Accepting request 492188 from home:bmwiedemann:branches:security

Add reproducible.patch to call gzip -n to make build fully reproducible

OBS-URL: https://build.opensuse.org/request/show/492188
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=60

reproducible.patch

@@ -0,0 +1,13 @@
+Index: tboot-1.9.5/tboot/Makefile
+===================================================================
+--- tboot-1.9.5.orig/tboot/Makefile
++++ tboot-1.9.5/tboot/Makefile
+@@ -32,7 +32,7 @@ OBJS := $(obj-y)
+ TARGET_LDS := $(CURDIR)/common/tboot.lds
+ 
+ $(TARGET).gz : $(TARGET)
+-	gzip -f -9 < $< > $@
++	gzip -n -f -9 < $< > $@
+ 
+ $(TARGET) : $(OBJS) $(TARGET_LDS)
+ 	$(LD) $(LDFLAGS) -T $(TARGET_LDS) -N $(OBJS) -o $(@D)/.$(@F).0

tboot.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sun Apr 30 05:29:57 UTC 2017 - bwiedemann@suse.com
+
+- Add reproducible.patch to call gzip -n to make build fully reproducible
+
 -------------------------------------------------------------------
 Fri Feb 10 16:56:03 UTC 2017 - jengelh@inai.de
 

tboot.spec

@@ -28,6 +28,8 @@ Source0:        http://downloads.sourceforge.net/project/tboot/tboot/tboot-%{ver
 Patch1:         tboot-grub2-suse.patch
 Patch3:         tboot-grub2-fix-menu-in-xen-host-server.patch
 Patch4:         tboot-grub2-fix-xen-submenu-name.patch
+# PATCH-FIX-UPSTREAM -- https://sourceforge.net/p/tboot/code/merge-requests/1/
+Patch5:         reproducible.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  openssl-devel
 BuildRequires:  trousers-devel
@@ -43,6 +45,7 @@ verified launch of an OS kernel/VMM.
 %patch1 -p1
 %patch3 -p1
 %patch4 -p1
+%patch5 -p1
 
 %build
 export CFLAGS="%{optflags}"