1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
documentation_complete: true
title: 'Disable Prelinking'
description: |-
The prelinking feature changes binaries in an attempt to decrease their startup
time. In order to disable it, change or add the following line inside the file
<tt>/etc/sysconfig/prelink</tt>:
<pre>PRELINKING=no</pre>
Next, run the following command to return binaries to a normal, non-prelinked state:
<pre>$ sudo /usr/sbin/prelink -ua</pre>
rationale: |-
Because the prelinking feature changes binaries, it can interfere with the
operation of certain software and/or modes such as AIDE, FIPS, etc.
severity: medium
identifiers:
cce@rhel8: CCE-80787-5
cce@sle12: CCE-92211-2
cce@sle15: CCE-91341-8
cce@slmicro5: CCE-94078-3
references:
cis-csc: 11,13,14,2,3,9
cis@sle12: 1.6.4
cis@sle15: 1.6.4
cjis: 5.10.1.3
cobit5: APO01.06,BAI02.01,BAI03.05,BAI06.01,BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS04.07,DSS05.03,DSS06.02,DSS06.06
cui: 3.13.11
isa-62443-2009: 4.3.4.3.2,4.3.4.3.3,4.3.4.4.4
isa-62443-2013: 'SR 3.1,SR 3.3,SR 3.4,SR 3.8,SR 4.1,SR 7.6'
iso27001-2013: A.11.2.4,A.12.1.2,A.12.2.1,A.12.5.1,A.12.6.2,A.14.1.2,A.14.1.3,A.14.2.2,A.14.2.3,A.14.2.4,A.8.2.3
nerc-cip: CIP-003-8 R4.2,CIP-007-3 R5.1
nist: SC-13,CM-6(a)
nist-csf: PR.DS-1,PR.DS-6,PR.DS-8,PR.IP-1
pcidss: Req-11.5
|
