pax-utils is a small set of various PaX aware and related utilities for 
ELF binaries. It was written for ELF Q/A on Gentoo systems but can be 
used on any distro.

== scanelf ==
* Scan ELF binaries for stuff

Usage: scanelf [options] <dir1/file1> [dir2 dirN fileN ...]

Options: -[plRmyxetrnLibSs:gN:TaqvF:f:o:BhV]
  -p, --path         * Scan all directories in PATH environment
  -l, --ldpath       * Scan all directories in /etc/ld.so.conf
  -R, --recursive    * Scan directories recursively
  -m, --mount        * Don't recursively cross mount points
  -y, --symlink      * Don't scan symlinks

  -x, --pax          * Print PaX markings
  -e, --header       * Print GNU_STACK/PT_LOAD markings
  -t, --textrel      * Print TEXTREL information
  -r, --rpath        * Print RPATH information
  -n, --needed       * Print NEEDED information
  -L, --ldcache      * Resolve NEEDED information (use with -n)
  -i, --interp       * Print INTERP information
  -b, --bind         * Print BIND information
  -S, --soname       * Print SONAME information
  -s, --symbol <arg> * Find a specified symbol
  -N, --lib    <arg> * Find a specified library
  -g, --gmatch       * Use strncmp to match libraries. (use with -N)
  -T, --textrels     * Locate cause of TEXTREL
  -a, --all          * Print all scanned info (-x -e -t -r -b)

  -q, --quiet        * Only output 'bad' things
  -v, --verbose      * Be verbose (can be specified more than once)
  -F, --format <arg> * Use specified format for output
  -f, --from   <arg> * Read input stream from a filename
  -o, --file   <arg> * Write output stream to a filename
  -B, --nobanner     * Don't display the header
  -h, --help         * Print this help and exit
  -V, --version      * Print version and exit

The format modifiers for the -F option are:
 F Filename 	x PaX Flags 	e STACK/RELRO
 t TEXTREL  	r RPATH     	n NEEDED
 i INTERP   	b BIND      	s symbol
 N library  	o Type      	T TEXTRELs
 S SONAME
 p filename (with search path removed)
 f filename (short name/basename)
Prefix each modifier with '%' (verbose) or '#' (silent)

== pspax ==
* List ELF/PaX information about running processes
Usage: pspax [options]

Options:
  -a, --all         * Show all processes

  -B, --nobanner    * Don't display the header
  -h, --help        * Print this help and exit
  -V, --version     * Print version and exit

If pspax was compiled with CFLAGS += -DWANT_SYSCAP and LDFLAGS +=- lcap 
it will also list runtime capabilities If extended attribute support is 
enabled it will list those values as well.

== dumpelf ==
* Dump internal ELF structure

Usage: dumpelf <file1> [file2 fileN ...]

Options:
  -v, --verbose      * Be verbose (can be specified more than once)
  -h, --help         * Print this help and exit
  -V, --version      * Print version and exit


== INSTALL ==
make install

You don't need PaX to use the pax-utils. Infact the only thing they 
really have in common is that pax-utils was initially written to aid in 
deploying PaX systems so it includes support for PT_PAX_FLAGS and the 
deprecated but still in use EI_PAX flags. For more information about PaX 
see the homepage at http://pax.grsecurity.net/