Use the annocheck program

You can use annocheck to examine files, directories, RPM packages, and extra tools.

Note
annocheck recursively scans directories, archives, and RPM packages for ELF object files. The files have to be in the ELF format. annocheck does not handle any other binary file types.

Use annocheck to examine files
Copy link

To verify hardening options and build security notes of ELF files, examine the files by using the annocheck tool.

Procedure
Copy link

To examine a file, use: 
$ annocheck file-name

Replace file-name with the name of a file.

Note

The files must be in ELF format. annocheck does not handle any other binary file types. annocheck processes static libraries that contain ELF object files.

Use annocheck to examine directories
Copy link

To examine ELF files in a directory, use the annocheck tool, which recursively scans directories, subdirectories, and archives.

Procedure
Copy link

To scan a directory, use: 
$ annocheck directory-name

Replace directory-name with the name of a directory. annocheck automatically examines the contents of the directory, its sub-directories, and any archives and RPM packages within the directory.

Note

annocheck only looks for ELF files. Other file types are ignored.

Use annocheck to examine RPM packages
Copy link

To examine ELF files in an RPM package, use the annocheck tool, which recursively scans all ELF files inside the package.

Procedure
Copy link

  • To scan an RPM package, use: 
    $ annocheck rpm-package-name

    Replace rpm-package-name with the name of an RPM package. annocheck recursively scans all the ELF files inside the RPM package.

    Note

    annocheck only looks for ELF files. Other file types are ignored.
  • To scan an RPM package with provided debug info RPM, use: 
    $ annocheck rpm-package-name --debug-rpm debuginfo-rpm

    Replace rpm-package-name with the name of an RPM package, and debuginfo-rpm with the name of a debug info RPM associated with the binary RPM.