archive-org.com » ORG » R » RUDERICH.ORG

Total: 336

Choose link from "Titles, links and description words view":

Or switch to "Titles and links view".
  • ruderich.org/simon Gitweb - blhc/blhc.git/blob - README
    are missing and the build log is fine 53 54 For more examples see the man page 55 56 57 CHECKS 58 59 60 blhc checks all compiler lines lines matching gcc for hardening flags 61 same as set by dpkg buildflags If a compiler flag is missing a warning 62 with the missing flags is printed 63 64 Consider the following compiler line 65 66 gcc g O2 o test test c 67 68 blhc generates the following warnings because all hardening flags are missing 69 70 CFLAGS missing fstack protector param ssp buffer size 4 Wformat Wformat security Werror format security gcc g O2 o test test c 71 CPPFLAGS missing D FORTIFY SOURCE 2 gcc g O2 o test test c 72 LDFLAGS missing Wl z relro gcc g O2 o test test c 73 74 Preprocessing linking and compiling is automatically detected 75 76 gcc MM test c test d 77 gcc E test c 78 gcc o test test o 79 80 CPPFLAGS missing D FORTIFY SOURCE 2 gcc E test c 81 LDFLAGS missing Wl z relro gcc o test test o 82 83 blhc differentiates the following flags 84 85 CPPFLAGS preprocessor flags 86 CFLAGS C compiler flags 87 CXXFLAGS C compiler flags 88 LDFLAGS linker flags 89 90 Both O2 and O3 are recognized as valid even though only O2 is 91 printed in warnings 92 93 It handles all file extensions as documented by gcc regarding preprocessing 94 linking compiling 95 96 The architecture of the build log is automatically detected by looking for the 97 following line output of dpkg buildpackage 98 99 dpkg buildpackage host architecture architecture 100 101 The available hardening flags are adapted to the architecture because some 102 architectures don t support certain hardening options 103 104 Some checks check the build dependencies for certain packages The following 105 lines are used to get the build dependencies The first two are used in buildd 106 build logs the second was used in older logs the third by pbuilder logs 107 all are detected 108 109 Filtered Buildd Depends 110 Build Depends 111 Depends 112 113 114 LIMITATIONS 115 116 117 The build log must contain the following line which marks the beginning of the 118 real compile process output of dpkg buildpackage 119 120 dpkg buildpackage 121 122 If it s not present no compiler commands are detected In case you don t use 123 dpkp buildpackage but still want to check a build log adding it as first line 124 should work fine 125 126 To prevent false positives when checking debug builds compiler lines 127 containing OO or Og are considered debug builds and are not checked for 128 O2 even though fortification doesn t work without O2 129 130 The following non verbose builds can t be detected 131 132 gcc o test 133 134 This is not detected because test has no file extension A file extension is 135 required on a

    Original URL path: http://ruderich.org/simon/gitweb/?p=blhc/blhc.git;a=blob;f=README;hb=HEAD (2016-04-29)
    Open archived version from archive


  • Configuration files
    bash with glob support e g Ctrl R iptables host to list iptables commands for host colored multi line prompt including vcs info different prompt color when running as root colored stderr not working perfectly for a better solution see coloredstderr which is automatically used if available global aliases for less L grep G sort S etc example usage program G test S L instead of program grep test sort less very short aliases e g g git m make s mpc v vim mu mutt etc don t complete unimportant files for vim like log aux useful when using LaTeX provide Ctrl F as fallback to complete all files well documented completion settings tab on empty input line lists all files in the current directory automatically run rehash when a command wasn t found fixes tab completion when installing new programs automatically add visited directories to directory stack automatically reattach to running GNU screen or Tmux configurable session or open a new one display running time of long running processes and send bell to the terminal so GNU screen Tmux can mark the window as active useful to quickly spot when a program is done restart zsh exec zsh when zshrc was modified restart is skipped if there are active background jobs or if the new config fails to load compatibility with older Zsh versions Also available as Git repository with additional configuration files for zsh bash screen less git clone http ruderich org simon config shell git GNU readline command line editing library with history support used by bash and many other programs inputrc updated 2015 06 14 A single Tab lists all available matches List all available matches and use a pager in case they don t fit on the current screen Use Vi editing mode jk exits insert mode Ctrl P Ctrl N work like Up Down but list only history lines starting with the current input line Very useful to recall old commands quickly Support Ctrl L to redraw screen in Vi mode Git one of the best DVCS gitconfig updated 2015 06 14 very short aliases e g ap add p c commit v d diff dc diff cached dcw diff cached color words s status ss stash save sa stash apply etc aliases to push fetch many remotes in parallel for increased speed rp ru needs xargs alias to list all untracked files and their contents improved wordregex for IMHO better color words diffs display diff in commit message file commit verbose custom colors for diffs use pager for some commands branch status tag allow diffing of gzip PDFs and SQLite files using gitattributes don t require Enter for interactive commands which require only a single key for example git add patch tig a gitk like viewer for the console tigrc updated 2015 06 14 gitk like colors map J K to move in the log window while looking at a diff disable mappings which modify the repository use tig as read only

    Original URL path: http://ruderich.org/simon/config/ (2016-04-29)
    Open archived version from archive

  • tlsproxy (0.2)
    including wget curl etc or other programs using TLS getmail etc It s not very comfortable at the moment you have to add the certificates manually for example but should work fine Of course using a proxy isn t the best solution to this problem Instead all browsers and other programs using TLS should provide a similar interface to ensure the server certificate doesn t change without the user noticing Until this happens it can be used as a workaround A recent attack on a CA 1 which allowed attackers to create certificates for important websites clearly demonstrated that we need better server certificate validation in our browsers 1 https blog torproject org blog detecting certificate authority compromises and web browser collusion It s important to know that tlsproxy does not perform any validation on the certificates you give it by checking CAs CRLs etc it only ensures that the certificate you give it is the only one used by the server You must verify the server certificate on your own tlsproxy is licensed under GPL 3 or later If you find any bugs or have suggestions please tell me at simon ruderich org Requirements C89 compiler GnuTLS library including

    Original URL path: http://ruderich.org/simon/tlsproxy/ (2016-04-29)
    Open archived version from archive

  • ruderich.org/simon Gitweb
    check 7 months ago summary shortlog log tree coloredstderr coloredstderr git colored stderr by hooking output functio 17 months ago summary shortlog log tree fcscs fcscs git fast curses screen content select tool 2 months ago summary shortlog log tree socket2unix socket2unix git convert network sockets to UNIX sockets 2 years ago summary shortlog log tree tlsproxy tlsproxy git Certificate verifying tlsproxy prevents 2 years ago summary shortlog log tree

    Original URL path: http://ruderich.org/simon/gitweb/ (2016-04-29)
    Open archived version from archive

  • ruderich.org/simon Gitweb - projects in 'blhc'
    org simon blhc re List all projects in blhc Project Description Last Change blhc blhc git build log hardening check tool to check 7 months ago summary shortlog log tree

    Original URL path: http://ruderich.org/simon/gitweb/?a=project_list;pf=blhc (2016-04-29)
    Open archived version from archive

  • ruderich.org/simon Gitweb - blhc/blhc.git/summary
    fix false positive in rm lines commit commitdiff tree snapshot 2015 09 15 Simon Ruderich fix false positive with gcc v commit commitdiff tree snapshot 2015 09 15 Simon Ruderich fix false positive in libtool link g include commit commitdiff tree snapshot 2015 09 14 Simon Ruderich fix comments commit commitdiff tree snapshot 2015 09 11 Simon Ruderich update copyright years commit commitdiff tree snapshot 2015 09 11 Simon Ruderich sync architecture specific hardening support with dpkg commit commitdiff tree snapshot 2014 08 19 Simon Ruderich release 0 05 0 05 commit commitdiff tree snapshot 2014 08 19 Simon Ruderich update copyright years commit commitdiff tree snapshot 2014 08 19 Simon Ruderich sync architecture specific hardening support with dpkg commit commitdiff tree snapshot 2014 08 13 Simon Ruderich don t check for source fortification in debug lines commit commitdiff tree snapshot 2014 08 13 Simon Ruderich check for fstack protector strong commit commitdiff tree snapshot 2014 08 13 Simon Ruderich sync architecture specific hardening support with dpkg commit commitdiff tree snapshot 2014 07 05 Simon Ruderich NEWS update commit commitdiff tree snapshot 2014 07 05 Simon Ruderich t add test case for last commit commit commitdiff tree snapshot 2014 07

    Original URL path: http://ruderich.org/simon/gitweb/?p=blhc/blhc.git;a=summary (2016-04-29)
    Open archived version from archive

  • ruderich.org/simon Gitweb - blhc/blhc.git/search_help
    the given pattern On large trees this search can take a while and put some strain on the server so please use it with some consideration Note that due to git grep peculiarity currently if regexp mode is turned off the matches are case sensitive author Name and e mail of the change author and date of birth of the patch will be scanned for the given pattern committer Name

    Original URL path: http://ruderich.org/simon/gitweb/?p=blhc/blhc.git;a=search_help (2016-04-29)
    Open archived version from archive

  • ruderich.org/simon Gitweb - blhc/blhc.git/shortlog
    Simon Ruderich Handle another case of Qt s moc commit commitdiff tree snapshot 2013 06 01 Simon Ruderich MANIFEST Add missing t logs configure check commit commitdiff tree snapshot 2013 05 28 Simon Ruderich Add test for possible false negative in configure check commit commitdiff tree snapshot 2013 05 28 Simon Ruderich Fix false positive in configure output if CC contains commit commitdiff tree snapshot 2013 03 01 Simon Ruderich Release 0 04 0 04 commit commitdiff tree snapshot 2013 02 28 Simon Ruderich Update copyright year commit commitdiff tree snapshot 2013 02 28 Simon Ruderich Fix false positive in kismet s build log commit commitdiff tree snapshot 2012 10 06 Simon Ruderich NEWS Add recent changes commit commitdiff tree snapshot 2012 10 04 Simon Ruderich Handle more cases of moc qt4 and support moc qt5 commit commitdiff tree snapshot 2012 09 29 Simon Ruderich Detect architecture in old buildd logs which add an commit commitdiff tree snapshot 2012 09 25 Simon Ruderich README Document how build dependencies are extracted commit commitdiff tree snapshot 2012 09 24 Simon Ruderich Fix build dependency related checks for pbuilder build commit commitdiff tree snapshot 2012 09 24 Simon Ruderich Fix indentation commit commitdiff tree snapshot 2012 09 24 Simon Ruderich Also accept param ssp buffer size 4 commit commitdiff tree snapshot 2012 09 16 Simon Ruderich Accept Wformat 2 because it implies Wformat commit commitdiff tree snapshot 2012 07 08 Simon Ruderich Always end functions with return commit commitdiff tree snapshot 2012 07 07 Simon Ruderich Ignore missing Wformat Werror format security for commit commitdiff tree snapshot 2012 07 07 Simon Ruderich Prepare for multiple Build Depends checks commit commitdiff tree snapshot 2012 07 07 Nicolas Boulenguez Ignore CPPFLAGS for Ada files commit commitdiff tree snapshot 2012 07 07 Simon Ruderich Minor source documentation update commit commitdiff tree snapshot 2012 07 07 Simon Ruderich Use index in a few more places commit commitdiff tree snapshot 2012 07 06 Simon Ruderich Minor cleanup thanks to Perl Critic commit commitdiff tree snapshot 2012 07 06 Simon Ruderich README A recent Term ANSIColor is only necessary commit commitdiff tree snapshot 2012 07 06 Simon Ruderich Reduce calls to is non verbose build in second loop commit commitdiff tree snapshot 2012 06 30 Simon Ruderich Minor cleanup commit commitdiff tree snapshot 2012 06 30 Simon Ruderich Minor source documentation updates commit commitdiff tree snapshot 2012 06 25 Simon Ruderich Ignore false positives from CC gcc commit commitdiff tree snapshot 2012 06 25 Simon Ruderich Minor source documentation update commit commitdiff tree snapshot 2012 06 25 Simon Ruderich Minor documentation update commit commitdiff tree snapshot 2012 06 25 Simon Ruderich Fix indentation commit commitdiff tree snapshot 2012 06 25 Simon Ruderich Handle compiled headers h gch commit commitdiff tree snapshot 2012 06 03 Simon Ruderich gcc is the only supported compiler at the moment commit commitdiff tree snapshot 2012 05 31 Simon Ruderich t Fix test for non existent file commit commitdiff tree snapshot 2012 05 31 Simon

    Original URL path: http://ruderich.org/simon/gitweb/?p=blhc/blhc.git;a=shortlog (2016-04-29)
    Open archived version from archive



  •