Ubuntu Pastebin

Paste from rbalint at Sun, 9 Apr 2017 21:32:30 +0000

Download as text 
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
Zesty (and zesty-proposed) packages which would gain PIE coverage from a rebuild

The list is compiled using the following commands (roughly, copied from history) on a zesty VM:
$ mkdir all-debs && cd all-debs
$ grep-dctrl -sPackage -n . /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_zesty_main_binary-amd64_Packages /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_zesty_main_binary-amd64_Packages  | sort | uniq | xargs apt-get download
$ for i in *.deb; do  lintian -T hardening-no-pie -o -- $i; done > lintian-no-pie-debs.txt
$ for i in $(cat lintian-no-pie-debs.txt| awk '{print $2}'| sort | uniq | sed 's/://'); do apt-cache showsrc $i | awk '/Package:/ {print $2}' ; done  | sort | uniq > lintian-no-pie-sources.txt
$ cd ..
$ mkdir rebuild && cd rebuild
$ for i in $(cat ../all-debs/lintian-no-pie-sources.txt); do sbuild -A -d zesty $i -j4; done
# here some of the packages did not build with -j4, I recompiled them with -j1 except for a few like emacs25 and gcc* which don't use PIE and have been recompiled recently anyway
$ for i in *.deb; do  lintian -T hardening-no-pie -o -- $i; done > lintian-no-pie-debs2.txt
$ for i in $(cat lintian-no-pie-debs2.txt| awk '{print $2}'| sort | uniq | sed 's/://'); do apt-cache showsrc $i | awk '/Package:/ {print $2}' ; done  | sort | uniq > lintian-no-pie-sources2.txt
$ diff ../all-debs/lintian-no-pie-sources.txt lintian-no-pie-sources2.txt  | awk '/</ {print $2}'

acl
acpid
aspell
attr
bcache-tools
bison
cdrkit
cron
dctrl-tools
dh-exec
diffstat
dmraid
fcitx-configtool
geoclue
gfxboot
glibc
gnome-system-log
gobi-loader
gparted
gzip
hello
hfsutils
ibmasm-utils
ibus-sunpinyin
ipvsadm
irda-utils
irqbalance
jigit
john
joyent-mdata-client
libdumbnet
libpaper
lockfile-progs
lsscsi
lupin
m2300w
maas-enlist
mawk
min12xxw
mlocate
mouseemu
mousetweaks
mscompress
msr-tools
nicstat
notify-osd
opensp
pam
patch
pcmciautils
pkg-config
powertop
procmail
psmisc
pxljr
quota
raptor2
rasqal
rfkill
rtkit
sbc
squashfs-tools
syslinux-legacy
time
tinycdb
tmispell-voikko
tone-generator
ubuntu-geoip
unity-lens-files
unity-lens-music
unity-lens-video
unity-scope-home
unzip
usbmuxd
usbutils
uucp
whoopsie-preferences
wireless-tools
wvdial
x11-session-utils
x11-utils
x11-xserver-utils
xauth
xdg-user-dirs
xdg-user-dirs-gtk
xinput
zip
Download as text