1.5.4 Ensure prelink is disabled (Scored) [SecScan]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== 1.5.4 Ensure prelink is disabled (Scored) ======
=====Profile Applicability=====  
<code>
Level 1 - Server 
Level 1 - Workstation
</code>
=====Description=====
''prelink'' is a program that modifies ELF shared libraries and ELF dynamically linked binaries in such a way that the time needed for the dynamic linker to perform relocations at startup significantly decreases.
=====Rationale=====
The prelinking feature can interfere with the operation of AIDE, because it changes binaries. Prelinking can also increase the vulnerability of the system if a malicious user is able to compromise a common library such as libc.
=====Audit===== 
Run the following command and verify prelink is not installed:
<Code:bash>
# rpm -q prelink 
package prelink is not installed
</Code>
=====Remediation===== 
Run the following commands to restore binaries to normal and uninstall ''prelink'':
<Code:bash>
# prelink -ua 
# yum remove prelink
</Code>