diff --git a/ChangeLog b/ChangeLog index a99f8fc..514b9e0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,49 @@ +Rev-2024042101 Brian Davis + * Update to 2.7.0 + * libc cleanup + * Added github pages + * Check kernel for YAMA + Thanks @cgzones + * Fix Nx checks + * Move github primary branch from master to main + * Update gitattributes + Thanks @calebTree + * Allow setting a libc file + Thanks @sreschke80 + * Add tests for listfile + Thanks @ysmaoui + * Fix trailing comma with listfile + Thanks @ysmaoui + * Several shellcheck fixes + Thanks @ysmaoui + * If no header is present, return N/A for Relro and nx + Thanks @petervas + * Remove superfluous -W flags + Thanks @@petervas + * Fix broken Nx checks + Thanks @petervas + * change default libc search path from / to /lib + Thanks @petervas + * Cleanup grep + Thanks @petervas + * Rewrite man page in mdoc + Thanks @Artoria2e5 + * Remove s_readelf + Thanks @petervas + * Fix stack protection and full relro check + Thanks @petervas + * Add tests suite for hardening checks + Thanks @petervas + * Speed up FS_comparison by 10x + Thanks @petervas + * Make shellcheck only run on final script + Thanks @petervas + * Fix debug exit check + Thanks @katexochen + * Use Dynamic Section if there is no symbols table + Thanks @ffontaine + * Check foritfy vs fortified + Thanks @azat Rev-2022052701 Brian Davis * update to 2.6.0 * fix missing sysctl on fedora diff --git a/README.md b/README.md index 95a2527..138eb54 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ Updates - All options now require `--$option=$value` instead of `--$option $value` - --extended option now includes clang CFI and safe stack checks - Last Update: 2022-05-27 + Last Update: 2024-04-20 For OSX ------- diff --git a/checksec b/checksec index 7911f38..a5ec78a 100755 --- a/checksec +++ b/checksec @@ -39,9 +39,9 @@ export PS4='+(${BASH_SOURCE##*/}:${LINENO}): ${FUNCNAME[0]:+${FUNCNAME[0]}(): }' export LC_ALL="C" # version -SCRIPT_VERSION=2022052701 +SCRIPT_VERSION=2024042001 SCRIPT_MAJOR=2 -SCRIPT_MINOR=6 +SCRIPT_MINOR=7 SCRIPT_REVISION=0 # global vars diff --git a/checksec.sig b/checksec.sig index 1f16762..d556131 100644 Binary files a/checksec.sig and b/checksec.sig differ diff --git a/src/core.sh b/src/core.sh index 2431838..3ca1a57 100644 --- a/src/core.sh +++ b/src/core.sh @@ -6,9 +6,9 @@ export LC_ALL="C" # version -SCRIPT_VERSION=2022052701 +SCRIPT_VERSION=2024042001 SCRIPT_MAJOR=2 -SCRIPT_MINOR=6 +SCRIPT_MINOR=7 SCRIPT_REVISION=0 # global vars