lfd Process match for Ruby on Rails

[paulkoan]

Hello,

Ruby on Rails under cpanel uses the mongrel server, and so is a long running process that needs to be ignored by lfd.

The process is:

/usr/bin/ruby /usr/bin/mongrel_rails start -p xxx -d -e production -P log/mongrel.pid

I don't want to ignore all long running ruby processes, so I'd like to be able to include the parameter in the csf.pignore match:

Code: Select all

pexe:/usr/bin/ruby /usr/bin/mongrel_rails

This doesn't work, but before I go rooting through the code, does anyone know whether lfd looks past the running process executable to even be able to match on parameters?

Thanks,

Paul Murphy

[chirpy]

That's because you haven't used a full regex. The following should work:

pexe:/usr/bin/ruby /usr/bin/mongrel_rails .*

[paulkoan]

Thanks chirpy..

This doesn't work, which I guess brings me back to the question - does anyone know whether lfd looks at a process' parameters when doing a match?

[gbh]

Does anyone have any further thoughts on this at all?

I'm trying to make an exception for this:


Executable:

/usr/bin/ruby-bin (deleted)

Command Line (often faked in exploits):

/usr/bin/ruby -I /home/postergr/ruby /usr/bin/mongrel_rails start -p 12001 -d -e development -P log/mongrel.pid