checksec.sh
checksec.sh copied to clipboard
checksec fails on statically linked binaries
For example, RELRO and RUNPATH do not apply to static binaries, and stack canaries and fortify checks don't work because there are no external symbols you could detect.
I think it would make sense to change the display as to not cause confusion and false positives.
#194 includes a partial fix for static binaries. it should report N/A for Runpath and rpath. Still a few things remaining to fix but some of it is in there