rpm/tboot
SHA256
1
0
Fork 0
forked from pool/tboot
Code Pull Requests Activity

Accepting request 838277 from security

Browse Source 
- update to new upstream release 1.9.12:
    - changes from 1.9.12:
        - Release localities in S3 flow for CRB interface
        - Config.mk, safestringlib/makefile : allow tool overrides
        - safestringlib: fix warnings with GCC 6.4.0
        - Strip executable file before generating tboot.gz
        - Add support for EFI memory map parse/modification
        - Add SHA384 and SHA512 digest algorithms
        - lcptools-v2: add pconf2 policy element support
        - tb_polgen: Add SHA384 and SHA512 support
        - Disable GCC9 address-of-packed-member warning
        - Fix warnings after "Avoid unsafe functions" scan
        - Use SHA256 as default hashing algorithm
    - changes from 1.9.11:
        - tb_polgen: Add support for SHA256
        - Configure IOMMU before executing GETSEC[SENTER]
        - SINIT ACM can have padding, handle that when checking size
    - disable-address-of-packed-member-warning.patch: now contained upstream
    - tboot-grub2-fix-xen-submenu-name.patch: refreshed

OBS-URL: https://build.opensuse.org/request/show/838277
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tboot?expand=0&rev=42
This commit is contained in:
Dominique Leuenberger
2020-09-29 17:02:10 +00:00
committed by Git OBS Bridge
parent 70d33262ad 227e619386
commit 936439feed
6 changed files with 34 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
disable-address-of-packed-member-warning.patch
View File

@@ -1,25 +0,0 @@
From 1cf1c3e6af1f43555de7ec89cd1e8bc3ea0aaefe Mon Sep 17 00:00:00 2001
From: Yunying Sun <yunying.sun@intel.com>
Date: Mon, 13 May 2019 17:26:13 +0800
Subject: [PATCH] disable address of packed member warning
---
Config.mk | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Config.mk b/Config.mk
index 6a64d1a..27bce1b 100644
--- a/Config.mk
+++ b/Config.mk
@@ -43,7 +43,7 @@ CFLAGS_WARN = -Wall -Wformat-security -Werror -Wstrict-prototypes \
-Wextra -Winit-self -Wswitch-default -Wunused-parameter \
-Wwrite-strings \
$(call cc-option,$(CC),-Wlogical-op,) \
- -Wno-missing-field-initializers
+ -Wno-missing-field-initializers -Wno-address-of-packed-member
AS = as
LD = ld
--
2.21.0

3
tboot-1.9.10.tar.gz
View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:03879712edbf42e82c586fb2c9dfa26c1b6fa885cb0c935dcf3caed8294bd798
size 707101

3
tboot-1.9.12.tar.gz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:007212deacab8eb159d71449766f9b2e0523439f1c4fd64d1932eb38cb60e053
size 717624

8
tboot-grub2-fix-xen-submenu-name.patch
View File

@@ -4,13 +4,13 @@ Subject: fix xen submenu name to show tboot version
References: bnc#865815
Patch-Mainline: no
Index: tboot-1.9.10/tboot/20_linux_xen_tboot
Index: tboot-1.9.12/tboot/20_linux_xen_tboot
===================================================================
--- tboot-1.9.10.orig/tboot/20_linux_xen_tboot
+++ tboot-1.9.10/tboot/20_linux_xen_tboot
--- tboot-1.9.12.orig/tboot/20_linux_xen_tboot
+++ tboot-1.9.12/tboot/20_linux_xen_tboot
@@ -232,7 +232,7 @@ while [ "x${xen_list}" != "x" ] ; do
rel_tboot_dirname=`make_system_path_relative_to_its_root $tboot_dirname`
tboot_version="1.9.10"
tboot_version="1.9.12"
list="${linux_list}"
- echo "submenu \"Xen ${xen_version}\" \"Tboot ${tboot_version}\"{"
+ echo "submenu \"Xen ${xen_version} with Tboot ${tboot_version}\"{"

23
tboot.changes
View File

@@ -1,3 +1,26 @@
-------------------------------------------------------------------
Mon Sep 28 12:14:22 UTC 2020 - matthias.gerstner@suse.com
- update to new upstream release 1.9.12:
- changes from 1.9.12:
- Release localities in S3 flow for CRB interface
- Config.mk, safestringlib/makefile : allow tool overrides
- safestringlib: fix warnings with GCC 6.4.0
- Strip executable file before generating tboot.gz
- Add support for EFI memory map parse/modification
- Add SHA384 and SHA512 digest algorithms
- lcptools-v2: add pconf2 policy element support
- tb_polgen: Add SHA384 and SHA512 support
- Disable GCC9 address-of-packed-member warning
- Fix warnings after "Avoid unsafe functions" scan
- Use SHA256 as default hashing algorithm
- changes from 1.9.11:
- tb_polgen: Add support for SHA256
- Configure IOMMU before executing GETSEC[SENTER]
- SINIT ACM can have padding, handle that when checking size
- disable-address-of-packed-member-warning.patch: now contained upstream
- tboot-grub2-fix-xen-submenu-name.patch: refreshed
-------------------------------------------------------------------
Fri Jul 12 16:24:27 UTC 2019 - Martin Liška <mliska@suse.cz>

12
tboot.spec
View File

@@ -1,7 +1,7 @@
#
# spec file for package tboot
#
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,20 +17,17 @@
Name: tboot
%define ver 1.9.10
Version: 20190520_%{ver}
%define ver 1.9.12
Version: 20200429_%{ver}
Release: 0
Summary: Program for performing a verified launch using Intel TXT
License: BSD-3-Clause
Group: Productivity/Security
Url: http://sourceforge.net/projects/tboot/
URL: http://sourceforge.net/projects/tboot/
Source0: http://downloads.sourceforge.net/project/tboot/tboot/tboot-%{ver}.tar.gz
Patch3: tboot-grub2-fix-menu-in-xen-host-server.patch
Patch4: tboot-grub2-fix-xen-submenu-name.patch
Patch7: tboot-distributor.patch
# This patch should be removed once upstream has a stock solution for the
# gcc-9 warning
Patch8: disable-address-of-packed-member-warning.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
ExclusiveArch: %{ix86} x86_64
BuildRequires: openssl-devel
@@ -57,7 +54,6 @@ verified launch of an OS kernel/VMM.
%patch3 -p1
%patch4 -p1
%patch7 -p1
%patch8 -p1
%build
# Tumbleweed now uses -flto=3 by default which gives us trouble with the