title: symlink - race condition Kernel hardening [Apache]
body: <p>Issue : installation of kernel for symlink race issue. </p>
  
  <p>I am writing for a solution to the below problem. I have looked around this site and others but have not found an answer that matches my understanding of the issue with a good explanation of how to fix it ( from a novice point of view).</p>
  
  <p>I am slowly working my way around managing my server, I cant afford for anyone else to do it as it is too expensive. When I look at a lot of the answers they jump straight in to highbrow terminology and fixes that I cant seem to replicate. </p>
  
  <p>My server is running CENTOS 6.8 x86_64 standard  WHM 62.0 (build 15).</p>
  
  <p>The issue is below. </p>
  
  <blockquote>
    <p>Kernel does not support the prevention of symlink ownership attacks.
    You do not appear to have any symlink protection enabled through a properly patched kernel on this server, which provides additional protections beyond those solutions employed in userland. Please review the documentation to learn how to apply this protection.</p>
    
    <p>I have followed the steps to harden the Kernel as per here
    <a href="https://documentation.cpanel.net/display/EA4/Symlink+Race+Condition+Protection" rel="nofollow noreferrer">Cpanel Documentation on hardening Kernel</a></p>
  </blockquote>
  
  <p>I am using SSH Cryptonaut to access command line. </p>
  
  <p>I go to the degisnated folder, then download the Kernel then go to update.. </p>
  
  <p>The issue is it will not update, the return is :No Packages marked for Update.</p>
  
  <blockquote>
    <p>Last login: Tue Feb 28 21:29:28 2017 from xx.xx.xx.xx
    [xxxxx@xxxxxxx ~]# cd /etc/yum.repos.d/
    [xxxx@xxxxxxx yum.repos.d]# yum -y update kernel
    Loaded plugins: tsflags, universal-hooks
    Setting up Update Process
    No Packages marked for Update
    [xxxx@xxxxxxxx yum.repos.d]# wget https://securedownloads.cpanel.net/cPkernel/cPkernel.repo
    --2017-02-28 21:57:39--  https://securedownloads.cpanel.net/cPkernel/cPkernel.repo
    Resolving securedownloads.cpanel.net... 208.74.123.12, 208.74.121.38
    Connecting to securedownloads.cpanel.net|208.74.123.12|:443... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 208
    Saving to: “cPkernel.repo.4”</p>
  </blockquote>
  
  <p>100%[========================================================================>] 208         --.-K/s   in 0s      </p>
  
  <p>2017-02-28 21:57:43 (23.2 MB/s) - “cPkernel.repo.4” saved [208/208]</p>
  
  <p>[xxxxx@xxxxxxxxxx yum.repos.d]# yum -y update kernel
  Loaded plugins: tsflags, universal-hooks
  Setting up Update Process
  No Packages marked for Update
  [xxxxx@xxxxxx yum.repos.d]# 
  ></p>
  
  <p><strong>Is anyone able to help on this issue and include a simple steps on how to resolve.</strong> </p>
  
  <p>I am doing this for Symlink Race condition protection. I understand the symlink issue, but not so sure what the race condition means.</p>