Introduction
This article provides the steps needed to enable KernelCare's symlink protection.
Procedure
- Access the server's command line as the 'root' user via SSH or "Terminal" in WHM.
- Run the following command to enable the
extra
patchset.kcarectl --set-patch-type extra --update
- Open the
/etc/sysconfig/kcare/sysctl.conf
file in your preferred text editor. - Add the following line.
fs.enforce_symlinksifowner=1
- Save the changes and exit the text editor.
- Run the following command.
sysctl -p /etc/sysconfig/kcare/sysctl.conf