Bill Crawford wrote:
Thomas M Steenholdt wrote:
> I wasn't even aware that prelinking actually changed the files. Isn't this
kind of dangerous from a system-integrity point-of-view. How can we ever validate binaries
if they are modified on purpose?
With "prelink --verify" ?
I can't see how that would actually verify that the binary has not been
modified by a rootkit or whatever? rpm -V should be able to detect this,
on the other hand, but how it works in conjunction with prelinking I
don't know...
/Thomas