paxtest (1:0.9.15-2) unstable; urgency=medium * Remove linux-kernel-headers from dependencies (Closes: #959460) * debian/changelog: Add email in past upload to fix lintian errors, fix syntax issue in line -- Javier Fernández-Sanguino Peña Mon, 11 May 2020 13:56:48 +0200 paxtest (1:0.9.15-1) unstable; urgency=low * New upstream release - The new release avoids using a dummy function if compiling with clang instead of gcc (Closes: #758566) * Bumped debian/compat to 12 and update debian/control accordingly * debian/control: - Use https:// for grsecurity.net homepage - Add "armel arm64 armhf" to the list of supported architectures - Updated standards version to 4.5.0 * Remove debian/patches/02_change_log_file_location.diff and debian/patches/03_paxtest_add_info.diff as they have been applied upstream * Create a new patch (debian/patches/02_remove_cc_tests) to remove from the Makefiles the use of 'gcc' as a test when actually it is not provided at all. * debian/copyright: Add Brad Spengler as contributor as he is the developer behind the 0.9.15 release -- Javier Fernández-Sanguino Peña Mon, 13 Apr 2020 19:39:45 +0200 paxtest (1:0.9.14-2) unstable; urgency=low * debian/control: Add quilt to Build-Depends as required with the changes introduced in the previous version * debian/watch: Add file based on the watch file available provided by Bart Martens and available in: http://anonscm.debian.org/viewvc/sepwatch/trunk/watchfiles/ * Add new results files (Debian_sid_Linux_4_4_grsec_2016.blackhat, Debian_sid_Linux_4_4_grsec_2016.kiddie) provided by 'Esokrates' based on the execution of paxtest in a Linux 4.4 kernel with grsecurity * Add a README file documenting what paxtest execution examples are provided -- Javier Fernández-Sanguino Peña Mon, 02 May 2016 21:16:13 +0200 paxtest (1:0.9.14-1) unstable; urgency=medium * New upstream release and upload to Debian - This release fixes the incomplete output issue reported in standard kernels (Closes: #779316) * debian/docs: Adjust with the contents now available from upstream * debian/rules: Simplify the package construction by converting it to debhelper * Convert into 3.0 quilt format and move patches to debian/patches: - 01_add_results.diff - add paxtest results from some systems - 02_change_log_file_location.diff - change location of paxtest logfile - 03_paxtest_add_info.diff - Add more information to paxtest logfile - 04_remove_void_function.diff: Add patch to fix bug 758566 as provided in the bug report. This patch is not applied yet as we do not know if this impacts the tests themselves and is required by the paxtest program. * Create example results for execution in a Linux sid system using kernel 4.4 * Move the results from docs to examples. Do not ship the Adamantix sample anymore as the project is defunct -- Javier Fernández-Sanguino Peña Sat, 30 Apr 2016 13:47:59 +0200 paxtest (0.9.13-1) stable; urgency=low * Added VDSO randomization test * Added basic entropy quality testing, subtracts weak bits from entropy count * Increased iterations for all randomization tests but the exhaustion tests -- Brad Spengler Thu, 26 Aug 2010 19:17:00 +0200 paxtest (0.9.12-1) stable; urgency=low * Added ARM support -- Brad Spengler Thu, 26 Aug 2010 19:17:00 +0200 paxtest (1:0.9.11-2) unstable; urgency=low * New upstream release, uploaded to Debian. (Closes: #665800) - The upstream fixed the FTBFS error reported - "fix build with ld --as-needed". Makefile.psm now places libraries behind the objects needing their symbols on the commandline when building with ld --as-needed (initially reported with patch by Julian Taylor ) (LP: #831405) (Closes: #639128) * debian/control: - Add, as to the list of architectures the following: amd64 sparc powerpc (as they seem to be supported in the source). - Put full maintainer's name in UTF-8 * debian/changelog: - Add changelog of Ubuntu entry - Add dates to upstream releases based on timestamps of files at http://grsecurity.net/~spender/ * debian/sample.debian, debian/rules: - Add an output example when running in a Debian system (a kernel that does not include the grsecurity patch) -- Javier Fernández-Sanguino Peña Mon, 04 Nov 2013 19:31:08 +0100 paxtest (0.9.11-1) stable; urgency=low * Added display of exhaustion tests -- Brad Spengler Thu, 31 Jan 2013 23:21:00 +0200 paxtest (0.9.10-1) stable; urgency=low * Fixed compilation problem reported on forums * Added display of argv/env randomization -- Brad Spengler Thu, 29 Dec 2012 19:42:00 +0200 paxtest (1:0.9.9-1ubuntu1) oneiric; urgency=low * Fix FTBFS with ld --as-needed. LP: #831405. -- Matthias Klose Wed, 14 Sep 2011 10:30:24 +0200 paxtest (1:0.9.9-1) unstable; urgency=medium * New upstream release, uploaded to Debian. (LP: #530778) (Closes: #570990) * genpaxtest: Modify so that the 'paxtest' script generated uses either a user-provided logfile as argument or the $HOME/paxtest.log instead of paxtest.log for its results in order to prevent it from writing in the users' CWD and avoid symlink tricks if the user is executing this in a shared (i.e. writable by others) directory such as /tmp. Fixes CVE-2010-3373 (Closes: #598413) * Updated results in the results/ directory for a stock Debian kernel (i.e. no overflow protection) * Use debhelper compatibility version 5 * debian/rules: Use conditions to build using 'linux32', 'linux64' or just 'linux' * Document the new Homepage in debian/control, also list both the new and the old one in debian/copyright * Updated debian/paxtest.sgml to properly reflect the arguments used in the paxtest script and the new behaviour wrt log files. * Fix upstream's debian/changelog to have proper maintainer lines. Use the date information of the files as a basis. * Updated the content under results/ for a stock Debian kernel (2.6.32) and rename the older result files for Debian kernel 2.4.25 -- Javier Fernandez-Sanguino Pen~a Tue, 28 Sep 2010 23:40:17 +0200 paxtest (0.9.9-1) stable; urgency=low * added SPARC/64 support * added PPC/64 support (return to function tests should be ignored for PPC64) * added 32/64bit target support * added shellode.h to easily support additional architectures * made paxctl generate the PT_PAX_FLAGS header for binaries that didn't have one -- Brad Spengler Thu, 26 Aug 2010 19:17:00 +0200 paxtest (0.9.7-pre4-2) unstable; urgency=low * New upstream release. * Build-Depend on linux-kernel-headers (Closes: #382011, #423308) * Fix typo in package description (Closes: #390250) * Use proper Homepage in debian/control * Use debhelper version 4 * Remove duplicate content from debian/paxtest.sgml * Fix lintian errors * Change the maintainer's email address * Update Standards-Version -- Javier Fernandez-Sanguino Pen~a Tue, 26 Jun 2007 21:34:15 +0200 paxtest (0.9.7-1) stable; urgency=low * Fixed some tests on OpenBSD and FreeBSD (thanks to paxtest@hunger.hu and mux@freebsd.org) * Fixed return address acquisition, still gcc specific * Switched to paxctl on gentoo * Fixed setting up LD_LIBRARY_PATH in genpaxtest (Peter S. Mazinger) * Added uClibc support (Peter S. Mazinger) * Fixed the executable shared library data/bss tests (thanks to paxtest@hunger.hu) -- Peter Busser Wed, 25 Feb 2004 20:24:53 +0200 paxtest (0.9.6-2) unstable; urgency=low * New upstream release, uploaded to debian. * Remove COPYING from debian/docs (generates duplicates) * Added results in the results/ directory for a stock Debian kernel (i.e. no overflow protection) -- Javier Fernandez-Sanguino Pen~a Sun, 2 May 2004 21:46:16 +0200 paxtest (0.9.6-1) stable; urgency=low * Made the do_mprotect() call in body.c optional, thereby introducing two modes: script kiddie mode (which does not perform the do_mprotect()) and blackhat mode, which does. * Added a README file * Added Adamantix paxtest results * Removed -etdyn from the Adamantix make file * Replaced mprotect() in body.c with pthread calls (which eventually have the same result) * Added a nested function, to measure the effect of nested functions on the level of protection. * Added paxtest result from Gentoo hardened (thanks to Ned Ludd) * Added a new Makefile for Gentoo (thanks to Ned Ludd) * Fixed spelling errors (thanks to pageexec@freemail.hu) -- Peter Busser Wed, 25 Feb 2004 20:24:53 +0200 paxtest (0.9.5-3) unstable; urgency=low * Changed http references to new location at http://pax.grsecurity.net/docs (Closes: #234227) * Fixed typo in debian/copyright and added download location -- Javier Fernandez-Sanguino Pen~a Sun, 22 Feb 2004 19:04:53 +0100 paxtest (0.9.5-2) unstable; urgency=low * First version uploaded to Debian (Closes: #222688, #222481) * Modified to run the generic Makefile instead of Adamantix's. * Moved from main section to devel. * Fixed typo in description. * Avoid creation of a logfile in paxtest and instead use redirection tricks to create logfile if asked for and log to stdout/stderr in any other case. * Wrote a manpage for paxtest. * Added Ingo Molnar's patch to check for non-executable thread stacks (since nobody objected to it in the discussion at debian-devel) Retrieved from: http://lists.debian.org/debian-devel/2003/debian-devel-200311/msg00330.html -- Javier Fernandez-Sanguino Pen~a Sat, 29 Nov 2003 20:28:46 +0100 paxtest (0.9.5-1) unstable; urgency=low * Fixed the shlibbss and shlibdata tests (pageexec@freemail.hu) * Non-executable page tests expose incomplete implementations (pageexec@freemail.hu) -- Peter Busser Tue, 04 Nov 2003 16:37:26 +0200 paxtest (0.9.4-1) unstable; urgency=low * Fixed mprotanon (pageexec@freemail.hu) * Fixed rettofunc[12] (pageexec@freemail.hu) * Fixed shared library data/bss tests (pageexec@freemail.hu) * Introduced return-to-libc detection as proof-of-concept (pageexec@freemail.hu) -- Peter Busser Tue, 22 Oct 2003 21:00:05 +0200 paxtest (0.9.3-1) unstable; urgency=low * Changed e-mail addresses in source files to peter@adamantix.org * Added copyright message printing in the run script. * Upgraded to chpax v0.5 (pageexec@freemail.hu) * Split randheap in two parts, one as ET_EXEC and the other as ET_DYN -- Peter Busser Sun, 12 Oct 2003 10:58:52 +0200 paxtest (0.9.0-1) unstable; urgency=low * Initial Release. -- Peter Busser Mon, 19 May 2003 13:44:39 +0200