Installed KernelCare- still get warning

Adam Connor

• April 28, 2018 18:08

Just like this ticket- I have installed Kernelcare and I am still getting the warning 'Kernel does not support the prevention of symlink ownership attacks.You do not appear to have any symlink protection enabled through a properly patched kernel on this server, which provides additional protections beyond those solutions employed in userland. Please review and is not directly about 'how to apply this protection' as described in the error message, except to say 'Both of these options install the KernelCare Client, which automatically manages Kernel Care software updates' Except it doesn't appear to do that, because I still get an error message. In addition, the article about the symlink race condition states that whether or not you purchase KernelCare, it is available in the Security Advisor- this does not appear to be the case. The documentation for KernelCare does not appear to contain any info on how to fix the error message. The ticket linked above was from January this year- has it really been 4 months without a fix?

• 

  cPanelMichael

  • April 30, 2018 16:24

  Hello Adam, I removed the previous posts, as the BlueHost patch is only recommended if you can't implement any of the other options. As far as the warning message, can you verify which version of cPanel & WHM is installed on your system? You can check with a command such as this: cat /usr/local/cpanel/version
  If your system is using cPanel & WHM version 68, then the warning message is to be expected, as support for detecting and installing KernelCare during Security Advisor's kernel check isn't included until cPanel & WHM version 70: Implemented case CPANEL-17016: Add support for detecting and installing KernelCare's free patch set. cPanel & WHM version 70 is tentatively scheduled for publication to the RELEASE build tier next week. Thank you.

  0
• 

  Adam Connor

  • May 01, 2018 02:14

  thanks for the info Michael, Yes I am on WHM v68. I have paid for KernelCare, so does this still apply? Also- is there any way to verify that it is applied correctly and working?

  0
• 

  cPanelMichael

  • May 01, 2018 15:32

  Hi Adam, Yes, Security Advisor will detect a full installation (as opposed to the free tier) of KernelCare as of cPanel & WHM version 70. You'll just need to make sure the "extra" patchset is installed: Extra Patchset You can check KernelCare's current status with the following command: /usr/bin/kcarectl --info
  Thank you.

  0
• 

  Adam Connor

  • May 02, 2018 00:28

  Thank you

  0

Please sign in to leave a comment.