keylime-registrar-7.3.0-13.el9_3> M Mv ĉJ4!!%joLne)Ip-Bm5 ']e releng@rockylinux.org p-Bm5 ']˅ĘTHܽ2pC_̊#Gif]M +`ffgcK-0gՊ?ɦP\fX܎cTt2j_ Œ( )6,[6qPS=ZPPH3RaQyIqSv%$@:~w;ЮlmB z:3顦ퟞ _h6~HWemp=1.H\Ήwزy.O8><Q5@P:} ڞҕ #UPTtfpXbAodH_fX[5C+]ۨސ>Ɖ.Vqi[Qs?UsLÇvIf(*+DI2`2#^rq;TIA糩mK apWY/nzgbFJc-E Nm@/֭?'=SnȘ޿$Kۆ&nx/V6zG2e70ec73fba156ae494f9c78bab4906c78272d56ebf9181c60f270ad1d88ad2af2acd0d6d30d246a66591dbae194ad3885bf29be9vj<ꦗN*6[woH>C?d # C-1 lx   ( . 4Lp @  (U8`9: >=?E@MGXHpIXY\]^Jbd6e;f@lCt\utvwxyHLCkeylime-registrar7.3.013.el9_3The Keylime Registrar componentThe Keylime Registrar is a database of all agents registered with Keylime and hosts the public keys of the TPM vendors.epb-54c479b0-897c-4ec6-aeb3-2c45f7f37fb7-b-x86-64DRocky Linux 9.3Rocky Enterprise Software FoundationMITRocky Linux Build System (Peridot) Unspecifiedhttps://github.com/keylime/keylimelinuxx86_64/usr/bin/keylime_upgrade_config --component registrar >/dev/null if [ $1 -eq 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Initial installation /usr/lib/systemd/systemd-update-helper install-system-units keylime_registrar.service || : fi exit 0 if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package removal, not upgrade /usr/lib/systemd/systemd-update-helper remove-system-units keylime_registrar.service || : fi if [ $1 -ge 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package upgrade, not uninstall /usr/lib/systemd/systemd-update-helper mark-restart-system-units keylime_registrar.service || : fi # SELinux contexts are saved so that only affected files can be # relabeled after the policy module installation,^A@큤A큤eeed Led L025cc9d92e67f38cb6f72dfbb482fca5a748519f8893bed2ad75e6fd73e0d8efec194a3fe0d42d94953b8d25ec28802a0b352aa3e739f275c1e474580a7c08f8a65edeb4a73e51984822a8a0861477852a41c9a1f67ec52195334404cc54b256cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30keylimekeylimerootrootrootrootkeylimekeylimerootrootrootrootkeylime-7.3.0-13.el9_3.src.rpmconfig(keylime-registrar)keylime-registrarkeylime-registrar(x86-64) @    /bin/sh/bin/sh/bin/sh/usr/bin/python3config(keylime-registrar)keylime-basepython3-keylimerpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)7.3.0-13.el9_37.3.0-13.el9_37.3.0-13.el9_33.0.4-14.6.0-14.0-15.4.18-14.16.1.3e@e.w@e#@edid@d@d@dd@dhd.@d@cGc@c@cr-c pccccb@bbbSergio Correia - 7.3.0-13Anderson Toshiyuki Sasaki - 7.3.0-12Anderson Toshiyuki Sasaki - 7.3.0-11Anderson Toshiyuki Sasaki - 7.3.0-10Sergio Correia - 7.3.0-9Sergio Correia - 7.3.0-8Anderson Toshiyuki Sasaki - 7.3.0-7Sergio Correia - 7.3.0-6Anderson Toshiyuki Sasaki - 7.3.0-5Sergio Correia - 7.3.0-4Sergio Correia - 7.3.0-3Patrik Koncity - 7.3.0-2Sergio Correia - 7.3.0-1Sergio Correia - 6.5.2-4Sergio Correia - 6.5.2-3Patrik Koncity - 6.5.2-2Sergio Correia - 6.5.2-1Sergio Correia - 6.5.0-1Sergio Correia - 6.4.3-1Patrik Koncity - 6.4.2-6Patrik Koncity - 6.4.2-5Patrik Koncity - 6.4.2-4Patrik Koncity - 6.4.2-3Sergio Correia - 6.4.2-2Sergio Correia - 6.4.2-1Sergio Correia - 6.4.1-1- Backport fix for CVE-2023-3674 Resolves: RHEL-21013- Set the generator and timestamp in create_policy.py Related: RHEL-11866- Suppress unnecessary error message Related: RHEL-11866- Restore allowlist generation script Resolves: RHEL-11866 Resolves: RHEL-11867- Rebuild for properly tagging the resulting build Resolves: RHEL-1898- Add missing dependencies python3-jinja2 and util-linux Resolves: RHEL-1898- Automatically update agent API version Resolves: RHEL-1518- Fix registrar is subject to a DoS against SSL (CVE-2023-38200) Resolves: rhbz#2222694- Fix challenge-protocol bypass during agent registration (CVE-2023-38201) Resolves: rhbz#2222695- Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets Resolves: RHEL-475- Fix Keylime configuration upgrades issues introduced in last rebase Resolves: RHEL-475 - Handle session close using a session manager Resolves: RHEL-1252 - Add ignores for EV_PLATFORM_CONFIG_FLAGS Resolves: RHEL-947- Keylime SELinux policy provides more restricted ports. - New SELinux label for ports used by keylime. - Adding tabrmd interfaces allow unix stream socket communication and dbus communication. - Allow the keylime_server_t domain to get the attributes of all filesystems. Resolves: RHEL-595 Resolves: RHEL-390 Resolves: RHEL-948- Update to 7.3.0 Resolves: RHEL-475- Backport upstream PR#1240 - logging: remove option to log into separate file Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime- Remove leftover policy file Related: rhbz#2152135- Use keylime selinux policy from upstream. Resolves: rhbz#2152135- Update to 6.5.2 Resolves: CVE-2022-3500 Resolves: rhbz#2138167 - agent fails IMA attestation when one scripts is executed quickly after the other Resolves: rhbz#2140670 - Segmentation fault in /usr/share/keylime/create_mb_refstate script Resolves: rhbz#142009 - Registrar may crash during EK validation when require_ek_cert is enabled- Update to 6.5.0 Resolves: rhbz#2120686 - Keylime configuration is too complex- Update to 6.4.3 Resolves: rhbz#2121044 - Error parsing EK ASN.1 certificate of Nuvoton HW TPM- Update keylime SELinux policy - Resolves: rhbz#2121058- Update keylime SELinux policy and removed duplicate rules - Resolves: rhbz#2121058- Update keylime SELinux policy - Resolves: rhbz#2121058- Add keylime-selinux policy as subpackage - See https://fedoraproject.org/wiki/SELinux/IndependentPolicy - Resolves: rhbz#2121058- Fix efivar-libs dependency Related: rhbz#2082989- Update to 6.4.2 Related: rhbz#2082989- Add keylime to RHEL-9 Resolves: rhbz#2082989/bin/sh/bin/sh/bin/sh7.3.0-13.el9_37.3.0-13.el9_37.3.0-13.el9_3registrar.confregistrar.conf.dkeylime_registrarkeylime_registrar.servicekeylime-registrarLICENSE/etc/keylime//usr/bin//usr/lib/systemd/system//usr/share/licenses//usr/share/licenses/keylime-registrar/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19x86_64-redhat-linux-gnuASCII textdirectoryPython script, ASCII text executableRutf-8f0864156c27e0e6128cf969a3e2c6f019db41b4b825e55d5c208a17259f10b19127b51e34fd1c859ae3884d1b2281ec99ad80b5bbfb2b6902d01905f19ed9725?(/h x2 qTDI<׃rD+H S?7dBDo3P0&-rg,E}R )ۓu\{4QB<}#׭(5g:w$L$'R<}G"8z=4$ .A˾z_)=TrVڃa@pUD ]D!XOanB;WU;l~-x{+D> dIݲOǤ\E:P\ 葱 _6QLb9$k[>.Ʀ¢%oLr=]Ek!49{e=,?5Jyy2Ꞔ<<@e5$=b?sușsMוrg (Z5]P&_~kHd& a3p<,L, b$xq y83bXXӃ`EQx@$A-'>+LDn0{S?EHEJ&J%*R R Loi`G F%mw+zDU( zp0,PW_C=;x!=&AP&Ll(. FCLX. 0(P9(1I^$41.Bڳ QF[~38!| 6iþRÁe;Gj?߅,=~;1ٗLP@Y(X]1V"ctIEI8hQy ph'牜c {'ea!]Rdl ؑӢvn d_z[cWN A4۶92lvӺ\):^ΡNF'{ 5b~u8Kl:$ ٧\:|1{0s? [g=vȞ`@ }gbXU$oiO?tqO2:Q{oG/ǤI_ҿd-GЊ9%gBU䶕ck1Ž=ݣt/ʞfh1)W^%`mǖtz0+?xYF؝/p#{qn|9cHsƪ|Cl-mJΟ9珘OtKb_;o-^Tn ?3,6UTڱ&*pLfHHKFB3TCQ`$(*"T¢2 h;"m1B %3!(̠Q"5PT2%\ P(z 9#T b`9iHgYYM% Ob nrа PA"U (\&0̆3=tDKiƬ"$6D*bhFN_^켱fϑЗi0Q@4pHP\>X:9h ^\ȯ;0nؘ͢o[)z gvb돋ъo>~*tӏdJ7V?|遻Yn;wTXd.,4cX,, a3`9 "sQ@%.P`2(v*IP` *2`6L"A7l0@P lKeJ;Z78cXwÞ8685dɝ-,RѪZIne`MF#'=:%I=1-?#B2_Rٚ55o7ko=O{j?Zkd9e˯0:~Ʒ=jn }-ʨsyX2U3cP0 Q9A*c#I1H"2"""H$c&l1*f#&y:!dP| 􅃐6r&S;SZ-4ǢkZ3ccDœ9U> &,k15IƟ,Y (m!M;[b9im Eݒ}t(mڞ2  *p66?T(XU\Cz5P+GKJ(o`F >R-џ!\->K=pz&h0hx+TvLeHph=~Ά#5\U 8t.|O3rUDBcCg+mmElyPG#͠p($P 2 x/f] lH1*? >/%-2U]}R JݙA@#wsH1b1'7]2V6֛[`"L6 h^, :.sJ=<=mpRjcj֬l'^RtFjSn比m1FOկ{3KCp7h8nƉÄ ,Njtג'x^QJwf 龶CsqR2wI4#,p\WUMy!ڔ;a4A* SE^V ʉ#ojF%ǨE6獻ZNԲx iVv<6/ Oh-&IZrJ l u#ʶW1 \7Ȏ^23ՙׇB;^74N粦<. K]JYrſi (gNp*"ɦȮ c&%s)0k=>]>@-1 >~ZKdMi"CMҰUM2upݱb^IPm*5hqH=zVQqȻw:?yyYҘhue[ X#$L 6fսl#P} nt4*ZLڽ{ڂ9>+Z@.¾114 Uh`κB3x]R}Q*hX-pa~3 CGnG:0S դH*|@FO?]LwlMˇ G_ PN{0.9ADV6IpPFfkJ:@3j(]Uk7ZjRUb3AyL?Y-_3HRxϣ. Lm} ,sqoAp)w L$3ͷ\  Zm S ĕ.pYHqpl-W-(œwŒƒ3*tެv 8VdgD358''3$- ru2=.Mv2)Kܠ3~vN겱 4h㻩"_5+A~O"w716iT& `6ڶs49[R;$4ڙйʭ蹴-:@9ankLEABN,+އƴY(W!ƳB<;PEHljr1/ὓ@iBnG5H9TFsP=2GË {BG Y @C6@+3K= BT>\\=ΞZ @bu;oNWI? FQQ駥i,-psrP("| %d1!KvxMQ<Dn2f0}N$~U0S>fF}w,"U=iڱ?bkM T+ND2;`>>ꏖ * "|Ad>2~ryy'dF(,/܇M XO2`%upH}L5& !Tʬ1˪!lvnoUF$㙼Lj!$`D <-XpB*_ 1ݿ;dx|J10R(KrB֟W5#ͯk(c9/X 1Vkyk|i{q__L*=첇2,.@$=lxPIohFn~, YQ luEO照WX FD|ՉPo5"IdLturo۫#'*Ӯ$<6w|&(FqcD Dmvxg>P rMv]@}Q_=hPŦI}hW~ 8y@1SA#md[1jٮi^p &c.- 46հ7jTᓣQX?oh.^A}B+CH>Dbq&& q[fTց7$X`ߡ k&2bAkvC~Ug=q#0TNao(I4hKcxfBc50pUiINȲW?&O5ʞ,7}] [zՌOhp¾+HɊ|0-X^BD"xs5;(@U\B'ӒO, !JA5̩#{ 8`188Ԛҟ2wL,}z fc5j7uk8~]0&9ȭ/o40f!5({a~6ge([Oq'T[]1P1\TdzlĎ1aQPJ&h4էK:.WNbm~ H&L!-\w^D!}VRg#ղSFB<%iY^Jh. /cyjt M?rS'4Ng,7R]bԡN U-12<{h9x,TmLi߽|smZ\ qE3Em[N6ƕD/ 11J`}[)̙^X,j7^v%uXn=DJAܑ(T-G($f2ń5P*tMrkIԍ $r)#g:@to?v2` ZPap[#L<%D5 z/Z=LI.zá"t죚wنkX7C'ܐKX%"Hk&* ,qp+~1e2:-8 dS ]zNb۔,"2v /!fn @'PN7"s<5\XXny%4ffh0$mLpqΤ]6Ip|ٟS*#c^ćTvv peECI'w} l!.hF `Gfy1>u}Ee%2w;b2ӝͷ \0I=у9sws=2f9z_,kF`]bUT V}&n3L3$ N> i:Q-3(Vn/y 6Hz#&nNt81 J)9!e<&.02ib7 ź rԞVDeHdOzΨvjY"+zf 8˯P?Ū=)55MWݕjJ+o`D\2rZ]Il=`r