trousers-0.3.14-lp151.4.7.1<>,d^[/=„0#+KeBQVoes'|DVGƶ G՞j=o2.gy\]H5`?5Pd   T) BXy   L x  f I4`(&80 9X :F =)A>)I?)Q@)YF)aG)tH)I*$X*<Y*H\*]*^+ b,c-fd-e-f.l.u.v.lw/x08y0 z004555 5LCtrousers0.3.14lp151.4.7.1TSS (TCG Software Stack) access daemon for a TPM chipThe trousers package provides a TSS implementation through the help of a user-space daemon, the tcsd, and a library Trousers aims to be compliant to the 1.1b and 1.2 TSS specifications as available from the Trusted Computing website http://www.trustedcomputinggroup.org/. The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss.^[goat17 openSUSE Leap 15.1openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Securityhttp://trousers.sourceforge.net/linuxx86_64/usr/bin/getent group tss >/dev/null || /usr/sbin/groupadd -g 98 tss || : /usr/bin/getent passwd tss >/dev/null || \ /usr/sbin/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ -d /var/lib/tpm tss || : test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in tcsd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in tcsd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-trousers-update-$service-new-in-upgrade" fi done for service in tcsd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset tcsd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in tcsd.service ; do if [ ! -e "/run/rpm-trousers-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in tcsd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi /usr/bin/udevadm trigger -s tpm || : # bsc#1164472: adjust potential root ownership to allow tcsd to open the file # as unprivileged user. Be careful not to follow a symlink target. system_data=/var/lib/tpm/system.data if [ -e "${system_data}" ]; then chown --no-dereference tss:tss /var/lib/tpm/system.data fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tcsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tcsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tcsd.service ) || : fi else # package uninstall for service in tcsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi.W"#]~^^A큤A큤A^[^[^[^[^[^[X<X<S4S4S4S4X<S4S4S4^[^[^[S4S4^[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-0.3.14-lp151.4.7.1.src.rpmconfig(trousers)trouserstrousers(x86-64) @@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(trousers)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.3.14-lp151.4.7.13.0.4-14.6.0-14.0-15.2-14.14.1^˳@][GXh@W,@U@U/@SS)R&Matthias Gerstner matthias.gerstner@suse.commatthias.gerstner@suse.commailaender@opensuse.orgjengelh@inai.decrrodriguez@opensuse.orgmpluskal@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- fix a potential tss user to root privilege escalation when running tcsd (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent badly designed privilege drop and initialization code to run. - add bsc1164472.patch: additionally harden operation of tcsd when running as root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group. require /etc/tcsd.conf to be owned by root:tss mode 0640.- Fix a local symlink attack problem with the %posttrans scriptlet (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack to gain ownership of arbitrary files in the system during installation/update of the trousers package.- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These files are only sample files that *can* be used to fake that ownership was already taken by trousers, when other TPM stacks did that already. These files should not be there by default. Therefore install them into /usr/share/trousers instead, to allow the user to use them at his own discretion (fixes bsc#1111381). - implement a backup and restore logic for /var/lib/tpm/system.data.* to prevent removal of validly stored trousers state during update.- Update to version 0.3.14 (see ChangeLog) (FATE#321450)- Check for user/group existence before attempting to add them, and remove error suppression from these calls. - Avoid runtime dependency on systemd, the macros can all deal with its absence.- Force GNU inline semantics, fixes build with GCC5- Cleanup spec-file with spec-cleaner - Update prerequires - Use systemd unit file * replace tcsd.init with tcsd.service- updated to trousers 0.3.13 (bnc#881095 LTC#111124) - Changed exported functions which had a name too common, to avoid collision - Assessed daemon security using manual techniques and coverity - Fixed major security bugs and memory leaks - Added debug support to run tcsd with a different user/group - Daemon now properly closes sockets before shutting down * TROUSERS_0_3_12 - Added new network code for RPC, which supports IPv6 - Users of client applications can configure the hostname of the tcsd server they want to connect through the TSS_TCSD_HOSTNAME env var (only works if application didn't set a hostname in the context) - Added disable_ipv4 and disable_ipv6 config options for server - removed trousers-wrap_large_key_overflow.patch: upstream - removed trousers-0.3.11.2.diff: solved upstream now- trousers-wrap_large_key_overflow.patch: Do not wrap keys larger than 2048 bit, as the space on the TPM is limited to that amount. (bnc#868933)- Updated to trousers 0.3.11.2 - license changed to BSD-3-Clause - various bug and manpage fixes - trousers-0.3.10.diff renamed and rebased to trousers-0.3.11.2.diff/bin/sh/bin/sh/bin/sh/bin/shgoat17 1590516663 0.3.14-lp151.4.7.10.3.14-lp151.4.7.10.3.14-lp151.4.7.1 tcsd.conftcsd.service91-trousers.rulesrctcsdtcsdtrousersAUTHORSChangeLogLICENSELTC-TSS_LLD_08_r2.pdfLTC-TSS_LLD_08_r2.sxwNICETOHAVESREADMEREADME.selinuxTODOTSS_programming_SNAFUs.txttcsd.conf.5.gztcsd.8.gztrouserssystem.data.authsystem.data.noauthtpm/etc//usr/lib/systemd/system//usr/lib/udev/rules.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/trousers//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/trousers//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12745/openSUSE_Leap_15.1_Update/fb94ca4801ea98fa0f7c90ff96835d65-trousers.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=e8eb2d68026528da1829dfa880cfe2e13b071b71, for GNU/Linux 3.2.0, strippeddirectoryASCII text, with no line terminators (OpenOffice.org 1.x Writer document)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) RRRRRR R R R R RRR1\4BrHaT# this scriplet and the counterpart in %posttrans work around a packaging bug # that was present in all trousers packages since around 2008 until 2018. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files # from packaging, during updating they will be deleted. Since users could have # created their own versions of the files already (by taking ownership of a # TPM) we want to keep those files in place. # # to achieve this we use the ownership of /var/lib/tpm as an indicator. # Versions that still wrongly package those files also had the ownership of # the directory wrong. Therefore if the directory is not owned by the tss user # we apply a backup and restore logic. [ ! -d "/var/lib/tpm" ] && exit 0 OWNER=`/usr/bin/stat -c "%U" "/var/lib/tpm"` [ "$OWNER" = "tss" ] && exit 0 for data in system.data.auth system.data.noauth; do file="/var/lib/tpm/${data}" [ ! -e "$file" ] && continue cp -p $file ${file}.rpmsave echo "saving backup of $file" done/bin/shutf-8eea14d402a4fc6a63318d93ecbc0bf62215d4445987e3f3af09a3ee169576f58?7zXZ !t/S!*?]"k%r60c>ͱ8e-Zy%#E8FnX){|z$TSK]3.2/Btq#H:ۡ"bDM*Z`FnQVG3d!bEa/iD/S1/XL/62(C"r9S'4jevutI]:D4a!>I,O,}< >yڿ$ͪ|~.qo<J?H\&u&!O'.dO5ݱW[7T9RaG)4dٳ*qNXلffGmh+GF7}1ҥ 5Qz)٫E(8rK V3eSeeH}N Dx[o'_A[McKzAXeO%nH$/u`巎yX^26dƕM˺;}D.v?4ظoUWA;D|U\$x{s+Ш'A$,KtQNy|}r75ou$S:Z 0%Pi;&Zl`'Rϊ5Vy(*ݪHbcq )}H"Yt m݄\\Ľ%Ud9G_G |HiLN ]X+(+_?$1=_O@fWz "~ϼߴZG+ 1sG78᫻]Q8z"KScCysBC3%A{:5SK eWT,.r9\CI >Tغ$>qxW=F"8r'׭Q/-OT Bu&JnR|R|w[Y/^'.J*A-"7]N+aݮԟ޶#{F@GHK[sxDKunT GXq&Oğ$9ћGt EՙR{;Ze/,/lÕ5ec@Wu<M>?Ҳq\iwMEl XB6Wٽc@s@Ip~xI8,ʖq#P `u.[)pF<У:Ӽ'٨ 0'z FʉףVh 1;;J1ΟlsO҅WƊSoKH <^hNvV }gNA!a?e{ uVT/iH"b矖A!Uz]/X' yKN6=םX!2>)*)JREb|7Wpp!< < =@Yd.ṡ6hf,;}.XJ`yC֚ I&'I9M-LR~nv?]4dX[ 8n뛘'"8kpK!|= Mt֢ĸ\T\_۹H@Co8`'NilS'eG812߬/Յv7-ƑOwU.K4о(*QzOܣ' R삲vBmPJ3IBaU"4 Q/J$r.ڐec%NH,YKqz6$Jq`E;WIF5O>])ɗ$&SekO~Ž:BӶY0l6+9|:n:"ֿ:tuմ{MN 0K8H hQdI}[X6bH ښ8?}A ]O٩t2 JY2m;E݀[_/H,p\{@BQ(>ʘyC7pPZ5bekׅǻy?(Y.:;|=LAq>YR(.ZHϢ-߮#+3\'i5K(T{$||.6}&3+m qȆY Dž@r΃v.KSmEkx= bq1V\-^wz ez)LVoaO}~voI_^F0`ӪlZ%Ʉo2jo3^N:Zt{ # p7HzS9志`UP;oʠaRUaI"?IeW==O"Y>j4k+kےJ7ܗe.kfng 1rU <1 f'Q{eߺ_~hWmEc0I5Jm:H7VIa?fYRgEb*QN-%XXhߵ!,)CD$F(/bǽgݥ ެWxOv„Ƚg͏fUŌS&EifWƛd# | L~ 5P2TP89cGK<sEnsNN65Yڇ G9Rtm; hCZns;i^~@|ZjoL-aؽYGd1tR5j^9GYt+&+P-9=YPKviWK6pB;}Iʗdr^I.1_V 8vUxqEME˜6[Qf8owB-̡?p%%:8?*T qZ#g$KP4%GO2#V 5 +IoCX'xW}iFkVvT E]+X(G-G %P$ 99xy2碎d?vrw>7 =ۭ/a2f5?lxUD ļF{ދ:?Jl\A,e@ >_b{`*p[su1Lc*}ckhuJ\*V"QE8a~)g>31)CKDhyM:ضn{v iQs0Շ9nW61}ev[9@gk=A)쫟*Uzb`wUވSY/gsLoC_~gTZ>Q:$:"Xy%-}6Hzt(jp1n |d^NOa>'/$PW#ͷ D#iÉcR~m^9=qjP;lT8ĵQĈymWf epe8AXW8(2P(l@uޒ<³6W$-hP/$~vT g)AoueL-;˼DQ[Chn{ۇ6-k.>xv`.{Ҡ :ba4=u~:_qYv3 @J W0K۷?觊y][}/0|L߮U~0Y˓A_ӽP(cv0<FR+|d*_CGnL{CLz6o:pa 2,8e~a7F[IG=W[S+fss:\"Av<ʲ~m}p-̙wM ^B5JϠ2긝,cl(<ʲ[ @n 2әN%2@ %<7|Y%5ʈw .$bШ?e촰A_8HH,<3^PNj=aMdʦA"oz&9 \@\m*Bbh \y{MZ z綰mF>F*0/ 7׶ fb8LӮx:){K+PP\C&Mw Pwo1 LϖgIuyŢ-˰Kzv[GS_J[:ӰɌ n'v:PIr`:ɴ]EQ݊RXWNHQ]?P=7GHѹfe$!,+cdVՄh 1lT8|+߬TJ7Mtc_}ίY&~LdVvc佚ἀ@y݂x%E7AͳwV2mmQ)y9IY{0ZE;Xd'ۜ|jIq3EqsLK5WTV$8FzWLI.TSُpf.2dyl_bU8kK~EHyAyc"`l%f)ŜOhikWqS3B-X\!j #U*n:>{TOVF8@ E-%'#J֌` ݔ:aC|:o3t]t; s x @)LptzH$);vV -"/,*]&)dH.A.g|v$H**zB>4j>9IzUW)3lXojo5[lW;kB9;НPqwR׾A5Lbp)JI[WUKG .@ZVz<[5á'iO Cńڰ@_<ؔ MvehyC 1bﴫm|rP[|k.=H09b}dQSq[W/2Es/}*Opg~gS.s3卢% &!@T؍=N0s_ޙ|Rz]A@5g/}tL.Tl7tYģ޶d㑡LBDZ7_Ng 8#wDoE@J$(%1Nut:!cabϨ}@ b?c_NFw8Js`hIو8aøiI,+{BĦ*Glt֑vhZ7[ 4ܸ*7ԋj23[wD!x)&|q@No)@9h {ίΜ#`%z= τS={oǶfQLZk{J0Og+(w5;@R3%0O;p[!1X3nރh͆ǪSktQQPO0\U /R\Y7H~0A,MS#Y}i~I:Ռ i:XF6t^V|$$H>nuYW 4)4PuP+\5Ygf"U4PЋ<L75s89fIʍ4{IDb6~|(Q)񳐼{4gyӄR!gHؘ آn 6r%| 6 f?8w~u㪄߿"t4n?SKF4#rAl o MvBv?7!#vqpFldNҲО&(ϳ&Z 4W}{|ZdVBW;'"O =IK]<ڞȨ,R>adMi7OWA49քdYM>: SG-jz_$mDz1ˠT'-@N(0e[0jp{ӛ U F/yp2t063AT_!#F[pP`+m+B?uaN q`ZϮHZ#kU[6 z;k50/du$FIVހanf1``I9F*~őApaDY: ysHʼ>O#hyCcLqNIV.731aᵧ)]>s~p "mP.10EثW#AMq[( oIþZ Dl rZh)]P H/5Z9`y*V༃ i۠ :KM~ TUz!.-|"\sEl!`%B~J |ba2 -پzx͡yV]Ni[ zھiI Ӓgؘ%4s+T˪B>|O?x A.N2@{J,I>I;0K tj%l}4.u 9 81Fkj7g`ҩR@'@~,|knO4 ؛6?mZYÔa4R\[ӞЭ$CfGpxp_Y{Mcm@9d"O(Juߌja{{gc +E.qA> ֋xy7L樨`Ѿj a7#wOq:`I/"&ވ){ a?OXW^3iߛHｹٺL׼kfGjkeϛ+)${f%TaW>OBoEiA2F//g0 TK<萨 8 G.@ BҶ0^}n'V[ݗ)(SE9uuYboӅaA'|~ɨڛbSR_Z!6تYZ}I*; I dEy71b+u)hQJ[I8o@!AHz' N'5/B9#;#[[mi}ƶbUE8C!6 dIXG8EjTMB:sXOvo㤜l&n?Ep3J (ϳ0yia0z0ME?_pT|L YZ