Merge pull request #270 from slimm609/remove_old_sources

remove 2.x old source

.goreleaser.yml

@@ -1,23 +1,32 @@
+version: 2
 project_name: checksec
 
+release:
+  prerelease: auto
+
+env:
+  - DOCKER_CLI_EXPERIMENTAL=enabled
+  - CGO_ENABLED=0
+
 builds:
-  - id: linux
+  - id: core
     binary: checksec
     main: ./main.go
+    buildmode: "pie"
     ldflags:
       - -s -w
       - -X "main.version={{ .Version }}"
       - -X "main.commit={{ .Commit }}"
       - -X "main.date={{ .Date }}"
-    env:
-      - CGO_ENABLED=0
+      - -extldflags "-Wl,-z,relro,-z,now,-z,noexecstack"
     goos:
       - linux
+      - darwin
     goarch:
-    #  - amd64
+      - amd64
       - arm64
 
-  - id: darwin
+  - id: windows
     binary: checksec
     main: ./main.go
     ldflags:
@@ -28,25 +37,9 @@ builds:
     env:
       - CGO_ENABLED=0
     goos:
-      - darwin
+      - windows
     goarch:
-    #  - amd64
+      - amd64
       - arm64
-
-  # - id: windows
-  #   binary: checksec
-  #   main: ./main.go
-  #   ldflags:
-  #     - -s -w
-  #     - -X "main.version={{ .Version }}"
-  #     - -X "main.commit={{ .Commit }}"
-  #     - -X "main.date={{ .Date }}"
-  #   env:
-  #     - CGO_ENABLED=0
-  #   goos:
-  #     - windows
-  #   goarch:
-  #     - amd64
-  #     - arm64
-  #   ldflags:
-  #     - -buildmode=exe
+    ldflags:
+      - -buildmode=exe

.pre-commit-config.yaml

@@ -1,11 +1,6 @@
 repos:
 - repo: local
   hooks:
-  - id: build_checksec
-    name: build checksec script
-    entry: bash ./hack/build.sh
-    language: system
-    pass_filenames: false
   - id: enable_hooks
     name: enable git hooks
     entry: bash ./hack/enable-git-hooks.sh

pkg/checksec/fortify.go

@@ -35,7 +35,7 @@ func Fortify(name string, binary *elf.File) *fortify {
 	checked := 0
 	total := 0
 
-	ldd := GetLdd(name)
+	ldd := getLdd(name)
 
 	if ldd == "none" || ldd == "unk" {
 		res.Output = "N/A"
@@ -134,7 +134,7 @@ func Fortify(name string, binary *elf.File) *fortify {
 
 }
 
-func GetLdd(filename string) string {
+func getLdd(filename string) string {
 	dynamic := false
 	file, err := elf.Open(filename)
 	if err != nil {

pkg/checksec/runpath.go

@@ -11,6 +11,7 @@ type runpath struct {
 	Color  string
 }
 
+// Detect runpath in binary
 func RUNPATH(name string) *runpath {
 	res := runpath{}
 	file, err := elf.Open(name)

pkg/checksec/symbols.go

@@ -11,6 +11,7 @@ type symbols struct {
 	Color  string
 }
 
+// SYMBOLS detects usage of elf symbols
 func SYMBOLS(name string) *symbols {
 	res := symbols{}
 	file, err := elf.Open(name)