[arch-commits] Commit in hardening-wrapper/repos/community-any (6 files)
Daniel Micay
thestinger at archlinux.org
Wed Jul 23 03:58:27 UTC 2014
Date: Wednesday, July 23, 2014 @ 05:58:27
Author: thestinger
Revision: 116135
archrelease: copy trunk to community-any
Added:
hardening-wrapper/repos/community-any/PKGBUILD
(from rev 116134, hardening-wrapper/trunk/PKGBUILD)
hardening-wrapper/repos/community-any/cc-wrapper.sh
(from rev 116134, hardening-wrapper/trunk/cc-wrapper.sh)
hardening-wrapper/repos/community-any/path.sh
(from rev 116134, hardening-wrapper/trunk/path.sh)
Deleted:
hardening-wrapper/repos/community-any/PKGBUILD
hardening-wrapper/repos/community-any/cc-wrapper.sh
hardening-wrapper/repos/community-any/path.sh
---------------+
PKGBUILD | 52 +++++++-------
cc-wrapper.sh | 207 ++++++++++++++++++++++++++++----------------------------
path.sh | 2
3 files changed, 131 insertions(+), 130 deletions(-)
Deleted: PKGBUILD
===================================================================
--- PKGBUILD 2014-07-23 03:58:07 UTC (rev 116134)
+++ PKGBUILD 2014-07-23 03:58:27 UTC (rev 116135)
@@ -1,26 +0,0 @@
-# Maintainer: Daniel Micay <danielmicay at gmail.com>
-pkgname=hardening-wrapper
-pkgver=2
-pkgrel=1
-pkgdesc='Wrapper script for building hardened executables by default'
-arch=(any)
-url='https://archlinux.org/'
-license=('GPL')
-depends=(bash)
-source=(cc-wrapper.sh path.sh)
-sha1sums=('bfa2ef7c0fd3ee0b92c43100c994eb72c4da39e2'
- '1e5f6d9931f01b26bb4b6fbb839e21d34d534cdc')
-
-package() {
- mkdir -p "$pkgdir/usr/lib/hardening-wrapper/bin"
- install -m644 path.sh "$pkgdir/usr/lib/hardening-wrapper/path.sh"
- install -m755 cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/c89"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/c99"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/cc"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/c++"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/clang"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/clang++"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/gcc"
- ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/g++"
-}
Copied: hardening-wrapper/repos/community-any/PKGBUILD (from rev 116134, hardening-wrapper/trunk/PKGBUILD)
===================================================================
--- PKGBUILD (rev 0)
+++ PKGBUILD 2014-07-23 03:58:27 UTC (rev 116135)
@@ -0,0 +1,26 @@
+# Maintainer: Daniel Micay <danielmicay at gmail.com>
+pkgname=hardening-wrapper
+pkgver=2
+pkgrel=2
+pkgdesc='Wrapper script for building hardened executables by default'
+arch=(any)
+url='https://archlinux.org/'
+license=('GPL')
+depends=(bash)
+source=(cc-wrapper.sh path.sh)
+sha1sums=('c2f1140d8fce9aa21c60bbec7f8cd59e95704551'
+ '1e5f6d9931f01b26bb4b6fbb839e21d34d534cdc')
+
+package() {
+ mkdir -p "$pkgdir/usr/lib/hardening-wrapper/bin"
+ install -m644 path.sh "$pkgdir/usr/lib/hardening-wrapper/path.sh"
+ install -m755 cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/c89"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/c99"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/cc"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/c++"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/clang"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/clang++"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/gcc"
+ ln -s ../cc-wrapper.sh "$pkgdir/usr/lib/hardening-wrapper/bin/g++"
+}
Deleted: cc-wrapper.sh
===================================================================
--- cc-wrapper.sh 2014-07-23 03:58:07 UTC (rev 116134)
+++ cc-wrapper.sh 2014-07-23 03:58:27 UTC (rev 116135)
@@ -1,103 +0,0 @@
-#!/bin/bash
-
-set -o nounset
-
-force_bindnow="${HARDENING_BINDNOW:-1}"
-force_fPIE="${HARDENING_PIE:-1}"
-force_fortify="${HARDENING_FORTIFY:-2}"
-force_pie="${HARDENING_PIE:-1}"
-force_relro="${HARDENING_RELRO:-1}"
-force_stack_check="${HARDENING_STACK_CHECK:-0}"
-force_stack_protector="${HARDENING_STACK_PROTECTOR:-2}"
-
-error() {
- echo "$1"
- exit 1
-}
-
-linking=1
-optimizing=0
-
-for opt; do
- case "$opt" in
- -fno-PIC|-fno-pic|-fno-PIE|-fno-pie|-nopie|-static|--static|-shared|--shared|-D__KERNEL__|-nostdlib|-nostartfiles)
- force_fPIE=0
- force_pie=0
- ;;
- -fPIC|-fpic|-fPIE|-fpie)
- force_fPIE=0
- ;;
- -c)
- linking=0
- ;;
- -nostdlib|-ffreestanding)
- force_stack_protector=0
- ;;
- -D_FORTIFY_SOURCE*)
- force_fortify=0
- ;;
- -O0)
- optimizing=0
- ;;
- -O*)
- optimizing=1
- ;;
- esac
-done
-
-arguments=()
-
-case "$force_bindnow" in
- 0) ;;
- 1) (( linking )) && arguments+=(-Wl,-z,now) ;;
- *) error 'invalid value for HARDENING_BINDNOW' ;;
-esac
-
-case "$force_fPIE" in
- 0) ;;
- 1) arguments+=(-fPIE) ;;
- *) error 'invalid value for HARDENING_PIE' ;;
-esac
-
-case "$force_fortify" in
- 0) ;;
- 1|2) (( optimizing )) && arguments+=(-D_FORTIFY_SOURCE=$force_fortify) ;;
- *) error 'invalid value for HARDENING_FORTIFY' ;;
-esac
-
-case "$force_pie" in
- 0) ;;
- 1) (( linking )) && arguments+=(-pie) ;;
- *) error 'invalid value for HARDENING_PIE' ;;
-esac
-
-case "$force_relro" in
- 0) ;;
- 1) (( linking )) && arguments+=(-Wl,-z,relro) ;;
- *) error 'invalid value for HARDENING_RELRO' ;;
-esac
-
-case "$force_stack_check" in
- 0) ;;
- 1) arguments+=(-fstack-check) ;;
- *) error 'invalid value for HARDENING_STACK_CHECK' ;;
-esac
-
-case "$force_stack_protector" in
- 0) ;;
- 1) arguments+=(-fstack-protector) ;;
- 2) arguments+=(-fstack-protector-strong) ;;
- 3) arguments+=(-fstack-protector-all) ;;
- *) error 'invalid value for HARDENING_STACK_PROTECTOR' ;;
-esac
-
-unwrapped=false
-IFS=: read -ra path <<< "$PATH";
-for p in "${path[@]}"; do
- binary="$p/${0##*/}"
- if [[ "$binary" != "$0" && -x "$binary" ]]; then
- unwrapped="$binary"
- fi
-done
-
-exec "$unwrapped" "${arguments[@]}" "$@"
Copied: hardening-wrapper/repos/community-any/cc-wrapper.sh (from rev 116134, hardening-wrapper/trunk/cc-wrapper.sh)
===================================================================
--- cc-wrapper.sh (rev 0)
+++ cc-wrapper.sh 2014-07-23 03:58:27 UTC (rev 116135)
@@ -0,0 +1,104 @@
+#!/bin/bash
+
+set -o nounset
+
+force_bindnow="${HARDENING_BINDNOW:-1}"
+force_fPIE="${HARDENING_PIE:-1}"
+force_fortify="${HARDENING_FORTIFY:-2}"
+force_pie="${HARDENING_PIE:-1}"
+force_relro="${HARDENING_RELRO:-1}"
+force_stack_check="${HARDENING_STACK_CHECK:-0}"
+force_stack_protector="${HARDENING_STACK_PROTECTOR:-2}"
+
+error() {
+ echo "$1"
+ exit 1
+}
+
+linking=1
+optimizing=0
+
+for opt; do
+ case "$opt" in
+ -fno-PIC|-fno-pic|-fno-PIE|-fno-pie|-nopie|-static|--static|-shared|--shared|-D__KERNEL__|-nostdlib|-nostartfiles)
+ force_fPIE=0
+ force_pie=0
+ ;;
+ -fPIC|-fpic|-fPIE|-fpie)
+ force_fPIE=0
+ ;;
+ -c)
+ linking=0
+ ;;
+ -nostdlib|-ffreestanding)
+ force_stack_protector=0
+ ;;
+ -D_FORTIFY_SOURCE*)
+ force_fortify=0
+ ;;
+ -O0)
+ optimizing=0
+ ;;
+ -O*)
+ optimizing=1
+ ;;
+ esac
+done
+
+arguments=()
+
+case "$force_bindnow" in
+ 0) ;;
+ 1) (( linking )) && arguments+=(-Wl,-z,now) ;;
+ *) error 'invalid value for HARDENING_BINDNOW' ;;
+esac
+
+case "$force_fPIE" in
+ 0) ;;
+ 1) arguments+=(-fPIE) ;;
+ *) error 'invalid value for HARDENING_PIE' ;;
+esac
+
+case "$force_fortify" in
+ 0) ;;
+ 1|2) (( optimizing )) && arguments+=(-D_FORTIFY_SOURCE=$force_fortify) ;;
+ *) error 'invalid value for HARDENING_FORTIFY' ;;
+esac
+
+case "$force_pie" in
+ 0) ;;
+ 1) (( linking )) && arguments+=(-pie) ;;
+ *) error 'invalid value for HARDENING_PIE' ;;
+esac
+
+case "$force_relro" in
+ 0) ;;
+ 1) (( linking )) && arguments+=(-Wl,-z,relro) ;;
+ *) error 'invalid value for HARDENING_RELRO' ;;
+esac
+
+case "$force_stack_check" in
+ 0) ;;
+ 1) arguments+=(-fstack-check) ;;
+ *) error 'invalid value for HARDENING_STACK_CHECK' ;;
+esac
+
+case "$force_stack_protector" in
+ 0) ;;
+ 1) arguments+=(-fstack-protector) ;;
+ 2) arguments+=(-fstack-protector-strong) ;;
+ 3) arguments+=(-fstack-protector-all) ;;
+ *) error 'invalid value for HARDENING_STACK_PROTECTOR' ;;
+esac
+
+unwrapped=false
+IFS=: read -ra path <<< "$PATH";
+for p in "${path[@]}"; do
+ binary="$p/${0##*/}"
+ if [[ "$binary" != "$0" && -x "$binary" ]]; then
+ unwrapped="$binary"
+ break
+ fi
+done
+
+exec "$unwrapped" "${arguments[@]}" "$@"
Deleted: path.sh
===================================================================
--- path.sh 2014-07-23 03:58:07 UTC (rev 116134)
+++ path.sh 2014-07-23 03:58:27 UTC (rev 116135)
@@ -1 +0,0 @@
-export PATH="/usr/lib/hardening-wrapper/bin:$PATH"
Copied: hardening-wrapper/repos/community-any/path.sh (from rev 116134, hardening-wrapper/trunk/path.sh)
===================================================================
--- path.sh (rev 0)
+++ path.sh 2014-07-23 03:58:27 UTC (rev 116135)
@@ -0,0 +1 @@
+export PATH="/usr/lib/hardening-wrapper/bin:$PATH"
More information about the arch-commits
mailing list