Linux (centos) binary prelink issues
Today on a Cpanel server after nightly upgrade , our firewall (csf) detected some changed files. Then I run bellow verify command :
#rpm -qfV /bin/bash
prelink: /bin/bash: at least one of file’s dependencies has changed since prelinking
S.?….. /bin/bash
I had never seen this before, but apparently rpm is doing something different now that prelink is present. Note that the ‘5′ was replaced by ‘?’ which I take to mean that RPM doesn’t know if the checksum matches or not.
No, there was no hacking attempt . you just have to run /etc/cron.daily/prelink, and when that’s done, no more binary files issues.