Skip to content
ATO Pathways
  Log In

Package "prelink" Must not be Installed

An XCCDF Rule

Description

The prelink package can be removed with the following command: 

 $ apt-get remove prelink

Rationale

The use of the prelink package can interfere with the operation of AIDE since it binaries. Prelinking can also increase damage caused by vulnerability in a common library like libc.

ID
xccdf_org.ssgproject.content_rule_package_prelink_removed
Severity
Medium
References
Updated



Remediation - Ansible

- name: Check If Prelinked Is Installed
  ansible.builtin.stat:
    path: /usr/sbin/prelink
    get_checksum: false
  register: prelink
  tags:

Remediation - Puppet

include remove_prelink

class remove_prelink {
  package { 'prelink':
    ensure => 'purged',
  }

Remediation - Shell Script


if [[ -f /usr/sbin/prelink ]];
then
prelink -ua
fi