checksec: use binutils instead of elfutils
readelf which makes most of checks should come from binutils package instead of elfutils E.g. the PIE check from checksec, different readelf gives different result: (elfutils) $ /nix/store/rgrji20513g19ci0sa6jydm86gpf4j42-elfutils-0.158/bin/readelf -d /nix/store/q1sbn93v4k3166s091s9biygv9srv8qa-nginx-1.6.2/bin/nginx 2>/dev/null |grep -q '(DEBUG)' ; echo $? 1 (binutils) $ /nix/store/b8qhjrwf8sf9ggkjxqqav7f1m6w83bh0-binutils-2.23.1/bin/readelf -d /nix/store/q1sbn93v4k3166s091s9biygv9srv8qa-nginx-1.6.2/bin/nginx 2>/dev/null | grep -q '(DEBUG)' ; echo $? 0
parent
8300898f
Please register or sign in to comment