The system cannot update the kernel: Cannot update this system’s kernel.

Lillike

Well-Known Member
May 29, 2018
46
2
8
Hungary
cPanel Access Level
Root Administrator
Now migrated easyApache3 to easyApache4.

And Security Advisor's message:


The system cannot update the kernel: Cannot update this system’s kernel.



How can i solve it?

Please, advice. Thanks.
 

Lillike

Well-Known Member
May 29, 2018
46
2
8
Hungary
cPanel Access Level
Root Administrator
HI @Lillike
This is a Virtuozzo/OpenVZ server you can't update the kernel on these from the container. The kernel must be updated on the host node.
Thanks!
Lauren, thanks.

So it's difficult to me... (i understand it's 2 thread.) Sorry.

So do i need kernelcare or not? (in case of Symlink protection)
As dalem wrote me here: - Removed Duplicate Thread - do not have to change it.
But i can read that Symlink protection needed (Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation)
And sec. adv. offer, too: Kernel does not support the prevention of symlink ownership attacks. And action needed. KernelCare's Free Patch Set is OK for Symlink protection.

Please, advice. Thanks.
 
Last edited by a moderator:

cPanelLauren

Forums Analyst II
Staff member
Nov 14, 2017
8,012
647
263
Houston
cPanel Access Level
DataCenter Provider
Hi @Lillike

You will not be able to get KernelCare in any form on the VPS Container you're running. The symlink protection patch would need to be applied to the hostnode it cannot be applied at the container level.

This is detailed here in the comments: The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare

Hi, i need some question:
1. Is it compatible with this existing kernel server from cPanel ?How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation
[[email protected]]# uname -a
Linux ~server.com 2.6.32-696.299.10.3.cp6.x86_64 #1 SMP Thu Sep 28 21:04:26 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

2. Is it compatible for VPS virtuozzo or only VPS KVM / Server?

Waiting for your info?




by Irina Semenova / Tuesday, 10 October 2017 12:52
REPLY
1. No, we do not support this kernels. This kernel is deprecated (as you can find here [URL='https://documentation.cpanel.net/display/CKB/How+to+Harden+Your+cPanel+System's+Kernel']How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation
)

2. It is compatible only with virtual machines or server. It is not compatible with containers.

[/URL]
https://www.cloudlinux.com/bloggers/blogger/semenova