rust-keylime/keylime-user.conf
Alberto Planas Dominguez cc7fc9144b Accepting request 989445 from home:aplanas:branches:security
- Update to version 0.1.0+git.1657303637.5b9072a:
  * keys_handler: Use scopes to drop mutexes before await
  * Enable usage of Rust IMA emulator in E2E tests.
  * ima_emulator: Support PCR hash algorithms other than SHA-1
  * ima_entry: add IMA entry parser ported from Python Keylime
  * algorithms: Add conversion between our hash algorithms and OpenSSL's
  * Remove unused functions revocation_ip_get and revocation_port_get. Change String to &str.
  * Adjust function usage comments to account for new parameters.
  * Load config file less at startup in src/common.rs
  * GNUmakefile: Make target dependencies explicit
  * permissions: Set supplementary groups when dropping privileges
  * main: Use more descriptive message for missing files error
  * Show path when fail to load the certificate
  * tpm: Add serialization functions for structures in quotes
- Requires tpm2.0-abrmd dependency, as the kernel resource manager
  could be not enough
- Downgrade /var/run/keylime permissions
- Set "run_as" parameter to "keylime:tss"
- Create the keylime user via systemd
- Fix keylime service home directory

OBS-URL: https://build.opensuse.org/request/show/989445
OBS-URL: https://build.opensuse.org/package/show/security/rust-keylime?expand=0&rev=20
2022-07-15 13:19:45 +00:00

3 lines
73 B
Plaintext

# Type Name ID GECOS [HOME]
u keylime - "Keylime agent" /var/lib/keylime