libtspi1-32bit-0.3.15-150600.10.3.1 < > , #\ gp9|DK$>YS#
3-m59e(R
"3HkI
fQ7r_^K|]\d3<5Hg \~¹& [wȯZ,7 fm1"||7Ӌ=uTvWIt@T+oz* \\3E R N̴nVY؟CHfb )g\0p (GC݇ȇW#ǁ-J"G`AA\*% 6I:j
_p1: > > 8 ? ( d & \ % F S i
( 0 : D l t : ( b 8 l
9
:
> G $ H , I 4 X 8 Y D \ p ] x ^ b c Z d e f l u v w x y $ C libtspi1-32bit 0.3.15 150600.10.3.1 TSS (TCG Software Stack) access daemon for a TPM chip The trousers package provides a TSS implementation through the help of
a user-space daemon, the tcsd, and a library Trousers aims to be
compliant to the 1.1b and 1.2 TSS specifications as available from the
Trusted Computing website http://www.trustedcomputinggroup.org/.
The package needs the /dev/tpm device file to be present on your
system. It is a character device file major 10 minor 224, 0600 tss:tss. gh03-ch2c hLSUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ Productivity/Security http://trousers.sourceforge.net/ linux x86_64 /sbin/ldconfig hL gg 54f84cde8a12fd2992f0d8ba500c24065c148c891224925cf44ff6758944e352 libtspi.so.1.2.0 root root root root trousers-0.3.15-150600.10.3.1.src.rpm libtspi.so.1 libtspi1-32bit libtspi1-32bit(x86-32) @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.2) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.28) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.33) libc.so.6(GLIBC_2.4) libcrypto.so.3 libcrypto.so.3(OPENSSL_3.0.0) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 g@f4a\>@^˳@][GXh@W,@U@U /@meissner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mailaender@opensuse.org jengelh@inai.de crrodriguez@opensuse.org mpluskal@suse.com - make sure that udev workers have finished before daemon-reload
(bsc#1231071 bsc#1236457) - fix runtime requirements for stat and udevadm (bsc#1221770). On minimal
systems this can cause the %pretrans or %post scriptlets to fail because of
missing tools. - update to new upstream version 0.3.15 (jira#SLE-18269):
- Corrected mutliple security issues that existed if the tcsd is started by
root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331
- Replaced use of _no_optimize with asm memory barrier
- Fixed multiple potential instances of use after free memory handling
- Removed unused global variables which caused build issue on some distros
- drop bsc1164472.patch: now contained in upstream tarball
- adjusted %setup macro invocation which seemed to be wrong - fix a potential tss user to root privilege escalation when running tcsd
(bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
require /etc/tcsd.conf to be owned by root:tss mode 0640. - Fix a local symlink attack problem with the %posttrans scriptlet
(bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack
to gain ownership of arbitrary files in the system during
installation/update of the trousers package. - fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These
files are only sample files that *can* be used to fake that ownership was
already taken by trousers, when other TPM stacks did that already. These
files should not be there by default. Therefore install them into
/usr/share/trousers instead, to allow the user to use them at his own
discretion (fixes bsc#1111381).
- implement a backup and restore logic for /var/lib/tpm/system.data.* to
prevent removal of validly stored trousers state during update. - Update to version 0.3.14 (see ChangeLog) (FATE#321450) - Check for user/group existence before attempting to add them,
and remove error suppression from these calls.
- Avoid runtime dependency on systemd, the macros can all deal with
its absence. - Force GNU inline semantics, fixes build with GCC5 - Cleanup spec-file with spec-cleaner
- Update prerequires
- Use systemd unit file
* replace tcsd.init with tcsd.service /bin/sh 0.3.15-150600.10.3.1 0.3.15-150600.10.3.1 libtspi.so.1 libtspi.so.1.2.0 /lib/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37368/SUSE_SLE-15-SP6_Update/acab3358446069a4d3709cf4ea8d3d73-trousers.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5d44aacb67b3ac636e1f78226d7ac919b9c2d46, stripped P R R R R R R R R R R
R utf-8 99782f333f9a9286a8d37c2e2a1f717de6db4d6cc1c38561862e31ee36cdaf76 ? 7zXZ
! t/ ] "k%{Ɩ.ne iI̞ڱaPqeȣA,w|YR|לm~#$hKkť'`fl5wС'|w F^&N4/@_ ;Urֆԩ bz5/Uā%+呛ҙ7ɒ]^ԹNceq
nBHxߠ!=O#U;
{Ε4.n/忏vd8JA9?h}iim%U "Yaw&4D|n ʛw*w{Kt?RSSMs`BAFF8D
E='n\ENNsDe_Q1C !{z>oA;BDCqY>Kh7s\q%o #̌Ar>o" 2P ̓Ix x^2!(Ծ+[_3zMJoE {>3}3;(m\@FưoQX۲{PΧP-ed
,RyD̨YÖnJQ;+̺ 2HV\Jᨴ# hZD;+Y8(!| P
%PtsZ﹒Ycjx-Nk4e
'fضس/x]WRA`P{t!V yסQΨ# [B1lmn4W9(瓐-QU)\EiW&7r³ >#5Pp F^ɂ)`nCE
UVF#UBQ$`QXH(&& Wi =fĒ꒪&#Lt"{lm;4SyRG]- cihb?y٭U/m9Wz"[u\8*ˉϔMݕOj+U="QVd*t' 9[ }\'|k07&}_g`,,MKnǏ92G n٤p4MU}ӊrd|smKNS/0 uյg0 wDN sɭf_p(ɞS o2%Ahz< v9dTj'ސ4`d}T.8" WM(NU3sc:l1[6GFlϔ>*SZNAAQ=!;!fṰvRDOmY9 0`Ӥ#IG8d\Xm }\pAI =YX%3}İ2٭f,*%m~Y,
ێ]ډ=-ϱlڎ3
_듀OAc ],+r|OD j䬢_L8/{fѣ oC$B: Y`HT+7OH-6aGxFwF TmLC%>a(؎W1kƍ~Js\|9!J ub$>q1}֪㩆IaY]$ CF)`<` J ĕ2#k Y~>ǙEnWYvjbKr^ aoyf5Y0vS%[p3>jPwRy?@$Tݦ|@Z _DjDd_ ,*Y$}yddL5T>]ga[H$"q'&Ur\zA`qw-KqOU{ɲ`d>I3-H* N\)RlHB"
5Xfg- S$1A=V>Pg2
/l A^J1?fΗio=BSbi 57Hz|kp$)['jEϚzA!0P4?,bS^Th^fVI %]A*MޖQְE# :
d9%E5v ;:ޟ Må Z$*D%PupWho+J=v{nD6Xq HI-f襳 ["ya3k@OFLF H9] qL= ｃ qa Z,o P3..<
ߍ }
7ғ=ǻl M`)g͂RS IY#*A-ܷk<1?N?A[y:mB 0bSgH)A?"x
O |t#x:{ 1//Q I@],f
a9Y_M} 5 O,
YZ