Does cPanel hardened kernel supports centOS 7 64bit

[KV Karia]

Sir,

Link: How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation

is cPanel harden kernel supports CentOS 7 64bit ? or support CentOS 6 only as per above link?



Regards,

 

[cPanelMichael]

Hello,

The cPanel-hardened kernel is only available for CentOS 6 64-bit systems. I encourage you to vote for the following feature request if you'd like to see support for CentOS 7 kernels with protection against symlink race condition attacks:

cPanel Hardened Kernel for Centos 7.x - to prevent symlink attacks

Thank you.

 

[Skin]

So actually the only avasilable solution ( except for cloudlinux) is GRSec kernel patch ?

 

[cPanelMichael]

So actually the only avasilable solution ( except for cloudlinux) is GRSec kernel patch ?

That's correct. The upstream CentOS 7 kernel does not include the symlink protection patch, and there are no patched kernels from cPanel available for CentOS 7 at this time. You can find a list of non-kernel symlink race condition protection options at:

Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation

Thank you.

 

[Skin]

Thanks, I really hope for an official cPanel Hardened Kernel for Centos 7.x .

Is there a good guide for patching ( and mantaining updated ) a kernel with GRSec kernel patch?

 

[cPanelMichael]

Is there a good guide for patching ( and mantaining updated ) a kernel with GRSec kernel patch?

We do not offer a guide as the GrSec kernel is not officially supported for use with cPanel (though some customers report no issues when it's enabled). I recommend posting to the GrSecurity support forums for help setting it up at:

grsecurity forums • View forum - grsecurity support

Thank you.