tpm2.0-abrmd-3.0.0-2.1 RPM for s390x

From OpenSuSE Ports Tumbleweed for s390x

The tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager.
This is a daemon service that coordinates requests to the TPM2 chip via
Intel's TPM 2.0 software stack.

Provides

• tpm2.0-abrmd
• tpm2.0-abrmd(s390-64)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libgio-2.0.so.0()(64bit)
• libglib-2.0.so.0()(64bit)
• libgobject-2.0.so.0()(64bit)
• libtss2-mu.so.0()(64bit)
• libtss2-rc.so.0()(64bit)
• libtss2-sys.so.1()(64bit)
• libtss2-tcti-device0
• libtss2-tcti-tabrmd0
• libtss2-tctildr.so.0()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(RichDependencies) <= 4.12.0-1
• tpm2-0-tss
• user(tss)

License

BSD-2-Clause

Changelog

* Tue May 23 2023 Alberto Planas Dominguez <aplanas@suse.com>
  - Cover ALP via the %{suse_version} macro
* Thu Dec 08 2022 Alberto Planas Dominguez <aplanas@suse.com>
  - Version 3.0.0
    + Fixed
    * A bug in special command processing in TPM2_GetCapability when
      an audit session is in use cuased tpm2-abrmd to abort.
    + Added
    * New SELinux interfaces for communication with keylime
    + Changed
    * DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM,
      ie /dev/tpmrm0, permissions. Now users MUST be in the tss group
      to send to tpm2-abrmd over DBUS.
  - Drop dbus-access.patch (merged in PR#805)
* Fri Jul 08 2022 Alberto Planas Dominguez <aplanas@suse.com>
  - Version 2.4.1
    + Added
      Contributor Covenant Code of Conduct.
    + Fixed
    * superflous warning messages about tcti status.
      WARNING **: 11:00:56.205: tcti_conf before: "(null)"
      WARNING **: 11:00:56.205: tcti_conf after: "mssim"
    * GCC 11 build error: error: argument 2 of __atomic_load’ discards
      'volatile' qualifier
    * Initialize gerror pointer variable to NULL to fix use of
      unitialized memory and segfault.
    * Updated missing defaults in manpage.
    * Port CI to composite actions in tpm2-software/ci.
    + Removed
      Dependency on 'which' utility in configure.ac.
      ubuntu-16.04 from CI.
* Mon Apr 04 2022 Matthias Gerstner <matthias.gerstner@suse.com>
  - dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss
    group (bsc#1197532). This prevents arbitrary users from meddling with TPM
    state and thus potential denial-of-service vectors.
* Wed Dec 08 2021 Alberto Planas Dominguez <aplanas@suse.com>
  - Version 2.4.0
    + remover syslog deprecation warning (bsc#1185154)
    + cover update to 2.3.3 (jsc#SLE-17366)
    + contains reload fix (bsc#1166936)
    + fix tcti loading using short / long names (bsc#1159176)
* Mon Nov 29 2021 Alberto Planas Dominguez <aplanas@suse.com>
  - Warp selinux into a bcond
* Thu Nov 25 2021 Johannes Segitz <jsegitz@suse.com>
  - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
    * harden_tpm2-abrmd.service.patch
* Sat Jul 17 2021 Callum Farmer <gmbr3@opensuse.org>
  - Move selinux devel file to devel subpackage
* Wed Jul 14 2021 Callum Farmer <gmbr3@opensuse.org>
  - Update to version 2.4.0:
    - Service start depends on systemd device unit: dev-tpm0.device.
    - Numerous memory leaks.
    - udev settle service deprecation warnings.
    - StandardOutput=syslog deprecation warnings.
  - Add selinux module files
  - Move dbus files out of /etc
* Wed Jun 09 2021 Alberto Planas Dominguez <aplanas@suse.com>
  - Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077).
    In MicroOS systems the recommendations are not installed, making the
    service fail to initialize: Failed to instantiate TCTI
* Thu Oct 22 2020 Matthias Gerstner <matthias.gerstner@suse.com>
  - update to version 2.3.3:
    - changes in version 2.3.1:
    - Fixed handle resource leak exhausting TPM resources.
    - changes in version 2.3.2:
    - Added cirrus CI specific config files to enable FreeBSD builds.
    - Changed test scripts to be more portable.
    - Changed include header paths specific to FreeBSD.
    - changes in version 2.3.1:
    - Provide meaningful exit codes on initialization failures.
    - Prevent systemd from starting the daemon before udev changes ownership
      of the TPM device node.
    - Prevent systemd from starting the daemon if there is no TPM device node.
    - Prevent systemd from restarting the daemon if it fails.
    - Add SELinux policy to allow daemon to resolve names.
    - Add SELinux policy boolean (disabled by default) to allow daemon to
      connect to all unreserved ports.

Files

/usr/lib/systemd/system/tpm2-abrmd.service
/usr/sbin/rctpm2-abrmd
/usr/sbin/tpm2-abrmd
/usr/share/dbus-1/system-services/com.intel.tss2.Tabrmd.service
/usr/share/dbus-1/system.d/tpm2-abrmd.conf
/usr/share/doc/packages/tpm2.0-abrmd
/usr/share/doc/packages/tpm2.0-abrmd/CHANGELOG.md
/usr/share/doc/packages/tpm2.0-abrmd/CONTRIBUTING.md
/usr/share/doc/packages/tpm2.0-abrmd/INSTALL.md
/usr/share/doc/packages/tpm2.0-abrmd/README.SUSE
/usr/share/doc/packages/tpm2.0-abrmd/README.md
/usr/share/licenses/tpm2.0-abrmd
/usr/share/licenses/tpm2.0-abrmd/LICENSE
/usr/share/man/man7/tss2-tcti-tabrmd.7.gz
/usr/share/man/man8/tpm2-abrmd.8.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Mar 9 12:50:11 2024