trousers-0.3.15-150400.3.3.19<>,jf۠p9|bKDm46;E$yfcʔ>- 675.i&Ѣ1$UBy;4zh'`oOBɑɹ@:`R_Ig:F(i& ҖmlaVit:zm+{-֙{1mfυUr@#IC~#Bb8**O6JH{؉oZf蚚oiE 9WDο)+4j?,%#f@Q}Z#«:8M 9{>H4|?4ld   V!BO e{  \    d  pIp\x(8 9 : =(b>(j?(r@(zF(G(H(I)HX)`Y)l\)]*^+ b+c,d-e-f-l-u-,v-w/x/Xy/ z//444 4&4hCtrousers0.3.15150400.3.3.19TSS (TCG Software Stack) access daemon for a TPM chipThe trousers package provides a TSS implementation through the help of a user-space daemon, the tcsd, and a library Trousers aims to be compliant to the 1.1b and 1.2 TSS specifications as available from the Trusted Computing website http://www.trustedcomputinggroup.org/. The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss.f۠s390zl34 SUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Productivity/Securityhttp://trousers.sourceforge.net/linuxs390x/usr/bin/getent group tss >/dev/null || /usr/sbin/groupadd -g 98 tss || : /usr/bin/getent passwd tss >/dev/null || \ /usr/sbin/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ -d /var/lib/tpm tss || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in tcsd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in tcsd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi /usr/bin/udevadm trigger -s tpm || : # bsc#1164472: adjust potential root ownership to allow tcsd to open the file # as unprivileged user. Be careful not to follow a symlink target. system_data=/var/lib/tpm/system.data if [ -e "${system_data}" ]; then chown --no-dereference tss:tss /var/lib/tpm/system.data fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tcsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tcsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in tcsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tcsd.service ) || : fi fi.\W"#]~^^A큤A큤Af۞f۞f۞f۟f۞f۟^S_L^S^S^S^S^S^S^S^Sf۞f۞f۞^S^Sf۞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-0.3.15-150400.3.3.19.src.rpmconfig(trousers)trouserstrousers(s390-64) @@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(trousers)coreutilscoreutilslibc.so.6()(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)udev0.3.15-150400.3.3.193.0.4-14.6.0-14.0-15.2-14.14.3f @a\>@^˳@][GXh@W,@U@U/@Smatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commailaender@opensuse.orgjengelh@inai.decrrodriguez@opensuse.orgmpluskal@suse.commeissner@suse.com- fix runtime requirements for stat and udevadm (bsc#1221770). On minimal systems this can cause the %pretrans or %post scriptlets to fail because of missing tools.- update to new upstream version 0.3.15 (jira#SLE-18269): - Corrected mutliple security issues that existed if the tcsd is started by root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331 - Replaced use of _no_optimize with asm memory barrier - Fixed multiple potential instances of use after free memory handling - Removed unused global variables which caused build issue on some distros - drop bsc1164472.patch: now contained in upstream tarball - adjusted %setup macro invocation which seemed to be wrong- fix a potential tss user to root privilege escalation when running tcsd (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent badly designed privilege drop and initialization code to run. - add bsc1164472.patch: additionally harden operation of tcsd when running as root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group. require /etc/tcsd.conf to be owned by root:tss mode 0640.- Fix a local symlink attack problem with the %posttrans scriptlet (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack to gain ownership of arbitrary files in the system during installation/update of the trousers package.- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These files are only sample files that *can* be used to fake that ownership was already taken by trousers, when other TPM stacks did that already. These files should not be there by default. Therefore install them into /usr/share/trousers instead, to allow the user to use them at his own discretion (fixes bsc#1111381). - implement a backup and restore logic for /var/lib/tpm/system.data.* to prevent removal of validly stored trousers state during update.- Update to version 0.3.14 (see ChangeLog) (FATE#321450)- Check for user/group existence before attempting to add them, and remove error suppression from these calls. - Avoid runtime dependency on systemd, the macros can all deal with its absence.- Force GNU inline semantics, fixes build with GCC5- Cleanup spec-file with spec-cleaner - Update prerequires - Use systemd unit file * replace tcsd.init with tcsd.service- updated to trousers 0.3.13 (bnc#881095 LTC#111124) - Changed exported functions which had a name too common, to avoid collision - Assessed daemon security using manual techniques and coverity - Fixed major security bugs and memory leaks - Added debug support to run tcsd with a different user/group - Daemon now properly closes sockets before shutting down * TROUSERS_0_3_12 - Added new network code for RPC, which supports IPv6 - Users of client applications can configure the hostname of the tcsd server they want to connect through the TSS_TCSD_HOSTNAME env var (only works if application didn't set a hostname in the context) - Added disable_ipv4 and disable_ipv6 config options for server - removed trousers-wrap_large_key_overflow.patch: upstream - removed trousers-0.3.11.2.diff: solved upstream now/bin/sh/bin/sh/bin/sh/bin/shs390zl34 1721031584 0.3.15-150400.3.3.190.3.15-150400.3.3.190.3.15-150400.3.3.19 tcsd.conftcsd.service91-trousers.rulesrctcsdtcsdtrousersAUTHORSChangeLogLICENSELTC-TSS_LLD_08_r2.pdfLTC-TSS_LLD_08_r2.sxwNICETOHAVESREADMEREADME.selinuxTODOTSS_programming_SNAFUs.txttcsd.conf.5.gztcsd.8.gztrouserssystem.data.authsystem.data.noauthtpm/etc//usr/lib/systemd/system//usr/lib/udev/rules.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/trousers//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/trousers//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33188/SUSE_SLE-15-SP4_Update/159c6189c2888e1f144b776f98e388d1-trousers.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=066687e65a5d7559d39eb4ef4355cb786dc9c58f, for GNU/Linux 3.2.0, strippeddirectoryASCII text, with no line terminators (OpenOffice.org 1.x Writer document)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) RR RR R R R RRRRR{lD# this scriplet and the counterpart in %posttrans work around a packaging bug # that was present in all trousers packages since around 2008 until 2018. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files # from packaging, during updating they will be deleted. Since users could have # created their own versions of the files already (by taking ownership of a # TPM) we want to keep those files in place. # # to achieve this we use the ownership of /var/lib/tpm as an indicator. # Versions that still wrongly package those files also had the ownership of # the directory wrong. Therefore if the directory is not owned by the tss user # we apply a backup and restore logic. [ ! -d "/var/lib/tpm" ] && exit 0 OWNER=`/usr/bin/stat -c "%U" "/var/lib/tpm"` [ "$OWNER" = "tss" ] && exit 0 for data in system.data.auth system.data.noauth; do file="/var/lib/tpm/${data}" [ ! -e "$file" ] && continue cp -p $file ${file}.rpmsave echo "saving backup of $file" done/bin/shutf-89fce036e21cf6b75667e03c129d3f94973a0083055357b93fe0f42666251d656?7zXZ !t/k1$]"k%b460c>ͱ8eUlN8eۣ2& S|+dyTTF\,7bA+"|{%.(:C^!3 .=p\qAMaђv~oU")F %rXɊY)P%o com Fd'^B,SNf2U?1qi +=i3n7|%jɭuk;f$”|?^~5 PքX VX\8Hn -? o&n=l9ҡ㏽{Pg\%7u^$]?Gꖖ# .c-Ɯ3x,$\s]:Tti76(|]Bc&5 VmzRģ@*I_ 0[3ppە4o;zbFF$C@0#he]<]DD.:$C1t*6iK8C\( Ks;۟a N=4e1H[s`H[3 J__̍_|1:g\a<ӔqD!L"ޫCe68N`>7@_J j 2|)wB"ij2js)w=p\rx@<g|`Io>4R?+£$$AQ&9IBʺ9rMe!tC@'jX0ﲆ]tY\8S-A>{KԞ\FI1 Ү۰Rܝ]v6s긭e.(aq3 $! 0wmG."y'd+ aGY]zIf/Sv{UeB 67JE}q|F`w|VFX`.>_ٟmiTr.ջJ>mȖ%1z+BFkyZQ 4ۜqT^nn=TV ˮ/ ϐg}^Y=*?ߗȋu`._", '1j A0f¦:4i Y$.I*2P6KƲWNo~) Woe_uSżSFO<{74KD.$(,*z1@3`OiTKэ>evi',i%Q:ĠN/,NGӎL@1e r(}H~۰\l*ZBAt``5}631RTHiΠڌ'qDTRK"TAy)CR!a?(.D{_n,E̅/iaQkMֺTߞ~!=P v&&*b1]>^Et~Ө&M[J-۴IHG2s6؈ X+xF!m-nF4Q&*ț*|L3 o :  7ŜQi!FsPż㉚ŵr eoPZydsh3̈́?%: dnGuQ=G֨N#ӎ<ٶE.qU:C3_J:'݌'jkzsKLL4 MI 3TsF).Xa#==';n&2>&S$<=ď[_q[.Oa)z;mn=dRM!W1QZ-J߃FUCI|Q70Ar 8莙NQtube?GᬊRAq_M@:{mA6EsĠGehRRyLaMI!ٞNut)>#B(asqɎ Ov/.EUY%<j c aP}pj%W(UL=?Үc%NHY\B^@G~> C5Ը@pP|xnҜ,\E!ްG,;,Db]:UW{m-+E:; T|w̥"&Rֹ*H$oϖb)|Y3CSZ d+POl(3Ia/e+ L&6 b@V_'(ro鷺h * y{M ERJ}WQ|~}UM.4Y ~A@!d^)@. k-z‹HPUۑb-8dJ3ڷ3"7dZzNNq}5 UMӣ&bG

T$~4˘:0f >>HT\P/b kʚ VzeVAN2"Xם="ҽI{'mt_/ɔ'PͷKWu:,K޹!wbGDԱF;(;E5yW.XV}m ~FtRيlƱ16ϲjexXIQ9@a8e095("E&a踧K [i T0quC7Wl B,UUdQWh4*Lq#'uJFR]c%8+`X)t͢W ARQ[iuuCۅyu~Æ !/ϣ^*Ōl0 m?kQW3U0M"~HmsAԷԙr^YXxu`+?2TkfiM@,.uf@)%U*L|Z>b,Y5 =.-AHofSA+I7n"t9.5șՎkuZl:AL6X'ojْ'E E-t)Baql _9^_S =9Lp_ZQ۞}̒ prۄI]0P6s 5B Fq_-ÞbJd/%@$MY68/kan%اsX$=T@cL)aK׉H04.RZ_ :%68}ClWJ%?th> KywtzM'(ᐔ軂d$鴈m' s)FaR;>xU)E )lVqw}Nت,B\&4 ܤѠXhU`Ή?X-Ii2wiIdrkm[ DbOvum=VjD4E{{*i ΔK >ڐ~6+P! ޷/P=q _ISjBբ_{YBCh`3הuR;OJFwz d'*I 6gIѱf{`QC"&s|$BÒqFa Xw7S^fX Vݨwܫ+wNm[j35N@8:`H4)=)seZ|1S$*)Z&,WݏQ4G\8#%< 01l;ay~'P mE;J|vM+M:9`L0v"> 7Bh8:8s&Zt>ȕD} P"36=X~Z& {G \C*Y<V.3A9Qәq\}z>UOUH3 羦3iWa֘*gUpU6TK.ߘU寑ibŒ[/A9ݶeM9HNX(yӽ)TgE Z.0_-dE-Lu`7'05-G^>}–dAŐ6x Pe\C@R9?OV3Z@Su$eKэC^>dp]X1-; Sz ˼ $zʴ_O c"j8nO46Rv4rvJ Ʃp`1#P@0;AiN|$nkRqk ܫq4FUE;,'~ς 2PYoui?ϝfmb,IAyO>" mL$hsǹZA|kbIߘy̯ nN%G w-.>z!m*{ nBF-"X򱥹5vSVD!5b{VtSVSvz 9[ڱ XK#ƮHI-fѳH]JƫQU YDd$< -i1 ul)k/\37KvTo8ޛ;& :/duLIZ̵JiN8TL WGro^̈́<\3J̑mr狝|[6桟AIco8DpVBO?R}TX!=j0]1KLM/=ST{be x|nѵÝZ)SEI,c{+[<{2Ϩ9HaMEi/p~klkf\{UcMʳ"av]@)>T][PC7RYlqlԆŌ$2gڱdJ5rpALao1V^S:PKYx_ kH{ݯAy]Yzu(DBPn`3#>;԰^1bwK}H3^&ߒ3:D/qH s>^vS'!C 9PxǪ()&#ytqrT~䚼ɺPS5שZG o-wN=fc+43 y! ^JuJ;qI<55Jk!Q!bFjG)?%]E4ZdNS z/ң`4_0B R)[6JUTjpށ>B8 gA.+ڸY71OsǧKosxuj$c;::u24 ULdvaոcEf\`RR)x:rOX,YgwIQgC_k<8j~/;?t #qR7#ø'2ʈӮ`Ui#dLd";є9|K+x,fB0|i:kNȥеpDCYIoifX/~1>rǍjD Q 1={eK_jf#b22'Sc!pygg+KZwN)ߵQTg?y=MG "N ?b4#Ԙ+]#f(Vp}z;$;I)+QCix*%R{GWel-m1@Hݻ) Of^^傮Fٗ\lWEkAfZ( VurfK 7.Y̏ %E|"!3b8Zb581E0f^ c7Fi hʈP{r4Y\sճQ3QA BkK+UW\]tyIV;cs^qod\.lG*l<Pw}fY^ShGXIŖYuY4BYGݹM1TӇO㌩F,x竓6r &jʣ7/Uaa-~ 5O }ccX93'VuzU4<2o,w<Κ #z#P)mSjC6~*zfKRNI`{X7jv:?8UdX8㽎]M"XؙsR%{`Ǜ #|(XյI?!ԲpM^icC"O6 u-d[{~͹"`5*;A+u.q'uZ\%u4HKSTcuճu5J0VVŁ􌗍:+9北p6A U'xr{Ǖ5B mi(Ack">h2|k7@ rMlqoG<#j Z z_t^FT #;IuiS$u *5`F6Brԃ*kzI*1D:J1kYzGK!i hP8 Hҫ,1QR/ {9kfo0(s`Hj Ȟ™ӮM/NzV[;9`im`A@x6R4eqku&>9?S YY m LfSu6[6YU4Oj5K05Ah~0OHW+T (ޓžφd+ .J"oGKV ŖφM?Uٴy r}_o0@o[ ,sY#| {2WTyd4ԟ^r q;4yDʶ lLqkP_̼ "T,*3r s9]rxcj:d͂(ޣ1Q$6U"WNQbw6o3ns֕fWկOH 9AɎ%8BX >" O L(nQSLE*vL&}AL'Wvypt .Wc/z驗ddwSڿ4Wu[BT9wRm.}X8[3 G96”h1:`ny$jKI(Lj&q`tV=Ӝ.|P}-e_)޽O aLUVA  H8Pgd<>/FܔX0n9Xp +wKMB5ԆPaJQ@q 5XR2>t*fs06=j-CPs7s W~qG+ŃOͳDH4Gz`[BH̦M8%3D:=K H:(Mɲ6={Bho:§8tɏ0C}<뜖"O,lg2vj,~?*dBp~/mg+ Y y WsiY+'aWeM3_D;C& 4N.UaZ+ ρ.ыy2R(͉^$M|Q6HԞiK <,Uo\c v29U^Xag`!G9t/P!xXdb!s'?vbAnmn)B&JEޮ7d6}Jvh5xRR6rbi*x֩VGxtle'91$ t92_> A #a[U(}Kuy&!xW=$tКUe=n d'|+4>".mXQ4p"+=P|pƘs檤{ŧ^G .Fx|..f's4~_],C~)L\RsǼk=Dv17ث ;w\R FAx/a ^6cえ>#?+Ɯ'M,uCSH Q=m+-*ks;Ɓ!X?{:j[f*. ljmjzZ3LPYަ oX3- }EI1dIQ7qE2 )/g0͇eYݿٟ`!Q֝ʸyQNDIdGR7(0%7}Qyiqc 沘S49HZ] p:wf54*` ,kJݜ*6i > >cyȶ/_T4~-ȏw$VJD:(| G|Ȇ'PR )gibZS YZ