Re: prelink cron script

[Jack Howarth <howarth@bromo.msbb.uc.edu>]

Adam,
    Below are Jakub's comments on this tripwire vs prelink 
issue...
                                    Jack
-----------------------------------------------------------
On Fri, Oct 04, 2002 at 05:05:21PM -0400, Jack Howarth wrote:
> Jakub,
>    Have you thought through how something like tripwire will
> be able to verify the chksums without becoming very slow?

They have the choice. If they are paraniod enough to run rpm -V
or tripwire 10 times a day, prelinking is not a good idea for them.
Or tripwire or whatever they use could save md5sum of the prelinked
program if it verifies using prelink --verify and compare that as
alternative to the original md5sum (and only prelink --verify
if md5sum of the file matches neither of the sums).

As for requiring write access, prelink --verify doesn't require
write access to the program (it doesn't modify it in any way).
prelink -a needs access to all programs/libraries though, of course.

        Jakub
------------------------------------------------------------