64-Bit Distributions; Distributions Using Prelink - F-SECURE LINUX SECURITY Manual

86 | F-Secure Linux Security | Before You Install

64-bit Distributions

Distributions Using Prelink

Some 64-bit distributions do not install 32-bit compatibility libraries by default. Make sure that
these libraries are installed.
The name of the compatibility library package may vary, see the documentation of the distribution
you use for the package name for 32-bit compatibility libraries.
On 64-bit Ubuntu and Debian, install ia32-libs.
Prelinking can reduce the startup time of binaries, but it conflicts with the Integrity Checker in
the product.
You should disable automatic prelink runs from cron. On Asianux, RedHat, or Turbolinux, edit
/etc/sysconfig/prelink and change the line: PRELINKING=yes to PRELINKING=no
and run /etc/cron.daily/prelink before you install the product.
Some distributions, like Asianux, run prelink periodically from cron to reduce the startup
time of binaries which use dynamic libraries. Prelinking modifies binaries and dynamic libraries
on the disk, which conflicts with the purpose of the Integrity Checker, which detects modifications
to system files.
If you have already installed F-Secure Linux Security, follow these instructions:
1. Run /opt/f-secure/fsav/bin/fsims on from the command line to turn on the software
installation mode.
In the software installation mode, the product allows modifications to system files.
2. Edit /etc/sysconfig/prelink and change the line: PRELINKING=yes to
PRELINKING=no.
3. Run /etc/cron.daily/prelink.
4. Running /opt/f-secure/fsav/bin/fsims off from the command line to turn off the
software installation mode.
When the software installation mode is turned off, the state of system files is stored in the Integrity
Checker baseline.