~ubuntu-branches/ubuntu/trusty/hardening-wrapper/trusty : changes

~ubuntu-branches/ubuntu/trusty/hardening-wrapper/trusty » Changes from revision 36

From Revision 36 to 17

Rev	Summary	Authors	Tags	Date
36	Allow -fstack-protector on arm64 now that GCC and glibc supp... Allow -fstack-protector on arm64 now that GCC and glibc support it.	Adam Conrad	2.5ubuntu2	10 years ago
35	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Don't install a symlink for gold on architectures not having a gold port. - Stop installing links for GCC 4.2, 4.3, 4.5.	Matthias Klose	2.5ubuntu1	10 years ago
34	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - SSP is not (yet) supported on Aarch64. * Don't install a symlink for gold on architectures not having a gold port. * Stop installing links for GCC 4.2, 4.3, 4.5.	Matthias Klose	2.4ubuntu1	10 years ago
33	SSP is not (yet) supported on Aarch64. SSP is not (yet) supported on Aarch64.	Matthias Klose	2.3ubuntu1	10 years ago
32	* debian/hardening-wrapper.{prerm,postinst,links}, debian/RE... * debian/hardening-wrapper.{prerm,postinst,links}, debian/README.Debian: add gcc-4.8 to the diversion list, and sync list of compiler versions (Closes: 681799). * hardening-check: fix hash size check syntax (Closes: 682451).	Kees Cook	2.3	11 years ago
31	* debian/control: add missing Dep on binutils, thanks to Sté... * debian/control: add missing Dep on binutils, thanks to Stéphane Graber. * hardened-cc: use "=" as argument separator for better interoperability with dpkg-buildflags. * hardening-check: reset tag list for each argument (Closes: 677530).	Kees Cook	2.2	11 years ago
30	* hardening-check: * hardening-check: - handle _local suffix for non-ELF i386 objects (Closes: 666895). - add "-h" for "--help". - sort and indent libc function list for easier review. * Makefile: retain newlines when generating libc function list.	Kees Cook	2.1	12 years ago
29	Make bash-completion Multi-Arch: foreign, so that it can sat... Make bash-completion Multi-Arch: foreign, so that it can satisfy cross-build-dependencies.	Colin Watson	1.36ubuntu1	12 years ago
28	hardening-check: fix function-finder to accept IFUNC too, im... hardening-check: fix function-finder to accept IFUNC too, improve reporting slightly, improve manpage to explain false alarms.	Kees Cook	1.36	12 years ago
27	* debian/control: switch to "optional" priority so lintian c... * debian/control: switch to "optional" priority so lintian can depend on hardening-includes. * hardening-check: rewrite in Perl, add "--lintian" mode, to support fixing bug 650536.	Kees Cook	1.35	12 years ago
26	* debian/control: update VCS tags for bzr. * debian/control: update VCS tags for bzr. * hardening{-check,.make}: correct documentation from -O2 to -O1. * hardened-{cc,ld}, hardening.make, debian/rules: use DEB_HOST_ARCH instead of of DEB_HOST_ARCH_CPU for behavioral defaults (Closes: 635642).	Kees Cook	1.34	12 years ago
25	* debian/control: * debian/control: - bump to standards 3.9.2; no changes needed - hardening-wrapper: mark as Multi-Arch: foreign for build sanity. * debian/source/format: mark as 3.0 native.	Kees Cook	1.33	12 years ago
24	* debian/rules, debian/hardening-wrapper.{prerm,preinst,post... * debian/rules, debian/hardening-wrapper.{prerm,preinst,postinst}: remove gcc-4.1 diversions since it has been removed from unstable. * hardened-cc, hardening.make: add "-Werror=format-security" by default (Closes: #587358). * tests/Makefile.common, tests/format.c: add test for newly added "-Werror=format-security" default option. * hardened-cc, hardening.make: add "--param ssp-buffer-size=4" by default to catch smaller character arrays. * tests/Makefile.common, tests/ssp-buffer-size-{protect,skip}.c: add tests for newly added "--param ssp-buffer-size=4" default. * debian/README.Debian: updated to include newly added options. * hardened-cc: disable -fstack-protector when -ffreestanding used. * hardening.make: provide examples for working around build-time collisions between "-fPIE" and "-fPIC" (Closes: #596150).	Kees Cook	1.32	13 years ago
23	* tests/Makefile.common: do not require @@GLIBC suffix for n... * tests/Makefile.common: do not require @@GLIBC suffix for nm tests. * tests/Makefile.wrapper: include symlink for ld.gold testing. * hardening-check: improve hardening-check to parse BIND_NOW also from the FLAGS dynamic section.	Kees Cook	1.31	13 years ago
22	* debian/README.Debian: update for gcc versions, include min... * debian/README.Debian: update for gcc versions, include minimal notes on hardening-includes (Closes: 592847, 592846). * debian/rules, debian/hardening-wrapper.{prerm,postinst}: add gcc-4.6 to the diversion list. * debian/control: remove binutils-multiarch conflict now that ld.bfd is no longer diverted.	Kees Cook	1.30	13 years ago
21	* debian/control: add Conflicts for binutils-multiarch (Clos... * debian/control: add Conflicts for binutils-multiarch (Closes: 579409, LP: #596136). * debian/hardening-wrapper.postrm: remove attempted diversions on installation failure.	Kees Cook	1.29	13 years ago
20	hardening.make: enable PIE on hurd (Closes: 586215), thanks ... hardening.make: enable PIE on hurd (Closes: 586215), thanks to Samuel Thibault.	Kees Cook	1.28	13 years ago
19	* hardening.make: * hardening.make: - disable RELRO on avr32. - clarify use of CXXFLAGS. * hardening-check: fix regex to correctly call sed (Closes: 578488).	Kees Cook	1.27	14 years ago
18	* debian/control: * debian/control: - bump standards version: no changes needed. - should not be considered "experimental". * hardening-check: use readelf's "-s" instead of "-r" to avoid issues with archs that lack sane relocations. * tests/Makefile.common: - adjust tests to include -s output. - weaken nm symbol matching.	Kees Cook	1.25	14 years ago
17	* hardening-check: handle alternate names for relocation jum... * hardening-check: handle alternate names for relocation jump slots (Closes: 568622) * tests/Makefile.common: show relocations as well for future debugging.	Kees Cook	1.24	14 years ago

Older »