binsec
binsec copied to clipboard
Incorporate opinionated security recommendations for binary harden checks
If specified with a flag like --opinion, return compiler flags that can be harnessed in order to mitigate any security features that are not set for the specific instance. Ie with partial RELRO for ELF binaries, we can recommend the following to upgrade to a full RELRO to prevent jumps to dynamically linked symbols:
-Wl,-z,relro,-z,now
If flag is set, this output should be incorporated in all output formats that are emitted.