Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Latest Kernel not Hardened?

Discussion in 'Security' started by mikefromnz, Feb 25, 2017.

Tags:
  1. mikefromnz

    mikefromnz Active Member

    Joined:
    Feb 9, 2017
    Messages:
    32
    Likes Received:
    5
    Trophy Points:
    8
    Location:
    New Zealand
    cPanel Access Level:
    Root Administrator
    Bit confused as to this, I got an email from the Security Advisor telling me the following

    So I ran YUM UPDATE via SSH, and now running the latest Kernel. Although now when I check Security Advisor, I get the following...

    I already had completed this step awhile ago by installing the cPanel hardened kernel, figuring it must have overwritten this and need update, I tried to perform the steps in the Documentation once more from the below link

    How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation

    There appears to be no current hardened kernel, I get the following message

     
    #1 mikefromnz, Feb 25, 2017
  2. sktest123

    sktest123 Well-Known Member

    Joined:
    Jan 31, 2017
    Messages:
    99
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    kochin
    cPanel Access Level:
    Root Administrator
    Hello,
    Cpanel does not have corresponding kernel version Patch.You are having the latest kernel but its not hardened like cpanel provided kernel.
     
    #2 sktest123, Feb 26, 2017
  3. mikefromnz

    mikefromnz Active Member

    Joined:
    Feb 9, 2017
    Messages:
    32
    Likes Received:
    5
    Trophy Points:
    8
    Location:
    New Zealand
    cPanel Access Level:
    Root Administrator
    Do you have any idea when the cPanel kernel will be made available, or how I can uninstall this kernel and get the cPanel one running again?
     
    #3 mikefromnz, Feb 26, 2017
  4. Locali

    Locali Registered

    Joined:
    Feb 27, 2017
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Las Vegas NV
    cPanel Access Level:
    Root Administrator
    Hello:

    When will this page be updated? [Last modified 2017-02-23 11:34]

    Index of /cpanelsync/repos/CentOS/6/cPkernel/x86_64/Packages

    "cPanel Security Advisor recommends you harden your cPanel system's kernel to implement symlink race condition protection "

    Thank you!


    *********************************************************************

    New Security Advisor notifications with High importance

    Type Module Advice
    High Kernel Current kernel version does not match the kernel version for boot. running kernel: 2.6.32-642.15.1.el6.x86_64, boot kernel: 2.6.32-642.13.1.199.cpanel6.x86_64 Reboot the system in the area. Check the boot configuration in grub.conf if the new kernel is not loaded after a reboot.
     
    #4 Locali, Feb 27, 2017
    Last edited by a moderator: Feb 27, 2017
  5. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,529
    Likes Received:
    2,181
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    YUM will automatically detect and install newer kernel versions if you have Operating System Package Updates enabled in "WHM >> Update Preferences". Since the latest cPanel-hardened kernel isn't always released at the same time as the OS-provided kernel, it's possible that YUM will sometimes automatically install the OS-provided kernel. However, your system won't actually boot into the newer kernel unless you manually reboot the system.

    Internal case CPANEL-11581 is open to determine if this behavior is by-design, or if a change to ensure this does not happen is necessary. I'll update this thread with more information on the status of this case as it becomes available.

    In the meantime, you can run the "yum update" command once the latest cPanel-hardened kernel is published to ensure it's installed. I don't have a time frame to offer on the publication of the next cPanel-hardened kernel at this time, but you can monitor the date on the available packages at the following URL to see when it's published:

    Index of /cpanelsync/repos/CentOS/6/cPkernel/x86_64/Packages

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 cPanelMichael, Feb 28, 2017
    linux4me2 likes this.
  6. mikefromnz

    mikefromnz Active Member

    Joined:
    Feb 9, 2017
    Messages:
    32
    Likes Received:
    5
    Trophy Points:
    8
    Location:
    New Zealand
    cPanel Access Level:
    Root Administrator
    Thank you, do you know how I can downgrade back to the cPanel kernel?
     
    #6 mikefromnz, Mar 3, 2017
  7. mikefromnz

    mikefromnz Active Member

    Joined:
    Feb 9, 2017
    Messages:
    32
    Likes Received:
    5
    Trophy Points:
    8
    Location:
    New Zealand
    cPanel Access Level:
    Root Administrator
    Ah my friends at cPanel, I love you so. I post asking how to downgrade, and I get notified there is a new hardened Kernel, hehe THANK YOU !
     
    #7 mikefromnz, Mar 3, 2017
    cPanelMichael and Infopro like this.
(You must log in or sign up to post here.)
Loading...
Similar Threads - Latest Kernel Hardened
  1. Lillike

    SOLVED Can not upgrade the latest version

    Lillike, Jun 13, 2019, in forum: General Discussion
    Replies:
    4
    Views:
    463
    Lillike
    Jul 2, 2019
  2. matt1206

    SOLVED [EA-8224] EA4 Experimental PHP Memcached Extensions Stop Working After Latest Update

    matt1206, Apr 19, 2019, in forum: EasyApache
    Replies:
    3
    Views:
    564
    cPanelMichael
    Jun 26, 2019
  3. The Old Man

    Latest Editor in File Manager iOS text selection

    The Old Man, Jan 27, 2019, in forum: User Experience
    Replies:
    1
    Views:
    432
    cPanelMichael
    Jan 30, 2019
  4. Tanner_W

    In Progress [CPANEL-24418] Update KAM.cf to latest version

    Tanner_W, Dec 9, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    671
    cPanelMichael
    Dec 12, 2018
  5. kdean

    SOLVED [EA-7980] Rewrite rules broken after latest EA4 update

    kdean, Nov 1, 2018, in forum: EasyApache
    Replies:
    20
    Views:
    1,641
    cPanelMichael
    Nov 6, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice