KernelCare installed, cannot set patch type for symlink, unknown kernel

verdon

Well-Known Member
Nov 1, 2003
946
18
168
Northern Ontario, Canada
cPanel Access Level
Root Administrator
I've inherited a server and am trying to get a sense of what is going on in a few instances...

KernelCare is purchased and installed, but there is still the symlink alert in Security Advisor. I've read several threads here and have tried to reset the patch set and update via terminal, but this doesn't seem to be working. Also, when checking info or status, I am just getting a message about an unknown kernel.

Code:
# kcarectl --set-patch-type extra --update
Unknown Kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64)
Code:
# /usr/bin/kcarectl --info
Unknown kernel (CentOS Linux 3.10.0-1062.1.2.el7.x86_64), no patches available
FYI... When I first got access to the sever, I had to do a manual reboot and yum update and reboot again, according to Security Advisor and an out-of-date kernel. Then I discovered that KernelCare was actually licensed and installed.
 

dalem

Well-Known Member
PartnerNOC
Oct 24, 2003
2,983
159
368
SLC
cPanel Access Level
DataCenter Provider
the error means that cloudlinux has not released a patch set for that kernel yet
you can back the kernel back to the previous or you can wait CL will eventually patch it
 

dalem

Well-Known Member
PartnerNOC
Oct 24, 2003
2,983
159
368
SLC
cPanel Access Level
DataCenter Provider
not necessarily even if CL had patched this kernel you are all ready running the latest kernel so it makes no difference if they patched or not. Your just going to get the warning until they do
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,304
363
Houston
The full KernelCare product may support more kernels than the Symlink protection patch does, it should also be noted that the patch may be updated later than than the full KernelCare product is in some cases.

What's the output of the following:
Code:
kcarectl --info
 

verdon

Well-Known Member
Nov 1, 2003
946
18
168
Northern Ontario, Canada
cPanel Access Level
Root Administrator
@cPanelLauren ,

Thank you

Code:
# kcarectl --info
kpatch-state: patch is applied
kpatch-for: Linux version 3.10.0-1062.1.2.el7.x86_64 ([email protected]) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC) ) #1 SMP Mon Sep 30 14:19:46 UTC 2019
kpatch-build-time: Wed Oct  2 13:56:03 2019
kpatch-description: 1-free:1570552864;
To be clear. I am no longer getting the symlink protection alert. This looks correct now, yet I am sure I was not getting this full result the other day.
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,304
363
Houston
Hi @verdon

That does indeed look correct, and if I look at the releases for KernelCare: KernelCare

Code:
kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:20:46)
RHEL 7 (x86_64)
kernel-3.10.0-1062.1.2.el7(Last Updated: 2019-10-08 14:21:55)
CentOS 7 (x86_64)
They just updated your kernel on the 8th