23e2520952
- updated to 3.1.0 - fix several misc bugs - add packages format to goreleaser - feat: Redirect warnings to stderr - Merge branch 'main' into fix-relro-check - feat(relro): detect BIND_NOW via DT_FLAGS_1 (DF_1_NOW) and use bitmask for DF_BIND_NOW - fix(relro): use bitwise check for DF_BIND_NOW flag - feat: improve command usage descriptions and add examples - Add support for ARM PAC/BTI and x86 SHSTK/IBT file checks - disable headers and banners via flag - fix failure with static binaries - Handle kernel modules - Handle binaries with no sections - pkg/utils/files.go: parse all directories
Marcus Meissner2026-01-24 16:04:19 +00:00
a9ebc59052
- update to 2.7.1: * checksec FORTIFY detection (#236) * libc cleanup * Added github pages * Check kernel for YAMA * Fix Nx checks * Move github primary branch from master to main * Update gitattributes * Allow setting a libc file * Add tests for listfile * Fix trailing comma with listfile * Several shellcheck fixes * If no header is present, return N/A for Relro and nx * Remove superfluous -W flags * Fix broken Nx checks * change default libc search path from / to /lib * Cleanup grep * Rewrite man page in mdoc * Remove s_readelf * Fix stack protection and full relro check * Add tests suite for hardening checks * Speed up FS_comparison by 10x * Make shellcheck only run on final script * Fix debug exit check * Use Dynamic Section if there is no symbols table * Check foritfy vs fortified - add procps dependency for sysctl - add missing gawk dependency - Initial package (derived from Fedora spec)
Dirk Mueller2024-05-09 13:36:29 +00:00
836e360841
- update to 2.5.0: * split checksec into multiple files for easier maintenance and debugging * remove space between options and only support = until refactor can happen * update License.txt to include BSD license * Check journalctl -k for NX protection * improve debug formatting * Fix shellcheck warnings and style issues * Make --dir option follow symlinks
Dirk Mueller2021-12-20 10:43:06 +00:00