Author: Chris Coulson
Revision Date: 2015-04-30 18:49:28 UTC

hardened-cc: don't set -Wformat options if they are already set
(LP: #1347257)

Author: Chris Coulson
Revision Date: 2015-04-30 18:49:28 UTC

hardened-cc: don't set -Wformat options if they are already set
(LP: #1347257)

Author: Matthias Klose
Revision Date: 2015-03-18 13:09:18 UTC

* Merge with Debian; remaining changes:
  - Stop installing links for GCC 4.2, 4.3, 4.5.
* Install links for GCC 5.

Author: Matthias Klose
Revision Date: 2015-03-18 13:09:18 UTC

* Merge with Debian; remaining changes:
  - Stop installing links for GCC 4.2, 4.3, 4.5.
* Install links for GCC 5.

Author: Matthias Klose
Revision Date: 2015-03-18 13:09:18 UTC

* Merge with Debian; remaining changes:
  - Stop installing links for GCC 4.2, 4.3, 4.5.
* Install links for GCC 5.

Author: Matthias Klose
Revision Date: 2014-10-07 17:10:55 UTC

[ Backport from 14.10 ]
hardened-cc: don't set -Wformat options if they are already set
(LP: #1347257)

Author: Matthias Klose
Revision Date: 2014-10-07 17:10:55 UTC

[ Backport from 14.10 ]
hardened-cc: don't set -Wformat options if they are already set
(LP: #1347257)

Author: Matthias Klose
Revision Date: 2014-10-14 12:29:01 UTC

Divert ld.gold on arm64.

Author: Matthias Klose
Revision Date: 2014-10-14 12:29:01 UTC

Divert ld.gold on arm64.

Author: Adam Conrad
Revision Date: 2014-03-07 18:51:18 UTC

Allow -fstack-protector on arm64 now that GCC and glibc support it.

Author: Matthias Klose
Revision Date: 2013-07-21 22:25:17 UTC

SSP is not (yet) supported on Aarch64.

Author: Matthias Klose
Revision Date: 2013-07-21 22:25:17 UTC

SSP is not (yet) supported on Aarch64.

Author: Kees Cook
Revision Date: 2012-12-16 14:56:48 UTC

* debian/hardening-wrapper.{prerm,postinst,links}, debian/README.Debian:
  add gcc-4.8 to the diversion list, and sync list of compiler versions
  (Closes: 681799).
* hardening-check: fix hash size check syntax (Closes: 682451).

Author: Kees Cook
Revision Date: 2012-12-16 14:56:48 UTC

* debian/hardening-wrapper.{prerm,postinst,links}, debian/README.Debian:
  add gcc-4.8 to the diversion list, and sync list of compiler versions
  (Closes: 681799).
* hardening-check: fix hash size check syntax (Closes: 682451).

Author: Kees Cook
Revision Date: 2012-06-14 09:40:03 UTC

* debian/control: add missing Dep on binutils, thanks to Stéphane Graber.
* hardened-cc: use "=" as argument separator for better interoperability
  with dpkg-buildflags.
* hardening-check: reset tag list for each argument (Closes: 677530).

Author: Colin Watson
Revision Date: 2012-03-31 02:11:12 UTC

Make bash-completion Multi-Arch: foreign, so that it can satisfy
cross-build-dependencies.

Author: Kees Cook
Revision Date: 2011-07-03 11:28:00 UTC

* debian/control:
  - bump to standards 3.9.2; no changes needed
  - hardening-wrapper: mark as Multi-Arch: foreign for build sanity.
* debian/source/format: mark as 3.0 native.

Author: Kees Cook
Revision Date: 2011-01-11 07:54:28 UTC

* debian/README.Debian: update for gcc versions, include minimal
  notes on hardening-includes (Closes: 592847, 592846).
* debian/rules, debian/hardening-wrapper.{prerm,postinst}: add gcc-4.6
  to the diversion list.
* debian/control: remove binutils-multiarch conflict now that ld.bfd
  is no longer diverted.

Author: Kees Cook
Revision Date: 2010-07-09 09:33:15 UTC

* debian/control: add Conflicts for binutils-multiarch (Closes: 579409,
  LP: #596136).
* debian/hardening-wrapper.postrm: remove attempted diversions on
  installation failure.

Author: Kees Cook
Revision Date: 2010-03-01 14:54:34 UTC

* debian/control:
  - bump standards version: no changes needed.
  - should not be considered "experimental".
* hardening-check: use readelf's "-s" instead of "-r" to avoid issues
  with archs that lack sane relocations.
* tests/Makefile.common:
  - adjust tests to include -s output.
  - weaken nm symbol matching.

Author: Kees Cook
Revision Date: 2009-09-24 15:34:51 UTC

* tests/Makefile: exclude tests based on architecture (ia64 w/o relro).
* debian/rules: disable PIE on mips/mipsel until bug 532821 is solved
  (Closes: #548250).

Author: Kees Cook
Revision Date: 2008-11-20 23:25:52 UTC

* hardened-cc: add ...DEBUG_SYMLINKS to visualize symlink resolution.
* hardened-cc: detect uninstalled targets and abort (Closes: #506066).
* debian/{rules,postinst,postrm}: add links for gcc-4.4.
* debian/control: moved to standards version 3.8.0, no changes needed.

Author: Kees Cook
Revision Date: 2008-04-28 15:51:57 UTC

* hardened-cc: add -nostdlib test missing from older gcc (gcc-4.0, gcc-4.1).
* hardened-{cc,ld}: load system defaults from /etc/hardening-wrapper.conf
* hardened-{cc,ld}.1: updated man pages to mention system-wide config.
* hardened-{cc,ld}: handle relative symlinks correctly to address issues
  pointed out by Sedat Dilek.

Author: Kees Cook
Revision Date: 2008-04-14 16:06:00 UTC

* hardened-ld: disable PIE logic -- gcc should be the only part of the
  toolchain requesting PIE.
* tests/Makefile: use -B instead of GCC_EXEC_PREFIX, which does not
  do the right thing on all architectures.