blob: 3eba0f9395ad331fa0461faa3a3302f8c6217db3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
# These are false positives because they don't use any functions that need
# fortifying. Since we know we have hardening turned on globally, suppress
# them. If we ever see this warning again for *other* modules, then we know
# there's a real problem.
libpam-modules: hardening-no-fortify-functions lib/*/security/pam_echo.so
libpam-modules: hardening-no-fortify-functions lib/*/security/pam_filter.so
libpam-modules: hardening-no-fortify-functions lib/*/security/pam_group.so
libpam-modules: hardening-no-fortify-functions lib/*/security/pam_localuser.so
libpam-modules: hardening-no-fortify-functions lib/*/security/pam_shells.so
libpam-modules: hardening-no-fortify-functions lib/*/security/pam_wheel.so
# pam_deny.so does not use any symbol from libc.
libpam-modules: shared-lib-without-dependency-information lib/*/security/pam_deny.so
|
