tpm2.0-abrmd-2.3.3-3.3.1 < > , O `:p9|u/ ߥ"F}
Y'X|3 ۩~ -eKdwVkgᷮ_Eudj䯆W 8;0ϴ{Iyd f-k Oq|> ,Ϳ'l|r\?&R;fVF:p?KCPK1dX#TV2@VWk*H ޏ= ,(g 4k?˩Ao7cd$u^Ӧ 365l]m0
/ > I DP ? D@ d i $ , 0 I j w G
P
4
L
$ \ ( 8 9 , : = = > = ? = @ = F = G =
H >
I ><
X >L Y >X \ >|
] >
^ ?v b @< c @ d Al e Aq f At l Av u A
v A w C
x CH
y C| z C C C C C C C D< C tpm2.0-abrmd 2.3.3 3.3.1 Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chips The tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager.
This is a daemon service that coordinates requests to the TPM2 chip via
Intel's TPM 2.0 software stack. `:s390lp5 ZSUSE Linux Enterprise 15 SUSE LLC BSD-2-Clause https://www.suse.com/ Productivity/Security https://github.com/tpm2-software/tpm2-abrmd linux s390x
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable tpm2-abrmd.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop tpm2-abrmd.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in tpm2-abrmd.service ; do
sysv_service="${service%.*}"
rm "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart tpm2-abrmd.service
) || :
fi
fi " H0 ] ' E * '큤A큤 `:`:`:`:`:`:_:Z7^yNYD2^~`:`:61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22 f43179e537fe992db464b6c49e49795d34a53a570c6607c555994771d7e23dd8 0187fb8e61b173e35a5b5e53f6ab693fb1d1201fd8e1da3368f626d60c1364e6 efd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e 4f41fc12cee60687ce1e815b1db7c22949d4df3033bce113c52df8d66c91e131 57e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd7 af5f04487f8af89000eff6bac7f65cd3b2c0647de7c3e7b6e5bbcbffa2b2ad07 18c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448 8c67610c49af41a87de81633cfc6bcd41354a2af433bd1bd250cb79e3dcfe510 3720dc9d95a8b683a252e65ac2251f69d505ec485a3bb30138df336de9f511c3 e6ea9c179119e263986097471e9575dacbc89007a8e64d73ffd40c0ee3bf4e17 service root root root root root root root root root root root root root root root root root root root root root root root root root root tpm2.0-abrmd-2.3.3-3.3.1.src.rpm config(tpm2.0-abrmd) tpm2.0-abrmd tpm2.0-abrmd(s390-64) @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh config(tpm2.0-abrmd) libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libtss2-mu.so.0()(64bit) libtss2-rc.so.0()(64bit) libtss2-sys.so.0()(64bit) libtss2-tctildr.so.0()(64bit) pwdutils rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) tpm2-0-tss 2.3.3-3.3.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 ``^@]}@[Ѱ@[
@[t[[m~@[;e@[:[6 @ZZ ,@YKYYp@matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com - add systemd-syslog.patch: remove deprecated syslog option from systemd unit
file to prevent deprecation warning (bsc#1185154). - drop 0001-build-disable-unloading-of-libtss2-tcti-tabrmd.so.patch: now
contained in upstream tarball
- update to version 2.3.3 (jsc#SLE-17366):
- changes in version 2.3.1:
- Fixed handle resource leak exhausting TPM resources.
- changes in version 2.3.2:
- Added cirrus CI specific config files to enable FreeBSD builds.
- Changed test scripts to be more portable.
- Changed include header paths specific to FreeBSD.
- changes in version 2.3.1:
- Provide meaningful exit codes on initialization failures.
- Prevent systemd from starting the daemon before udev changes ownership
of the TPM device node.
- Prevent systemd from starting the daemon if there is no TPM device node.
- Prevent systemd from restarting the daemon if it fails.
- Add SELinux policy to allow daemon to resolve names.
- Add SELinux policy boolean (disabled by default) to allow daemon to
connect to all unreserved ports.
- changes in version 2.3.0:
- Add '--enable-debug' flag to configure script to simplify debug builds.
This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro.
- Replaced custom dynamic TCTI loading code with libtss2-tctildr from
upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0)
- Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required.
- changes in version 2.2.0:
- New configuration option `--disable-defaultflags/ added. This is
for use for packaging for targets that do not support the default
compilation / linking flags.
- Use private dependencies properly in pkg-config metadata for TCTI.
- Refactor daemon main module to enable better handling of error
conditions and enable more thorough unit testing.
- Updated dependencies to ensure compatibility with pkg-config fixes
in tpm2-tss.
- Fixed bug causing TCTI to block when used by libtss2-sys built with
partial reads enabled.
- Removed unnecessary libs / flags for pthreads in the TCTI pkg-config.
- Output from configure script now accurately describes the state of the
flags that govern the integration tests.
- changes in version 2.1.1:
- Unit tests accessing dbus have been fixed to use mock functions. Unit
tests no longer depend on dbus.
- Race condition between client connections and dbus proxy object
creation by registering bus name after instantiation of the proxy object.
- changes in version 2.1.0:
- `-Wstrict-overflow=5` now used in default CFLAGS.
- Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users.
- Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to
`UINT32_MAX`
- travis-ci now uses 'xenial' builder
- Significant refactoring of TCTI handling code.
- `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros
instead of using the default symlinks
- Launch `dbus-run-session` in the automake test environment to
automagically set up a dbus session bus instance when one isn't present.
- Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib
does not support reloading a second time.
- Bug causing `-fstack-protector-all` to be used on systems with core
libraries (i.e. libc) that do not support it. This caused failures at
link-time.
- Unnecessary symbols from libtest utility library no longer included in
TCTI library.
- changes in version 2.0.3:
- Update build to account for upstream change to glib '.pc' files
described in: https://gitlab.gnome.org/GNOME/glib/issues/1521 - 0001-build-disable-unloading-of-libtss2-tcti-tabrmd.so.patch:
fix bsc#1166936 a segmentation fault when the libtcti-tabrmd library is
unloaded and loaded again. This caused a crash in the context of the
tpm2-tss-engine. - fix_dlopen.patch: remove this patch to fix tcti loading using shorthand
names like `--tcti=mssim`. Upstream already has an appropriate patch
included in the packaged version that works for both shorthand and full
version specificaton (bsc#1159176). - add a Requires towards tpm2-0-tss, because that main package holds the udev
rules and logic for setting up the tss user. Without this the daemon can't
start up correctly. - fix broken build due to newer glib dependency that reports a full path for
gdbus-codegen, breaking the configure check. - update to version 2.0.2 (FATE#326270):
- --enable-integration option to configure script now works as documented.
- Format specifier with wrong size in util module.
- Initialize TCTI context to 0 before setting values. This will cause all
members that aren't explicitly initialized by be 0. - add recommends to the tcti-device and tcti-abrmd. Otherwise they're not
installed right away, rendering the abrmd quite unusable. - Update to version 2.0.1:
* SessionList: Fix Connection object reference leak.
* source/sink: Organize ControlMessage processing.
* CommandSource: Replace 'connection-removed' signal with ControlMessage.
* SessionList: Remove all locking.
* ConnectionManager: Remove 'connection-removed' signal.
* ci: Build 'check' target when CC is gcc.
* build: Fix bad URLs in configure script.
* CHANGELOG.md: Add version number and date for 2.0.1 release.
* Replace references to drand48_r family of functions for portability
* Fix for type-punned pointer reported in newer compilers that enforce strict aliasing - Trying to fix build on older distros that fail because of a missing or
broken autoconf valgrind detection macro. Removing autoreconf to hopefully
fix this. - add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device
library from tpm2-0-tss. See
https://github.com/tpm2-software/tpm2-abrmd/issues/486. - update to major version 2.0.0:
- support_dbus_activation.diff: removed, is not contained upstream
- the tpm2 stack introduces an incompatible ABI to the previous version with
this update. There is no compatibility layer, libraries have new names
etc.
- upstream changelog:
[#]# 2.0.0 - 2018-06-22
[#]## Added
- Integration test script and build support to execute integration tests
against a physical TPM2 device on the build platform.
- Implementation of dynamic TCTI initialization mechanism.
- configure option `--enable-integration` to enable integration tests.
The simulator executable must be on PATH.
- Support for version 2.0 of tpm2-tss libraries.
[#]## Changed
- 'max-transient-objects' command line option renamted to 'max-transients'.
- Added -Wextra for more strict checks at compile time.
- Install location of headers to $(includedir)/tss2.
[#]## Fixed
- Added missing checks for NULL parameters identified by the check-build.
- Bug in session continuation logic.
- Off by one error in HandleMap.
- Memory leak and uninitialized variable issues in unit tests.
[#]## Removed
- Command line option --fail-on-loaded-trans.
- udev rules for TPM device node. This now lives in the tpm2-tss repo.
- Remove legacy TCTI initialization functions.
- configure option `--with-simulatorbin`.
[#]# 1.3.1 - 2018-03-18
[#]## Fixed
- Distribute systemd preset template instead of the generated file.
[#]# 1.3.0 - 2018-03-02
[#]## Added
- New configure option (--test-hwtpm) to run integration tests against a
physical TPM2 device on the build platform.
- Install systemd service file to allow on-demand systemd unit activation.
[#]## Changed
- Converted some inappropriate uses of g_error to critical / warning instead.
- Removed use of gen_require from SELinux policy, use dbus_stub instead.
- udev rules now give tss group read / write access to the TPM device node.
- udev rules now give tss user and group read / write access to kernel RM
node.
[#]## Fixed
- Memory leak on an error path in the AccessBroker. - update to upstream version 1.2.0:
- Limit maximum number of active sessions per connection with '--max-sessions'.
- Flush all transient objects and sessions on daemon start with '--flush-all'.
- Allow passing of sessions across connections with ContextSave / Load.
- Unref the GUnixFDList returned by GIO / dbus in the TCTI init function.
This fixes a memory leak in the TCTI library.
- correctly trigger udev to update /dev/tpm* permissions after package
installation. (bnc#1078687)
- prepared support_dbus_activation.diff patch which adds D-Bus activation, but
can't use it yet due to rpmlint - fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the
service unit file in the upstream distribution tarball is already configured
and looks for binaries and configuration files in the /usr/local prefix
which is wrong. - package version symlink correctly, belongs into the lib package itself, not
the -devel. - update to upstream version 1.1.1 which fixes some local denial-of-service
security issues among other things:
- Replace use of sigaction with g_unix_signal_* stuff from glib.
- Rewrite of INSTALL.md including info on custom configure script options.
- Default value for --with-simulatorbin configure option has been removed.
New default behavior is to disable integration tests.
- CommandSource will no longer reject commands without parameters.
- Unit tests updated to use cmocka v1.0.0 API.
- Integration tests now run daemon under valgrind memcheck and fail when
errors are found.
- CommandSource now tracks max FD in set of client FDs to prevent unnecessary
iterations over FD_SETSIZE fds.
- no longer call bootstrap and switch to the release upstream tarball which
has now been fixed to contain all necessary files - first version of the new arbmd resource manager from Intel's tpm2 stack.
This will replace the old resourcemgr previously shipped with the
tpm2-0-tss package. /bin/sh /bin/sh /bin/sh /bin/sh s390lp5 1620654787
2.3.3-3.3.1 2.3.3-3.3.1 2.3.3-3.3.1 tpm2-abrmd.conf tpm2-abrmd.service rctpm2-abrmd tpm2-abrmd com.intel.tss2.Tabrmd.service tpm2.0-abrmd CHANGELOG.md CONTRIBUTING.md INSTALL.md LICENSE README.md tss2-tcti-tabrmd.7.gz tpm2-abrmd.8.gz /etc/dbus-1/system.d/ /usr/lib/systemd/system/ /usr/sbin/ /usr/share/dbus-1/system-services/ /usr/share/doc/packages/ /usr/share/doc/packages/tpm2.0-abrmd/ /usr/share/man/man7/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:19528/SUSE_SLE-15-SP3_Update/355571dadfbd3307a40ea43cb08035f0-tpm2.0-abrmd.SUSE_SLE-15-SP3_Update drpm xz 5 s390x-suse-linux exported SGML document, ASCII text ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d43a05d22f777106f30f898fdfcd952fd7b0fee1, for GNU/Linux 3.2.0, stripped directory troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R
R R R
R R R R `F*5u libtss2-tcti-device0 libtss2-tcti-tabrmd0 utf-8 cb366620666d029cd15dc94bf6e17f9b3b5d875712f0a80f658317184b4f0b59 ? p 7zXZ
! t/] "k%j|r>6"0{XP-zAfr=#e+$: U
YV]8um?z
eG=5bPN+55rj7Xn
dWʣו݅~p 1HJaB՞[$ GΛ7˂Ca=xM
wau&ސ]u:]{},_hL l"ws'4HX_3}n9lj@«Z9[٦:F%X!9& q'g\UX*ji$1kGhE\Yn2tZ|=3$ ~MJ)roQ xZwm}b˲t:3Ф 1r1fYU+z<+Snhv\ JՕK8V<5Ђߙ^e/
bh*E-Iu]Zyoua^GfGmkNm6+~k}8As/0wPX!'tF 0j 4w{IDnէr
=h-I ȢVJup?`yAs?kDa)
9WjfQIϼzl >ZD " ZP9Ȉ6
7ab7pm @I$5PZ惗nL9Mr~][WMEb[QGXiK>e*A)'3Jj<,)˷2Ԋ^ƣ3}^^
N'[Sa*\a dޚRێm9r[l6<}orQjZYVv{-¦n|X红w]RS
IR wfʷO!%RV _X VF<o(maY3Wxkq{
CSDW 6lU\ft-/؆Y ̗ lB@_s/[%30"ིDi!Oٰ;0o~A4/PB"bO;EwӺWtyX@7`苞!?k=tN) x}"(͎WjaBCRcߐ|`N~J Qaʆ Dh y>m&@cĤҙ%+D'?)GU jݧԜϸm̵H2d@q,0/X?o>|B5!GoyS"9MՅv ,P`bNkcs5uX r||5&C dpI% w~- g?fϲ= UlU|JP cg;\McHB81*p|ד{~)sp60eCؤpCy ON`GA/BUw]dzQ4QU!]VY`X{ v'04ܩ