Re: find processes older than 24 h

[Mark . Burgess]

It is more difficult to do this. If you don't want users
to be able ti run certain programs, you could consider restricting
access to the programs, rather than trying to kill them afterwards.
If that is not possible, then you need to find regular expressions
and filters which can do this for you.. there is currently no
easier way to do this.

Mark


On 26 Feb, Faeth Markus wrote:
> ->processes:
> -------------------------------------
> I was able to configure cfengine to check if all necessary processes are
> working and to warn if not. Now a question is
> how can I check for processes that are not configured... like shell
> processes and so on that aren't allowed to be there?
> I tried to write a complicated regular expression to do so, but it did't
> work.
> 
> Another problem is that I have to check for httpd processes that are working
> more than 24 hours. I thought with 'filters' it can't
> be that difficult, but I couldn't manage it:
> 
> ...
> filters:
>    { httpd
>       FromSTime:      "accumulated(0,0,1,0,0,0)" 
>       ToSTime:        "inf"
>       Result: "STime"
>    }
> ...
> processes:
>    "/usr/bin/httpd" filter=httpd action=warn
> ...
> 
> results in a 'Segmentation Fault'!
> surely you have some experience and can help me build the right statement.
> 
> 
> Greetings
> Markus Faeth
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~