Forums



Page 1 of 2 12 LastLast
Results 1 to 15 of 26

Thread: Insecure kernel

  1. 07-15-2003, 12:21 PM #1
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default Insecure kernel

    I received the belos error when logging into my WHM. What do I need to do to upgrade my kernal? I already tried up2date --nox -f kernel then rebooted my server & the update did not work. Please help. Thank you in advance.

    You are running an insecure kernel (2.4.18-10smp). You should upgrade to a newer version as soon as possible to avoid your system being compromised.

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  2. 07-15-2003, 02:55 PM #2
    ciphervendor
    ciphervendor is offline
    Member
    Join Date
    Aug 2002
    Posts
    1,052

    Default

    Which boot loader are you using?

    cPanel.net Support Ticket Number:
    Reply With Quote Reply With Quote
  3. 07-15-2003, 04:06 PM #3
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default

    Originally posted by ciphervendor
    Which boot loader are you using?

    cPanel.net Support Ticket Number:
    No clue how do I find out?

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  4. 07-15-2003, 04:07 PM #4
    ciphervendor
    ciphervendor is offline
    Member
    Join Date
    Aug 2002
    Posts
    1,052

    Default

    Originally posted by ThunderHostingDotCom
    No clue how do I find out?

    cPanel.net Support Ticket Number:
    grep bootloader /root/anaconda-ks.cfg

    cPanel.net Support Ticket Number:
    Reply With Quote Reply With Quote
  5. 07-15-2003, 04:26 PM #5
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default

    Originally posted by ciphervendor
    grep bootloader /root/anaconda-ks.cfg

    I did pico /root/anaconda-ks.cfg & the below is what I got...

    # Kickstart file automatically generated by anaconda.

    install
    lang en_US
    langsupport --default en_US.iso885915 en_US.iso885915
    keyboard us
    mouse generic3ps/2 --device psaux
    skipx
    network --device eth0 --bootproto static --ip 209.51.135.122 --netmask 255.255.255.248 --gateway 209.51.135.121 --nameserver 209.$
    rootpw --iscrypted $1$ÎÁóîÏM/î$B6BOSBhW2tD.tG07SFccY/
    firewall --medium --port ssh:tcp --trust eth0
    authconfig --enableshadow --enablemd5
    timezone America/New_York
    bootloader
    # The following is the partition information you requested
    # Note that any partitions you deleted are not expressed
    # here so unless you clear all partitions first, this is
    # not guaranteed to work
    #clearpart --all
    #part /boot --fstype ext3 --size=50 --ondisk=hda
    #part /var --fstype ext3 --size=10000 --ondisk=hda
    #part /usr --fstype ext3 --size=10000 --ondisk=hda
    #part / --fstype ext3 --size=3000 --ondisk=hda
    #part swap --size=1024 --ondisk=hda
    #part /backup --fstype ext3 --size=1 --grow --ondisk=hdb
    #part /home --fstype ext3 --size=1 --grow --ondisk=hda

    %packages
    @ Printing Support
    @ Sound and Multimedia Support
    @ Network Support
    @ Dialup Support
    @ Messaging and Web Tools
    @ Server
    esound-devel
    cdparanoia-devel
    VFlib2-devel
    pspell-devel
    cups-devel
    libogg-devel
    libvorbis-devel
    alchemist-devel
    rsync
    audiofile-devel
    arpwatch
    aspell-devel
    shapecfg
    sox-devel
    libao-devel
    isdn4k-utils-devel
    cdrecord-devel

    %post
    /usr/sbin/useradd dv2
    chfn -f 'dv2' dv2
    /usr/sbin/usermod -p '$1$tmüIcÉæÞ$0RVJTMGIeTa85N/59GTmL1' dv2

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  6. 07-15-2003, 04:35 PM #6
    ciphervendor
    ciphervendor is offline
    Member
    Join Date
    Aug 2002
    Posts
    1,052

    Default

    Looks like you're using GRUB. Check your GRUB config to make sure that the new kernel has entries within.

    cPanel.net Support Ticket Number:
    Reply With Quote Reply With Quote
  7. 07-15-2003, 05:02 PM #7
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default

    Originally posted by ciphervendor
    Looks like you're using GRUB. Check your GRUB config to make sure that the new kernel has entries within.

    cPanel.net Support Ticket Number:

    & how do I check my GRUB config?

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  8. 07-15-2003, 06:05 PM #8
    ciphervendor
    ciphervendor is offline
    Member
    Join Date
    Aug 2002
    Posts
    1,052

    Default

    Originally posted by ThunderHostingDotCom
    & how do I check my GRUB config?

    cPanel.net Support Ticket Number:
    Do ls -la /boot and paste the output here. This will allow me to see what kernel you downloaded today and create & post the appropriate grub conf entries for you.

    Also post the output from cat /etc/grub.conf

    cPanel.net Support Ticket Number:
    Reply With Quote Reply With Quote
  9. 07-15-2003, 09:39 PM #9
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default

    Originally posted by ciphervendor
    Do ls -la /boot and paste the output here. This will allow me to see what kernel you downloaded today and create & post the appropriate grub conf entries for you.
    Also post the output from cat /etc/grub.conf
    cPanel.net Support Ticket Number:

    ls -la /boot

    total 9420
    drwxr-xr-x 4 root root 1024 Nov 20 2002 ./
    drwxr-xr-x 22 root root 4096 Jul 15 01:06 ../
    -rw-r--r-- 1 root root 5824 Jun 24 2001 boot.b
    -rw-r--r-- 1 root root 612 Jun 24 2001 chain.b
    -rw-r--r-- 1 root root 40598 Aug 7 2002 config-2.4.18-10smp
    -rw-r--r-- 1 root root 39947 Apr 18 2002 config-2.4.18-3
    drwxr-xr-x 2 root root 1024 Nov 16 2002 grub/
    -rw-r--r-- 1 root root 125429 Nov 16 2002 initrd-2.4.18-10smp.img
    -rw-r--r-- 1 root root 128788 Nov 15 2002 initrd-2.4.18-3.img
    -rw-r--r-- 1 root root 477 Nov 16 2002 kernel.h
    drwx------ 2 root root 12288 Nov 15 2002 lost+found/
    -rw-r--r-- 1 root root 23108 Jun 24 2001 message
    lrwxrwxrwx 1 root root 20 Nov 15 2002 module-info -> module-in
    fo-2.4.18-3
    -rw-r--r-- 1 root root 14431 Aug 7 2002 module-info-2.4.18-10smp
    -rw-r--r-- 1 root root 14431 Apr 18 2002 module-info-2.4.18-3
    -rw-r--r-- 1 root root 640 Jun 24 2001 os2_d.b
    -rwxr--r-- 1 root root 0 Nov 20 2002 quota.user*
    lrwxrwxrwx 1 root root 23 Nov 16 2002 System.map -> System.map
    -2.4.18-10smp
    -rw-r--r-- 1 root root 501549 Aug 7 2002 System.map-2.4.18-10smp
    -rw-r--r-- 1 root root 465966 Apr 18 2002 System.map-2.4.18-3
    -rwxr-xr-x 1 root root 3221932 Aug 7 2002 vmlinux-2.4.18-10smp*
    -rwxr-xr-x 1 root root 2835238 Apr 18 2002 vmlinux-2.4.18-3*
    lrwxrwxrwx 1 root root 16 Nov 15 2002 vmlinuz -> vmlinuz-2.4.1
    8-3
    -rw-r--r-- 1 root root 1117511 Aug 7 2002 vmlinuz-2.4.18-10smp
    -rw-r--r-- 1 root root 1030147 Apr 18 2002 vmlinuz-2.4.18-3



    cat /etc/grub.conf


    # grub.conf generated by anaconda
    #
    # Note that you do not have to rerun grub after making changes to this file
    # NOTICE: You have a /boot partition. This means that
    # all kernel and initrd paths are relative to /boot/, eg.
    # root (hd0,0)
    # kernel /vmlinuz-version ro root=/dev/hda5
    # initrd /initrd-version.img
    #boot=/dev/hda
    default=0
    timeout=10
    splashimage=(hd0,0)/grub/splash.xpm.gz
    title Red Hat Linux (2.4.18-10smp)
    root (hd0,0)
    kernel /vmlinuz-2.4.18-10smp ro root=/dev/hda5
    initrd /initrd-2.4.18-10smp.img
    title Red Hat Linux (2.4.18-3)
    root (hd0,0)
    kernel /vmlinuz-2.4.18-3 ro root=/dev/hda5
    initrd /initrd-2.4.18-3.img

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  10. 07-15-2003, 10:29 PM #10
    ciphervendor
    ciphervendor is offline
    Member
    Join Date
    Aug 2002
    Posts
    1,052

    Default

    You don't have an updated kernel in /boot nor are there any new entries in your grub config file. If you execute "up2date -l | grep kernel" does it list the kernel as being out of date?

    If it does:

    up2date --configure
    24 hit enter
    C (upper case "c") hit enter
    hit enter again

    Now execute up2date -u

    You may also want to check to make sure you have enough available disk space in /boot.
    Reply With Quote Reply With Quote
  11. 07-15-2003, 10:35 PM #11
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default

    Originally posted by ciphervendor
    You don't have an updated kernel in /boot nor are there any new entries in your grub config file. If you execute "up2date -l | grep kernel" does it list the kernel as being out of date?

    If it does:

    up2date --configure
    24 hit enter
    C (upper case "c") hit enter
    hit enter again

    Now execute up2date -u

    You may also want to check to make sure you have enough available disk space in /boot.

    SO just do this in SSH to find out if my kernel is out of date?

    up2date -l | grep kernel

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  12. 07-15-2003, 10:36 PM #12
    ciphervendor
    ciphervendor is offline
    Member
    Join Date
    Aug 2002
    Posts
    1,052

    Default

    Originally posted by ThunderHostingDotCom
    SO just do this in SSH to find out if my kernel is out of date?

    up2date -l | grep kernel

    cPanel.net Support Ticket Number:
    Correct.

    cPanel.net Support Ticket Number:
    Reply With Quote Reply With Quote
  13. 07-15-2003, 11:38 PM #13
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default

    Originally posted by ciphervendor
    Correct.

    cPanel.net Support Ticket Number:

    Oh & I have 50M on /boot with 32% left. Is that ok?

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  14. 07-15-2003, 11:40 PM #14
    ThunderHostingDotCom
    ThunderHostingDotCom is offline
    Member
    Join Date
    Nov 2002
    Location
    All over!
    Posts
    452

    Default

    Ok I did
    up2date -l | grep kernel
    via SSH & it did not list a think it just went back to a blank command prompt.

    cPanel.net Support Ticket Number:
    Knowledge is Power!
    Reply With Quote Reply With Quote
  15. 07-15-2003, 11:44 PM #15
    alwaysweb
    alwaysweb is offline
    Member
    Join Date
    Mar 2002
    Location
    Dallas, TX
    Posts
    104
    cPanel/WHM Access Level

    Root Administrator

    Default

    Ahem, just hire someone to update your kernel for you if you don't know how.

    (and secure your box too, I'm willing to bet you haven't done so.)

    cPanel.net Support Ticket Number:
    Cheers,
    Ronnie T. Moore, Owner -- AIM, Yahoo: RonnieAWH
    http://AlwaysWebHosting.com -- Affordable, feature-packed cPanel hosting with Fantastico
    Reply With Quote Reply With Quote
Page 1 of 2 12 LastLast
« How block spammers on my server | problem with 7.2 and oscommerce addon script »

Similar Threads

  1. Insecure Kernel
    By X-Istencedotcom in forum cPanel & WHM Discussions
    Replies: 7
    Last Post: 01-08-2004, 11:04 PM
  2. insecure kernel (2.4.20-20.9)
    By thomas81 in forum cPanel & WHM Discussions
    Replies: 23
    Last Post: 12-20-2003, 04:31 AM
  3. You are running an insecure kernel
    By futureye in forum cPanel & WHM Discussions
    Replies: 9
    Last Post: 09-01-2003, 02:01 PM
  4. Insecure kernel?
    By secretman in forum cPanel & WHM Discussions
    Replies: 2
    Last Post: 08-16-2003, 04:08 PM
  5. Insecure Kernel
    By elleryjh in forum cPanel & WHM Discussions
    Replies: 6
    Last Post: 07-12-2003, 11:04 PM