KernelCare installed (licensed) - Security Advisor warns no symlink protection

ronaldst

Well-Known Member
Feb 22, 2016
85
16
8
Norway
cPanel Access Level
Root Administrator
Security Advisor
Kernel does not support the prevention of symlink ownership attacks.

Can someone please explain to me why I am getting warnings in Security Advisor about no symlink protection?

Code:
[[email protected] ~]# kcarectl --check
The latest patch is applied.
[[email protected] ~]# kcarectl --set-patch-type extra --update
'extra' patch type selected
Downloading updates
Patch level 4 applied. Effective kernel version 3.10.0-957.1.3.el7
Updates already downloaded
Kernel is safe


The warning in Security advisor dissapears once I set the extra patch type. This has been done before, and seem to be "unset" at some point.

How is that possible? Does cPanel updates etc. disable KernelCare extra patch set?
 
Last edited:

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,296
1,252
313
Houston
Hello @ronaldst


Does cPanel updates etc. disable KernelCare extra patch set?
We do not in any way modify the patch type set for this. If it's being changed or removed it's being done when KernelCare updates.

Ultimately you shouldn't need to continuously be setting the patch type. Please feel free to open a ticket with us if your kernelcare license was purchased through us so we can look into this further.

Thanks!
 
  • Like
Reactions: ronaldst