| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: checksec | Distribution: openSUSE Tumbleweed |
| Version: 3.2.0 | Vendor: openSUSE |
| Release: 1.2 | Build date: Wed Jul 8 17:46:33 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 4264907 | Source RPM: checksec-3.2.0-1.2.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/slimm609/checksec.sh | |
| Summary: Utility to check binaries for system hardening | |
Checksec is a GO program to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source). It has been originally written by Tobias Klein and the original source is available here: http://www.trapkit.de/tools/checksec.html Modern Linux distributions offer some mitigation techniques to make it harder to exploit software vulnerabilities reliably. Mitigations such as RELRO, NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables (PIE) have made reliably exploiting any vulnerabilities that do exist far more challenging. The checksec script is designed to test what *standard* Linux OS and PaX (http://pax.grsecurity.net/) security features are being used.
BSD-3-Clause
* Wed Jul 08 2026 Andreas Stieger <andreas.stieger@gmx.de>
- update to 3.2.0 (boo#1271039):
* SafeStack detection for ELF binaries.
* CFI hardening detection extended to i386 CET and RISC-V
cfilp/Zicfiss (Zicfilp landing pads, Zicfiss shadow stack),
covering RV32 and RV64.
* Sanitizer detection (ASAN, UBSAN, MSAN, TSAN, LSAN) by compiler-rt
symbol prefix scan.
* Selfrando detection via the .txtrp section (restores a
checksec.bash check lost in the v3 port).
* W^X segment check (SeparateCode): asserts no PT_LOAD segment
is both writable and executable, as guaranteed by ld -z separate-code / lld --rosegment.
* Stack-clash protection detection via annobin
* RPATH/RUNPATH inspection that classifies each entry:
relative/empty/world-writable as bad, $ORIGIN or nonexistent as
warning, safe absolute as info.
* annobin-based FORTIFY/GLIBCXX assertion detection.
* CSV output format restored (dropped in the v3 Go port).
* Restored listfile, procLibs, per-process Seccomp, and the
Fortify breakdown.
* --fail-if CI gate: exit non-zero when a required check is not
in a good state.
* Parallel directory scanning (RunListChecksParallel) over a
bounded worker pool (default GOMAXPROCS).
* --no-warnings and --color flags; warnings now include filename
context.
* bug fixes and developer visible changes
* Thu Feb 12 2026 Marcus Meissner <meissner@suse.com>
- set the version reported by the go tool to the package version (bsc#1257384)
* Sat Jan 24 2026 Marcus Meissner <meissner@suse.com>
- updated to 3.1.0
- fix several misc bugs
- add packages format to goreleaser
- feat: Redirect warnings to stderr
- Merge branch 'main' into fix-relro-check
- feat(relro): detect BIND_NOW via DT_FLAGS_1 (DF_1_NOW) and use bitmask for DF_BIND_NOW
- fix(relro): use bitwise check for DF_BIND_NOW flag
- feat: improve command usage descriptions and add examples
- Add support for ARM PAC/BTI and x86 SHSTK/IBT file checks
- disable headers and banners via flag
- fix failure with static binaries
- Handle kernel modules
- Handle binaries with no sections
- pkg/utils/files.go: parse all directories
* Sun Mar 02 2025 Marcus Meissner <meissner@suse.com>
- build with pie
* Fri Feb 21 2025 Marcus Meissner <meissner@suse.com>
- updated to 3.0.0 release:
- rewritten in go
* Thu May 09 2024 Dirk Müller <dmueller@suse.com>
- update to 2.7.1:
* checksec FORTIFY detection (#236)
* libc cleanup
* Added github pages
* Check kernel for YAMA
* Fix Nx checks
* Move github primary branch from master to main
* Update gitattributes
* Allow setting a libc file
* Add tests for listfile
* Fix trailing comma with listfile
* Several shellcheck fixes
* If no header is present, return N/A for Relro and nx
* Remove superfluous -W flags
* Fix broken Nx checks
* change default libc search path from / to /lib
* Cleanup grep
* Rewrite man page in mdoc
* Remove s_readelf
* Fix stack protection and full relro check
* Add tests suite for hardening checks
* Speed up FS_comparison by 10x
* Make shellcheck only run on final script
* Fix debug exit check
* Use Dynamic Section if there is no symbols table
* Check foritfy vs fortified
* Sat Sep 24 2022 Dirk Müller <dmueller@suse.com>
- update to 2.6.0:
* fix missing sysctl on fedora
* remove extra parenthesis
* add missing libc on LoongArch-64
* Wed Mar 16 2022 Dirk Müller <dmueller@suse.com>
- add procps dependency for sysctl
* Mon Dec 20 2021 Dirk Müller <dmueller@suse.com>
- update to 2.5.0:
* split checksec into multiple files for easier maintenance and debugging
* remove space between options and only support `=` until refactor can happen
* update License.txt to include BSD license
* Check journalctl -k for NX protection
* improve debug formatting
* Fix shellcheck warnings and style issues
* Make --dir option follow symlinks
* Wed Jun 09 2021 Dirk Müller <dmueller@suse.com>
- add missing gawk dependency
/usr/bin/checksec /usr/share/doc/packages/checksec /usr/share/doc/packages/checksec/CHANGELOG.md /usr/share/doc/packages/checksec/README.md /usr/share/licenses/checksec /usr/share/licenses/checksec/LICENSE /usr/share/man/man1/checksec.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 02:32:54 2026