trousers-0.3.14-lp151.4.7.1<>,_D^]4/=„OVX`bR~ufv,"9ɞdl*Vm9߻75庐\y%43Ao7q;"p3{|/ @G&%X 5" :6)'{U_^&rhjt뇥&1[A||pr}sls`U!͹i[ɪ}B)McG8ɩeʸ&c솅0Kڂ%3GU`朗P*#>H4?4d   T - F\} ( T   n Q<lk(8 9 : =(>(?(@(F(G(H)TI)X)Y)\* ]*d^+t b,Ec,d-e-f-l-u-v-w/px/y0 z0P0`44444Ctrousers0.3.14lp151.4.7.1TSS (TCG Software Stack) access daemon for a TPM chipThe trousers package provides a TSS implementation through the help of a user-space daemon, the tcsd, and a library Trousers aims to be compliant to the 1.1b and 1.2 TSS specifications as available from the Trusted Computing website http://www.trustedcomputinggroup.org/. The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss.^]4obs-arm-5 openSUSE Leap 15.1openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Securityhttp://trousers.sourceforge.net/linuxarmv7hl/usr/bin/getent group tss >/dev/null || /usr/sbin/groupadd -g 98 tss || : /usr/bin/getent passwd tss >/dev/null || \ /usr/sbin/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ -d /var/lib/tpm tss || : test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in tcsd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in tcsd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-trousers-update-$service-new-in-upgrade" fi done for service in tcsd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset tcsd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in tcsd.service ; do if [ ! -e "/run/rpm-trousers-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in tcsd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi /usr/bin/udevadm trigger -s tpm || : # bsc#1164472: adjust potential root ownership to allow tcsd to open the file # as unprivileged user. Be careful not to follow a symlink target. system_data=/var/lib/tpm/system.data if [ -e "${system_data}" ]; then chown --no-dereference tss:tss /var/lib/tpm/system.data fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tcsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tcsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tcsd.service ) || : fi else # package uninstall for service in tcsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi.W"#]~^^A큤A큤A^]"^]"^]"^])^]#^]+X<X<S4S4S4S4X<S4S4S4^]"^]"^]"S4S4^]"eb009b7d1132ac33411e8f838c7e272606c8dd1d8944bc8b82ee28f9114e82fcc56f762ff401646eae0b25769c79234e22cabea3e3b4f4c7bc581a23787b36f44b635e9ae00264cd370fc62921814265679e2a15fa6d6ebbd468e40f00af48f4a7283e0cb853d46d80e96548631c8e2d2669adc990fb6744f8978e02a088d5de044545f25f9cee244dbe733e6209e3dca1ed294a34558faca16a6a0205e72f00147cdd6c7565a7684abab41d23ad7e5867a5e8a2f9f28b3f20c1c5ee1a41ead41ad596d12e7471549663c03e280b5b5d084a2e853fb86e4d766109818f9d7dae4a6bf595610b97b05728f4615d54faf290fac3f8bef836a5d919de070f3cecc4842cff0de213dbcbe03bdcc03c3dcfaa48e03bf45eea9d18e970cef4411f4458686e9d62dea2df5433d4a435602c3e0522b3bb68a2e75c39c80552d6bdddd948e10fd3096b3fca327b01803d91959817028371fe8d9e1970256bc56aeb1bdc1138547b7d669844a1d7d5b9075872b6f5117996c0a21d78e383e79ce7eaedb8c07ef598700d70a9cd14ba28950c7b048cf21ec2ac2297013e5789830b58ffe8baf09355ad0bc2e91d802c18654c2b9219ac1a26cab805879a784eb8a030e02c437cef9d8224b158378505c02b77fcdaa05a2f9ecc1552e95ad6d71b5ea96b690219a3b32565147e2a9d085f67d3c83fd4b93dad037fb966cb0cc5499d8fa6a568d7c26f86aeb0e601cd2358475047161b619bb46872f84569448031f3649619e35e3194d734c81d99d6cb679ed5c24ac97652b068ff12eed215e1ce382a4fb7dcservicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottsstssrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottsstrousers-0.3.14-lp151.4.7.1.src.rpmconfig(trousers)trouserstrousers(armv7hl-32) @@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(trousers)ld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libc.so.6libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libcrypto.so.1.1libcrypto.so.1.1(OPENSSL_1_1_0)libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libpthread.so.0libpthread.so.0(GLIBC_2.4)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.3.14-lp151.4.7.13.0.4-14.6.0-14.0-15.2-14.14.1^˳@][GXh@W,@U@U/@SS)R&Matthias Gerstner matthias.gerstner@suse.commatthias.gerstner@suse.commailaender@opensuse.orgjengelh@inai.decrrodriguez@opensuse.orgmpluskal@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- fix a potential tss user to root privilege escalation when running tcsd (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent badly designed privilege drop and initialization code to run. - add bsc1164472.patch: additionally harden operation of tcsd when running as root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group. require /etc/tcsd.conf to be owned by root:tss mode 0640.- Fix a local symlink attack problem with the %posttrans scriptlet (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack to gain ownership of arbitrary files in the system during installation/update of the trousers package.- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These files are only sample files that *can* be used to fake that ownership was already taken by trousers, when other TPM stacks did that already. These files should not be there by default. Therefore install them into /usr/share/trousers instead, to allow the user to use them at his own discretion (fixes bsc#1111381). - implement a backup and restore logic for /var/lib/tpm/system.data.* to prevent removal of validly stored trousers state during update.- Update to version 0.3.14 (see ChangeLog) (FATE#321450)- Check for user/group existence before attempting to add them, and remove error suppression from these calls. - Avoid runtime dependency on systemd, the macros can all deal with its absence.- Force GNU inline semantics, fixes build with GCC5- Cleanup spec-file with spec-cleaner - Update prerequires - Use systemd unit file * replace tcsd.init with tcsd.service- updated to trousers 0.3.13 (bnc#881095 LTC#111124) - Changed exported functions which had a name too common, to avoid collision - Assessed daemon security using manual techniques and coverity - Fixed major security bugs and memory leaks - Added debug support to run tcsd with a different user/group - Daemon now properly closes sockets before shutting down * TROUSERS_0_3_12 - Added new network code for RPC, which supports IPv6 - Users of client applications can configure the hostname of the tcsd server they want to connect through the TSS_TCSD_HOSTNAME env var (only works if application didn't set a hostname in the context) - Added disable_ipv4 and disable_ipv6 config options for server - removed trousers-wrap_large_key_overflow.patch: upstream - removed trousers-0.3.11.2.diff: solved upstream now- trousers-wrap_large_key_overflow.patch: Do not wrap keys larger than 2048 bit, as the space on the TPM is limited to that amount. (bnc#868933)- Updated to trousers 0.3.11.2 - license changed to BSD-3-Clause - various bug and manpage fixes - trousers-0.3.10.diff renamed and rebased to trousers-0.3.11.2.diff/bin/sh/bin/sh/bin/sh/bin/shobs-arm-5 1590517044 0.3.14-lp151.4.7.10.3.14-lp151.4.7.10.3.14-lp151.4.7.1 tcsd.conftcsd.service91-trousers.rulesrctcsdtcsdtrousersAUTHORSChangeLogLICENSELTC-TSS_LLD_08_r2.pdfLTC-TSS_LLD_08_r2.sxwNICETOHAVESREADMEREADME.selinuxTODOTSS_programming_SNAFUs.txttcsd.conf.5.gztcsd.8.gztrouserssystem.data.authsystem.data.noauthtpm/etc//usr/lib/systemd/system//usr/lib/udev/rules.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/trousers//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/trousers//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12745/openSUSE_Leap_15.1_Update_ports/fb94ca4801ea98fa0f7c90ff96835d65-trousers.openSUSE_Leap_15.1_Updatedrpmxz5armv7hl-suse-linuxASCII textELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib, BuildID[sha1]=cc15d39b101f5ca44056b20ff4d431f8ceace5bf, for GNU/Linux 3.2.0, strippeddirectoryASCII text, with no line terminators (OpenOffice.org 1.x Writer document)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) RRR RR R R RR RRRLCh{X?# this scriplet and the counterpart in %posttrans work around a packaging bug # that was present in all trousers packages since around 2008 until 2018. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files # from packaging, during updating they will be deleted. Since users could have # created their own versions of the files already (by taking ownership of a # TPM) we want to keep those files in place. # # to achieve this we use the ownership of /var/lib/tpm as an indicator. # Versions that still wrongly package those files also had the ownership of # the directory wrong. Therefore if the directory is not owned by the tss user # we apply a backup and restore logic. [ ! -d "/var/lib/tpm" ] && exit 0 OWNER=`/usr/bin/stat -c "%U" "/var/lib/tpm"` [ "$OWNER" = "tss" ] && exit 0 for data in system.data.auth system.data.noauth; do file="/var/lib/tpm/${data}" [ ! -e "$file" ] && continue cp -p $file ${file}.rpmsave echo "saving backup of $file" done/bin/shutf-83dbde326ef357bbfd0f865c61ad25d3e5a20fec4b13e0fc0ef66d80a016b2943?7zXZ !t/N%m]"k%{f60c>ͱ8e-ZJz)yFmxl8r˜=l?BHnwJQ砫&a@ڇ",ӹyO qNѸDC(&q[P|RtqJ~B33ǟzq<&i=Y KԞG` n Y' RN& 9%~Xe(u42|~g5YRnק _^bP־؝ЍY h|D'U&<e_IH ꕩyC5<@/O(̚܄jRBƖ1YfWxu􋲉sLPc tuG ]7m{ka /%dzSk,ԨU512`NNw5v?f\tlA}xmm!5 *Ez4CN#F9 x ⻯Κ&45 ձenS#U1ueXYmC],b/[[R.FA%S]ʪ m󌵊iAKE>tT+x%tOaД˓%]kq[sBOP$asF̫w' Tdvk#k͙I)uch|- 8/_n$X;i|AtiU~/2)D$5Yeh[=jDtml]V8J^-&؃.j̧5sjw駚'_ ׀O\ Foy0 KD,RiUvnmROF`+-Is3IQpcyGϳtĝfiiHAmM ?Le,cSW`U#=@SF\%EϙimNz1H"z즢)Ome;e3xDR~g K W䎌QO mZ왊N­G5w4cO\$,pzy(rU{l"ӨT}؋v }IPQs<#idj/d)nggO= WKһxa^ sJZjT*O0|i+c}gyI do]\LO(*~%h,B|[_p9y6 >KGЩ /wpNQGYJJn'ZtZ=X!~8m]MP ? pE%$+ d[3 H۶IQnCHҐ[wjk~KU&ՓAlLd_l_vpF**"E0,N 'ROk BzfNy[R= JZEka/8?ƚ (\dDTrZ^ /Kifztt8$Cpc~Eܫ <`h9s#կ%Z\1e .QD}jf1'b k&ESGBA0ݔ.(ob_$_.d Mc:T7cC hF-c*xo+w$A3}<ʦ0GJB>ZQG%NOKw0Ԛ-u5ƷQ?- P6ǛĦ! !ƣ0|6%ӋRDiuE74!^?(7ȮLm KM*n)b kq7'+Q|n3yj -?jsݛ]gsEۗ[O\+:Y-A3<]"KS@WWn-ͮ-Nppt4``S~~Kގl>)bk\g0(Qd{ӲA1ז`pJ , X76yIU\{CwdRW_ܩr\ in"$x?)"ik :6ZT'3-$\p$F4 Sgkq>dBvuE.ҽ]!},qf8ӟ1SR0It.N>D(oצiCoLrĝP$'룾Hr˼ MQ0Q\IBTd$E6 ^en¯Xh{bO:a.Vg0k L_33irđut3^8Hj\p(CnO`hOB$Yzk|nv҄AC R52qdz@Grm$L"@eη@zn3-Xe?(5)ƶFBP2e`$9ڎYJ'ui_:7тuHpLw"5l6/0zuFO(jKY!bXVbIϳC`#M\$:CwS'Z.xcƌ+ zзCL_ 9$n~nİ/ mNݸPMj4`6%UI 6НP?1ns, >N54ç͠|̜GC42g}!(I)j(`΍9z7V*mdipa&><-zBҶsd)edvԕRhMcT:T d7\~j5%h1h1w]8Jnҷ> )7MWvtA#.C惃͚f4?ӝ&}Ot[￢< =ho' Z(5R*@u=`ޣ[a Vg/D6{~';eJ*P{FbΜ5OSK -jHzjvO09V|Luj*xW3@Sn b0~ɞEj2I(Sj]6rDbX3 ")0X }`vNqn+lpqi1c2ZhX{(I#a$!d_50USXĪⓉʻW pgٔƐٗQ F5+B^zH1-ܚ'ۈ8Qz񼈞dWTq y>[L%³N\Nf-i*P[ڶ %)M^.\_+pAOyIo{@moo%GMm{%A v=Kqy. G͚KX)F)N4uAezrۥb3iES;F-cn([*ǾBĜ{9(L`f@1̼d/%yFŮ>v{ni o£B z2eGގ}aa`1{iO_ M8dʥbN'<= ]BiI{ϕ/`!;'p0 =b{E֨P.%dpB}8"ίxG:*s#ư_vPZ.| r.첹RƽϓSGg7< Ԣ~ֵݡQ,=Kܑh,OP@!GZIT ^/~a?;̀dƼܯ}xB5ܴݙJsnLڴðwX(RЯ_E#f-{t)|0T),)s̄ĜO_w?'cytE6GQVv` ym;ֲi^[m~G%V[xbڄd[e%jU+S4 x+͉XƋ8I^ GSzz"@7#ԶR@EiA.R֡{J;NK~ )gL\hSmne=%0^im*A$]!(3hji?>:\D#G (y_'l9~#1Yh$!$_Z!_P\ KXqFK6@IOX$鄃lc-,$񉄃>2hҊPŽ`{k}5Bͮ𘢧_};Vg7A_x XU-{o,g, LFu/UMՑ,edyh7P]nPϳ&#-SpFR'O7 W E+z0N)Dbb "/Ã1X:h_)r䞏D34C_RYSܪbD">I<.) .& HoJ[9@LNmVRr(1z Ay09,~%; [Ld IG+v{"$ TߪHfe;w=Qi) 0zƇ{Pȴ.z|gwY}'2pɜ{Z|(5ݟ""j(497fxWf"'7.L^RBjaϫV18-^d:J_Z;u ^qb=dKB{i1BJ}@~:GX{*eX o}nlߓwA䁱2aXA-x._cr ʨrya 9桒8EߪTϫiLZ>4Fkw9Ζ97C /};oa| Fk=Uc$2@&D+U4߼-2 E9 JuWe B!2\ia@} P=t@To)mC;\{fM銔HL6+*[8UTF²X}OS.>וU4Z0'}^@у%|LWj~b'KwN%j91pU29 ~T3+P< ^Q]Y.lLJ>{_  #"Lʜ.&umx!a_8+.(s5ZJ B=:/q{!3vK E{\g>ElHT|Bl0]޲y{0Xcy}2ӛ#+`r= vƥd)ߤ߾I7 b&#8Jx5HNu0'/. <7@)!!7=eB>W%GVֆ#DvS)qyX8^v)T[,@It*Xg$;(l6pdLu f*Tx&ԤJN N?\|q,7< Ê:Z[ԈC)|/ے6 ?ς.檩.;F1&DeT[Bϵd}i POMmȊnRAXX󇴖ilS&CLnl??k5[t R+2 L}a*fMg+킀×ȘA0e\ DKfOeH|&q S20)K<) YZ