[SCM] Debian package checker branch, master, updated. 2.5.6-60-g33acfe7
The following commit has been merged in the master branch:
commit e2544b2b636175b4887c2abbaaa2b7af14b582cc
Author: Niels Thykier <niels@thykier.net>
Date: Wed Mar 7 15:38:02 2012 +0100
Refactor coll/hardening-info and use data file
Generate data file for hardening flags
Remove dpkg-buildflags from coll/hardening-info and use a static data
file instead.
Include the full hardening-check information in the hardening file and
filter in the check. This has the advantage that the data file is not
read once per binary unpacked.
Signed-off-by: Niels Thykier <niels@thykier.net>
diff --git a/checks/binaries b/checks/binaries
index d5842b5..9cb307a 100644
--- a/checks/binaries
+++ b/checks/binaries
@@ -117,6 +117,15 @@ our $EMBEDDED_LIBRARIES = Lintian::Data->new ('binaries/embedded-libs', qr/\s*+\
our $MULTIARCH_DIRS = Lintian::Data->new('binaries/multiarch-dirs', '\s+');
+sub _split_hash {
+ my (undef, $val) = @_;
+ my $hash = {};
+ map { $hash->{$_} = 1 } split m/\s*,\s*/o, $val;
+ return $hash;
+}
+
+our $HARDENING = Lintian::Data->new ('binaries/hardening-tags', qr/\s*\|\|\s*/o, \&_split_hash);
+
sub run {
my $pkg = shift;
@@ -435,8 +444,12 @@ foreach my $file (@{$info->sorted_index}) {
# handles the following checks:
# no-relro no-fortify-functions no-stackprotector no-bindnow no-pie
if (exists($info->hardening_info->{$file})) {
- foreach my $tag (@{$info->hardening_info->{$file}}) {
- tag "hardening-$tag", $file;
+ my $flags = $HARDENING->value ($arch);
+ if ($flags) {
+ foreach my $t (@{$info->hardening_info->{$file}}) {
+ my $tag = "hardening-$t";
+ tag $tag, $file if $flags->{$tag};
+ }
}
}
}
diff --git a/collection/hardening-info b/collection/hardening-info
index c8e49d0..6692c96 100755
--- a/collection/hardening-info
+++ b/collection/hardening-info
@@ -31,62 +31,41 @@ use warnings;
use lib "$ENV{'LINTIAN_ROOT'}/lib";
use Util;
-use Cwd;
+use Lintian::Collect;
-open (OUT, '>', 'hardening-info')
+my ($pkg, $type, $dir) = @ARGV;
+my $info = Lintian::Collect->new ($pkg, $type, $dir);
+my $file_info = $info->file_info;
+
+if ( -e "$dir/hardening-info" ) {
+ unlink "$dir/hardening-info" or fail "unlink hardening-info: $!";
+}
+
+open OUT, '>', "$dir/hardening-info"
or fail("cannot open hardening-info: $!");
# If we're running inside the Lintian test suite itself, we need to avoid
# all the tests except the "binaries-hardening" test.
-my $base = Cwd::realpath('.');
exit 0
if (defined $ENV{'LINTIAN_INTERNAL_TESTSUITE'} and
$ENV{'LINTIAN_INTERNAL_TESTSUITE'} eq "1" and
- $base !~ m|/binaries-hardening/binaries-hardening_1.0_.*_binary$|);
-
-open (FILES, '<', 'file-info')
- or fail("cannot open file-info: $!");
-
-# Override the arch seen by dpkg-buildflags for the arch of this package.
-my @fields = read_dpkg_control ('control/control');
-defined ($fields[0]{'architecture'})
- or fail ("cannot determine architecture of package!");
-$ENV{'DEB_HOST_ARCH'} = $fields[0]{'architecture'}
- if ($fields[0]{'architecture'} ne "all");
+ $dir !~ m|/binaries-hardening/binaries-hardening_1.0_.*_binary$|);
# Prepare to examine the file tree.
-chdir ('unpacked')
+chdir ("$dir/unpacked")
or fail("unable to chdir to unpacked: $!");
-# We must figure out what hardening features are expected by default for a
-# given architecture. Extract this from "dpkg-buildflags", and set up the
-# needed arguments for calling "hardening-check".
-open (my $FLAGS, '-|', "dpkg-buildflags --query-features hardening")
- or fail ("could not launch dpkg-buildflags: $!");
-my $args = "--lintian";
-my $feature = "";
-@fields = parse_dpkg_control ($FLAGS);
-foreach my $flag (@fields) {
- if ($flag->{enabled} eq "no") {
- $args .= " --no" . $flag->{feature};
- }
-}
-close $FLAGS;
-
-while (<FILES>) {
- if (m/^(.+?)\x00\s.*ELF/) {
- my $bin = $1;
-
- if (open (PIPE, '-|', "hardening-check $args -- \Q$bin\E 2>&1")) {
- local $/;
- local $_ = <PIPE>;
- print OUT $_;
- close PIPE;
- }
+foreach my $bin (keys %$file_info) {
+ my $finfo = $file_info->{$bin};
+ next unless $finfo =~ m/\bELF\b/o;
+ if (open (PIPE, '-|', "hardening-check --lintian -- \Q$bin\E 2>&1")) {
+ local $/;
+ local $_ = <PIPE>;
+ print OUT $_;
+ close PIPE;
}
}
-close FILES;
close OUT or fail("cannot write objdump-info: $!");
exit 0;
diff --git a/debian/changelog b/debian/changelog
index c0798b7..89907be 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -95,6 +95,8 @@ lintian (2.5.7) UNRELEASED; urgency=low
+ [NT] New file.
+ [NT] Add libav libraries. Thanks to Andres Mejia for the
suggestion and the suggested patch. (Closes: #666765)
+ * data/binaries/hardening-tags:
+ + [NT] New file.
* data/changes-file/{debian-dists -> known-dists}:
+ [NT] Renamed file.
diff --git a/debian/control b/debian/control
index 6967aae..f13205a 100644
--- a/debian/control
+++ b/debian/control
@@ -16,7 +16,6 @@ Build-Depends: binutils,
diffstat,
docbook-utils,
docbook-xml,
- dpkg-dev (>= 1.16.2~wipmultiarch),
fakeroot,
file,
gettext,
@@ -62,7 +61,6 @@ Architecture: all
Depends: binutils,
bzip2,
diffstat,
- dpkg-dev (>= 1.16.2~wipmultiarch),
file,
gettext,
hardening-includes (>= 1.35),
@@ -84,6 +82,7 @@ Depends: binutils,
unzip,
${misc:Depends}
Suggests: binutils-multiarch,
+ dpkg-dev,
libhtml-parser-perl,
libtext-template-perl,
man-db (>= 2.5.1-1),
diff --git a/lib/Lintian/Collect/Binary.pm b/lib/Lintian/Collect/Binary.pm
index 6098eec..bf9acba 100644
--- a/lib/Lintian/Collect/Binary.pm
+++ b/lib/Lintian/Collect/Binary.pm
@@ -241,9 +241,8 @@ sub hardening_info {
while (<$idx>) {
chomp;
- if (m,^([^:]+):\./(.*)$,) {
+ if (m,^([^:]+):(?:\./)?(.*)$,) {
my ($tag, $file) = ($1, $2);
-
push(@{$hardening_info{$file}}, $tag);
}
}
diff --git a/private/refresh-archs b/private/refresh-archs
index 65bd915..ee75a0a 100755
--- a/private/refresh-archs
+++ b/private/refresh-archs
@@ -24,7 +24,15 @@ use warnings;
use File::Temp qw(tempfile);
use POSIX qw (strftime);
+use lib "$ENV{'LINTIAN_ROOT'}/lib/";
+use Util qw(parse_dpkg_control);
+
my $datapath = shift;
+my %hardening = map { $_ => 1 } qw(
+ fortify
+ relro
+ stackprotector
+);
my %archs = ();
my %files = ();
@@ -95,6 +103,16 @@ add_data_file (
EOF
);
+add_data_file (
+ 'filename' => 'binaries/hardening-tags',
+ 'line-spec' => ['@DEB_HOST_ARCH@ || @HARDENING@'],
+ 'header' => <<EOF
+# Map of architectures to enabled hardening tags.
+#
+# NB: Keep this in sync with checks/binaries.desc
+EOF
+);
+
unless ($datapath) {
print STDERR "Usage: $0 path/to/lintian/data\n";
exit 1;
@@ -107,6 +125,9 @@ chomp $dver;
open my $dlfd, '-|', "dpkg-architecture -L 2>/dev/null" or die "dpkg-architecture -L: $!";
while ( my $archstr = <$dlfd> ) {
+ my @hardening;
+ my @htags;
+ delete $ENV{'DEB_HOST_ARCH'};
chomp $archstr;
open my $dafd, '-|', "dpkg-architecture -a$archstr 2>/dev/null" or die "dpkg-architecture -a$archstr: $!";
while ( my $var = <$dafd> ) {
@@ -115,6 +136,21 @@ while ( my $archstr = <$dlfd> ) {
$archs{$archstr}{$key} = $value;
}
close $dafd;
+
+ $ENV{'DEB_HOST_ARCH'} = $archstr;
+ open my $dbfd, "-|", "dpkg-buildflags --query-features hardening 2>/dev/null" or die "dpkg-buildflags --query-features hardening: $!";
+ @hardening = parse_dpkg_control ($dbfd);
+ close $dbfd;
+
+ foreach my $paragraph (@hardening) {
+ if (($paragraph->{'enabled'}//'no') eq 'yes') {
+ my $tag = 'hardening-no-' . $paragraph->{'feature'};
+ next if not exists $hardening{$paragraph->{'feature'}};
+ $tag = 'hardening-no-fortify-functions' if $tag eq 'hardening-no-fortify';
+ push @htags, $tag;
+ }
+ }
+ $archs{$archstr}{'HARDENING'} = join (', ', sort @htags);
}
close $dlfd;
diff --git a/vendors/debian/ftp-master-auto-reject/data/binaries/hardening-tags b/vendors/debian/ftp-master-auto-reject/data/binaries/hardening-tags
new file mode 100644
index 0000000..8b95fce
--- /dev/null
+++ b/vendors/debian/ftp-master-auto-reject/data/binaries/hardening-tags
@@ -0,0 +1,277 @@
+# Map of architectures to enabled hardening tags.
+#
+# NB: Keep this in sync with checks/binaries.desc
+# Last updated: 2012-04-04
+# With: Debian dpkg-architecture version 1.16.2.
+# This file was auto-generated by private/refresh-archs
+
+alpha || hardening-no-fortify-functions, hardening-no-relro
+amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+arm || hardening-no-fortify-functions, hardening-no-relro
+armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+armel || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+armhf || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+darwin-alpha || hardening-no-fortify-functions, hardening-no-relro
+darwin-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+darwin-hppa || hardening-no-fortify-functions
+darwin-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-ia64 || hardening-no-fortify-functions
+darwin-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-mips || hardening-no-fortify-functions, hardening-no-relro
+darwin-mipsel || hardening-no-fortify-functions, hardening-no-relro
+darwin-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+darwin-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-alpha || hardening-no-fortify-functions, hardening-no-relro
+freebsd-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+freebsd-hppa || hardening-no-fortify-functions
+freebsd-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-ia64 || hardening-no-fortify-functions
+freebsd-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-mips || hardening-no-fortify-functions, hardening-no-relro
+freebsd-mipsel || hardening-no-fortify-functions, hardening-no-relro
+freebsd-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+freebsd-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hppa || hardening-no-fortify-functions
+hurd-alpha || hardening-no-fortify-functions, hardening-no-relro
+hurd-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+hurd-hppa || hardening-no-fortify-functions
+hurd-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-ia64 || hardening-no-fortify-functions
+hurd-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-mips || hardening-no-fortify-functions, hardening-no-relro
+hurd-mipsel || hardening-no-fortify-functions, hardening-no-relro
+hurd-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+hurd-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+ia64 || hardening-no-fortify-functions
+kfreebsd-alpha || hardening-no-fortify-functions, hardening-no-relro
+kfreebsd-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+kfreebsd-hppa || hardening-no-fortify-functions
+kfreebsd-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-ia64 || hardening-no-fortify-functions
+kfreebsd-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-mips || hardening-no-fortify-functions, hardening-no-relro
+kfreebsd-mipsel || hardening-no-fortify-functions, hardening-no-relro
+kfreebsd-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kfreebsd-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-alpha || hardening-no-fortify-functions, hardening-no-relro
+knetbsd-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+knetbsd-hppa || hardening-no-fortify-functions
+knetbsd-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-ia64 || hardening-no-fortify-functions
+knetbsd-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-mips || hardening-no-fortify-functions, hardening-no-relro
+knetbsd-mipsel || hardening-no-fortify-functions, hardening-no-relro
+knetbsd-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+knetbsd-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-alpha || hardening-no-fortify-functions, hardening-no-relro
+kopensolaris-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+kopensolaris-hppa || hardening-no-fortify-functions
+kopensolaris-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-ia64 || hardening-no-fortify-functions
+kopensolaris-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-mips || hardening-no-fortify-functions, hardening-no-relro
+kopensolaris-mipsel || hardening-no-fortify-functions, hardening-no-relro
+kopensolaris-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+kopensolaris-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+lpia || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+mips || hardening-no-fortify-functions, hardening-no-relro
+mipsel || hardening-no-fortify-functions, hardening-no-relro
+netbsd-alpha || hardening-no-fortify-functions, hardening-no-relro
+netbsd-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+netbsd-hppa || hardening-no-fortify-functions
+netbsd-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-ia64 || hardening-no-fortify-functions
+netbsd-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-mips || hardening-no-fortify-functions, hardening-no-relro
+netbsd-mipsel || hardening-no-fortify-functions, hardening-no-relro
+netbsd-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+netbsd-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-alpha || hardening-no-fortify-functions, hardening-no-relro
+openbsd-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+openbsd-hppa || hardening-no-fortify-functions
+openbsd-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-ia64 || hardening-no-fortify-functions
+openbsd-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-mips || hardening-no-fortify-functions, hardening-no-relro
+openbsd-mipsel || hardening-no-fortify-functions, hardening-no-relro
+openbsd-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+openbsd-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+powerpcspe || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-alpha || hardening-no-fortify-functions, hardening-no-relro
+solaris-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+solaris-hppa || hardening-no-fortify-functions
+solaris-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-ia64 || hardening-no-fortify-functions
+solaris-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-mips || hardening-no-fortify-functions, hardening-no-relro
+solaris-mipsel || hardening-no-fortify-functions, hardening-no-relro
+solaris-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+solaris-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-alpha || hardening-no-fortify-functions, hardening-no-relro
+uclibc-linux-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-armel || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+uclibc-linux-hppa || hardening-no-fortify-functions
+uclibc-linux-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-ia64 || hardening-no-fortify-functions
+uclibc-linux-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-mips || hardening-no-fortify-functions, hardening-no-relro
+uclibc-linux-mipsel || hardening-no-fortify-functions, hardening-no-relro
+uclibc-linux-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclibc-linux-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-alpha || hardening-no-fortify-functions, hardening-no-relro
+uclinux-amd64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-arm || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-armeb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-armel || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-avr32 || hardening-no-fortify-functions, hardening-no-stackprotector
+uclinux-hppa || hardening-no-fortify-functions
+uclinux-i386 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-ia64 || hardening-no-fortify-functions
+uclinux-m32r || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-m68k || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-mips || hardening-no-fortify-functions, hardening-no-relro
+uclinux-mipsel || hardening-no-fortify-functions, hardening-no-relro
+uclinux-powerpc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-ppc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-s390 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-s390x || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-sh3 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-sh3eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-sh4 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-sh4eb || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-sparc || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
+uclinux-sparc64 || hardening-no-fortify-functions, hardening-no-relro, hardening-no-stackprotector
--
Debian package checker
Reply to: