prelink: is it worth it?
yersinia.spiros at gmail.com
Thu Jul 9 16:11:59 UTC 2009
On Thu, Jul 9, 2009 at 5:59 PM, Till Maas <opensource at till.name> wrote:
> On Thu July 9 2009, yersinia wrote:
>> > But something one have to pay a security prize on not disabling it : it
>> > render impossible to have a
>> > centralizzated security integrity management (e.g. rfc.sf.net for
>> > or one have to skip from check the prelink binary. Very bad i think.
>> You pay a security prize if you disable prelink, because it also performs
>> address space randomization:
> Perhaps something have changed from 2006 - try yourself. on your
> RHEL/fedora if ASLR depends only on prelink.
> But the last word on this is on jackub/Ulrich/Molnar. If i was wrong it is
> nice to know.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the devel