NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/tpm2-tss: create tss user and group for tpm /dev nodes

Browse Source 
When systemd and tpm2-tss with fapi support are enabled, the fakeroot
script fail with:

    <stdin>:35: Failed to resolve user 'tss': No such process.

When fapi support is enabled, tpm2-tss package install additional
configuration files that are expecting tss user and group exist [1].

  /etc/sysusers.d/tpm2-tss.conf
  /etc/tmpfiles.d/tpm2-tss-fapi.conf

The build fail in the fakeroot environment while handling tmpfiles
installed by tpm2-tss with fapi by host-systemd.

tss user and group is currently created by the tpm2-abrmd package but
tpm2-tss package also provide a udev rule file tpm-udev.rules [2] that
set the ownership of dev nodes /dev/tpmX and /dev/tpmrmX to tss
user/group. So tpm2-tss package must define TPM2_TSS_USERS to create
tss user and group, not tpm2-abrmd package.

So, move TPM2_ABRMD_USERS to TPM2_TSS_USERS.

Note: tpm2-abrmd is nowadays deprecated since the in-kernel Resource
      Manager (available since kernel 4.12) is preferred [3].

[1] https://github.com/tpm2-software/tpm2-tss/blob/4.1.3/INSTALL.md?plain=1#L184
[2] https://github.com/tpm2-software/tpm2-tss/blob/4.1.3/dist/tpm-udev.rules
[3] https://github.com/tpm2-software/tpm2-abrmd/blob/3.0.0/README.md?plain=1#L39

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2cdd3d1ccf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Romain Naour 2024-06-02 00:31:19 +02:00 committed by Peter Korsgaard
parent 4e5b4b26bf
commit 2a026ca501
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
package/tpm2-abrmd/tpm2-abrmd.mk
View File

@ -29,8 +29,4 @@ define TPM2_ABRMD_INSTALL_INIT_SYSV
$(TARGET_DIR)/etc/init.d/S80tpm2-abrmd $(TARGET_DIR)/etc/init.d/S80tpm2-abrmd
endef endef
define TPM2_ABRMD_USERS
tss -1 tss -1 * - - - TPM2 Access Broker & Resource Management daemon
endef
$(eval $(autotools-package)) $(eval $(autotools-package))

4
package/tpm2-tss/tpm2-tss.mk
View File

@ -42,4 +42,8 @@ else
TPM2_TSS_CONF_OPTS += --disable-fapi TPM2_TSS_CONF_OPTS += --disable-fapi
endif endif
define TPM2_TSS_USERS
tss -1 tss -1 * - - - tss user for tpm2
endef
$(eval $(autotools-package)) $(eval $(autotools-package))