summaryrefslogtreecommitdiffstats
path: root/tags/h/hardening-no-relro.tag
diff options
context:
space:
mode:
Diffstat (limited to 'tags/h/hardening-no-relro.tag')
-rw-r--r--tags/h/hardening-no-relro.tag9
1 files changed, 9 insertions, 0 deletions
diff --git a/tags/h/hardening-no-relro.tag b/tags/h/hardening-no-relro.tag
new file mode 100644
index 0000000..e1bb69c
--- /dev/null
+++ b/tags/h/hardening-no-relro.tag
@@ -0,0 +1,9 @@
+Tag: hardening-no-relro
+Severity: warning
+Check: binaries/hardening
+Explanation: This package provides an ELF binary that lacks the "read-only
+ relocation" link flag. This package was likely not built with the
+ default Debian compiler flags defined by <code>dpkg-buildflags</code>.
+ If built using <code>dpkg-buildflags</code> directly, be sure to import
+ <code>LDFLAGS</code>.
+See-Also: https://wiki.debian.org/Hardening