Skip to content
Log In

Package "prelink" Must not be Installed

An XCCDF Rule

Description

The prelink package can be removed with the following command: 
 $ apt-get remove prelink

Rationale

The use of the prelink package can interfere with the operation of AIDE since it binaries. Prelinking can also increase damage caused by vulnerability in a common library like libc.

ID
xccdf_org.ssgproject.content_rule_package_prelink_removed
Severity
Medium
References
Updated

Remediation Templates

A Shell Script

if [[ -f /usr/sbin/prelink ]];
then
prelink -ua
fi

DEBIAN_FRONTEND=noninteractive apt-get remove -y "prelink"

A Puppet Snippet

include remove_prelink
class remove_prelink {
  package { 'prelink':
    ensure => 'purged',
  }
}

An Ansible Snippet

- name: Check If Prelinked Is Installed
  ansible.builtin.stat:
    path: /usr/sbin/prelink
    get_checksum: false
  register: prelink
  tags: