[SOLVED] Prelink error during aide --init

newbie14 · 05-27-2012, 12:11 PM

Dear All,
I have a brand new centos 6.2 server. The first thing I did after yum -y update is yum -y install aide and then next I did aide --init. Below is a whole lot of errors I got.What does it mean I have run this command /usr/sbin/prelink --all and it does not appear anymore now. Anything dangerous here for me in future? Should I just reinstall it or safe to carry on?

Code:

/usr/sbin/prelink: /usr/sbin/lusermod: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/console-kit-daemon: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/NetworkManager: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/rtacct: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/tcpdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dnsmasq: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getsebool: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ownership: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/modem-manager: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pluginviewer: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sasl2-shared-mechlist: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ifdhandler: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/mklost+found: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/vpddecode: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/skdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getpcaps: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lpasswd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/tmpwatch: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ck-log-system-stop: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/alternatives: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/avahi-daemon: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dump-acct: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/luseradd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/nstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/efibootmgr: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sasldblistusers2: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/e2freefrag: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sa: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lgroupadd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ss: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dmidecode: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sktest: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/fdformat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/saslpasswd2: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/selinuxenabled: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pppstats: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_supplicant: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/capsh: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/togglesebool: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/kppp: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lgroupmod: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/cracklib-unpacker: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getcap: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/avcstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lnstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/filefrag: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lid: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/bonobo-activation-sysconf: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lockdev: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/mcelog: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/cifs.upcall: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pcscd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/brctl: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/logrotate: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_passphrase: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pppdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lsof: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ck-log-system-start: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/setcap: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/rtkitctl: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/latencytop: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_cli: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/saned: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process

unSpawn · 05-27-2012, 05:50 PM

Quote:

Originally Posted by newbie14

What does it mean

It means literally what it says: since the last time prelink was run one or more dependencies changed. It could mean binaries and or libraries were updated without running prelink afterwards.

Quote:

Originally Posted by newbie14

Should I just reinstall it or safe to carry on?

If nothing else changed* just carry on.

*...and that shows why securing your server does not only mean hardening it (like removing unnecessary software, disabling unnecessary services, applying network access restrictions, good passwords and aging, SSH pubkey auth, etc, etc) but also enabling a good audit trail (SELinux, audit rules, Rsyslog, iptables -j LOG rules, IDS, etc, etc), regularly auditing it (GNU/Tiger, Aide or Samhain, Logwatch, aureport / ausearch, etc, etc), reading those reports and acting on anything out of the ordinary.

newbie14 · 05-28-2012, 06:43 AM

Dear unspawn,
What does this prelink based on its functionality? I read some said this a bug in centos 6.2 is it true? So beside this AIDE audit trail what else you recommend for me to further harden the server?

unSpawn · 05-28-2012, 07:04 AM

Quote:

Originally Posted by newbie14

What does this prelink based on its functionality?

See 'man prelink'.

Quote:

Originally Posted by newbie14

I read some said this a bug in centos 6.2 is it true?

Where did you read that? (Do post the URI.)

Quote:

Originally Posted by newbie14

So beside this AIDE audit trail what else you recommend for me to further harden the server?

This question should be asked in your other thread here: http://www.linuxquestions.org/questi...il2ban-946995/ or create a new thread in the Linux Security forum with a suggested title like "How to harden my server?".

newbie14 · 05-28-2012, 07:12 AM

Dear unspawn,
Thank you for your help I will do the necessary later. I went through the man prelink it talk about this ELF what is main functionality? Is ELF an interpreter? I tried to google on centos ELF.

unSpawn · 05-28-2012, 08:05 AM

'man elf' says ELF stands for Executable and Linking Format. It is the native binary file format for Linux. The ELF format consists of executables, relocatables, cores and shared libraries. Also see 'man ld.so'.

newbie14 · 05-28-2012, 08:10 AM

Dear unspawn,
Thank you will look into and gain more knowledge on all this.