\" Process this file with
.\" groff -man -Tascii foo.1
.\"
.TH CHECKSEC 1 "FEBURARY 2019" Linux "User Manuals"
.SH NAME
checksec \- check executables and kernel properties
.SH SYNOPSIS
.B checksec [options] [file]
.SH DESCRIPTION
.B checksec
is a bash script used to check the properties of executables 
(like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source) and kernel security 
options (like GRSecurity and SELinux).
.SH OPTIONS
.TP
\fB\--output=\fP or \fB\--format=\fP \fB{cli|csv|xml|json}\fP
Output the results in different formats for ingestion to other applications.
NOTE: This option must go before any other options currently
.TP
\fB\--help\fP
Displays the help text
.TP
\fB\--file={filename}\fP
Checks individual files for security features compiled into the executable
.TP
\fB\--dir={directory}\fP
Recursively checks all executable files in the directory for security features compiled into the executables
.TP
\fB\--proc={pid}\fP
Checks the security features of a running process by name
.TP
\fB\--proc-all\fP
Checks the security features of all running processes
.TP
\fB\--proc-libs\fP
Checks the security features of the all libraries of a running process ID
.TP
\fB\--kernel[=kconfig]\fP
Checks the security features of the running kernel or a specified kernel config
.TP
\fB\--fortify-file={filename}\fP
Checks the fortifiability of a file and if any of the fortifiable features have already been compiled into the file
.TP
\fB\--fortify-proc={pid}\fP
Checks the fortifiability of a running process and if any of the fortifiable features have already been compiled in  
.TP
\fB\--version\fP 
Shows the current version of the running software
.TP
\fB\--update\fP or \fB\--upgrade\fP
Checks source for a signed update and updates the application if available

.SH DIAGNOSTICS
The following diagnostics may be issued on stderr:
 
Permission Denied.
.RS
For most of the checks you must be root..
.RE
Debugging 
.RS
\fB\--debug\fP option can be specified for debug level output
.SH AUTHORS
Brian Davis <slimm609 at gmail dot com>
.RE
Checksec was originally written by Tobias Klein