Skip to main content

KernelCare installed, cannot set patch type for symlink, unknown kernel

verdon
I've inherited a server and am trying to get a sense of what is going on in a few instances... KernelCare is purchased and installed, but there is still the symlink alert in Security Advisor. I've read several threads here and have tried to reset the patch set and update via terminal, but this doesn't seem to be working. Also, when checking info or status, I am just getting a message about an unknown kernel. # kcarectl --set-patch-type extra --update Unknown Kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64)
# /usr/bin/kcarectl --info Unknown kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64), no patches available
FYI... When I first got access to the sever, I had to do a manual reboot and yum update and reboot again, according to Security Advisor and an out-of-date kernel. Then I discovered that KernelCare was actually licensed and installed.

Comments

6 comments

Date Votes
  • dalem
    the error means that cloudlinux has not released a patch set for that kernel yet you can back the kernel back to the previous or you can wait CL will eventually patch it
    0
  • verdon
    @dalem thanks! - ahhh... so that means at one point Security Advisor was telling me to do a kernel update, and I should have ignored that?
    0
  • dalem
    not necessarily even if CL had patched this kernel you are all ready running the latest kernel so it makes no difference if they patched or not. Your just going to get the warning until they do
    0
  • cPanelLauren
    The full KernelCare product may support more kernels than the Symlink protection patch does, it should also be noted that the patch may be updated later than than the full KernelCare product is in some cases. What's the output of the following: kcarectl --info
    0
  • verdon
    @cPanelLauren , Thank you # kcarectl --info kpatch-state: patch is applied kpatch-for: Linux version 3.10.0-1062.1.2.el7.x86_64 (mockbuild@kbuilder.bsys.centos.org) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC) ) #1 SMP Mon Sep 30 14:19:46 UTC 2019 kpatch-build-time: Wed Oct 2 13:56:03 2019 kpatch-description: 1-free:1570552864;
    To be clear. I am no longer getting the symlink protection alert. This looks correct now, yet I am sure I was not getting this full result the other day.
    0
  • cPanelLauren
    Hi @verdon That does indeed look correct, and if I look at the releases for KernelCare: KernelCare kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:20:46) RHEL 7 (x86_64) kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:21:55) CentOS 7 (x86_64)
    They just updated your kernel on the 8th
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post