E-mails with information: "Resource: Process Time (rpcbind or other daemons)"

Issue

E-mails with information: "Resource: Process Time (rpcbind or other daemons)"

Environment

• CSF installed

Solution

These alerts are provided by the LFD/CSF firewall. The cause for such notifications is that the execution time alarm level is set to "PT_USERTIME = "1800" in/etc/csf/csf.conf. And this value was exceeded by the rpcbind (for example) service. It was caused by the long execution time of the rpcbind process which is expected.

If required, rpcbind daemon may be excluded (if it is legitimate) from notifications by following the steps below:

1. Add the lineexe:/usr/sbin/rpcbindto the file/etc/csf/csf.pignoreusing any text editor.
2. Restart CSF and LFD to apply changes:

csf -r
service lfd restart