forked from GrapheneOS/hardened_malloc
/
control
66 lines (63 loc) · 2.56 KB
/
control
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
## Copyright (C) 2019 - 2023 ENCRYPTED SUPPORT LP <adrelanos@kicksecure.com>
## See the file COPYING for copying conditions.
Source: hardened-malloc
Section: libs
Priority: optional
Maintainer: Patrick Schleizer <adrelanos@kicksecure.com>
Build-Depends: clang,
clang-tidy,
debhelper (>= 13),
debhelper-compat (= 13),
dh-exec,
llvm-15-dev
Homepage: https://github.com/GrapheneOS/hardened_malloc
Vcs-Browser: https://github.com/GrapheneOS/hardened_malloc
Vcs-Git: https://github.com/GrapheneOS/hardened_malloc.git
Standards-Version: 4.6.2
Rules-Requires-Root: no
Package: hardened-malloc
Architecture: amd64
Depends: ${misc:Depends},
${shlibs:Depends}
Description: security-focused general purpose memory allocator
This is a security-focused general purpose memory allocator providing the
malloc API along with various extensions. It provides substantial hardening
against heap corruption vulnerabilities. The security-focused design also
leads to much less metadata overhead and memory waste from fragmentation than
a more traditional allocator design. It aims to provide decent overall
performance with a focus on long-term performance and memory usage rather than
allocator micro-benchmarks. It offers scalability via a configurable number of
entirely independently arenas, with the internal locking within arenas further
divided up per size class.
.
It can be added as a preloaded library using /etc/ld.so.preload.
.
Ships two files:
.
* [1]
/usr/lib/x86_64-linux-gnu/libhardened_malloc.so/libhardened_malloc.so
* [2]
/usr/lib/x86_64-linux-gnu/libhardened_malloc.so/libhardened_malloc-light.so
.
[1] Was compiled with Hardened Malloc Default compilation parameters.
.
[2] Was compiled with Hardened Malloc Light compilation parameters.
Package: hardened-malloc-light-enable
## Actually is 'Architecture: all' but genmkfile cannot handle that a package
## being a mix of 'Architecture: any' and 'Architecture: all' yet.
Architecture: amd64
Depends: hardened-malloc,
helper-scripts,
${misc:Depends},
${shlibs:Depends}
Replaces: hardened-malloc-kicksecure-enable
Provides: hardened-malloc-kicksecure-enable
Description: enables Hardened Malloc Light
Adds libhardened_malloc-light.so to
/etc/ld.so.preload systemd wide configuration file.
.
Does this only once per installation. The user is free to undo changes to
/etc/ld.so.preload. Once this package is purged and re-installed it will
re-enable the Hardened Malloc Light.
.
Other than doing that this is an empty package.