CloudLinux - CloudLinux Blog - Kernel module for CloudLinux 7 hybrid updated
RSS

Kernel module for CloudLinux 7 hybrid updated

CloudLinuxOS7hybridProduction

CloudLinux 7 hybrid kernel module is now available for download from our production repository.

Release notes

  • In this release we’ve introduced a new parameter: fs.process_symlinks_by_task to protect against symlink vulnerability where an attacker might get access to files out of the CageFS via cPanel tools: File Manager, WebDAV, Webmail, etc. See how to enable the protection in the documentation.
  • We’ve also introduced a new experimental tool that allows to enter the corresponding LVE when using cPanel tools on-behalf of a non-root user. See details in the documentation.
  • We changed the umask behavior for CloudLinux 6, CloudLinux 6 hybrid, CloudLinux 7, CloudLinux 7 hybrid kernels. Now, when entering LVE task's original umask value is preserved, instead of using LVE's umask value.

Changelog

lve-kmod-2.0-10

  • KMODLVE-291: save new loadavg values for the newer CloudLinux 7 hybrid kernels
  • KMODLVE-47: fix panic
  • KMODLVE-47: CloudLinux 7 build fix
  • KMODLVE-47: add the ability to namespace setup based on script executing
  • KMODLVE-292: preserve task's original umask when entering LVE
  • KMODLVE-281: task bound symlink protection

How to update

yum update rhn-client-tools yum update kernel kmod-lve reboot

How to install

The process of converting from standard to hybrid CloudLinux OS 7 is the same as for version 6. You can read about it here.

  1. First, install CloudLinux OS 7.
  2. Next, run the following commands as root.
    yum update rhn-client-tools rhn-check rhn-setup normal-to-hybrid yum update kernel kmod-lve reboot
Production: CloudLinux 7 and CloudLinux 6 Hybrid k...
Beta: MariaDB for MySQL Governor updated
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Thursday, 20 February 2020

Captcha Image