HomeFreeBSD

security/trousers: Fix tcsd.conf permissions

Description

security/trousers: Fix tcsd.conf permissions

It turns out that tcsd requires the ownership of tcsd.conf file to be
set to root:_tss. See trousers-0.3.14_3/src/tcsd/tcsd_conf.c for
details. Otherwise, tcsd fails:

  1. service tcsd start Starting tcsd. /usr/local/etc/rc.d/tcsd: WARNING: failed to start tcsd
  2. tail /var/log/messages Nov 4 11:24:43 x TCSD[1298]: TrouSerS ERROR: TCSD config file (/usr/local/etc/tcsd.conf) must be user/group root/_tss Nov 4 11:24:43 x 0mp[2372]: /usr/local/etc/rc.d/tcsd: WARNING: failed to start tcsd

Also, the mode of the configuration file has to be 640.

PR: 253858
Reported by: unitrunker <unitrunker@gmail.com>
Approved by: maintainer timeout, portmgr blanket (runtime error)
Sponsored by: Klara, Inc.

Details

Provenance
0mpAuthored on Nov 4 2022, 10:29 AM
Parents
R11:01e03aed2f7d: security/tpm-quote-tools: Add new port
Branches
Unknown
Tags
Unknown