binsec icon indicating copy to clipboard operation
binsec copied to clipboard

Incorporate opinionated security recommendations for binary harden checks

Open ex0dus-0x opened this issue 5 years ago • 0 comments

If specified with a flag like --opinion, return compiler flags that can be harnessed in order to mitigate any security features that are not set for the specific instance. Ie with partial RELRO for ELF binaries, we can recommend the following to upgrade to a full RELRO to prevent jumps to dynamically linked symbols:

-Wl,-z,relro,-z,now

If flag is set, this output should be incorporated in all output formats that are emitted.

ex0dus-0x avatar Jun 26 '20 16:06 ex0dus-0x