Installed KernelCare- still get warning

[Adam Connor]

Just like this ticket-

SOLVED - Security Advisor "No symlink protection detected" Message When KernelCare + Extras Is Installed

I have installed Kernelcare and I am still getting the warning

'Kernel does not support the prevention of symlink ownership attacks.You do not appear to have any symlink protection enabled through a properly patched kernel on this server, which provides additional protections beyond those solutions employed in userland. Please review the documentation to learn how to apply this protection.'

^This is the issue
- the rest of this is just rambling about how the documentation is incorrect

The link to the documentation is to this page about the symlink race condition
Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation
and is not directly about 'how to apply this protection' as described in the error message, except to say 'Both of these options install the KernelCare Client, which automatically manages Kernel Care software updates'
Except it doesn't appear to do that, because I still get an error message.

In addition, the article about the symlink race condition states that whether or not you purchase KernelCare, it is available in the Security Advisor- this does not appear to be the case.

The documentation for KernelCare does not appear to contain any info on how to fix the error message.
The ticket linked above was from January this year- has it really been 4 months without a fix?

 

[cPanelMichael]

Hello Adam,

I removed the previous posts, as the BlueHost patch is only recommended if you can't implement any of the other options. As far as the warning message, can you verify which version of cPanel & WHM is installed on your system? You can check with a command such as this:

cat /usr/local/cpanel/version

If your system is using cPanel & WHM version 68, then the warning message is to be expected, as support for detecting and installing KernelCare during Security Advisor's kernel check isn't included until cPanel & WHM version 70:

Implemented case CPANEL-17016: Add support for detecting and installing KernelCare's free patch set.

cPanel & WHM version 70 is tentatively scheduled for publication to the RELEASE build tier next week.

Thank you.

 

[Adam Connor]

thanks for the info Michael,
Yes I am on WHM v68.
I have paid for KernelCare, so does this still apply?
Also- is there any way to verify that it is applied correctly and working?

 

[cPanelMichael]

Hi Adam,

Yes, Security Advisor will detect a full installation (as opposed to the free tier) of KernelCare as of cPanel & WHM version 70. You'll just need to make sure the "extra" patchset is installed:

Extra Patchset

You can check KernelCare's current status with the following command:

/usr/bin/kcarectl --info

Thank you.

 

[Adam Connor]

Thank you