2018-03-27 01:42:46 +02:00
|
|
|
{ stdenv, fetchurl, file, findutils, binutils, glibc, procps, coreutils, sysctl }:
|
2014-02-19 12:48:46 +01:00
|
|
|
|
|
|
|
stdenv.mkDerivation rec {
|
|
|
|
name = "checksec-${version}";
|
|
|
|
version = "1.5";
|
2016-02-26 18:26:03 +01:00
|
|
|
|
2014-02-19 12:48:46 +01:00
|
|
|
src = fetchurl {
|
|
|
|
url = "http://www.trapkit.de/tools/checksec.sh";
|
|
|
|
sha256 = "0iq9v568mk7g7ksa1939g5f5sx7ffq8s8n2ncvphvlckjgysgf3p";
|
|
|
|
};
|
|
|
|
|
|
|
|
patches = [ ./0001-attempt-to-modprobe-config-before-checking-kernel.patch ];
|
|
|
|
|
|
|
|
unpackPhase = ''
|
2016-02-26 18:26:03 +01:00
|
|
|
mkdir ${name}
|
|
|
|
cp $src ${name}/checksec.sh
|
|
|
|
cd ${name}
|
2014-02-19 12:48:46 +01:00
|
|
|
'';
|
|
|
|
|
|
|
|
installPhase = ''
|
|
|
|
mkdir -p $out/bin
|
|
|
|
cp checksec.sh $out/bin/checksec
|
|
|
|
chmod +x $out/bin/checksec
|
|
|
|
substituteInPlace $out/bin/checksec --replace /bin/bash ${stdenv.shell}
|
2015-04-26 19:54:51 +02:00
|
|
|
substituteInPlace $out/bin/checksec --replace /lib/libc.so.6 ${glibc.out}/lib/libc.so.6
|
2014-02-19 12:48:46 +01:00
|
|
|
substituteInPlace $out/bin/checksec --replace find ${findutils}/bin/find
|
|
|
|
substituteInPlace $out/bin/checksec --replace "file $" "${file}/bin/file $"
|
|
|
|
substituteInPlace $out/bin/checksec --replace "xargs file" "xargs ${file}/bin/file"
|
2016-04-10 21:50:27 +02:00
|
|
|
substituteInPlace $out/bin/checksec --replace " readelf -" " ${binutils.out}/bin/readelf -"
|
|
|
|
substituteInPlace $out/bin/checksec --replace "(readelf -" "(${binutils.out}/bin/readelf -"
|
|
|
|
substituteInPlace $out/bin/checksec --replace "command_exists readelf" "command_exists ${binutils.out}/bin/readelf"
|
2018-03-27 01:42:46 +02:00
|
|
|
substituteInPlace $out/bin/checksec --replace "/sbin/sysctl -" "${sysctl}/bin/sysctl -"
|
2015-04-05 21:13:26 +02:00
|
|
|
substituteInPlace $out/bin/checksec --replace "/usr/bin/id -" "${coreutils}/bin/id -"
|
2014-02-19 12:48:46 +01:00
|
|
|
'';
|
|
|
|
|
|
|
|
meta = {
|
|
|
|
description = "A tool for checking security bits on executables";
|
2014-03-02 12:51:49 +01:00
|
|
|
homepage = "http://www.trapkit.de/tools/checksec.html";
|
2014-02-19 12:48:46 +01:00
|
|
|
license = stdenv.lib.licenses.bsd3;
|
2014-03-08 03:27:02 +01:00
|
|
|
platforms = stdenv.lib.platforms.linux;
|
2014-02-19 12:48:46 +01:00
|
|
|
maintainers = [ stdenv.lib.maintainers.thoughtpolice ];
|
|
|
|
};
|
|
|
|
}
|