{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"podman-1.4.9.4-8.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/podman-1.4.9.4-8.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-catatonit-0.2.0-52343766-6b46-4752-a52c-06bf7763aa20-43e4295f-6775-49bd-abc4-c542d95f1e05",
			"name":"catatonit",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ba9f5437209f2844f17aab85512a5b8f0094c11c72e16bb505aa361014435b7b"
				}
			],
			"description":"Catatonit is a /sbin/init program for use within containers. It\nforwards (almost) all signals to the spawned child, tears down\nthe container when the spawned child exits, and otherwise\ncleans up other exited processes (zombies).\n\nThis is a reimplementation of other container init programs (such as\n\"tini\" or \"dumb-init\"), but uses modern Linux facilities (such as\nsignalfd(2)) and has no additional features.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/catatonit@0.2.0-1.oe2409?arch=aarch64&epoch=0&upstream=catatonit-0.2.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/openSUSE/catatonit",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A signal-forwarding process manager for containers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.2.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-conmon-2.1.10-243a25f6-8c74-4509-8d3c-e8a268f00ae5-48e55c7a-0a11-467b-89a3-1a6244703d2f",
			"name":"conmon",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4ce83ffeb238bf108b35dc93c1805c68838c49fd82ba0c66a406ce9f693eec31"
				}
			],
			"description":"Conmon is a monitoring program and communication tool between a container manager (like podman or CRI-O)\nand an OCI runtime (like runc or crun) for a single container.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/conmon@2.1.10-1.oe2409?arch=aarch64&epoch=2&upstream=conmon-2.1.10-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/containers/conmon",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Monitoring program for OCI container",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:2.1.10-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-container-selinux-2.230.0-fdc3702b-589b-446d-ace3-61847a161b35-08c50988-1a07-4556-9818-15cfcdb2bf70",
			"name":"container-selinux",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"22ade81448ed12aaea3b89ad876f75a8847fdb3270ba894a46f764741ff19549"
				}
			],
			"description":"SELinux policy modules for use with container runtimes.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/container-selinux@2.230.0-1.oe2409?arch=noarch&epoch=2&upstream=container-selinux-2.230.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/containers/container-selinux",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"SELinux policies for container runtimes",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:2.230.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-containernetworking-plugins-1.2.0-d50210c8-c141-47af-b92e-51c24abde3d6-9be0612f-244d-4c5e-80e2-6313794b74d3",
			"name":"containernetworking-plugins",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"65bf4841f524a0e1ef5fdd2c4cb19dac43f87c8abf13626ff3500af0c8a44c2b"
				}
			],
			"description":"The CNI (Container Network Interface) project consists of a specification\nand libraries for writing plugins to configure network interfaces in Linux\ncontainers, along with a number of supported plugins. CNI concerns itself\nonly with network connectivity of containers and removing allocated resources\nwhen the container is deleted.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/containernetworking-plugins@1.2.0-3.oe2409?arch=aarch64&epoch=0&upstream=containernetworking-plugins-1.2.0-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/containernetworking/plugins",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Libraries for use by writing CNI plugin",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.0-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-containers-common-1-f58e2a19-9f60-41c0-bd35-82f852887fb0-781fb870-b853-4fdd-84ff-78dffbbdb15c",
			"name":"containers-common",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"72cfc61ac52fd41b184481af753055e0b5b70d9bd33e4ef7a5e9609080ed74dd"
				}
			],
			"description":"This package contains common configuration files and documentation for container\ntools ecosystem, such as Podman, Buildah and Skopeo.\n\nIt is required because the most of configuration files and docs come from projects\nwhich are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged\nseparately.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/containers-common@1-5.oe2409?arch=noarch&epoch=4&upstream=containers-common-1-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/containers/common",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Common configuration and documentation for containers.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:1-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-crun-1.8.7-f83903d3-5751-4b93-8f69-d4d2ece6bd18-c346f838-313f-4e69-a2c0-226c932ef3eb",
			"name":"crun",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ed401c94612012684d973d3608cc6da4340cb8e574dd63977d2816508b3f979e"
				}
			],
			"description":"crun is a fast and low-memory footprint OCI Container Runtime fully written in C.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/crun@1.8.7-2.oe2409?arch=aarch64&epoch=0&upstream=crun-1.8.7-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/containers/crun",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A fast and low-memory footprint OCI Container Runtime fully written in C.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.7-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e470fe71-dc8e-432f-bead-dcc499b30d33",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-35b31e2e-6643-45fa-afa5-5133523bc7b0",
			"name":"gpgme",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0"
				}
			],
			"description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/related_software/gpgme/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GnuPG Made Easy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-iptables-1.8.9-dc11de83-09a5-47ef-80e8-90912b8e5367-269b92ca-db1c-40cf-84dd-1c3cede7b3c1",
			"name":"iptables",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7deafc31b2e62ff54e9f52ce52c89006a03834ffbb4298cb6c9ad5fed76bdcf1"
				}
			],
			"description":"Netfilter is a set of hooks inside the Linux kernel that allows kernel\nmodules to register callback functions with the network stack. A\nregistered callback function is then called back for every packet that\ntraverses the respective hook within the network stack.\n\nIptables is a generic table structure for the definition of rulesets.\nEach rule within an IP table consists of a number of classifiers\n(iptables matches) and one connected action (iptables target).\n\nNetfilter, ip_tables, connection tracking (ip_conntrack, nf_conntrack)\nand the NAT subsystem together build the major parts of the framework.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/iptables@1.8.9-5.oe2409?arch=aarch64&epoch=0&upstream=iptables-1.8.9-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.netfilter.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"IP packet filter administration utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.8.9-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-08e4054c-21ca-45e6-bd83-86b9d280a8e4",
			"name":"libseccomp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8587cac95cea90fa88a47c4da2937198c025b5b967e4b2180ea7285ccd16c533"
				}
			],
			"description":"The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libseccomp@2.5.4-3.oe2409?arch=aarch64&epoch=0&upstream=libseccomp-2.5.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/seccomp/libseccomp",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Interface to the syscall filtering mechanism",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.4-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-nftables-1.0.8-79bb55d3-f351-4eec-81e4-423d795d9875-f3f651ee-4904-4416-a494-37ec60a17c6a",
			"name":"nftables",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8ce76662f83674596e00422255cf5336dd5fef75fe36aced5ca1857068f0cae4"
				}
			],
			"description":"nftables is a subsystem of the Linux kernel providing filtering and classification of\\\nnetwork packets/datagrams/frames.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/nftables@1.0.8-4.oe2409?arch=aarch64&epoch=1&upstream=nftables-1.0.8-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://netfilter.org/projects/nftables/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A subsystem of the Linux kernel processing network data",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.0.8-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-shadow-subid-devel-4.14.3-a8987e8c-07f7-4777-90a0-3d33ed44826e-94aa6d69-a96e-4508-ab58-09178bce6ba2",
			"name":"shadow-subid-devel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0b5d646efc73c1d29d162c81e337ca208846299a587142a0a99083cfc4ccc277"
				}
			],
			"description":"Development files for shadow-utils-subid.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/shadow-subid-devel@4.14.3-4.oe2409?arch=aarch64&epoch=2&upstream=shadow-4.14.3-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://pkg-shadow.alioth.debian.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Development package for shadow-utils-subid",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:4.14.3-4.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-catatonit-0.2.0-52343766-6b46-4752-a52c-06bf7763aa20-43e4295f-6775-49bd-abc4-c542d95f1e05"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-conmon-2.1.10-243a25f6-8c74-4509-8d3c-e8a268f00ae5-48e55c7a-0a11-467b-89a3-1a6244703d2f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-container-selinux-2.230.0-fdc3702b-589b-446d-ace3-61847a161b35-08c50988-1a07-4556-9818-15cfcdb2bf70"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-containernetworking-plugins-1.2.0-d50210c8-c141-47af-b92e-51c24abde3d6-9be0612f-244d-4c5e-80e2-6313794b74d3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-containers-common-1-f58e2a19-9f60-41c0-bd35-82f852887fb0-781fb870-b853-4fdd-84ff-78dffbbdb15c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-crun-1.8.7-f83903d3-5751-4b93-8f69-d4d2ece6bd18-c346f838-313f-4e69-a2c0-226c932ef3eb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-e470fe71-dc8e-432f-bead-dcc499b30d33"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-35b31e2e-6643-45fa-afa5-5133523bc7b0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-iptables-1.8.9-dc11de83-09a5-47ef-80e8-90912b8e5367-269b92ca-db1c-40cf-84dd-1c3cede7b3c1"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-08e4054c-21ca-45e6-bd83-86b9d280a8e4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-nftables-1.0.8-79bb55d3-f351-4eec-81e4-423d795d9875-f3f651ee-4904-4416-a494-37ec60a17c6a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-podman-4.9.4-52561519-a30c-4a0a-9af5-f9da4feaa2f1",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-shadow-subid-devel-4.14.3-a8987e8c-07f7-4777-90a0-3d33ed44826e-94aa6d69-a96e-4508-ab58-09178bce6ba2"
		}
	]
}