1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
pax-utils is a small set of various PaX aware and related utilities for
ELF binaries. It was written for ELF Q/A on Gentoo systems but can be
used on any distro.
== scanelf ==
* Scan ELF binaries for stuff
Usage: scanelf [options] <dir1/file1> [dir2 dirN fileN ...]
Options: -[plRmyxetrnibs:N:TaqvF:f:o:BhV]
-p, --path * Scan all directories in PATH environment
-l, --ldpath * Scan all directories in /etc/ld.so.conf
-R, --recursive * Scan directories recursively
-m, --mount * Don't recursively cross mount points
-y, --symlink * Don't scan symlinks
-x, --pax * Print PaX markings
-e, --header * Print GNU_STACK/PT_LOAD markings
-t, --textrel * Print TEXTREL information
-r, --rpath * Print RPATH information
-n, --needed * Print NEEDED information
-i, --interp * Print INTERP information
-b, --bind * Print BIND information
-s, --symbol <arg> * Find a specified symbol
-N, --lib <arg> * Find a specified library
-T, --textrels * Locate cause of TEXTREL
-a, --all * Print all scanned info (-x -e -t -r -n -i -b)
-q, --quiet * Only output 'bad' things
-v, --verbose * Be verbose (can be specified more than once)
-F, --format <arg> * Use specified format for output
-f, --from <arg> * Read input stream from a filename
-o, --file <arg> * Write output stream to a filename
-B, --nobanner * Don't display the header
-h, --help * Print this help and exit
-V, --version * Print version and exit
The format modifiers for the -F option are:
F Filename x PaX Flags e STACK/RELRO
t TEXTREL r RPATH n NEEDED
i INTERP b BIND s symbol
N library o Type T TEXTRELs
p filename (with search path removed)
f base filename
Prefix each modifier with '%' (verbose) or '#' (silent)
== pspax ==
Usage: pspax [options]
Options:
-a, --all * Show all processes
-B, --nobanner * Don't display the header
-h, --help * Print this help and exit
-V, --version * Print version and exit
If pspax was compiled with CFLAGS += -DWANT_SYSCAP and LDFLAGS +=- lcap
it will also list runtime capabilities If extended attribute support is
enabled it will list those values as well.
== dumpelf ==
* Dump internal ELF structure
Usage: dumpelf <file1> [file2 fileN ...]
Options:
-v, --verbose * Be verbose (can be specified more than once)
-h, --help * Print this help and exit
-V, --version * Print version and exit
== INSTALL ==
make install
You don't need PaX to use the pax-utils. Infact the only thing they
really have in common is that pax-utils was initially written to aid in
deploying PaX systems so it includes support for PT_PAX_FLAGS and the
deprecated but still in use EI_PAX flags. For more information about PaX
see the homepage at http://pax.grsecurity.net/
|
GitWeb