Kernel patch

durangod

• January 31, 2018 04:40

Hi, So basically it comes down to a few choices regarding the kernel patch. 1. Forced to buy another product. 2. Leave as is and take the risk of race condition 3. Go with cloudlinux which will also cost more money. 4. Use a custom Kernel that we have to maintain ourselves Sorry but this sounds to me that cpanel just wants to sell us another product. If our system is at risk why dont you offer a free option that does not mean extra work for admins such as free software or a free fix.

• 

  cPanelMichael

  • January 31, 2018 15:44

  Hello, Are you aware of the KernelCare free patch set? It's offered for free and provides kernel level protection against symlink attacks: The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare Thank you.

  0
• 

  durangod

  • January 31, 2018 17:48

  No sir i was not aware because that link is not posted anywhere that i looked... However i get this when i try it root [/etc/sysconfig/kcare]# kcarectl --set-patch-type free --update Unknown Kernel (CentOS 2.6.32-696.20.1.el6.x86_64) root [/etc/sysconfig/kcare]# _

  0
• 

  cPanelMichael

  • January 31, 2018 18:10

  No sir i was not aware because that link is not posted anywhere that i looked

  
  We've added a reference to it in Security Advisor in cPanel version 70.

  However i get this when i try it root [/etc/sysconfig/kcare]# kcarectl --set-patch-type free --update Unknown Kernel (CentOS 2.6.32-696.20.1.el6.x86_64) root [/etc/sysconfig/kcare]# _

  
  It looks like a patch is not yet available for that kernel (it can take sometimes take 3-4 days for CloudLinux to patch new kernels). There's a CloudLinux thread on this topic at: Kernelcare - Unknown Kernel Thank you.

  0

Please sign in to leave a comment.