Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED hardened kernel installed? not reported by server after reboot.

Discussion in 'Security' started by tss, Jan 6, 2017.

Tags:
  1. tss

    tss Member

    Joined:
    Aug 22, 2011
    Messages:
    10
    Likes Received:
    1
    Trophy Points:
    53
    After following the procedure outlined here:
    How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation
    I don't think that the server is utilizing kernel-2.6.32-642.11.199.cpanel6.x86_64.
    Here's why.

    # uname -r
    2.6.32-642.11.1.el6.x86_64

    I tried this after using yum for the original update and rebooting twice.

    # rpm -ivh kernel-2.6.32-642.11.199.cpanel6.x86_64.rpm
    Preparing... ########################################### [100%]
    package kernel-2.6.32-642.11.199.cpanel6.x86_64 is already installed

    Hmmm. More info:
    # cat /etc/redhat-release
    CentOS release 6.8 (Final)
    # rpm -qa|grep kernel
    dracut-kernel-004-409.el6_8.2.noarch
    kernel-2.6.32-642.11.1.el6.x86_64
    kernel-headers-2.6.32-642.11.199.cpanel6.x86_64
    kernel-2.6.32-642.11.199.cpanel6.x86_64
    kernel-2.6.32-642.3.1.el6.x86_64
    kernel-2.6.32-642.6.2.el6.x86_64
    libreport-plugin-kerneloops-2.0.9-32.el6.centos.x86_64
    kernel-2.6.32-642.6.1.el6.x86_64
    kernel-firmware-2.6.32-642.11.199.cpanel6.x86_64
    abrt-addon-kerneloops-2.0.8-40.el6.centos.x86_64
    # cat /var/cpanel/envtype
    hyper-v

    Do I (somehow) need to replace kernel-2.6.32-642.11.1.el6.x86_64 with 2.6.32-642.11.199.cpanel6.x86_64.rpm? Is there a way to do that without using yum or rpm?
     
  2. IndicHosts.net

    IndicHosts.net Active Member

    Joined:
    Mar 11, 2006
    Messages:
    40
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Online
    cPanel Access Level:
    Root Administrator
    Did you miss this?

    "
    • The cPanel-provided kernel update will not work for OpenVZ®, Virtuozzo®, LXC, or other container-based systems.
    "​
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. tss

    tss Member

    Joined:
    Aug 22, 2011
    Messages:
    10
    Likes Received:
    1
    Trophy Points:
    53
    No, I sent a large part of the description, including this text, to the data center techs who told me that I could go ahead and install it and it wouldn't be a problem. I guess they were right - it's not a problem, it just doesn't get used.
     
    #3 tss, Jan 7, 2017
    Last edited: Jan 7, 2017
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    There's no mechanism that will prevent your system from downloading the cPKernel YUM repo file, but as mentioned, it isn't supported for OpenVZ®, Virtuozzo®, LXC, or other container-based systems.

    Let us know if we can help answer any additional questions.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice