Sign me up Login

Details about package shh

Name:	shh
Uploader:	Igor Makarov <klim.iv@gmail.com> (Debian QA page)
Description:	systemd-hardening-helper - Automatic systemd service hardening guided by strace profiling

Package uploads

Upload #2

Information

Version:	2026.3.8-2
Uploaded:	2026-09-13 20:37
Source package:	shh_2026.3.8-2.dsc
Distribution:	UNRELEASED
Section:	misc
Priority:	optional
Homepage:	https://github.com/desbma/shh
Vcs-Browser:	https://salsa.debian.org/klim.iv/shh
Vcs-Git:	https://salsa.debian.org/klim.iv/shh.git
Closes bugs:	#1080020

Changelog

 shh (2026.3.8-2) UNRELEASED; urgency=medium
 .
   * Initial release. (Closes: #1080020)

QA information

–
Package uploaded for the UNRELEASED distribution
–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Package is the latest upstream version

Local:	2026.3.8
Upstream:	2026.3.8
Url:	https://github.com/desbma/shh/archive/refs/tags/v2026.3.8.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
shh source
- I out-of-date-standards-version
  - 4.7.2 (released 2025-02-27) (current is 4.7.4)
- I quilt-patch-missing-description
  - [debian/patches/cargo]
  - [debian/patches/makefile]
- I unreleased-changelog-distribution
  - [debian/changelog:1]
- O debian-watch-does-not-check-openpgp-signature
  - [debian/watch] (override comment: Upstream does not provide a GPG signed package)
- O very-long-line-length-in-source-file
  - 540 > 512 [src/strace/parser/mod.rs:581]
  - 596 > 512 [src/strace/parser/snapshots/shh__strace__parser__tests__newfstatat.snap:3]
  - 611 > 512 [src/strace/parser/snapshots/shh__strace__parser__tests__ioctl.snap:3]
  - 675 > 512 [FAQ.md:18]
systemd-hardening-helper
- W no-manual-page
  - [usr/bin/shh]
- I hardening-no-fortify-functions
  - [usr/bin/shh]
- I using-first-person-in-description
  - line 7: we
  - line 8: we
- X spelling-error-in-binary
  - whE when [usr/bin/shh]
–
Package closes ITP bug
- shh:
  - #1080020 (Wishlist, ITP): ITP: shh -- Automatic systemd service hardening guided by strace profiling
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Maxime Desbrus <maxime.desbrus@synacktiv.com>

Licenses: GPL-3

Comments

No comments

Upload #1

Information

Version:	2026.3.8-1
Uploaded:	2026-09-10 21:22
Source package:	shh_2026.3.8-1.dsc
Distribution:	UNRELEASED
Section:	misc
Priority:	optional
Homepage:	https://github.com/desbma/shh
Vcs-Browser:	https://salsa.debian.org/klim.iv/shh
Vcs-Git:	https://salsa.debian.org/klim.iv/shh.git
Closes bugs:	#1080020

Changelog

 shh (2026.3.8-1) UNRELEASED; urgency=medium
 .
   * Initial release. (Closes: #1080020)

QA information

–
Package uploaded for the UNRELEASED distribution
–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Package is the latest upstream version

Local:	2026.3.8
Upstream:	2026.3.8
Url:	https://github.com/desbma/shh/archive/refs/tags/v2026.3.8.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
shh
- W no-manual-page
  - [usr/bin/shh]
- I hardening-no-fortify-functions
  - [usr/bin/shh]
- I using-first-person-in-description
  - line 7: we
  - line 8: we
- O spelling-error-in-binary
  - whE when [usr/bin/shh]
shh source
- I out-of-date-standards-version
  - 4.7.2 (released 2025-02-27) (current is 4.7.4)
- I quilt-patch-missing-description
  - [debian/patches/cargo]
  - [debian/patches/makefile]
- I unreleased-changelog-distribution
  - [debian/changelog:1]
- O debian-watch-does-not-check-openpgp-signature
  - [debian/watch] (override comment: Upstream does not provide a GPG signed package)
- O very-long-line-length-in-source-file
  - 540 > 512 [src/strace/parser/mod.rs:581]
  - 596 > 512 [src/strace/parser/snapshots/shh__strace__parser__tests__newfstatat.snap:3]
  - 611 > 512 [src/strace/parser/snapshots/shh__strace__parser__tests__ioctl.snap:3]
  - 675 > 512 [FAQ.md:18]
–
Package closes ITP bug
- shh:
  - #1080020 (Wishlist, ITP): ITP: shh -- Automatic systemd service hardening guided by strace profiling
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Maxime Desbrus <maxime.desbrus@synacktiv.com>

Licenses: GPL-3

Comments

@modaresi < could you review this package with  updated version, as you ask before

Ready Igor Makarov at Sept. 11, 2026, 6:59 a.m.

I suggest to name the package systemd-hardening-helper like on crates.io. That is much more discoverable and reduces the confusion with ssh, at least at install time.

Daniel Lange at Sept. 11, 2026, 7:29 a.m.

```
agree, fixed
```
Ready Igor Makarov at Sept. 13, 2026, 8:31 p.m.

Daniel Lange < one question,  you want to rename only package name (and *.deb files) or rename also repo, package on mentors and etc

Igor Makarov at Sept. 14, 2026, 9:06 a.m.

I'd rename the salsa repo as well as this is where packaging happens for the foreseeable future.
The name on mentors does not matter much as it will be deleted after upload, but do as you see fit.

Daniel Lange at Sept. 14, 2026, 11:18 a.m.

ok, moved to https://mentors.debian.net/package/systemd-hardening-helper/

Ready Igor Makarov at Sept. 15, 2026, 2:37 p.m.

Upstream Contact:	Maxime Desbrus <maxime.desbrus@synacktiv.com>
Licenses:	GPL-3