1

I have OpenVZ running on a box with CSF / LFD installed.

I like the way LFD can alert me of suspicious processes running on the HardwareNode itself.

However, LFD is emailing me about every suspicious process that the VE's are running.

Is there a way to make LFD ignore the /vz/root directory entirely?

Regards, Chris

Squeeb
  • 152
  • 1
  • 13

1 Answers1

0

You need to tweak /etc/csf/csf.pignore (on the host) to your requirements. In most cases we tend to ignore certain process on VMs like this:

exe:/var/lib/vz/root/*/usr/sbin/mysqld
exe:/var/lib/vz/root/*/usr/sbin/portmap
exe:/var/lib/vz/root/*/sbin/portmap
luison
  • 273
  • 1
  • 7
  • 21