====== 1.5.4 Ensure prelink is disabled (Scored) ======
=====Profile Applicability=====
Level 1 - Server
Level 1 - Workstation
=====Description=====
''prelink'' is a program that modifies ELF shared libraries and ELF dynamically linked binaries in such a way that the time needed for the dynamic linker to perform relocations at startup significantly decreases.
=====Rationale=====
The prelinking feature can interfere with the operation of AIDE, because it changes binaries. Prelinking can also increase the vulnerability of the system if a malicious user is able to compromise a common library such as libc.
=====Audit=====
Run the following command and verify prelink is not installed:
# rpm -q prelink
package prelink is not installed
=====Remediation=====
Run the following commands to restore binaries to normal and uninstall ''prelink'':
# prelink -ua
# yum remove prelink