metadata/service/system/cis/cis-1-5-4.yml

# CIS 1.5.4 Ensure prelink is disabled
#
# Description
# ===========
# prelink is a program that modifies ELF shared libraries and ELF dynamically
# linked binaries in such a way that the time needed for the dynamic linker to
# perform relocations at startup significantly decreases.
#
# Rationale
# =========
# The prelinking feature can interfere with the operation of AIDE, because it
# changes binaries. Prelinking can also increase the vulnerability of the system
# if a malicious user is able to compromise a common library such as libc.
#
# Audit
# =====
# Run the following command and verify prelink is not installed:
#
#   # dpkg -s prelink
#
# Remediation
# ===========
# Run the following command to restore binaries to normal:
#
#   # prelink -ua
#
# Run the following command to uninstall prelink :
#
#   # apt-get remove prelink
#
parameters:
  linux:
    system:
      package:
        prelink:
          version: removed