Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

KernelCare installed (licensed) - Security Advisor warns no symlink protection

Discussion in 'Security' started by ronaldst, Jan 11, 2019.

  1. ronaldst

    ronaldst Well-Known Member

    Joined:
    Feb 22, 2016
    Messages:
    78
    Likes Received:
    11
    Trophy Points:
    8
    Location:
    Norway
    cPanel Access Level:
    Root Administrator
    Security Advisor
    Kernel does not support the prevention of symlink ownership attacks.

    Can someone please explain to me why I am getting warnings in Security Advisor about no symlink protection?

    Code:
    [root@server ~]# kcarectl --check
    The latest patch is applied.
    [root@server ~]# kcarectl --set-patch-type extra --update
    'extra' patch type selected
    Downloading updates
    Patch level 4 applied. Effective kernel version 3.10.0-957.1.3.el7
    Updates already downloaded
    Kernel is safe


    The warning in Security advisor dissapears once I set the extra patch type. This has been done before, and seem to be "unset" at some point.

    How is that possible? Does cPanel updates etc. disable KernelCare extra patch set?
     
    #1 ronaldst, Jan 11, 2019
    Last edited: Jan 11, 2019
  2. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,262
    Likes Received:
    481
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hello @ronaldst


    We do not in any way modify the patch type set for this. If it's being changed or removed it's being done when KernelCare updates.

    Ultimately you shouldn't need to continuously be setting the patch type. Please feel free to open a ticket with us if your kernelcare license was purchased through us so we can look into this further.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    ronaldst likes this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice