Skip to main content

Installed Kernelcare, now don't have symlink protection?

quanin
So through the CPanel store just a bit ago I purchased the Kernelcare license and had it supposedly installed successfully. However, once it installed, I apparently no longer have either the free patchset or the extra patchset, and Security Advisor is letting me know of such a thing as it should. I had thought when KC was licensed, CPanel would automatically bring down the extra patchset? Does that happen during the nightly SA scan, or will it also happen when I scan it manually? Or, am I entirely off base and does that happen the next time the auto-update runs? Thanks for any info.

Comments

7 comments

Date Votes
  • GOT
    Running this command should enable the extra patch set. kcarectl --set-patch-type extra --update
    0
  • quanin
    that much I gathered. I was more asking because if there's a process that's supposed to run to take care of that, there's not much point in me doing it manually. I can and will, but wanted to make sure I didn't come across something possibly broken first--I know better than to DIY a thing CPanel will just come along and clobber without first asking it nicely to get out of my way. :)
    0
  • GOT
    AFAIK cpanel does not have any process that would enable this for you. There is no WHM integration or anything for kernelcare that i am aware of. Its just something that we always do when we install KC initially on a cpanel server is to turn that on.
    0
  • cPanelMichael
    Hello @quanin, As I understand, the free patchset should be automatically converted to the extra patchset after purchasing the KernelCare license. Here's an entry from the version 70 change log suggesting this should work: Fixed case CPANEL-17638: Set default patch set when KernelCare is purchased via Security Advisor. If that didn't happen, can you open a
    0
  • quanin
    could be the documentation needs updating, then. Per the docs, if you were running the free patchset before (I was), then the extra patchset will be installed if you purchase a license. Again, no skin off my nose either way, it was more a point of curiosity than anything else. If I'd known last night that was inaccurate I'd have installed it 30 seconds after paying for the license. Thanks for the help. Source: Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation
    0
  • quanin
    @cPanelMichael: I don't think it's really such a major issue that a support ticket's required. I can fix it with a single command--I was mostly just making sure I needed to.
    0
  • cPanelMichael
    @cPanelMichael: I don't think it's really such a major issue that a support ticket's required. I can fix it with a single command--I was mostly just making sure I needed to.

    Hi @quanin, Mainly we want to make sure there's no regression of intended behavior. If you can open the ticket, it will help us to see the server environment and verify there's a use-case we missed as part of CPANEL-17638. Thank you.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post