Details

The prelinking feature can interfere with the operation of AIDE, because it changes binaries. Prelinking can also increase the vulnerability of the system if a malicious user is

able to compromise a common library such as libc.

Solution

Run the following commands to restore binaries to normal and uninstall prelink – # prelink -ua # yum remove prelink

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1863

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|3.5

Source

• Tenable.com/audits