aboutsummaryrefslogtreecommitdiff
path: root/debian/patches/hardening_improve.patch
diff options
context:
space:
mode:
Diffstat (limited to 'debian/patches/hardening_improve.patch')
-rw-r--r--debian/patches/hardening_improve.patch50
1 files changed, 50 insertions, 0 deletions
diff --git a/debian/patches/hardening_improve.patch b/debian/patches/hardening_improve.patch
new file mode 100644
index 0000000..757e64f
--- /dev/null
+++ b/debian/patches/hardening_improve.patch
@@ -0,0 +1,50 @@
+Description: Deleted not needed sets, make already do built-in.
+Author: Lucas de Castro Borges <lucascastroborges@gmail.com>
+Last-Update: 2016-05-19
+Forwarded: yes
+Index: lsm-1.0.4/Makefile
+===================================================================
+--- lsm-1.0.4.orig/Makefile
++++ lsm-1.0.4/Makefile
+@@ -14,8 +14,6 @@ override CFLAGS += -Wall -O2 -DLSM_VERSI
+ #override CFLAGS += -D NO_PLUGIN_EXPORT_MUNIN
+ #override CFLAGS += -D NO_PLUGIN_EXPORT_STATUS
+
+-LDFLAGS =
+-
+ PREFIX ?= /usr/local
+ DESTDIR ?=
+ BINDIR ?= $(PREFIX)/sbin
+@@ -34,14 +32,10 @@ override CFLAGS += -DSCRIPTDIR=\"$(SCRIP
+
+ all: $(PROGS)
+
+-%.o: %.c
+- $(CC) $(CFLAGS) -c -o $@ $<
+-
+ lsm: lsm.o icmp_t.o icmp6_t.o config.o globals.o cksum.o forkexec.o signal_handler.o timecalc.o plugin_export.o save_statuses.o pidfile.o cmdline.o usage.o
+- $(CC) $(CFLAGS) -o $@ $^ $(LDFLAGS)
+
+ clean distclean:
+- rm -rf *~ .*~ *.o $(PROGS) Makefile.depend debugfiles.list debuglinks.list debugsources.list *.orig
++ rm -rf *~ .*~ *.o $(PROGS) debugfiles.list debuglinks.list debugsources.list *.orig
+
+ tar: distclean
+ tar zcvf ../$(PKG)-$(VERSION).tar.gz \
+@@ -56,9 +50,6 @@ rpm: tar
+ cp $(PKG).spec ~/rpmbuild/SPECS
+ rpmbuild -ba ~/rpmbuild/SPECS/$(PKG).spec
+
+-Makefile.depend: *.c *.h Makefile
+- $(CC) -MM *.c > $@
+-
+ install: all
+ install -d $(DESTDIR)$(EXAMPLEDIR)
+ install -d $(DESTDIR)$(SCRIPTDIR)
+@@ -68,6 +59,4 @@ install: all
+ install -m0644 $(DOCFILES) $(DESTDIR)$(EXAMPLEDIR)
+ install -m0755 $(SCRIPTS) $(DESTDIR)$(SCRIPTDIR)
+
+--include Makefile.depend
+-
+ #