Package "prelink" Must not be Installed
An XCCDF Rule
Description
The prelink package can be removed with the following command:
$ apt-get remove prelink
Rationale
The use of the prelink package can interfere with the operation of AIDE since it binaries.
Prelinking can also increase damage caused by vulnerability in a common library like libc.
- ID
- xccdf_org.ssgproject.content_rule_package_prelink_removed
- Severity
- Medium
- References
- Updated
Remediation - Puppet
include remove_prelink
class remove_prelink {
package { 'prelink':
ensure => 'purged',
}
Remediation - Shell Script
if [[ -f /usr/sbin/prelink ]];
then
prelink -ua
fi
Remediation - Ansible
- name: Check If Prelinked Is Installed
ansible.builtin.stat:
path: /usr/sbin/prelink
get_checksum: false
register: prelink
tags: