E-mails with information: "Resource: Process Time (rpcbind or other daemons)"
- CSF installed
These alerts are provided by the LFD/CSF firewall. The cause for such notifications is that the execution time alarm level is set to "PT_USERTIME = "1800" in
/etc/csf/csf.conf. And this value was exceeded by the rpcbind (for example) service. It was caused by the long execution time of the rpcbind process which is expected.
If required, rpcbind daemon may be excluded (if it is legitimate) from notifications by following the steps below:
- Add the line
exe:/usr/sbin/rpcbindto the file
/etc/csf/csf.pignoreusing any text editor.
- Restart CSF and LFD to apply changes:
csf -r service lfd restart