Package Details: trousers 0.3.14-4

Git Clone URL: https://aur.archlinux.org/trousers.git (read-only, click to copy)
Package Base: trousers
Description: Open-source TCG Software Stack implementation for use with a TPM
Upstream URL: http://sourceforge.net/projects/trousers
Keywords: tpm
Licenses: CPL
Submitter: None
Maintainer: mutantmonkey
Last Packager: mutantmonkey
Votes: 90
Popularity: 0.38
First Submitted: 2007-12-18 23:40
Last Updated: 2020-05-23 22:40

Latest Comments

1 2 3 4 Next › Last »

hardfalcon commented on 2020-08-17 22:52

There's been a CVE discovered in TrouSerS <= 0.3.14:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24332

zezadas commented on 2020-05-21 10:00

The bug with "multiple definition of `tcsd_sa_int'" has been reported to gentoo bugs and has been solved. The bug report can be found here https://bugs.gentoo.org/707244 And the needed patch here: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=31454f0e773a3d17201258e778b5e29ea9cd7217

zsolt-donca commented on 2020-05-15 20:53

This package fails to compile for me:

/usr/bin/ld: rpc/tcstp/.libs/libtspi_la-rpc_nv.o:(.bss+0xa0): multiple definition of `tcsd_sa_int'; .libs/libtspi_la-tspi_context.o:(.bss+0xa0): first defined here
/usr/bin/ld: rpc/tcstp/.libs/libtspi_la-rpc_delegate.o:(.bss+0x0): multiple definition of `tcsd_sa_chld'; .libs/libtspi_la-tspi_context.o:(.bss+0x0): first defined here
/usr/bin/ld: rpc/tcstp/.libs/libtspi_la-rpc_delegate.o:(.bss+0xa0): multiple definition of `tcsd_sa_int'; .libs/libtspi_la-tspi_context.o:(.bss+0xa0): first defined here
/usr/bin/ld: rpc/tcstp/.libs/libtspi_la-rpc_cmk.o:(.bss+0x0): multiple definition of `tcsd_sa_chld'; .libs/libtspi_la-tspi_context.o:(.bss+0x0): first defined here
/usr/bin/ld: rpc/tcstp/.libs/libtspi_la-rpc_cmk.o:(.bss+0xa0): multiple definition of `tcsd_sa_int'; .libs/libtspi_la-tspi_context.o:(.bss+0xa0): first defined here
collect2: error: ld returned 1 exit status
make[2]: *** [Makefile:1103: libtspi.la] Error 1
make[2]: Leaving directory '/home/zdonca/.cache/yay/trousers/src/trousers-0.3.14/src/tspi'
make[1]: *** [Makefile:359: all-recursive] Error 1
make[1]: Leaving directory '/home/zdonca/.cache/yay/trousers/src/trousers-0.3.14/src'
make: *** [Makefile:397: all-recursive] Error 1

crazyh commented on 2019-02-27 11:43

It seems that PKGBUILD sets invalid permissions for data directory and configuration file:

After trousers installation and running of tcsd.service:

$ pacman -Qkk 2>&1 1<&- | grep trousers
warning: trousers: /etc/tcsd.conf (UID mismatch)
warning: trousers: /etc/tcsd.conf (GID mismatch)
warning: trousers: /etc/tcsd.conf (Permissions mismatch)
warning: trousers: /var/lib/tpm (UID mismatch)
warning: trousers: /var/lib/tpm (GID mismatch)
warning: trousers: /var/lib/tpm (Permissions mismatch)

mutantmonkey commented on 2018-11-04 20:20

No problems here.

bouk commented on 2018-11-02 17:58

I'm getting a validity error on trousers-0.3.14.tar.gz when attempting to install this package.

blackout commented on 2018-05-28 08:41

https://pastebin.com/ZvuRbcnC

C compiler cannot create executables

mutantmonkey commented on 2017-06-10 22:38

Thanks djgera!

djgera commented on 2017-05-27 22:47

I made some changes to this package, please apply it. Thanks.

* Remove install file and use sysusers/tmpfiles.
* Trigger udev from install does not look good practice.
* Avoid user/group/chmod/chown creation at build time (Debian Patch).
* Extract source in correct directory.

https://gist.github.com/djgera/c39c4c1eb08ef1e165ae640e0e02cb54

mutantmonkey commented on 2016-12-04 01:11

So it looks like the previous release of 0.3.14 had a bunch of files that weren't properly updated. For example, the ChangeLog had no mention of 0.3.14. The updated files were to correct this.

I really find the lack of care shown by upstream to be quite shocking, especially given that trousers is security-sensitive software. This is the second time they have retroactively updated their released source files. I hope that they will either be more careful going forward or that someone will write a new TCG software stack to take its place.