To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to sysusers.d-mandos.conf
- Committer: Teddy Hogeborn
- Date: 2016-08-06 00:53:13 UTC
- mto: (237.7.594 trunk)
- mto: This revision was merged to the branch mainline in revision 350.
- Revision ID: teddy@recompile.se-20160806005313-q9n4b1b7707hnjj4
Makefile: Replace "-fsanitize=address" with "-fsanitize=leak"
The Address Sanitizer is a debugging feature, not a security feature -
it has security issues: <http://seclists.org/oss-sec/2016/q1/363>
Therefore, it should only be used when debugging. Replace it with
"-fsanitize=leak", which is needed since -fsanitize=address no longer
includes it implicitly.
* Makefile (DEBUG): Add "-fsanitize=address".
(ALL_SANITIZE_OPTIONS): Replace "-fsanitize=address" with
"-fsanitize=leak".
The Address Sanitizer is a debugging feature, not a security feature -
it has security issues: <http://seclists.org/oss-sec/2016/q1/363>
Therefore, it should only be used when debugging. Replace it with
"-fsanitize=leak", which is needed since -fsanitize=address no longer
includes it implicitly.
* Makefile (DEBUG): Add "-fsanitize=address".
(ALL_SANITIZE_OPTIONS): Replace "-fsanitize=address" with
"-fsanitize=leak".
- files added:
- initramfs-tools-hook-conf
- files removed:
- debian/mandos-client.templates
- debian/tests
- dracut-module
- files modified:
- .bzrignore
added
removed
sysusers.d-mandos.conf
