Package: libtss2-udev
Version: 2.1.0-3
Severity: serious

Hello,

The trousers package also contains udev rules for the tpm* devices
(45-trousers.rules):

KERNEL=="tpm[0-9]*", MODE="0600", OWNER="tss", GROUP="tss"

This conflicts with the one shipped by libtss2-udev
(60-libtss2-udev.rules):

KERNEL=="tpm[0-9]*", MODE="0660", OWNER="tss"
KERNEL=="tpmrm[0-9]*", MODE="0660", OWNER="tss", GROUP="tss"

Also, the trousers package is creating the tss user with the following
command:

adduser --system --quiet --home /var/lib/tpm --shell /bin/false 
--no-create-home --group tss

While libtss2-udev creates it with:

adduser --system --ingroup tss --home /var/lib/libtss2-udev/tss 
--no-create-home --gecos "TPM2 software stack" tss

Wouldn't it be better to create these at an higher level? Create a
package being pulled by both the tpm(1) and tpm2 daemons?

Kind regards,
Laurent Bigonville

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: refpolicy

Versions of packages libtss2-udev depends on:
ii  adduser  3.118

libtss2-udev recommends no packages.

libtss2-udev suggests no packages.

-- no debconf information

Reply via email to