/usr/bin/hardening-check

Usage:
    hardening-check [options] [ELF ...]

    Examine a given set of ELF binaries and check for several security
    hardening features, failing if they are not all found.

Options:
    --nopie, -p
            Do not require that the checked binaries be built as PIE.

    --nostackprotector, -s
            Do not require that the checked binaries be built with the stack
            protector.

    --nofortify, -f
            Do not require that the checked binaries be built with Fortify
            Source.

    --norelro, -r
            Do not require that the checked binaries be built with RELRO.

    --nobindnow, -b
            Do not require that the checked binaries be built with BIND_NOW.

    --nocfprotection, -x
            Do not require that the checked binaries be built with control
            flow protection.

    --nobranchprotection, -B
            Do not require that the checked binaries be built with branch
            protection.

    --quiet, -q
            Only report failures.

    --verbose, -v
            Report verbosely on failures.

    --report-functions, -R
            After the report, display all external functions needed by the
            ELF.

    --find-libc-functions, -F
            Instead of the regular report, locate the libc for the first ELF
            on the command line and report all the known "fortified"
            functions exported by libc.

    --color, -c
            Enable colorized status output.

    --lintian, -l
            Switch reporting to lintian-check-parsable output.

    --debug Report some debugging during processing.

    --help, -h, -?
            Print a brief help message and exit.

    --man, -H
            Print the manual page and exit.