Changelog for
libtss2-tcti-tabrmd0-3.0.0-3.6.x86_64.rpm :
* Thu Dec 08 2022 Alberto Planas Dominguez
- Version 3.0.0 + Fixed
* A bug in special command processing in TPM2_GetCapability when an audit session is in use cuased tpm2-abrmd to abort. + Added
* New SELinux interfaces for communication with keylime + Changed
* DBUS permissions in tpm2-abrmd.conf to match the in-kernel RM, ie /dev/tpmrm0, permissions. Now users MUST be in the tss group to send to tpm2-abrmd over DBUS.- Drop dbus-access.patch (merged in PR#805)
* Fri Jul 08 2022 Alberto Planas Dominguez - Version 2.4.1 + Added Contributor Covenant Code of Conduct. + Fixed
* superflous warning messages about tcti status. WARNING
*
*: 11:00:56.205: tcti_conf before: \"(null)\" WARNING
*
*: 11:00:56.205: tcti_conf after: \"mssim\"
* GCC 11 build error: error: argument 2 of __atomic_load’ discards \'volatile\' qualifier
* Initialize gerror pointer variable to NULL to fix use of unitialized memory and segfault.
* Updated missing defaults in manpage.
* Port CI to composite actions in tpm2-software/ci. + Removed Dependency on \'which\' utility in configure.ac. ubuntu-16.04 from CI.
* Mon Apr 04 2022 Matthias Gerstner - dbus-access.patch: restrict D-Bus access to tpm2-abrmd to members of the tss group (bsc#1197532). This prevents arbitrary users from meddling with TPM state and thus potential denial-of-service vectors.
* Wed Dec 08 2021 Alberto Planas Dominguez - Version 2.4.0 + remover syslog deprecation warning (bsc#1185154) + cover update to 2.3.3 (jsc#SLE-17366) + contains reload fix (bsc#1166936) + fix tcti loading using short / long names (bsc#1159176)
* Mon Nov 29 2021 Alberto Planas Dominguez - Warp selinux into a bcond
* Thu Nov 25 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_tpm2-abrmd.service.patch
* Sat Jul 17 2021 Callum Farmer - Move selinux devel file to devel subpackage
* Wed Jul 14 2021 Callum Farmer - Update to version 2.4.0: - Service start depends on systemd device unit: dev-tpm0.device. - Numerous memory leaks. - udev settle service deprecation warnings. - StandardOutput=syslog deprecation warnings.- Add selinux module files- Move dbus files out of /etc
* Wed Jun 09 2021 Alberto Planas Dominguez - Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077). In MicroOS systems the recommendations are not installed, making the service fail to initialize: Failed to instantiate TCTI
* Thu Oct 22 2020 Matthias Gerstner - update to version 2.3.3: - changes in version 2.3.1: - Fixed handle resource leak exhausting TPM resources. - changes in version 2.3.2: - Added cirrus CI specific config files to enable FreeBSD builds. - Changed test scripts to be more portable. - Changed include header paths specific to FreeBSD. - changes in version 2.3.1: - Provide meaningful exit codes on initialization failures. - Prevent systemd from starting the daemon before udev changes ownership of the TPM device node. - Prevent systemd from starting the daemon if there is no TPM device node. - Prevent systemd from restarting the daemon if it fails. - Add SELinux policy to allow daemon to resolve names. - Add SELinux policy boolean (disabled by default) to allow daemon to connect to all unreserved ports.