Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

38 line
939B

  1. # CIS 1.5.4 Ensure prelink is disabled
  2. #
  3. # Description
  4. # ===========
  5. # prelink is a program that modifies ELF shared libraries and ELF dynamically
  6. # linked binaries in such a way that the time needed for the dynamic linker to
  7. # perform relocations at startup significantly decreases.
  8. #
  9. # Rationale
  10. # =========
  11. # The prelinking feature can interfere with the operation of AIDE, because it
  12. # changes binaries. Prelinking can also increase the vulnerability of the system
  13. # if a malicious user is able to compromise a common library such as libc.
  14. #
  15. # Audit
  16. # =====
  17. # Run the following command and verify prelink is not installed:
  18. #
  19. # # dpkg -s prelink
  20. #
  21. # Remediation
  22. # ===========
  23. # Run the following command to restore binaries to normal:
  24. #
  25. # # prelink -ua
  26. #
  27. # Run the following command to uninstall prelink :
  28. #
  29. # # apt-get remove prelink
  30. #
  31. parameters:
  32. linux:
  33. system:
  34. package:
  35. prelink:
  36. version: removed