10 changed files with 43 additions and 521 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1,2 +1 @@
 /ima-evm-utils-*.tar.gz
-prepare_sources_result*/
--- a/.packit.yaml
+++ b/.packit.yaml
@ -1,34 +0,0 @@
-# See the documentation for more information:
-# https://packit.dev/docs/configuration/
-
-specfile_path: ima-evm-util.spec
-
-# add or remove files that should be synced
-files_to_sync:
-    - .packit.yaml
-
-# name in upstream package repository or registry (e.g. in PyPI)
-upstream_package_name: ima-evm-utils
-# downstream (Fedora) RPM package name
-downstream_package_name: ima-evm-utils
-
-jobs:
-  # This is triggered by https://release-monitoring.org/
-  - job: pull_from_upstream
-    trigger: release
-    dist_git_branches:
-      - fedora-all
-
-  # This is triggered at Fedora dist-git for creating koji build after
-  # PR in src.fedoraproject.org been merged.
-  - job: koji_build
-    trigger: commit
-    allowed_pr_authors: ["all_committers", "packit"]
-    dist_git_branches:
-      - fedora-all
-
-  # This is triggered at Fedora messaging bus about koji build finished.
-  - job: bodhi_update
-    trigger: commit
-    allowed_builders: ["all_committers", "packit"]
-    dist_git_branches:
--- a/dracut-98-integrity.conf
+++ b/dracut-98-integrity.conf
@ -1 +0,0 @@
-add_dracutmodules+=" integrity "
--- a/ima-add-sigs.sh
+++ b/ima-add-sigs.sh
@ -1,141 +0,0 @@
-#!/bin/bash
-#
-# This script add IMA signatures to installed RPM package files
-usage() {
-	echo "Add IMA signatures to installed packages."
-	cat <<EOF
-usage: $0 [--package=PACKAGE_NAME|ALL] [--ima_cert=IMA_CERT_PATH] [--reinstall_threshold=NUM]
-
-       --package
-       By default, it will add IMA sigantures to all installed package files.
-       Or you can provide a package name to only add IMA signature for files of
-       specicifed package.
-
-       --reinstall_threshold
-       When there are >reinstall_threshold (=20 by default) packages in the RPM
-       DB missing IMA signatures, reinstalling the packages to add IMA
-       signatures to the packages.  By default, IMA sigatures will be obtained
-       from the RPM DB. However the RPM DB may not have the signatures. Dectect
-       this case by checking if there are >reinstall_threshold package missing
-       IMA signatures.
-
-       --ima_cert
-       With the signing IMA cert path specified, it will also try to verify the
-       added IMA signature.
-
-EOF
-	exit 1
-}
-
-for _opt in "$@"; do
-	case "$_opt" in
-	--reinstall_threshold=*)
-		reinstall_threshold=${_opt#*=}
-		;;
-	--package=*)
-		package=${_opt#*=}
-		;;
-	--ima_cert=*)
-		ima_cert=${_opt#*=}
-		;;
-	*)
-		[[ -n $1 ]] && usage
-		;;
-	esac
-done
-
-if [[ -z $package ]] || [[ $package == ALL ]]; then
-	package="--all"
-fi
-
-abort() {
-	echo "$1"
-	exit 1
-}
-
-get_system_ima_key() {
-	source /etc/os-release
-	local -A name_map=(['Fedora Linux']="fedora" ['Red Hat Enterprise Linux']="redhatimarelease" ['CentOS Stream']='centosimarelease')
-	local version_id
-	key_name=${name_map[$NAME]}
-	version_id=${VERSION_ID/.?/}
-
-	[[ $key_name == fedora ]] && name_suffix=-ima
-	key_path=/etc/keys/ima/${key_name}-${version_id}${name_suffix}.der
-	if [[ ! -e $key_path ]]; then
-		echo "Failed to get system IMA code verification key"
-		exit 1
-	fi
-
-	echo -n "$key_path"
-}
-
-# Add IMA signatures from RPM database
-add_from_rpm_db() {
-	if ! command -v setfattr &>/dev/null; then
-		abort "Please install attr"
-	fi
-
-	if [[ -e "$ima_cert" ]]; then
-		verify_ima_cert=$ima_cert
-	else
-		verify_ima_cert=$(get_system_ima_key)
-	fi
-
-	# use "|" as deliminator since it won't be used in a filename or signature
-	while IFS="|" read -r path sig; do
-		# [[ -z "$sig" ]] somehow doesn't work for some files that don't have IMA
-		# signatures. This may be a issue of rpm
-		if [[ "$sig" != "0"* ]]; then
-			continue
-		fi
-
-		# Skip directory, soft links, non-existent files and vfat fs
-		if [[ -d "$path" || -L "$path" || ! -f "$path" || "$path" == "/boot/efi/EFI/"* ]]; then
-			continue
-		fi
-
-		# Skip some files that are created on the fly
-		if [[ $path == "/usr/share/mime/"* || $path == "/etc/pki/ca-trust/extracted/"* ]]; then
-			continue
-		fi
-
-		if ! setfattr -n security.ima "$path" -v "0x$sig"; then
-			echo "Failed to add IMA sig for $path"
-		fi
-
-		if ! evmctl ima_verify -k "$verify_ima_cert" "$path" &>/dev/null; then
-			setfattr -x security.ima "$path"
-			# When ima_cert is set, shows the verfication result for users
-			[[ -e "$ima_cert" ]] && "Failed to verify $path"
-			continue
-		fi
-
-	done < <(rpm -q --queryformat "[%{FILENAMES}|%{FILESIGNATURES}\n]" "$package")
-}
-
-# Add IMA signatures by reinstalling all packages
-add_by_reinstall() {
-	[[ $package == "--all" ]] && package='*'
-	dnf reinstall "$package" -yq >/dev/null
-}
-
-if [[ -z $reinstall_threshold ]]; then
-	if [[ $package == "--all" ]]; then
-		reinstall_threshold=20
-	else
-		if ! rpm -q --quiet "$package"; then
-			dnf install "$package" -yq >/dev/null
-			exit 0
-		fi
-		reinstall_threshold=1
-	fi
-fi
-
-unsigned_packages_in_rpm_db=$(rpm -q --queryformat "%{RSAHEADER}\n" "$package" | grep -c "^(none)$")
-
-if [[ $unsigned_packages_in_rpm_db -ge $reinstall_threshold ]]; then
-	add_by_reinstall
-else
-	add_from_rpm_db
-fi
--- a/ima-evm-utils.spec
+++ b/ima-evm-utils.spec
@ -1,31 +1,27 @@
-# If the soname gets bumped we need to ship a compat library to be able
-# to bootstrap and rebuild rpm else we end up with chicken and egg problem.
-%global bootstrap 0
+# For cases where the soname requires a bump we need to define with_compat,
+# update the package into the side-tag, update RPM (rpm-sign) into side-tag,
+# _then_ undefine with_compat and rebuild the package into the side-tag. This
+# is required to workaround the chiken-egg situation with the rpm-sign update.
+# The compat pkg must not make the compose, it's only a buildrequirement for
+# rpm-sign in a soname bump.
+%bcond_with compat

-%if 0%{bootstrap}
-%global compat_soversion 4
+
+%if %{with compat}
+%global compat_soversion 3
 %endif

 Name:    ima-evm-utils
-Version: 1.6.2
-Release: 7%{?dist}
+Version: 1.4
+Release: 5%{?dist}
 Summary: IMA/EVM support utilities
-License: GPL-2.0-or-later
-Url:     https://github.com/linux-integrity/
-Source0: %{url}/ima-evm-utils/releases/download/v%{version}/%{name}-%{version}.tar.gz
+License: GPLv2
+Url:     http://linux-ima.sourceforge.net/
+Source0: http://sourceforge.net/projects/linux-ima/files/ima-evm-utils/%{name}-%{version}.tar.gz

-# IMA setup tools
-Source2: dracut-98-integrity.conf
-Source3: ima-add-sigs.sh
-Source4: ima-setup.sh
-Source100: policy-01-appraise-executable-and-lib-signatures
-Source101: policy-02-keylime-remote-attestation
-Source200: policy_list
-
-%if 0%{bootstrap}
 # compat source and patches
-Source10: ima-evm-utils-1.5.tar.gz
-BuildRequires: openssl-devel-engine
+%if %{with compat}
+Source10: ima-evm-utils-1.4.tar.gz
 %endif

 BuildRequires: asciidoc
@ -38,10 +34,6 @@ BuildRequires: libxslt
 BuildRequires: make
 BuildRequires: openssl-devel
 BuildRequires: tpm2-tss-devel
-Requires: %{name}-libs = %{version}-%{release}
-Requires: rpm-plugin-ima
-Requires: keyutils
-Requires: attr

 %description
 The Trusted Computing Group(TCG) run-time Integrity Measurement Architecture
@ -51,45 +43,38 @@ systems extended attributes. The Extended Verification Module (EVM) prevents
 unauthorized changes to these extended attributes on the file system.
 ima-evm-utils is used to prepare the file system for these extended attributes.

-%package libs
-Summary: Libraries for %{name}
-License: LGPL-2.0-or-later
-
-# to avoid ima-evm-utils and rpm-plugin-ima being installed on upgrade
-# to Fedora 41 - https://bugzilla.redhat.com/show_bug.cgi?id=2319827
-Obsoletes: ima-evm-utils < 1.6
-
-%description libs
-This package contains the libraries for applications to use
-ima-evm-utils functionality.
-
 %package devel
 Summary: Development files for %{name}
 Requires: %{name} = %{version}-%{release}
-Requires: %{name}-libs = %{version}-%{release}

 %description devel
 This package provides the header files for %{name}

-%prep
-%autosetup -p1
+%if %{with compat}
+%package -n %{name}%{compat_soversion}
+Summary: Compatibility package of %{name}

-%if 0%{bootstrap}
+%description -n %{name}%{compat_soversion}
+This package provides the libimaevm.so.%{compat_soversion} relative to %{name}-1.3
+%endif
+
+%prep
+%setup -q
+
+%if %{with compat}
 mkdir compat/
-pushd compat/
-tar -zxf %{SOURCE10} --strip-components=1
-popd
+tar -zxf %{SOURCE10} --strip-components=1 -C compat/
 %endif

 %build
 autoreconf -vif
-%configure --disable-static --disable-engine
+%configure --disable-static
 %make_build

-%if 0%{bootstrap}
+%if %{with compat}
 pushd compat/
 autoreconf -vif
-%configure --disable-static --disable-engine
+%configure --disable-static
 %make_build
 popd
 %endif
@ -98,7 +83,7 @@ popd
 %make_install
 find %{buildroot} -type f -name "*.la" -delete

-%if 0%{bootstrap}
+%if %{with compat}
 pushd compat/src/.libs/
 install -p libimaevm.so.%{compat_soversion}.0.0 %{buildroot}%{_libdir}/libimaevm.so.%{compat_soversion}.0.0
 ln -s -f %{buildroot}%{_libdir}/libimaevm.so.%{compat_soversion}.0.0 %{buildroot}%{_libdir}/libimaevm.so.%{compat_soversion}
@ -107,111 +92,26 @@ popd

 %ldconfig_scriptlets

-# IMA setup tools
-install -D -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_datadir}/ima/dracut-98-integrity.conf
-
-mkdir -p -m 755 $RPM_BUILD_ROOT%{_datadir}/ima/policies
-while IFS= read -r policy_file
-do
-  install -m 644 %{_sourcedir}/policy-"$policy_file" $RPM_BUILD_ROOT%{_datadir}/ima/policies/"$policy_file"
-done < %{SOURCE200}
-
-install -D %{SOURCE3} $RPM_BUILD_ROOT%{_bindir}/ima-add-sigs
-install -D %{SOURCE4} $RPM_BUILD_ROOT%{_bindir}/ima-setup
-
 %files
-%license LICENSES.txt COPYING
+%license COPYING
 %doc NEWS README AUTHORS
 %{_bindir}/evmctl
-%{_mandir}/man1/evmctl*
-
-# IMA setup tools
-%{_datadir}/ima/policies
-%{_datadir}/ima/dracut-98-integrity.conf
-%{_bindir}/ima-add-sigs
-%{_bindir}/ima-setup
-
-%files libs
-%license LICENSES.txt COPYING.LGPL
 # if you need to bump the soname version, coordinate with dependent packages
-%{_libdir}/libimaevm.so.5*
-%if 0%{bootstrap}
-%{_libdir}/libimaevm.so.%{compat_soversion}*
-%endif
+%{_libdir}/libimaevm.so.3*
+%{_mandir}/man1/evmctl*

 %files devel
 %{_pkgdocdir}/*.sh
 %{_includedir}/imaevm.h
 %{_libdir}/libimaevm.so

+%if %{with compat}
+%files -n %{name}%{compat_soversion}
+%{_libdir}/libimaevm.so.%{compat_soversion}
+%{_libdir}/libimaevm.so.%{compat_soversion}.0.0
+%endif
+
 %changelog
-* Thu Oct 16 2025 Coiby Xu <coxu@redhat.com> - 1.6.2-7
- ima-add-sigs: Use RSAHEADER to tell if a package has been signed
-
-* Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
-
-* Mon Mar 03 2025 Coiby Xu <coxu@redhat.com> - 1.6.2-5
- release 1.6.2-5
-
-* Fri Jan 17 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
-
-* Thu Oct 31 2024 Coiby Xu <coxu@redhat.com> - 1.6.2-3
- Skip unsupported file systems for sample appraisal rule
-
-* Fri Oct 18 2024 Adam Williamson <awilliam@redhat.com> - 1.6.2-2
- ima-evm-utils-libs obsoletes ima-evm-utils < 1.6 for rhbz#2319827
-
-* Sat Aug 31 2024 Peter Robinson <pbrobinson@fedoraproject.org> - 1.6.2-1
- Update to 1.6.2
-
-* Fri Aug 30 2024 Peter Robinson <pbrobinson@fedoraproject.org> - 1.6.1-2
- Fix sign_hash when built without openssl engine support (rhbz#2297927)
-
-* Thu Aug 29 2024 Peter Robinson <pbrobinson@fedoraproject.org> - 1.6.1-1
- Update to 1.6.1
- Update project URLs
-
-* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
-
-* Thu Jul 04 2024 Peter Robinson <pbrobinson@fedoraproject.org> - 1.6-1
- Update to 1.6
-
-* Wed Jul 03 2024 Peter Robinson <pbrobinson@fedoraproject.org> - 1.6-0
- Bootstrap 1.6
- Update license for new details
- Spec file updates
-
-* Thu Jun 06 2024 Coiby Xu <coxu@redhat.com> - 1.5-5
- add ima-evm-utils-libs subpackage (rpm-sign-libs can depend on ima-evm-utils-libs instead)
- add some IMA setup tools
-
-* Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Sat Jan 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Thu Jun 08 2023 Peter Robinson <pbrobinson@fedoraproject.org> - 1.5-1
- Disable bootstrap
-
-* Wed Jun 07 2023 Peter Robinson <pbrobinson@fedoraproject.org> - 1.5-0.1
- Update to 1.5
- Streamline bootstrap process a little
- Bootstrap mode
- Update download URL
-
-* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.4-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.4-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
 * Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.4-5
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

--- a/ima-setup.sh
+++ b/ima-setup.sh
@ -1,134 +0,0 @@
-#!/bin/bash
-#
-# This script helps set up IMA.
-#
-IMA_SYSTEMD_POLICY=/etc/ima/ima-policy
-IMA_POLICY_SYSFS=/sys/kernel/security/ima/policy
-
-usage() {
-	echo "Set up IMA."
-	cat <<EOF
-usage: $0 --policy=IMA_POLICY_PATH [--reinstall_threshold=NUM]
-
-       --policy
-       The path of IMA policy to be loaded. Sample polices are inside
-       /usr/share/ima/policies or you can use your own IMA policy
-       The path of IMA policy to be loaded.  Sample polices are inside
-       /usr/share/ima/policies or you can use your own IMA policy
-
-       --reinstall_threshold
-       When there are >reinstall_threshold packages in the RPM DB missing IMA
-       signatures, reinstalling the packages to add IMA signatures to the
-       packages.  By default, IMA sigatures will be obtained from the RPM DB.
-       However the RPM DB may not have the signatures. Dectect this case by
-       checking if there are >reinstall_threshold package missing IMA
-       signatures.
-
-EOF
-	exit 1
-}
-
-for _opt in "$@"; do
-	case "$_opt" in
-	--policy=*)
-		ima_policy_path=${_opt#*=}
-		if [[ ! -e $ima_policy_path ]]; then
-			echo "$ima_policy_path doesn't exist"
-			exit 1
-		fi
-		;;
-	--reinstall_threshold=*)
-		reinstall_threshold=${_opt#*=}
-		;;
-	*)
-		usage
-		;;
-	esac
-done
-
-if [[ $# -eq 0 ]]; then
-	usage
-fi
-
-# Add IMA signatures
-if test -f /run/ostree-booted; then
-	echo "You are using OSTree, please enable IMA signatures as part of the OSTree creation process."
-else
-	echo "Adding IMA signatures to installed package files"
-	if ! ima-add-sigs --reinstall_threshold="$reinstall_threshold"; then
-		echo "Failed to add IMA signatures, abort"
-		exit 1
-	fi
-fi
-
-load_ima_keys() {
-	local _key_loaded
-
-	if line=$(keyctl describe %keyring:.ima); then
-		_ima_id=${line%%:*}
-	else
-		echo "Failed to get ID of the .ima  keyring"
-		exit 1
-	fi
-
-	for i in /etc/keys/ima/*; do
-		if [ ! -f "${i}" ]; then
-			echo "No IMA key exist"
-			exit 1
-		fi
-
-		if ! evmctl import "${i}" "${_ima_id}" &>/dev/null; then
-			echo "Failed to load IMA key ${i}"
-		else
-			_key_loaded=yes
-		fi
-	done
-
-	if [[ $_key_loaded != yes ]]; then
-		echo "No IMA key loaded"
-		exit 1
-	fi
-}
-
-load_ima_policy() {
-	local ima_policy_path
-
-	ima_policy_path=$1
-
-	if ! test -f "$ima_policy_path"; then
-		echo "$ima_policy_path doesn't exist"
-		return 1
-	fi
-	if ! echo "$ima_policy_path" >"$IMA_POLICY_SYSFS"; then
-		echo "$ima_policy_path can't be loaded"
-		return 1
-	fi
-	# Let systemd load the IMA policy which will load LSM rules first so IMA
-	# policy containing rules like "appraise obj_type=ifconfig_exec_t" can be
-	# loaded
-	[[ -e /etc/ima ]] || mkdir -p /etc/ima/
-	if ! cp --preserve=xattr "$ima_policy_path" "$IMA_SYSTEMD_POLICY"; then
-		echo "Failed to copy $ima_policy_path to $IMA_SYSTEMD_POLICY"
-		return 1
-	fi
-}
-
-echo "Loading IMA keys"
-load_ima_keys
-
-# Include the dracut integrity module to load the IMA keys and policy
-# automatically when there is a system reboot
-if ! lsinitrd --mod | grep -q integrity; then
-	cp --preserve=xattr /usr/share/ima/dracut-98-integrity.conf /etc/dracut.conf.d/98-integrity.conf
-	echo "Regenerating all initramfs images to include the dracut integrity module"
-	if ! dracut -f --regenerate-all; then
-		echo "Failed to Regenerate all initramfs images"
-		exit 1
-	fi
-	[[ $(uname -m) == s390x ]] && zipl &> /dev/null
-fi
-
-if ! load_ima_policy "$ima_policy_path"; then
-	echo "Failed to load IMA policy $ima_policy_path!"
-	exit 1
-fi
--- a/28
+++ b/28
@ -1,28 +0,0 @@
-# Skip some unsupported filesystems
-# This list of the filesystems can be found on
-# https://www.kernel.org/doc/Documentation/ABI/testing/ima_policy
-# PROC_SUPER_MAGIC
-dont_appraise fsmagic=0x9fa0
-# SYSFS_MAGIC
-dont_appraise fsmagic=0x62656572
-# DEBUGFS_MAGIC
-dont_appraise fsmagic=0x64626720
-# TMPFS_MAGIC
-dont_appraise fsmagic=0x01021994
-# RAMFS_MAGIC
-dont_appraise fsmagic=0x858458f6
-# DEVPTS_SUPER_MAGIC
-dont_appraise fsmagic=0x1cd1
-# BINFMTFS_MAGIC
-dont_appraise fsmagic=0x42494e4d
-# SECURITYFS_MAGIC
-dont_appraise fsmagic=0x73636673
-# SELINUX_MAGIC
-dont_appraise fsmagic=0xf97cff8c
-# CGROUP_SUPER_MAGIC
-dont_appraise fsmagic=0x27e0eb
-# NSFS_MAGIC
-dont_appraise fsmagic=0x6e736673
-
-appraise func=MMAP_CHECK mask=MAY_EXEC appraise_type=imasig
-appraise func=BPRM_CHECK appraise_type=imasig
--- a/37
+++ b/37
@ -1,37 +0,0 @@
-# PROC_SUPER_MAGIC
-dont_measure fsmagic=0x9fa0
-# SYSFS_MAGIC
-dont_measure fsmagic=0x62656572
-# DEBUGFS_MAGIC
-dont_measure fsmagic=0x64626720
-# TMPFS_MAGIC
-dont_measure fsmagic=0x01021994
-# DEVPTS_SUPER_MAGIC
-dont_measure fsmagic=0x1cd1
-# BINFMTFS_MAGIC
-dont_measure fsmagic=0x42494e4d
-# SECURITYFS_MAGIC
-dont_measure fsmagic=0x73636673
-# SELINUX_MAGIC
-dont_measure fsmagic=0xf97cff8c
-# SMACK_MAGIC
-dont_measure fsmagic=0x43415d53
-# CGROUP_SUPER_MAGIC
-dont_measure fsmagic=0x27e0eb
-# CGROUP2_SUPER_MAGIC
-dont_measure fsmagic=0x63677270
-# NSFS_MAGIC
-dont_measure fsmagic=0x6e736673
-# EFIVARFS_MAGIC
-dont_measure fsmagic=0xde5e81e4
-# OVERLAYFS_MAGIC
-# when containers are used we almost always want to ignore them
-dont_measure fsmagic=0x794c7630
-
-
-# Measure and log keys loaded onto the .ima keyring
-measure func=KEY_CHECK keyrings=.ima
-# Measure and log executables
-measure func=BPRM_CHECK
-# Measure and log shared libraries
-measure func=FILE_MMAP mask=MAY_EXEC
--- a/2
+++ b/2
@ -1,2 +0,0 @@
-01-appraise-executable-and-lib-signatures
-02-keylime-remote-attestation
--- a/2
+++ b/2
@ -1 +1 @@
-SHA512 (ima-evm-utils-1.6.2.tar.gz) = dfd82ba7c48c14fd31d687214a2b0cfcf269bdea42d4a0ebc872a72205f880c509ed5c5cd55dec7e94444e6f3bdc3c071ec6c2e3eba1e6579edb8ef11aa158a1
+SHA512 (ima-evm-utils-1.4.tar.gz) = 2fdf41470d88608162a084c4877ba17d531941b744bcb44dd4913e48ab2c2d131e0af3e3ead74c18748a5d46aced51213ebd7c13a5ee19050c28d54a26c011a3