Hardening subgoal for Wheezy: All daemons and libraries accessible from the network debtags search --names 'interface::daemon && implemented-in::c' Instructions: - After checking a package, add it to the "Candidates:" list or non-candidates.txt - After NMUing a candidate where all build flags have been successfully enabled, add it to the "Resolved/fixed:" list - After NMUing a candidate with only some of the build flags enabled, add it to the "Partially fixed: list (in order to remember what needs further work in the future) This list needs cleaned up further: - Packages with same source should be merged - Packages without tags should be added To check: ample amule and archfs asterisk at autofs autossh avr-evtd bacula bandwidthd bcron beanstalkd binkd bip bird bitlbee bluemon bluez boa bozohttpd busybox-syslogd c-icap cfengine2 cherokee clamsmtp collectd conntrack consolekit crossfire ctrlproxy cvsd cyrus-imapd-2.2 cyrus-imapd-2.4 daemon daemontools dancer-ircd dancer-services dante dbndns dbus dhis-dns-engine dhis-mx-sendmail-engine dhis-server dicod djbdns dma dnsproxy dovecot dsyslog dynamips eggdrop ekeyd esmtp exim4 ez-ipupdate fair fldigi fprobe freepops freeradius gamin gammu gconf git gnome-keyring gnome-settings-daemon gpm gpsd gogoc hal haveged hdapsd hlbr httptunnel hybserv ibod icecast2 ident2 ifmail ifplugd ifuse inn inn2 innfeed inoticoming inputlirc iodine ipband ircd-hybrid ircd-irc2 ircd-ircu isakmpd iscsitarget isns kannel kerneloops keynav klone krb5-appl labrea ldm-server leafnode libchipcard libdaemon libpam-ssh linux-atm linux-igd linux-ftpd lldpd lnpd lsh-server lsyncd lyskom-server maradns masqmail mathopd memcached micro-httpd milter-greylist mini-httpd minit miredo mmpong moc mpd mpdscribble muroard mxallowd mysql-5.1 nagios3 nas net-acct net-snmp netatalk netplug nfdump nfs-utils ngetty ngircd notification-daemon notify-osd nuttcp obex-data-server oftc-hybrid open-iscsi openafs openbsd-inetd opencryptoki openvas-server p910nd pacemaker pads portsentry postfix-gld powernowd ppp prayer preload privoxy pvm quagga radioclk radiusd-livingston randomsound readahead remctl rlinetd rpld rrdcollect rsh-redone scanbuttond shell-fm shishi sl-modem sleepd slony1 slony1-2 smcroute snmptrapfmt sphinxsearch squidguard stunnel4 sup swapspace synergy sysrqd sysstat sysvinit tcpd tcpspy telepathy-gabble telepathy-haze telepathy-idle telepathy-salut telepathy-sofiasip telnetd-ssl tetrinet-server thttpd timidity timps tor tracker transmission-daemon tsocks ttysnoop udev udisks up-imapproxy upower upstart uptimed usbmuxd uucp uw-imap v86d varnish vtun warsow-server webfs wicd-cli wims wmaloader wu-ftpd xfce4-session xfce4-volumed xfstt xfwm4 xmms2-core xneur xrdp xserver-xephyr xymon yubikey-server-c zabbix zephyr Candidates: clamav (#644335) sniffit (#649817) radvd (#665715) Partially fixed: Resolved/fixed: aiccu 20070115-15 #644408 amanda 1:3.3.1-1 apache2 2.2.12-1, sometimes partial apt-cacher-ng 0.6.12-1 avahi bind9 1:9.5.0.dfsg.P2-2 cron 3.0pl1-121 fetchmail 6.3.21-3 inetutils 2:1.9-1 isc-dhcp 4.2.2-2 krb5 1.10+dfsg~beta1-1 #655248 lighttpd 1.4.30-1 loqui 0.5.1-2 memcachedb 1.2.0-9 nagios-plugins 1.4.15-5 nbd 1:3.0-1 nginx 1.1.14-1 openldap 2.4.25-4 #644427 openssh 1:5.2p1-1 openvpn 2.2.1-4 pcsc-lite 1.8.2-1 postfix 2.5.4-2 rsyslog 5.8.6-1 #644303 solid-pop3d 0.15-25 squid 2.7.STABLE7-1 squid3 partial sslh 1.10-1 suricata 1.0-1 tcpdump 4.0.0-6 tinc 1.0.19-1 tinyproxy 1.8.3-2 trousers 0.3.8-1 vsftpd 2.3.5-2 #644295 xdm 1:1.1.11-1 w3m 0.5.3-5 inspircd 2.0.5-0.1 Not relevant: sks ocaml