Unable to Install KernelCare’s Free Symlink Protection
After upgrading to AlmaLinux 8 from CentOS 7 I am unable to install KernelCare’s Free Symlink Protection.
When I click on the link to install it in Security Advisor:
https://my.site.com:2087/cpsess7495726136/scripts13/add_kernelcare_free_symlink_protection
It simply re-loads Security Advisor and does nothing--then shows the same warnings:
Kernel does not support the prevention of symlink ownership attacks.
You do not appear to have any symlink protection enabled through a properly patched kernel on this server, which provides additional protections beyond those solutions employed in userland. Please review the documentation to learn how to apply this protection.
Add KernelCare’s Free Symlink Protection.
This free patch set protects your system from symlink attacks. Add KernelCare’s Free Patch Set. Add KernelCare’s Free Symlink Protection. NOTE: This is not the full KernelCare product and service.
You can protect against this in multiple ways. Please review the following documentation to find a solution that is suited to your needs.
-
Hey there! I wasn't able to reproduce this issue on an Alma8 test machine. Did you see anything in the cPanel logs when the page didn't refresh properly?
0 -
I didn't search the logs, but as I mentioned in an older thread on this topic, the link to install symlink's free protection goes into a loop in Security Advisor, and there is no way to actually load it.
I'm not sure how to create a ticket with you directly anymore--my host company is who I'm instructed to go to about this, but they simply tell me that I manage my own server and to come here.
0 -
If your license isn't purchased directly through us your host would be the contact and then they could escalate the issue through us. If they aren't willing to do that, it's time to look into an alternate host or purchase a direct license.
Is the kernel so new that it isn't supported by KernelCare yet? They publish a full list of what they support at https://patches.kernelcare.com/ so if yours is too new, we may be looking at an issue with tha particular interface that I could reproduce on my end.
0 -
Here is my kernel, I am it has been updated at least one time since I upgrade to AlmaLinux 8:
Linux version 4.18.0-553.el8_10.x86_64
I have contacted my host, but honestly, don't blame them for cPanel's shift on how they handle licenses. I've had the same license for many years, and never had any issues starting a ticket with you guys until this past year or so. You made the changes, not them.
0 -
I understand that you're frustrated about the support changes, but that isn't related to your issue. If your host won't help you, please email cs@cpanel.net so we can look into that, as they should.
is it possible this issue is now resolved? I checked the Kernelcare site and they just added support for that Kernel last night, and this thread was started five days ago:
https://patches.kernelcare.com/?search=4.18.0-553
0 -
No, the issue is still present when I visit Security Advisor with the latest kernel.
I will send them an email, as my host hasn't yet responded to my request.
0 -
Ok, my ticket has been created:
Id #95277053 Status Open
0 -
Still seeing this loop as well on a new AlmaLinux v8.10.0 STANDARD install.with kernel:
4.18.0-553.5.1.el8_10.x86_64
0 -
PPNSteve - I have case CPANEL-43860 created to improve that user experience, so I'll let them know you're still seeing this.
0 -
PPNSteve - I have case CPANEL-43860 created to improve that user experience, so I'll let them know you're still seeing this.
Thanks, it's a bit annoying not really knowing if it's installed, or not supported yet, etc..
1
Please sign in to leave a comment.
Comments
10 comments