CentOS - Aug 2016 - Linux TCP flaw

Thanks for the info Peter.
The VPS is running on a Plesk environment.


------ Original Message ------
From: "Peter" <peter at pajamian.dhs.org>
To: centos at centos.org
Sent: 12/08/2016 3:36:32 PM
Subject: Re: [CentOS] Linux TCP flaw
>On 12/08/16 17:33, Andrew Dent wrote:
>>  So after reading this, felt I should apply the fix to a CentOS6 VPS 
>>that
>>  I have.
>>  
>>http://www.zdnet.com/article/linux-tcp-flaw-lets-anyone-hijack-internet-traffic/
>>
>>  [root at vps ~]# uname -r
>>  2.6.32-042stab108.7
>
>That's not a CentOS kernel, it's an openvz kernel that is not
provided
>by CentOS.  The fixes and workarounds shown on the internet will not
>work with that kernel.
>
>I suggest you find a better VPS provider, what you have is essentially 
>a
>glorified chroot, not a real VPS and there are many aspects of CentOS
>that are simply broken in that model.
>
>
>Peter
>_______________________________________________
>CentOS mailing list
>CentOS at centos.org
>https://lists.centos.org/mailman/listinfo/centos

On 08/12/2016 05:58 AM, Andrew Dent wrote:
> Thanks for the info Peter.
> The VPS is running on a Plesk environment.
> 
Right, and in a Plesk environment there is only one kernel on the main
machine, and all the VPS machines use it.  So the hosting provider has
to make all kernel mods.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20160812/465e177d/attachment-0001.sig>