Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2018-10-25 09:12:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "trousers" Thu Oct 25 09:12:47 2018 rev:38 rq:644307 version:0.3.14 Changes: -------- --- /work/SRC/openSUSE:Factory/trousers/trousers.changes 2017-03-03 17:45:44.250933548 +0100 +++ /work/SRC/openSUSE:Factory/.trousers.new/trousers.changes 2018-10-25 09:12:49.850272258 +0200 @@ -1,0 +2,10 @@ +Wed Oct 24 12:42:13 UTC 2018 - matthias.gerstner@suse.com + +- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These + files are only sample files that *can* be used to fake that ownership was + already taken by trousers, when other TPM stacks did that already. These + files should not be there by default. Therefore install them into + /usr/share/trousers instead, to allow the user to use them at his own + discretion (fixes bsc#1111381). + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ trousers.spec ++++++ --- /var/tmp/diff_new_pack.rAR3Qw/_old 2018-10-25 09:12:50.302271987 +0200 +++ /var/tmp/diff_new_pack.rAR3Qw/_new 2018-10-25 09:12:50.306271985 +0200 @@ -1,7 +1,7 @@ # # spec file for package trousers # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -88,11 +88,16 @@ make %{?_smp_mflags} %install +%define trousers_data %{buildroot}%{_datadir}/%{name} +%define trousers_state %{buildroot}%{_localstatedir}/lib/tpm make DESTDIR=%{buildroot} install %{?_smp_mflags} -mkdir -p %{buildroot}%{_localstatedir}/lib/tpm +mkdir -p %{trousers_state} install -D -m 0644 %{SOURCE1} %{buildroot}/%{_unitdir}/tcsd.service ln -sv %{_sbindir}/service %{buildroot}%{_sbindir}/rctcsd -cp -a dist/system.data* %{buildroot}%{_localstatedir}/lib/tpm +# these files can be used to fake trousers ownership of a TPM if the ownership +# was already taken by some other stack. they are sample files. +mkdir -p %{trousers_data} +cp -a dist/system.data* %{trousers_data} mkdir -p %{buildroot}%{_libdir} ln -s -v /%{_lib}/$(readlink %{buildroot}/%{_lib}/libtspi.so) %{buildroot}%{_libdir}/libtspi.so @@ -125,7 +130,8 @@ %doc README README.selinux AUTHORS ChangeLog LICENSE NICETOHAVES TODO doc/* %{_mandir}/man5/* %{_mandir}/man8/* -%{_localstatedir}/lib/tpm +%attr(640,tss,tss) %{_localstatedir}/lib/tpm +%{_datadir}/%{name} %{_sbindir}/tcsd %{_sbindir}/rctcsd %{_unitdir}/tcsd.service