Report for image: initramfs-netboot-image
With rootfs location at /w/workspace/release-blowfish/MACHINE/qemux86-64/label/agl-test-slave/agl-blowfish-qemux86-64/tmp/work/qemux86_64-poky-linux/initramfs-netboot-image/1.0-r0/rootfs

Relocation Read-Only
More information about RELRO and how to enable it: http://tk-blog.blogspot.de/2009/02/relro-not-so-well-known-memory.html
Files with no RELRO:
Files with partial RELRO:
/lib/libutil.so.1
/lib/libm.so.6
/lib/libanl-2.22.so
/lib/libc-2.22.so
/lib/libutil-2.22.so
/lib/libcrypt.so.1
/lib/ld-2.22.so
/lib/libBrokenLocale-2.22.so
/lib/libpthread-2.22.so
/lib/libc.so.6
/lib/libdl.so.2
/lib/librt.so.1
/lib/libnss_files-2.22.so
/lib/libnss_compat.so.2
/lib/libmvec.so.1
/lib/libBrokenLocale.so.1
/lib/libmvec-2.22.so
/lib/libanl.so.1
/lib/libpthread.so.0
/lib/librt-2.22.so
/lib/libnss_files.so.2
/lib/libnss_compat-2.22.so
/lib/libm-2.22.so
/lib/libcrypt-2.22.so
/lib/libnss_dns-2.22.so
/lib/libresolv.so.2
/lib/libdl-2.22.so
/lib/libnsl-2.22.so
/lib/libresolv-2.22.so
/lib/libnss_dns.so.2
/lib/ld-linux-x86-64.so.2
/lib/libnsl.so.1
/sbin/ldconfig


Stack protection
More information about canary stack protection and how to enable it:https://lwn.net/Articles/584225/ 
Files with no canary:
/lib/libutil.so.1
/lib/libm.so.6
/lib/libanl-2.22.so
/lib/libutil-2.22.so
/lib/libcrypt.so.1
/lib/ld-2.22.so
/lib/libBrokenLocale-2.22.so
/lib/libpthread-2.22.so
/lib/libdl.so.2
/lib/librt.so.1
/lib/libnss_files-2.22.so
/lib/libnss_compat.so.2
/lib/libmvec.so.1
/lib/libBrokenLocale.so.1
/lib/libmvec-2.22.so
/lib/libanl.so.1
/lib/libpthread.so.0
/lib/librt-2.22.so
/lib/libnss_files.so.2
/lib/libnss_compat-2.22.so
/lib/libm-2.22.so
/lib/libcrypt-2.22.so
/lib/libnss_dns-2.22.so
/lib/libresolv.so.2
/lib/libdl-2.22.so
/lib/libnsl-2.22.so
/lib/libresolv-2.22.so
/lib/libnss_dns.so.2
/lib/ld-linux-x86-64.so.2
/lib/libnsl.so.1
/sbin/ldconfig


Position Independent Executable
More information about PIE protection and how to enable it:https://securityblog.redhat.com/2012/11/28/position-independent-executables-pie/
Files with no PIE:
/sbin/ldconfig


Non-executable stack
Files with executable stack enabled:


Files with no ability to fetch executable stack status:


Grop initialization:
If using setuid/setgid calls in code, one must call initgroups or setgroups
Files that don't initialize groups while using setuid/setgid:


Memory Protection Extensions
More information about MPX protection and how to enable it:https://software.intel.com/sites/default/files/managed/9d/f6/Intel_MPX_EnablingGuide.pdf
Files that don't have MPX protection enabled:
/lib/libutil.so.1
/lib/libm.so.6
/lib/libanl-2.22.so
/lib/libc-2.22.so
/lib/libutil-2.22.so
/lib/libcrypt.so.1
/lib/libBrokenLocale-2.22.so
/lib/libpthread-2.22.so
/lib/libc.so.6
/lib/libdl.so.2
/lib/librt.so.1
/lib/libnss_files-2.22.so
/lib/libnss_compat.so.2
/lib/libmvec.so.1
/lib/libBrokenLocale.so.1
/lib/libmvec-2.22.so
/lib/libanl.so.1
/lib/libpthread.so.0
/lib/librt-2.22.so
/lib/libnss_files.so.2
/lib/libnss_compat-2.22.so
/lib/libm-2.22.so
/lib/libcrypt-2.22.so
/lib/libnss_dns-2.22.so
/lib/libresolv.so.2
/lib/libdl-2.22.so
/lib/libnsl-2.22.so
/lib/libresolv-2.22.so
/lib/libnss_dns.so.2
/lib/libnsl.so.1
/bin/busybox.nosuid
/bin/busybox
/bin/busybox.suid