libtspi1-0.3.15-150400.3.3.19 < > , / fp9|~8^&LeяMX=SMa;z.|=)JM!~kN jq/ O*ZE\ bT7@q/)G|UNQlC.wx -AWInKڕm * η2|f
=!u9 #iKY & ?I> zr6525)E->*X?vg 2MWsJegVݨQ=) gVэ1>6R MSxэc > @ ? d V % F S i
$ . 8 ` h
( ( 8 0
9 X
: D
> @ F G H I X Y $ \ P ] X ^ v b ~ c ' d e f l u v w t x | y z C libtspi1 0.3.15 150400.3.3.19 TSS (TCG Software Stack) access daemon for a TPM chip The trousers package provides a TSS implementation through the help of
a user-space daemon, the tcsd, and a library Trousers aims to be
compliant to the 1.1b and 1.2 TSS specifications as available from the
Trusted Computing website http://www.trustedcomputinggroup.org/.
The package needs the /dev/tpm device file to be present on your
system. It is a character device file major 10 minor 224, 0600 tss:tss. fibs-power9-18
%SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ Productivity/Security http://trousers.sourceforge.net/ linux ppc64le
% fۿf 9a6c7ffba4d55135b78df44a29752160a41fc8fed8fbb2b4cee6d590629b51af libtspi.so.1.2.0 root root root root trousers-0.3.15-150400.3.3.19.src.rpm libtspi.so.1()(64bit) libtspi1 libtspi1(ppc-64) @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) trousers 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 f @a\>@^˳@][GXh@W,@U@U /@Smatthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mailaender@opensuse.org jengelh@inai.de crrodriguez@opensuse.org mpluskal@suse.com meissner@suse.com - fix runtime requirements for stat and udevadm (bsc#1221770). On minimal
systems this can cause the %pretrans or %post scriptlets to fail because of
missing tools. - update to new upstream version 0.3.15 (jira#SLE-18269):
- Corrected mutliple security issues that existed if the tcsd is started by
root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
- Replaced use of _no_optimize with asm memory barrier
- Fixed multiple potential instances of use after free memory handling
- Removed unused global variables which caused build issue on some distros
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong - fix a potential tss user to root privilege escalation when running tcsd
(bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
require /etc/tcsd.conf to be owned by root:tss mode 0640. - Fix a local symlink attack problem with the %posttrans scriptlet
(bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack
to gain ownership of arbitrary files in the system during
installation/update of the trousers package. - fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These
files are only sample files that *can* be used to fake that ownership was
already taken by trousers, when other TPM stacks did that already. These
files should not be there by default. Therefore install them into
/usr/share/trousers instead, to allow the user to use them at his own
discretion (fixes bsc#1111381).
- implement a backup and restore logic for /var/lib/tpm/system.data.* to
prevent removal of validly stored trousers state during update. - Update to version 0.3.14 (see ChangeLog) (FATE#321450) - Check for user/group existence before attempting to add them,
and remove error suppression from these calls.
- Avoid runtime dependency on systemd, the macros can all deal with
its absence. - Force GNU inline semantics, fixes build with GCC5 - Cleanup spec-file with spec-cleaner
- Update prerequires
- Use systemd unit file
* replace tcsd.init with tcsd.service - updated to trousers 0.3.13 (bnc#881095 LTC#111124)
- Changed exported functions which had a name too common, to avoid
collision
- Assessed daemon security using manual techniques and coverity
- Fixed major security bugs and memory leaks
- Added debug support to run tcsd with a different user/group
- Daemon now properly closes sockets before shutting down
* TROUSERS_0_3_12
- Added new network code for RPC, which supports IPv6
- Users of client applications can configure the hostname of the tcsd
server they want to connect through the TSS_TCSD_HOSTNAME env var
(only works if application didn't set a hostname in the context)
- Added disable_ipv4 and disable_ipv6 config options for server
- removed trousers-wrap_large_key_overflow.patch: upstream
- removed trousers-0.3.11.2.diff: solved upstream now /sbin/ldconfig /sbin/ldconfig ibs-power9-18 1721031619 0.3.15-150400.3.3.19 0.3.15-150400.3.3.19 libtspi.so.1 libtspi.so.1.2.0 /lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:33188/SUSE_SLE-15-SP4_Update/159c6189c2888e1f144b776f98e388d1-trousers.SUSE_SLE-15-SP4_Update drpm xz 5 ppc64le-suse-linux ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=53610da351455ceaf7e6d5793ae7180be64c636b, stripped P R R R R R R &I&Rf`}s utf-8 5a39878abd5d9fe448e7ce7236b5759bdf48f48ff24eafbace9373936cd9d872 ? 7zXZ
! t/7] "k%{U}dQC>~ f&,57G(w,VlI}"$a
'qWj&UHB狘D@>una.=} tTjA =wTɺ$gƿffp1 +8yP(i
U6O9վ
154$\ySQh!DXNTةKׁ%}m <<Ue|<2Fܥ3Cl
]&Kzm6rY
7UTr*-C*/ RW l A 6uO<9f"KPxqZHi|o4$b ]< y(4#v{RcMAD%o9 ز7z$WHѪD #O@++vX㸓*,J"ݹ_ ~ǩxaat%\Zfd0t-z[K*۶[Oqjdwt& i=f6:UC3V*QXr8!9s#=MŦa4몴MwȓVP.+6-z x!)c!YcҶ;*Oh4LD1Xvc.+6]a]B"G$+h7Jb1w8ܹH\ixy^b0-ߊT 폌;wbd|OXP$ X&_ʲىR<wRdZ|fS18F3+Rw!Wcɮ> whT^kskn"KJYE=&LOgp #dg^ 7ej]Wobxrڦ|i!BRAYgylP'y ~{{Ix Yܷnzb\+rr\PT16*-3-#$aq lH ||L2-;
P.*#n[թl$ rՀCO
6ڎPG5[C 1O" Xqzŭ[>j $(˃l$Oz RHr[ 3CjIvVg>=Y HVd K 0R&مaDAJehuߤU#PF:ܝ !:l%ݩK]-lS a
`2q/c#"j
m/zOt;+ж ` > , &?B*Tmf
uS{{|N 75 袮=|TH(`)h8} ( L d c_W6WVr(
Lfy97n
_iL߬x 1N7֜>{5 ~>d/&_^]dr:д?Bj84;iC_9R@h% VE-yrݵx,@K>[5o*Fsx16;0b Z%|IճTyV$w W˭./olz=r<|(2I/*]G"{%],P
vVa?jz [Zuz@a֠ W|z>*hr %Ar % 2SvX7z L<߉o]QUduFFBH#GOiЋ8j tB
rp~ƙ,XaFeHJYl~X`D;mTf ^a/>0?O{)J%P̚)[#9ww'?|V?)s/ď豭 HV/ i*$9Rp];MP/9h]J c$mjg!&0H= ;9Κ 3BfiĿvmSy$klj&knM͋*ǘ@֮F'>d Hkk}b T'KmYZ3MբPHKg2 Oo;=
afiُ0c1(FMsWW/+ Kp/4e%$R; ipL"y;OT{BpDZ,cT*]OX ,Pf~+rT4ho?ĈQME_3 bi訾<3 ?6~[7l>xf0:͐0ͯ Y
k:1:|]LwS#n[8Yl! LOY*5Ndӝ,g$ 4$֩'A
QtPr_A4SlbLgW. 6㻰q`D0Vq T h7q_t ۮa| xNd)+~2dh:& `l9[oDI36V ;@X}J6 uUR]V8S^ ý+pN~ c!f϶qPj9!(7 7= Q ҝ)Yplti[E #Vł,pB sr=˶icZ_4/VF_ ʷwpkR#9ˎc!Kw̧i[qu=Lt E о"dјF)#
DENNY_Sý*x*L{DXH9 =q
V:ʇ= Q[8o& ～qɻ*q+;@
e]ET422>0ބd$)4 r^n ؉HdráݓfP6uSۺ
Ujєwɡd:iJ!`
Owb̦qNoUX<ўD~Y,/ #N b2jk=?3^Rgn}8ougM hNHK?^L.[}@/{N-59;mpHb =;-` - kǼ0r#VRII
r'Ot~LY *o »4
YZ