Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SOLVED hardened kernel installed? not reported by server after reboot.

Discussion in 'Security' started by tss, Jan 6, 2017.

Tags:
  1. tss

    tss Member

    Joined:
    Aug 22, 2011
    Messages:
    10
    Likes Received:
    1
    Trophy Points:
    53
    After following the procedure outlined here:
    How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation
    I don't think that the server is utilizing kernel-2.6.32-642.11.199.cpanel6.x86_64.
    Here's why.

    # uname -r
    2.6.32-642.11.1.el6.x86_64

    I tried this after using yum for the original update and rebooting twice.

    # rpm -ivh kernel-2.6.32-642.11.199.cpanel6.x86_64.rpm
    Preparing... ########################################### [100%]
    package kernel-2.6.32-642.11.199.cpanel6.x86_64 is already installed

    Hmmm. More info:
    # cat /etc/redhat-release
    CentOS release 6.8 (Final)
    # rpm -qa|grep kernel
    dracut-kernel-004-409.el6_8.2.noarch
    kernel-2.6.32-642.11.1.el6.x86_64
    kernel-headers-2.6.32-642.11.199.cpanel6.x86_64
    kernel-2.6.32-642.11.199.cpanel6.x86_64
    kernel-2.6.32-642.3.1.el6.x86_64
    kernel-2.6.32-642.6.2.el6.x86_64
    libreport-plugin-kerneloops-2.0.9-32.el6.centos.x86_64
    kernel-2.6.32-642.6.1.el6.x86_64
    kernel-firmware-2.6.32-642.11.199.cpanel6.x86_64
    abrt-addon-kerneloops-2.0.8-40.el6.centos.x86_64
    # cat /var/cpanel/envtype
    hyper-v

    Do I (somehow) need to replace kernel-2.6.32-642.11.1.el6.x86_64 with 2.6.32-642.11.199.cpanel6.x86_64.rpm? Is there a way to do that without using yum or rpm?
     
  2. IndicHosts.net

    IndicHosts.net Active Member

    Joined:
    Mar 11, 2006
    Messages:
    31
    Likes Received:
    2
    Trophy Points:
    158
    cPanel Access Level:
    Root Administrator
    Did you miss this?

    "
    • The cPanel-provided kernel update will not work for OpenVZ®, Virtuozzo®, LXC, or other container-based systems.
    "​
     
  3. tss

    tss Member

    Joined:
    Aug 22, 2011
    Messages:
    10
    Likes Received:
    1
    Trophy Points:
    53
    No, I sent a large part of the description, including this text, to the data center techs who told me that I could go ahead and install it and it wouldn't be a problem. I guess they were right - it's not a problem, it just doesn't get used.
     
    #3 tss, Jan 7, 2017
    Last edited: Jan 7, 2017
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,427
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    There's no mechanism that will prevent your system from downloading the cPKernel YUM repo file, but as mentioned, it isn't supported for OpenVZ®, Virtuozzo®, LXC, or other container-based systems.

    Let us know if we can help answer any additional questions.

    Thanks!
     
Loading...

Share This Page