KernelCare installed, cannot set patch type for symlink, unknown kernel

[verdon]

I've inherited a server and am trying to get a sense of what is going on in a few instances...

KernelCare is purchased and installed, but there is still the symlink alert in Security Advisor. I've read several threads here and have tried to reset the patch set and update via terminal, but this doesn't seem to be working. Also, when checking info or status, I am just getting a message about an unknown kernel.

# kcarectl --set-patch-type extra --update
Unknown Kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64)

# /usr/bin/kcarectl --info
Unknown kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64), no patches available

FYI... When I first got access to the sever, I had to do a manual reboot and yum update and reboot again, according to Security Advisor and an out-of-date kernel. Then I discovered that KernelCare was actually licensed and installed.

 

[dalem]

the error means that cloudlinux has not released a patch set for that kernel yet
you can back the kernel back to the previous or you can wait CL will eventually patch it

 

[verdon]

@dalem thanks! - ahhh... so that means at one point Security Advisor was telling me to do a kernel update, and I should have ignored that?

 

[dalem]

not necessarily even if CL had patched this kernel you are all ready running the latest kernel so it makes no difference if they patched or not. Your just going to get the warning until they do

 

[cPanelLauren]

The full KernelCare product may support more kernels than the Symlink protection patch does, it should also be noted that the patch may be updated later than than the full KernelCare product is in some cases.

What's the output of the following:

kcarectl --info

 

[verdon]

@cPanelLauren ,

Thank you

# kcarectl --info
kpatch-state: patch is applied
kpatch-for: Linux version 3.10.0-1062.1.2.el7.x86_64 ([email protected]) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC) ) #1 SMP Mon Sep 30 14:19:46 UTC 2019
kpatch-build-time: Wed Oct  2 13:56:03 2019
kpatch-description: 1-free:1570552864;

To be clear. I am no longer getting the symlink protection alert. This looks correct now, yet I am sure I was not getting this full result the other day.

 

[cPanelLauren]

Hi @verdon

That does indeed look correct, and if I look at the releases for KernelCare: KernelCare

kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:20:46)
RHEL 7 (x86_64)
kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:21:55)
CentOS 7 (x86_64)

They just updated your kernel on the 8th