Skip to content

Commit

Permalink
Merge pull request #20 from annlev/master
Browse files Browse the repository at this point in the history
TCR-241
  • Loading branch information
annkots authored Sep 5, 2023
2 parents df04a09 + 5804e6d commit f7eff46
Showing 1 changed file with 11 additions and 5 deletions.
16 changes: 11 additions & 5 deletions docs/live-patching-services/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -1539,13 +1539,15 @@ This document is made for developers of vulnerability scanners to correctly repo

### Easiest: Identifying correctly the effective kernel

KernelCare provides "effective kernel" information in the
KernelCare provides "effective kernel" information in

- `/proc/kcare/effective_version`
```
/proc/kcare/effective_version
```

Security scanners can check if the file is present, and if it is, use it instead of /proc/version to identify the kernel. This will provide an effective kernel version from a security standpoint.

Alternatively, the command:\_ _<mark>_/usr/bin/kcarectl --uname _</mark>_ c_an be run instead of the <mark>\_uname_</mark> command to detect effective kernel version
Alternatively, the command `/usr/bin/kcarectl --uname` can be run instead of the `uname` command to detect effective kernel version

### Comprehensive: Using OVAL data

Expand All @@ -1561,11 +1563,15 @@ KernelCare provides two files listing the vulnerabilities the currently installe

The list of vulnerabilities addressed by Kernel live patches is available at:

- `/proc/kcare/cvelist`
```
/proc/kcare/cvelist
```

The list of vulnerabilities addressed by system live patching (LibCare, QEMUCare, etc.) is available at:

- `/var/cache/kcare/libcare_cvelist`
```
/var/cache/kcare/libcare_cvelist
```


0 comments on commit f7eff46

Please sign in to comment.