Package "swtpm-tools"

  swtpm (0.6.3-0ubuntu3.3) jammy; urgency=medium

  * d/usr.bin.swtpm:
    - Add sys_admin capability to apparmor profile to allow access to kernel
      modules such as tpm_vtpm_proxy (LP: #2071478)
    - Allow non-owned lockfile write access in /var/lib/libvirt/swtpm/ to fix
      apparmor denials when working with TPM2 locks (LP: #2072524)

 -- Lena Voytek <email address hidden> Tue, 30 Jul 2024 15:22:09 -0700

  swtpm (0.6.3-0ubuntu3.2) jammy; urgency=medium

  * d/p/create-user-config-files-use-correct-swtpm-localca.patch: Fix the path
    to swtpm-localca used in swtpm-create-user-config-files (LP: #2016744)

 -- Lena Voytek <email address hidden> Wed, 26 Apr 2023 15:06:00 -0700

  swtpm (0.6.3-0ubuntu3.1) jammy; urgency=medium

  * d/usr.bin.swtpm: Update apparmor profile to match swtpm upstream
    In between adding the apparmor profile to Ubuntu and merging upstream
    additional rules were used to cover more common use cases. (LP: #1992377)
    - The six capability lines fix the broken upstream unit test cases:
      test_ctrlchannel, test_vtpm_proxy, test_tpm2_file_permissions,
      test_tpm2_save_load_state_2_block, and test_tpm2_ctrlchannel2
    - owner @{HOME}/** rwk was added as using a folder in one's home directory
      is common for managing tpm states
    - Access in the tmp directory is further generalized as this is where swtpm
      interacts with qemu and libvirt
    - The ability to read from /etc/nsswitch.conf was added for vtpm proxy to
      work

 -- Lena Voytek <email address hidden> Wed, 16 Nov 2022 13:54:54 -0700