meta-mlinux.git/recipes-tpm2, branch 6.0.1 mLinux Distribution Layer MTCAP3: Fix tpm2-tss-engine for new versions of openssl 2022-04-12T18:02:03+00:00 Serhii Kostiuk serhii.o.kostiuk@globallogic.com 2022-04-09T13:53:27+00:00 906c6c78fd8a99f01a243fa272edb4ef12cb1fab Modern versions of openssl look for engine files that do not have the "lib" prefix. The current tpm2-tss-engine recipe provides a symlink from "tpm2tss.so" to "libtpm2tss.so" in the "-dev" package. Adding "-dev" packages to the image is not an option (increases the image size by more than 20 MiB) and the "-engines" package does not provide the required symlink. Provide the symlink in "tpm2-tss-engine-engines" so it can be used in the image instead of "tpm2-tss-engine-dev". 
Modern versions of openssl look for engine files that do not have the "lib"
prefix. The current tpm2-tss-engine recipe provides a symlink from "tpm2tss.so"
to "libtpm2tss.so" in the "-dev" package. Adding "-dev" packages to the image
is not an option (increases the image size by more than 20 MiB) and the
"-engines" package does not provide the required symlink.

Provide the symlink in "tpm2-tss-engine-engines" so it can be used in the image
instead of "tpm2-tss-engine-dev".
Clone and fix tpm2-tss_2.3.2.bb so to fix incorrect usage of extrausers class instead of useradd 2022-03-15T17:58:25+00:00 Mykyta Dorokhin mykyta.dorokhin@globallogic.com 2022-03-15T17:56:21+00:00 3a63f2f997b6ab20ec4e0c616b485755209fa304 Note: tpm2-tss_2.3.2.bbappend didn't work since meta-security is not included into at91 and mtk builds. Javing bbappend for the recipy that is not in the build triggers an error. 
Note: tpm2-tss_2.3.2.bbappend didn't work since meta-security is not included into at91 and mtk builds.
Javing bbappend for the recipy that is not in the build triggers an error.
Fix incorrect usage of extrausers class instead of useradd class in tpm2-tss_2.3.2.bb recipe. 2022-03-15T14:12:10+00:00 Mykyta Dorokhin mykyta.dorokhin@globallogic.com 2022-03-15T10:51:48+00:00 f9706ed8c29085ca1d1e553e3b4372f245e4ba3c Wrong usage leads to the folowing: bash# cat /etc/group | grep 1000 tss:x:1000: admin:x:1000: bash# cat /etc/passwd | grep 1000 tss:x:999:1000::/var/lib/tpm:/bin/false admin:x:1000:1000:admin:/home/admin:/bin/bash Fixed in mainline yocto (tpm2-tss_3.1.0.bb): https://git.yoctoproject.org/meta-security/commit/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.1.0.bb?id=da23c2a094b2e1a87da2932552ec96c0f842a639 
Wrong usage leads to the folowing:

 bash# cat /etc/group | grep 1000
 tss:x:1000:
 admin:x:1000:

 bash# cat /etc/passwd | grep 1000
 tss:x:999:1000::/var/lib/tpm:/bin/false
 admin:x:1000:1000:admin:/home/admin:/bin/bash

Fixed in mainline yocto (tpm2-tss_3.1.0.bb):
https://git.yoctoproject.org/meta-security/commit/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.1.0.bb?id=da23c2a094b2e1a87da2932552ec96c0f842a639