CloudLinux - CloudLinux Blog - Beta: Kernel module for CloudLinux 7 hybrid updated
Blog

Beta: Kernel module for CloudLinux 7 hybrid updated

b2ap3_large_b2ap3_large_20190610142815_CL6-hybrid-4-1_20190905-123844__20191209-155534_1

CloudLinux 7 hybrid kernel module is now available for download from our updates-testing repository.

Release notes

  • In this release we’ve introduced a new parameter: fs.process_symlinks_by_task to protect against symlink vulnerability where an attacker might get access to files out of the CageFS via cPanel tools: File Manager, WebDAV, Webmail, etc. See how to enable the protection in the documentation.
  • We’ve also introduced a new experimental tool that allows to enter the corresponding LVE when using cPanel tools on-behalf of a non-root user. See details in the documentation.
  • We changed the umask behavior for CloudLinux 6, CloudLinux 6 hybrid, CloudLinux 7, CloudLinux 7 hybrid kernels. Now, when entering LVE task's original umask value is preserved, instead of using LVE's umask value.

Changelog

lve-kmod-2.0-10

  • KMODLVE-291: save new loadavg values for the newer CloudLinux 7 hybrid kernels
  • KMODLVE-47: fix panic
  • KMODLVE-47: CloudLinux 7 build fix
  • KMODLVE-47: add the ability to namespace setup based on script executing
  • KMODLVE-292: preserve task's original umask when entering LVE
  • KMODLVE-281: task bound symlink protection

How to update

yum update rhn-client-tools --enablerepo=cloudlinux-updates-testing yum update kernel kmod-lve --enablerepo=cl7h_beta reboot

How to install

The process of converting from standard to hybrid CloudLinux OS 7 is the same as for version 6. You can read about it here.

  1. First, install CloudLinux OS 7.
  2. Next, run the following commands as root.
    yum update rhn-client-tools rhn-check rhn-setup --enablerepo=cloudlinux-updates-testing normal-to-hybrid yum update kernel kmod-lve --enablerepo=cl7h_beta reboot
Beta: LVE Manager, CageFS, and Alt-Python27-cllib ...
Alt-PHP74 released
 

By accepting you will be accessing a service provided by a third-party external to https://www.cloudlinux.com/