Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: checksec | Distribution: openSUSE Tumbleweed |
Version: 2.7.1 | Vendor: openSUSE |
Release: 1.2 | Build date: Thu May 9 15:35:01 2024 |
Group: Unspecified | Build host: reproducible |
Size: 96060 | Source RPM: checksec-2.7.1-1.2.src.rpm |
Packager: https://bugs.opensuse.org | |
Url: https://github.com/slimm609/checksec.sh | |
Summary: Utility to check binaries for system hardening |
Checksec is a bash script to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source). It has been originally written by Tobias Klein and the original source is available here: http://www.trapkit.de/tools/checksec.html Modern Linux distributions offer some mitigation techniques to make it harder to exploit software vulnerabilities reliably. Mitigations such as RELRO, NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables (PIE) have made reliably exploiting any vulnerabilities that do exist far more challenging. The checksec script is designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/) security features are being used.
BSD-3-Clause
* Thu May 09 2024 Dirk Müller <dmueller@suse.com> - update to 2.7.1: * checksec FORTIFY detection (#236) * libc cleanup * Added github pages * Check kernel for YAMA * Fix Nx checks * Move github primary branch from master to main * Update gitattributes * Allow setting a libc file * Add tests for listfile * Fix trailing comma with listfile * Several shellcheck fixes * If no header is present, return N/A for Relro and nx * Remove superfluous -W flags * Fix broken Nx checks * change default libc search path from / to /lib * Cleanup grep * Rewrite man page in mdoc * Remove s_readelf * Fix stack protection and full relro check * Add tests suite for hardening checks * Speed up FS_comparison by 10x * Make shellcheck only run on final script * Fix debug exit check * Use Dynamic Section if there is no symbols table * Check foritfy vs fortified * Sat Sep 24 2022 Dirk Müller <dmueller@suse.com> - update to 2.6.0: * fix missing sysctl on fedora * remove extra parenthesis * add missing libc on LoongArch-64 * Wed Mar 16 2022 Dirk Müller <dmueller@suse.com> - add procps dependency for sysctl * Mon Dec 20 2021 Dirk Müller <dmueller@suse.com> - update to 2.5.0: * split checksec into multiple files for easier maintenance and debugging * remove space between options and only support `=` until refactor can happen * update License.txt to include BSD license * Check journalctl -k for NX protection * improve debug formatting * Fix shellcheck warnings and style issues * Make --dir option follow symlinks * Wed Jun 09 2021 Dirk Müller <dmueller@suse.com> - add missing gawk dependency * Thu Mar 25 2021 Dirk Müller <dmueller@suse.com> - Initial package (derived from Fedora spec)
/usr/bin/checksec /usr/share/doc/packages/checksec /usr/share/doc/packages/checksec/ChangeLog /usr/share/doc/packages/checksec/README.md /usr/share/licenses/checksec /usr/share/licenses/checksec/LICENSE.txt /usr/share/man/man1/checksec.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Jan 12 00:30:25 2025