67747: Active Protection for Linux: Supported kernel versions

Also read in:

use Google Translate

Applies to: 

Last update: 26-03-2021

Supported kernel versions

CentOS 6.10 and above (64-bit)

Supported Not supported
2.6.32-754.el6.x86_64 -----

CentOS 7.8 (64-bit)

Supported Not supported
3.10.0-1127.el7.x86_64    
3.10.0-1127.8.2.el7.x86_64
3.10.0-1127.10.1.el7.x86_64
3.10.0-1127.13.1.el7.x86_64
3.10.0-1127.18.2.el7.x86_64
3.10.0-1127.19.1.el7.x86_64		 -----

CentOS 7.9 (64-bit)

Supported Not supported
3.10.0-1160.2.1.el7.x86_64
3.10.0-1160.2.2.el7.x86_64
3.10.0-1160.6.1.el7.x86_64
3.10.0-1160.el7.x86_64		 -----

Cloud Linux 6.10 and above (64-bit)

Supported Not supported
2.6.32-954.3.5.lve1.4.63.el6.x86_64 2.6.32-673.26.1.lve1.4.24.el6.x86_64

Cloud Linux 7.8 and above  (64-bit)

Supported Not supported
3.10.0-962.3.2.lve1.5.33.el7.x86_64 3.10.0-714.10.2.lve1.5.17.el7.x86_64
3.10.0-962.3.2.lve1.5.26.2.el7.x86_64
3.10.0-962.3.2.lve1.5.32.el7.x86_64

Cloud Linux 7.9 and above  (64-bit)

Supported Not supported
3.10.0-962.3.2.lve1.5.39.el7.x86_64 3.10.0-714.10.2.lve1.5.17.el7.x86_64
3.10.0-962.3.2.lve1.5.26.2.el7.x86_64
3.10.0-962.3.2.lve1.5.32.el7.x86_64

Ubuntu 16.04.7 and above (LTS 64-bit)

How to update Linux kernel with dependencies

CentOS

  1. Select the $KERNEL_VERSION that needs to be updated.
  2. "yum install kernel-$KERNEL_VERSION"
  3. "yum install kernel-devel-$KERNEL_VERSION"
  4. Make sure that "/lib/modules/$KERNEL_VERSION" and "/usr/src/kernels/$KERNEL_VERSION" exist.
  5. Reboot with $KERNEL_VERSION.

CloudLinux

  1. Make sure repos are enabled in "/etc/yum.repos.d/cloudlinux.repo"
  2. Select the $KERNEL_VERSION that needs to be updated.
  3. "yum install kernel-$KERNEL_VERSION"
  4. "yum install kernel-devel-$KERNEL_VERSION"
  5. Make sure that "/lib/modules/$KERNEL_VERSION" and "/usr/src/kernels/$KERNEL_VERSION" exist.
  6. Reboot with $KERNEL_VERSION.

Troubleshooting

If yum install fails with "No package kernel-devel-<version>.x86_64 available. Error: Nothing to do", it might indicate that this kernel-devel is in the updates-testing. You need to run yum install with --enablerepo=cloudlinux-updates-testing, or enable "cloudlinux-updates-testing" in /etc/yum.repos.d/cloudlinux.repo

Ubuntu

  1. Select the $KERNEL_VERSION that needs to be updated.
  2. "apt-get install linux-image-$KERNEL_VERSION"
  3. "apt-get install linux-headers-$KERNEL_VERSION"
  4. Make sure that "/lib/modules/$KERNEL_VERSION" and "/usr/src/linux-headers-$KERNEL_VERSION" exist.
  5. Reboot with $KERNEL_VERSION.

How to manually install file_protector

1. Preparation

  1. Install Kernel source of the current kernel
    1. For CentOS, CloudLinux: 
      # yum install kernel-devel-$(uname -r)
    2. For Debian, Ubuntu:
      # apt install linux-headers-$(uname -r)
  2. Install 'file_protector' module source, by running the Backup Agent installer.
  3. Install the necessary tools: gcc, make, dkms.

2. Module building and installation

Normally, you can build and install 'file_protector' kernel module by running the "dkms" commands as follows:

# dkms build -m file_protector -v <MODULE_VERSION> \
   --config <CONFIG_FILE> --arch <KERNEL_ARCH> \
   --kernelsourcedir <PATH_TO_KERNEL_SOURCES>
# dkms install -m file_protector -v <MODULE_VERSION>

In these commands:

  1. <MODULE_VERSION> is the version of the 'file_protector' module. You can determine it by running the following command:
    # ls /usr/src | grep file_protector 
    For example, if the name of the directory is 'file_protector-1.1-1484', the value of <MODULE_VERSION> is '1.1-1484'.
  2. <CONFIG_FILE> is the name of your kernel configuration file. This file is usually located in the /boot directory. Specify the full file name, for example: /boot/config-2.6.32-573.26.1.el6.x86_64.
  3. <KERNEL_ARCH> is the type of kernel architecture, for example, 'x86_64'. You can detect the value for <KERNEL_ARCH> by running the following commands:
    1. For RPM-based distributions:
      # rpm -q --queryformat "%{ARCH}\n" kernel
    2. For distributions not based on RPM, such as Ubuntu:
      # uname -m
  4. <PATH_TO_KERNEL_SOURCES> is the path of the kernel source, for example, '/usr/src/kernels/2.6.32-573.26.1.el6.x86_64'.

For details about using the dkms utility, refer to the dkms man page.

After installation, you can check the status of 'file_protector' by running:

# dkms status

3. Module loading

After installation, you can load the 'file_protector' module by running:

# modprobe file_protector