[hardening-discuss] Bug#587295: checksec

[Kees Cook]

Hi Michael,

Well, there certainly is overlap, but since checksec has a specific
upstream, it might make sense to keep it a separate package.  Right now the
"hardening-check" script is used to validate the things that the
hardening-wrapper itself is capable of doing to a given ELF.

-Kees

On Wed, Jul 14, 2010 at 10:20:47PM -0400, Michael Gilbert wrote:
> any thoughts on this?
> 
> > hi, i put together a package for checksec a couple weeks ago [0], and
> > just heard about hardening-check today.  the two tools seem to do
> > essentially the same thing; perhaps they could be merged?
> > 
> > i think checksec may have the advantage since it supports various kernel
> > feature checks as well.  also, subjectively, the output looks a bit
> > nicer, and its more compact.
> > 
> > let me know what you think.
> > 
> > best wishes,
> > mike 
> > 
> > [0] http://lists.debian.org/debian-mentors/2010/06/msg00389.html
-- 
Kees Cook
Ubuntu Security Team