Author: Lena Voytek
Author Date: 2024-06-28 18:15:55 UTC

debian: Allow non-owner file write access in /var/lib/libvirt/swtpm/

swtpm sometimes needs to create lock files in subdirectories of
/var/lib/libvirt/swtpm/. Since libvirt sets the owner of these
subdirectories to root, apparmor blocks swtpm's access to this when set to
owner. Add write permissions for lock files without the owner restriction
tothe folder to fix wc denials.

Signed-off-by: Lena Voytek <lena.voytek@canonical.com>

Author: Stefan Berger
Author Date: 2024-06-27 18:05:59 UTC

tests: Update to ibmtpm20tss v2.3.1 with rev183 tests

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>

Author: Stefan Berger
Author Date: 2024-06-27 02:23:33 UTC

tests: Update to ibmtpm20tss v2.2.0

With patches applied to the test suite this now works with
libtpms v0.7 .. v0.10-dev.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>

Author: Stefan Berger
Author Date: 2024-06-13 13:22:29 UTC

swtpm: Use umask() to create/truncated state file rather than fchmod()

Since swtpm does not use concurrency while writing state files, set
the process umask to 0 when the state file is created or truncated for
writing and the user requested specific mode bits. This avoids an
additional syscall in the possibly timing critical path when processing
a TPM command and having to write the state.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2024-03-22 15:56:13 UTC

debian/rpm: Adjust changelog for 0.8.2 release

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2024-03-22 15:56:13 UTC

debian/rpm: Adjust changelog for 0.8.2 release

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2023-08-30 20:25:14 UTC

swtpm: Add support for --print-profiles option

Add support for --print-profiles option to print all profiles
supported by libtpms.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2023-08-21 21:58:36 UTC

swtpm_setup: Create IAK hwSerialNum from data extracted from EK cert

Create the IAK hwSerialNum from the authority key identifier and
serial number extracted from the EK certificate.

Adjust a test script that now needs to use a valid certificate for the EK
so that we can get the authority key identifier and serial from it to
create the serial number for the IAK certificate.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2023-08-16 15:16:06 UTC

debian/rpm: Adjust changelog for 0.7.4 release

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2023-08-16 15:16:06 UTC

debian/rpm: Adjust changelog for 0.7.4 release

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2022-12-08 19:13:20 UTC

debian/rpm: Adjust changelog for 0.5.5 release

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2022-09-07 19:56:51 UTC

debian/rpm: Adjust changelog for 0.6.4 release

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2022-09-07 19:56:51 UTC

debian/rpm: Adjust changelog for 0.6.4 release

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Steve Langasek
Author Date: 2021-10-23 19:19:38 UTC

Don't call autogen.sh, autoreconf takes care of this for us

Author: Stefan Berger
Author Date: 2022-02-17 18:42:22 UTC

Travis: Stop using ASAN for swtpm since one test case fails

It's not possible to recreate the issue with the failing test case
locally on Xenial, so just disable the ASAN usage on swtpm by disabling
the CFLAGS variable.

The one failing test case show this. All other ones work.

FAIL: test_parameters

=====================

Test 0: SUCCESS with parameters ''.
Test 1: SUCCESS with parameters '--createek'.
Test 2: ==27310==ASan runtime does not come first in initial library list; you should either link runtime to your application or manually preload it with LD_PRELOAD.
ERROR: Test with parameters '--take-ownership' failed.
FAIL test_parameters (exit status: 1)

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2021-10-17 21:14:35 UTC

tests: Check for permanent state file change due to TPM2_PCR_Read

Extend a test case to check whether the permanent state files changes
when a TPM2_PCR_Read() is executed. The state file change would cause
timeouts inside VMs when an fsync() is used that fully synchronzies the
state of the TPM 2 with the data on disk. The issue has been resolved in
more recent versions of libtpms (master and branches). The updated
libtpms is required if fsync() for files and directories is to be enabled.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: =?utf-8?q?Tomasz_K=C5=82oczko?=
Author Date: 2021-06-23 13:25:02 UTC

build-sys: Call autoupdate and fix some resulting issues

autoreconf from autoconf 2.71 emmits a lot of warnings:

+ autoreconf -fiv
autoreconf: export WARNINGS=
autoreconf: Entering directory '.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal --force -I m4
autoreconf: configure.ac: tracing
autoreconf: running: libtoolize --copy --force
libtoolize: putting auxiliary files in '.'.
libtoolize: copying file './ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'.
libtoolize: copying file 'm4/libtool.m4'
libtoolize: copying file 'm4/ltoptions.m4'
libtoolize: copying file 'm4/ltsugar.m4'
libtoolize: copying file 'm4/ltversion.m4'
libtoolize: copying file 'm4/lt~obsolete.m4'
autoreconf: configure.ac: not using Intltool
autoreconf: configure.ac: not using Gtkdoc
autoreconf: running: aclocal --force -I m4
autoreconf: running: /usr/bin/autoconf --force
configure.ac:29: warning: The macro `AC_CONFIG_HEADER' is obsolete.
configure.ac:29: You should run autoupdate.
./lib/autoconf/status.m4:719: AC_CONFIG_HEADER is expanded from...
configure.ac:29: the top level
configure.ac:53: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:53: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:53: the top level
configure.ac:76: warning: The macro `AC_HEADER_STDC' is obsolete.
configure.ac:76: You should run autoupdate.
./lib/autoconf/headers.m4:704: AC_HEADER_STDC is expanded from...
configure.ac:76: the top level
configure.ac:81: warning: The macro `AC_TYPE_SIGNAL' is obsolete.
configure.ac:81: You should run autoupdate.
./lib/autoconf/types.m4:776: AC_TYPE_SIGNAL is expanded from...
configure.ac:81: the top level
configure.ac:202: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:202: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:202: the top level
configure.ac:267: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:267: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:267: the top level
configure.ac:430: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:430: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:430: the top level
configure.ac:437: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:437: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:437: the top level
configure.ac:517: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:517: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:517: the top level
autoreconf: running: /usr/bin/autoheader --force
autoreconf: running: automake --add-missing --copy --force-missing
configure.ac:40: installing './compile'
configure.ac:48: installing './missing'
Makefile.am:34: warning: .PHONY was already defined in condition WITH_SELINUX, which is included in condition TRUE ...
Makefile.am:28: ... '.PHONY' previously defined here
src/swtpm/Makefile.am: installing './depcomp'
autoreconf: './config.sub' is updated
autoreconf: './config.guess' is updated
autoreconf: Leaving directory '.'

Execute autoupdate to apply all those changes.

Signed-off-by: Tomasz Kłoczko <kloczek@github.com>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2020-07-07 14:29:58 UTC

rpm/debian: Add 0.2.1-1 entry to changelog

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2020-07-07 13:42:01 UTC

rpm/debian: Add 0.1.1-1 entry to changelog

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

Author: Stefan Berger
Author Date: 2020-05-12 19:33:52 UTC

tests: Fixup test for older contextsave tools