[Forgot Password]
Login  Register Subscribe

25354

 
 

132805

 
 

142030

 
 

909

 
 

114596

 
 

156

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-90711-3

Platform: rhel7,centos7Date: (C)2017-06-29   (M)2020-02-19



Disable Prelinking The prelinking feature changes binaries in an attempt to decrease their startup time. In order to disable it, change or add the following line inside the file '/etc/sysconfig/prelink': 'PRELINKING=no' Next, run the following command to return binaries to a normal, non-prelinked state: '$ sudo /usr/sbin/prelink -ua'


Parameter:


Technical Mechanism: The prelinking feature can interfere with the operation of AIDE, because it changes binaries. Fix: # # Disable prelinking altogether # if grep -q ^PRELINKING /etc/sysconfig/prelink then sed -i 's/PRELINKING.*/PRELINKING=no/g' /etc/sysconfig/prelink else echo -e "\n# Set PRELINKING=no per security requirements" >> /etc/sysconfig/prelink echo "PRELINKING=no" >> /etc/sysconfig/prelink fi # # Undo previous prelink changes to binaries # /usr/sbin/prelink -u A

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:30402
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:31125


OVAL    2
oval:org.secpod.oval:def:30402
oval:org.secpod.oval:def:31125
XCCDF    2
xccdf_org.secpod_benchmark_general_CENTOS_7
xccdf_org.secpod_benchmark_general_RHEL_7

© SecPod Technologies