commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2020-11-05 21:55:41 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.11331 (New) Package is "trousers" Thu Nov 5 21:55:41 2020 rev:48 rq:846199 version:0.3.15 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2020-07-27 17:48:58.615494447 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new.11331/trousers.changes 2020-11-05 21:56:27.451976755 +0100 @@ -1,0 +2,13 @@ +Thu Nov 5 10:34:19 UTC 2020 - Matthias Gerstner + +- update to new upstream version 0.3.15: + - Corrected mutliple security issues that existed if the tcsd is started by +root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331 + - Replaced use of _no_optimize with asm memory barrier + - Fixed multiple potential instances of use after free memory handling + - Removed unused global variables which caused build issue on some distros +- drop gcc-10.patch: now contained in upstream tarball +- drop bsc1164472.patch: now contained in upstream tarball +- adjusted %setup macro invocation which seemed to be wrong + +--- Old: bsc1164472.patch gcc-10.patch trousers-0.3.14.tar.gz New: trousers-0.3.15.tar.gz Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.wngiA8/_old 2020-11-05 21:56:28.191975092 +0100 +++ /var/tmp/diff_new_pack.wngiA8/_new 2020-11-05 21:56:28.191975092 +0100 @@ -18,7 +18,7 @@ %define tpmstatedir %{_localstatedir}/lib/tpm Name: trousers -Version:0.3.14 +Version:0.3.15 Release:0 Summary:TSS (TCG Software Stack) access daemon for a TPM chip License:BSD-3-Clause @@ -29,8 +29,6 @@ Source2:baselibs.conf Source3:91-trousers.rules Patch0: fix-lto.patch -Patch1: bsc1164472.patch -Patch2: gcc-10.patch BuildRequires: gtk2-devel BuildRequires: libtool BuildRequires: openssl-devel @@ -81,10 +79,8 @@ system. It is a character device file major 10 minor 224, 0600 tss:tss. %prep -%setup -q -c %{name}-%{version} +%setup -q -n %{name}-%{version} %patch0 -p1 -%patch1 -p1 -%patch2 -p1 %build CC=gcc ++ trousers-0.3.14.tar.gz -> trousers-0.3.15.tar.gz ++ 281689 lines of diff (skipped)
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2020-07-27 17:47:37 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.3592 (New) Package is "trousers" Mon Jul 27 17:47:37 2020 rev:47 rq:822938 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2020-06-02 14:43:51.396510968 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new.3592/trousers.changes 2020-07-27 17:48:58.615494447 +0200 @@ -1,0 +2,6 @@ +Mon Jul 27 08:13:14 UTC 2020 - matthias.gerst...@suse.com + +- In a previous commit the Requires line for the tss user got accidentally + dropped. This change reintroduces it. + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.QiyNkz/_old 2020-07-27 17:49:04.027500410 +0200 +++ /var/tmp/diff_new_pack.QiyNkz/_new 2020-07-27 17:49:04.031500415 +0200 @@ -37,6 +37,7 @@ BuildRequires: pkg-config BuildRequires: systemd-rpm-macros BuildRequires: udev +Requires(pre): user(tss) BuildRoot: %{_tmppath}/%{name}-%{version}-build %description
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2020-06-02 14:42:58 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.3606 (New) Package is "trousers" Tue Jun 2 14:42:58 2020 rev:46 rq:810797 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2020-05-23 17:28:03.583488378 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new.3606/trousers.changes 2020-06-02 14:43:51.396510968 +0200 @@ -1,0 +2,8 @@ +Tue Jun 2 10:23:53 UTC 2020 - Matthias Gerstner + +- add gcc-10.patch: fixes the build on gcc 10 by removing unused global + variables. This patch was posted on the TrouSerS mailing list [1]. + + [1]: https://sourceforge.net/p/trousers/mailman/message/36951419/ + +--- New: gcc-10.patch Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.ZBIVUr/_old 2020-06-02 14:43:52.300513825 +0200 +++ /var/tmp/diff_new_pack.ZBIVUr/_new 2020-06-02 14:43:52.304513837 +0200 @@ -30,6 +30,7 @@ Source3:91-trousers.rules Patch0: fix-lto.patch Patch1: bsc1164472.patch +Patch2: gcc-10.patch BuildRequires: gtk2-devel BuildRequires: libtool BuildRequires: openssl-devel @@ -82,6 +83,7 @@ %setup -q -c %{name}-%{version} %patch0 -p1 %patch1 -p1 +%patch2 -p1 %build CC=gcc ++ gcc-10.patch ++ diff --git a/src/include/tcsd.h b/src/include/tcsd.h index 5b9462b85ed6..f5c286e01c86 100644 --- a/src/include/tcsd.h +++ b/src/include/tcsd.h @@ -164,10 +164,4 @@ TSS_RESULT tcsd_thread_create(int, char *); void *tcsd_thread_run(void *); void thread_signal_init(); -/* signal handling */ -#ifndef __APPLE__ -struct sigaction tcsd_sa_int; -struct sigaction tcsd_sa_chld; -#endif - #endif --
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2020-05-23 17:26:43 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.2738 (New) Package is "trousers" Sat May 23 17:26:43 2020 rev:45 rq:807580 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2020-02-20 14:55:41.730325165 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new.2738/trousers.changes 2020-05-23 17:28:03.583488378 +0200 @@ -1,0 +2,27 @@ +Wed May 20 10:05:51 UTC 2020 - Matthias Gerstner + +- get rid of %pre/%post logic that fixes the old packaging bug. Turns out + %pretrans and %posttrans had their purpose before, because the logic needed + to run before old files owned by the package got deleted. But I'm not + reimplementing this strange logic in Lua ... users that didn't get the fix + yet will have to live with it. + +--- +Wed May 20 08:59:54 UTC 2020 - Matthias Gerstner + +- fix a potential tss user to root privilege escalation when running tcsd + (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent + badly designed privilege drop and initialization code to run. +- add bsc1164472.patch: additionally harden operation of tcsd when running as + root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group. + require /etc/tcsd.conf to be owned by root:tss mode 0640. + +--- +Wed May 13 12:14:32 UTC 2020 - matthias.gerst...@suse.com + +- add correct Requires(pre) and change %pretrans and %posttrans into %pre and + %post. %pretrans can't have any dependencies and therefore can only be + %implemented in lua. This currently leads to build errors "/bin/sh: no such + file or directory". + +--- New: 91-trousers.rules bsc1164472.patch Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.dhONRb/_old 2020-05-23 17:28:04.331489997 +0200 +++ /var/tmp/diff_new_pack.dhONRb/_new 2020-05-23 17:28:04.335490005 +0200 @@ -27,15 +27,15 @@ Source0:http://downloads.sf.net/trousers/%{name}-%{version}.tar.gz Source1:tcsd.service Source2:baselibs.conf +Source3:91-trousers.rules Patch0: fix-lto.patch +Patch1: bsc1164472.patch BuildRequires: gtk2-devel BuildRequires: libtool BuildRequires: openssl-devel BuildRequires: pkg-config BuildRequires: systemd-rpm-macros -# for 'stat' for the hack in %pretrans -BuildRequires: coreutils -Requires(pre): user(tss) +BuildRequires: udev BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -81,6 +81,7 @@ %prep %setup -q -c %{name}-%{version} %patch0 -p1 +%patch1 -p1 %build CC=gcc @@ -107,48 +108,28 @@ rm -v %{buildroot}/%{_lib}/libtspi.{so,la} mv -v %{buildroot}/%{_lib}/*.a %{buildroot}%{_libdir} +# we want to run tcsd as tss user right away. therefore we need to install a +# suitable udev rule file. this conflicts somewhat with tpm2-0-tss, but both +# rules files are compatible at the moment. trousers has a lower priority than +# tpm2-0-tss in case both should be installed. The tss user is shared between +# both packages anyways already. +mkdir -p %{buildroot}%{_udevrulesdir} +install -m 0644 %{SOURCE3} %{buildroot}%{_udevrulesdir} + %pre %service_add_pre tcsd.service -%pretrans -# this scriplet and the counterpart in %posttrans work around a packaging bug -# that was present in all trousers packages since around 2008 until 2018. -# /var/lib/tpm/system.data.* was wrongly packaged as runtime state data -# instead of package resource data in /usr/share. After removal of these files -# from packaging, during updating they will be deleted. Since users could have -# created their own versions of the files already (by taking ownership of a -# TPM) we want to keep those files in place. -# -# to achieve this we use the ownership of /var/lib/tpm as an indicator. -# Versions that still wrongly package those files also had the ownership of -# the directory wrong. Therefore if the directory is not owned by the tss user -# we apply a backup and restore logic. -[ ! -d "%{tpmstatedir}" ] && exit 0 -OWNER=`/usr/bin/stat -c "%U" "%{tpmstatedir}"` -[ "$OWNER" = "tss" ] && exit 0 -for data in system.data.auth system.data.noauth; do - file="%{tpmstatedir}/${data}" - [ ! -e "$file" ] && continue - cp -p $file ${file}.rpmsave - echo "saving backup of $file" -done - %post %service_add_post tcsd.service +%_bindir/udevadm trigger -s tpm || : -%posttrans -# see pretra
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2020-02-20 14:55:29 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.26092 (New) Package is "trousers" Thu Feb 20 14:55:29 2020 rev:44 rq:777248 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2020-02-10 21:53:08.766181793 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new.26092/trousers.changes 2020-02-20 14:55:41.730325165 +0100 @@ -1,0 +2,6 @@ +Wed Feb 19 12:48:19 UTC 2020 - Matthias Gerstner + +- leave creation of /var/lib/tpm to the new system-user-tss package. Otherwise + we're getting conflicts in packages depending on trousers (bsc#1162360). + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.hu7bWV/_old 2020-02-20 14:55:42.562326797 +0100 +++ /var/tmp/diff_new_pack.hu7bWV/_new 2020-02-20 14:55:42.562326797 +0100 @@ -94,9 +94,7 @@ %install %define trousers_data %{buildroot}%{_datadir}/%{name} -%define trousers_state %{buildroot}%{tpmstatedir} make DESTDIR=%{buildroot} install %{?_smp_mflags} -mkdir -p %{trousers_state} install -D -m 0644 %{SOURCE1} %{buildroot}/%{_unitdir}/tcsd.service ln -sv %{_sbindir}/service %{buildroot}%{_sbindir}/rctcsd # these files can be used to fake trousers ownership of a TPM if the ownership @@ -168,7 +166,6 @@ %doc README README.selinux AUTHORS ChangeLog LICENSE NICETOHAVES TODO doc/* %{_mandir}/man5/* %{_mandir}/man8/* -%attr(750,tss,tss) %{tpmstatedir} %{_datadir}/%{name} %{_sbindir}/tcsd %{_sbindir}/rctcsd
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2020-02-10 21:52:57 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.26092 (New) Package is "trousers" Mon Feb 10 21:52:57 2020 rev:43 rq:769067 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2019-11-26 17:06:13.707968439 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new.26092/trousers.changes 2020-02-10 21:53:08.766181793 +0100 @@ -1,0 +2,5 @@ +Fri Jan 31 11:51:03 UTC 2020 - Michal Suchanek + +- Use system-users for tss user creation (boo#1162360). + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.mgydqv/_old 2020-02-10 21:53:09.330182105 +0100 +++ /var/tmp/diff_new_pack.mgydqv/_new 2020-02-10 21:53:09.334182108 +0100 @@ -1,7 +1,7 @@ # # spec file for package trousers # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,7 +23,7 @@ Summary:TSS (TCG Software Stack) access daemon for a TPM chip License:BSD-3-Clause Group: Productivity/Security -Url:http://trousers.sourceforge.net/ +URL:http://trousers.sourceforge.net/ Source0:http://downloads.sf.net/trousers/%{name}-%{version}.tar.gz Source1:tcsd.service Source2:baselibs.conf @@ -35,7 +35,7 @@ BuildRequires: systemd-rpm-macros # for 'stat' for the hack in %pretrans BuildRequires: coreutils -Requires(pre): shadow +Requires(pre): user(tss) BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -110,10 +110,6 @@ mv -v %{buildroot}/%{_lib}/*.a %{buildroot}%{_libdir} %pre -%_bindir/getent group tss >/dev/null || %{_sbindir}/groupadd -g 98 tss || : -%_bindir/getent passwd tss >/dev/null || \ - %{_sbindir}/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ - -d %{tpmstatedir} tss || : %service_add_pre tcsd.service %pretrans
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2019-11-26 17:05:11 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.26869 (New) Package is "trousers" Tue Nov 26 17:05:11 2019 rev:42 rq:750985 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2019-09-10 00:04:43.649202475 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new.26869/trousers.changes 2019-11-26 17:06:13.707968439 +0100 @@ -1,0 +2,8 @@ +Tue Nov 26 09:14:39 UTC 2019 - matthias.gerst...@suse.com + +- Fix a local symlink attack problem with the %posttrans scriptlet + (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack + to gain ownership of arbitrary files in the system during + installation/update of the trousers package. + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.7m7sBL/_old 2019-11-26 17:06:14.339968221 +0100 +++ /var/tmp/diff_new_pack.7m7sBL/_new 2019-11-26 17:06:14.343968220 +0100 @@ -118,7 +118,7 @@ %pretrans # this scriplet and the counterpart in %posttrans work around a packaging bug -# that was present in all trousers packages since around 2008. +# that was present in all trousers packages since around 2008 until 2018. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files # from packaging, during updating they will be deleted. Since users could have @@ -152,8 +152,8 @@ [ -e "${file}" ] && continue # restore the original file echo "restoring backup of $file" - mv ${file}.rpmsave ${file} - chown tss:tss "${file}" + mv --no-target-directory ${file}.rpmsave ${file} + chown --no-dereference tss:tss "${file}" done %postun
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2019-09-10 00:04:40 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.7948 (New) Package is "trousers" Tue Sep 10 00:04:40 2019 rev:41 rq:729491 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2019-04-26 22:55:01.773292733 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new.7948/trousers.changes 2019-09-10 00:04:43.649202475 +0200 @@ -1,0 +2,11 @@ +Mon Sep 9 14:12:22 UTC 2019 - mgerstner + +- add fix-lto.patch: This fixes the rpmlint error: + + trousers-devel.x86_64: E: lto-no-text-in-archive (Badness: 1) /usr/lib64/libtddl.a + + objcopy/strip seem not to support the LTO linking and discard the actual + text section from libtddl.a. By passing -ffat-lto-objects the object format + is kept compatible with unaware tools and fixes the error. + +--- New: fix-lto.patch Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.yuWQTB/_old 2019-09-10 00:04:44.229202436 +0200 +++ /var/tmp/diff_new_pack.yuWQTB/_new 2019-09-10 00:04:44.233202436 +0200 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -27,6 +27,7 @@ Source0:http://downloads.sf.net/trousers/%{name}-%{version}.tar.gz Source1:tcsd.service Source2:baselibs.conf +Patch0: fix-lto.patch BuildRequires: gtk2-devel BuildRequires: libtool BuildRequires: openssl-devel @@ -79,10 +80,11 @@ %prep %setup -q -c %{name}-%{version} +%patch0 -p1 %build CC=gcc -CFLAGS="%{optflags} -Wall -fno-strict-aliasing -fgnu89-inline" +CFLAGS="%{optflags} -Wall -fno-strict-aliasing -fgnu89-inline -ffat-lto-objects" SHARE=%{_prefix}/share DOC=%{_defaultdocdir} export CC CFLAGS ++ fix-lto.patch ++ Index: trousers-0.3.14/src/tddl/Makefile.am === --- trousers-0.3.14.orig/src/tddl/Makefile.am +++ trousers-0.3.14/src/tddl/Makefile.am @@ -1,4 +1,4 @@ lib_LIBRARIES=libtddl.a libtddl_a_SOURCES=tddl.c -libtddl_a_CFLAGS=-DAPPID=\"TCSD\ TDDL\" -I${top_srcdir}/src/include -fPIE -DPIE +libtddl_a_CFLAGS=-ffat-lto-objects -DAPPID=\"TCSD\ TDDL\" -I${top_srcdir}/src/include -fPIE -DPIE
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2019-04-26 22:55:00 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.5536 (New) Package is "trousers" Fri Apr 26 22:55:00 2019 rev:40 rq:698144 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2018-10-29 14:29:09.886331322 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new.5536/trousers.changes 2019-04-26 22:55:01.773292733 +0200 @@ -1,0 +2,5 @@ +Fri Apr 26 10:33:38 UTC 2019 - mvet...@suse.com + +- bsc#1130588: Require shadow instead of old pwdutils + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.vvILVo/_old 2019-04-26 22:55:02.301292392 +0200 +++ /var/tmp/diff_new_pack.vvILVo/_new 2019-04-26 22:55:02.305292390 +0200 @@ -1,7 +1,7 @@ # # spec file for package trousers # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -34,7 +34,7 @@ BuildRequires: systemd-rpm-macros # for 'stat' for the hack in %pretrans BuildRequires: coreutils -Requires(pre): pwdutils +Requires(pre): shadow BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -119,7 +119,7 @@ # that was present in all trousers packages since around 2008. # /var/lib/tpm/system.data.* was wrongly packaged as runtime state data # instead of package resource data in /usr/share. After removal of these files -# from packaging, after updating they will be deleted. Since users could have +# from packaging, during updating they will be deleted. Since users could have # created their own versions of the files already (by taking ownership of a # TPM) we want to keep those files in place. #
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2018-10-29 14:21:50 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Mon Oct 29 14:21:50 2018 rev:39 rq:644837 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2018-10-25 09:12:49.850272258 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2018-10-29 14:29:09.886331322 +0100 @@ -1,0 +2,9 @@ +Fri Oct 26 11:13:37 UTC 2018 - matthias.gerst...@suse.com + +- fix mode of /var/lib/tpm, was missing the execute bit in the previous + version. +- implement a backup and restore logic for /var/lib/tpm/system.data.* to + prevent removal of validly stored trousers state during update. See previous + comment for the packaging error that leads to this requirement. + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.bvBoGv/_old 2018-10-29 14:29:10.554297403 +0100 +++ /var/tmp/diff_new_pack.bvBoGv/_new 2018-10-29 14:29:10.558297200 +0100 @@ -16,6 +16,7 @@ # +%define tpmstatedir %{_localstatedir}/lib/tpm Name: trousers Version:0.3.14 Release:0 @@ -31,6 +32,8 @@ BuildRequires: openssl-devel BuildRequires: pkg-config BuildRequires: systemd-rpm-macros +# for 'stat' for the hack in %pretrans +BuildRequires: coreutils Requires(pre): pwdutils BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -89,7 +92,7 @@ %install %define trousers_data %{buildroot}%{_datadir}/%{name} -%define trousers_state %{buildroot}%{_localstatedir}/lib/tpm +%define trousers_state %{buildroot}%{tpmstatedir} make DESTDIR=%{buildroot} install %{?_smp_mflags} mkdir -p %{trousers_state} install -D -m 0644 %{SOURCE1} %{buildroot}/%{_unitdir}/tcsd.service @@ -108,12 +111,49 @@ %_bindir/getent group tss >/dev/null || %{_sbindir}/groupadd -g 98 tss || : %_bindir/getent passwd tss >/dev/null || \ %{_sbindir}/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ - -d %{_localstatedir}/lib/tpm tss || : + -d %{tpmstatedir} tss || : %service_add_pre tcsd.service +%pretrans +# this scriplet and the counterpart in %posttrans work around a packaging bug +# that was present in all trousers packages since around 2008. +# /var/lib/tpm/system.data.* was wrongly packaged as runtime state data +# instead of package resource data in /usr/share. After removal of these files +# from packaging, after updating they will be deleted. Since users could have +# created their own versions of the files already (by taking ownership of a +# TPM) we want to keep those files in place. +# +# to achieve this we use the ownership of /var/lib/tpm as an indicator. +# Versions that still wrongly package those files also had the ownership of +# the directory wrong. Therefore if the directory is not owned by the tss user +# we apply a backup and restore logic. +[ ! -d "%{tpmstatedir}" ] && exit 0 +OWNER=`/usr/bin/stat -c "%U" "%{tpmstatedir}"` +[ "$OWNER" = "tss" ] && exit 0 +for data in system.data.auth system.data.noauth; do + file="%{tpmstatedir}/${data}" + [ ! -e "$file" ] && continue + cp -p $file ${file}.rpmsave + echo "saving backup of $file" +done + %post %service_add_post tcsd.service +%posttrans +# see pretrans for an explanation of this +for data in system.data.auth system.data.noauth; do + file="%{tpmstatedir}/${data}" + # nothing to restore here + [ ! -e "${file}.rpmsave" ] && continue + # for some reason the to-be-restored file already exists? ignore. + [ -e "${file}" ] && continue + # restore the original file + echo "restoring backup of $file" + mv ${file}.rpmsave ${file} + chown tss:tss "${file}" +done + %postun %service_del_postun tcsd.service @@ -130,7 +170,7 @@ %doc README README.selinux AUTHORS ChangeLog LICENSE NICETOHAVES TODO doc/* %{_mandir}/man5/* %{_mandir}/man8/* -%attr(640,tss,tss) %{_localstatedir}/lib/tpm +%attr(750,tss,tss) %{tpmstatedir} %{_datadir}/%{name} %{_sbindir}/tcsd %{_sbindir}/rctcsd
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2018-10-25 09:12:47 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Thu Oct 25 09:12:47 2018 rev:38 rq:644307 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2017-03-03 17:45:44.250933548 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2018-10-25 09:12:49.850272258 +0200 @@ -1,0 +2,10 @@ +Wed Oct 24 12:42:13 UTC 2018 - matthias.gerst...@suse.com + +- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These + files are only sample files that *can* be used to fake that ownership was + already taken by trousers, when other TPM stacks did that already. These + files should not be there by default. Therefore install them into + /usr/share/trousers instead, to allow the user to use them at his own + discretion (fixes bsc#381). + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.rAR3Qw/_old 2018-10-25 09:12:50.302271987 +0200 +++ /var/tmp/diff_new_pack.rAR3Qw/_new 2018-10-25 09:12:50.306271985 +0200 @@ -1,7 +1,7 @@ # # spec file for package trousers # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -88,11 +88,16 @@ make %{?_smp_mflags} %install +%define trousers_data %{buildroot}%{_datadir}/%{name} +%define trousers_state %{buildroot}%{_localstatedir}/lib/tpm make DESTDIR=%{buildroot} install %{?_smp_mflags} -mkdir -p %{buildroot}%{_localstatedir}/lib/tpm +mkdir -p %{trousers_state} install -D -m 0644 %{SOURCE1} %{buildroot}/%{_unitdir}/tcsd.service ln -sv %{_sbindir}/service %{buildroot}%{_sbindir}/rctcsd -cp -a dist/system.data* %{buildroot}%{_localstatedir}/lib/tpm +# these files can be used to fake trousers ownership of a TPM if the ownership +# was already taken by some other stack. they are sample files. +mkdir -p %{trousers_data} +cp -a dist/system.data* %{trousers_data} mkdir -p %{buildroot}%{_libdir} ln -s -v /%{_lib}/$(readlink %{buildroot}/%{_lib}/libtspi.so) %{buildroot}%{_libdir}/libtspi.so @@ -125,7 +130,8 @@ %doc README README.selinux AUTHORS ChangeLog LICENSE NICETOHAVES TODO doc/* %{_mandir}/man5/* %{_mandir}/man8/* -%{_localstatedir}/lib/tpm +%attr(640,tss,tss) %{_localstatedir}/lib/tpm +%{_datadir}/%{name} %{_sbindir}/tcsd %{_sbindir}/rctcsd %{_unitdir}/tcsd.service
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2017-03-03 17:45:43 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Fri Mar 3 17:45:43 2017 rev:37 rq:461328 version:0.3.14 Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2017-01-09 11:53:52.373977035 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2017-03-03 17:45:44.250933548 +0100 @@ -4 +4 @@ -- Update to version 0.3.14 (see ChangeLog) +- Update to version 0.3.14 (see ChangeLog) (FATE#321450) @@ -28 +28 @@ -Tue Jun 3 15:36:35 UTC 2014 - meiss...@suse.com +Tue Jun 3 13:04:45 UTC 2014 - meiss...@suse.com @@ -49 +49 @@ -Wed Mar 19 12:59:58 UTC 2014 - meiss...@suse.com +Wed Mar 19 12:54:21 UTC 2014 - meiss...@suse.com @@ -51,2 +51,2 @@ -- trousers-wrap_large_key_overflow.patch: do not wrap keys larger - than 2048 bit, as there is not more space. (bnc#868933) +- trousers-wrap_large_key_overflow.patch: Do not wrap keys larger than + 2048 bit, as the space on the TPM is limited to that amount. (bnc#868933) Other differences: --
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2016-05-10 09:27:41 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2015-06-23 11:58:48.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2016-05-10 09:27:42.0 +0200 @@ -1,0 +2,8 @@ +Fri May 6 20:15:13 UTC 2016 - jeng...@inai.de + +- Check for user/group existence before attempting to add them, + and remove error suppression from these calls. +- Avoid runtime dependency on systemd, the macros can all deal with + its absence. + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.wxgLGn/_old 2016-05-10 09:27:43.0 +0200 +++ /var/tmp/diff_new_pack.wxgLGn/_new 2016-05-10 09:27:43.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package trousers # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,7 +23,7 @@ License:BSD-3-Clause Group: Productivity/Security Url:http://trousers.sourceforge.net/ -Source0: http://downloads.sourceforge.net/project/trousers/trousers/%{version}/%{name}-%{version}.tar.gz +Source0:http://downloads.sf.net/trousers/%{name}-%{version}.tar.gz Source1:tcsd.service Source2:baselibs.conf BuildRequires: gtk2-devel @@ -31,7 +31,6 @@ BuildRequires: openssl-devel BuildRequires: pkg-config BuildRequires: systemd-rpm-macros -%{?systemd_requires} Requires(pre): pwdutils BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -101,8 +100,10 @@ mv -v %{buildroot}/%{_lib}/*.a %{buildroot}%{_libdir} %pre -%{_sbindir}/groupadd -g 98 tss 2> /dev/null || : -%{_sbindir}/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" -d %{_localstatedir}/lib/tpm tss 2> /dev/null || : +%_bindir/getent group tss >/dev/null || %{_sbindir}/groupadd -g 98 tss || : +%_bindir/getent passwd tss >/dev/null || \ + %{_sbindir}/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ + -d %{_localstatedir}/lib/tpm tss || : %service_add_pre tcsd.service %post ++ trousers-0.3.13.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/trousers-0.3.13/bootstrap.sh new/trousers-0.3.13/bootstrap.sh --- old/trousers-0.3.13/bootstrap.sh1970-01-01 01:00:00.0 +0100 +++ new/trousers-0.3.13/bootstrap.sh2014-06-10 23:08:32.0 +0200 @@ -0,0 +1,5 @@ +set -x +aclocal || exit 1 +libtoolize --force -c || exit 1 +automake --add-missing -c --foreign || exit 1 +autoconf || exit 1
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2015-06-23 11:58:47 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2015-04-10 09:51:06.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2015-06-23 11:58:48.0 +0200 @@ -1,0 +2,5 @@ +Fri Jun 19 15:51:08 UTC 2015 - crrodrig...@opensuse.org + +- Force GNU inline semantics, fixes build with GCC5 + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.iw0ZGB/_old 2015-06-23 11:58:48.0 +0200 +++ /var/tmp/diff_new_pack.iw0ZGB/_new 2015-06-23 11:58:48.0 +0200 @@ -80,7 +80,7 @@ %build CC=gcc -CFLAGS="%{optflags} -Wall -fno-strict-aliasing" +CFLAGS="%{optflags} -Wall -fno-strict-aliasing -fgnu89-inline" SHARE=%{_prefix}/share DOC=%{_defaultdocdir} export CC CFLAGS
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2014-06-05 10:49:57 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2014-03-21 14:06:50.0 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2014-06-05 10:49:58.0 +0200 @@ -1,0 +2,21 @@ +Tue Jun 3 15:36:35 UTC 2014 - meiss...@suse.com + +- updated to trousers 0.3.13 (bnc#881095 LTC#24) + - Changed exported functions which had a name too common, to avoid +collision + - Assessed daemon security using manual techniques and coverity + - Fixed major security bugs and memory leaks + - Added debug support to run tcsd with a different user/group + - Daemon now properly closes sockets before shutting down + +* TROUSERS_0_3_12 + - Added new network code for RPC, which supports IPv6 + - Users of client applications can configure the hostname of the tcsd +server they want to connect through the TSS_TCSD_HOSTNAME env var +(only works if application didn't set a hostname in the context) + - Added disable_ipv4 and disable_ipv6 config options for server + +- removed trousers-wrap_large_key_overflow.patch: upstream +- removed trousers-0.3.11.2.diff: solved upstream now + +--- Old: trousers-0.3.11.2.diff trousers-0.3.11.2.tar.gz trousers-wrap_large_key_overflow.patch New: trousers-0.3.13.tar.gz Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.i03kvY/_old 2014-06-05 10:50:01.0 +0200 +++ /var/tmp/diff_new_pack.i03kvY/_new 2014-06-05 10:50:01.0 +0200 @@ -23,16 +23,14 @@ Name: trousers Url:http://trousers.sourceforge.net/ -Version:0.3.11.2 +Version:0.3.13 Release:0 Summary:TSS (TCG Software Stack) access daemon for a TPM chip License:BSD-3-Clause Group: Productivity/Security -Source0: http://downloads.sourceforge.net/project/trousers/trousers/0.3.11/%name-%version.tar.gz +Source0: http://downloads.sourceforge.net/project/trousers/trousers/0.3.13/%name-%version.tar.gz Source1:tcsd.init Source2:baselibs.conf -Patch0: %name-%version.diff -Patch1: trousers-wrap_large_key_overflow.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: %install_info_prereq pwdutils @@ -78,8 +76,6 @@ %prep %setup -q -%patch0 -p0 -%patch1 -p1 cp %{S:1} . %build ++ trousers-0.3.11.2.tar.gz -> trousers-0.3.13.tar.gz ++ 10218 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2014-03-21 14:06:49 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2014-01-23 15:57:25.0 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2014-03-21 14:06:50.0 +0100 @@ -1,0 +2,6 @@ +Wed Mar 19 12:59:58 UTC 2014 - meiss...@suse.com + +- trousers-wrap_large_key_overflow.patch: do not wrap keys larger + than 2048 bit, as there is not more space. (bnc#868933) + +--- New: trousers-wrap_large_key_overflow.patch Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.lapvdX/_old 2014-03-21 14:06:51.0 +0100 +++ /var/tmp/diff_new_pack.lapvdX/_new 2014-03-21 14:06:51.0 +0100 @@ -32,6 +32,7 @@ Source1:tcsd.init Source2:baselibs.conf Patch0: %name-%version.diff +Patch1: trousers-wrap_large_key_overflow.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: %install_info_prereq pwdutils @@ -78,6 +79,7 @@ %prep %setup -q %patch0 -p0 +%patch1 -p1 cp %{S:1} . %build ++ trousers-wrap_large_key_overflow.patch ++ diff --git a/src/tspi/tspi_key.c b/src/tspi/tspi_key.c index bfead42..aa4df50 100644 --- a/src/tspi/tspi_key.c +++ b/src/tspi/tspi_key.c @@ -23,6 +23,11 @@ #include "obj.h" #include "authsess.h" +#define TPM_STORE_ASYMKEY_LEN 214 /* Entire TPM_STORE_ASYMKEY length */ +#define USAGE_MIG_DIGEST_FLD_LEN 20 /* Usage, Migration and Digest lengths for + TPM_STORE_ASYMKEY */ +#define TPM_STORE_PRIVKEY_LEN 151 /* Extracted directly from TPM_STORE_ASYMKEY + field */ TSS_RESULT Tspi_Key_UnloadKey(TSS_HKEY hKey) /* in */ @@ -343,9 +348,11 @@ Tspi_Key_WrapKey(TSS_HKEY hKey,/* in */ TSS_RESULT result; BYTE *keyPrivBlob = NULL, *wrappingPubKey = NULL, *keyBlob = NULL; UINT32 keyPrivBlobLen, wrappingPubKeyLen, keyBlobLen; - BYTE newPrivKey[214]; /* its not magic, see TPM 1.1b spec p.71 */ + BYTE newPrivKey[TPM_STORE_ASYMKEY_LEN]; /* This reflects the size of the + TPM_STORE_ASYMKEY structure + in both TPM 1.1b and 1.2 */ BYTE encPrivKey[256]; - UINT32 newPrivKeyLen = 214, encPrivKeyLen = 256; + UINT32 newPrivKeyLen = TPM_STORE_ASYMKEY_LEN, encPrivKeyLen = 256; UINT64 offset; TSS_KEY keyContainer; TCPA_DIGEST digest; @@ -363,6 +370,10 @@ Tspi_Key_WrapKey(TSS_HKEY hKey,/* in */ /* get the key to be wrapped's private key */ if ((result = obj_rsakey_get_priv_blob(hKey, &keyPrivBlobLen, &keyPrivBlob))) goto done; +/* verify if its under the maximum size, according to the + * TPM_STORE_ASYMKEY specification */ +if (keyPrivBlobLen > TPM_STORE_PRIVKEY_LEN) +return TSPERR(TSS_E_ENC_INVALID_LENGTH); /* get the key to be wrapped's blob */ if ((result = obj_rsakey_get_blob(hKey, &keyBlobLen, &keyBlob))) @@ -400,12 +411,16 @@ Tspi_Key_WrapKey(TSS_HKEY hKey, /* in */ free_key_refs(&keyContainer); - /* create the plaintext private key blob */ + /* create the plaintext private key blob. This is the point where the + * TPM structure TPM_STORE_ASYMKEY is crafted in the buffer */ offset = 0; Trspi_LoadBlob_BYTE(&offset, TCPA_PT_ASYM, newPrivKey); - Trspi_LoadBlob(&offset, 20, newPrivKey, usage.authdata); - Trspi_LoadBlob(&offset, 20, newPrivKey, migration.authdata); - Trspi_LoadBlob(&offset, 20, newPrivKey, digest.digest); + Trspi_LoadBlob(&offset, USAGE_MIG_DIGEST_FLD_LEN, + newPrivKey, usage.authdata); + Trspi_LoadBlob(&offset, USAGE_MIG_DIGEST_FLD_LEN, + newPrivKey, migration.authdata); + Trspi_LoadBlob(&offset, USAGE_MIG_DIGEST_FLD_LEN, + newPrivKey, digest.digest); Trspi_LoadBlob_UINT32(&offset, keyPrivBlobLen, newPrivKey); Trspi_LoadBlob(&offset, keyPrivBlobLen, newPrivKey, keyPrivBlob); newPrivKeyLen = offset; -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2014-01-20 16:24:52 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2012-10-07 20:07:59.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2014-01-23 15:57:25.0 +0100 @@ -1,0 +2,8 @@ +Tue Jan 14 10:42:23 UTC 2014 - meiss...@suse.com + +- Updated to trousers 0.3.11.2 + - license changed to BSD-3-Clause + - various bug and manpage fixes +- trousers-0.3.10.diff renamed and rebased to trousers-0.3.11.2.diff + +--- Old: trousers-0.3.10.diff trousers-0.3.10.tar.gz New: trousers-0.3.11.2.diff trousers-0.3.11.2.tar.gz Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.eu836b/_old 2014-01-23 15:57:26.0 +0100 +++ /var/tmp/diff_new_pack.eu836b/_new 2014-01-23 15:57:26.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package trousers # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,12 +23,12 @@ Name: trousers Url:http://trousers.sourceforge.net/ -Version:0.3.10 +Version:0.3.11.2 Release:0 Summary:TSS (TCG Software Stack) access daemon for a TPM chip -License:CPL-1.0 +License:BSD-3-Clause Group: Productivity/Security -Source0: http://downloads.sourceforge.net/project/trousers/trousers/%version/%name-%version.tar.gz +Source0: http://downloads.sourceforge.net/project/trousers/trousers/0.3.11/%name-%version.tar.gz Source1:tcsd.init Source2:baselibs.conf Patch0: %name-%version.diff @@ -124,7 +124,7 @@ %files %defattr(-,root,root) %config(noreplace) %attr(600,tss,tss) /etc/tcsd.conf -%doc README AUTHORS ChangeLog LICENSE NICETOHAVES TODO doc/* +%doc README README.selinux AUTHORS ChangeLog LICENSE NICETOHAVES TODO doc/* %{_mandir}/man5/* %{_mandir}/man8/* /var/lib/tpm ++ trousers-0.3.10.diff -> trousers-0.3.11.2.diff ++ --- /work/SRC/openSUSE:Factory/trousers/trousers-0.3.10.diff2012-10-07 20:07:59.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers-0.3.11.2.diff 2014-01-23 15:57:25.0 +0100 @@ -1,8 +1,12 @@ dist/Makefile.am +Index: dist/Makefile.am +=== +--- dist/Makefile.am.orig +++ dist/Makefile.am -@@ -2,16 +2,16 @@ +@@ -1,9 +1,9 @@ + EXTRA_DIST = system.data.auth system.data.noauth \ fedora/fedora.initrd.tcsd - install: install-exec-hook +-install: install-exec-hook ++install: if test ! -e ${DESTDIR}/@sysconfdir@/tcsd.conf; then mkdir -p ${DESTDIR}/@sysconfdir@ && cp tcsd.conf ${DESTDIR}/@sysconfdir@; fi - /bin/chown tss:tss ${DESTDIR}/@sysconfdir@/tcsd.conf || true - /bin/chmod 0600 ${DESTDIR}/@sysconfdir@/tcsd.conf @@ -10,27 +14,17 @@ + echo /bin/chmod 0600 ${DESTDIR}/@sysconfdir@/tcsd.conf install-exec-hook: -- /usr/sbin/groupadd tss || true -- /usr/sbin/useradd -r tss -g tss || true -- /bin/sh -c 'if [ ! -e ${DESTDIR}/@localstatedir@/lib/tpm ];then mkdir -p ${DESTDIR}/@localstatedir@/lib/tpm; fi' -- /bin/chown tss:tss ${DESTDIR}/@localstatedir@/lib/tpm || true -- /bin/chmod 0700 ${DESTDIR}/@localstatedir@/lib/tpm -+ echo /usr/sbin/groupadd tss || true -+ echo /usr/sbin/useradd -r tss -g tss || true -+ echo /bin/sh -c 'if [ ! -e ${DESTDIR}/@localstatedir@/lib/tpm ];then mkdir -p ${DESTDIR}/@localstatedir@/lib/tpm; fi' -+ echo /bin/chown tss:tss ${DESTDIR}/@localstatedir@/lib/tpm || true -+ echo /bin/chmod 0700 ${DESTDIR}/@localstatedir@/lib/tpm - - uninstall-hook: -- /usr/sbin/userdel tss || true -- /usr/sbin/groupdel tss || true -+ echo /usr/sbin/userdel tss || true -+ echo /usr/sbin/groupdel tss || true dist/Makefile.in + /usr/sbin/groupadd tss || true +Index: dist/Makefile.in +=== +--- dist/Makefile.in.orig +++ dist/Makefile.in -@@ -364,19 +364,19 @@ +@@ -395,10 +395,10 @@ uninstall-am: + mostlyclean-generic mostlyclean-libtool pdf pdf-am ps ps-am \ + uninstall uninstall-am uninstall-hook - install: install-exec-hook +-install: install-exec-hook ++install:
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2012-10-07 20:05:06 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers", Maintainer is "meiss...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2012-05-31 17:11:20.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2012-10-07 20:07:59.0 +0200 @@ -1,0 +2,7 @@ +Fri Sep 28 14:45:51 UTC 2012 - meiss...@suse.com + +- updated to trousers 0.3.10 + - bugfixes + - context checking + +--- Old: trousers-0.3.9.diff trousers-0.3.9.tar.gz New: trousers-0.3.10.diff trousers-0.3.10.tar.gz Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.vDwvMZ/_old 2012-10-07 20:08:00.0 +0200 +++ /var/tmp/diff_new_pack.vDwvMZ/_new 2012-10-07 20:08:00.0 +0200 @@ -23,7 +23,7 @@ Name: trousers Url:http://trousers.sourceforge.net/ -Version:0.3.9 +Version:0.3.10 Release:0 Summary:TSS (TCG Software Stack) access daemon for a TPM chip License:CPL-1.0 ++ trousers-0.3.9.diff -> trousers-0.3.10.diff ++ --- /work/SRC/openSUSE:Factory/trousers/trousers-0.3.9.diff 2012-05-31 17:11:20.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers-0.3.10.diff 2012-10-07 20:07:59.0 +0200 @@ -1,14 +1,3 @@ configure.in -+++ configure.in -@@ -355,7 +355,7 @@ - AC_CHECK_FUNC(daemon, [ AC_DEFINE(HAVE_DAEMON, 1, [daemon function is available]) ]) - - if test "x${GCC}" = "xyes"; then -- CFLAGS="$CFLAGS -W -Wall -Werror -Wno-unused-parameter -Wsign-compare" -+ CFLAGS="$CFLAGS -W -Wall -Wno-unused-parameter -Wsign-compare" - fi - - CFLAGS="$CFLAGS -I../include \ --- dist/Makefile.am +++ dist/Makefile.am @@ -2,16 +2,16 @@ ++ trousers-0.3.9.tar.gz -> trousers-0.3.10.tar.gz ++ 51178 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2012-05-31 17:11:08 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers", Maintainer is "meiss...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2012-03-29 07:49:02.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2012-05-31 17:11:20.0 +0200 @@ -1,0 +2,6 @@ +Fri May 18 11:04:43 CEST 2012 - meiss...@suse.de + +- Updated to trousers 0.3.9 + - lots of bugfixes + +--- Old: trousers-0.3.8.diff trousers-0.3.8.tar.gz New: trousers-0.3.9.diff trousers-0.3.9.tar.gz Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.FXFIGU/_old 2012-05-31 17:11:22.0 +0200 +++ /var/tmp/diff_new_pack.FXFIGU/_new 2012-05-31 17:11:22.0 +0200 @@ -23,7 +23,7 @@ Name: trousers Url:http://trousers.sourceforge.net/ -Version:0.3.8 +Version:0.3.9 Release:0 Summary:TSS (TCG Software Stack) access daemon for a TPM chip License:CPL-1.0 ++ trousers-0.3.8.diff -> trousers-0.3.9.diff ++ ++ trousers-0.3.8.tar.gz -> trousers-0.3.9.tar.gz ++ 16441 lines of diff (skipped) retrying with extended exclude list diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/trousers-0.3.8/configure.in new/trousers-0.3.9/configure.in --- old/trousers-0.3.8/configure.in 2011-12-24 07:16:22.0 +0100 +++ new/trousers-0.3.9/configure.in 2012-05-17 21:41:18.0 +0200 @@ -2,7 +2,7 @@ # configure.in for the trousers project # -AC_INIT(trousers, 0.3.8, trousers-t...@lists.sf.net) +AC_INIT(trousers, 0.3.9, trousers-t...@lists.sf.net) TSS_SPEC_MAJOR=1 TSS_SPEC_MINOR=2 @@ -33,6 +33,9 @@ fi fi +#FIXME: can't reproduce the unused variable issues, placing this workaround for now. +CFLAGS="${CFLAGS} -Wno-unused-but-set-variable + # Arch specific stuff case $target in *ppc64* | *powerpc64* | *x86_64*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/trousers-0.3.8/src/include/rpc_tcstp.h new/trousers-0.3.9/src/include/rpc_tcstp.h --- old/trousers-0.3.8/src/include/rpc_tcstp.h 2010-01-28 17:27:51.0 +0100 +++ new/trousers-0.3.9/src/include/rpc_tcstp.h 2012-01-17 18:24:15.0 +0100 @@ -31,7 +31,7 @@ struct tcsd_comm_data { BYTE *buf; - int buf_size; + UINT32 buf_size; struct tcsd_packet_hdr hdr; } STRUCTURE_PACKING_ATTRIBUTE; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/trousers-0.3.8/src/include/rpc_tcstp_tcs.h new/trousers-0.3.9/src/include/rpc_tcstp_tcs.h --- old/trousers-0.3.8/src/include/rpc_tcstp_tcs.h 2010-01-28 17:27:51.0 +0100 +++ new/trousers-0.3.9/src/include/rpc_tcstp_tcs.h 2012-01-17 18:24:15.0 +0100 @@ -392,8 +392,8 @@ void UnloadBlob_LOADKEY_INFO(UINT64 *, BYTE *, TCS_LOADKEY_INFO *); void LoadBlob_PCR_EVENT(UINT64 *, BYTE *, TSS_PCR_EVENT *); TSS_RESULT UnloadBlob_PCR_EVENT(UINT64 *, BYTE *, TSS_PCR_EVENT *); -int setData(TCSD_PACKET_TYPE, int, void *, int, struct tcsd_comm_data *); -UINT32 getData(TCSD_PACKET_TYPE, int, void *, int, struct tcsd_comm_data *); +int setData(TCSD_PACKET_TYPE, unsigned int, void *, int, struct tcsd_comm_data *); +UINT32 getData(TCSD_PACKET_TYPE, unsigned int, void *, int, struct tcsd_comm_data *); void initData(struct tcsd_comm_data *, int); int recv_from_socket(int, void *, int); int send_to_socket(int, void *, int); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/trousers-
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2012-03-29 07:49:01 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers", Maintainer is "meiss...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2012-03-17 13:23:31.0 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2012-03-29 07:49:02.0 +0200 @@ -1,0 +2,17 @@ +Wed Mar 28 17:01:59 CEST 2012 - meiss...@suse.de + +- Updated to TROUSERS_0_3_8 + - Fix ssl_ui.c overflow + - Handling of TPM_CERTIFY_INFO2 structure special case + - Fix possible obfuscation of obj_migdata.c errors. + - Make 1.2 keys respect the TPM_PCRIGNOREDONREAD flag. + - PCRInfo member allocation in Trspi_Unload_CERTIFY_INFO. + - Add functions for deserializing NVRAM related data structures + - Add NVRAM specific error messages + - Fix spec file so one can build an rpm + - Initialize the tcsd_config_file with NULL. + - support for -c command line option + - Establish a .gitignore file + - ENDIAN_H and htole definition fix + +--- Old: trousers-0.3.7.diff trousers-0.3.7.tar.bz2 New: trousers-0.3.8.diff trousers-0.3.8.tar.gz Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.ocKj92/_old 2012-03-29 07:49:04.0 +0200 +++ /var/tmp/diff_new_pack.ocKj92/_new 2012-03-29 07:49:04.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package trousers # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,16 +16,19 @@ # -BuildRequires: gtk2-devel libtool openssl-devel pkgconfig +BuildRequires: gtk2-devel +BuildRequires: libtool +BuildRequires: openssl-devel +BuildRequires: pkgconfig Name: trousers Url:http://trousers.sourceforge.net/ +Version:0.3.8 +Release:0 +Summary:TSS (TCG Software Stack) access daemon for a TPM chip License:CPL-1.0 Group: Productivity/Security -Version:0.3.7 -Release:1 -Summary:TSS (TCG Software Stack) access daemon for a TPM chip -Source0:%name-%version.tar.bz2 +Source0: http://downloads.sourceforge.net/project/trousers/trousers/%version/%name-%version.tar.gz Source1:tcsd.init Source2:baselibs.conf Patch0: %name-%version.diff @@ -42,12 +45,12 @@ system. It is a character device file major 10 minor 224, 0600 tss:tss. %package devel -License:CPL-1.0 -Group: Development/Libraries/C and C++ -AutoReqProv:on Summary:TSS (TCG Software Stack) access daemon for a TPM chip -Requires: trousers = %version libtspi1 = %version -Requires: libopenssl-devel glibc-devel +Group: Development/Libraries/C and C++ +Requires: glibc-devel +Requires: libopenssl-devel +Requires: libtspi1 = %version +Requires: trousers = %version %description devel The trousers package provides a TSS implementation through the help of @@ -59,10 +62,8 @@ system. It is a character device file major 10 minor 224, 0600 tss:tss. %package -n libtspi1 -License:CPL-1.0 -Group: Productivity/Security -AutoReqProv:on Summary:TSS (TCG Software Stack) access daemon for a TPM chip +Group: Productivity/Security Requires: trousers %description -n libtspi1 ++ trousers-0.3.7.diff -> trousers-0.3.8.diff ++ -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2012-03-17 13:23:26 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers", Maintainer is "meiss...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2011-11-22 17:49:51.0 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2012-03-17 13:23:31.0 +0100 @@ -1,0 +2,6 @@ +Tue Mar 13 08:30:18 UTC 2012 - cfarr...@suse.com + +- license update: CPL-1.0 + SPDX format + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.J38CuZ/_old 2012-03-17 13:23:32.0 +0100 +++ /var/tmp/diff_new_pack.J38CuZ/_new 2012-03-17 13:23:32.0 +0100 @@ -20,7 +20,7 @@ Name: trousers Url:http://trousers.sourceforge.net/ -License:Other uncritical OpenSource License +License:CPL-1.0 Group: Productivity/Security Version:0.3.7 Release:1 @@ -42,7 +42,7 @@ system. It is a character device file major 10 minor 224, 0600 tss:tss. %package devel -License:Other uncritical OpenSource License +License:CPL-1.0 Group: Development/Libraries/C and C++ AutoReqProv:on Summary:TSS (TCG Software Stack) access daemon for a TPM chip @@ -59,7 +59,7 @@ system. It is a character device file major 10 minor 224, 0600 tss:tss. %package -n libtspi1 -License:CPL (Common Public License) v1 +License:CPL-1.0 Group: Productivity/Security AutoReqProv:on Summary:TSS (TCG Software Stack) access daemon for a TPM chip -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2011-11-22 17:49:45 Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) Package is "trousers", Maintainer is "meiss...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/trousers/trousers.changes2011-09-23 12:49:02.0 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2011-11-22 17:49:51.0 +0100 @@ -1,0 +2,5 @@ +Sat Nov 19 20:46:59 UTC 2011 - co...@suse.com + +- add libtool as buildrequire to avoid implicit dependency + +--- Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.pJaD5g/_old 2011-11-22 17:49:53.0 +0100 +++ /var/tmp/diff_new_pack.pJaD5g/_new 2011-11-22 17:49:53.0 +0100 @@ -16,13 +16,12 @@ # -BuildRequires: gtk2-devel openssl-devel pkgconfig +BuildRequires: gtk2-devel libtool openssl-devel pkgconfig Name: trousers Url:http://trousers.sourceforge.net/ License:Other uncritical OpenSource License Group: Productivity/Security -AutoReqProv:on Version:0.3.7 Release:1 Summary:TSS (TCG Software Stack) access daemon for a TPM chip @@ -42,18 +41,6 @@ The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss. - - -Authors: - -Development sponsored by IBM -Ryan Catherman -Seiji Munetoh -Taiga Nakamura -Kent Yoder -Megan Schneider -Kathy Robertson - %package devel License:Other uncritical OpenSource License Group: Development/Libraries/C and C++ @@ -71,18 +58,6 @@ The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss. - - -Authors: - -Development sponsored by IBM -Ryan Catherman -Seiji Munetoh -Taiga Nakamura -Kent Yoder -Megan Schneider -Kathy Robertson - %package -n libtspi1 License:CPL (Common Public License) v1 Group: Productivity/Security @@ -99,18 +74,6 @@ The package needs the /dev/tpm device file to be present on your system. It is a character device file major 10 minor 224, 0600 tss:tss. - - -Authors: - -Development sponsored by IBM -Ryan Catherman -Seiji Munetoh -Taiga Nakamura -Kent Yoder -Megan Schneider -Kathy Robertson - %prep %setup -q %patch0 -p0 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit trousers for openSUSE:Factory
Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at Thu Jun 30 16:24:38 CEST 2011. --- trousers/trousers.changes 2010-09-27 01:39:02.0 +0200 +++ /mounts/work_src_done/STABLE/trousers/trousers.changes 2011-06-20 12:00:55.0 +0200 @@ -1,0 +2,7 @@ +Mon Jun 20 11:57:28 CEST 2011 - meiss...@suse.de + +- Updated to TROUSERS_0_3_7 + - bugfixes + - obj_policy_is_secret_set added + +--- calling whatdependson for head-i586 Old: trousers-0.3.6.diff trousers-0.3.6.tar.bz2 New: trousers-0.3.7.diff trousers-0.3.7.tar.bz2 Other differences: -- ++ trousers.spec ++ --- /var/tmp/diff_new_pack.Q9Gp07/_old 2011-06-30 16:24:06.0 +0200 +++ /var/tmp/diff_new_pack.Q9Gp07/_new 2011-06-30 16:24:06.0 +0200 @@ -1,7 +1,7 @@ # -# spec file for package trousers (Version 0.3.6) +# spec file for package trousers # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,8 +23,8 @@ License:Other uncritical OpenSource License Group: Productivity/Security AutoReqProv:on -Version:0.3.6 -Release:2 +Version:0.3.7 +Release:1 Summary:TSS (TCG Software Stack) access daemon for a TPM chip Source0:%name-%version.tar.bz2 Source1:tcsd.init ++ trousers-0.3.6.diff -> trousers-0.3.7.diff ++ ++ trousers-0.3.6.tar.bz2 -> trousers-0.3.7.tar.bz2 ++ 25824 lines of diff (skipped) retrying with extended exclude list diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/trousers-0.3.6/configure.in new/trousers-0.3.7/configure.in --- old/trousers-0.3.6/configure.in 2010-07-08 22:35:18.0 +0200 +++ new/trousers-0.3.7/configure.in 2011-06-17 16:20:32.0 +0200 @@ -2,7 +2,7 @@ # configure.in for the trousers project # -AC_INIT(trousers, 0.3.6, trousers-t...@lists.sf.net) +AC_INIT(trousers, 0.3.7, trousers-t...@lists.sf.net) TSS_SPEC_MAJOR=1 TSS_SPEC_MINOR=2 @@ -351,6 +351,7 @@ AC_C_BIGENDIAN([AC_DEFINE(_BIG_ENDIAN, 1, [big-endian host])]) AC_CHECK_DECL(htole32, [AC_DEFINE(HTOLE_DEFINED, 1, [htole32 function is available])]) +AC_CHECK_HEADER(endian.h, [AC_DEFINE(HAVE_ENDIAN_H, 1, [endian.h header])]) AC_CHECK_HEADER(sys/byteorder.h, [AC_DEFINE(HAVE_BYTEORDER_H, 1, [sys/byteorder.h header])]) AC_CHECK_FUNC(daemon, [ AC_DEFINE(HAVE_DAEMON, 1, [daemon function is available]) ]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/trousers-0.3.6/src/include/obj_policy.h new/trousers-0.3.7/src/include/obj_policy.h --- old/trousers-0.3.6/src/include/obj_policy.h 2010-03-11 21:27:03.0 +0100 +++ new/trousers-0.3.7/src/include/obj_policy.h 2010-09-10 21:50:27.0 +0200 @@ -152,6 +152,7 @@ TSS_RESULT obj_policy_get_xsap_params(TSS_HPOLICY, TPM_COMMAND_CODE, TPM_ENTITY_TYPE *, UINT32 *, BYTE **, BYTE *, TSS_CALLBACK *, TSS_CALLBACK *, TSS_CALLBACK *, UINT32 *, TSS_BOOL); +TSS_RESULT obj_policy_is_secret_set(TSS_HPOLICY, TSS_BOOL *); #ifdef TSS_BUILD_DELEGATION TSS_RESULT obj_policy_set_delegation_type(TSS_HPOLICY, UINT32); TSS_RESULT obj_policy_get_delegation_type(TSS_HPOLICY, UINT32 *); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/trousers-0.3.6/src/tcs/ps/ps_utils.c new/trousers-0.3.7/src/tcs/ps/ps_utils.c --- old/trousers-0.3.6/src/tcs/ps/ps_utils.c2010-06-30 17:15:00.0 +0200 +++ new/trousers-0.3.7/src/tcs/ps/ps_utils.c2010-09-10 21:50:27.0 +0200 @@ -419,7 +419,7 @@ } tmp->pub_data_size = LE_16(tmp->pub_data_size); - //DBG_ASSERT(tmp->pub_data_size <= 2048 && tmp->pub_data_size > 0); + DBG_ASSERT(tmp->pub_data_size <= 2048 && tmp->pub_data_size > 0);