Tech Support
Documentation
Login
Contact Us
The Symlink Protection patchset is available for free for CentOS 6 & 7
June 10, 2019 - TuxCare PR Team
A few weeks ago we released the KernelCare “Extra” Patchset with the security fixes and the symlink protection available to all KernelCare customers running CentOS kernels. Today we are pleased to share that you can get the Symlink Protection Patchset for CentOS 6 and 7 at no cost, even if you don’t have licenses of KernelCare.
We’ve been discussing with the cPanel team on how to help with hardening of their customers’ system kernels. This Symlink Protection Patchset will protect CentOS 6 and 7 systems and will help defend shared hosting servers, including the cPanel servers, against symlink attacks.
A symlink race attack is frequently used against shared hosting servers. It allows a malicious user to serve files that belong to other users by creating a symbolic link to those files. It is often used to access config.php files that belong to others. This patchset helps protect against such attacks.
Note that this patchset includes only the symlink protection, and does not include the security fixes (those are available to KernelCare customers) – you will still need to update kernel and REBOOT each time new CentOS kernel is released to keep your kernel secure.
We recommend the installation of this patchset on CentOS 6 and CentOS 7 to make your servers more secure.
Here is how to install the free symlink protection patchset.
More KernelCare Updates:
About KernelCare
KernelCare is a live patching system that patches Linux kernel vulnerabilities automatically, with no reboots. It’s used on over 300,000 servers, and has been used to patch servers running for 6+ years. It works with all major Linux distributions, such as RHEL, CentOS, Amazon Linux, and Ubuntu. It also interoperates with common vulnerability scanners such as Nessus, Tenable, Rapid7, and Qualys. To talk with a consultant about how KernelCare might meet your enterprise’s specific needs, contact us directly at [email protected].
