libimaevm3-1.4-150400.3.2.1 < > , C4 e$>p9| ğFk;1"n (eY|l +m?pP"/X2/nfQo(]yirVН` G`\)䷄i&vtkBJ0& фD#.F\VƢ|&X*
-yVN4Ԙ` 8RED WmNīS92$ :`S;\q*)H mfOTy5e;>-e7\쐞]Qܯ9ȏ > @ .< ? ., d
= . ? j p x
< \ ,
`
( 8 9 @ : > ) @ ) F ) G ) H * I *, X *4 Y *@ \ *d ] * ^ * b +V c + d , e , f , l , u , v , w -l x - y - z - - - - .( C libimaevm3 1.4 150400.3.2.1 IMA/EVM control utility libary This package provides the shared library for IMA/EVM (Integrity
Measurement Architecture/Extended Verification Module). e$>h02-armsrv3 SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://sourceforge.net/projects/linux-ima/ linux aarch64
99 FA큤A큤 e$:e$:e$>aaae$>a f0dccb1fa3cc0f2be55fc30fb5c209d3f1e9e02cb2020671cdb3b2c3882428bd 44bdbb321292e8c0e2984d17c9564adfb497800e41851b9d2ae20b14c01f6b8c 4979bbf94c12bba64c293a759390e909c9bfa63103c4a1e9acce085efb6e30a7 2688f38076022649f68b81ce52ce35abe486091f869e8aa342d2f5cb355a050a 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 libimaevm.so.3.0.0 root root root root root root root root root root root root root root root root ima-evm-utils-1.4-150400.3.2.1.src.rpm libimaevm.so.3()(64bit) libimaevm3 libimaevm3(aarch-64) @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libcrypto.so.1.1(OPENSSL_1_1_1)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 a __u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz meissner@suse.com pvorel@suse.cz mpluskal@suse.com meissner@suse.com matthias.gerstner@suse.com jengelh@inai.de matthias.gerstner@suse.com meissner@suse.com meissner@suse.com p.drouand@gmail.com p.drouand@gmail.com - Update to version 1.4
* Elliptic curve support and tests
* PKCS11 support and tests
* Ability to manually specify the keyid included in the IMA xattr
* Improve IMA measurement list per TPM bank verification
* Linking with IBM TSS
* Set default hash algorithm in package configuration
* (Minimal) support and test EVM portable signatures
* CI testing:
* Refresh and include new distros
* Podman support
* GitHub Actions
* Limit "sudo" usage
* Misc bug fixes and code cleanup
* Fix static analysis bug reports, memory leaks
* Remove experimental code that was never upstreamed in the kernel
* Use unsigned variable, remove unused variables, etc
- Upstream bumped soname to 3.0.0 - Update to version 1.3.2
* Bugfixes: importing keys
* NEW: Docker based travis distro testing
* Travis bugfixes, code cleanup, software version update,
and script removal
* Initial travis testing
- Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch
(patch from this release)
- Add make check + dependencies (getfattr => attr, xxd => vim) - Fix missing new line in help
(0001-help-Add-missing-new-line-for-ignore-violations.patch) - Update to version 1.3.1
* "--pcrs" support for per crypto algorithm
* Drop/rename "ima_measurement" options
* Moved this summary from "Changelog" to "NEWS", removing
requirement for GNU empty files
* Distro build fixes
* Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this
release) - Use %autosetup -p1 - Remove suse_version check for tpm2-0-tss-devel as the package is available
for back as far as SLE 12 SP2 and respective openSUSE versions (also check
was wrong, should have been 1500). - Fixes from previous SR (reported by fvogt):
* Move ibmtss runtime dependency to evmctl package
* Remove dependencies to devel package (should not be needed) - Update to version 1.3
version 1.3 new features:
* NEW ima-evm-utils regression test infrastructure with two initial
tests:
- ima_hash.test: calculate/verify different crypto hash algorithms
- sign_verify.test: EVM and IMA sign/verify signature tests
* TPM 2.0 support
- Calculate the new per TPM 2.0 bank template data digest
- Support original padding the SHA1 template data digest
- Compare ALL the re-calculated TPM 2.0 bank PCRs against the
TPM 2.0 bank PCR values
- Calculate the per TPM bank "boot_aggregate" values, including
PCRs 8 & 9 in calculation
- Support reading the per TPM 2.0 Bank PCRs using Intel's TSS
- boot_aggregate.test: compare the calculated "boot_aggregate"
values with the "boot_aggregate" value included in the IMA
measurement.
* TPM 1.2 support
- Additionally support reading the TPM 1.2 PCRs from a supplied file
("--pcrs" option)
* Based on original IMA LTP and standalone version support
- Calculate the TPM 1.2 "boot_aggregate" based on the exported
TPM 1.2 BIOS event log.
- In addition to verifying the IMA measurement list against the
the TPM PCRs, verify the IMA template data digest against the
template data. (Based on LTP "--verify" option.)
- Ignore file measurement violations while verifying the IMA
measurment list. (Based on LTP "--validate" option.)
- Verify the file data signature included in the measurement list
based on the file hash also included in the measurement list
(--verify-sig)
- Support original "ima" template (mixed templates not supported)
* Support "sm3" crypto name
Bug fixes and code cleanup:
* Don't exit with -1 on failure, exit with 125
* On signature verification failure, include pathname.
* Provide minimal hash_info.h file in case one doesn't exist, needed
by the ima-evm-utils regression tests.
* On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs
* Fix hash_algo type comparison mismatch
* Simplify/clean up code
* Address compiler complaints and failures
* Fix memory allocations and leaks
* Sanity check provided input files are regular files
* Revert making "tsspcrread" a compile build time decision.
* Limit additional messages based on log level (-v)
- Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch
- Upstream bumped soname to 2.0.0
- Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss
as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd;
better to use libtss2-esys and libtss2-rc than require tsspcrread binary in
runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same
logic as runtime dependency for devel package
- Mark COPYING as %license - Update to version 1.2.1 (included changes of unreleased v1.2)
version 1.2 new features:
* Generate EVM signatures based on the specified hash algorithm
* include "security.apparmor" in EVM signature
* Add support for writing & verifying "user.xxxx" xattrs for testing
* Support Strebog/Gost hash functions
* Add OpenSSL engine support
* Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures
* Support verifying multiple signatures at once
* Support new template "buf" field and warn about other unknown fields
* Improve OpenSSL error reporting
* Support reading TPM 2.0 PCRs using tsspcrread
Bug fixes and code cleanup:
* Update manpage stylesheet detection
* Fix xattr.h include file
* On error when reading TPM PCRs, don't log gargabe
* Properly return keyid string to calc_keyid_v1/v2 callers, caused by
limiting keyid output to verbose mode
* Fix hash buffer overflow caused by EVM support for larger hashes,
defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts".
* Linked with libcrypto instead of OpenSSL
* Updated Autotools, replacing INCLUDES with AM_CPPFLAGS
* Include new "hash-info.gen" in tar
* Log the hash algorithm, not just the hash value
* Fixed memory leaks in: EV_MD_CTX, init_public_keys
* Fixed other warnings/bugs discovered by clang, coverity
* Remove indirect calls in verify_hash() to improve code readability
* Don't fallback to using sha1
* Namespace some too generic object names
* Make functions/arrays static if possible
- Upstream bumped soname to 1.0.0 in v1.2
- Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2) - ima-evm-utils-xattr.patch: xattr.h is now libattr.h - Update to version 1.1
* Support the new openssl 1.1 api
* Support for validating multiple pcrs
* Verify the measurement list signature based on the list digest
* Verify the "ima-sig" measurement list using multiple keys
* Fixed parsing the measurement template data field length
* Portable & immutable EVM signatures (new format)
* Multiple fixes that have been lingering in the next branch. Some
are for experimental features that are not yet supported in the
kernel.
- Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got
backward compatible support for openssl 1.1). - Small spec file cleanup with spec-cleaner - ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947) - added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima
header can't be included if the openssl headers are missing - No need to remove .a files which don't exist.
- Drop extraneous ldconfig call on preun.
- Update RPM groups and descriptions. - ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the
"current" version of stylesheet to make the build work again
- adjusted spec file to apply stylesheet patch to SLE12 as well - Add ima-evm-utils to SLES. (FATE#321603) - ima-evm-utils-fix-docbook-xsl-directory.patch:
fixed the nwalsh docbook directory again - Update to version 1.0
* Recursive hashing
* Immutable EVM signatures (experimental)
* Command 'ima_clear' to remove xattrs
* Support for passing password to the library
* Support for asking password safely from the user - Update to version 0.9
* Updated README
* man page generated and added to the package
* Use additional SMACK xattrs for EVM signature generation
* Signing functions moved to libimaevm for external use (RPM)
* Fixed setting of correct hash header
- Add additional requirements; asciidoc, docbook-xsl-stylesheets,
libattr-devel and libxslt-tools
- Remove COPYING from sources; upstream provides one now
- Remove automake.patch; "test" directory isn't provided by upstream
anymore
- Remove ima-evm-utils-xattr.patch; libimaevm0 does link against
libattr now
- Split package in three subpackage
* libimaevm0: contains shared library
* -devel: contains header and examples files
* evmctl: the kernel signing tool
- Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path
where Make is looking for docbook.xsl /sbin/ldconfig /sbin/ldconfig h02-armsrv3 1710236734 1.4-150400.3.2.1 1.4-150400.3.2.1 libimaevm.so.3 libimaevm.so.3.0.0 libimaevm3 AUTHORS NEWS README libimaevm3 COPYING /usr/lib64/ /usr/share/doc/packages/ /usr/share/doc/packages/libimaevm3/ /usr/share/licenses/ /usr/share/licenses/libimaevm3/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:32908/SUSE_SLE-15-SP4_Update/561bf2e1cf1e0f7a0b2912744ac11c6f-ima-evm-utils.SUSE_SLE-15-SP4_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=81e063967c132d1bac7cad4da11d5f3453446ad6, stripped directory ASCII text P R R R R R R R aZ< ¨ utf-8 f42a30465cd6fb710df8f34d097c2f34610fa01ffccb5866cf0dc4d52e274777 ? 7zXZ
! t/%N] "k%r=d" r/.g>[3ų<5_R|0 -QB-H鎒 PMup݇N;"VK̋ys:KuAhw ̚rxTF=mxA\Mf;imR^zRAŭ ۂ\'5zUrLN@/gT`O^ CIa 6$}FҡjYH>R7dh;y!9|uB!
N&j* UHEP`pM߇_#u BjMn !| Q!'ZOۺCDi CT
w| ],|qPnA: /y+N 9ꌠ7(.D4Dk A&nRC
C;o >yk(ϭp!Iе[8@>ބv ~hye] 3SJ
v*R/"Ebqt2`!cPrN3чG=3NKN '3snqs° yR@*RyzՌF!Sgђ9>A|ɒjW)h#)$c<).}6wu
hS''JZRоUik#)dGY,JlZ>e qG#!&z%h] O_#o}[-1SeM X ̐~y<
x2pT,j?!; 7%i0,؋UH2|XOO _ԙR>{;Ixxwiڞ=2gG~wۄǭZiˉpSC[.gj{' JB~7,
VsǏw
De|D uQhwnc:I^שȪ>L. c:No]_6@9r[aPɒD]#[BLrB y@LLanqXdTBfM5rc}BW ჹl$p5?PQg:&]]{F-?@,'K ʳg &{lklLO,(R*o) pS|dբ5 2_~Ɠ[߱3껖K⹀5 o?bn0 >ҘBµ-u~RKfE|!ʩ9&%ʟ58] d7 u!?R֯g .$Q\i
sy \@ˮ 7e8^?
; |]j
s(< L/:˽Z+V
%qG(06
xݙeJUH=م]S&7~,[8v>WWy¨u-u?G FQ0 *z/_'+ϴY*q Dr>CA(^(N3 FYKͽV1<M8 P"(k]7(mUXam/++Y_ BYbݎN+R$\9*GUrWb
_o8 z" U]p0At mA |ͯaqX'
ZH c:M>8V]{5;17d]DmnB~f<Fbh^<XGxh͕Dc
>y~)!*Q d a 2V7vs r14ކi}#J[o9|cJEo<' FIҡ]GT87âNrO#։XW|ח I-&F 1;k {"3)s Vsĵ#[f.J˔eF:Wb5.KgT =" ZZvhHVzβ% 0MS^Lj(
_e$B(\|A4ɦdIe4rx5$?-kq!Xd^Yɫ߮3NۣK
K]gm_w'SXw*G-|N y^}c/Z R8 Q$匄|x-
GN N0MxMXʕDyjڃgpXC
\ׇz]Yٮ!U
.N
@JUR7 t@@D u=R, )KD >ڭ7, 0~qw31WNjEֱI/`ORhL&U!~M>#U8{0Q( cr"ra@/&E ߡ^FdOC?i饋;zƆN'9_J1*GNTYպډsZB/&61j0 y~xInALQa`]t șo"6ɘ $3fa[|^늳^|VA !J 0
YZ