Secure testing commits - Jan 2012 - r18262 - hardening

Author: jmm
Date: 2012-01-23 17:25:55 +0000 (Mon, 23 Jan 2012)
New Revision: 18262

Modified:
   hardening/subgoal-dsa.txt
   hardening/subgoal-important.txt
Log:
mlmmj, dspam, procps, tinyproxy fixed
nas now fully hardened
vsftpd and dmidecode not properly fixed, maintainer messed up my patches with
"cleanups"


Modified: hardening/subgoal-dsa.txt
==================================================================---
hardening/subgoal-dsa.txt	2012-01-23 15:50:22 UTC (rev 18261)
+++ hardening/subgoal-dsa.txt	2012-01-23 17:25:55 UTC (rev 18262)
@@ -28,7 +28,6 @@
 cscope (653490)
 ctorrent (653536)
 devil (653535)
-dspam (655189)
 dovecot (653530)
 drbd8 (currently broken: #654459)
 e2fsprogs (654457)
@@ -97,7 +96,6 @@
 maradns
 memcached (655134)
 mimetex (1.73-2) (656646)
-mlmmj (655893)
 mono
 mplayer
 mplayer2
@@ -159,7 +157,6 @@
 telepathy-gabble (656517)
 texinfo (656659)
 tgt (656127)
-tinyproxy (655870)
 tk8.4
 tk8.5
 unbound
@@ -184,6 +181,7 @@
 exiv2 (656356)
 opensc (656350)
 openexr (656506)
+vsftpd (655103)
 
 
 Packages using Makefile.PL, needs additional research:
@@ -360,17 +358,19 @@
 asterisk (1:1.8.8.2~dfsg-1) (653944)
 ntp (1:4.2.6.p3+dfsg-2)
 pcsc-lite (1.8.2-1) (656273)
-vsftpd (2.3.5-2) (655103)
 libtorrent-rasterbar (0.15.9-1) (656519)
 tcpreen (1.4.4-2) (655250)
 slurm-llnl (2.3.2-2) (656781)
+mlmmj (1.2.17-4) (655893)
+nas (1.9.3-3) (655743, 656857)
+dspam (3.10.1+dfsg-3+b1) (655189)
+tinyproxy (1.8.3-2) (655870)
 
 
 
 Hardening incomplete:
 gtetrinet (653443)
 ncompress (relro missing)
-nas (655743, 656857) (relro missing)
 
 
 Packages, which use hardened build flags manually, but not yet dpkg-buildflags:

Modified: hardening/subgoal-important.txt
==================================================================---
hardening/subgoal-important.txt	2012-01-23 15:50:22 UTC (rev 18261)
+++ hardening/subgoal-important.txt	2012-01-23 17:25:55 UTC (rev 18262)
@@ -39,13 +39,13 @@
 coreutils (653743)
 aptitude
 cron (653720)
-procps (656511)
 traceroute (656014)
 gdbm
 popt
 libsigc++-2.0
 xapian-core
 mawk (656026)
+dmidecode (655891)
 
 
 Candidate packages using cdbs, needs further studying:
@@ -71,4 +71,4 @@
 hostname (3.10) (655874)
 bash (4.2-1)
 bsdmainutils (9.0.1) (656011)
-dmidecode (2.11-5) (655891)
+procps (1:3.3.2-3) (656511)