[ol9_u3_baseos_base] tboot-1:1.10.5-2.el9.x86_64

Trusted Boot (tboot) is an open source, pre-kernel/VMM module that uses
Intel Trusted Execution Technology (Intel TXT) to perform a measured
and verified launch of an OS kernel/VMM.

Changelog (Show File list) (Show related packages)

• Thu Aug 18 2022 Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-2

  - The install scriptlet in %post was choosing the first grub.cfg
    file it encountered, which was /boot/efi/EFI/redhat/grub.cfg.
    This is a stub that defines grub boot disk UUID necessary for
    proper grubenv setup, and it must not be overwritten or changed.
    Modify the scriptlet to target /boot/grub2/grub.cfg
    Additionally, remove any wrongly created /boot/grub2/x86_64-efi
    directory and recreate the correct /boot/efi/EFI/redhat/grub.cfg
    stub file.
    Added a %postun section to cleanup when removing tboot with
    dnf erase.
    Thanks to Lenny Szubowicz for the bash code to recreate the
    /boot/efi/EFI/redhat/grub.cfg stub file.
    Resolves: rhbz#2112236

• Wed May 04 2022 Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1

  - Upgrade to tboot-1.10.5-1 for fixes and updates.
  - Added a Requires line to install grub2-efi-x64-modules
  - Added a scriptlet to the tboot.spec file to automatically install
    grub2-efi-x64-modules and move them to the correct directory.
  - Removed three patches that are no longer needed.
  - Added two patches from upstream, one for a fix, the other cosemetic.
  - Resolves: rhbz#2041766
    Resolves: rhbz#2040083

• Thu Sep 30 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-6

  - Use sha256 as default hashing algorithm
    Resolves: rhbz#1935448

• Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.10.2-5

  - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688

• Wed Jul 28 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4

  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002

• Tue Jul 27 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3

  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002

• Thu Jul 22 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2

  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002

• Mon Jun 21 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1

  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374

• Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.9.11-9

  - Rebuilt for RHEL 9 BETA for openssl 3.0
    Related: rhbz#1971065

• Thu May 27 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.9.11-8

  - Add -Wno-error=deprecated-declarations to the Config.mk patch
    Resolves: rhbz#1958031