Information about the package, checksec, which is shipped with common Linux distributions. The checksec package is designed for, Tool to check system for binary-hardening.
Package Name:
checksec
Summary:
Tool to check system for binary-hardening
Description:
Modern Linux distributions offer some mitigation techniques to make it harder to exploit software vulnerabilities reliably. Mitigations such as RELRO, NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables (PIE) have made reliably exploiting any vulnerabilities that do exist far more challenging. The checksec script is designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/) security features are being used. As of version 1.3 the script also lists the status of various Linux kernel protection mechanisms. checksec can check binary-files and running processes for hardening features.
Architecture:
noarch
Version:
1.7.4
Release:
2.el6
Size:
22 k
Repository:
epel
From Repository:
Licence:
BSD
Control the checksec package with the following handy commands outlined below.
yum install checksec
This command will install checksec on the server.
yum remove checksec
This command will un-install checksec on the server. When you run this command, you will be asked if you are sure that you want to remove checksec, so you have to manually confirm that you want to do this.
yum -y remove checksec
This command will un-install checksec on the server. When you run this command with th e -y flag, you will not be prompted to check that you are sure you want to remove the package - so be sure you absolutely want to remove checksec when using the -y flag.
yum update checksec
This command will update checksec to the latest version. When you run this command, you will be asked if you are sure that you want to remove checksec, so you have to manually confirm that you want to do this.
yum -y update checksec
This command will update checksec to the latest version. When you run this command with the -y flag, you will not be prompted to check that you are sure you want to remove the package - so be sure you absolutely want to remove checksec when using the -y flag.
yum info checksec
This command will show you core information about the checksec package.
yum deplist checksec
This command will show you the dependencies for checksec. Thankfully, when using Yum, if dependencies are required, these are also installed at the same time so you don't have to worry too much about that.
yum check-update checksec
This command will check if there is an update waiting on checksec. When you run this command this will return nothing if there is nothing to update, or, will return the package name if the package is due to be updated.