Drop old hardening check script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/Makefile.am b/Makefile.am
index a083c8042aa53f93dfa03442f7a4ade5ddfaaabe..1c0b206317a1e955e7dba009d900f629f11c88da 100644 (file)
--- a/Makefile.am
+++ b/Makefile.am
@@ -720,7 +720,6 @@ tests_parser_test_LDADD = \
 # ------------------------------------------------------------------------------
 
 dist_scripts_SCRIPTS = \
-       src/scripts/check-hardening \
        src/scripts/check-interpreters \
        src/scripts/compress-man-pages \
        src/scripts/find-prerequires \

diff --git a/src/libpakfire/build.c b/src/libpakfire/build.c
index 4c46a11480a03fae47272346c10206a5a3f31ec9..deae26094c8261f56c325f9789603a7b0e886478 100644 (file)
--- a/src/libpakfire/build.c
+++ b/src/libpakfire/build.c
@@ -1292,7 +1292,6 @@ ERROR:
 }
 
 static const char* post_build_scripts[] = {
-       "check-hardening",
        "check-interpreters",
        "compress-man-pages",
        "strip",

diff --git a/src/scripts/check-hardening b/src/scripts/check-hardening
deleted file mode 100644 (file)
index b37d62c..0000000
--- a/src/scripts/check-hardening
+++ /dev/null
@@ -1,98 +0,0 @@
-#!/bin/bash
-###############################################################################
-#                                                                             #
-# Pakfire - The IPFire package management system                              #
-# Copyright (C) 2021 Pakfire development team                                 #
-#                                                                             #
-# This program is free software: you can redistribute it and/or modify        #
-# it under the terms of the GNU General Public License as published by        #
-# the Free Software Foundation, either version 3 of the License, or           #
-# (at your option) any later version.                                         #
-#                                                                             #
-# This program is distributed in the hope that it will be useful,             #
-# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
-# GNU General Public License for more details.                                #
-#                                                                             #
-# You should have received a copy of the GNU General Public License           #
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
-#                                                                             #
-###############################################################################
-
-error() {
-       echo "$@" >&2
-}
-
-main() {
-       local buildroot="${1}"
-       shift
-
-       # Check if BUILDROOT exists
-       if [ ! -d "${buildroot}" ]; then
-               error "BUILDROOT does not exist"
-               return 1
-       fi
-
-       local not_relro=()
-       local partly_relro=()
-
-       local file
-       for file in $(find "${buildroot}" -type f | sort); do
-               case "${file}" in
-                       # Filter out startfiles
-                       */crt[1in].o)
-                               continue
-                               ;;
-
-                       # Filter out kernel modules
-                       *.ko)
-                               continue
-                               ;;
-               esac
-
-               # Skip anything that isn't an ELF file
-               if ! file "${file}" | grep -q "ELF"; then
-                       continue
-               fi
-
-               # Perform more checks for shared objects (i.e. libraries)
-               if file "${file}" | grep -q "shared object"; then
-                       # Is this file partly RELRO?
-                       if ! readelf -l "${file}" 2>/dev/null | grep -q "GNU_RELRO"; then
-                               not_relro+=( "${file}" )
-                               continue
-                       fi
-
-                       # Is this file fully RELRO?
-                       if ! readelf -d "${file}" 2>/dev/null | grep -q "BIND_NOW"; then
-                               partly_relro+=( "${file}" )
-                       fi
-               fi
-       done
-
-       local r=0
-
-       # Log files which are not RELRO
-       if [ "${#not_relro[@]}" -gt 0 ]; then
-               error "The following files are not fully RELRO:"
-               for file in ${not_relro[@]}; do
-                       error "  ${file/${buildroot}/}"
-               done
-
-               r=1
-       fi
-
-       # Log files which are only partially RELRO
-       if [ "${#partly_relro[@]}" -gt 0 ]; then
-               error "The following files are only partially RELRO:"
-               for file in ${partly_relro[@]}; do
-                       error "  ${file/${buildroot}/}"
-               done
-
-               r=1
-       fi
-
-       return "${r}"
-}
-
-main "$@" || exit $?