From: brabuhr@...
Date: 2011-07-28T23:48:28+09:00
Subject: Re: Ruby corrupts after a period of time

On Wed, Jul 27, 2011 at 11:06 PM, Douglas Seifert <doug@dseifert.net> wrote:
> A) tell me that [prelink] is necessary to have installed

From the latest NSA Linux guide[1]:

* Prelink can be safely disabled by setting the following setting
'PRELINKING=no' in /etc/sysconfig/prelink:
* and run /usr/sbin/prelink -ua to restore binaries to a non-prelinked state

And recommends doing so:
* [prelink] is undesirable because it provides a stable address for an
attacker to use during an exploitation attempt.

[1] http://www.nsa.gov/ia/guidance/security_configuration_guides/operating_systems.shtml#linux2