Matthias Gerstner
f5802a1cf0
(bsc#1197532). This prevents arbitrary users from meddling with TPM state and thus potential denial-of-service vectors. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-abrmd?expand=0&rev=65
17 lines
594 B
Diff
17 lines
594 B
Diff
Index: tpm2-abrmd-2.4.0/dist/tpm2-abrmd.conf
|
|
===================================================================
|
|
--- tpm2-abrmd-2.4.0.orig/dist/tpm2-abrmd.conf
|
|
+++ tpm2-abrmd-2.4.0/dist/tpm2-abrmd.conf
|
|
@@ -7,8 +7,10 @@
|
|
</policy>
|
|
<policy user="root">
|
|
<allow own="com.intel.tss2.Tabrmd"/>
|
|
+ <allow send_destination="com.intel.tss2.Tabrmd"/>
|
|
+ <allow receive_sender="com.intel.tss2.Tabrmd"/>
|
|
</policy>
|
|
- <policy context="default">
|
|
+ <policy group="tss">
|
|
<allow send_destination="com.intel.tss2.Tabrmd"/>
|
|
<allow receive_sender="com.intel.tss2.Tabrmd"/>
|
|
</policy>
|