lp:ubuntu/raring-proposed/hardening-wrapper

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

32. By Kees Cook on 2012-12-16

* debian/hardening-wrapper.{prerm,postinst,links}, debian/README.Debian:
  add gcc-4.8 to the diversion list, and sync list of compiler versions
  (Closes: 681799).
* hardening-check: fix hash size check syntax (Closes: 682451).

31. By Kees Cook on 2012-06-14

* debian/control: add missing Dep on binutils, thanks to Stéphane Graber.
* hardened-cc: use "=" as argument separator for better interoperability
  with dpkg-buildflags.
* hardening-check: reset tag list for each argument (Closes: 677530).

30. By Kees Cook on 2012-04-02

* hardening-check:
  - handle _local suffix for non-ELF i386 objects (Closes: 666895).
  - add "-h" for "--help".
  - sort and indent libc function list for easier review.
* Makefile: retain newlines when generating libc function list.

29. By Kees Cook on 2012-03-31

* hardening-check: add color, based on a patch from Simon Ruderich.
* hardening-check: fix lintian tag for non-PIE ELF to "no-pie".
* debian/rules, debian/hardening-wrapper.{prerm,postinst}: add gcc-4.7
  to the diversion list (Closes: 666520).
* debian/control:
  - fix Vcs-Browser link for loggerhead (Closes: 664495).
  - add Multiarch tag to hardening-includes (Closes: 666471).
* Makefile, debian/*: convert to dh(1).
* hardening-check: generate list of libc functions at build time.
* hardening-check, tests/Makefile.common: add support for scanning
  object archives for stack-protector and fortify (Closes: 664862).

28. By Kees Cook on 2012-01-27

hardening-check: fix function-finder to accept IFUNC too, improve
reporting slightly, improve manpage to explain false alarms.

27. By Kees Cook on 2011-12-01

* debian/control: switch to "optional" priority so lintian can depend
  on hardening-includes.
* hardening-check: rewrite in Perl, add "--lintian" mode, to support
  fixing bug 650536.

26. By Kees Cook on 2011-07-28

* debian/control: update VCS tags for bzr.
* hardening{-check,.make}: correct documentation from -O2 to -O1.
* hardened-{cc,ld}, hardening.make, debian/rules: use DEB_HOST_ARCH instead
  of of DEB_HOST_ARCH_CPU for behavioral defaults (Closes: 635642).

25. By Kees Cook on 2011-07-03

* debian/control:
  - bump to standards 3.9.2; no changes needed
  - hardening-wrapper: mark as Multi-Arch: foreign for build sanity.
* debian/source/format: mark as 3.0 native.

24. By Kees Cook on 2011-02-18

* debian/rules, debian/hardening-wrapper.{prerm,preinst,postinst}:
  remove gcc-4.1 diversions since it has been removed from unstable.
* hardened-cc, hardening.make: add "-Werror=format-security" by default
  (Closes: #587358).
* tests/Makefile.common, tests/format.c: add test for newly added
  "-Werror=format-security" default option.
* hardened-cc, hardening.make: add "--param ssp-buffer-size=4" by
  default to catch smaller character arrays.
* tests/Makefile.common, tests/ssp-buffer-size-{protect,skip}.c:
  add tests for newly added "--param ssp-buffer-size=4" default.
* debian/README.Debian: updated to include newly added options.
* hardened-cc: disable -fstack-protector when -ffreestanding used.
* hardening.make: provide examples for working around build-time
  collisions between "-fPIE" and "-fPIC" (Closes: #596150).

23. By Kees Cook on 2011-01-14

* tests/Makefile.common: do not require @@GLIBC suffix for nm tests.
* tests/Makefile.wrapper: include symlink for ld.gold testing.
* hardening-check: improve hardening-check to parse BIND_NOW also from
  the FLAGS dynamic section.