archweb
archweb copied to clipboard
devel: add reposec management command
Add a new command that scans pkg.tar.xz files with elf binaries in /usr/bin/ and checks for security hardening issues. This adds a new dashboard view which shows packages with these issues.
Still a bit WIP
Looks good overall!
Current PR does not work on postgresql since it can't pickle the Package object due to being a memoryview in postgresql and binary in sqlite.
The PR also only checks the first PIE file and not the status of all PIE files in the package.