Kernel module for CloudLinux 7 hybrid updated

[Inessa Atmachian]

CloudLinux 7 hybrid kernel module is now available for download from our production repository.

Release notes

• In this release we’ve introduced a new parameter: fs.process_symlinks_by_task to protect against symlink vulnerability where an attacker might get access to files out of the CageFS via cPanel tools: File Manager, WebDAV, Webmail, etc. See how to enable the protection in the documentation.
• We’ve also introduced a new experimental tool that allows to enter the corresponding LVE when using cPanel tools on-behalf of a non-root user. See details in the documentation.
• We changed the umask behavior for CloudLinux 6, CloudLinux 6 hybrid, CloudLinux 7, CloudLinux 7 hybrid kernels. Now, when entering LVE task's original umask value is preserved, instead of using LVE's umask value.

Changelog

lve-kmod-2.0-10

• KMODLVE-291: save new loadavg values for the newer CloudLinux 7 hybrid kernels
• KMODLVE-47: fix panic
• KMODLVE-47: CloudLinux 7 build fix
• KMODLVE-47: add the ability to namespace setup based on script executing
• KMODLVE-292: preserve task's original umask when entering LVE
• KMODLVE-281: task bound symlink protection

How to update

yum update rhn-client-tools
yum update kernel kmod-lve
reboot

How to install

The process of converting from standard to hybrid CloudLinux OS 7 is the same as for version 6. You can read about it here.

1. First, install CloudLinux OS 7.
2. Next, run the following commands as root.

   yum update rhn-client-tools rhn-check rhn-setup
   normal-to-hybrid
   yum update kernel kmod-lve
   reboot

--

Regards,

Inessa Atmachian  |  Technical Writer
Skype: fitch44


CloudLinux.com  |  KernelCare.com |  Imunify360 

helpdesk.cloudlinux.com: 24/7Free, exceptionally good support
Follow twitter.com/CloudLinuxOS for technical updates