rpm/tpm2.0-tools
SHA256
1
0
Fork 0
forked from pool/tpm2.0-tools
Code Pull Requests Activity
df8d6a816d
tpm2.0-tools/tpm2.0-tools-fix-hardening.patch

17 lines
584 B
Diff
Raw Normal View History

Accepting request 517963 from home:mgerstner:branches:security - update to version 2.1.0: - dropped 0002-kdfa-use-openssl-for-hmac-not-tpm.patch, was backported upstream in commit 788a17abbe0000c560935ef9f31c9a6892d9ea33 - this version now can interact with the new resource manager tpm2.0-abrmd - Upstream changes: * Fix readx and writex on multiple EINTR returns. * Add support for the tabrmd TCTI. This is the new default. * Change default socket port from 2323 (the old resourcemgr) to 2321 (default simulator port). * Cherry-pick fix for CVE-2017-7524. * Fix tpm2_listpcr command line option handling. * Fix tpm2_getmanufec memory issues. OBS-URL: https://build.opensuse.org/request/show/517963 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=28
2017-08-21 18:23:48 +02:00
Index: tpm2-tools-2.1.0/configure.ac
===================================================================
--- tpm2-tools-2.1.0.orig/configure.ac
+++ tpm2-tools-2.1.0/configure.ac
@@ -121,11 +121,9 @@ AS_IF([test x"$hardening" != x"no"], [
- tpm2.0-tools-fix-hardening.patch: do not disable fortify, do not use -Wstack-protector as it warns also for non-utilized functions and then -Werror fails. OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=17
2017-06-02 09:17:27 +02:00
add_hardened_c_flag([-Wformat])
add_hardened_c_flag([-Wformat-security])
- add_hardened_c_flag([-Wstack-protector])
add_hardened_c_flag([-fstack-protector-all])
add_hardened_define_flag([-D_FORTIFY_SOURCE=2])
- add_hardened_define_flag([-U_FORTIFY_SOURCE])
add_hardened_c_flag([-fPIC])
add_hardened_ld_flag([[-shared]])
Copy Permalink