How to enable symlink protection with KernelCare

Introduction

This article provides the steps needed to enable KernelCare's symlink protection.

Procedure

1. Access the server's command line as the 'root' user via SSH or "Terminal" in WHM.
2. Run the following command to enable the extra patchset.

   kcarectl --set-patch-type extra --update

3. Open the /etc/sysconfig/kcare/sysctl.conf file in your preferred text editor.
4. Add the following line.

   fs.enforce_symlinksifowner=1

5. Save the changes and exit the text editor.
6. Run the following command.

   sysctl -p /etc/sysconfig/kcare/sysctl.conf