Hello community,
here is the log from the commit of package trousers for openSUSE:Factory
checked in at 2018-10-25 09:12:47
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/trousers (Old)
and /work/SRC/openSUSE:Factory/.trousers.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trousers"
Thu Oct 25 09:12:47 2018 rev:38 rq:644307 version:0.3.14
Changes:
--------
--- /work/SRC/openSUSE:Factory/trousers/trousers.changes 2017-03-03
17:45:44.250933548 +0100
+++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2018-10-25
09:12:49.850272258 +0200
@@ -1,0 +2,10 @@
+Wed Oct 24 12:42:13 UTC 2018 - matthias.gerst...@suse.com
+
+- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These
+ files are only sample files that *can* be used to fake that ownership was
+ already taken by trousers, when other TPM stacks did that already. These
+ files should not be there by default. Therefore install them into
+ /usr/share/trousers instead, to allow the user to use them at his own
+ discretion (fixes bsc#1111381).
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ trousers.spec ++++++
--- /var/tmp/diff_new_pack.rAR3Qw/_old 2018-10-25 09:12:50.302271987 +0200
+++ /var/tmp/diff_new_pack.rAR3Qw/_new 2018-10-25 09:12:50.306271985 +0200
@@ -1,7 +1,7 @@
#
# spec file for package trousers
#
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -88,11 +88,16 @@
make %{?_smp_mflags}
%install
+%define trousers_data %{buildroot}%{_datadir}/%{name}
+%define trousers_state %{buildroot}%{_localstatedir}/lib/tpm
make DESTDIR=%{buildroot} install %{?_smp_mflags}
-mkdir -p %{buildroot}%{_localstatedir}/lib/tpm
+mkdir -p %{trousers_state}
install -D -m 0644 %{SOURCE1} %{buildroot}/%{_unitdir}/tcsd.service
ln -sv %{_sbindir}/service %{buildroot}%{_sbindir}/rctcsd
-cp -a dist/system.data* %{buildroot}%{_localstatedir}/lib/tpm
+# these files can be used to fake trousers ownership of a TPM if the ownership
+# was already taken by some other stack. they are sample files.
+mkdir -p %{trousers_data}
+cp -a dist/system.data* %{trousers_data}
mkdir -p %{buildroot}%{_libdir}
ln -s -v /%{_lib}/$(readlink %{buildroot}/%{_lib}/libtspi.so)
%{buildroot}%{_libdir}/libtspi.so
@@ -125,7 +130,8 @@
%doc README README.selinux AUTHORS ChangeLog LICENSE NICETOHAVES TODO doc/*
%{_mandir}/man5/*
%{_mandir}/man8/*
-%{_localstatedir}/lib/tpm
+%attr(640,tss,tss) %{_localstatedir}/lib/tpm
+%{_datadir}/%{name}
%{_sbindir}/tcsd
%{_sbindir}/rctcsd
%{_unitdir}/tcsd.service
