Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

The system cannot update the kernel: Cannot update this system’s kernel.

Discussion in 'Security' started by Lillike, Sep 5, 2018.

  1. Lillike

    Lillike Active Member

    Joined:
    May 29, 2018
    Messages:
    41
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    Hungary
    cPanel Access Level:
    Root Administrator
    Now migrated easyApache3 to easyApache4.

    And Security Advisor's message:


    The system cannot update the kernel: Cannot update this system’s kernel.



    How can i solve it?

    Please, advice. Thanks.
     
  2. dalem

    dalem Well-Known Member PartnerNOC

    Joined:
    Oct 24, 2003
    Messages:
    2,908
    Likes Received:
    127
    Trophy Points:
    368
    Location:
    SLC
    cPanel Access Level:
    DataCenter Provider
    what happens when you run
    yum update kernel
    ?

    is the kernel in the exclude
    grep exclude= /etc/yum.conf
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,254
    Likes Received:
    479
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    On top of the information already requested what is the kernel you're running:
    Code:
    rpm -qa |grep kernel 
    or
    Code:
    uname -r
    will both provide a suitable answer

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Lillike

    Lillike Active Member

    Joined:
    May 29, 2018
    Messages:
    41
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    Hungary
    cPanel Access Level:
    Root Administrator
    Hi Lauren,

    Code:
    rpm -qa |grep kernel 
    or
    Code:
    uname -r

    Thanks for your help.

    The answe of the server:
    kernel-headers-2.6.32-754.3.5.el6.x86_64
     
  5. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,254
    Likes Received:
    479
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hi @Lillike

    That was the only output you received?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. Lillike

    Lillike Active Member

    Joined:
    May 29, 2018
    Messages:
    41
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    Hungary
    cPanel Access Level:
    Root Administrator


    Here's:

    root@ip-192-xxx [/]# rpm -qa |grep kernel
    kernel-headers-2.6.32-754.3.5.el6.x86_64
    root@ip-192-xxx [/]# uname -r
    2.6.32-042stab120.16
     
  7. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,254
    Likes Received:
    479
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    HI @Lillike

    That's the most important part right here:

    Code:
    root@ip-192-xxx [/]# uname -r
    2.6.32-042stab120.16
    This is a Virtuozzo/OpenVZ server you can't update the kernel on these from the container. The kernel must be updated on the host node.


    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. Lillike

    Lillike Active Member

    Joined:
    May 29, 2018
    Messages:
    41
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    Hungary
    cPanel Access Level:
    Root Administrator
    Lauren, thanks.

    So it's difficult to me... (i understand it's 2 thread.) Sorry.

    So do i need kernelcare or not? (in case of Symlink protection)
    As dalem wrote me here: - Removed Duplicate Thread - do not have to change it.
    But i can read that Symlink protection needed (Symlink Race Condition Protection - EasyApache 4 - cPanel Documentation)
    And sec. adv. offer, too: Kernel does not support the prevention of symlink ownership attacks. And action needed. KernelCare's Free Patch Set is OK for Symlink protection.

    Please, advice. Thanks.
     
    #8 Lillike, Sep 6, 2018
    Last edited by a moderator: Sep 6, 2018
  9. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,254
    Likes Received:
    479
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hi @Lillike

    You will not be able to get KernelCare in any form on the VPS Container you're running. The symlink protection patch would need to be applied to the hostnode it cannot be applied at the container level.

    This is detailed here in the comments: The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare

     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice