LPIC-1 Linux Installation and Package Management Practice Question
You are responsible for maintaining a legacy Red Hat Enterprise Linux 6 server that hosts an internal web application. The application was compiled years ago and relies on an old version of OpenSSL (0.9.8). Due to a security audit, you must update OpenSSL to 1.0.1 but the application fails to run with the new version. The vendor no longer supports the application. You must keep the system secure while keeping the application operational. You have access to the application source code but cannot modify it. What is the best solution?
⚠ Common exam trap
It's easy for candidates to think 'LD_PRELOAD' is a universal solution for library version conflicts, but it applies globally to the process and does not isolate the old library from the system, whereas RPATH provides per-binary library path control without modifying system-wide library search order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Install OpenSSL 1.0.1 in /usr/local/lib and keep 0.9.8 in /usr/lib. Rebuild the application with an RPATH pointing to /usr/local/lib/openssl0.9.8.
It allows you to install OpenSSL 1.0.1 in a separate path (/usr/local/lib) while keeping the legacy 0.9.8 in /usr/lib. By rebuilding the application with an RPATH pointing to /usr/local/lib/openssl0.9.8, you force the dynamic linker to load the old OpenSSL library only for that application, satisfying the security audit for the rest of the system while keeping the unmodifiable application operational.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Modify the application source code to be compatible with OpenSSL 1.0.1 and recompile.
Why it's wrong here
Cannot modify source code.
- ✗
Update OpenSSL system-wide and use 'LD_PRELOAD' to load the old library for the application.
Why it's wrong here
LD_PRELOAD loads a library for all programs, potentially causing conflicts.
- ✗
Keep OpenSSL 0.9.8 and accept the risk.
Why it's wrong here
Security risk not acceptable.
- ✓
Install OpenSSL 1.0.1 in /usr/local/lib and keep 0.9.8 in /usr/lib. Rebuild the application with an RPATH pointing to /usr/local/lib/openssl0.9.8.
Why this is correct
Keeps both versions, application uses old one via RPATH.
Go deeper
Related to this question
About these practice questions
This LPIC-1 question is part of Courseiva's 527-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-1 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-1 exam.