[arch-commits] Commit in hardening-wrapper/repos (18 files)

Daniel Micay thestinger at archlinux.org
Sat Jul 15 18:38:18 UTC 2017


    Date: Saturday, July 15, 2017 @ 18:38:17
  Author: thestinger
Revision: 245250

archrelease: copy trunk to community-i686, community-x86_64

Added:
  hardening-wrapper/repos/community-i686/PKGBUILD
    (from rev 245249, hardening-wrapper/trunk/PKGBUILD)
  hardening-wrapper/repos/community-i686/hardening-wrapper-i686.conf
    (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-i686.conf)
  hardening-wrapper/repos/community-i686/hardening-wrapper-x86_64.conf
    (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-x86_64.conf)
  hardening-wrapper/repos/community-i686/hardening-wrapper.install
    (from rev 245249, hardening-wrapper/trunk/hardening-wrapper.install)
  hardening-wrapper/repos/community-i686/path.sh
    (from rev 245249, hardening-wrapper/trunk/path.sh)
  hardening-wrapper/repos/community-x86_64/PKGBUILD
    (from rev 245249, hardening-wrapper/trunk/PKGBUILD)
  hardening-wrapper/repos/community-x86_64/hardening-wrapper-i686.conf
    (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-i686.conf)
  hardening-wrapper/repos/community-x86_64/hardening-wrapper-x86_64.conf
    (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-x86_64.conf)
  hardening-wrapper/repos/community-x86_64/hardening-wrapper.install
    (from rev 245249, hardening-wrapper/trunk/hardening-wrapper.install)
  hardening-wrapper/repos/community-x86_64/path.sh
    (from rev 245249, hardening-wrapper/trunk/path.sh)
Deleted:
  hardening-wrapper/repos/community-i686/PKGBUILD
  hardening-wrapper/repos/community-i686/hardening-wrapper-i686.conf
  hardening-wrapper/repos/community-i686/hardening-wrapper-x86_64.conf
  hardening-wrapper/repos/community-i686/path.sh
  hardening-wrapper/repos/community-x86_64/PKGBUILD
  hardening-wrapper/repos/community-x86_64/hardening-wrapper-i686.conf
  hardening-wrapper/repos/community-x86_64/hardening-wrapper-x86_64.conf
  hardening-wrapper/repos/community-x86_64/path.sh

------------------------------------------------+
 /PKGBUILD                                      |   54 +++++++++++++++++++++++
 /hardening-wrapper-i686.conf                   |   12 +++++
 /hardening-wrapper-x86_64.conf                 |   12 +++++
 /path.sh                                       |    2 
 community-i686/PKGBUILD                        |   26 -----------
 community-i686/hardening-wrapper-i686.conf     |    6 --
 community-i686/hardening-wrapper-x86_64.conf   |    6 --
 community-i686/hardening-wrapper.install       |   13 +++++
 community-i686/path.sh                         |    1 
 community-x86_64/PKGBUILD                      |   26 -----------
 community-x86_64/hardening-wrapper-i686.conf   |    6 --
 community-x86_64/hardening-wrapper-x86_64.conf |    6 --
 community-x86_64/hardening-wrapper.install     |   13 +++++
 community-x86_64/path.sh                       |    1 
 14 files changed, 106 insertions(+), 78 deletions(-)

Deleted: community-i686/PKGBUILD
===================================================================
--- community-i686/PKGBUILD	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-i686/PKGBUILD	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1,26 +0,0 @@
-# $Id$
-# Maintainer: Daniel Micay <danielmicay at gmail.com>
-pkgname=hardening-wrapper
-pkgver=10
-pkgrel=1
-pkgdesc='Wrapper scripts for building hardened executables by default'
-arch=(i686 x86_64)
-url='https://github.com/thestinger/hardening-wrapper'
-license=('MIT')
-depends=(bash)
-backup=(etc/hardening-wrapper.conf)
-source=("$pkgname-$pkgver.tar.gz::https://github.com/thestinger/hardening-wrapper/archive/$pkgver.tar.gz"
-        path.sh hardening-wrapper-i686.conf hardening-wrapper-x86_64.conf)
-sha1sums=('61e8c7e3062e6830cd7b190aa6b81834138a7137'
-          '1e5f6d9931f01b26bb4b6fbb839e21d34d534cdc'
-          '6729f0a6d2af72b6def9383e8104d0f763d3f01d'
-          '9453d7984a4a90aa884a51a7bf1bd2c72cbddc9f')
-
-package() {
-  install -Dm644 hardening-wrapper-${CARCH}.conf "$pkgdir/etc/hardening-wrapper.conf"
-  install -Dm644 path.sh "$pkgdir/etc/profile.d/hardening-wrapper.sh"
-
-  cd $pkgname-$pkgver
-  make install DESTDIR="$pkgdir" PREFIX=/usr
-  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
-}

Copied: hardening-wrapper/repos/community-i686/PKGBUILD (from rev 245249, hardening-wrapper/trunk/PKGBUILD)
===================================================================
--- community-i686/PKGBUILD	                        (rev 0)
+++ community-i686/PKGBUILD	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,27 @@
+# $Id$
+# Maintainer: Daniel Micay <danielmicay at gmail.com>
+pkgname=hardening-wrapper
+pkgver=10
+pkgrel=2
+pkgdesc='Wrapper scripts for building hardened executables by default'
+arch=(i686 x86_64)
+url='https://github.com/thestinger/hardening-wrapper'
+license=('MIT')
+depends=(bash)
+backup=(etc/hardening-wrapper.conf)
+source=("$pkgname-$pkgver.tar.gz::https://github.com/thestinger/hardening-wrapper/archive/$pkgver.tar.gz"
+        path.sh hardening-wrapper-i686.conf hardening-wrapper-x86_64.conf)
+sha1sums=('61e8c7e3062e6830cd7b190aa6b81834138a7137'
+          '1e5f6d9931f01b26bb4b6fbb839e21d34d534cdc'
+          '6729f0a6d2af72b6def9383e8104d0f763d3f01d'
+          '9453d7984a4a90aa884a51a7bf1bd2c72cbddc9f')
+install=$pkgname.install
+
+package() {
+  install -Dm644 hardening-wrapper-${CARCH}.conf "$pkgdir/etc/hardening-wrapper.conf"
+  install -Dm644 path.sh "$pkgdir/etc/profile.d/hardening-wrapper.sh"
+
+  cd $pkgname-$pkgver
+  make install DESTDIR="$pkgdir" PREFIX=/usr
+  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
+}

Deleted: community-i686/hardening-wrapper-i686.conf
===================================================================
--- community-i686/hardening-wrapper-i686.conf	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-i686/hardening-wrapper-i686.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1,6 +0,0 @@
-HARDENING_BINDNOW=0
-HARDENING_PIE=0
-HARDENING_FORTIFY=2
-HARDENING_RELRO=1
-HARDENING_STACK_CHECK=1
-HARDENING_STACK_PROTECTOR=2

Copied: hardening-wrapper/repos/community-i686/hardening-wrapper-i686.conf (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-i686.conf)
===================================================================
--- community-i686/hardening-wrapper-i686.conf	                        (rev 0)
+++ community-i686/hardening-wrapper-i686.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,6 @@
+HARDENING_BINDNOW=0
+HARDENING_PIE=0
+HARDENING_FORTIFY=2
+HARDENING_RELRO=1
+HARDENING_STACK_CHECK=1
+HARDENING_STACK_PROTECTOR=2

Deleted: community-i686/hardening-wrapper-x86_64.conf
===================================================================
--- community-i686/hardening-wrapper-x86_64.conf	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-i686/hardening-wrapper-x86_64.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1,6 +0,0 @@
-HARDENING_BINDNOW=0
-HARDENING_PIE=1
-HARDENING_FORTIFY=2
-HARDENING_RELRO=1
-HARDENING_STACK_CHECK=1
-HARDENING_STACK_PROTECTOR=2

Copied: hardening-wrapper/repos/community-i686/hardening-wrapper-x86_64.conf (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-x86_64.conf)
===================================================================
--- community-i686/hardening-wrapper-x86_64.conf	                        (rev 0)
+++ community-i686/hardening-wrapper-x86_64.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,6 @@
+HARDENING_BINDNOW=0
+HARDENING_PIE=1
+HARDENING_FORTIFY=2
+HARDENING_RELRO=1
+HARDENING_STACK_CHECK=1
+HARDENING_STACK_PROTECTOR=2

Copied: hardening-wrapper/repos/community-i686/hardening-wrapper.install (from rev 245249, hardening-wrapper/trunk/hardening-wrapper.install)
===================================================================
--- community-i686/hardening-wrapper.install	                        (rev 0)
+++ community-i686/hardening-wrapper.install	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,13 @@
+post_install () {
+  echo ">>> hardening-wrapper is deprecated and will be dropped from the repositories"
+  echo ">>>"
+  echo ">>> The standard Arch Linux Clang / GCC have adopted PIE / SSP by default"
+  echo ">>>"
+  echo ">>> RELRO and BIND_NOW are defaults in makepkg LDFLAGS and will become linker defaults soon"
+  echo ">>>"
+  echo ">>> -fstack-check will be enabled by default once GCC ships their new implementation"
+}
+
+post_upgrade() {
+  post_install
+}

Deleted: community-i686/path.sh
===================================================================
--- community-i686/path.sh	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-i686/path.sh	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1 +0,0 @@
-export PATH="/usr/lib/hardening-wrapper/bin:$PATH"

Copied: hardening-wrapper/repos/community-i686/path.sh (from rev 245249, hardening-wrapper/trunk/path.sh)
===================================================================
--- community-i686/path.sh	                        (rev 0)
+++ community-i686/path.sh	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1 @@
+export PATH="/usr/lib/hardening-wrapper/bin:$PATH"

Deleted: community-x86_64/PKGBUILD
===================================================================
--- community-x86_64/PKGBUILD	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-x86_64/PKGBUILD	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1,26 +0,0 @@
-# $Id$
-# Maintainer: Daniel Micay <danielmicay at gmail.com>
-pkgname=hardening-wrapper
-pkgver=10
-pkgrel=1
-pkgdesc='Wrapper scripts for building hardened executables by default'
-arch=(i686 x86_64)
-url='https://github.com/thestinger/hardening-wrapper'
-license=('MIT')
-depends=(bash)
-backup=(etc/hardening-wrapper.conf)
-source=("$pkgname-$pkgver.tar.gz::https://github.com/thestinger/hardening-wrapper/archive/$pkgver.tar.gz"
-        path.sh hardening-wrapper-i686.conf hardening-wrapper-x86_64.conf)
-sha1sums=('61e8c7e3062e6830cd7b190aa6b81834138a7137'
-          '1e5f6d9931f01b26bb4b6fbb839e21d34d534cdc'
-          '6729f0a6d2af72b6def9383e8104d0f763d3f01d'
-          '9453d7984a4a90aa884a51a7bf1bd2c72cbddc9f')
-
-package() {
-  install -Dm644 hardening-wrapper-${CARCH}.conf "$pkgdir/etc/hardening-wrapper.conf"
-  install -Dm644 path.sh "$pkgdir/etc/profile.d/hardening-wrapper.sh"
-
-  cd $pkgname-$pkgver
-  make install DESTDIR="$pkgdir" PREFIX=/usr
-  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
-}

Copied: hardening-wrapper/repos/community-x86_64/PKGBUILD (from rev 245249, hardening-wrapper/trunk/PKGBUILD)
===================================================================
--- community-x86_64/PKGBUILD	                        (rev 0)
+++ community-x86_64/PKGBUILD	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,27 @@
+# $Id$
+# Maintainer: Daniel Micay <danielmicay at gmail.com>
+pkgname=hardening-wrapper
+pkgver=10
+pkgrel=2
+pkgdesc='Wrapper scripts for building hardened executables by default'
+arch=(i686 x86_64)
+url='https://github.com/thestinger/hardening-wrapper'
+license=('MIT')
+depends=(bash)
+backup=(etc/hardening-wrapper.conf)
+source=("$pkgname-$pkgver.tar.gz::https://github.com/thestinger/hardening-wrapper/archive/$pkgver.tar.gz"
+        path.sh hardening-wrapper-i686.conf hardening-wrapper-x86_64.conf)
+sha1sums=('61e8c7e3062e6830cd7b190aa6b81834138a7137'
+          '1e5f6d9931f01b26bb4b6fbb839e21d34d534cdc'
+          '6729f0a6d2af72b6def9383e8104d0f763d3f01d'
+          '9453d7984a4a90aa884a51a7bf1bd2c72cbddc9f')
+install=$pkgname.install
+
+package() {
+  install -Dm644 hardening-wrapper-${CARCH}.conf "$pkgdir/etc/hardening-wrapper.conf"
+  install -Dm644 path.sh "$pkgdir/etc/profile.d/hardening-wrapper.sh"
+
+  cd $pkgname-$pkgver
+  make install DESTDIR="$pkgdir" PREFIX=/usr
+  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
+}

Deleted: community-x86_64/hardening-wrapper-i686.conf
===================================================================
--- community-x86_64/hardening-wrapper-i686.conf	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-x86_64/hardening-wrapper-i686.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1,6 +0,0 @@
-HARDENING_BINDNOW=0
-HARDENING_PIE=0
-HARDENING_FORTIFY=2
-HARDENING_RELRO=1
-HARDENING_STACK_CHECK=1
-HARDENING_STACK_PROTECTOR=2

Copied: hardening-wrapper/repos/community-x86_64/hardening-wrapper-i686.conf (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-i686.conf)
===================================================================
--- community-x86_64/hardening-wrapper-i686.conf	                        (rev 0)
+++ community-x86_64/hardening-wrapper-i686.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,6 @@
+HARDENING_BINDNOW=0
+HARDENING_PIE=0
+HARDENING_FORTIFY=2
+HARDENING_RELRO=1
+HARDENING_STACK_CHECK=1
+HARDENING_STACK_PROTECTOR=2

Deleted: community-x86_64/hardening-wrapper-x86_64.conf
===================================================================
--- community-x86_64/hardening-wrapper-x86_64.conf	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-x86_64/hardening-wrapper-x86_64.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1,6 +0,0 @@
-HARDENING_BINDNOW=0
-HARDENING_PIE=1
-HARDENING_FORTIFY=2
-HARDENING_RELRO=1
-HARDENING_STACK_CHECK=1
-HARDENING_STACK_PROTECTOR=2

Copied: hardening-wrapper/repos/community-x86_64/hardening-wrapper-x86_64.conf (from rev 245249, hardening-wrapper/trunk/hardening-wrapper-x86_64.conf)
===================================================================
--- community-x86_64/hardening-wrapper-x86_64.conf	                        (rev 0)
+++ community-x86_64/hardening-wrapper-x86_64.conf	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,6 @@
+HARDENING_BINDNOW=0
+HARDENING_PIE=1
+HARDENING_FORTIFY=2
+HARDENING_RELRO=1
+HARDENING_STACK_CHECK=1
+HARDENING_STACK_PROTECTOR=2

Copied: hardening-wrapper/repos/community-x86_64/hardening-wrapper.install (from rev 245249, hardening-wrapper/trunk/hardening-wrapper.install)
===================================================================
--- community-x86_64/hardening-wrapper.install	                        (rev 0)
+++ community-x86_64/hardening-wrapper.install	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1,13 @@
+post_install () {
+  echo ">>> hardening-wrapper is deprecated and will be dropped from the repositories"
+  echo ">>>"
+  echo ">>> The standard Arch Linux Clang / GCC have adopted PIE / SSP by default"
+  echo ">>>"
+  echo ">>> RELRO and BIND_NOW are defaults in makepkg LDFLAGS and will become linker defaults soon"
+  echo ">>>"
+  echo ">>> -fstack-check will be enabled by default once GCC ships their new implementation"
+}
+
+post_upgrade() {
+  post_install
+}

Deleted: community-x86_64/path.sh
===================================================================
--- community-x86_64/path.sh	2017-07-15 18:37:22 UTC (rev 245249)
+++ community-x86_64/path.sh	2017-07-15 18:38:17 UTC (rev 245250)
@@ -1 +0,0 @@
-export PATH="/usr/lib/hardening-wrapper/bin:$PATH"

Copied: hardening-wrapper/repos/community-x86_64/path.sh (from rev 245249, hardening-wrapper/trunk/path.sh)
===================================================================
--- community-x86_64/path.sh	                        (rev 0)
+++ community-x86_64/path.sh	2017-07-15 18:38:17 UTC (rev 245250)
@@ -0,0 +1 @@
+export PATH="/usr/lib/hardening-wrapper/bin:$PATH"



More information about the arch-commits mailing list