond- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_tpm2-abrmd.service.patch- Move selinux devel file to devel subpackage- Update to version 2.4.0: - Service start depends on systemd device unit: dev-tpm0.device. - Numerous memory leaks. - udev settle service deprecation warnings. - StandardOutput=syslog deprecation warnings. - Add selinux module files - Move dbus files out of /etc- Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077). In MicroOS systems the recommendations are not installed, making the service fail to initialize: Failed to instantiate TCTI- update to version 2.3.3: - changes in version 2.3.1: - Fixed handle resource leak exhausting TPM resources. - changes in version 2.3.2: - Added cirrus CI specific config files to enable FreeBSD builds. - Changed test scripts to be more portable. - Changed include header paths specific to FreeBSD. - changes in version 2.3.1: - Provide meaningful exit codes on initialization failures. - Prevent systemd from starting the daemon before udev changes ownership of the TPM device node. - Prevent systemd from starting the daemon if there is no TPM device node. - Prevent systemd from restarting the daemon if it fails. - Add SELinux policy to allow daemon to resolve names. - Add SELinux policy boolean (disabled by default) to allow daemon to connect to all unreserved ports.- update to version 2.3.0: - changes in version 2.3.0: - Add '--enable-debug' flag to configure script to simplify debug builds. This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro. - Replaced custom dynamic TCTI loading code with libtss2-tctildr from upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0) - Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required. - changes in version 2.2.0: - New configuration option `--disable-defaultflags/ added. This is for use for packaging for targets that do not support the default compilation / linking flags. - Use private dependencies properly in pkg-config metadata for TCTI. - Refactor daemon main module to enable better handling of error conditions and enable more thorough unit testing. - Updated dependencies to ensure compatibility with pkg-config fixes in tpm2-tss. - Fixed bug causing TCTI to block when used by libtss2-sys built with partial reads enabled. - Removed unnecessary libs / flags for pthreads in the TCTI pkg-config. - Output from configure script now accurately describes the state of the flags that govern the integration tests. - drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr shared library. This one hopefully now does the right thing.- update to version 2.1.1: - changes in version 2.1.1: - Unit tests accessing dbus have been fixed to use mock functions. Unit tests no longer depend on dbus. - Race condition between client connections and dbus proxy object creation by registering bus name after instantiation of the proxy object.- bsc#1130588: Require shadow instead of old pwdutils- update to version 2.1.0: - changes in version 2.1.0: - `-Wstrict-overflow=5` now used in default CFLAGS. - Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users. - Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to `UINT32_MAX` - travis-ci now uses 'xenial' builder - Significant refactoring of TCTI handling code. - `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros instead of using the default symlinks - Launch `dbus-run-session` in the automake test environment to automagically set up a dbus session bus instance when one isn't present. - Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib does not support reloading a second time. - Bug causing `-fstack-protector-all` to be used on systems with core libraries (i.e. libc) that do not support it. This caused failures at link-time. - Unnecessary symbols from libtest utility library no longer included in TCTI library. - changes in version 2.0.3: - Update build to account for upstream change to glib '.pc' files described in: https://gitlab.gnome.org/GNOME/glib/issues/1521 - added _service file for syncing with upstream tags- add a Requires towards tpm2-0-tss, because that main package holds the udev rules and logic for setting up the tss user. Without this the daemon can't start up correctly.- fix broken build due to newer glib dependency that reports a full path for gdbus-codegen, breaking the configure check.- update to version 2.0.2 (FATE#326270): - --enable-integration option to configure script now works as documented. - Format specifier with wrong size in util module. - Initialize TCTI context to 0 before setting values. This will cause all members that aren't explicitly initialized by be 0.- add recommends to the tcti-device and tcti-abrmd. Otherwise they're not installed right away, rendering the abrmd quite unusable.- Update to version 2.0.1: * SessionList: Fix Connection object reference leak. * source/sink: Organize ControlMessage processing. * CommandSource: Replace 'connection-removed' signal with ControlMessage. * SessionList: Remove all locking. * ConnectionManager: Remove 'connection-removed' signal. * ci: Build 'check' target when CC is gcc. * build: Fix bad URLs in configure script. * CHANGELOG.md: Add version number and date for 2.0.1 release. * Replace references to drand48_r family of functions for portability * Fix for type-punned pointer reported in newer compilers that enforce strict aliasing- Trying to fix build on older distros that fail because of a missing or broken autoconf valgrind detection macro. Removing autoreconf to hopefully fix this.- add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device library from tpm2-0-tss. See https://github.com/tpm2-software/tpm2-abrmd/issues/486.- update to major version 2.0.0: - support_dbus_activation.diff: removed, is not contained upstream - the tpm2 stack introduces an incompatible ABI to the previous version with this update. There is no compatibility layer, libraries have new names etc. - upstream changelog: [#]# 2.0.0 - 2018-06-22 [#]## Added - Integration test script and build support to execute integration tests against a physical TPM2 device on the build platform. - Implementation of dynamic TCTI initialization mechanism. - configure option `--enable-integration` to enable integration tests. The simulator executable must be on PATH. - Support for version 2.0 of tpm2-tss libraries. [#]## Changed - 'max-transient-objects' command line option renamted to 'max-transients'. - Added -Wextra for more strict checks at compile time. - Install location of headers to $(includedir)/tss2. [#]## Fixed - Added missing checks for NULL parameters identified by the check-build. - Bug in session continuation logic. - Off by one error in HandleMap. - Memory leak and uninitialized variable issues in unit tests. [#]## Removed - Command line option --fail-on-loaded-trans. - udev rules for TPM device node. This now lives in the tpm2-tss repo. - Remove legacy TCTI initialization functions. - configure option `--with-simulatorbin`. [#]# 1.3.1 - 2018-03-18 [#]## Fixed - Distribute systemd preset template instead of the generated file. [#]# 1.3.0 - 2018-03-02 [#]## Added - New configure option (--test-hwtpm) to run integration tests against a physical TPM2 device on the build platform. - Install systemd service file to allow on-demand systemd unit activation. [#]## Changed - Converted some inappropriate uses of g_error to critical / warning instead. - Removed use of gen_require from SELinux policy, use dbus_stub instead. - udev rules now give tss group read / write access to the TPM device node. - udev rules now give tss user and group read / write access to kernel RM node. [#]## Fixed - Memory leak on an error path in the AccessBroker.- update to upstream version 1.2.0: - Limit maximum number of active sessions per connection with '--max-sessions'. - Flush all transient objects and sessions on daemon start with '--flush-all'. - Allow passing of sessions across connections with ContextSave / Load. - Unref the GUnixFDList returned by GIO / dbus in the TCTI init function. This fixes a memory leak in the TCTI library. - correctly trigger udev to update /dev/tpm* permissions after package installation. (bnc#1078687) - prepared support_dbus_activation.diff patch which adds D-Bus activation, but can't use it yet due to rpmlint- fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the service unit file in the upstream distribution tarball is already configured and looks for binaries and configuration files in the /usr/local prefix which is wrong.- package version symlink correctly, belongs into the lib package itself, not the -devel.- update to upstream version 1.1.1 which fixes some local denial-of-service security issues among other things: - Replace use of sigaction with g_unix_signal_* stuff from glib. - Rewrite of INSTALL.md including info on custom configure script options. - Default value for --with-simulatorbin configure option has been removed. New default behavior is to disable integration tests. - CommandSource will no longer reject commands without parameters. - Unit tests updated to use cmocka v1.0.0 API. - Integration tests now run daemon under valgrind memcheck and fail when errors are found. - CommandSource now tracks max FD in set of client FDs to prevent unnecessary iterations over FD_SETSIZE fds. - no longer call bootstrap and switch to the release upstream tarball which has now been fixed to contain all necessary files- first version of the new arbmd resource manager from Intel's tpm2 stack. This will replace the old resourcemgr previously shipped with the tpm2-0-tss package./bin/sh/bin/sh/bin/sh/bin/shH01-ch2c 1736768995 2.4.0-150400.3.3.12.4.0-150400.3.3.1 tpm2-abrmd.servicerctpm2-abrmdtpm2-abrmdcom.intel.tss2.Tabrmd.servicetpm2-abrmd.conftpm2.0-abrmdCHANGELOG.mdCONTRIBUTING.mdINSTALL.mdREADME.mdtpm2.0-abrmdLICENSEtss2-tcti-tabrmd.7.gztpm2-abrmd.8.gz/usr/lib/systemd/system//usr/sbin//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/tpm2.0-abrmd//usr/share/licenses//usr/share/licenses/tpm2.0-abrmd//usr/share/man/man7//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a92c828c29a5ba40dbbff698d81fcbfd152b595a, strippedexported SGML document, ASCII textdirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRR R R R RRRRR RG-Akutf-8adb01adbb9ff8076dba1c84801ef075a3305993db5fea60c8214eeca994590b3?7zXZ !t/+x]"k%2>6"0{ZՄg[F1ofYCmAUb2'2qM*;*<վ3,E8ņKQm 41=W{E"#I{j†h=Àvb-#Med'|9{aXe~]=B脡=2'ƅXY`>۸]"FK&[JP{C0)}?1sYA*޽H(N{$oaX/.DŬy%Zb3nǯE/Պ: PDU VȻhUя?}.㻿 SP7A8Rk>mZJIJk,'xu _TەjV'Llמ2{mkyўqt(<}TyV/>\-9ІJN<[t<.zԌle8DF8/p31_z>bX\U` /JxeӳF3l5xI( 3>jDr݃W2:`jLp=Fj5\@vEܬ Sn >nhg9rDo?5>n$ZQu9VsI@n(އMlX<%^8`̔;;>zpr Da%eHU~NyK?lԮ`  L&}~U;r!Y?*:[mk Q˛-9(ϪsNSZuBqz>OH7ׅ4 Ұ ߮ `ֻd%:Pvnqn`!4 nɰ++"1T_(nWS,\Ƥk*b#v7Q Y3-~P`͘ '=]KP/yA )aoV%-;Ӳ sm?ěqٗ {0rki&}[9OrOAwqJm1zygX)47f?(ITK"awPm:]So@"sr=8ęD7P&4FؓIi^wN|--~{wra*2u#&Obn2X>O^rEI<\oH-)N_P?[fd!OqІ{j^ FgD›z+0]]\N+hJrmy CjaR] Vhl5pDpg-abԧg0W}cOmAyNTTJw>E^L{$\&p7(v/;j)K)VHe"?Ǭ+t鿉*<۞9ިQ?PIx116Ĕ;X^%_Fh [Q!\m8lIb6~Zst;ޘ^$D-۠ |jKQ`c5nX8ܒ1Wy7ٝc^2F^g"l{z9^ 6Ch3{rS]fԶ/X+ބdoM-eɏ)9u@n%g}? G)IbE0DL#±+;0:l8N"=4j1a[ugxIě.=ОFIoKLw3N9`+Qq|Vd7jlwX1sT!\)t>mQjťU s o[ly#Ƹ= ݑ7I$a "O _h ꫄ho/25_ڽ2HѺ?'Ilk#Z0s]JWcnޙ7âɺu 1}S(7͗H)+~ CxyNU旴)X!qQ ZlH&;(sFɬ{HAXZYg>\ KE$dx'k Gi;9{5+(Qx H۱2_X#;/F,JLPE>{\π* 0g,"%K/T)VPXFޯ/|zN,)e޳fzA|:?󃀂x::CH2)3 ܢ?f$lz 'n8u,Y:JSټIpGGnE ߮ goFOBqqf/B U (8HJ#?7ũvcBTOe{꠾\Ĝ.(v)Tg﮾ @5tࡃ}CV: n`rvKb~w?%*7 Gr`z\7wQZ,Ly9ơa] ӘaL;yD+6Q8$v֭e;--- P;ӽ3U./0cN6X|6|i(inhjfIJkB{N-'%7Rhw~[2V Ά6Rǵ;pxlp``ɏ?#*jN6՛tmLӯYWm(^w*"rEMbt2aAϮ+`)Tr-| e 0^#[PKCkzYQN D5W/W<Ν]W|%C xQ {L:!{2T{|vQyK*TGvu)sR9rɒ/crNdLIF,@`+ظIz#Ϊ'q]=8IL"6s]3(,L1sIz׳4/..>9"wG<*{Sm$e HGIԕ;xXHS.ԽU<x.c!]y7(vA~fv 7l&v:ɸˌK$7Q,>?+rwkI^;t Evuu`j? 3%%f?Ny.c ׾J*GRhv*E礝#.Te"H,@]mꥎ~WeHq|ғ=H\4ҼBj6la#mtMq~l:OQ@Y3xb䑑a,z&ȄTW:f 'joEupk9{1[5zKjU; TRR"ިHħx2cgDvE5J9cIRp2lAR+Lݜh;- 7Ok7BO M5$W0KEAԘaPlġLY6宼6Uwz/bWT7X)/L \13+iN«K4~i>y}L8&Q9V1Q"yI =N!/s{QP)%2\ş Yv?YGfX|`#W'ӏSoY$iɰ4"9{|t+Uj-*KZ)߻8궡TBkG8ޯ4($ + oC䅙# e#;H)QNmHxĚNR -sgyߪ})D /{ZH'ok]AXQx0NEX#VV/r7Du" 7>94?'k|1"q{.^!눎UNB$Y7D;OX79I83∩}jsQ*u-KP! %V. ׾uH ;tyy AAr'J>FM94fTvH(X$ʊ#qP|#MxAgmoo%2C-)J9`9p-9,VoIV/\KEGSz>"rhjY2hO_gU9?n*1IQl9rS~Hᕚ-u%sWa`GK/fw+NE}Jhcš7*}Ngja_0[ {x4bnlyl#fV#WLG YwH؈>5 ~ǦQ]i٠$@Zjc?I/UkW2#bEf{O2v5fdpy>tAŜ1 JSΧ2M)C R_?~ƅXLm../X5Y]2 \*H F_Pgd7ڱ,V-8ƀ 쳸cbt1sz_,P :-WG48nq