Bug 220245

Summary:

[NEW PORT] security/hardening-check: Check binaries for security hardening features

Product:

Ports & Packages

Reporter:

Jov <amutu>

Component:

Individual Port(s)

Assignee:

Kurt Jaeger <pi>

Status:

Closed FIXED

Severity:

Affects Only Me

CC:

Priority:

---

Keywords:

feature

Version:

Latest

Hardware:

Any

OS:

Any

URL:

https://wiki.debian.org/Hardening

Attachments:

Description	Flags
hardening-check.shar	none

Description Jov 2017-06-24 08:17:20 UTC

Created attachment 183757 [details]
hardening-check.shar

Hardening-check is a perl script to verify that the resulting binary does, in
fact, have hardening features enabled, you can use it to test each ELF binary
and the output will show if the binary has position independent executable,
stack protected, fortify source functions(not supported on FreeBSD now), read
only relocations or immediate binding supported.

WWW: https://wiki.debian.org/Hardening

QA:
portlint -AC
WARN: Makefile: [16]: possible direct use of command "perl" found. use ${PERL} instead.
WARN: Makefile: using hyphen in PORTNAME. consider using PKGNAMEPREFIX and/or PKGNAMESUFFIX.
0 fatal errors and 2 warnings found.

poudriere testport pass on 11.0R-amd64

Comment 1 commit-hook freebsd_committer

2017-07-05 18:02:22 UTC

A commit references this bug:

Author: pi
Date: Wed Jul  5 18:02:03 UTC 2017
New revision: 445088
URL: https://svnweb.freebsd.org/changeset/ports/445088

Log:
  New port: security/hardening-check

  Check binaries for security hardening features

  Hardening-check is a perl script to verify that the resulting binary
  does, in fact, have hardening features enabled, you can use it to
  test each ELF binary and the output will show if the binary has
  position independent executable, stack protected, fortify source
  functions(not supported on FreeBSD now), read only relocations or
  immediate binding supported.

  WWW: https://wiki.debian.org/Hardening

  PR:		220245
  Submitted by:	amutu@amutu.com

Changes:
  head/security/Makefile
  head/security/hardening-check/
  head/security/hardening-check/Makefile
  head/security/hardening-check/distinfo
  head/security/hardening-check/pkg-descr

Comment 2 Kurt Jaeger freebsd_committer

2017-07-05 18:02:43 UTC

Committed, thanks!