[CentOS] I appear to be attacking others

Scot L. Harris webid at cfl.rr.com
Mon Feb 6 22:58:22 UTC 2006


On Mon, 2006-02-06 at 17:50, Troy Engel wrote:
> Steve Bergman wrote:
> > 
> > from a few trusted machines, I get the output below from 'rpm -Va | grep
> > -e libexec -e '/bin/'.
> > 
> > Also, how do rpm -V and prelink interact?  Are the binaries in an rpm
> > already prelinked?
> 
> I don't believe so, but I've never researched what they do upstream. It
> seems logistically difficult to build and prelink a binary while making
> a RPM from a gut instinct point of view.
> 
> I think your list is, as you guess, a set of victims that don't fit due
> to a prelink. I usually only use that command on server systems and
> don't see a lot of those entries.
> 
> -te

It was my understanding that rpm was prelink aware.  I know things like
tripwire are not prelink aware and will report changes if you initialize
its database prior to prelink running.






More information about the CentOS mailing list