diff --git a/contrib/guix/security-check.py b/contrib/guix/security-check.py index b80a09a9cef..8e8285fe4e7 100755 --- a/contrib/guix/security-check.py +++ b/contrib/guix/security-check.py @@ -235,6 +235,7 @@ def check_MACHO_BRANCH_PROTECTION(binary) -> bool: return False BASE_ELF = [ + ('FORTIFY', check_ELF_FORTIFY), ('PIE', check_PIE), ('NX', check_NX), ('RELRO', check_ELF_RELRO), @@ -260,11 +261,11 @@ BASE_MACHO = [ CHECKS = { lief.Binary.FORMATS.ELF: { - lief.Header.ARCHITECTURES.X86_64: BASE_ELF + [('CONTROL_FLOW', check_ELF_CONTROL_FLOW), ('FORTIFY', check_ELF_FORTIFY)], - lief.Header.ARCHITECTURES.ARM: BASE_ELF + [('FORTIFY', check_ELF_FORTIFY)], - lief.Header.ARCHITECTURES.ARM64: BASE_ELF + [('FORTIFY', check_ELF_FORTIFY)], - lief.Header.ARCHITECTURES.PPC64: BASE_ELF + [('FORTIFY', check_ELF_FORTIFY)], - lief.Header.ARCHITECTURES.RISCV: BASE_ELF + [('FORTIFY', check_ELF_FORTIFY)], + lief.Header.ARCHITECTURES.X86_64: BASE_ELF + [('CONTROL_FLOW', check_ELF_CONTROL_FLOW)], + lief.Header.ARCHITECTURES.ARM: BASE_ELF, + lief.Header.ARCHITECTURES.ARM64: BASE_ELF, + lief.Header.ARCHITECTURES.PPC64: BASE_ELF, + lief.Header.ARCHITECTURES.RISCV: BASE_ELF, }, lief.Binary.FORMATS.PE: { lief.Header.ARCHITECTURES.X86_64: BASE_PE,