blob: cc475043038a3ac7168e16469003ecaf09818ac0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
# These are false positives because they don't use any functions that need
# fortifying. Since we know we have hardening turned on globally, suppress
# them. If we ever see this warning again for *other* modules, then we know
# there's a real problem.
libpam-modules: hardening-no-fortify-functions *usr/lib/*/security/pam_echo.so*
libpam-modules: hardening-no-fortify-functions *usr/lib/*/security/pam_filter.so*
libpam-modules: hardening-no-fortify-functions *usr/lib/*/security/pam_group.so*
libpam-modules: hardening-no-fortify-functions *usr/lib/*/security/pam_localuser.so*
libpam-modules: hardening-no-fortify-functions *usr/lib/*/security/pam_shells.so*
libpam-modules: hardening-no-fortify-functions *usr/lib/*/security/pam_wheel.so*
# pam_deny.so does not use any symbol from libc.
libpam-modules: shared-lib-without-dependency-information *usr/lib/*/security/pam_deny.so*
libpam-modules: spare-manual-page [*]
|
