libtspi1-0.3.15-150400.3.3.19 < > , ) fۨp9|I &{5l18rBer7H-. <ך
V ?SiE|o˖ekT. AaB=iاR
l(h~AYP= h0ߩy; <"u\'_>o/Wy _c ?MFVQz*`hĊ^&`ǂ {疤3F.<[;eúY_Ϊ bͲ!̿YG\*
7ya/Dr& > @ d ? T d V ! B O e {
* 4 \ d d ( 8
9
:
> . @ = F L G ` H h I p X t Y \ ] ^ b c d e f l u $ v , w x y
z P C libtspi1 0.3.15 150400.3.3.19 TSS (TCG Software Stack) access daemon for a TPM chip The trousers package provides a TSS implementation through the help of
a user-space daemon, the tcsd, and a library Trousers aims to be
compliant to the 1.1b and 1.2 TSS specifications as available from the
Trusted Computing website http://www.trustedcomputinggroup.org/.
The package needs the /dev/tpm device file to be present on your
system. It is a character device file major 10 minor 224, 0600 tss:tss. fۨh04-ch1b SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ Productivity/Security http://trousers.sourceforge.net/ linux x86_64 fۦfۦ fa0bb63865468e7ff921d60b0e759cb6adfd53a4447abb94d97cc773b37b9617 libtspi.so.1.2.0 root root root root trousers-0.3.15-150400.3.3.19.src.rpm libtspi.so.1()(64bit) libtspi1 libtspi1(x86-64) @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) trousers 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 f @a\>@^˳@][GXh@W,@U@U /@Smatthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mailaender@opensuse.org jengelh@inai.de crrodriguez@opensuse.org mpluskal@suse.com meissner@suse.com - fix runtime requirements for stat and udevadm (bsc#1221770). On minimal
systems this can cause the %pretrans or %post scriptlets to fail because of
missing tools. - update to new upstream version 0.3.15 (jira#SLE-18269):
- Corrected mutliple security issues that existed if the tcsd is started by
root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
- Replaced use of _no_optimize with asm memory barrier
- Fixed multiple potential instances of use after free memory handling
- Removed unused global variables which caused build issue on some distros
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong - fix a potential tss user to root privilege escalation when running tcsd
(bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
require /etc/tcsd.conf to be owned by root:tss mode 0640. - Fix a local symlink attack problem with the %posttrans scriptlet
(bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack
to gain ownership of arbitrary files in the system during
installation/update of the trousers package. - fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These
files are only sample files that *can* be used to fake that ownership was
already taken by trousers, when other TPM stacks did that already. These
files should not be there by default. Therefore install them into
/usr/share/trousers instead, to allow the user to use them at his own
discretion (fixes bsc#1111381).
- implement a backup and restore logic for /var/lib/tpm/system.data.* to
prevent removal of validly stored trousers state during update. - Update to version 0.3.14 (see ChangeLog) (FATE#321450) - Check for user/group existence before attempting to add them,
and remove error suppression from these calls.
- Avoid runtime dependency on systemd, the macros can all deal with
its absence. - Force GNU inline semantics, fixes build with GCC5 - Cleanup spec-file with spec-cleaner
- Update prerequires
- Use systemd unit file
* replace tcsd.init with tcsd.service - updated to trousers 0.3.13 (bnc#881095 LTC#111124)
- Changed exported functions which had a name too common, to avoid
collision
- Assessed daemon security using manual techniques and coverity
- Fixed major security bugs and memory leaks
- Added debug support to run tcsd with a different user/group
- Daemon now properly closes sockets before shutting down
* TROUSERS_0_3_12
- Added new network code for RPC, which supports IPv6
- Users of client applications can configure the hostname of the tcsd
server they want to connect through the TSS_TCSD_HOSTNAME env var
(only works if application didn't set a hostname in the context)
- Added disable_ipv4 and disable_ipv6 config options for server
- removed trousers-wrap_large_key_overflow.patch: upstream
- removed trousers-0.3.11.2.diff: solved upstream now /sbin/ldconfig /sbin/ldconfig h04-ch1b 1721031592 0.3.15-150400.3.3.19 0.3.15-150400.3.3.19 libtspi.so.1 libtspi.so.1.2.0 /lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:33188/SUSE_SLE-15-SP4_Update/159c6189c2888e1f144b776f98e388d1-trousers.SUSE_SLE-15-SP4_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=314445498942cdfbecb7280304e83ddc3b0cc11a, stripped
P R
R R R R R R R R QÀI3˖~0 utf-8 7aa8f6f22710b88247e4eb517286b791c75d8d043d4bd2cd733839beecc93247 ? 7zXZ
! t/ ] "k%{U}dQC>~ f&,NyT< 0BHőT!/qObf痒 %>^6P mɾs_L &2?[HJ퐋qJeU$Klx{y(!gjShLtPx P< YR3*RލC8g}mq`9tǕDZa+cas:cߔT&!Tֱ~%zf
t6(=_$ƈ:hE2 Ǜ>09!1jw-1;qLt[~쟛-G+xn) CM] cCIDW BWHX֒a b4o% :3XY⡉_/dy{ŪFUU:Z/
v_)s} c QG~C[ykkb7(|2J_FYY2d<9vwl|mQB$ vrA?U$\1RO}CKs.[Ni{;%j|&CAhPEoJVbAD: cԒloRo>cwM֏D,Ds"buP6s2P߫\f7vT,{~>x#At M*R}v0'\ H2;-ӥ DFg(ly̘qܐ < jhi(\CQ6D Qn#
Q }
Cٜ.5j7%4RfGTѐ0KPq%ߛ;% %I{v +6LP)n^zhT݈qyxAk^=%L)ӥ:# dbx5t٦) x H(, Mt~=0UkI&q(R 6 `h\*;YT5Iǯ jIW .
ё):[i&tQN@-CKcBWryѿ&MF̠1-@_2s}C#qykTKOfaFCM^ FKv^m0@ AH$L|Ǯn1hq՚sKl!/nLɞ-+l~!Rȑ{{u|"gӋ9ۃVL$<
P#8ιk-.0Ѝa9wM]%Xd-Ϟ-$tNגJ .)`oI{
,Nmms)fo^ ),PGpŬ iҟZU(omMIne%@DiNչY,!bfRʜlȫv^N!ӕ>+[gTÛ*5g&jY>rsr`hfDg>!Tϐ_~ZCWdw? :}y*Y'w#qp:JϜH5PX16mtCÚ0? yDZF]lR
8?PV
P8h7\ֱ~9ʰxU39iBeJ[0q+cSwk>
D0-֥;Y̿ð7 Mjצ.JBpIj˺
-rњr& {RYm
eoFB 2gm/+nMQٛBݶ
QŖx~VҲ١Q!4
ᘱ肸j$O#x40cs>源Tkut-> .#^;NJϊlW y(Zx l/~ڢ1;i] ~ U@K?ylfV۶ s0앚s&%iH'4_p;)MHv5ΏvE>gJ}%3Ѓ<wZg
b 7aR,-zc0.o,j%A|ɌUY 71G<έ웉N 5SXFR*F<& #+ҫ
x En )P$PA@[T0PznNme9<<o(A4 ޝ\K@@5t#vbPi;$4W.Efs!m -YJ.㺹 i+%N֧5vr&լ v[C\BF
~ s,.?a WsG}aP
#9 +&WbG!tm,@9^ޝ*ki5 `/ gi㆛-S*nڥ" 욮N!vShΪXdj :q'Q< ;0cN?O|gX2@ }{Oh mfI!;5Ê=bg
J N jlzRS%0N0J$iOt
j cq]'y
2G룯]~]Oy܅P"x1aڽ y&@7zѾIqKaZW)p rL5KzЂ.6W_,]>q~`v}疜Je0_A? 2%Rcі3deeokU߽U1&IQؑ wj=*\0^cS&ZJv3z6L| YyW|@iCUǣ㧘cP M1m(+pi Oo:
A@v6j ߀5IŸ~ɆN]M9L'O ? A̶
YZ