~ubuntu-branches/ubuntu/trusty/hardening-wrapper/trusty-proposed

« back to all changes in this revision

Viewing changes to debian/hardening-wrapper.postinst

  • Committer: Bazaar Package Importer
  • Author(s): Kees Cook
  • Date: 2011-02-18 10:57:52 UTC
  • Revision ID: james.westby@ubuntu.com-20110218105752-e6wc0gymc73jufua
Tags: 1.32
* debian/rules, debian/hardening-wrapper.{prerm,preinst,postinst}:
  remove gcc-4.1 diversions since it has been removed from unstable.
* hardened-cc, hardening.make: add "-Werror=format-security" by default
  (Closes: #587358).
* tests/Makefile.common, tests/format.c: add test for newly added
  "-Werror=format-security" default option.
* hardened-cc, hardening.make: add "--param ssp-buffer-size=4" by
  default to catch smaller character arrays.
* tests/Makefile.common, tests/ssp-buffer-size-{protect,skip}.c:
  add tests for newly added "--param ssp-buffer-size=4" default.
* debian/README.Debian: updated to include newly added options.
* hardened-cc: disable -fstack-protector when -ffreestanding used.
* hardening.make: provide examples for working around build-time
  collisions between "-fPIE" and "-fPIC" (Closes: #596150).

Show diffs side-by-side

added added

removed removed

Lines of Context:
6
6
                --rename --remove /usr/bin/"$1" || true
7
7
}
8
8
 
9
 
# Clean up old diversions from version 1.1
 
9
# Clean up old diversions
10
10
if [ "$1" = "configure" ] && [ -n "$2" ] && dpkg --compare-versions "$2" lt "1.2"; then
11
11
        for i in gcc g++
12
12
        do
24
24
        undiv ld
25
25
fi
26
26
 
 
27
if [ "$1" = "configure" ] && [ -n "$2" ] && dpkg --compare-versions "$2" lt "1.32"; then
 
28
        undiv gcc-4.1
 
29
        undiv g++-4.1
 
30
fi
 
31
 
27
32
#DEBHELPER#