From 1507d4a5cbb23a5a693567446b72918671b54b4c Mon Sep 17 00:00:00 2001 From: Brian Davis Date: Sat, 20 Apr 2024 21:21:35 -0400 Subject: [PATCH] signed update --- ChangeLog | 46 ++++++++++++++++++++++++++++++++++++++++++++++ README.md | 2 +- checksec | 4 ++-- checksec.sig | Bin 256 -> 256 bytes src/core.sh | 4 ++-- 5 files changed, 51 insertions(+), 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index a99f8fc..514b9e0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,49 @@ +Rev-2024042101 Brian Davis + * Update to 2.7.0 + * libc cleanup + * Added github pages + * Check kernel for YAMA + Thanks @cgzones + * Fix Nx checks + * Move github primary branch from master to main + * Update gitattributes + Thanks @calebTree + * Allow setting a libc file + Thanks @sreschke80 + * Add tests for listfile + Thanks @ysmaoui + * Fix trailing comma with listfile + Thanks @ysmaoui + * Several shellcheck fixes + Thanks @ysmaoui + * If no header is present, return N/A for Relro and nx + Thanks @petervas + * Remove superfluous -W flags + Thanks @@petervas + * Fix broken Nx checks + Thanks @petervas + * change default libc search path from / to /lib + Thanks @petervas + * Cleanup grep + Thanks @petervas + * Rewrite man page in mdoc + Thanks @Artoria2e5 + * Remove s_readelf + Thanks @petervas + * Fix stack protection and full relro check + Thanks @petervas + * Add tests suite for hardening checks + Thanks @petervas + * Speed up FS_comparison by 10x + Thanks @petervas + * Make shellcheck only run on final script + Thanks @petervas + * Fix debug exit check + Thanks @katexochen + * Use Dynamic Section if there is no symbols table + Thanks @ffontaine + * Check foritfy vs fortified + Thanks @azat Rev-2022052701 Brian Davis * update to 2.6.0 * fix missing sysctl on fedora diff --git a/README.md b/README.md index 95a2527..138eb54 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ Updates - All options now require `--$option=$value` instead of `--$option $value` - --extended option now includes clang CFI and safe stack checks - Last Update: 2022-05-27 + Last Update: 2024-04-20 For OSX ------- diff --git a/checksec b/checksec index 7911f38..a5ec78a 100755 --- a/checksec +++ b/checksec @@ -39,9 +39,9 @@ export PS4='+(${BASH_SOURCE##*/}:${LINENO}): ${FUNCNAME[0]:+${FUNCNAME[0]}(): }' export LC_ALL="C" # version -SCRIPT_VERSION=2022052701 +SCRIPT_VERSION=2024042001 SCRIPT_MAJOR=2 -SCRIPT_MINOR=6 +SCRIPT_MINOR=7 SCRIPT_REVISION=0 # global vars diff --git a/checksec.sig b/checksec.sig index 1f16762f4c00c57cc6a812fcd516f90aadd2cdfb..d556131fe238559dbf74c5c48ad2784a7a356c83 100644 GIT binary patch literal 256 zcmV+b0ssCv9`JwDq(}7Cp8aZHFH;Y0J=UnCn-y3~U^Lfgj1$7x2~5aFkx!--tf8|o z7;Md#=d0yf%K4F-5um|+aPrE;SeAYPzfD1B7=#`dUd7O32))cDGERpZNGlOU$fApw zs-rG?@3zz+VYU~Fa2fGJCw{ihU^`B7`9 zKdlXM@zjz4vFF>8S%MjD6FUqW)}Rw0k-HikTKDfr8eD1ptbNbvIoWHVRdu5Lba|K~ z8ctOuM{X6{MLuawr<_;n92Hb#o;II1WaU!~Wb{+c8%=w4l3xEq Gm#wqna(Tr7 literal 256 zcmV+b0ssC2=||0X^HP(cZmB;9x{@MSUI5`tUM1bHMB3UMvLW5}nfGP+`u{?OQ8QJr z^>FpV62o_^1q*r^K*;a`k+*ci6l)UqTVEWTw%z+-9?^XY`z0M4@&65^{CC1dT02tY zZMXT$G7Y@~1sc4ail~WWcx}*(a=@wdScVifzS5t<7+UvPjB{=$qgyF~>*!PwI0z+6 zX#^(>yku@TX`!|J0?Q&FHvjs$vdF1R@Qc?gRP{;$sUvuAAhm%GQDtq2x6EpJK2Vo9 z#B8V&352x0OORwdT?|LJn5D|1!l~<2m)d~gii&tIiZbEpmc{j`EI(JekGty}8gL=u G$Jn9mfq%~c diff --git a/src/core.sh b/src/core.sh index 2431838..3ca1a57 100644 --- a/src/core.sh +++ b/src/core.sh @@ -6,9 +6,9 @@ export LC_ALL="C" # version -SCRIPT_VERSION=2022052701 +SCRIPT_VERSION=2024042001 SCRIPT_MAJOR=2 -SCRIPT_MINOR=6 +SCRIPT_MINOR=7 SCRIPT_REVISION=0 # global vars