X-Git-Url: https://ruderich.org/simon/gitweb/?p=blhc%2Fblhc.git;a=blobdiff_plain;f=bin%2Fblhc;h=5c01ada03ff269953838fef909e31f7b7cbffd96;hp=123613817a50af16c7b27c35b8c1fb7264d27f4a;hb=95bb26de690e971a07780da13c5fa19ab61864e8;hpb=0e29a93fc2056d254ef650e81d9299a62bfc13b3 diff --git a/bin/blhc b/bin/blhc index 1236138..5c01ada 100755 --- a/bin/blhc +++ b/bin/blhc @@ -618,14 +618,14 @@ blhc - build log hardening check, checks build logs for missing hardening flags B [options] - --help available options - --version version number and license - --pie force +pie check - --bindnow force +bindbow check --all force +all (+pie, +bindnow) check --arch set architecture (autodetected) + --bindnow force +bindbow check --buildd parser mode for buildds --color use colored output + --pie force +pie check + --help available options + --version version number and license =head1 DESCRIPTION @@ -636,22 +636,6 @@ other important warnings. It's licensed under the GPL 3 or later. =over 8 -=item B<-h -? --help> - -Print available options. - -=item B<--version> - -Print version number and license. - -=item B<--pie> - -Force check for all +pie hardening flags. By default it's auto detected. - -=item B<--bindnow> - -Force check for all +bindnow hardening flags. By default it's auto detected. - =item B<--all> Force check for all +all (+pie, +bindnow) hardening flags. By default it's @@ -663,6 +647,10 @@ Set the specific architecture (e.g. amd64, armel, etc.), automatically disables hardening flags not available on this architecture. Is detected automatically if dpkg-buildpackage is used. +=item B<--bindnow> + +Force check for all +bindnow hardening flags. By default it's auto detected. + =item B<--buildd> Special mode for buildds when automatically parsing log files. The following @@ -681,6 +669,18 @@ detected). Use colored (ANSI) output for warning messages. +=item B<--pie> + +Force check for all +pie hardening flags. By default it's auto detected. + +=item B<-h -? --help> + +Print available options. + +=item B<--version> + +Print version number and license. + =back Auto detection for B<--pie> and B<--bindnow> only works if at least one