different 'sum' on three different FC3 installs

Jakub Jelinek jakub at redhat.com
Sun Jan 9 20:05:59 UTC 2005


On Sun, Jan 09, 2005 at 10:04:52AM -0600, Jeff Epler wrote:
> ... which leads one to wonder whether some modification can be made to
> the binary which (a) actually has security-related consequences but (b)
> will be reversed by 'prelink --undo' into the original binary.

prelink -y doesn't just undo the changes and return (resp. with --md5
checksum) the bits after undoing, but it also reprelinks those bits again
and compares that to whatever is on the filesystem.  It will moan if that
differs.

	Jakub




More information about the fedora-list mailing list