tpm2.0-tools/tpm2.0-tools-fix-hardening.patch
Marcus Meissner df8d6a816d Accepting request 517963 from home:mgerstner:branches:security
- update to version 2.1.0:
  - dropped 0002-kdfa-use-openssl-for-hmac-not-tpm.patch, was backported
   upstream in commit 788a17abbe0000c560935ef9f31c9a6892d9ea33
  - this version now can interact with the new resource manager tpm2.0-abrmd
  - Upstream changes:
    * Fix readx and writex on multiple EINTR returns.
    * Add support for the tabrmd TCTI. This is the new default.
    * Change default socket port from 2323 (the old resourcemgr) to 2321
    (default simulator port).
    * Cherry-pick fix for CVE-2017-7524.
    * Fix tpm2_listpcr command line option handling.
    * Fix tpm2_getmanufec memory issues.

OBS-URL: https://build.opensuse.org/request/show/517963
OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=28
2017-08-21 16:23:48 +00:00

17 lines
584 B
Diff

Index: tpm2-tools-2.1.0/configure.ac
===================================================================
--- tpm2-tools-2.1.0.orig/configure.ac
+++ tpm2-tools-2.1.0/configure.ac
@@ -121,11 +121,9 @@ AS_IF([test x"$hardening" != x"no"], [
add_hardened_c_flag([-Wformat])
add_hardened_c_flag([-Wformat-security])
- add_hardened_c_flag([-Wstack-protector])
add_hardened_c_flag([-fstack-protector-all])
add_hardened_define_flag([-D_FORTIFY_SOURCE=2])
- add_hardened_define_flag([-U_FORTIFY_SOURCE])
add_hardened_c_flag([-fPIC])
add_hardened_ld_flag([[-shared]])