Bugzilla – Bug 1213147
[doc] Issue in "Performing Kernel Live Patching"
Last modified: 2023-08-07 10:08:18 UTC
Performing Kernel Live Patching: https://documentation.suse.com/sles/15-SP3/html/SLES-all/cha-klp.html#sec-klp-perform Please add information to the docs informing the admin that the output of the uname command will NOT change when live patching is used. Instead the klp command is to be used. This is often a confusion of customers new to live patching and security tools that scan servers only with the "uname -a" command to determine if a server has any outstanding CVEs that need to be applied.
Thank you for reporting this bug! It is being tracked and processed as part of our queue.
progress tracked in https://github.com/SUSE/doc-sle/pull/1567/files @Paul, can you review pls?
Hi Tomas, It is minor edit but you can change "uname -a" to "uname -r" or better just "uname". Also it would be best to have engineering review to see if anything else should be mentioned in this change. Note that below is an an article dedicated to live patching for RHEL that makes this point very clear. Of course for SLE it is similar but not exactly the same: https://blog.dorianbolivar.com/2020/08/linux-kernel-live-patching-with-kpatch.html
fixed by https://github.com/SUSE/doc-sle/commit/34d7c9009b665545267ae71bbc0536a51129a07e
Thank you Tomáš! It is much clearer now.