# Installer checksec avec Homebrew, apt, dnf, Nix, pacman, zypper Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de checksec pour les workflows d'agents IA. ## installation ```sh sudo av install brew:checksec ``` Commandes d'installation supplémentaires: ### macOS - Homebrew (100%): ```sh brew install checksec ``` Preuve: local Homebrew formula metadata ### Linux - Debian apt (92%): ```sh sudo apt install checksec ``` Preuve: Debian stable package indexes: checksec from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install checksec ``` Preuve: Fedora Rawhide package metadata: checksec from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#checksec ``` Preuve: nixpkgs package indexes: pkgs/by-name/ch/checksec/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S checksec ``` Preuve: Arch Linux sync databases: checksec from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install checksec ``` Preuve: openSUSE Tumbleweed package metadata: checksec from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Faits du paquet - **Clé du paquet:** brew:checksec - **Gestionnaire de paquets:** Homebrew - **Page du gestionnaire de paquets:** - **Version:** 3.2.0 - **Résumé source:** Security feature auditing for ELF binaries and Linux kernels - **Page d'accueil:** - **Dépôt:** - **Docs amont:** - **Licence:** BSD-3-Clause - **Archive source:** - **Dernière mise à jour:** 2026-07-21T03:05:04Z - **Généré:** 2026-07-25T07:20:51+00:00 ## exécutables - checksec (cli) - checksec (alias) ## Dépendances de compilation - go ## Comportement d'installation - hook post-installation: non défini - Bouteille: disponible sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version et fraîcheur - page générée: 2026-07-25 - version du gestionnaire: 3.2.0 - gestionnaire mis à jour: 2026-07-21 - données locales: OK - dépôt amont: https://github.com/slimm609/checksec - dernière version détectée: 3.2.0 (à jour) ## Historique du projet et usages checksec is a command-line auditor for security properties of ELF executables, running processes, and Linux kernels. It reports mitigations and hardening features such as RELRO, stack canaries, NX, PIE, CFI, FORTIFY_SOURCE, and seccomp. ### Historique du projet The original checksec was written by Tobias Klein as a Bash script in 2011. The maintained project is a modern Go rewrite distributed as a single static binary while retaining the familiar checksec purpose and name. ### Historique d'adoption The project is distributed through release binaries, Linux package formats, a container image, Go installation, and several operating-system package managers, making it a common lightweight hardening check in developer and security workflows. ### Modes d'utilisation Typical commands inspect one file, recursively scan a directory, audit a process by PID, or examine the running Linux kernel. Machine-readable CSV, JSON, XML, and YAML output makes it suitable for scripts and CI policy checks. ### Pourquoi les passionnés de paquets s'y intéressent checksec packages a broad set of binary-hardening checks into one small CLI. It is useful after compilation or packaging to verify that toolchain and linker hardening flags survived into the shipped artifact. ### Chronologie - 2011: Tobias Klein wrote the original Bash implementation. - 2014: The current official GitHub repository was created. - 2026: The Go-based 3.x series was distributed as static binaries, native packages, containers, and source builds. ### Related projects - The project is closely associated with ELF tooling, Linux kernel hardening, compiler and linker mitigations, and CI systems that consume its structured reports. ### Sources - - - - ## Notes de sécurité Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour checksec. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable. ## Détails de la base source - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** checksec - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Autres enregistrements de gestionnaires de paquets - Debian apt - checksec - 2.6.0-2: normalized package name match | Debian stable package indexes: checksec from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Bash script to test executable properties | https://github.com/slimm609/checksec.sh - Nix - checksec: normalized package name match | nixpkgs package indexes: pkgs/by-name/ch/checksec/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - checksec - 2.6.0-2: normalized package name match | Ubuntu 24.04 LTS package indexes: checksec from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Bash script to test executable properties | https://github.com/slimm609/checksec.sh - dnf - checksec - 2.7.1-7.fc44: normalized package name match | Fedora Rawhide package metadata: checksec from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Tool to check system for binary-hardening | https://github.com/slimm609/checksec.sh - pacman - checksec - 3.1.0-2: normalized package name match | Arch Linux sync databases: checksec from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Tool designed to test which standard Linux OS and PaX security features are being used | https://slimm609.github.io/checksec/ - zypper - checksec - 3.1.0-2.3: normalized package name match | openSUSE Tumbleweed package metadata: checksec from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Utility to check binaries for system hardening | https://github.com/slimm609/checksec.sh ## Liens liés - [Source-control packages](https://www.automicvault.com/fr/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/fr/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Developer build packages](https://www.automicvault.com/fr/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/fr/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://www.automicvault.com/fr/pkg/brew/go/) - Build dependency declared by Homebrew. - [execstack](https://www.automicvault.com/fr/pkg/brew/execstack/) - Shares av.db curated category or tags: binary-analysis, cli, elf, security. - [redress](https://www.automicvault.com/fr/pkg/brew/redress/) - Shares av.db curated category or tags: binary-analysis, cli, security. - [bandit](https://www.automicvault.com/fr/pkg/brew/bandit/) - Shares av.db curated category or tags: cli, security, static-analysis. - [caracal](https://www.automicvault.com/fr/pkg/brew/caracal/) - Shares av.db curated category or tags: cli, security, static-analysis. - [cargo-geiger](https://www.automicvault.com/fr/pkg/brew/cargo-geiger/) - Shares av.db curated category or tags: cli, security, static-analysis. - [cfripper](https://www.automicvault.com/fr/pkg/brew/cfripper/) - Shares av.db curated category or tags: cli, security, static-analysis. - [checkov](https://www.automicvault.com/fr/pkg/brew/checkov/) - Shares av.db curated category or tags: cli, security, static-analysis. - [flawfinder](https://www.automicvault.com/fr/pkg/brew/flawfinder/) - Shares av.db curated category or tags: cli, security, static-analysis. - [intercept](https://www.automicvault.com/fr/pkg/brew/intercept/) - Security-sensitive metadata or terminology overlaps. Shared terms: analysis, auditing, cli, security, static. - [modsurfer](https://www.automicvault.com/fr/pkg/brew/modsurfer/) - Security-sensitive metadata or terminology overlaps. Shared terms: analysis, binaries, binary, binary-analysis, cli. ## Combined YAML source View the package source record on GitHub. [combined/checksec.yml](https://github.com/automic-vault/db/blob/main/combined/checksec.yml) ## Sources - Nucleus package database - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph