Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== 1.5.4 Ensure prelink is disabled (Scored) ====== =====Profile Applicability===== <code> Level 1 - Server Level 1 - Workstation </code> =====Description===== ''prelink'' is a program that modifies ELF shared libraries and ELF dynamically linked binaries in such a way that the time needed for the dynamic linker to perform relocations at startup significantly decreases. =====Rationale===== The prelinking feature can interfere with the operation of AIDE, because it changes binaries. Prelinking can also increase the vulnerability of the system if a malicious user is able to compromise a common library such as libc. =====Audit===== Run the following command and verify ''prelink'' is not installed: <Code:bash> # dpkg -s prelink </Code> =====Remediation===== Run the following command to restore binaries to normal: <Code:bash> # prelink -ua </Code> Run the following command to uninstall ''prelink'': <Code:bash> # apt-get remove prelink </Code> ubuntu1604/1/5/4.txt Last modified: 2017/05/02 16:04by Piotr Kłoczewski