Main Inclusion Report for trousers

Requirements

1. Availability:

   • source package: http://archive.ubuntu.com/ubuntu/pool/universe/t/trousers/

   • binary packages needed in main: libtspi-dev, libtspi1

   • binary packages that should remain in universe: trousers, trousers-dbg

   • available for all supported architectures

2. Rationale:

   • Build dependency of ecryptfs-utils on i386 (MainInclusionReportEcryptfsUtils)

3. Security:

   • CVE entries: none

   • Secunia history: none

   • Any binaries running as root or suid/sgid ? no

   • Any daemons ? yes, but not in the libtspi* library/headers

   • Network activity: does it open any port ? yes for trousers, no for libraries

   • Does it handle incoming network data ? yes for trousers, no for libraries

   • Does it directly (not through a library) process binary (video, audio, etc) or structured (PDF, etc) data ? no

   • Any source code review performed ? no

4. Quality assurance:

   • In what situations does the package not work out of the box without configuration ? none, it's a library

   • Does the package ask any debconf questions higher than priority 'medium' ? no

   • Debian bugs: none

   • Maintenance in Debian is vigorous ?

   • Upstream is vigorous ?

   • Upstream bug tracker: none critical

   • Hardware: Does this package deal with hardware and if so how exotic is it ? To some extent, yes; actually, it's the kernel TPM driver that deals with TPM chips on the motherboard, this package is the userspace component.

   • Is there a test suite in the upstream source or packaging? not part of the source package, but a testsuite is available in an Upstream CVS module

   • Is it enabled to run in the build? no

5. Standards compliance:

   • FHS, Debian Policy compliance ? yes

   • Debian library packaging guide standards compliance ? yes

   • Packaging system (debhelper/cdbs/dbs) ? debhelper

   • Patch system ? dpatch

   • Any packaging oddities ? no

6. Dependencies:

   • libttf2 (freetype1)
   • Are these all in main ?

     • No, libttf2 (freetype1): MainInclusionFreetype

7. Background information: Quoting debian/control:

   • Description: open-source TCG Software Stack (daemon), TrouSerS is an implementation of the Trusted Computing Group's Software Stack (TSS) specification. You can use TrouSerS to write applications that make use of your TPM hardware. TPM hardware can create, store and use RSA keys securely (without ever being exposed in memory), verify a platform's software state using cryptographic hashes and more. TrouSerS aims to be compliant with the 1.1b and 1.2 TSS specifications available from the Trusted Computing Group website at http://www.trustedcomputinggroup.org/.

   • What do upstream call this software ? trousers

   • Has it had different names in the past ? no

Reviewers

MIR bug: 247590

• Dustin Kirkland