Warning in Security Advisor: "Could not open /proc/1/smaps"

[rodrocolodro]

Dear Staff ans community I just install a new CentOS + cPanel and I have a warning than I never seen before.

The Message is:

An error occurred while attempting to check whether running executables are up-to-date: Could not open /proc/1/smaps Could not open /proc/2/smaps Could not open /proc/3/smaps Could not open /proc/4/smaps Could not open /proc/5/smaps Could not open /proc/7/smaps Could not open /proc/8/smaps Could not open /proc/9/smaps Could not open /proc/10/smaps Could not open /proc/11/smaps Could not open /proc/12/smaps Could not open /proc/13/smaps Could not open /proc/14/smaps Could not open /proc/15/smaps Could not open /proc/17/smaps Could not open /proc/18/smaps Could not open /proc/19/smaps Could not open /proc/20/smaps Could not open /proc/21/smaps Could...

I don;t want to start this server until to be sure this is solve and if this can be a problem in the future.

I would appreciate your assistance

Thanks!

 

[24x7server]

Hello,

Which CentOS version you have installed on your server ? Also please try to run upcp on your server with the following command

/scripts/upcp --force

 

[rodrocolodro]

Hello,
I have this: CENTOS 6.7 x86_64 / WHM 11.50.1 (build 3)

Let me know and thanks!

 

[cPanelMichael]

Hello

It's likely this stems from the use of an unsupported kernel. Please post the output from the following command:

uname -r

Thank you.

 

[rodrocolodro]

Hello!

Here is result: 3.14.32-xxxx-grs-ipv6-64

Thank you for your help!

 

[cPanelMichael]

While many customers successfully utilize grsec kernels and cPanel/WHM works as expected, they are not officially supported. Grsecurity disables /proc/<pid>/smaps for security reasons, so it's expected that you see those warning messages.

Thank you.

 

[rodrocolodro]

I understand, this means that I should not worry about this?

Thanks a lot!

 

[cPanelMichael]

Right, the option you are attempting to use is not compatible with the custom kernel that's installed on your server. Thus, you would need to use a standard kernel if you wanted to use that option on your system.

Thank you.

 

[rodrocolodro]

Thank you very much Michael

Have a nice day!

 

[Julien Gobi]

Hi!
Since the last update I receive these emails too.
My server uses this kernel: 3.14.32-xxxx-grs-ipv6-64
Is it possible to mute these alerts ?
Thank you.
j.

 

[cPanelMichael]

Hi!
Since the last update I receive these emails too.
My server uses this kernel: 3.14.32-xxxx-grs-ipv6-64
Is it possible to mute these alerts ?

Internal case CPANEL-6077 is open to address this by ensuring the warning message is not displayed on systems with Grsec kernels installed. The current workaround is to ignore the warning message, or create an email filter that discards this particular notification based on message body content.

Thank you.

 

[bouvrie]

The current workaround is to ignore the warning message, or create an email filter that discards this particular notification based on message body content.

BE CAREFUL creating such an email filter. Just because the email contains "An error occurred while attempting to check whether running executables are up-to-date", doesn't mean that is the only one single notification in that email. By discarding such mails, you could miss other notifications.

For this reason, it would also be helpful to be able to count the number of notifications in the notifications e-mail, but sadly there's no body text along the lines of "Showing X notifications:" to properly enable such email filters.