diff options
| author | Paresh Chaudhary <paresh.chaudhary@rockwellcollins.com> | 2018-08-13 20:17:56 -0500 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@bootlin.com> | 2018-08-21 00:21:51 +0200 |
| commit | bf61e3725c44fa7da32276df480d411ecfd64f29 (patch) | |
| tree | 220a29f0d0cfc904cb178852f1c2612820f30f2b /package/checksec/Config.in.host | |
| parent | cbb7b49f4c790a26cddca4d826095b86af70446f (diff) | |
| download | buildroot-bf61e3725c44fa7da32276df480d411ecfd64f29.tar.gz buildroot-bf61e3725c44fa7da32276df480d411ecfd64f29.zip | |
package/checksec: new package
This patch adds host-checksec package support. This tool provides a
script to offline check the properties of a security hardened elf file.
REF: https://github.com/slimm609/checksec.sh
Signed-off-by: Paresh Chaudhary <paresh.chaudhary@rockwellcollins.com>
Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com>
[Thomas: add entry to DEVELOPERS file.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Diffstat (limited to 'package/checksec/Config.in.host')
| -rw-r--r-- | package/checksec/Config.in.host | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/package/checksec/Config.in.host b/package/checksec/Config.in.host new file mode 100644 index 0000000000..e4e8903b48 --- /dev/null +++ b/package/checksec/Config.in.host @@ -0,0 +1,17 @@ +config BR2_PACKAGE_HOST_CHECKSEC + bool "host checksec" + help + This tool provides a shell script to check the + properties of executables + (PIE,RELRO,Stack Canaries,Fortify Source). + It also has a kernel test mode that can run on target + for testing of PaX, ASLR, heap and config hardening. + + NOTE: when using this tool as a host tool, the tool + can offline check a target folder of elf files for + hardening features enabled in those elf files. There + are other features of this tool, like the kernel test + feature that are not functional offline, but require the + user to execute in a chroot or on target. + + https://github.com/slimm609/checksec.sh.git |
