3 ms·
Maybe this will be useful to someone adding the following flags LDFLAGS='-z relro -z now' help with one of the holes (they mentioned it, but not what flags) Che
by myrond 6y ago
Maybe this will be useful to someone adding the following flags LDFLAGS='-z relro -z now' help with one of the holes (they mentioned it, but not what flags)
Check out:
https://github.com/slimm609/checksec.sh https://github.com/slimm609/checksec.sh
* System-wide ASLR (kernel.randomize_va_space): Full (Setting: 2)
* Does the CPU support NX: Yes
* Core-Dumps access to all users: Restricted
COMMAND PID RELRO STACK CANARY SECCOMP NX/PaX PIE FORTIFY
# checksec --proc-all |grep qmail
qmail-injectXXXXX27 Full RELRO Canary found Seccomp-bpf NX enabled PIE enabled Yes
qmail-queueXXXXX97 Full RELRO Canary found Seccomp-bpf NX enabled PIE enabled Yes
qmail-sendXXXXX78 Full RELRO Canary found Seccomp-bpf NX enabled PIE enabled Yes
qmail-lspawnXXXXX89 Full RELRO Canary found Seccomp-bpf NX enabled PIE enabled Yes
qmail-rspawnXXXXX90 Full RELRO Canary found Seccomp-bpf NX enabled PIE enabled Yes
qmail-cleanXXXXX91 Full RELRO Canary found Seccomp-bpf NX enabled PIE enabled Yes