Skip to main content

Warning in Security Advisor: "Could not open /proc/1/smaps"

Comments

11 comments

  • 24x7server
    Hello, Which CentOS version you have installed on your server ? Also please try to run upcp on your server with the following command
    /scripts/upcp --force
    0
  • rodrocolodro
    Hello, I have this: CENTOS 6.7 x86_64 / WHM 11.50.1 (build 3) Let me know and thanks!
    0
  • cPanelMichael
    Hello :) It's likely this stems from the use of an unsupported kernel. Please post the output from the following command:
    uname -r
    Thank you.
    0
  • rodrocolodro
    Hello! Here is result: 3.14.32-xxxx-grs-ipv6-64 Thank you for your help!
    0
  • cPanelMichael
    While many customers successfully utilize grsec kernels and cPanel/WHM works as expected, they are not officially supported. Grsecurity disables /proc//smaps for security reasons, so it's expected that you see those warning messages. Thank you.
    0
  • rodrocolodro
    I understand, this means that I should not worry about this? Thanks a lot!
    0
  • cPanelMichael
    Right, the option you are attempting to use is not compatible with the custom kernel that's installed on your server. Thus, you would need to use a standard kernel if you wanted to use that option on your system. Thank you.
    0
  • rodrocolodro
    Thank you very much Michael Have a nice day!
    0
  • Julien Gobi
    Hi! Since the last update I receive these emails too. My server uses this kernel: 3.14.32-xxxx-grs-ipv6-64 Is it possible to mute these alerts ? Thank you. j.
    0
  • cPanelMichael
    Hi! Since the last update I receive these emails too. My server uses this kernel: 3.14.32-xxxx-grs-ipv6-64 Is it possible to mute these alerts ?

    Internal case CPANEL-6077 is open to address this by ensuring the warning message is not displayed on systems with Grsec kernels installed. The current workaround is to ignore the warning message, or create an email filter that discards this particular notification based on message body content. Thank you.
    0
  • bouvrie
    The current workaround is to ignore the warning message, or create an email filter that discards this particular notification based on message body content.

    BE CAREFUL creating such an email filter. Just because the email contains "An error occurred while attempting to check whether running executables are up-to-date", doesn't mean that is the only one single notification in that email. By discarding such mails, you could miss other notifications. For this reason, it would also be helpful to be able to count the number of notifications in the notifications e-mail, but sadly there's no body text along the lines of "Showing X notifications:" to properly enable such email filters.
    0

Please sign in to leave a comment.