Sign me up Login

Details about package shh

Name:	shh
Uploader:	Igor Makarov <klim.iv@gmail.com> (Debian QA page)
Description:	shh - Automatic systemd service hardening guided by strace profiling

Package uploads

Upload #5

Information

Version:	2025.3.12-1
Uploaded:	2026-07-28 16:06
Source package:	shh_2025.3.12-1.dsc
Distribution:	UNRELEASED
Section:	misc
Priority:	optional
Homepage:	https://github.com/desbma/shh
Vcs-Browser:	https://salsa.debian.org/klim.iv/shh
Vcs-Git:	https://salsa.debian.org/klim.iv/shh.git
Closes bugs:	#1080020

Changelog

 shh (2025.3.12-1) UNRELEASED; urgency=medium
 .
   * Initial release. (Closes: #1080020)

QA information

–
Package uploaded for the UNRELEASED distribution
–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Newer upstream version available

Local:	2025.3.12
Upstream:	2026.3.8
Url:	https://github.com/desbma/shh/archive/refs/tags/v2026.3.8.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
shh
- W no-manual-page
  - [usr/bin/shh]
- I hardening-no-fortify-functions
  - [usr/bin/shh]
- I using-first-person-in-description
  - line 7: we
  - line 8: we
- O spelling-error-in-binary
  - whE when [usr/bin/shh]
shh source
- I out-of-date-standards-version
  - 4.7.2 (released 2025-02-27) (current is 4.7.4)
- I quilt-patch-missing-description
  - [debian/patches/cargo]
  - [debian/patches/makefile]
- I unreleased-changelog-distribution
  - [debian/changelog:1]
- O debian-watch-does-not-check-openpgp-signature
  - [debian/watch] (override comment: Upstream does not provide a GPG signed package)
- O very-long-line-length-in-source-file
  - 548 > 512 [src/strace/parser/mod.rs:1644]
  - 675 > 512 [FAQ.md:18]
–
Package closes ITP bug
- shh:
  - #1080020 (Wishlist, ITP): ITP: shh -- Automatic systemd service hardening guided by strace profiling
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Maxime Desbrus <maxime.desbrus@synacktiv.com>

Licenses: GPL-3

Comments

> Are you packaging an older version just because of Rust crates that aren't in Debian?

yes, correct
I wait about 2 month for add 2 rust crates before it was added into Debian

> Is it not better that you package those crates for Debian and then package the newest version of shh?

at first glance, this is reasonable to package latest version of  this package, 
but I waited about 2 month for add 2 rust crates before it was added into Debian ( function_name-proc-macro, function_name ), that's why I decided to add new package with less rust dependences and after that (if package  will be added) update it with new one - it looks more simple for me due to I am not Debian Developer and
can't quickly push new rust-packages into Debian

Ready Igor Makarov at July 28, 2026, 7:16 p.m.

```
ok, I'll try
```
Needs work Igor Makarov at July 28, 2026, 7:30 p.m.

You said that new crates for rust now merged quickly
Here patches for 3 crates needed for new version of ssh:
* https://salsa.debian.org/rust-team/debcargo-conf/-/merge_requests/1301
* https://salsa.debian.org/rust-team/debcargo-conf/-/merge_requests/1304

About 2 weeks no changes, could you help me to push it, please?

Igor Makarov at Aug. 12, 2026, 7:10 p.m.

Package has been uploaded to Debian

Upload #4

Information

Version:	2025.3.12-1
Uploaded:	2026-07-28 15:21
Source package:	shh_2025.3.12-1.dsc
Distribution:	UNRELEASED
Section:	misc
Priority:	optional
Homepage:	https://www.synacktiv.com/en/publications/systemd-hardening-made-easy-with-shh
Vcs-Browser:	https://salsa.debian.org/klim.iv/shh
Vcs-Git:	https://salsa.debian.org/klim.iv/shh
Closes bugs:	#1080020

Changelog

 shh (2025.3.12-1) UNRELEASED; urgency=medium
 .
   * Initial release. (Closes: #1080020)

QA information

–
Package uploaded for the UNRELEASED distribution
–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Newer upstream version available

Local:	2025.3.12
Upstream:	2026.3.8
Url:	https://github.com/desbma/shh/archive/refs/tags/v2026.3.8.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
shh
- W no-manual-page
  - [usr/bin/shh]
- I hardening-no-fortify-functions
  - [usr/bin/shh]
- I using-first-person-in-description
  - line 7: we
  - line 8: we
- X spelling-error-in-binary
  - whE when [usr/bin/shh]
shh source
- I out-of-date-standards-version
  - 4.7.2 (released 2025-02-27) (current is 4.7.4)
- I quilt-patch-missing-description
  - [debian/patches/cargo]
  - [debian/patches/lintian]
  - [debian/patches/makefile]
- I unreleased-changelog-distribution
  - [debian/changelog:1]
- I vcs-field-not-canonical
  - Git https://salsa.debian.org/klim.iv/shh https://salsa.debian.org/klim.iv/shh.git
- X debian-watch-does-not-check-openpgp-signature
  - [debian/watch]
- X very-long-line-length-in-source-file
  - 676 > 512 [debian/patches/lintian:9]
–
Package closes ITP bug
- shh:
  - #1080020 (Wishlist, ITP): ITP: shh -- Automatic systemd service hardening guided by strace profiling
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Maxime Desbrus <maxime.desbrus@synacktiv.com>

Licenses: GPL-3

Comments

No comments

Upload #3

Information

Version:	2025.3.12-1
Uploaded:	2026-07-28 14:21
Source package:	shh_2025.3.12-1.dsc
Distribution:	UNRELEASED
Section:	misc
Priority:	optional
Homepage:	https://www.synacktiv.com/en/publications/systemd-hardening-made-easy-with-shh
Vcs-Browser:	https://salsa.debian.org/klim.iv/shh
Vcs-Git:	https://salsa.debian.org/klim.iv/shh
Closes bugs:	#1080020

Changelog

 shh (2025.3.12-1) UNRELEASED; urgency=medium
 .
   * Initial release. (Closes: #1080020)

QA information

–
Package uploaded for the UNRELEASED distribution
–
Package uses debhelper-compat

Debhelper compatibility level 13
–
Watch file is not present
–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
shh
- W no-manual-page
  - [usr/bin/shh]
- I hardening-no-fortify-functions
  - [usr/bin/shh]
- I using-first-person-in-description
  - line 7: we
  - line 8: we
- X spelling-error-in-binary
  - whE when [usr/bin/shh]
shh source
- I debian-watch-file-is-missing
- I out-of-date-standards-version
  - 4.7.2 (released 2025-02-27) (current is 4.7.4)
- I quilt-patch-missing-description
  - [debian/patches/cargo]
  - [debian/patches/makefile]
- I unreleased-changelog-distribution
  - [debian/changelog:1]
- I vcs-field-not-canonical
  - Git https://salsa.debian.org/klim.iv/shh https://salsa.debian.org/klim.iv/shh.git
- X very-long-line-length-in-source-file
  - 548 > 512 [src/strace/parser/mod.rs:1644]
  - 675 > 512 [FAQ.md:18]
–
Package closes ITP bug
- shh:
  - #1080020 (Wishlist, ITP): ITP: shh -- Automatic systemd service hardening guided by strace profiling
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Maxime Desbrus <maxime.desbrus@synacktiv.com>

Licenses: GPL-3

Comments

No comments

Upload #2

Information

Version:	2025.3.12-1
Uploaded:	2026-07-28 14:06
Source package:	shh_2025.3.12-1.dsc
Distribution:	UNRELEASED
Section:	misc
Priority:	optional
Vcs-Browser:	https://github.com/desbma/shh
Vcs-Git:	https://github.com/desbma/shh
Closes bugs:	#1080020

Changelog

 shh (2025.3.12-1) UNRELEASED; urgency=medium
 .
   * Initial release. (Closes: #1080020)

QA information

–
Package uploaded for the UNRELEASED distribution
–
Package uses debhelper-compat

Debhelper compatibility level 13
–
Watch file is not present
–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
shh
- W no-manual-page
  - [usr/bin/shh]
- I hardening-no-fortify-functions
  - [usr/bin/shh]
- I using-first-person-in-description
  - line 7: we
  - line 8: we
- X spelling-error-in-binary
  - whE when [usr/bin/shh]
shh source
- I debian-watch-file-is-missing
- I homepage-in-binary-package
  - shh
- I out-of-date-standards-version
  - 4.7.2 (released 2025-02-27) (current is 4.7.4)
- I quilt-patch-missing-description
  - [debian/patches/cargo]
  - [debian/patches/makefile]
- I unreleased-changelog-distribution
  - [debian/changelog:1]
- X very-long-line-length-in-source-file
  - 548 > 512 [src/strace/parser/mod.rs:1644]
  - 675 > 512 [FAQ.md:18]
–
Package closes ITP bug
- shh:
  - #1080020 (Wishlist, ITP): ITP: shh -- Automatic systemd service hardening guided by strace profiling
–
No Homepage field present
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Maxime Desbrus <maxime.desbrus@synacktiv.com>

Licenses: GPL-3

Comments

No comments

Upload #1

Information

Version:	2025.3.12-1
Uploaded:	2026-07-23 22:21
Source package:	shh_2025.3.12-1.dsc
Distribution:	UNRELEASED
Section:	misc
Priority:	optional
Closes bugs:	#1080020

Changelog

 shh (2025.3.12-1) UNRELEASED; urgency=medium
 .
   * Initial release. (Closes: #1080020)

QA information

–
Package uploaded for the UNRELEASED distribution
–
Package uses debhelper-compat

Debhelper compatibility level 13
–
Watch file is not present
–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian informational tags
shh source
- I debian-watch-file-is-missing
- I homepage-in-binary-package
  - shh
- I out-of-date-standards-version
  - 4.7.2 (released 2025-02-27) (current is 4.7.4)
- I quilt-patch-missing-description
  - [debian/patches/cargo]
  - [debian/patches/makefile]
- I unreleased-changelog-distribution
  - [debian/changelog:1]
- X upstream-metadata-file-is-missing
- X very-long-line-length-in-source-file
  - 548 > 512 [src/strace/parser/mod.rs:1644]
  - 675 > 512 [FAQ.md:18]
–
Package closes RFP bug
- shh:
  - #1080020 (Wishlist, RFP): RFP: shh -- Automatic systemd service hardening guided by strace profiling
–
No Homepage field present
–
No VCS field present
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Maxime Desbrus <maxime.desbrus@synacktiv.com>

Licenses: GPL-3

Comments

No comments

Upstream Contact:	Maxime Desbrus <maxime.desbrus@synacktiv.com>
Licenses:	GPL-3