Dirty Cow fix kernel update for CloudLinux causes Plesk inoperability

Created:

2016-12-12 03:44:45 UTC

Modified:

2017-08-08 13:21:53 UTC

1

Was this article helpful?


Have more questions?

Submit a request

Dirty Cow fix kernel update for CloudLinux causes Plesk inoperability

Applicable to:

  • Plesk 12.5 for Linux
  • Plesk Onyx for Linux

Symptoms

After applying the latest kernel update Dirty Cow fix on CloudLinux 7, the following issues occur in Plesk:

Error: Unable to execute usermng: sh: /usr/local/psa/admin/bin/usermng: Permission denied

Also, Plesk may show that license is invalid, but after 'psa' service restart another error appears like:

ERR [panel] Task async execution failed: file does not exist or is not executable: /usr/local/psa/admin/bin/php

Cause

This is a bug in Cloudlinux kernel 3.10.0-427.18.2.lve1.4.23.el7.x86_64 . Cloudlinux will release a patch for this issue.

Resolution

According to CloudLinux documentation for kernels 3.10.0-427.36.1.lve1.4.42+ set "global_root_enable=0":

# cat /proc/sys/fs/global_root_enable
0

For kernels below 3.10.0-427.36.1.lve1.4.42, disable symlink owner match protection feature by setting "fs.enforce_symlinksifowner" parameter to 0:

# cat /etc/sysctl.conf | grep fs.enforce_symlinksifowner
fs.enforce_symlinksifowner = 0

And run

# sysctl -p
Have more questions? Submit a request
Please sign in to leave a comment.