Skip to content
Log In

Package "prelink" Must not be Installed

An XCCDF Rule

Description

The prelink package can be removed with the following command: 
 $ sudo yum erase prelink

Rationale

The use of the prelink package can interfere with the operation of AIDE since it binaries. Prelinking can also increase damage caused by vulnerability in a common library like libc.

ID
xccdf_org.ssgproject.content_rule_package_prelink_removed
Severity
Medium
References
Updated

Remediation Templates

An Ansible Snippet

- name: Check If Prelinked Is Installed
  ansible.builtin.stat:
    path: /usr/sbin/prelink
    get_checksum: false
  register: prelink
  tags:

A Puppet Snippet

include remove_prelink
class remove_prelink {
  package { 'prelink':
    ensure => 'purged',
  }
}

A Shell Script

if [[ -f /usr/sbin/prelink ]];
then
prelink -ua
fi

if rpm -q --quiet "prelink" ; then

Anaconda Pre-Install Instructions

package --remove=prelink