Помощник --init показать много ошибок

Question

Помощник --init показать много ошибок

У меня новый сервер Centos 6.2. Первое, что я сделал, это yum -y, установите aide, а затем я сделал aide --init. Ниже приведено много ошибок, которые я получил. Что это значит, я должен переустановить его? Или оставить это?

/usr/sbin/prelink: /usr/sbin/lusermod: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/console-kit-daemon: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/NetworkManager: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/rtacct: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/tcpdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dnsmasq: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getsebool: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ownership: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/modem-manager: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pluginviewer: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sasl2-shared-mechlist: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ifdhandler: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/mklost+found: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/vpddecode: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/skdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getpcaps: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lpasswd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/tmpwatch: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ck-log-system-stop: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/alternatives: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/avahi-daemon: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dump-acct: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/luseradd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/nstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/efibootmgr: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sasldblistusers2: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/e2freefrag: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sa: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lgroupadd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ss: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dmidecode: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sktest: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/fdformat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/saslpasswd2: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/selinuxenabled: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pppstats: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_supplicant: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/capsh: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/togglesebool: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/kppp: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lgroupmod: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/cracklib-unpacker: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getcap: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/avcstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lnstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/filefrag: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lid: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/bonobo-activation-sysconf: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lockdev: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/mcelog: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/cifs.upcall: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pcscd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/brctl: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/logrotate: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_passphrase: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pppdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lsof: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ck-log-system-start: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/setcap: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/rtkitctl: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/latencytop: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_cli: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/saned: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process

3

linux dependencies intrusion-detection aide

Источник

newbie14 27 май '12 в 05:30

2 ответа

Другие вопросы по тегам linux dependencies intrusion-detection aide

mormegil 03 окт '12 в 21:45 2012-10-03 21:45 · Answer 1 · 2012-10-03 21:45

У меня была точно такая же проблема после установки двоичного файла, который не использовал обычное разрешение зависимостей системы упаковки для правильного совместного использования библиотек. Вот шаги, которые я использовал для решения проблемы.

Сначала посмотрите на зависимости библиотеки для одного из двоичных файлов, которые вызвали aide сообщение об ошибке. В моем случае trashapplet:
```
for LIB in $(ldd /usr/libexec/trashapplet | awk '{print $3}' | grep '^/' | sort -u); do echo $(dirname $LIB); done | sort -u
```
Затем убедитесь, что каждый каталог, используемый двоичным файлом, настроен для обработки с предварительной ссылкой в /etc/prelink.conf, Добавьте любой отсутствующий каталог в /etc/prelink.conf, В моем случае это было:
```
-l /usr/local/oracle/product/*/lib
```
Повторите по мере необходимости.

В моем случае двоичный файл угнал дистрибутив /lib64/libexpat.so.1 библиотека. Поскольку новая библиотека была расположена за пределами обычно предварительно связанного набора, но перекрывалась с существующей библиотекой, это вызывало несовпадение во время загрузки, независимо от того, как часто я prelinkредактор

n2studio 12 сен '14 в 14:44 2014-09-12 14:44 · Answer 2 · 2014-09-12 14:44

У меня была такая же проблема, и я нашел ответ через Red Hat (вам нужен аккаунт). Вот что это говорит:

Сообщение "хотя бы одна из зависимостей файла изменилась с момента предварительной ссылки" означает, что одна из библиотек, от которых зависит приложение (возможно, glibc), была обновлена с момента последнего запуска задания cron предварительной ссылки (которое по умолчанию выполняется каждые 14 дней (PRELINK_FULL_TIME_INTERVAL=14) Предварительная ссылка может проверять файлы только в том случае, если их зависимости не изменились. Как только они будут повторно связаны, ошибки исчезнут.
Предварительная ссылка действительно помогает только при запуске приложений в настройке типа рабочей станции, где запуск и закрытие одного и того же приложения снова и снова является обычной операцией. Предварительная ссылка ничего не делает, поэтому сервер загружается там, где процесс загружается в память и работает в течение времени безотказной работы сервера.
Предварительную ссылку можно отключить, отредактировав / etc / sysconfig / prelink и установив
Предварительное связывание = нет
Чтобы отменить всю информацию о предварительной ссылке, выполните от имени root следующую команду:
предварительная ссылка -ua

Так как проблема была на моем сервере, а не на рабочей станции, исправление работало отлично (отключение предварительной ссылки в / etc / sysconfig / prelink и запуск "prelink -ua"). Если вы хотите продолжить предварительную ссылку, убедитесь, что у вас есть предварительная ссылка cron... обычно она находится в /etc/cron.daily/ и должна быть установлена по умолчанию в вашей системе. Также убедитесь, что служба crond работает и /etc/crontab (или /etc/anacrontab) настроен на выполнение /etc/cron.daily/. Задание cron поддерживает актуальность вашей предварительной ссылки, иначе вы получите эти сообщения об ошибках.