On Mon, 2006-02-06 at 17:50, Troy Engel wrote: > Steve Bergman wrote: > > > > from a few trusted machines, I get the output below from 'rpm -Va | grep > > -e libexec -e '/bin/'. > > > > Also, how do rpm -V and prelink interact? Are the binaries in an rpm > > already prelinked? > > I don't believe so, but I've never researched what they do upstream. It > seems logistically difficult to build and prelink a binary while making > a RPM from a gut instinct point of view. > > I think your list is, as you guess, a set of victims that don't fit due > to a prelink. I usually only use that command on server systems and > don't see a lot of those entries. > > -te It was my understanding that rpm was prelink aware. I know things like tripwire are not prelink aware and will report changes if you initialize its database prior to prelink running.