keylime-verifier-7.3.0-13.el9_3> M Mv ĉJ4!!%joLne)Ip-Bm5 ']e releng@rockylinux.org p-Bm5 ']LV@$: :$7E 9o( hoqw!2L̄`Ge] m"Zt fA+{|I%-S- a'Qnoja̘\l\ʑWLi >V@. zÒ0ð ~g¿Q{ ta2/% ͨS լs%-<pwR@kF8\"]S>1yHEx>,+Z/~]| BI}ި7KE ǒw $oQoSb3o)%t nKsQu` cqs|lF{.[5- PkH;H7-u146Candf?JIVVºWtlM&߸(/TMBq/67?C|iYpWĉb7445d5bf12af1216a101ec3b680a4605766858cb06c0e36ebd10886e171eb2037077cb187405d73188f389c0ecaf02730539be0?̻E@N-hr aP>C?d " H%) dp`|      Ir   (48@9: >?%@-G8HTIpXxY\]^<bd'e,f1l4tLuhvwxy LPCkeylime-verifier7.3.013.el9_3The Python Keylime Verifier componentThe Keylime Verifier continuously verifies the integrity state of the machine that the agent is running on.epb-54c479b0-897c-4ec6-aeb3-2c45f7f37fb7-b-x86-64\Rocky Linux 9.3Rocky Enterprise Software FoundationMITRocky Linux Build System (Peridot) Unspecifiedhttps://github.com/keylime/keylimelinuxx86_64/usr/bin/keylime_upgrade_config --component verifier >/dev/null if [ $1 -eq 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Initial installation /usr/lib/systemd/systemd-update-helper install-system-units keylime_verifier.service || : fi exit 0 if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package removal, not upgrade /usr/lib/systemd/systemd-update-helper remove-system-units keylime_verifier.service || : fi if [ $1 -ge 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package upgrade, not uninstall /usr/lib/systemd/systemd-update-helper mark-restart-system-units keylime_verifier.service || : fi'&,^A@큤A큤eeeed Led L1b8e02995f2ff360e2825446c3b4a06a2ce440b55e3846babdf5cebab897dc63eb6f0ea3cc60527ba4a735e7afcc044368e9cc41efe06bc10ceec3d007d56208cdabdbaf322e60a7fe45ab82d571d24b5b124483bb1b3ebfb2c5ca8dc210596514351369d20d8212f6768029a90833d53554ea468a77186ea3018ac674a8fec1cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30keylimekeylimerootrootrootrootrootkeylimekeylimerootrootrootrootrootkeylime-7.3.0-13.el9_3.src.rpmconfig(keylime-verifier)keylime-verifierkeylime-verifier(x86-64) @    /bin/sh/bin/sh/bin/sh/usr/bin/python3config(keylime-verifier)keylime-basepython3-keylimerpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)7.3.0-13.el9_37.3.0-13.el9_37.3.0-13.el9_33.0.4-14.6.0-14.0-15.4.18-14.16.1.3e@e.w@e#@edid@d@d@dd@dhd.@d@cGc@c@cr-c pccccb@bbbSergio Correia - 7.3.0-13Anderson Toshiyuki Sasaki - 7.3.0-12Anderson Toshiyuki Sasaki - 7.3.0-11Anderson Toshiyuki Sasaki - 7.3.0-10Sergio Correia - 7.3.0-9Sergio Correia - 7.3.0-8Anderson Toshiyuki Sasaki - 7.3.0-7Sergio Correia - 7.3.0-6Anderson Toshiyuki Sasaki - 7.3.0-5Sergio Correia - 7.3.0-4Sergio Correia - 7.3.0-3Patrik Koncity - 7.3.0-2Sergio Correia - 7.3.0-1Sergio Correia - 6.5.2-4Sergio Correia - 6.5.2-3Patrik Koncity - 6.5.2-2Sergio Correia - 6.5.2-1Sergio Correia - 6.5.0-1Sergio Correia - 6.4.3-1Patrik Koncity - 6.4.2-6Patrik Koncity - 6.4.2-5Patrik Koncity - 6.4.2-4Patrik Koncity - 6.4.2-3Sergio Correia - 6.4.2-2Sergio Correia - 6.4.2-1Sergio Correia - 6.4.1-1- Backport fix for CVE-2023-3674 Resolves: RHEL-21013- Set the generator and timestamp in create_policy.py Related: RHEL-11866- Suppress unnecessary error message Related: RHEL-11866- Restore allowlist generation script Resolves: RHEL-11866 Resolves: RHEL-11867- Rebuild for properly tagging the resulting build Resolves: RHEL-1898- Add missing dependencies python3-jinja2 and util-linux Resolves: RHEL-1898- Automatically update agent API version Resolves: RHEL-1518- Fix registrar is subject to a DoS against SSL (CVE-2023-38200) Resolves: rhbz#2222694- Fix challenge-protocol bypass during agent registration (CVE-2023-38201) Resolves: rhbz#2222695- Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets Resolves: RHEL-475- Fix Keylime configuration upgrades issues introduced in last rebase Resolves: RHEL-475 - Handle session close using a session manager Resolves: RHEL-1252 - Add ignores for EV_PLATFORM_CONFIG_FLAGS Resolves: RHEL-947- Keylime SELinux policy provides more restricted ports. - New SELinux label for ports used by keylime. - Adding tabrmd interfaces allow unix stream socket communication and dbus communication. - Allow the keylime_server_t domain to get the attributes of all filesystems. Resolves: RHEL-595 Resolves: RHEL-390 Resolves: RHEL-948- Update to 7.3.0 Resolves: RHEL-475- Backport upstream PR#1240 - logging: remove option to log into separate file Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime- Remove leftover policy file Related: rhbz#2152135- Use keylime selinux policy from upstream. Resolves: rhbz#2152135- Update to 6.5.2 Resolves: CVE-2022-3500 Resolves: rhbz#2138167 - agent fails IMA attestation when one scripts is executed quickly after the other Resolves: rhbz#2140670 - Segmentation fault in /usr/share/keylime/create_mb_refstate script Resolves: rhbz#142009 - Registrar may crash during EK validation when require_ek_cert is enabled- Update to 6.5.0 Resolves: rhbz#2120686 - Keylime configuration is too complex- Update to 6.4.3 Resolves: rhbz#2121044 - Error parsing EK ASN.1 certificate of Nuvoton HW TPM- Update keylime SELinux policy - Resolves: rhbz#2121058- Update keylime SELinux policy and removed duplicate rules - Resolves: rhbz#2121058- Update keylime SELinux policy - Resolves: rhbz#2121058- Add keylime-selinux policy as subpackage - See https://fedoraproject.org/wiki/SELinux/IndependentPolicy - Resolves: rhbz#2121058- Fix efivar-libs dependency Related: rhbz#2082989- Update to 6.4.2 Related: rhbz#2082989- Add keylime to RHEL-9 Resolves: rhbz#2082989/bin/sh/bin/sh/bin/sh7.3.0-13.el9_37.3.0-13.el9_37.3.0-13.el9_3verifier.confverifier.conf.dkeylime_cakeylime_verifierkeylime_verifier.servicekeylime-verifierLICENSE/etc/keylime//usr/bin//usr/lib/systemd/system//usr/share/licenses//usr/share/licenses/keylime-verifier/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19x86_64-redhat-linux-gnuASCII textdirectoryPython script, ASCII text executableRRutf-8a091d5624f747e6db9c468f9eb87da9e48aa95985a6f963a240f8f99f44ac73e7431db316440e25aab15c4102daa7022d5962373612abaebc6ce0608f402e940?(/hʴ#3LYqm1h#$CNÉa? {q%}J?-!"K}MOkjET8eI=^N&-=6 Qdo[ňExWcT Tn|?#ixtPPn:".,aszصUծMo͟}"2%n% -:P /r-u0ʌz :R!&M3]Ȕu"a7vqx(bL\6,\`(%jFsu'$cyoս7˟.!?;&#Ԫ56qՏˡעR^QZ]|unΙG٘acQ!nt?yM?QU +d0d@9n)lB6egﭳ~+VՂ-%fl!Ie$![#`h.G->m u]VQ @84H~GL\gwnu/܊9{Ӗz$dCCA+3uM+FrSquŘcrsm̽Z)gNt [в0𰾲9c֥ߎ,|[#Ffߖƾ/;kV gvʶNuI,$D@hph 6-eTGE*E_t9A%lrRp2V_Ž'Aw/Jv,v/&nFGVUЖҷ8EjP7n\ck1aG]vYm{zN;[H:17"¦eR_#]42#U9v|_v@1ЌvLʗ=Jh4+7/wg{EF(z(A%WBZnePg؉ayNrE/gd.Qf#p(FCf24.EFZdX43syVt:N h-fgE&Aah&$*Y7<8|DqV1Oǃ㑉/2T"<$Veey4xd]~[ɗDSՇ"s<iz L8<4P3ٯK/6HiH*Rh6.̤Fq1h2I`Dͱ'1##97Lʜݨg\⎥b2czpe``AzmN ,XłPCgNl̙ȥ"$<ءY7ͷy1>VUED `k01P8paȸdc>/_ WubM+]_o(`ܚE9$pİ(hrH,Վ5.2 X080 K"CsPAsD$Pф 2. vYd\ 40h2,j84\%cP *|Rp~О]˗9cXcؖʞ JoRzM]mvfj#URcF̿*?X*Ȁ.*qr٭GQ{%{c!gV¶$d]5Kpro'{~gjrʖ_]T0oUÿz_6z/FG pQ51gjɷY&~$cqfbsF/HҘ8[c]?۷ؗGR;o5.? }Qz[En[]4tSiI+sP "ɓ}dHE3P@0p|dm1Dt{p %_pΠBęCPL!bJga8K;FvʗĊ!3KO(=(O$,\'1]ʔ)+!(&c%!X4n1 81L^ bϱB bK׽"zKj%&O'2~BBl ֯5(p_J p=U& 厙S8o-%}Ѽ#@YP&t`UnH, lwҙI`ulu.J?/f.4 mnu-Վ^))5sx4Rs7"r3wXæ4{'ihN2^9VeojWbt)`C_(]{*CQ(&%sBzWC½y;͐P>t?QFnVv }碏u@'450ǫHa,Z'FĦ5ЏmQ)6&e@siM{+j`p+eh $^pRQQܼv2qCT, J\+ HA@oft&vqdLaTbʏ=orJ[jGkV<]0-Σvo_dc2?^S*l\Mb,u 9-EfәQ!SvV qGc] )w7O 1Ru<+e.z'lKܠ#3 ԗW()~nW/. $' L2f}[6Bv?0POxPh[k! K'֦_>"p zDhjZRW4e=--Q̻g ֡bQtS%D^e:? Za_]!s =˧lzՊxQ%yV@3G#GBʄ†qX NIO^}ƒ<>XUɪ.j}Nπ;}DBEs>mzN JDktyQii5O(-OŧRPe,}tjPQ8W)m8ӺN%SƁF퀏r6Cպƃ5"vW`wpI+̀)ZvS95]o4BÅ7CS'Ũw 5T&{U3 pKt~N*yy DB15M> =~`yXCh%Nƈ,jibՈ/+ pwxKibz\thݕ4}˯m#~#GbkLijtr8 ;8!fE9>q6FsKe6z%ڽ XfW 9(2*PΈHc%-t~Ac8a1ZGTG#TK )dP Ybo_2B =s'~ '>ϐc]́S]`#bqހ"/ݧSbO博)!,@s)`zHP!}:ꏽԗnC:),Ƹy -+B9ͫ̃κj%4d}%sǣu62)V u?w"} ;,OYoE$jeƺBByC^isyKCt;uuH(n\D"cYޕdz+o$23&|jUHRߊ'd 0HLLuAӷtPBrx&uH!#m\'o2[+s.z^Q``|u KJ|0?8? 5|t l+9FmyQ (E՞A*c _RximVFz%"XGD6|on|SBXbuCg!WdxiC˱rg ~dF罠R]}k}\jzb28Y@gY!t%d,;bᑣ x`9/Y2!173oc ȹ PrꗱZ|;ޒD)`yeiT׷hZ A ~۔j8 ^[@B?ta4~iݮ6UMiGYE.e_Yj^D= wbj|/?&aE(y`# Q1 !Lb%2 RweJC욛jfx ;@1pzF48!'lj@-`@I-A`>-z a%6lrv :z9QCSxj:M\Bv>Y)D :z:1N9F`PssF?D/pVqgCw |2=9 =aw9o\f`ٝXi+t3ֆ@`tDP& ,k]s†̩\]=c@#?RkҘ p\ٳzZ$ σ#+o_.enFGқ<>/^Duқ9*X.zK*Y5?p$ cUX^Ań0hۀW#^^ \87$F0+bzO4 |L Bl`]:L6f uK$I:a%A":n`<[=]00a FP̶v }Q˭iB 5%Q@Y#gbnUvuf޽TS9.1-jbY(Vh[- Y W>)gjŚ'=$;$>-CjZ]y +! @?knt~ a"LM#Iϐc #䷑<2``4~2>xo=i02܅ew fm1R9a`izJʛĉrSx)WpT8DJft+cpJ@N9v :ٸI]nԀ>"Psä ``J6&|m -W/?=D,py Nz McdR=y).'Y}jc;Yt"zS^PB( hl{xl(ڙڑ݌ 5C vz0[ƭ)ؒt|H#K*u۰@=',)82>m o#QSsI&vDed, o4$.=P:v=},Yy gqV m3/X@6vw)^wMf("@.A\{Ff}T ?~h0ܨ#ֈEkYwU׹WH4?r[?V :)*VcB Ti/87;k+a{$ 82Jlo;gHz6,-^85ݰUexV8.MePw1":4Y*37#r;rGbUǵ]O)2bE'ClRpp#p@p4R:M"F A(֍T@6U1M'OR/jPl. [h}֋Jgw, q+pZLΒ)u gtI5@8&(\q둙І"5TEZhg0͛Φȓg(Ԁ$6p1nQn=o"]0$7"S$a42Ҹ?iY1A×oq q9뼯xqc\U߀$3p%JhwBx^u! [cʧECAP*iQd 0/鿠{%9>Tw՛ N41,ؗDH Ux3]4;|HB(Gآi8^ThOߗ@9@ aGc3=zF*VOGo  In3$h 8GLDI{@0!DP9I浐n8H=uuB5yDGkPJbЏˤܡ6%ꏄm+&Ve?~E9ׯf\/X5:DR쌫+ݖc+tiޚ21I/ԲLR+l{K@mtG39'ov$P5X?M0Y(NȄHߠk}xd+,\dH+?4"MVL-cMz 8 2fM\t}]b(vg1J#gor\//6flI^#VURIN7kŐ ypa{$זú #xC ;'o)X2uXprVJzԳeY@< p.waMjA1 ˾)y͡G^%In*!՛mǏ9n^L*OI!RM/?l\4fݳ;Gm`8!Jh3wv(^#Xh1z6s-nJ*9m7GµN^ ͐nP S46=`zAW B(9!n56rURw. .ՀbEm