archweb icon indicating copy to clipboard operation
archweb copied to clipboard

devel: add reposec management command

Open jelly opened this issue 6 years ago • 3 comments

Add a new command that scans pkg.tar.xz files with elf binaries in /usr/bin/ and checks for security hardening issues. This adds a new dashboard view which shows packages with these issues.

jelly avatar Oct 08 '19 21:10 jelly

Still a bit WIP

jelly avatar Oct 08 '19 21:10 jelly

Looks good overall!

kyrias avatar Oct 09 '19 17:10 kyrias

Current PR does not work on postgresql since it can't pickle the Package object due to being a memoryview in postgresql and binary in sqlite.

The PR also only checks the first PIE file and not the status of all PIE files in the package.

jelly avatar Oct 10 '19 19:10 jelly