Error On Starting Prelink Undo
Contents |
constantly reporting prelinkerrors January 28, 2013 1 Comment We added a couple of new boxes running CentOS 6 here at Hagen Hosting. They generally work really nicely, but I've been having this on going fight with AIDE and prelink. Prelink seems like prelink at least one of file's dependencies has changed since prelinking a good idea because it reduces the chance of an exploit working, but the aide disable prelink honest truth is that it is annoying, potentially troublesome in terms of legal issues and security. More over, from what I read, what is prelink prelink doesn't add much extra security. I find it particularly annoying when prelink runs each week and I'm confronted with the output from AIDE saying a bunch of files have changed. It would take hours linux aide error on exit of prelink child process to compare them all to see if they had changed because of an intrusion so I have to assume that they have changed because of prelink because they are listed in the prelink logs and timestamps match. But, you know, it just doesn't feel secure. More over prelink has become very annoying because for some reason that I have yet to work out, each night it keeps prelinking the same set of
Man Prelink
files. A few are compiled-from-source programs (like Apache), but some are standard libs. To get it to stop I had to run prelink on those files manually and keep re-running it until it stopped saying that some of the files needed prelinking. However after a valient attempt I've realised that prelink is just causing too many headaches and so I took the ultimate step -- to disable it. To disable prelink edit /etc/sysconfig/prelink.conf /etc/sysconfig/prelink and change PRELINKING=yes to PRELINKING=no Sometime in the next few days it will run prelink -ua to undo the pre-linking on all files then I'll be done with it and the only changes to the system will be updates (or bad stuff :-) Edit: 2014-05-22T13:25:56+00:00 I just had this error message coming up on a box after updating a library. prelinking is disabled but I would still get this same error message from AIDE. Running prelink -ua did not stop the error messages because running this command checks the value of PRELINKING and so it doesn't run - at least I think so. The error occurs because AIDE detects that the library has changed and so runs prelink directly on those files: 4574 [pid 12916] execve("/usr/sbin/prelink", ["/usr/sbin/prelink", "--verify", "/usr/local/apache2/modules/libph"...], [/* 44 vars */]) = 0 Since I have
Log In [x] | Forgot Password Login: [x] Format For Printing -XML -Clone This Bug -Last
Rhel Prelink
Comment First Last Prev Next This bug is not centos prelink in your last search results. Bug950645 - aide doesn't handle system update before initialization and after centos 7 prelink running prelink cronjob Summary: aide doesn't handle system update before initialization and after running pre... Status: CLOSED WONTFIX Aliases: None Product: Fedora Classification: Fedora Component: aide https://perladmin.wordpress.com/2013/01/28/aide-constantly-reporting-prelink-errors/ (Show other bugs) Sub Component: --- Version: 18 Hardware: x86_64 Linux Priority unspecified Severity medium TargetMilestone: --- TargetRelease: --- Assigned To: Daniel Kopeček QA Contact: Fedora Extras Quality Assurance Docs Contact: URL: Whiteboard: Keywords: Depends On: Blocks: Show dependency tree /graph Reported: 2013-04-10 10:49 EDT by Hubert Kario Modified: 2014-02-05 15:34 https://bugzilla.redhat.com/show_bug.cgi?id=950645 EST (History) CC List: 2 users (show) dkopecek trey.henefield See Also: 751464 950625 Fixed In Version: Doc Type: Bug Fix Doc Text: Story Points: --- Clone Of: Environment: Last Closed: 2014-02-05 15:34:06 EST Type: Bug Regression: --- Mount Type: --- Documentation: --- CRM: Verified Versions: Category: --- oVirt Team: --- RHEL 7.3 requirements from Atomic Host: Cloudforms Team: --- Attachments (Terms of Use) Add an attachment (proposed patch, testcase, etc.) Groups: None (edit) Description Hubert Kario 2013-04-10 10:49:25 EDT Description of problem: When the prelink database is not up to date, running aide initialization prints lots of error messages from prelink: /usr/sbin/prelink: /usr/bin/plasma-windowed: at least one of file's dependencies has changed since prelinking Error on exit of prelink child process Version-Release number of selected component (if applicable): aide-0.15.1-3.fc18.x86_64 prelink-0.4.6-8.fc18.x86_64 How reproducible: Always Steps to Reproduce: 1. Install system 2. run prelink cron job (/etc/cron.daily/prelink) 3. update some libraries 4. run aide --init Actual results: l
HCL Search Reviews Search ISOs Go to Page... LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie prelink errors User Name Remember Me? Password Linux - Newbie This Linux forum is for http://www.linuxquestions.org/questions/linux-newbie-8/prelink-errors-4175499303/ members that are new to Linux. Just starting out and have a question? If https://linux.die.net/man/8/prelink it is not in the man pages or the how-to's this is the place! Notices Welcome to LinuxQuestions.org, a friendly and active Linux Community. You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access error on many other special features. Registration is quick, simple and absolutely free. Join our community today! Note that registered members see fewer ads, and ContentLink is completely disabled once you log in. Are you new to LinuxQuestions.org? Visit the following links: Site Howto | Site FAQ | Sitemap | Register Now If you have any problems with the registration process or your account login, please contact us. If you need to reset error on starting your password, click here. Having a problem logging in? Please visit this page to clear all LQ-related cookies. Introduction to Linux - A Hands on Guide This guide was created as an overview of the Linux Operating System, geared toward new users as an exploration tour and getting started guide, with exercises at the end of each chapter. For more advanced trainees it can be a desktop reference, and a collection of the base knowledge needed to proceed with system and network administration. This book contains many real life examples derived from the author's experience as a Linux system and network administrator, trainer and consultant. They hope these examples will help you to get a better understanding of the Linux system and that you feel encouraged to try out things on your own. Click Here to receive this Complete Guide absolutely free. Search this Thread 03-24-2014, 01:47 PM #1 jyunker Member Registered: Aug 2009 Posts: 167 Rep: prelink errors When I ran the AIDE version that I installed using an rpm filethe output after I typed aide --init was: Code: usr/sbin/prelink: /usr/sbin/libvirtd: at least one of file's dependencies has changed since prelinking Error on exit of prelink child process /usr/sbin/prelink: /usr/libexec/gpg-protect-tool: at least one of file's dependenci
binaries in such a way that the time needed for the dynamic linker to perform relocations at startup significantly decreases. Due to fewer relocations, the run-time memory consumption decreases as well (especially the number of unshareable pages). The prelinking information is only used at startup time if none of the dependent libraries have changed since prelinking; otherwise programs are relocated normally. prelink first collects ELF binaries to be prelinked and all the ELF shared libraries they depend on. Then it assigns a unique virtual address space slot to each library and relinks the shared library to that base address. When the dynamic linker attempts to load such a library, unless that virtual address space slot is already occupied, it maps the library into the given slot. After this is done, prelink, with the help of dynamic linker, resolves all relocations in the binary or library against its dependent libraries and stores the relocations into the ELF object. It also stores a list of all dependent libraries together with their checksums into the binary or library. For binaries, it also computes a list of conflicts (relocations that resolve differently in the binary's symbol search scope than in the smaller search scope in which the dependent library was resolved) and stores it into a special ELF section. At runtime, the dynamic linker first checks whether all dependent libraries were successfully mapped into their designated address space slots, and whether they have not changed since the prelinking was done. If all checks are successful, the dynamic linker just replays the list of conflicts (which is usually significantly shorter than total number of relocations) instead of relocating each library. Options -v --verbose Verbose mode. Print the virtual address slots assigned to libraries and what binary or library is currently being prelinked. -n --dry-run Don't actually prelink anything; just collect the binaries/libraries, assign them addresses, and with -v print what would be prelinked. -a --all Prelink all binaries and dependent libraries found in directory hierarchies specified in /etc/prelink.conf. Normally, only binaries specified on the command line and their dependent libraries are prelinked. -m --conserve-memory When assigning addresses to libraries, allow overlap of address