From 363091adbaef0f3cd5bbc8619165eff92c2e7b51865f86c3ee130acc5b4bfb0e Mon Sep 17 00:00:00 2001 From: Alberto Planas Dominguez Date: Tue, 24 May 2022 14:35:19 +0000 Subject: [PATCH] Accepting request 979004 from home:aplanas:branches:security - Update to version 0.1.0+git.1653314004.ceda2ec: * Skip serialization of optional fields * Make support for legacy python revocation actions optional * main: Do not try to load CA cert if mTLS is disabled * CI: Add packit to run end-to-end tests * GNUmakefile: Install shim.py * Add service for secure mount * secure_mount: Do not try to give ownership to root * secure_mount: Rewrite check_mount() * main: Ignore original ownership when unzipping files * Drop privileges to run as normal user and group * main: Mount secure mount before dropping the privileges * main: Open files that require privilege at the beginning * quotes_handler: Fix measured boot list encoding * Fix typo in config_get() * Add option to disable mTLS * Update actix-web to 4, remove tokio 0.2 dependencies * crypto: Add helper function to convert public key to PEM string * Add ansasaki as maintainer OBS-URL: https://build.opensuse.org/request/show/979004 OBS-URL: https://build.opensuse.org/package/show/security/rust-keylime?expand=0&rev=13 --- _servicedata | 2 +- ...eylime-0.1.0+git.1649449492.59856c2.tar.xz | 3 --- ...eylime-0.1.0+git.1653314004.ceda2ec.tar.xz | 3 +++ rust-keylime.changes | 23 +++++++++++++++++++ rust-keylime.spec | 2 +- vendor.tar.xz | 4 ++-- 6 files changed, 30 insertions(+), 7 deletions(-) delete mode 100644 rust-keylime-0.1.0+git.1649449492.59856c2.tar.xz create mode 100644 rust-keylime-0.1.0+git.1653314004.ceda2ec.tar.xz diff --git a/_servicedata b/_servicedata index 19c66bd..a78d195 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/keylime/rust-keylime.git - 59856c2bbf4b8e99d94e2ee3ea6546be95a3fde0 \ No newline at end of file + ceda2ecb1e903e502f5d93ef0361c5e724abee85 \ No newline at end of file diff --git a/rust-keylime-0.1.0+git.1649449492.59856c2.tar.xz b/rust-keylime-0.1.0+git.1649449492.59856c2.tar.xz deleted file mode 100644 index 1361edf..0000000 --- a/rust-keylime-0.1.0+git.1649449492.59856c2.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5c018ef9138b8b70c819b10e74feb1ad32500d114cc0e166f71673f189d1e4a0 -size 114820 diff --git a/rust-keylime-0.1.0+git.1653314004.ceda2ec.tar.xz b/rust-keylime-0.1.0+git.1653314004.ceda2ec.tar.xz new file mode 100644 index 0000000..1eb9db9 --- /dev/null +++ b/rust-keylime-0.1.0+git.1653314004.ceda2ec.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:64bd7d5c1e19c9eaa5eeeeb0e5c848148689be05de6928b4a5cda3fdb8e3cba8 +size 114932 diff --git a/rust-keylime.changes b/rust-keylime.changes index 3899f5e..154fdc0 100644 --- a/rust-keylime.changes +++ b/rust-keylime.changes @@ -1,3 +1,26 @@ +------------------------------------------------------------------- +Tue May 24 14:10:38 UTC 2022 - aplanas@suse.com + +- Update to version 0.1.0+git.1653314004.ceda2ec: + * Skip serialization of optional fields + * Make support for legacy python revocation actions optional + * main: Do not try to load CA cert if mTLS is disabled + * CI: Add packit to run end-to-end tests + * GNUmakefile: Install shim.py + * Add service for secure mount + * secure_mount: Do not try to give ownership to root + * secure_mount: Rewrite check_mount() + * main: Ignore original ownership when unzipping files + * Drop privileges to run as normal user and group + * main: Mount secure mount before dropping the privileges + * main: Open files that require privilege at the beginning + * quotes_handler: Fix measured boot list encoding + * Fix typo in config_get() + * Add option to disable mTLS + * Update actix-web to 4, remove tokio 0.2 dependencies + * crypto: Add helper function to convert public key to PEM string + * Add ansasaki as maintainer + ------------------------------------------------------------------- Wed Apr 13 09:54:42 UTC 2022 - aplanas@suse.com diff --git a/rust-keylime.spec b/rust-keylime.spec index 16a3607..eeeb232 100644 --- a/rust-keylime.spec +++ b/rust-keylime.spec @@ -18,7 +18,7 @@ %global rustflags '-Clink-arg=-Wl,-z,relro,-z,now' Name: rust-keylime -Version: 0.1.0+git.1649449492.59856c2 +Version: 0.1.0+git.1653314004.ceda2ec Release: 0 Summary: Rust implementation of the keylime agent License: Apache-2.0 AND MIT diff --git a/vendor.tar.xz b/vendor.tar.xz index 1ea3d73..6c8f6ca 100644 --- a/vendor.tar.xz +++ b/vendor.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:83154a9871d3350ed4c7089b9ed278fdeb4f5afbd68ee856cccf1b5256669604 -size 16978784 +oid sha256:fe4e1766ea1f5b9f8edc878f26e23b3b3ff81b88cc575b83dc1cc3564c45108e +size 15261332