Debian Patches

Status for tboot/1.10.5-4

Patch Description Author Forwarded Bugs Origin Last update
upstream_changeset_658.patch # HG changeset patch
# User Pawel Randzio <pawel.randzio@intel.com>
# Date 1646837604 -3600
# Wed Mar 09 15:53:24 2022 +0100
# Node ID 9cda8c127b0a7bb11561befbaa9ecf1130763fcf
# Parent 5941842afb661f0e78085cb1317781d362583a38
Fixed a typo in man page for lcp2_crtpollist

diff -r 5941842afb66 -r 9cda8c127b0a docs/man/lcp2_crtpollist.8
no
upstream_changeset_659.patch # HG changeset patch
# User Timo Lindfors <timo.lindfors@iki.fi>
# Date 1646900891 -7200
# Thu Mar 10 10:28:11 2022 +0200
# Node ID 9c625ab2035bae1fc38787025f74d2937600223b
# Parent 9cda8c127b0a7bb11561befbaa9ecf1130763fcf
Without this patch

txt-acminfo 5th_gen_i5_i7_SINIT_79.BIN

segfaults. This issue was introduced in

o changeset: 627:d8a8e17f6d41
| user: Lukasz Hawrylko <lukas...@in...>
| date: Thu May 13 16:04:27 2021 +0200
| summary: Check for client/server match when selecting SINIT


diff -r 9cda8c127b0a -r 9c625ab2035b tboot/common/loader.c
no
upstream_changeset_660.patch # HG changeset patch
# User Timo Lindfors <timo.lindfors@iki.fi>
# Date 1647554321 -7200
# Thu Mar 17 23:58:41 2022 +0200
# Node ID 97aaba204e327e32dc064418e67bad7045aaaccf
# Parent 9c625ab2035bae1fc38787025f74d2937600223b
Ignore modules that overlap with internal data structures
Without this patch the system can go to an infinite reboot loop as
corrupted module causes the system to reset.


diff -r 9c625ab2035b -r 97aaba204e32 include/config.h
no
upstream_changeset_661.patch # HG changeset patch
# User Timo Lindfors <timo.lindfors@iki.fi>
# Date 1647554325 -7200
# Thu Mar 17 23:58:45 2022 +0200
# Node ID b35cb59d10c51d9ec901833898ca9e3065bd4f27
# Parent 97aaba204e327e32dc064418e67bad7045aaaccf
Introduce GRUB_TBOOT_SINIT_LIST for selecting SINIT modules to use

diff -r 97aaba204e32 -r b35cb59d10c5 tboot/20_linux_tboot
no
upstream_changeset_662.patch # HG changeset patch
# User Timo Lindfors <timo.lindfors@iki.fi>
# Date 1647554330 -7200
# Thu Mar 17 23:58:50 2022 +0200
# Node ID 206a47f3e9d2c18c8a3db082216ee6fc3c5d475c
# Parent b35cb59d10c51d9ec901833898ca9e3065bd4f27
Allow selecting only SINIT modules that match platform
This introduces GRUB_TBOOT_SINIT_SELECT_MATCHING that defaults to
false.


diff -r b35cb59d10c5 -r 206a47f3e9d2 tboot/20_linux_tboot
no
upstream_changeset_663.patch # HG changeset patch
# User Timo Lindfors <timo.lindfors@iki.fi>
# Date 1655482017 -10800
# Fri Jun 17 19:06:57 2022 +0300
# Node ID 0d80fadebdf1abd3503a8f4911bfb72de352cd73
# Parent 2bd7c7a33d49ffeb01edd0306b581b9f320316e6
Remove references to __DATE__ to make the build reproducible

diff -r 2bd7c7a33d49 -r 0d80fadebdf1 lcptools-v2/crtpol.c
no
upstream_changeset_664.patch # HG changeset patch
# User Timo Lindfors <timo.lindfors@iki.fi>
# Date 1655455151 -10800
# Fri Jun 17 11:39:11 2022 +0300
# Node ID 2bd7c7a33d49ffeb01edd0306b581b9f320316e6
# Parent 206a47f3e9d2c18c8a3db082216ee6fc3c5d475c
Use CPPFLAGS supplied by the environment during the build

This makes it possible to use distribution-wide security hardening
options automatically with tboot builds. This commit only adds
CPPFLAGS to userland utilities as there is a risk of regressions if
such hardening options are set for the tboot binary itself.

diff -r 206a47f3e9d2 -r 2bd7c7a33d49 lcptools-v2/Makefile
no

All known versions for source package 'tboot'

Links