trousers-0.3.14-lp151.4.7.1;>+l؉^\I/=„-<+MC[mz#CVkΙsEnUS?t>hȱnyCL+BptNxSvrBFBC@PJ^C[^/Q:9.YI5S]EK1‚NGN: s5FݤgumۃoxuQvxAHR2`7[M BVnx\_Zo"w/R^i~s=(FݗL̇tg>H4?4d   T - F\} ( T   n Q<lR(8 9 : =(>(?(@(F(G(H)8I)X)Y)\)]*H^+X b,)c,d-je-of-rl-tu-v-w/Xx/y0z0(084Y4d4h4n4Ctrousers0.3.14lp151.4.7.1TSS (TCG Software Stack) access daemon for a TPM chipThe trousers package provides a TSS implementation through the help of a user-space daemon, the tcsd, and a library Trousers aims to be compliant to the 1.1b and 1.2 TSS specifications as available from the Trusted Computing website http://www.trustedcomputinggroup.org/. The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss.^\Iobs-arm-9'9openSUSE Leap 15.1openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Securityhttp://trousers.sourceforge.net/linuxaarch64/usr/bin/getent group tss >/dev/null || /usr/sbin/groupadd -g 98 tss || : /usr/bin/getent passwd tss >/dev/null || \ /usr/sbin/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ -d /var/lib/tpm tss || : test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in tcsd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in tcsd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-trousers-update-$service-new-in-upgrade" fi done for service in tcsd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset tcsd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in tcsd.service ; do if [ ! -e "/run/rpm-trousers-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-trousers-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in tcsd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi /usr/bin/udevadm trigger -s tpm || : # bsc#1164472: adjust potential root ownership to allow tcsd to open the file # as unprivileged user. Be careful not to follow a symlink target. system_data=/var/lib/tpm/system.data if [ -e "${system_data}" ]; then chown --no-dereference tss:tss /var/lib/tpm/system.data fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tcsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tcsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tcsd.service ) || : fi else # package uninstall for service in tcsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi.W"#]~^^A큤A큤A^\B^\B^\B^\D^\B^\EX<X<S4S4S4S4X<S4S4S4^\B^\B^\BS4S4^\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-0.3.14-lp151.4.7.1.src.rpmconfig(trousers)trouserstrousers(aarch-64) @@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(trousers)ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.3.14-lp151.4.7.13.0.4-14.6.0-14.0-15.2-14.14.1^˳@][GXh@W,@U@U/@SS)R&Matthias Gerstner matthias.gerstner@suse.commatthias.gerstner@suse.commailaender@opensuse.orgjengelh@inai.decrrodriguez@opensuse.orgmpluskal@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- fix a potential tss user to root privilege escalation when running tcsd (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent badly designed privilege drop and initialization code to run. - add bsc1164472.patch: additionally harden operation of tcsd when running as root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group. require /etc/tcsd.conf to be owned by root:tss mode 0640.- Fix a local symlink attack problem with the %posttrans scriptlet (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack to gain ownership of arbitrary files in the system during installation/update of the trousers package.- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These files are only sample files that *can* be used to fake that ownership was already taken by trousers, when other TPM stacks did that already. These files should not be there by default. Therefore install them into /usr/share/trousers instead, to allow the user to use them at his own discretion (fixes bsc#1111381). - implement a backup and restore logic for /var/lib/tpm/system.data.* to prevent removal of validly stored trousers state during update.- Update to version 0.3.14 (see ChangeLog) (FATE#321450)- Check for user/group existence before attempting to add them, and remove error suppression from these calls. - Avoid runtime dependency on systemd, the macros can all deal with its absence.- Force GNU inline semantics, fixes build with GCC5- Cleanup spec-file with spec-cleaner - Update prerequires - Use systemd unit file * replace tcsd.init with tcsd.service- updated to trousers 0.3.13 (bnc#881095 LTC#111124) - Changed exported functions which had a name too common, to avoid collision - Assessed daemon security using manual techniques and coverity - Fixed major security bugs and memory leaks - Added debug support to run tcsd with a different user/group - Daemon now properly closes sockets before shutting down * TROUSERS_0_3_12 - Added new network code for RPC, which supports IPv6 - Users of client applications can configure the hostname of the tcsd server they want to connect through the TSS_TCSD_HOSTNAME env var (only works if application didn't set a hostname in the context) - Added disable_ipv4 and disable_ipv6 config options for server - removed trousers-wrap_large_key_overflow.patch: upstream - removed trousers-0.3.11.2.diff: solved upstream now- trousers-wrap_large_key_overflow.patch: Do not wrap keys larger than 2048 bit, as the space on the TPM is limited to that amount. (bnc#868933)- Updated to trousers 0.3.11.2 - license changed to BSD-3-Clause - various bug and manpage fixes - trousers-0.3.10.diff renamed and rebased to trousers-0.3.11.2.diff/bin/sh/bin/sh/bin/sh/bin/shobs-arm-9 1590516809 0.3.14-lp151.4.7.10.3.14-lp151.4.7.10.3.14-lp151.4.7.1 tcsd.conftcsd.service91-trousers.rulesrctcsdtcsdtrousersAUTHORSChangeLogLICENSELTC-TSS_LLD_08_r2.pdfLTC-TSS_LLD_08_r2.sxwNICETOHAVESREADMEREADME.selinuxTODOTSS_programming_SNAFUs.txttcsd.conf.5.gztcsd.8.gztrouserssystem.data.authsystem.data.noauthtpm/etc//usr/lib/systemd/system//usr/lib/udev/rules.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/trousers//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/trousers//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:12745/openSUSE_Leap_15.1_Update_ports/fb94ca4801ea98fa0f7c90ff96835d65-trousers.openSUSE_Leap_15.1_Updatedrpmxz5aarch64-suse-linuxASCII textELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=6649e79b895f60f638e582f3f363b0405da9a95d, for GNU/Linux 3.7.0, strippeddirectoryASCII text, with no line terminators (OpenOffice.org 1.x Writer document)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RR R R R R RRXϠZ-49߫1# this scriplet and the counterpart in %posttrans work around a packaging bug # that was present in all trousers packages since around 2008 until 2018. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files # from packaging, during updating they will be deleted. Since users could have # created their own versions of the files already (by taking ownership of a # TPM) we want to keep those files in place. # # to achieve this we use the ownership of /var/lib/tpm as an indicator. # Versions that still wrongly package those files also had the ownership of # the directory wrong. Therefore if the directory is not owned by the tss user # we apply a backup and restore logic. [ ! -d "/var/lib/tpm" ] && exit 0 OWNER=`/usr/bin/stat -c "%U" "/var/lib/tpm"` [ "$OWNER" = "tss" ] && exit 0 for data in system.data.auth system.data.noauth; do file="/var/lib/tpm/${data}" [ ! -e "$file" ] && continue cp -p $file ${file}.rpmsave echo "saving backup of $file" done/bin/shutf-873b8b583ec383080a8c2a10561e277517d41fe96308dcaced98b011441da3a09?7zXZ !t/]f3+]"k%{f60c>ͱ8e-ZJz)|ihJ̼!ҭ;a9|)cd쿇A<(;5QQ*&X5~(QBixzI<m?8x,a'ln/m!Rׯa';{Nf.!6ʤ' s#O@}ZGGߑ+)Z/v-Y/V3JM"u2ѠOKChX΍L蓧Odl)\MA02nhWf k>Z,67cbCq.yA&uN|JHOwFFFufgnj@ @"dQi4VkŐ 'D !';L(yr (G:3aPNs&a5XGaf2[J5&+iFx9 t3 p݆O0&16Obi6tzF-j0b GMz<ƪȆKJQلy3Xaw,aS@JU,aE@1;#6BNC$$vDga~-3cJh^~/fM!Q!zS/-'mq{v%,aՄ/ (/.RP{u2[ɺh jЦBn!v&ܮ2`;)^P5҇(yv!u+l ^ɔ^^!S@8 ltI7< rQHNJ} r-|פy0wr,:={08q"LȘc F]57Qs3;xyDpҴ@q 3"dh_|/E7=x(@|S>>$&p-θ"7g~ ];`(lna#1cfGC/̕ce穝_ t{nCﰈ*ȡ2h?w֙NӥZ# iꍩGz2- `e{l޼F2'?e0qu++X>6(g1A5 g< c57y7e6u3BI\|K֓$｡Oe'p`tC `RǣkO=qĦ/]uSP*rD[Q窍t:i A(0t@[ .mXb)4P_ وΑSE'#:V>8#܇ϩI^N<6Edђ!>j_MMi13XU*o ',yZ: m%)sF~&rr@Lz('I YupZrv|?A5y,PޱK/;W4_O-,߻LP?Ad3gND\OuH Ҽַɼ*djTT&',s!)_=4  Ng~yZŐΏ/1#?sM&Cv:'h]}h11M7McW^ʎ;c|ق;,1F};1a3-m}L1]ۇ⺶ 31_bVggʈ2τ&+x(qWDǎh#VKUH&P90]09 d͔.g&RzS:;yJyhW# a5`K7#~.cz/d\ ouFy [hW0L?*U)eAs"a;p0y (+#(YP>h>grzvdCx/T>%FN#.Ǣ*g7h) GBV3Ud !x.nzgu $RA뫁R\Enu3e,$o..16cنAF< ]=±$? vr8+厔&V}$2!#7˪+'>EU(tĘs} Z;y!b45hmZ C̹N,e- ?aT\1!ic̏y+?C} ^q)d^l?2@/Ƶw,M˛$ τ,yx84>I},Hmj*95Y wrSKkecQvԜl'4..u:gr`4 { >)#/%>ߖ gƩHҬ .sAPt)ol%!  +Y+2@=F| 20yj#b!47oP0j4>H&{{jk ⥅+AÝL>EHGzc6Hp虜gUv} u^ohuT߉'ݫ1 92Lq2,,Cu or-X0*? M|&Ñ-CmKBM5VJp;fPh '?N&Q|m,y[J(/Q'#OSÍdj}Mwo⊁oNpKwCcmQMqVgh5>6. sDhɩ2Ie-xz!ѲDh  pE ΄vcQ ׈>TA5,MbK-"J?5:}^ AhF\6d m(Y37 Ίb8͹S7-BJB)U*j;uتZ_mY*D3/:]&6>qu˦+ݬ⟦ D=*} tG\.rIbc^́y [08'VC뒛m S}ɖi+ #fM c(86WA| ekOЄ̢Cs?``v2 Z7h) L@,O+apf"҄-k!c|n9xDfOХ}W n蚞H jIh&°W]ƀgɻpwT)Rיyw2X0g`QI ,NJvy׌N!TTϷ8B Òg=Wj'kR+ҧwcq8I42 י s hs+FVn-2{3Ȟ_8? XX)+>hyW5n 85@^k@0wu3ϭA}BK)P{iHRܵNu* 2 R6"vXPRfٲ'vKd#r7TIbY AQk+ޘ6{(125z bn Fpx?1e=1~[/Hl+Yڐ}VV"܃#0:d bCEoW%dٱYءBJx"h4 t&%/(6`J课"%V>/<-On|JS9]riv/Y=epB|;\[c4]ͦelRx,/% <$l:p?~~dϏt!;w)SOI0BԭZ)p3ӒC7Isx~c٭Qqb×D "Lz [c˦:f;Ul&q0k@T"LdrRZۃ5]+\~3͊-#Kq$̿ r:s10\VBlzdg^#] mB`YX U񽫥vZ[v,SSeMˢf j_4徻YfWSOCx TCH])T|v׶qV ~KL?>p_bUc($Yb7b M$B^:n@w;5|gv7g'MB+$q 0Xg[..9jjt([e2Dzx6~,tPzMС@Z6Sc;4n/UPYD@Yg+#hiWF-ʏbAPL(RG3,}؇uq9@3ehvmZߎZi\0sH$= s㌬~ @jX޴,ax% vbLqmM.J/c4Y"tKle$9;J[.+;pd رs3ﲄ|/B@w:. 2H mFᆕ\>&8`8C\gM ǤHx5L}[#/ǖ uv @2Xv- a%o h| ^ȃ5~<)'4 ,9yiMspуS5Tw&}D/=7h z0oqӉ+TL+{:4pCnWrR'GaDo^FWJ8OE>4 J$'L ⶞s:ؠR ]~Ce&XX|ɯQD'f c&)ͽSUKX|~8큏5<Cpu8Я5"͌&NOqbJD0MQіcwJ-=\j+]$y.ו)__ h(PCBB4o0t{qj"<73 !C}#$ I4|8m- ZlTfj5+Sr |U{.jx|h˕ek>wB79%/D`zxsQKc6Oa3 [wEHzH|k >RwB.vo~-6@`8uo$m:2-EZĠB")x|ȒoX)Q/$Cr2L Tpc~uUI#O[sěETS0}TVhZ昻l#,)ohj[nmȗ,`T`@jͤCm`c"Ay'D&+>xH֚2BPݣٗI$dqΏ!%r<oJqv؇8\sTrPG!F~}D_`# o" iUUL`fBAOP_mY mֺ7L=MNVq+'zЭWTjuI}"oannw L( DKl@Zj@rT #_]Dr%YI To! 'Ф=ba-5)C~u ZU^xߢ+qky3.sL9Qb0lߞTLX8Oܾxa).)[>}9ݣ"ݼ*EÊ2O ܑN[1d /p?C N@Kx atȊ) ;g»N9 _=3O.'yI_Y) 7駷_K|y_J#8sl_ݗQ8e'K.$^u敓` 26i%. n}xpއSݟ[F b+b{qDi+zR : 518{ƧO2b|.3:S{<26I/>Vm ia,F4)hB|e/ZĀ#~ĬMl5UРVyF4+u!fAu >KNl2.1lʖ޶rR黮p d'W*M`Kd:N?t PG)+l3lR{O,h8r &,%߾ƀ`*Lo]՘Ycm8)Qk=K8_xXFK)" *7$TDW-ѐ;{RYc.+,%NI xqYQ@$3Rw-ޓ?(v:IQ׫St:˽#+lrH)=^d4$Cz^u<ܤ+fNS>F׀냻E[8b]/"3M>܂΄]V85u(3o,rŬ.-8ŔwO:nzDCο<%S"CqĆ nO?T9|#='j&p%űqmﺵwoIڮV'Qet0]S""  ~g^U6alwCݐUw7l_=R]p_[Ր l$lgѭ6t<)+N]Bdg)SvwSL )ӕ =o1:ʏ!<(*' >u9g"Jh4bRi!-S)xG2Ej6' (i3[aAHn˭}/ǡY|`&zfT*" |H -2hg<x69yHMtPcVө iZyC&,\Z}y5y 6f~Kz8>QQ Ϋrp*sh*\_[ ~ĥ& Ķ Tev@꾨l*2\: {l3+i !ZuE>, ?),8i(> <8qr߫7 $cWZ[5aznjE[;@ W0s_TJv.FK'¦ęv#3-fK!Þco784&.UL[שuUi}vUd&]y=rOhMVρEr!/-G*m2ͫ8ydFm6>1: ]6'~L%9Mz5`H|:7-LkB*tYIhێKPM, c.q*Y#5(aê>dTWηw'kh)r!*Kv² l4z&gҨ)QZ~5}<3S#@j|`{R]eϗ:Hc0<1ݼ| #[Bʗ dz }\$9) +M|jyBz)se5\ǁXˇZ7**aٙ=7<ͺkJpbfue t[@vcD;vԙ oF D.w;zzwC*5zZi"\~  L|*2zbp'q<*`aq`"cb MFkGoC^GN`<4sdVoS? .B8nUJh0W+q[xF6vWrcĔE^wD>XDz_BB9ZtIY`Skyk_mp4dy[J\wu(SF"KSl& c-Ń4ȸbSlO'O& W9atLűol%R)h8=%߆3kCJ[:Y^@ Z׻ozɟL^w#؅k*PGX Foi!ܤ~4G}& $= D)1RC5?|chb WɕUxH"ײl(ץgWRi,m+f5 YZ