Commit Graph

29 Commits

Author SHA256 Message Date
Dominique Leuenberger
842b61ec70 Accepting request 960365 from security
OBS-URL: https://build.opensuse.org/request/show/960365
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=12
2022-03-09 17:47:48 +00:00
ec546eaaf3 Accepting request 960364 from home:Guillaume_G:branches:security
- Update to 1.0.0-rc2:
  * Changelog: https://github.com/parallaxsecond/parsec/compare/1.0.0-rc1...1.0.0-rc2
- Remove CryptoAuthLib (CAL) provider as it is unmaintained.

OBS-URL: https://build.opensuse.org/request/show/960364
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=23
2022-03-09 07:35:10 +00:00
Dominique Leuenberger
56f1e7d6db Accepting request 958717 from security
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/958717
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=11
2022-03-03 23:17:46 +00:00
5ffa71a25b Accepting request 957245 from home:Guillaume_G:branches:security
- Update to 1.0.0-rc1:
  * Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.1...1.0.0-rc1
- Drop upstream patch:
  * harden_parsec.service.patch

OBS-URL: https://build.opensuse.org/request/show/957245
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=21
2022-02-24 09:42:19 +00:00
Dominique Leuenberger
c9b73dbebe Accepting request 946152 from security
- Update to 0.8.1:
  * Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.0...0.8.1

OBS-URL: https://build.opensuse.org/request/show/946152
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=10
2022-01-13 22:21:29 +00:00
5bd53dc3f7 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=20 2022-01-13 13:47:48 +00:00
30a40ae621 Accepting request 946148 from home:Guillaume_G:branches:security
- Update to 0.8.0:
  * Changelog: https://github.com/parallaxsecond/parsec/compare/0.8.0...0.8.1

OBS-URL: https://build.opensuse.org/request/show/946148
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=19
2022-01-13 13:47:08 +00:00
Dominique Leuenberger
4ec5edb09e Accepting request 941864 from security
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_parsec.service.patch
  Modified:
  * parsec.service
  * Upstream submission: https://github.com/parallaxsecond/parsec/issues/569

OBS-URL: https://build.opensuse.org/request/show/941864
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=9
2021-12-21 17:40:51 +00:00
f1f6febe17 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=18 2021-12-21 15:16:33 +00:00
d532b09943 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=17 2021-12-21 15:15:55 +00:00
fad872c73b Accepting request 925351 from home:jsegitz:branches:systemdhardening:security
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/925351
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=16
2021-12-21 15:09:55 +00:00
Dominique Leuenberger
afd7c2551f Accepting request 937794 from security
- Fix /run/parsec permission to 755. This is enough for all
  users to access the service - boo#1193484 - CVE-2021-36781

OBS-URL: https://build.opensuse.org/request/show/937794
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=8
2021-12-09 18:45:45 +00:00
30810bef27 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=15 2021-12-09 13:58:41 +00:00
685234f717 Accepting request 937755 from home:Guillaume_G:branches:security
- Fix /run/parsec permission to 755. This is enough for all
  users to access the service - boo#1193484

OBS-URL: https://build.opensuse.org/request/show/937755
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=14
2021-12-09 11:06:53 +00:00
Dominique Leuenberger
21ab1ec2e2 Accepting request 921782 from security
OBS-URL: https://build.opensuse.org/request/show/921782
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=7
2021-09-27 18:09:00 +00:00
d8388a0735 Accepting request 921728 from home:Guillaume_G:branches:security
- Allow access to /run/parsec to all users
- Requires rust 1.53+ (now also available in 15.3/15-SP3 via Update)
  which allow to enable same features accross distros

OBS-URL: https://build.opensuse.org/request/show/921728
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=13
2021-09-27 12:13:40 +00:00
Dominique Leuenberger
08442b0533 Accepting request 920615 from security
OBS-URL: https://build.opensuse.org/request/show/920615
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=6
2021-09-21 19:13:17 +00:00
663a30d392 Accepting request 920614 from home:Guillaume_G:branches:security
- Update to 0.8.0:
  * Changelog: https://github.com/parallaxsecond/parsec/compare/0.7.2...0.8.0
- Drop upstream patch:
  * parsec-fix-old-rust.patch
- Disable 'trusted-service-provider' as it currently fails to build
- Disable 'jwt-svid-authenticator' (SPIFFE-based authenticator)
  on Leap, as it cannot be compiled with rust 1.43.1

OBS-URL: https://build.opensuse.org/request/show/920614
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=12
2021-09-21 09:16:10 +00:00
Dominique Leuenberger
d084f86259 Accepting request 889538 from security
OBS-URL: https://build.opensuse.org/request/show/889538
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=5
2021-04-30 22:46:54 +00:00
c8dac349e0 Accepting request 889537 from home:Guillaume_G:branches:security
- Fix build with old rust used in Leap 15.3/SLE15-SP3.
  * parsec-fix-old-rust.patch

OBS-URL: https://build.opensuse.org/request/show/889537
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=10
2021-04-30 11:37:33 +00:00
Dominique Leuenberger
eca2d05e86 Accepting request 885428 from security
OBS-URL: https://build.opensuse.org/request/show/885428
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=4
2021-04-26 14:38:56 +00:00
747332bc19 Accepting request 885427 from home:Guillaume_G:branches:security
- Requires 'tpm2-0-tss' as it holds the udev rule to make /dev/tpm*
  owned by tss user
- Requires 'libtss2-tcti-device0' as it is required to start parsec
  with TPM support
- Enable all authenticators which adds 'direct-authenticator'
- Add CryptoAuthLib template (disabled) in config.toml

OBS-URL: https://build.opensuse.org/request/show/885427
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=8
2021-04-14 15:57:17 +00:00
Richard Brown
8580c3df2b Accepting request 882707 from security
OBS-URL: https://build.opensuse.org/request/show/882707
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=3
2021-04-06 15:30:03 +00:00
d07d808112 Accepting request 882706 from home:Guillaume_G:branches:security
Drop softhsm references

OBS-URL: https://build.opensuse.org/request/show/882706
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=6
2021-04-02 10:08:52 +00:00
b023bfab1c Accepting request 882567 from home:Guillaume_G:branches:security
- Make 'parsec' user part of 'tss' group to access /dev/tpm* devices

- Update to 0.7.2:
  * Changelog: https://github.com/parallaxsecond/parsec/compare/0.6.0...0.7.2

- Recommends 'softhsm' as it is used by PKCS#11 backend
- Recommends 'opensc' as it is used to initialize HSM keys (PKCS#11 backend)
- Add PKCS#11 template (disabled) in config.toml
- Disable Tpm backend by default in config.toml

OBS-URL: https://build.opensuse.org/request/show/882567
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=5
2021-04-01 13:00:44 +00:00
Dominique Leuenberger
5f0e280799 Accepting request 848362 from security
OBS-URL: https://build.opensuse.org/request/show/848362
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=2
2020-11-13 18:00:33 +00:00
55c56f76c2 Accepting request 848361 from home:Guillaume_G:branches:security
- Enable 'all-providers' which adds 'pkcs11-provider' compared to 
  previous config
- Drop unneeded patch:
  * pkcs11-libloading-issue.patch

OBS-URL: https://build.opensuse.org/request/show/848361
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=3
2020-11-13 14:30:27 +00:00
Dominique Leuenberger
0cdf8cd906 Accepting request 845617 from security
Initial submission - v0.6.0

OBS-URL: https://build.opensuse.org/request/show/845617
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/parsec?expand=0&rev=1
2020-11-10 12:39:59 +00:00
e83954ae8f Accepting request 844364 from home:Guillaume_G
parsec service

OBS-URL: https://build.opensuse.org/request/show/844364
OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=1
2020-11-03 08:16:41 +00:00