Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: libekmfweb1 | Distribution: openSUSE:Factory:zSystems |
Version: 2.31.0 | Vendor: openSUSE |
Release: 10.1 | Build date: Thu Jun 20 15:58:08 2024 |
Group: System/Libraries | Build host: reproducible |
Size: 239601 | Source RPM: s390-tools-2.31.0-10.1.src.rpm |
Packager: https://bugs.opensuse.org | |
Url: https://github.com/ibm-s390-tools/s390-tools | |
Summary: IBM Enterprise Key Management Foundation - Web Edition client library |
libekmfweb1 is a client library that provides access to IBM' Enterprise Key Management Foundation – Web Edition.0 EKMF Web provides efficient and security-rich centralized key management for IBM z/OS data set encryption on IBM Z servers.
MIT
* Thu Jun 20 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Amended read_values.c (bsc#1226609) * Added print for 'qc_type_name', amended the layers - Updated %description in the .spec file * Thu Apr 25 2024 Dominique Leuenberger <dimstar@opensuse.org> - s390-tools-genprotimg-data needs to require filesystem in order to ensure we are not installed before potential UsrMerge migration code was running (boo#1223090). * Thu Apr 18 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applied an updated patch (bsc#1220949,bsc#1221873) * s390-tools-sles15sp6-01-parse-ipl-device-for-activation.patch * Tue Apr 16 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Amended the .spec file for x86_64 * Recommends: s390-tools-genprotimg-data * Tue Apr 16 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Amended the .spec file for s390-tools-genprotimg-data-*.noarch.rpm * Removed the dependency on it on x86_64 platform * Updated the Summary and Description of the *.noarch.rpm (bsc#1222675) * Fri Apr 12 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated the .spec file to enable Secure Execution in the Cloud (bsc#1222675) * Creates a s390-tools-genprotimg-data-*.noarch.rpm package which includes s390x bootload binaries for x86_64: - /lib/s390-tools/stage3.bin - /usr/share/s390-tools/genprotimg/stage3a.bin - /usr/share/s390-tools/genprotimg/stage3b_reloc.bin * Excludes the above binaries from the (main) s390-tools-*.s390x.rpm * Requires: s390-tools-genprotimg-data * Thu Apr 04 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - SE-tooling: New IBM host-key subject locality (s390-tools) (bsc#1222282) * s390-tools-sles15sp5-01-rust-pv-support-Armonk-in-IBM-signing-key-subject.patch * s390-tools-sles15sp6-02-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch * s390-tools-sles15sp6-03-libpv-support-Armonk-in-IBM-signing-key-subject.patch * s390-tools-sles15sp6-04-pvattest-Fix-root-ca-parsing.patch * Tue Apr 02 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Apllied a patch(bsc#1220949,bsc#1221873) * s390-tools-sles15sp6-01-parse-ipl-device-for-activation.patch * Fri Mar 15 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applied a patch (bsc#1221072) * s390-tools-sles15sp6-genprotimg-makefile.patch * Tue Mar 12 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Amended the .spec file for x86_64 (jsc#PED-7135, jsc#IBM-1309) * Wed Feb 21 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applied a patch for kdump initrd (bsc#1219471) * s390-tools-sles15sp6-kdump-initrd-59-zfcp-compat-rules.patch * Wed Feb 21 2024 ro@suse.de - Provide groups as required by RPM 4.19 * Wed Feb 07 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Upgrade s390-tools to version 2.31 (jsc#PED-3275, jsc#PED-3223) - General: * common.mak: Set default C/C++ standard to gnu11/gnu++11 - Add new tools / libraries: * pvapconfig: Tool to automatically configure APQNs in SE KVM guests * s390-tools: Provide pre-commit configuration - Changes of existing tools: * cpuplugd: Adjust to CPU 0 being no longer hotpluggable * dbginfo.sh: Check for Dynamic Partition Mode * dbginfo.sh: Update man page and copyright * rust/pv: Add user-data signing and verifying * rust/pvsecret: Add user defined signatures and verifications * zdev/dracut: Consolidate device configuration - Bug Fixes: * dbginfo.sh: Fix relative path on script copy * libkmipclient: Fix build with libxml2-2.12.0 * pvsecret: Fix panic if empty file is used as host key document * rust/pv: Fix 'elided_lifetimes_in_associated_constant' warning * Thu Feb 01 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated read_values.c (bsc#1219227) * Wed Jan 24 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated the .spec file * Explicitly specified 'ExclusiveArch: s390x x86_64' * Sun Dec 17 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated the .spec file to use gcc13 (bsc#1217838) - Amended read_values for '-S' option (bsc#1217923) * Mon Dec 04 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Upgrade s390-tools to version 2.30 (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604, jsc#PED-6649, jsc#PED-7138 ) - Add new tools / libraries: * lspai: Tool to display PAI counter sets * s390-tools: Provide a ShellCheck configuration - Changes of existing tools / libraries: * cpumf/pai: Add command line option for realtime scheduling * dbginfo.sh: enhance ethtool collection for ROCE * libutil/util_lockfile: add routine to return owning pid of file lock * lszcrypt: Improve lszcrypt output on SE guests * rust: Use a single workspace for all rust tools * zdev: limit the derivation of ZDEV_SITE_ID * zdump/df_s390: Update 'zgetdump -i' output with zlib info * zdump/dfi_s390: Support reading compressed s390_ext dumps * zipl/boot: Integrate zlib compression to single volume DASD dumper * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x * zipl: Add --no-compress option to zipl command * zkey: Also check for deconfigured and check-stopped cards - Bug Fixes: * ap_tools/ap-check: handle get-attributes between pre and post event * libutil: fix util_file_read_*() using wrong format specifiers * rust/pv: fix Invalid write of size - Amended the SUSE patches for version 2.30 - Revendored vendor.tar.gz - Removed an obsolete patch * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch * Fri Nov 24 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Provide s390-tools on x86_64 to enable Secure Execution in the Cloud (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138) * Selected tools from the s390-tools package need to be made available on x86_64. This will enable the integration of IBM Z machines running Secure Execution in a cloud environment where users don't necessarily need to have an s390x environment. - genprotimg - (for building secure images) - pvsecret - - pvattest - (for external attestation) - pvextract-hdr - * Wed Nov 15 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Fixed a logic error in read_values.c * Mon Nov 13 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> * Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest) * * * * - General: - s390-tools now supports tools written in Rust. - Add compdb Makefile target to create 'compile_commands.json' to support LSP - backends in IDEs and editors - Add new tools / libraries: * rust/pv: Library for pv tools written in rust * rust/pvsecret: Tool to manage UV-secrets * Changes of existing tools: - dbginfo.sh: Global IFS variable - genprotimg: Add support for add-secret requests - genprotimg: Build debuginfo files for bootloader - hyptop: Add real SMT utilization field - hyptop: Allow users to set speedup factor - pvattest: Add yaml-output for verify command - zipl: Build debuginfo files for bootloader * Bug Fixes: - dump2tar: Fix truncated paths - zdev/dracut: fix kdump build to integrate with site support * * * * * v2.28.0 - Changes of existing tools: - chzcrypt: Support for SE AP pass-through support - genprotimg: Add support for non-s390x architectures - lszcrypt: Support for SE AP pass-through support - zdev: Add support for autoquiesce related sysfs attributes * Bug Fixes: - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs - ap_tools/ap-check: Hold ap config file lock over get attributes - s390-tools: Fix build for ppc64le - zdev: Add missing label in the udev-rules - zdev: Add proper value input for the ZDEV_SITE_ID key - zdev: Use rename-file to avoid any symlinks created - zipl/dump: fix ngdump dracut helper script * * * * * v2.27.0 * Changes of existing tools: - s390-tools cross-compile and non-s390x support: - pkg-config is now mandatory for the build process - Add PKG_CONFIG Makefile variable to select pkg-config program; - default pkg-config or $(CROSS_COMPILE)pkg-config if - CROSS_COMPILE is set - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the architecture that will run the produced (executable) objects - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the architecture of the build system. For each Makefile variable like CC, LINK, CPP, ... there is a suffixed version of it - e.g. CC_FOR_BUILD. This is useful for cross compiling, and this naming convention is very similar to the Meson convention (see https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine). - Limit build targets for non-s390x architectures (pvattest) - dasdfmt: Fall back to full format if space release fails - dbginfo.sh: Add nstat for network and SNMP stats - dbginfo.sh: Rework crypto data collection - hyptop: Show thread util by default - zipl: Add support for list-directed IPL dump from ECKD DASD * Bug Fixes: - lszcrypt: Fix argument parsing - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev - pvextract-hdr: Fix parsing issues on little-endian systems * * * * * v2.26.0 * Remove tools / libraries: - Remove vmconvert and libvmdump in favor of vmdump file support in zdump * Changes of existing tools: - ipl_tools: Add support for list-directed IPL from ECKD DASD - lszcrypt: Display hardware filtering support capability - vmur: Remove option -c for dump file conversion (See zdump changes) - zdev: Add zfcp ber_stop parameter handling - zdump: Add vmdump dfi for vmdump format to elf format - zkey: Support EP11 host library version * Bug Fixes: - zipl: Move dump parmline processing and verification - zipl/genprotimg: Various build improvements * * * * * Removed obsolete IBM patches - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch * Removed obsolete patches for bug 1208527, and bug 1206173 - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch * Removed obsolete patch for bug 1209196 - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch * Removed obsolete patches for bug 1211008 - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch * Removed obsolete patch for bug 1213377 - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch * Removed obsolete patches for bug 1213852 - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch * Removed obsolete patch for bug 1214114 - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch * Removed obsolete patch - s390-tools-sles15sp5-fix-chown-commands-syntax.patch * Thu Nov 02 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applied a patch (jsc#PED-6539, jsc#PED-6373) * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch - Updated read_values.c (bsc#1214466, bsc#1214534) * Update read_values.c to support the new IBM z Processors - Updated SUSE's tools and their corresponding man pages (bsc#1216257) * ctc_configure * dasd_configure.opensuse * dasd_configure.8 * dasd_configure.suse * mkdump.pl.opensuse * mkdump.pl.suse * qeth_configure * qeth_configure.8 * zfcp_disk_configure * zfcp_disk_configure.8 * zfcp_host_configure.8 * zfcp_host_configure - Updated cputype script * Amended cputype to support the new IBM z Processors * Mon Aug 21 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applies patches (bsc#1213377, bsc#1213852, bsc#1214114) * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch * Thu May 04 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applied patches for ziomon: fix for SCSI devices of type disk without block dev (bsc#1211008) * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch * Tue May 02 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applies a fix, splitting of rd.zdev-parameters, in * s390-tools-ALP-zdev-live.patch * Wed Apr 19 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Tailored the .spec, added a patch * s390-tools-ALP-zdev-live.patch * Thu Mar 23 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Allow activation of devices at boot via kernel command line for live installation media (jsc#PED-2975) * Added a Source dracut-zdev-live-20230321.tar * Updated the .spec file for the new Source - Amended read_value.c * Mon Mar 13 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applied a patch (bsc#1209196) * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch * Wed Mar 08 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated cputype (bsc#1208983) * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found", when machine type was found more than once in the /proc/cpuinfo. * Tue Feb 21 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Applied the following patches (bsc#1208527, bsc#1206173) * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch * Thu Feb 16 2023 José Gómez <jose.gomez@suse.com> - Implemented read_values -u. The result of -u is a unique identifier composed of: * Machine Serial Number. * LPAR Name. * VM Name (can be optional). * Mon Feb 06 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Added patch (bsc#1207947) * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch * Wed Jan 11 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated read_values.c for z16 machine type (bsc#1206832) * Added the IBM LinuxONE Emperor 4 machine type * Updated the z16 machine type to IBM z16 A01 * Tue Jan 10 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated read_values.c for z16 machine type (bsc#1206832) * Tue Dec 27 2022 Ludwig Nussel <lnussel@suse.com> - Replace transitional %usrmerged macro with regular version check (boo#1206798) * Mon Dec 12 2022 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com> - Updated to version 2.25.0 (jsc#PED-627) * __v2.25.0 (2022-12-12)__ For Linux kernel version: 6.1 Changes of existing tools: - ap_tools: Use new mdevctl installation location - lsdasd/tunedasd/zdev: Add support to handle copy pair relations presented by the DASD driver - zdev: Add --shell command line switch to generate output suitable for shell environments - zipl: Add List-Directed IPL from ECKD DASD to support secure boot Bug Fixes: - ipl_tools: Fix chreipl node for NVMes with CONFIG_NVME_MULTIPATH - libdasd: Fix bug that prevented positive ioctl return codes - Updated s390-tools-sles15sp5-fix-chown-commands-syntax.patch to fit the current version - Removed obsolete Patch002, and Patch003 [#] Patch002: s390-tools-sles15sp5-util_lockfile-fix-includes.patch [#] Patch003: s390-tools-sles15sp5-ap_tools-ap-check-use-new-mdevctl-install-location.patch * Tue Dec 06 2022 Mark Post <mpost@suse.com> - Made extensive changes to the spec file to accomodate building this package on both openSUSE, which has implemented the "usrmerge" project, and SLES, which has not. This was accomplished by checking the usrmerged variable, and setting the value of the _mysbindir variable, accordingly. The files identified in the Thu May 26 2022 changelog entry, and also listed below, now have two versions. One for SLES, and one for openSUSE, with either ".suse" or ".opensuse" appended to the file name. The appropriate SOURCE variable is selected based on the usrmerged variable, and installed with the ".suse" or ".opensuse" suffix stripped from the name. * 59-graf.rules * dasd_configure * dasd_reload * detach_disks.sh * iucv_configure * killcdl * mkdump.pl * README.SUSE * s390-tools-sles12-update-by_id-links-on-change-and-add-action.patch * virtsetup.sh * vmlogrdr.service * Mon Nov 28 2022 Mark Post <mpost@suse.com> - Updated to version 2.24.0 (jsc#PED-627) * __v2.24.0 (2022-11-09)__ For Linux kernel version: 6.0 Add new tools / libraries: - Provide config files for checkpatch, codespell, and clang-format Changes of existing tools: - dbginfo.sh: Collect log from various distro tools (YaST, DNF, Anaconda) - dbginfo.sh: add Kubernetes data collection - libutil: Introduce util_lockfile - zdev: Add site-aware device configuration - zdump: Add support to read Protected Virtualization dumps - zipl/boot: Add secure boot trailer Bug Fixes: - ap_tools/ap-check: Reject start for control domains without usage - cpumf/lshwc: Fix incremented counter output - cpumf/pai: Fix core dump when summary flag set - dbginfo.sh: Ensure compatibility with /bin/dash shell - dbginfo.sh: Save dbginfo.sh version to dbginfo.log - zipl/src/zipl_helper.device-mapper: Fix bug in error path * __v2.23.0 (2022-08-18)__ For Linux kernel version: 5.19 Changes of existing tools: - Makefile: use common Make definition for DRACUTDIR - Makefile: use common Make definition for UDEVDIR and UDEVRULESDIR - cpacfstats: Add PAI and hotplug support - cpumf/pai: Omit file write progress information - dbginfo.sh: Get more details on lspci command - dumpconf: Prevent running the service in containers - libcpumf: Detect PMU named pai_ext - pvattest: Improve error reporting and logging - zdev: Add some --type ap examples to manpages - zkey: Use default benchmarked Argon2i with LUKS2 Bug Fixes: - dbginfo.sh: Fix accidental ftrace buffer shrinkage/free - genprotimg: Fix BIO_reset() returncode handling - libpv: Fix dependency checking - pvattest: Fix dependency checking - zipl: Fix segmentation fault when no parmline is provided * __v2.22.0 (2022-06-20)__ For Linux kernel version: 5.18 Add new tools / libraries: - ap_tools: Introduce ap_tools and the ap-check tool - cpumf/pai: Add Processor Activity Instrumentation tool - libpv: New library for PV tools - pvattest: Add new tool to create, perform, and verify attestation measurements - zipl/zdump: Add Next Gen Dump (NGDump) support Changes of existing tools: - Move man pages to System commands section (lscpumf, lshwc, pai, dbginfo.sh, zfcpdbf, zipl-switch-to-blscfg) - README.md: Add 70-chreipl-fcp-mpath.rules to the list of udev rule descriptions - Remove SysV related daemon scripts (cpacfstatsd, cpuplugd, mon_statd) - genprotimg: Move man page to section 1 for user commands - hyptop: increase initial update interval - libseckey: Adapt keymgmt_match() implementation to OpenSSL - libutil: Add util_exit_code - libutil: Introduce util_udev - zdev: Introduce the ap device type - zipl-editenv: Add zIPL multienvironment support - zipl: Implement sorting BLS entries by versions - zkey: Add initramfs hook Bug Fixes: - cmsfs-fuse: Fix enabling of hard_remove option - s390-tools: Fix typos that were detected by lintian as 'typo-in-manual-page' - zkey-kmip: Fix possible use after free - zkey: Fix EP11 host library version checking - zkey_kmip: Setup ext-lib once the APQNs have been configured * __v2.21.0 (2022-04-20)__ For Linux kernel version: 5.17 Add new tools / libraries: - libcpumf: Create library libcpumf for CPU Measurement functions Changes of existing tools: - chreipl-fcp-mpath: bundle a pre-cooked version of the manpage for build environments without access to `pandoc` - dbginfo.sh: Add multipath info to map paths to FC addressing and prio group - dbginfo.sh: Collect config files of systemd-modules-load.service - dbginfo.sh: Sort list of environment variables for readability - dbginfo.sh: Replace "which" by builtin command "type" - dbginfo.sh: Rework script formatting (indents, order) - dbginfo.sh: Update sysfs collection (excludes, messages) - genprotimg: Add Protected Virtualization (PV) dump support - genprotimg: Remove DigiCert root CA pinning - lszcrypt: Add CEX8S support - zcryptctl: Add control domain handling - zcryptstats: Add CEX8 support - zipl: Allow optional entries that are left out when files are missing - zipl: make IPL sections defined with BLS to inherit a target field - zpcictl: Add option to trigger firmware reset Bug Fixes: - cpictl: Handle excessive kernel version numbers - dbginfo.sh: Collect all places where modprobe.d config files could exist - fdasd: Fix endless menu loop on EOF - zdump/dfi: Fix segfault due to double free - zdump: Fix /dev/mem reading - zpcictl: Fix race of SCLP reset and Linux recovery * __v2.20.0 (2022-02-04)__ For Linux kernel version: 5.16 Add new tools / libraries: - Add EditorConfig configuration Changes of existing tools: - s390-tools switches to Fuse 3 as Fuse 2 is deprecated. Affected tools: cmsfs, hmcdrvfs, hsavmcore, zdsfs, zdump - chreipl-fcp-mpath: don't compress the manpage before installing it - cpictl: Report extended version information - genprotimg: Add extended kernel command line support - zdev: modify the lsblk output parser in lszdev - zipl: Add support for longer kernel command lines (now supports up to 64k length) Bug Fixes: - cpictl: Suppress messages for unwritable sysfs files - dbginfo.sh: Fix missing syslog for step create_package - lshwc: Fix CPU list parameter setup for device driver - zdev: Check for errors when removing a devtype setting - zdev: Fix path resolution for multi-mount point file systems - Updated s390-tools-sles15sp3-remove-no-pie-link-arguments.patch to fit the new version, and renamed it to s390-tools-sles15sp5-remove-no-pie-link-arguments.patch. - Added s390-tools-sles15sp5-util_lockfile-fix-includes.patch to fix a compilation problem. One source file was missing an include statement for unistd.h. - Added s390-tools-sles15sp5-ap_tools-ap-check-use-new-mdevctl-install-location.patch An executable binary was being installed under /etc, which is an FHS violation. - Modified spec file to * Change BuildRequires for fuse-devel to fuse3-devel. * Remove obsolete BuildRequires for libpfm-devel * Add a BuildRequires for mdevctl and systemd-devel * Added a %files entry for dir %{_prefix}/lib/dracut/modules.d/99ngdump * Added %config(noreplace) for the new file %{_sysconfdir}/ziplenv * Uncomment the %files entry for %{_mandir}/man7/chreipl-fcp-mpath.7%{?ext_man} Specifying ENABLE_DOC=1 is no longer needed for it to be generated. * Add %dir entries for %{_prefix}/lib/mdevctl, %{_prefix}/lib/mdevctl/scripts.d, and %{_prefix}/lib/mdevctl/scripts.d/callouts NOTE that these directories do not belong to this package, but the mdevctl package has yet to be updated to claim them. So, until that happens, we have to temporarily claim ownership of them for the s390-tools package to build. - Updated the s390-tools-rpmlintrc file to suppress two warnings about the /boot/zipl/active_devices.txt file. - Removed the following obsolete patches: * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch * s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch * s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch * s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch * s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch * s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch * s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch * s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch * s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch * s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch * s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch - Added s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch With this version, the same false positive of "array subscript 0 is outside array bounds" that was previously seen in the genprotimage/boot directory is now happening in zipl/boot. - Added s390-tools-sles15sp5-fix-chown-commands-syntax.patch to eliminate a bunch of warnings. The new version of chown complains if the deprecated 'owner.group' syntax is used instead of the 'owner:group' syntax. * Thu Nov 03 2022 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch for bsc#1204965. New IBM Z firmware requires all signed boot images to contain a trailing data block with a specific format. * Mon Jul 18 2022 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch for bsc#1201412. Initial iteration of hyptop can produce bloated values independent from the update delay set by the user. * Thu Jun 02 2022 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch to fix a build failure with gcc12. With gcc12, a "false positive" of "array subscript 0 is outside array bounds" is seen in genprotimg/boot/stage3a.c (bsc#1200131). * Thu May 26 2022 Mark Post <mpost@suse.com> - Modifed the spec file to install all binaires in /usr/sbin instead of /sbin to align with the "usrmerge" initiative in openSUSE. (bsc#1195914) Also modified the following files that SUSE provides that need to reflect this change: * 59-graf.rules * dasd_configure * dasd_reload * detach_disks.sh * iucv_configure * killcdl * mkdump.pl * README.SUSE * s390-tools-sles12-update-by_id-links-on-change-and-add-action.patch * virtsetup.sh * vmlogrdr.service - Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server When a zkey key repository is bound to the KMIP plugin, and the connection to the KMIP server is to be configired using command 'zkey kms configure --kmip-server <server>', it fails to connect to the specified KMIP server. - Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch to fix a build failure with gcc12. With gcc12, a "false positive" of "array subscript 0 is outside array bounds" is seen in genprotimg/boot/stage3a.c (bsc#1200131). * Tue May 03 2022 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch for bsc#1199128. zgetdump --info may lead to a core dump when issued for the device node (not a partition) right after installing multi-volume dump tool (without taking actual dump). * Thu Apr 14 2022 Mark Post <mpost@suse.com> - Updated the cputype script to include the model number of IBM's recently announced z16 processor. * Mon Apr 11 2022 Mark Post <mpost@suse.com> - Added the following patches for bsc#1198285: s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch The certificate verification of check_hostkeydoc is too strict and doesn't match the checking performed by genprotimg. - Added the following patch for bsc#1198284: s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch When re-enciphering the identity key and/or wrapping key of the zkey KMIP plugin via 'zkey kms reencipher', the operation completes without an error, but the secure keys are left un-reenciphered. * Fri Mar 04 2022 Martin Wilck <mwilck@suse.com> - install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639) * Tue Feb 22 2022 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch for bsc#1196255. Version 2.37+ of util-linux modified the output characters of lsblk,which breaks the parser function. - Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch for bsc#1196254. Path resolution fails when a device provides multiple mount points such as, for example, when using btrfs subvolumes, or when mounting the same file system at multiple mount points. * Wed Jan 12 2022 Mark Post <mpost@suse.com> - Upgraded to version 2.19.0 (jsc#SLE-18324) * v2.19.0 (2021-11-10)__ Add new tools / libraries: - chreipl-fcp-mpath: New toolset that uses multipath information to change the configured FCP re-IPL path on detecting issues with the current path Changes of existing tools: - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report" - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath - hsci: Add support for multiple MAC addresses Bug Fixes: - lshwc: Fix compile error for gcc <8.1 - zdump: Various clean-ups and fixes - ziomon: Correct throughput calculation in ziorep_printers - zipl: Fix segmentation fault when setting stage3_parms * v2.18.0 (2021-10-01)__ Add new tools: - scripts: Add tool for parsing sclp s390dbf logs - zdev: Add udev rule helper tool - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record Changes of existing tools: - Makefile: Fix order of build of libraries for parallel builds - dbginfo.sh: Add collection in area of timedate, coredump and --check option - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap - dbginfo.sh: Cleanup of outdated sections and general code rework - dbginfo.sh: Collect zipl boot menu entries from boot loader specification - lszcrypt: Add support for vfio-ap status field - lszcrypt: Improved output for deconfig cards and queues - lszfcp: Add linkdown case to host marker of extended output - zdev: Add auto-config for PCI and crypto devices - zdump: Introduce multi-level message logging - zipl: Add support for environment block interpretation - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled Bug Fixes: - hsavmcore: Avoid recompilation of overlay during install step - libkmipclient: Fix parsing of hex values for XML and JSON encoding - vmur/vmur.cpp: Fix error handling on transfer failure - zdump: Lots of smaller fixes across the board * v2.17.0 (2021-07-07)__ Add new tools / libraries: - hsavmcore: New utility to make the dump process with kdump more efficient - libkmipclient: Add KMIP client shared library - libseckey: Add a secure key library - lshwc: New tool to extract and list complete counter sets Changes of existing tools: - genprotimg: Add '--(enable|disable)-pckmo' options - genprotimg: Add OpenSSL 3.0 support - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed - libutil: Introduce multi-level message logging (util_log) - libutil: Introduce util_arch module - udev/dasd: Change DASD udev-rule to set none scheduler - zdsfs: Add transparent codepage conversion - zkey: Add support for KMIP-based key management systems Bug Fixes: - ttyrun-getty: Avoid conflicts with serial-getty@ - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling - dbginfo: add KVM data collection for server and guest - fix lszdev - genprotimg: Add missing return values in error paths - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys - znetconf: avoid conflict with "chzdev -e" * v2.16.0 (2021-02-19)__ Add new tool: - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces) Changes of existing tools: - genprotimg: Add host-key document verification support - genprotimg: boot: Make boot loader -march=z900 compatible - libekmfweb: Make install directory for shared libraries configurable - lsdasd: Add FC Endpoint Security information - make: Add address sanitizer support - netboot: Add version information to scripts - netboot: Bump busybox version in pxelinux.0 build - zdev: Add FC Endpoint Security information for DASD devices - zdev: Add build option to update initial RAM-disk by default - zkey-ekmfweb: Avoid sequence number clash when generating keys - zkey/zkey-ekmfweb: Install KMS plugins into configurable location - zkey: Add support to store LUKS2 dummy passphrase in key repository Bug Fixes: - dasdfmt: Fix segfault when an incorrect option is specified - genprotimg: Fix several build issues - genprotimg: Require argument for 'ramdisk' and 'parmfile' options - zcryptstats: Fix handling of partial results with many domains - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting - zipl/boot: Fix memory use after free in stage2 - zipl/boot: Fix potential heap overflow in stage2 - zipl: Fix reading 4k disk's geometry - Added the following two IBM patches: * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch - Removed the following obsolete patches * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch - Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file. - Removed unnecessary defattr statements in the files section. * Fri Nov 12 2021 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on reading offline pages. (bsc#1192599) - Added %{version} to the Requires: libekmfweb1 for the libekmfweb1-devel package. * Mon Oct 18 2021 Mark Post <mpost@suse.com> - Updated the spec file to correspond to the changes made to the location and name of the kernel image in the kernel-zfcpdump package (bsc#1189841) - Did some spec file cleanup based on the recommendations from spec-cleaner. * Fri Jun 18 2021 Mark Post <mpost@suse.com> - Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet again). If more DASD volumes are to be formatted than are allowed by the "maximum number to do in parallel" parameter, dasdfmt waits until one of the child processes ends before starting another. For YaST to be able to figure out how many cylinders a particular DASD volume has, that information has to be output for _all_ of the volumes, before any of the child processes are spawned. (bsc#1187012) * Wed May 26 2021 Mark Post <mpost@suse.com> - Modified the following patches to correct the output from the dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820) * s390-tools-sles15sp3-Format-devices-in-parallel.patch * s390-tools-sles15sp3-Implement-Y-yast_mode.patch * Thu May 06 2021 Mark Post <mpost@suse.com> - Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding a fflush(stdout) statement so that the dasdfmt command would produce the correct output for YaST. (bsc#1182816, bsc#1182820) - Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch to have the correct offset for hunk #2 to apply without warnings. * Wed Apr 14 2021 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch dasd: change default scheduler to reduce CPU consumption (bsc#1183810) - Modified s390-tools-sles12-create-filesystem-links.patch to fit after applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch - Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810. * Mon Mar 08 2021 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch (bsc#1183039) IPL is not working when bootloader is installed on a SCSI disk with 4k physical blocksize without using a devicemapper target. - Added s390-tools-sles15sp3-remove-no-pie-link-arguments.patch so that we can build on systems with binutils 2.36 and higher. Without this, the build fails because that version of the ld command doesn't recognize "-no-pie" an acceptable argument. - Updated the mkdump.pl script to make the name of the temporary configuration file in /tmp/ unpredictable. (bsc#1182876) * Sat Feb 27 2021 Mark Post <mpost@suse.com> - Updated detach_disks.sh to not use predictable temporary file names. (bsc#1182777, CVE-2021-25316) - Made for the following changes for bsc#1182816: * Updated s390-tools-sles15sp3-Format-devices-in-parallel.patch to change all instances of the progress bar from printing "#" to printing the process number of the DASD volume being formatted. * Updated s390-tools-sles15sp3-Implement-Y-yast_mode.patch to print out the numbder of cylinders in a device, as was done in the prior versions of this patch, but was missed when modifying it for SLES15 SP3. * Added s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch because otherwise a warning message from dasdfmt is being generated that could interfere with YaST properly processing the progress of the formatting process. * Wed Feb 17 2021 Mark Post <mpost@suse.com> - Added s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch (bsc#1182113) Problem: The KMS configuration property names to store the CCA and EP11 APQNs are incorrect, i.e. swapped. Solution: Correct the KMS configuration property names. * Thu Jan 28 2021 Mark Post <mpost@suse.com> - Moved %dir %{_libdir}/zkey and %{_libdir}/zkey/zkey-ekmfweb.so from the libekfmweb1 package to the main package since it is a plugin for the zkey command, and not a shared library. (bsc#1180534)
/usr/lib64/libekmfweb.so.1 /usr/lib64/libekmfweb.so.1.0
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Jul 9 12:37:36 2024