Skip to content

Commit

Permalink
update build files
Browse files Browse the repository at this point in the history
  • Loading branch information
neurobin committed Jul 1, 2019
1 parent cf39db1 commit 7e5b6be
Show file tree
Hide file tree
Showing 7 changed files with 146 additions and 95 deletions.
1 change: 1 addition & 0 deletions AUTHORS
Original file line number Diff line number Diff line change
@@ -1,2 +1,3 @@
Francisco Garcia <[email protected]>
MD. JAHIDUL HAMID <[email protected]>
intika <[email protected]>
13 changes: 9 additions & 4 deletions ChangeLog
Original file line number Diff line number Diff line change
@@ -1,5 +1,10 @@
CHANGES

4.0.3 Tue Nov 20 08:22:20 UTC 2018

* Enhance -H flag by intika <https://github.com/intika> (Hide commands arguments from ps and cmdline)
* Remove -s flag (experimental feature not working as expected by intika <https://github.com/intika>)

4.0.2 Mon 01 Jul 2019 02:57:36 PM UTC

* Fix typo
Expand All @@ -11,17 +16,17 @@ CHANGES

4.0.0 Mon Nov 12 16:54:56 UTC 2018

* Add -H option for extra security without root (Thanks to intika <https://github.com/intika>). It protects against dumping, code injection, `cat /proc/pid/cmdline`, ptrace, etc.. (only works with Bourne shell (sh) scripts with no parameter)
* Add -H option for extra security without root (Thanks to intika <https://github.com/intika>). It protects against dumping, code injection, `cat /proc/pid/cmdline`, ptrace, etc.. (only works with Bourne shell (sh) scripts with no parameter)
* Add -s option to force single process for hardening features (requires -H) <https://github.com/intika>. (only works with Bourne shell (sh) scripts with no parameter)
* dash support
* dash support

3.9.8 Sat Oct 20 17:49:28 UTC 2018

* Add setuid option -S (Thanks to Boon Pang <https://github.com/wombat78>)
* Add setuid option -S (Thanks to Boon Pang <https://github.com/wombat78>)

3.9.7 Sat Oct 20 15:25:13 UTC 2018

* Fix issue #58
* Fix issue #58

3.9.6 Sat Jun 3 10:05:03 UTC 2017

Expand Down
1 change: 0 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,6 @@ shc [options]
shc -f script.sh -o binary
shc -U -f script.sh -o binary # Untraceable binary (prevent strace, ptrace etc..)
shc -H -f script.sh -o binary # Untraceable binary, does not require root (only bourne shell (sh) scripts with no parameter)
shc -H -s -f script.sh -o binary # Untraceable binary running in a singe process, does not require root (only bourne shell (sh) scripts with no parameter)
```

## The hardening flag -H
Expand Down
20 changes: 10 additions & 10 deletions configure
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#! /bin/sh
# Guess values for system-dependent variables and create Makefiles.
# Generated by GNU Autoconf 2.69 for shc 4.0.2.
# Generated by GNU Autoconf 2.69 for shc 4.0.3.
#
# Report bugs to <http://github.com/neurobin/shc/issues>.
#
Expand Down Expand Up @@ -580,8 +580,8 @@ MAKEFLAGS=
# Identity of this package.
PACKAGE_NAME='shc'
PACKAGE_TARNAME='shc'
PACKAGE_VERSION='4.0.2'
PACKAGE_STRING='shc 4.0.2'
PACKAGE_VERSION='4.0.3'
PACKAGE_STRING='shc 4.0.3'
PACKAGE_BUGREPORT='http://github.com/neurobin/shc/issues'
PACKAGE_URL=''

Expand Down Expand Up @@ -1268,7 +1268,7 @@ if test "$ac_init_help" = "long"; then
# Omit some internal or obsolete options to make the list less imposing.
# This message is too long to be a string in the A/UX 3.1 sh.
cat <<_ACEOF
\`configure' configures shc 4.0.2 to adapt to many kinds of systems.
\`configure' configures shc 4.0.3 to adapt to many kinds of systems.
Usage: $0 [OPTION]... [VAR=VALUE]...
Expand Down Expand Up @@ -1334,7 +1334,7 @@ fi

if test -n "$ac_init_help"; then
case $ac_init_help in
short | recursive ) echo "Configuration of shc 4.0.2:";;
short | recursive ) echo "Configuration of shc 4.0.3:";;
esac
cat <<\_ACEOF
Expand Down Expand Up @@ -1425,7 +1425,7 @@ fi
test -n "$ac_init_help" && exit $ac_status
if $ac_init_version; then
cat <<\_ACEOF
shc configure 4.0.2
shc configure 4.0.3
generated by GNU Autoconf 2.69
Copyright (C) 2012 Free Software Foundation, Inc.
Expand Down Expand Up @@ -1851,7 +1851,7 @@ cat >config.log <<_ACEOF
This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.
It was created by shc $as_me 4.0.2, which was
It was created by shc $as_me 4.0.3, which was
generated by GNU Autoconf 2.69. Invocation command line was
$ $0 $@
Expand Down Expand Up @@ -2721,7 +2721,7 @@ fi
# Define the identity of the package.
PACKAGE='shc'
VERSION='4.0.2'
VERSION='4.0.3'
cat >>confdefs.h <<_ACEOF
Expand Down Expand Up @@ -5299,7 +5299,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
# report actual input values of CONFIG_FILES etc. instead of their
# values after options handling.
ac_log="
This file was extended by shc $as_me 4.0.2, which was
This file was extended by shc $as_me 4.0.3, which was
generated by GNU Autoconf 2.69. Invocation command line was
CONFIG_FILES = $CONFIG_FILES
Expand Down Expand Up @@ -5356,7 +5356,7 @@ _ACEOF
cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
ac_cs_version="\\
shc config.status 4.0.2
shc config.status 4.0.3
configured by $0, generated by GNU Autoconf 2.69,
with options \\"\$ac_cs_config\\"
Expand Down
2 changes: 1 addition & 1 deletion configure.ac
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
AC_INIT([shc], [4.0.2], [http://github.com/neurobin/shc/issues])
AC_INIT([shc], [4.0.3], [http://github.com/neurobin/shc/issues])
AC_CONFIG_AUX_DIR(config)
#prefix="/usr"
AC_CONFIG_SRCDIR([src/shc.c])
Expand Down
14 changes: 4 additions & 10 deletions shc.1
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ shc \- Generic shell script compiler
.PP
\f[B]shc\f[] [ \-e \f[I]date\f[] ] [ \-m \f[I]addr\f[] ] [ \-i
\f[I]iopt\f[] ] [ \-x \f[I]cmnd\f[] ] [ \-l \f[I]lopt\f[] ] [ \-o
\f[I]outfile\f[] ] [ \-ABCDhUHsvSr ] \-f \f[I]script\f[]
\f[I]outfile\f[] ] [ \-ABCDhUHvSr ] \-f \f[I]script\f[]
.SH DESCRIPTION
.PP
\f[B]shc\f[] creates a stripped binary executable version of the script
Expand Down Expand Up @@ -86,15 +86,7 @@ Extra security flag without root access requirement that protects
against dumping, code injection, \f[C]cat\ /proc/pid/cmdline\f[],
ptrace, etc..
This feature is \f[B]experimental\f[] and may not work on all systems.
This option currently only works with Bourne shell (sh) scripts without
any positional parameters.
.PP
\-s : Hardening with single process.
Requires \-H option, runs the binary in a single process, shell is
called in the main process otherwise its called in a child process.
This feature is \f[B]experimental\f[] (may hang) and may not work on all
systems.
This option currently only works with Bourne shell (sh) scripts without
it require bourne shell (sh) scripts
any positional parameters.
.PP
\-C : Display license and exit
Expand Down Expand Up @@ -147,6 +139,8 @@ limited by the operating system configuration parameter
.PP
Francisco Rosales <[email protected]>
.PP
intika <[email protected]>
.PP
Md Jahidul Hamid <[email protected]>
.SH REPORT BUGS TO
.PP
Expand Down
Loading

0 comments on commit 7e5b6be

Please sign in to comment.