On Mon, 6 Feb 2012 20:00:02 +0100
Jan-Frode Myklebust <janfrode(a)tanso.net> wrote:
On Mon, Feb 06, 2012 at 11:59:53AM -0500, Bill Nottingham wrote:
> Stephen John Smoogen (smooge(a)gmail.com) said:
> > > > Discussion from irc today pointed out the..... difficulty
> > > > with our security with prelink running on our systems.
>
> Is this a general issue that should be pushed up the stack?
>
http://magazine.redhat.com/2007/10/16/uli-drepper-part-5-preventing-explo...
".. prelinking should really, not ever, be used for
frontline machines" -- Uli Drepper.
Well it is now undone.
This morning I went through and un-prelinked all of our systems,
marked prelink to be removed in our ks.cfg %packages,
disabled prelinking on the systems,
and, once kevin pushes the new rkhunter out - I will purge prelink
from our systems.
So - hopefully we are just that little bit more better off.
-sv