Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

checksec-2.7.1-1.1 RPM for noarch

From OpenSuSE Tumbleweed for noarch

Name: checksec Distribution: openSUSE Tumbleweed
Version: 2.7.1 Vendor: openSUSE
Release: 1.1 Build date: Thu May 9 15:35:01 2024
Group: Unspecified Build host: reproducible
Size: 96060 Source RPM: checksec-2.7.1-1.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://github.com/slimm609/checksec.sh
Summary: Utility to check binaries for system hardening
 
Checksec is a bash script to check the properties of executables (like PIE,
RELRO, PaX, Canaries, ASLR, Fortify Source). It has been originally written by
Tobias Klein and the original source is available here:
http://www.trapkit.de/tools/checksec.html

Modern Linux distributions offer some mitigation techniques to make it harder
to exploit software vulnerabilities reliably. Mitigations such as RELRO,
NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and
Position Independent Executables (PIE) have made reliably exploiting any
vulnerabilities that do exist far more challenging. The checksec script is
designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/)
security features are being used.

Provides

Requires

License

BSD-3-Clause

Changelog

* Thu May 09 2024 Dirk Müller <dmueller@suse.com>
  - update to 2.7.1:
    * checksec FORTIFY detection (#236)
    * libc cleanup
    * Added github pages
    * Check kernel for YAMA
    * Fix Nx checks
    * Move github primary branch from master to main
    * Update gitattributes
    * Allow setting a libc file
    * Add tests for listfile
    * Fix trailing comma with listfile
    * Several shellcheck fixes
    * If no header is present, return N/A for Relro and nx
    * Remove superfluous -W flags
    * Fix broken Nx checks
    * change default libc search path from / to /lib
    * Cleanup grep
    * Rewrite man page in mdoc
    * Remove s_readelf
    * Fix stack protection and full relro check
    * Add tests suite for hardening checks
    * Speed up FS_comparison by 10x
    * Make shellcheck only run on final script
    * Fix debug exit check
    * Use Dynamic Section if there is no symbols table
    * Check foritfy vs fortified
* Sat Sep 24 2022 Dirk Müller <dmueller@suse.com>
  - update to 2.6.0:
    * fix missing sysctl on fedora
    * remove extra parenthesis
    * add missing libc on LoongArch-64
* Wed Mar 16 2022 Dirk Müller <dmueller@suse.com>
  - add procps dependency for sysctl
* Mon Dec 20 2021 Dirk Müller <dmueller@suse.com>
  - update to 2.5.0:
    * split checksec into multiple files for easier maintenance and debugging
    * remove space between options and only support `=` until refactor can happen
    * update License.txt to include BSD license
    * Check journalctl -k for NX protection
    * improve debug formatting
    * Fix shellcheck warnings and style issues
    * Make --dir option follow symlinks
* Wed Jun 09 2021 Dirk Müller <dmueller@suse.com>
  - add missing gawk dependency
* Thu Mar 25 2021 Dirk Müller <dmueller@suse.com>
  - Initial package (derived from Fedora spec)

Files

/usr/bin/checksec
/usr/share/doc/packages/checksec
/usr/share/doc/packages/checksec/ChangeLog
/usr/share/doc/packages/checksec/README.md
/usr/share/licenses/checksec
/usr/share/licenses/checksec/LICENSE.txt
/usr/share/man/man1/checksec.1.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Jun 12 23:23:45 2024