NAME

       checksec - check executables and kernel properties

SYNOPSIS

       checksec [options] [file]

DESCRIPTION

       checksec  is  a  bash script used to check the properties of executables (like PIE, RELRO,
       PaX, Canaries, ASLR, Fortify Source) and kernel  security  options  (like  GRSecurity  and
       SELinux).

OPTIONS

       --output= or --format= {cli|csv|xml|json}
              Output the results in different formats for ingestion to other applications.  NOTE:
              This option must go before any other options currently

       --help Displays the help text

       --file={filename}
              Checks individual files for security features compiled into the executable

       --dir={directory}
              Recursively checks all executable files in  the  directory  for  security  features
              compiled into the executables

       --proc={pid}
              Checks the security features of a running process by name

       --proc-all
              Checks the security features of all running processes

       --proc-libs
              Checks the security features of the all libraries of a running process ID

       --kernel[=kconfig]
              Checks the security features of the running kernel or a specified kernel config

       --fortify-file={filename}
              Checks  the  fortifiability  of  a file and if any of the fortifiable features have
              already been compiled into the file

       --fortify-proc={pid}
              Checks the fortifiability of a running  process  and  if  any  of  the  fortifiable
              features have already been compiled in

       --version
              Shows the current version of the running software

       --update or --upgrade
              Checks source for a signed update and updates the application if available

DIAGNOSTICS

       The following diagnostics may be issued on stderr:

       Permission Denied.
              For most of the checks you must be root..
       Debugging
              --debug option can be specified for debug level output

AUTHORS

       Brian Davis <slimm609 at gmail dot com>
       Checksec was originally written by Tobias Klein