Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Installed KernelCare- still get warning

Discussion in 'Security' started by Adam Connor, Apr 28, 2018.

  1. Adam Connor

    Adam Connor Registered

    Joined:
    Apr 28, 2018
    Messages:
    3
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Sydney, Australia
    cPanel Access Level:
    Reseller Owner
    Just like this ticket-

    SOLVED - Security Advisor "No symlink protection detected" Message When KernelCare + Extras Is Installed

    I have installed Kernelcare and I am still getting the warning

    'Kernel does not support the prevention of symlink ownership attacks.You do not appear to have any symlink protection enabled through a properly patched kernel on this server, which provides additional protections beyond those solutions employed in userland. Please review the documentation to learn how to apply this protection.'

    ^This is the issue
    - the rest of this is just rambling about how the documentation is incorrect

    The link to the documentation is to this page about the symlink race condition
    Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation
    and is not directly about 'how to apply this protection' as described in the error message, except to say 'Both of these options install the KernelCare Client, which automatically manages Kernel Care software updates'
    Except it doesn't appear to do that, because I still get an error message.

    In addition, the article about the symlink race condition states that whether or not you purchase KernelCare, it is available in the Security Advisor- this does not appear to be the case.

    The documentation for KernelCare does not appear to contain any info on how to fix the error message.
    The ticket linked above was from January this year- has it really been 4 months without a fix?
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,961
    Likes Received:
    1,821
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello Adam,

    I removed the previous posts, as the BlueHost patch is only recommended if you can't implement any of the other options. As far as the warning message, can you verify which version of cPanel & WHM is installed on your system? You can check with a command such as this:

    Code:
    cat /usr/local/cpanel/version
    If your system is using cPanel & WHM version 68, then the warning message is to be expected, as support for detecting and installing KernelCare during Security Advisor's kernel check isn't included until cPanel & WHM version 70:

    Implemented case CPANEL-17016: Add support for detecting and installing KernelCare's free patch set.

    cPanel & WHM version 70 is tentatively scheduled for publication to the RELEASE build tier next week.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Adam Connor

    Adam Connor Registered

    Joined:
    Apr 28, 2018
    Messages:
    3
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Sydney, Australia
    cPanel Access Level:
    Reseller Owner
    thanks for the info Michael,
    Yes I am on WHM v68.
    I have paid for KernelCare, so does this still apply?
    Also- is there any way to verify that it is applied correctly and working?
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,961
    Likes Received:
    1,821
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hi Adam,

    Yes, Security Advisor will detect a full installation (as opposed to the free tier) of KernelCare as of cPanel & WHM version 70. You'll just need to make sure the "extra" patchset is installed:

    Extra Patchset

    You can check KernelCare's current status with the following command:

    Code:
    /usr/bin/kcarectl --info
    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Adam Connor

    Adam Connor Registered

    Joined:
    Apr 28, 2018
    Messages:
    3
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Sydney, Australia
    cPanel Access Level:
    Reseller Owner
    Thank you
     
    cPanelMichael likes this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice