OS Manuals

/usr/bin/checksec

Binary security checker

From checksec 3.2.0-r11 (os), captured 2026-11-05 by running checksec --help (exit 0). permalink

A tool used to quickly survey mitigation technologies in use by processes on a Linux system.

Usage:
  checksec [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  dir         check all files in a directory
  file        Check a single binary file
  fortifyFile Check Fortify for binary file
  fortifyProc Check Fortify for running process
  help        Help about any command
  kernel      Check kernel security flags
  listfile    Check every binary listed in a file (or stdin via -)
  proc        Check a file of a running process
  procAll     Check all running processes
  procLibs    Check all libraries mapped into a running process

Flags:
      --color string     Color output mode (auto, always, never) (default "auto")
      --fail-if string   Exit non-zero if any listed check (comma-separated keys, e.g. relro,canary,pie) is not StatusGood
  -h, --help             help for checksec
  -l, --libc string      Set libc location (useful for FORTIFY check on offline embedded file-system)
      --no-banner        disable the banner
      --no-headers       disable the headers
      --no-warnings      disable warnings
  -o, --output string    Output format (table, json, yaml, xml, csv) (default "table")
  -v, --version          version for checksec

Use "checksec [command] --help" for more information about a command.
Options (9)
OptionDescriptionSource
--color stringColor output mode (auto, always, never) (default "auto")help
--fail-if stringExit non-zero if any listed check (comma-separated keys, e.g. relro,canary,pie) is not StatusGoodhelp
-h, --helphelp for checksechelp
-l, --libc stringSet libc location (useful for FORTIFY check on offline embedded file-system)help
--no-bannerdisable the bannerhelp
--no-headersdisable the headershelp
--no-warningsdisable warningshelp
-o, --output stringOutput format (table, json, yaml, xml, csv) (default "table")help
-v, --versionversion for checksechelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.