Annobin is a new component of the GCC Toolset 9 shipped with RHEL 8.1.

SME: Nick Clifton (nickc@redhat.com).

Guide written by Nick:

https://developers.redhat.com/blog/2018/02/20/annobin-storing-information-binaries/

Man page:

https://www.mankier.com/1/annobin

A general description from the (unpublished) DTS 9.0 Release Notes:

Annobin is a build security checking tool. The tool consists of annobin, a plug-in for GCC, and annocheck, a program for examining compiled binary files. The annobin plug-in records security-related command-line options that are used when a program is built. This information is stored in the binary files as a special, non-loadable, section. The annocheck tool examines the information, as well as other features of the compiled program, and generates a report about its security hardening status