On Thu, Jul 9, 2009 at 5:59 PM, Till Maas <span dir="ltr"><<a href="mailto:opensource@till.name" target="_blank">opensource@till.name</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="gmail_quote"><div class="im"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>On Thu July 9 2009, yersinia wrote:<br>
<br>
> But something one have to pay a security prize on not disabling it : it<br>
> render impossible to have a<br>
> centralizzated security integrity management (e.g. <a href="http://rfc.sf.net" target="_blank">rfc.sf.net</a> for example)<br>
> or one have to skip from check the prelink binary. Very bad i think.<br>
<br>
</div>You pay a security prize if you disable prelink, because it also performs<br>
address space randomization:<br>
<a href="http://lwn.net/Articles/190139/" target="_blank">http://lwn.net/Articles/190139/</a><br>
</blockquote></div><div><br>Perhaps something have changed from 2006 - try yourself. on your RHEL/fedora if ASLR depends only on prelink. <br>But the last word on this is on jackub/Ulrich/Molnar. If i was wrong it is nice to know.<br>
<br>regards<br><br><br></div></div><br>
</blockquote></div><br>