--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2013-10428
2013-06-12 19:12:21
--------------------------------------------------------------------------------
Name : checksec
Product : Fedora EPEL 5
Version : 1.5
Release : 2.el5
URL :
http://www.trapkit.de/tools/checksec.html
Summary : Tool to check system for binary-hardening
Description :
Modern Linux distributions offer some mitigation techniques to make it harder
to exploit software vulnerabilities reliably. Mitigations such as RELRO,
NoExecute (NX), Stack Canaries, Address Space Layout Randomization (ASLR) and
Position Independent Executables (PIE) have made reliably exploiting any
vulnerabilities that do exist far more challenging. The checksec script is
designed to test what *standard* Linux OS and PaX (
http://pax.grsecurity.net/)
security features are being used.
As of version 1.3 the script also lists the status of various Linux kernel
protection mechanisms.
checksec can check binary-files and running processes for hardening features.
--------------------------------------------------------------------------------
Update Information:
Modern Linux distributions offer some mitigation techniques to make it harder to exploit
software vulnerabilities reliably. Mitigations such as RELRO, NoExecute (NX), Stack
Canaries, Address Space Layout Randomization (ASLR) and Position Independent Executables
(PIE) have made reliably exploiting any vulnerabilities that do exist far more
challenging. The checksec script is designed to test what *standard* Linux OS and PaX
(
http://pax.grsecurity.net/) security features are being used. As of version 1.3 the
script also lists the status of various Linux kernel protection mechanisms. checksec can
check binary-files and running processes for hardening features.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #973349 - Review Request: checksec - Tool to check system for
binary-hardening
https://bugzilla.redhat.com/show_bug.cgi?id=973349
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update checksec' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------