/[secure-testing]/hardening/subgoal-dsa.txt
ViewVC logotype

Contents of /hardening/subgoal-dsa.txt

Parent Directory Parent Directory | Revision Log Revision Log


Revision 17234 - (show annotations) (download)
Tue Sep 13 23:55:28 2011 UTC (20 months, 1 week ago) by gilbert-guest
File MIME type: text/plain
File size: 5763 byte(s)
add some instructions for hardening work
1 Hardening subgoal for Wheezy:
2 All packages, which had a DSA since 2006.
3
4 Instructions:
5 - After checking a package, add it to the "Candidates:" or "Non-candidates:" list
6 - After NMUing a candidate, add it to the "Resolved/fixed:" list
7
8 This lists needs cleaned up further:
9 - Software written in non-C/C++ languages (PHP, etc.) should be added to
10 the "Non-candidates:" list
11 - Some packages have been removed/superceded by newer srcpkg (I did
12 some cursory cleanup, but needs more work)
13
14 To check:
15
16 abc2ps
17 abcmidi
18 acpid
19 advi
20 adzapper
21 afuse
22 aircrack-ng
23 ajaxterm
24 albatross
25 alsaplayer
26 amarok
27 amule
28 antiword
29 apache
30 apache2
31 apr
32 apr-util
33 apt
34 apt-listchanges
35 aria2
36 asterisk
37 audiofile
38 auth2db
39 avahi
40 awstats
41 b2evolution
42 backup-manager
43 barnowl
44 belpic
45 bind
46 bind9
47 blender
48 bluez-hcidump
49 bmv
50 bochs
51 boinc
52 bomberclone
53 bsdgames
54 bugzilla
55 bzip2
56 cabextract
57 ca-certificates
58 cacti
59 camlimages
60 capi4hylafax
61 centericq
62 cfs
63 cgiirc
64 changetrack
65 cheesetracker
66 chmlib
67 chromium-browser
68 chrony
69 citadel
70 clamav
71 collectd
72 couchdb
73 courier
74 courier-authlib
75 cpio
76 crawl
77 crossfire
78 cscope
79 ctorrent
80 cups
81 cupsys
82 curl
83 cvsnt
84 cyrus-imapd
85 cyrus-imapd-2.2
86 cyrus-sasl2
87 dbus
88 debian-goodies
89 devil
90 devscripts
91 dhcp
92 dhcp3
93 dia
94 djbdns
95 dkim-milter
96 dnsmasq
97 doctrine
98 dokuwiki
99 dovecot
100 dpkg
101 drbd8
102 drupal6
103 dspam
104 dtc
105 dvipng
106 e2fsprogs
107 eggdrop
108 ejabberd
109 ekg
110 elinks
111 elog
112 emacs21
113 enemies-of-carlotta
114 enscript
115 etch
116 ethereal
117 evince
118 evolution
119 evolution-data-server
120 exiftags
121 exim4
122 exiv2
123 expat
124 fail2ban
125 fbi
126 fcheck
127 fetchmail
128 fex
129 file
130 firebird
131 firebird2
132 fireflier
133 firefox-sage
134 flac
135 flamethrower
136 flex
137 flexbackup
138 flyspray
139 fontforge
140 freeciv
141 freeradius
142 freetype
143 fuse
144 gaim
145 gallery
146 gallery2
147 ganeti
148 ganglia-monitor-core
149 gcc-3.4
150 gdm
151 gdm3
152 gfax
153 gforge
154 gforge-plugin-scmcvs
155 ghostscript
156 gimp
157 git-core
158 gitolite
159 glib2.0
160 glibc
161 gmime2.2
162 gnatsweb
163 gnocatan
164 gnomemeeting
165 gnome-peercast
166 gnumeric
167 gnupg
168 gnupg2
169 gnutls11
170 gnutls13
171 gpdf
172 graphicsmagick
173 gsambad
174 gs-esp
175 gst-plugins-bad0.10
176 gst-plugins-good0.10
177 gtetrinet
178 gtk+2.0
179 gv
180 gzip
181 hashcash
182 heartbeat
183 heimdal
184 hf
185 hiki
186 horde2
187 horde3
188 hostapd
189 hplip
190 htdig
191 httrack
192 hybserv
193 hylafax
194 iceape
195 icedove
196 iceweasel
197 icu
198 id3lib3.8.3
199 ikiwiki
200 ilohamail
201 imagemagick
202 imlib2
203 imp4
204 ingo1
205 inotify-tools
206 ipplan
207 ipsec-tools
208 ircd-hybrid
209 isakmpd
210 isc-dhcp
211 iscsitarget
212 jabberd14
213 jailer
214 jasper
215 jffnms
216 kaffeine
217 kazehakase
218 kde4libs
219 kdebase
220 kdegraphics
221 kdelibs
222 koffice
223 kolab-cyrus-imapd
224 kphone
225 krb5
226 krb5-appl
227 kronolith
228 kronolith2
229 ktorrent
230 kvirc
231 kvm
232 l2tpns
233 lasso
234 lcms
235 ldap-account-manager
236 ldapscripts
237 ldns
238 lftp
239 libapache2-mod-authnz-external
240 libapache2-mod-auth-pgsql
241 libapache2-mod-fcgid
242 libapache-auth-ldap
243 libapache-mod-auth-kerb
244 libapache-mod-jk
245 libapreq2-perl
246 libarchive
247 libav
248 libast
249 libcairo
250 libcdaudio
251 libcgroup
252 libcrypt-cbc-perl
253 libdbd-pg-perl
254 libdumb
255 libexif
256 libextractor
257 libfishsound
258 libgd2
259 libgsf
260 libgtop2
261 libhtml-parser-perl
262 libimager-perl
263 libmail-audit-perl
264 libmikmod
265 libmodplug
266 libmojolicious-perl
267 libmusicbrainz-2.0
268 libnet-dns-perl
269 libnet-server-perl
270 libnss-ldap
271 libopenssl-ruby
272 libpam-heimdal
273 libpam-krb5
274 libpam-ldap
275 libphp-adodb
276 libphp-phpmailer
277 libpng
278 librpcsecgss
279 libsmi
280 libsndfile
281 libsoup
282 libspf2
283 libtasn1-2
284 libthai
285 libtheora
286 libtk-img
287 libtool
288 libtorrent-rasterbar
289 libtunepimp
290 libvirt
291 libvorbis
292 libwmf
293 libwpd
294 libxerces2-java
295 libxfont
296 libxml
297 libxml2
298 libxslt
299 lighttpd
300 link-grammar
301 links
302 links2
303 linux-ftpd
304 logwatch
305 lookup-el
306 loop-aes-utils
307 lsh-server
308 ltsp
309 lurker
310 lvm2
311 lxr-cvs
312 lynx-cur
313 mahara
314 maildrop
315 mailman
316 man-db
317 mantis
318 mapserver
319 maradns
320 mediawiki
321 memcached
322 metamail
323 migrationtools
324 mimetex
325 mldonkey
326 mlmmj
327 moin
328 mon
329 mono
330 moodle
331 motor
332 movabletype-opensource
333 mpg123
334 mplayer
335 mt-daapd
336 mtr
337 multipath-tools
338 mutt
339 mydms
340 mydns
341 mysql-dfsg-5.0
342 mysql-ocaml
343 nagios3
344 icinga
345 nagios-plugins
346 nas
347 nbd
348 ncompress
349 ndiswrapper
350 netatalk
351 netpbm-free
352 netrik
353 net-snmp
354 network-manager
355 newsx
356 newt
357 nfs-user-server
358 nginx
359 no-ip
360 noweb
361 nsd
362 nspr
363 nss
364 nss-ldapd
365 ntp
366 ocsinventory-agent
367 openafs
368 openexr
369 open-iscsi
370 openjdk-6
371 openldap
372 libreoffice
373 opensaml
374 opensaml2
375 opensc
376 openssh
377 openssl
378 openswan
379 openvpn
380 opie
381 oprofile
382 osiris
383 otrs
384 otrs2
385 pam-pgsql
386 pango1.0
387 pcre3
388 pcsc-lite
389 pdfkit.framework
390 pdftohtml
391 pdns
392 pdns-recursor
393 peercast
394 perdition
395 perl
396 petris
397 php4
398 php5
399 phpbb2
400 phpgedview
401 php-json-ext
402 phpldapadmin
403 php-mail
404 phpmyadmin
405 php-net-ping
406 phppgadmin
407 phpwiki
408 php-xajax
409 phpymadmin
410 pidgin
411 pimd
412 pinball
413 pmount
414 policyd-weight
415 polipo
416 popfile
417 poppler
418 postfix
419 postfix-policyd
420 postgresql
421 postgresql-8.3
422 postgresql-ocaml
423 postgrey
424 pound
425 ppp
426 pptpd
427 proftpd-dfsg
428 psi
429 pstotext
430 pulseaudio
431 pygresql
432 python
433 python2.5
434 python-cherrypy
435 python-cjson
436 python-crypto
437 python-django
438 python-dns
439 pywebdav
440 qemu
441 qemu-kvm
442 qt4-x11
443 qt-x11-free
444 quagga
445 rails
446 rdesktop
447 redmine
448 refpolicy
449 reprepro
450 request-tracker3.4
451 request-tracker3.6
452 request-tracker3.8
453 resmgr
454 roundup
455 rssh
456 rsync
457 ruby1.8
458 ruby1.9
459 ruby-gnome2
460 samba
461 sash
462 scponly
463 screen
464 sdl-image1.2
465 sendmail
466 serendipity
467 shadow
468 silc-client
469 sitebar
470 slash
471 slurm-llnl
472 smarty
473 smbind
474 smstools
475 snmptrapfmt
476 socat
477 sork-passwd-h3
478 spamassassin
479 spamass-milter
480 speex
481 spip
482 splitvt
483 sql-ledger
484 squid
485 squid3
486 squidguard
487 squirrelmail
488 storebackup
489 streamripper
490 strongswan
491 subversion
492 sudo
493 suphp
494 sword
495 sympa
496 syslog-ng
497 systemtap
498 t1lib
499 tar
500 tcpdump
501 tcpreen
502 tdiary
503 telepathy-gabble
504 tetex-bin
505 tex-common
506 texinfo
507 tgt
508 thttpd
509 tiff
510 tinymux
511 tinyproxy
512 tk8.3
513 tk8.4
514 tmux
515 tor
516 trac
517 trac-git
518 transmission
519 tunapie
520 turba2
521 tutos
522 tuxpaint
523 twiki
524 typespeed
525 typo3-src
526 udev
527 unalz
528 unbound
529 unicon
530 unzip
531 upcoming
532 usermin
533 util-linux
534 uw-imap
535 vim
536 vino
537 vlc
538 vnc4
539 webcalendar
540 webcit
541 webkit
542 webmin
543 websvn
544 weechat
545 wesnoth
546 wget
547 wine
548 wireshark
549 wml
550 wordnet
551 wordpress
552 wv2
553 wxwidgets2.6
554 wzdftpd
555 x11-xserver-utils
556 xapian-omega
557 xen-3.0
558 xfce4-terminal
559 xfree86
560 xfs
561 xine
562 xine-lib
563 xmcd
564 xmlsec1
565 xml-security-c
566 xmltooling
567 xmms
568 xorg-server
569 xpdf
570 xpvm
571 xterm
572 xulrunner
573 xwine
574 xzgv
575 yarssr
576 yaws
577 zabbix
578 zaptel
579 zgv
580 znc
581 zodb
582 zonecheck
583 zoo
584 zope2.10
585 zope2.7
586 zope-cmfplone
587 zope-ldapuserfolder
588 zoph
589
590 Non-candidates:
591
592 Candidates:
593
594 Resolved/fixed:
595
596

  ViewVC Help
Powered by ViewVC 1.1.5