On Thu July 9 2009, yersinia wrote: > But something one have to pay a security prize on not disabling it : it > render impossible to have a > centralizzated security integrity management (e.g. rfc.sf.net for example) > or one have to skip from check the prelink binary. Very bad i think. You pay a security prize if you disable prelink, because it also performs address space randomization: http://lwn.net/Articles/190139/ Btw. you can also patch the remote integrity checker to use prelink to either get a checksum of the perlinked binary or undo the prelinking before checking it. Regards Till
Description: This is a digitally signed message part.