How to configure LFD so that it does not kill cPanel related processes due to excessive resource usage warnings

Question

It is possible that cPanel-related tasks, such as using the Transfer Tool, could trigger ConfigServer's LFD to kill the cPanel-related processes, depending on the limits you have set. You can determine if LFD is killing processes with the following command:

# grep Kill:1 /var/log/lfd.log

The following procedure outlines how you can whitelist cPanel-related processes so that they are exempt from LFD's monitoring.

Note: ConfigServer's LFD software is not created by, provided by, or directly supported by cPanel. The following information is provided as a courtesy only, and cPanel support cannot assist with performing the process outlined below. If you need assistance with configuring LFD, you may need to work with a System Administrator experienced with maintaining CSF and LFD. 

Answer

Warning: Before proceeding with the steps below, it is important that you understand the security implications involved in whitelisting these processes if you intend to leave them in the configuration permanently. If you are not sure, you should remove the configuration as soon as you have completed your transfer. cPanel support is not able to assist with providing clarification on this topic relating to third-party software.

1. Log in to WHM as the root user
2. Navigate to: Home / Plugins / ConfigServer Security & Firewall.
3. Scroll to the lfd - Login Failure Daemon section.
4. Click on the dropdown next to: Edit lfd ignore file.
5. Select Process Tracking.

6. Review the configuration and uncomment any of the existing cPanel processes that you would like for LFD to ignore. This is also an opportunity to review the documentation within the configuration file to become more familiar with how to edit the configuration.

   Note: if the service that you want to ignore is not already listed, you can review the /var/log/lfd.log file to find the processes that are being killed by LFD

7. The following is an example of how you can whitelist the cPanel Transfer Tool processes:

   # exe:/usr/bin/tar
   exe:/usr/bin/rsync

8. Once you have made your desired changes, click the Change button

Note: The above example configuration should work to whitelist the cPanel Transfer Tool, but it may not be optimal for long-term use. If you intend to use this configuration for any extended length of time, consult with individuals who are more familiar with ConfigServer software.