Question Disable lfd "Suspicious process running under xxx"

[lepe]

Hi all

I am trying one week ago and I cant stop the emails from lfd alerts such as "Suspicious process running under xxx"

I tried changing code in csf.conf to:

LF_EMAIL_ALERT = 0
PT_USERMEM = 0
PT_USERTIME = 0

Later I wrote "csf -r" and "systemctl restart lfd" but emails dont stops

A bit help please??


thank you

 

[MarkM]

don't disable them as that's bad security; whitelist the process in /etc/csf/csf.pignore.

 

[lepe]

Hi Mark

Do you know say me what code should I add to csf.pignore for dont receive more lfd alert emails??

thank you very much