The system cannot update the kernel: Cannot update this system’s kernel.

[Lillike]

Now migrated easyApache3 to easyApache4.

And Security Advisor's message:


The system cannot update the kernel: Cannot update this system’s kernel.



How can i solve it?

Please, advice. Thanks.

 

[dalem]

what happens when you run
yum update kernel
?

is the kernel in the exclude
grep exclude= /etc/yum.conf

 

[cPanelLauren]

On top of the information already requested what is the kernel you're running:

rpm -qa |grep kernel

or

uname -r

will both provide a suitable answer

Thanks!

 

[Lillike]

Hi Lauren,

rpm -qa |grep kernel

or

uname -r

Thanks for your help.

The answe of the server:
kernel-headers-2.6.32-754.3.5.el6.x86_64

 

[cPanelLauren]

Hi @Lillike

kernel-headers-2.6.32-754.3.5.el6.x86_64

That was the only output you received?

 

[Lillike]

Hi @Lillike



That was the only output you received?

Here's:

[email protected] [/]# rpm -qa |grep kernel
kernel-headers-2.6.32-754.3.5.el6.x86_64
[email protected] [/]# uname -r
2.6.32-042stab120.16

 

[cPanelLauren]

HI @Lillike

That's the most important part right here:

[email protected] [/]# uname -r
2.6.32-042stab120.16

This is a Virtuozzo/OpenVZ server you can't update the kernel on these from the container. The kernel must be updated on the host node.


Thanks!

 

[Lillike]

HI @Lillike
This is a Virtuozzo/OpenVZ server you can't update the kernel on these from the container. The kernel must be updated on the host node.
Thanks!

Lauren, thanks.

So it's difficult to me... (i understand it's 2 thread.) Sorry.

So do i need kernelcare or not? (in case of Symlink protection)
As dalem wrote me here: - Removed Duplicate Thread - do not have to change it.
But i can read that Symlink protection needed (Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation)
And sec. adv. offer, too: Kernel does not support the prevention of symlink ownership attacks. And action needed. KernelCare's Free Patch Set is OK for Symlink protection.

Please, advice. Thanks.

 

[cPanelLauren]

Hi @Lillike

You will not be able to get KernelCare in any form on the VPS Container you're running. The symlink protection patch would need to be applied to the hostnode it cannot be applied at the container level.

This is detailed here in the comments: The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare

Hi, i need some question:
1. Is it compatible with this existing kernel server from cPanel ?How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation
[[email protected]]# uname -a
Linux ~server.com 2.6.32-696.299.10.3.cp6.x86_64 #1 SMP Thu Sep 28 21:04:26 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

2. Is it compatible for VPS virtuozzo or only VPS KVM / Server?

Waiting for your info?




by Irina Semenova / Tuesday, 10 October 2017 12:52
REPLY
1. No, we do not support this kernels. This kernel is deprecated (as you can find here [URL='https://documentation.cpanel.net/display/CKB/How+to+Harden+Your+cPanel+System's+Kernel']How to Harden Your cPanel System's Kernel - cPanel Knowledge Base - cPanel Documentation)

2. It is compatible only with virtual machines or server. It is not compatible with containers.

[/URL]

https://www.cloudlinux.com/bloggers/blogger/semenova