aide --init 显示大量错误

aide --init 显示大量错误

我有一台全新的 centos 6.2 服务器。我做的第一件事是 yum -y install aide,然后我执行了 aide --init。下面是我得到的一大堆错误。这意味着我必须重新安装它吗?还是保留它?

/usr/sbin/prelink: /usr/sbin/lusermod: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/console-kit-daemon: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/NetworkManager: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/rtacct: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/tcpdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dnsmasq: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getsebool: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ownership: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/modem-manager: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pluginviewer: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sasl2-shared-mechlist: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ifdhandler: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/mklost+found: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/vpddecode: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/skdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getpcaps: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lpasswd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/tmpwatch: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ck-log-system-stop: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/alternatives: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/avahi-daemon: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dump-acct: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/luseradd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/nstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/efibootmgr: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sasldblistusers2: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/e2freefrag: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sa: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lgroupadd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ss: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/dmidecode: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/sktest: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/fdformat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/saslpasswd2: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/selinuxenabled: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pppstats: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_supplicant: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/capsh: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/togglesebool: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/kppp: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lgroupmod: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/cracklib-unpacker: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/getcap: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/avcstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lnstat: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/filefrag: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lid: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/bonobo-activation-sysconf: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lockdev: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/mcelog: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/cifs.upcall: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pcscd: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/brctl: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/logrotate: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_passphrase: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/pppdump: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/lsof: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/ck-log-system-start: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/setcap: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/rtkitctl: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/latencytop: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/wpa_cli: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process
/usr/sbin/prelink: /usr/sbin/saned: at least one of file's dependencies has changed since prelinking
Error on exit of prelink child process

答案1

我在安装一个没有使用正常打包系统依赖解析来正确共享库的二进制文件后遇到了同样的问题。下面是我解决问题的步骤。

  1. 首先查看导致aide错误消息的二进制文件之一的库依赖项。 就我而言trashapplet

    for LIB in $(ldd /usr/libexec/trashapplet | awk '{print $3}' | grep '^/' | sort -u); do echo $(dirname $LIB); done | sort -u
    
  2. 接下来,确保二进制文件使用的每个目录都已配置为使用 中的预链接进行处理/etc/prelink.conf。将任何缺少的目录添加到/etc/prelink.conf。就我而言,这是:

    -l /usr/local/oracle/product/*/lib
    
  3. 必要时请重复。

在我的情况下,二进制文件劫持了发行版的/lib64/libexpat.so.1库。由于新库位于正常预链接集之外,但与现有库重叠,因此无论我编辑的频率如何,都会导致加载时不匹配prelink

答案2

我遇到了同样的问题,并通过 Red Hat 找到了答案(您需要一个帐户)。它的内容如下:

消息“自预链接以来,至少一个文件的依赖项已发生更改”意味着应用程序所依赖的库之一(可能是 glibc)自上次预链接 cron 作业运行以来已经升级(默认情况下每 14 天运行一次(PRELINK_FULL_TIME_INTERVAL=14)。如果文件的依赖项没有发生变化,Prelink 只能验证文件。一旦重新链接,错误就会消失。

预链接仅在工作站类型的设置中运行应用程序时才真正有用,因为在这种情况下,反复启动和关闭同一个应用程序是一种常见操作。预链接实际上不会做任何事情,因此服务器加载时会将进程加载到内存中并在服务器正常运行期间运行。

可以通过编辑 /etc/sysconfig/prelink 并设置来禁用预链接

PRELINKING=no

要撤消所有预链接信息,请以 root 身份运行以下命令:

预链接-ua

由于问题出在我的服务器上,而不是工作站上,因此修复效果非常好(在 /etc/sysconfig/prelink 中禁用预链接并运行“prelink -ua”)。如果要继续预链接,请确保您有一个预链接 cron 作业...它通常位于 /etc/cron.daily/ 中,应该默认安装在您的系统中。还要确保 crond 服务正在运行,并且 /etc/crontab(或 /etc/anacrontab)已配置为执行 /etc/cron.daily/。cron 作业会让您的预链接保持最新,否则您会收到这些错误消息。

相关内容