KernelCare installed, cannot set patch type for symlink, unknown kernel

verdon

Well-Known Member
Nov 1, 2003
919
12
168
Northern Ontario, Canada
cPanel Access Level
Root Administrator
I've inherited a server and am trying to get a sense of what is going on in a few instances...

KernelCare is purchased and installed, but there is still the symlink alert in Security Advisor. I've read several threads here and have tried to reset the patch set and update via terminal, but this doesn't seem to be working. Also, when checking info or status, I am just getting a message about an unknown kernel.

Code:
# kcarectl --set-patch-type extra --update
Unknown Kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64)
Code:
# /usr/bin/kcarectl --info
Unknown kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64), no patches available
FYI... When I first got access to the sever, I had to do a manual reboot and yum update and reboot again, according to Security Advisor and an out-of-date kernel. Then I discovered that KernelCare was actually licensed and installed.
 

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,296
1,272
313
Houston
The full KernelCare product may support more kernels than the Symlink protection patch does, it should also be noted that the patch may be updated later than than the full KernelCare product is in some cases.

What's the output of the following:
Code:
kcarectl --info
 

verdon

Well-Known Member
Nov 1, 2003
919
12
168
Northern Ontario, Canada
cPanel Access Level
Root Administrator
@cPanelLauren ,

Thank you

Code:
# kcarectl --info
kpatch-state: patch is applied
kpatch-for: Linux version 3.10.0-1062.1.2.el7.x86_64 ([email protected]) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC) ) #1 SMP Mon Sep 30 14:19:46 UTC 2019
kpatch-build-time: Wed Oct  2 13:56:03 2019
kpatch-description: 1-free:1570552864;
To be clear. I am no longer getting the symlink protection alert. This looks correct now, yet I am sure I was not getting this full result the other day.
 

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,296
1,272
313
Houston
Hi @verdon

That does indeed look correct, and if I look at the releases for KernelCare: KernelCare

Code:
kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:20:46)
RHEL 7 (x86_64)
kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:21:55)
CentOS 7 (x86_64)
They just updated your kernel on the 8th