haldaemon process

[thewebhosting]

Since last few days, I am keep receiving below notifications from the server. Can anybody through some light on what does this mean and how can I fix this?

=========================================================

Account: haldaemon
Resource: Process Time
Exceeded: 3589037 > 1800 (seconds)
Executable: /usr/sbin/hald?rt serial adapto (deleted)

The file system shows that this executable file that the process is running has been deleted. This typically happens if the original file has been replaced by a new file when the application is updated. To prevent this being reported again, restart the process that runs this excecutable file.

Command Line: hald
PID: 4308
Killed: No

=========================================================

[rhenderson]

That is a csf report not a cPanel.

Make sure

exe:/usr/sbin/hald

Is in your csf.pignore file you can check that in WHM >> ConfigServer Security & Firewall >> lfd Process Ignore

[thewebhosting]

Yes, exe:/usr/sbin/hald code is there in WHM >> ConfigServer Security & Firewall >> lfd Process Ignore

Any other suggestions?

[Infopro]

Follow the changelog at configserver.com a bit closer?

http://www.configserver.com/blog/index.php?itemid=338

[rhenderson]

Follow the changelog at configserver.com a bit closer?

http://www.configserver.com/blog/index.php?itemid=338

That change log states /usr/libexec/hald-addon-keyboard which should have been added to the ignore list on updates. What version of CSF are you running? 4.28 is the latest.

[thewebhosting]

We are using ConfigServer Security & Firewall - csf v4.29

[ffeingol]

thewebhosting

service hald restart
service lfd restart

Then you should be fine. lfd gets a bit "confused" if hald (or any other process) gets updated while it's running. if you look at /var/log/lfd it will prob. say something about that process running a deleted file (or something similar, I don't remember the exact phrase).