15 lines
957 B
Plaintext
15 lines
957 B
Plaintext
# These are false positives because they don't use any functions that need
|
|
# fortifying. Since we know we have hardening turned on globally, suppress
|
|
# them. If we ever see this warning again for *other* modules, then we know
|
|
# there's a real problem.
|
|
libpam-modules: hardening-no-fortify-functions *lib/*/security/pam_echo.so*
|
|
libpam-modules: hardening-no-fortify-functions *lib/*/security/pam_filter.so*
|
|
libpam-modules: hardening-no-fortify-functions *lib/*/security/pam_group.so*
|
|
libpam-modules: hardening-no-fortify-functions *lib/*/security/pam_localuser.so*
|
|
libpam-modules: hardening-no-fortify-functions *lib/*/security/pam_shells.so*
|
|
libpam-modules: hardening-no-fortify-functions *lib/*/security/pam_wheel.so*
|
|
# pam_deny.so does not use any symbol from libc.
|
|
libpam-modules: shared-lib-without-dependency-information *lib/*/security/pam_deny.so*
|
|
# lintian doesn't know what to do with manpages for pam modules
|
|
libpam-modules: spare-manual-page *
|