{"id":344,"date":"2021-07-23T12:28:09","date_gmt":"2021-07-23T12:28:09","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/how-to-manually-remove-the-cpanel-provided-hardened-kernel\/"},"modified":"2021-07-23T12:28:09","modified_gmt":"2021-07-23T12:28:09","slug":"how-to-manually-remove-the-cpanel-provided-hardened-kernel","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/how-to-manually-remove-the-cpanel-provided-hardened-kernel\/","title":{"rendered":"How to Manually Remove the cPanel-Provided Hardened Kernel"},"content":{"rendered":"<\/p>\n
\n
<\/div>\n
\n

Overview<\/h2>\n

This document describes how to manually replace the cPanel-provided hardened kernel with a standard kernel.<\/p>\n

\n
Warning:<\/div>\n
\n
    \n
  • \n

    We deprecated<\/strong> the cPanel-provided hardened kernel in cPanel & WHM version 68, and we no longer provide updates to this kernel. We strongly<\/strong> recommend that you remove the hardened kernel and consider KernelCare\u2019s symlink protection options. For more information about KernelCare, read the KernelCare documentation.<\/p>\n<\/li>\n

  • \n

    You will need to reboot your server during this procedure. Plan your downtime accordingly.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n

    Remove the kernel<\/h2>\n

    To manually replace the cPanel-provided hardened kernel with a standard kernel, perform the following steps:<\/p>\n

      \n
    1. Log in to your server via SSH.<\/li>\n
    2. Run the following commands:\n
      \n
      \n\n\n
      \n
      1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
      		\n
        rm<\/span> \/<\/span>etc<\/span>\/<\/span>yum<\/span>.repos<\/span>.d<\/span>\/<\/span>cPkernel<\/span>.repo<\/span>\n  yum<\/span> list<\/span> --<\/span>showduplicates<\/span> kernel<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
      The system will return a list of available kernels that you can install.<\/p>\n
      \n
      \n\n\n
      \n
       1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span>16\n<\/span>17\n<\/span>18\n<\/span>19\n<\/span>20\n<\/span>21\n<\/span>22\n<\/span><\/code><\/pre>\n<\/td>\n
      		\n
        [root<\/span>@<\/span>c6<\/span> ~<\/span>]#<\/span> yum<\/span> list<\/span> --<\/span>showduplicates<\/span> kernel<\/span>\n  Loaded<\/span> plugins<\/span>: fastestmirror<\/span>\n  Loading<\/span> mirror<\/span> speeds<\/span> from<\/span> cached<\/span> hostfile<\/span>\n  *<\/span> base<\/span>: reflector<\/span>.westga<\/span>.edu<\/span>\n  *<\/span> epel<\/span>: mirror<\/span>.compevo<\/span>.com<\/span>\n  *<\/span> extras<\/span>: ftp<\/span>.osuosl<\/span>.org<\/span>\n  *<\/span> updates<\/span>: dallas<\/span>.tx<\/span>.mirror<\/span>.xygenhosting<\/span>.com<\/span>\n  Installed<\/span> Packages<\/span>\n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>573.26.1<\/span>.el6<\/span>                                                               @<\/span>updates<\/span>\/<\/span>6.7<\/span>\n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>642.1.1<\/span>.el6<\/span>                                                                @<\/span>updates<\/span>   \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.299.10.3<\/span>.cp6<\/span>                                                           @<\/span>cPkernel<\/span>  \n  Available<\/span> Packages<\/span>\n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.<\/span>el6<\/span>                                                                    base<\/span>       \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.1.1<\/span>.el6<\/span>                                                                updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.3.1<\/span>.el6<\/span>                                                                updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.3.2<\/span>.el6<\/span>                                                                updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.6.3<\/span>.el6<\/span>                                                                updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.10.1<\/span>.el6<\/span>                                                               updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.10.2<\/span>.el6<\/span>                                                               updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.10.3<\/span>.el6<\/span>                                                               updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.13.2<\/span>.el6<\/span>                                                               updates<\/span>    \n  kernel<\/span>.x86_64<\/span>                                                          2.6.32<\/span>-<\/span>696.16.1<\/span>.el6<\/span>                                                               updates<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n
    3. If you wish to install a specific kernel, run the yum install KERNELNAME<\/code> command, where KERNELNAME<\/code> represents the desired kernel. Otherwise, run the yum install kernel-2.6.32<\/code> command to install the latest kernel.\n
      \n
      \n\n\n
      \n
       1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span>16\n<\/span>17\n<\/span>18\n<\/span>19\n<\/span>20\n<\/span>21\n<\/span>22\n<\/span>23\n<\/span>24\n<\/span>25\n<\/span>26\n<\/span>27\n<\/span>28\n<\/span>29\n<\/span>30\n<\/span>31\n<\/span>32\n<\/span>33\n<\/span>34\n<\/span>35\n<\/span>36\n<\/span>37\n<\/span>38\n<\/span>39\n<\/span>40\n<\/span><\/code><\/pre>\n<\/td>\n
      		\n
        [root<\/span>@<\/span>c6<\/span> ~<\/span>]#<\/span> yum<\/span> install<\/span> kernel<\/span>-<\/span>2.6.32<\/span>\n  Loaded<\/span> plugins<\/span>: fastestmirror<\/span>\n  Setting<\/span> up<\/span> Install<\/span> Process<\/span>\n  Loading<\/span> mirror<\/span> speeds<\/span> from<\/span> cached<\/span> hostfile<\/span>\n  *<\/span> base<\/span>: reflector<\/span>.westga<\/span>.edu<\/span>\n  *<\/span> epel<\/span>: mirror<\/span>.compevo<\/span>.com<\/span>\n  *<\/span> extras<\/span>: ftp<\/span>.osuosl<\/span>.org<\/span>\n  *<\/span> updates<\/span>: dallas<\/span>.tx<\/span>.mirror<\/span>.xygenhosting<\/span>.com<\/span>\n  Resolving<\/span> Dependencies<\/span>\n  --<\/span>> Running<\/span> transaction<\/span> check<\/span>\n  ---<\/span>> Package<\/span> kernel<\/span>.x86_64<\/span> 0<\/span>:2.6.32<\/span>-<\/span>696.16.1<\/span>.el6<\/span> will<\/span> be<\/span> installed<\/span>\n  --<\/span>> Finished<\/span> Dependency<\/span> Resolution<\/span>\n\n  Dependencies<\/span> Resolved<\/span>\n\n  ==================================================================================================================================================================================<\/span>=\n  Package<\/span>                                Arch<\/span>                                   Version<\/span>                                               Repository<\/span>                               Size<\/span>\n  ==================================================================================================================================================================================<\/span>=\n  Installing<\/span>:\n  kernel<\/span>                                 x86_64<\/span>                                 2.6.32<\/span>-<\/span>696.16.1<\/span>.el6<\/span>                                   updates<\/span>                                  32<\/span> M<\/span>\n\n  Transaction<\/span> Summary<\/span>\n  ==================================================================================================================================================================================<\/span>=\n  Install<\/span>       1<\/span> Package<\/span>(s<\/span>)\n\n  Total<\/span> download<\/span> size<\/span>: 32<\/span> M<\/span>\n  Installed<\/span> size<\/span>: 131<\/span> M<\/span>\n  Is<\/span> this<\/span> ok<\/span> [y<\/span>\/<\/span>N<\/span>]: y<\/span>\n  Downloading<\/span> Packages<\/span>:\n  kernel<\/span>-<\/span>2.6.32<\/span>-<\/span>696.16.1<\/span>.el6<\/span>.x86_64<\/span>.rpm<\/span>                                                                                                                       |  32<\/span> MB<\/span>     00<\/span>:11<\/span>    \n  Running<\/span> rpm_check_debug<\/span>\n  Running<\/span> Transaction<\/span> Test<\/span>\n  Transaction<\/span> Test<\/span> Succeeded<\/span>\n  Running<\/span> Transaction<\/span>\n  Installing<\/span> : kernel<\/span>-<\/span>2.6.32<\/span>-<\/span>696.16.1<\/span>.el6<\/span>.x86_64<\/span>                                                                                                                               1<\/span>\/<\/span>1<\/span>\n  Verifying<\/span>  : kernel<\/span>-<\/span>2.6.32<\/span>-<\/span>696.16.1<\/span>.el6<\/span>.x86_64<\/span>                                                                                                                               1<\/span>\/<\/span>1<\/span>\n\n  Installed<\/span>:\n  kernel<\/span>.x86_64<\/span> 0<\/span>:2.6.32<\/span>-<\/span>696.16.1<\/span>.el6<\/span>                                                                                                                                             \n  Complete<\/span>!<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n
    4. Run the reboot<\/code> command to reboot your server.<\/li>\n
    5. \n
      After the server reboots, log in to your server via SSH again and run the uname -r<\/code> command. The output should resemble the following:<\/p>\n
      2.6.32-696.13.2.el6.x86_64\n<\/code><\/pre>\n<\/li>\n<\/ol>\n
      After you replace the hardened kernel, we strongly<\/strong> recommend that you navigate to WHM\u2019s Security Advisor<\/em> interface (WHM >> Home >> Security Center >> Security Advisor)<\/em> and install KernelCare\u2019s free symlink protection from CloudLinux\u2122.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"
      Overview This document describes how to manually replace the cPanel-provided hardened kernel with a standard kernel. Warning: We deprecated the cPanel-provided hardened kernel in cPanel & WHM version 68, and we no longer provide updates to this kernel. We strongly recommend that you remove the hardened kernel and consider KernelCare\u2019s symlink protection options. For more …<\/p>\n","protected":false},"author":1,"featured_media":345,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/344"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=344"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/344\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/345"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=344"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=344"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=344"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}