#Bluehost cpanel how to#
#Bluehost cpanel install#

We support this option on all cPanel & WHM platforms that run on CloudLinuxв„ў. We strongly recommend that you use this option to address the race condition vulnerability.

#Bluehost cpanel install#

We offer both of these options via WHMвЂ™s Security Advisor interface ( WHM > Home > Security Center > Security Advisor).Д«oth of these options install the KernelCare Client, which automatically manages KernelCare software updates. If you install either option, disable the Symlink Protection option in the Global Configuration section of WHMвЂ™s Apache Configuration interface ( WHM > Home > Service Configuration > Apache Configuration). If you install the Free Patch Set and then later purchase and install KernelCare, the вЂњExtraвЂќ Patchset will replace the Free Patch Set. KernelCare provides two patches that offer symlink protection for systems that run CentOS, 7, or 8 or AlmaLinux OS 8 kernels:Д®xtra - If you purchase and install KernelCare, you can also install the KernelCare вЂњExtraвЂќ Patchset, which includes KernelCare Symlink Protection.ДЇree - If you do not install KernelCare, you can install KernelCareвЂ™s Free Patch Set, which includes KernelCare Free Symlink Protection. For more information about KernelCare and its symlink protection options, read the KernelCare documentation.

We only offer these options for systems that run on CentOS 6, 7, or 8 or AlmaLinux OS 8 kernels.Ways to address the vulnerability KernelCare patch sets This action allows the malicious user to inject malicious content that links to a user-owned file.ДЇor more information about symlink races, read WikipediaвЂ™s Symlink race article. This vulnerability allows a malicious user to change a symlink multiple times during the interval between when Apache checks for a fileвЂ™s presence and creates the file. The SymLinksIfOwnerMatch option exposes Apache to a race condition through symlinks. This symlink vulnerability allows a malicious user to serve files from anywhere on a server that strict operating system-level permissions do not protect.

The FollowSymlinks option exposes Apache to a symlink security vulnerability. WHMвЂ™s Global Configuration interface ( WHM > Home > Service Configuration > Apache Configuration > Global Configuration) allows you to configure various Apache options that reside in the root ( /) directory.

#Bluehost cpanel how to#

This document explains how to implement symlink race condition protection on systems that run EasyApache 4.