Suspicious process – configuration help

[gunverth]

Hi! Here’s a question about the backup.env configuration. Edits works fine except this one.

A ”kernel-style” process triggers a warning in the log. How is this supposed to be added to the configuration at SAFE_PROCESSES= SAFE_KERNEL_PROCESSES= or SAFE_BRACKET_PROCESSES=? In my case the celeryd process from a Paperless LXC. Proxsave won’t ignore it no matter how I add it, exact match or regex. Below is the log entry:

Suspicious kernel-style process: celeryd: celery@paperless:ForkPoolWorker-3057 (PID [1204684](tel:1204684), user 100000) WARNING

Proxsave is working really good otherwise. Keep up the good work!

[tis24dev]

Hi @gunverth,

That warning comes from the bracketed/kernel-style detector, not the suspicious-process scan, so SAFE_PROCESSES won't touch it. Use SAFE_BRACKET_PROCESSES (or SAFE_KERNEL_PROCESSES).

Also, on those two lists a plain name means an exact, whole-string match, so celeryd doesn't match celeryd: celery@paperless:ForkPoolWorker-3057. Use a wildcard or regex instead:

SAFE_BRACKET_PROCESSES="celeryd*"

I've also clarified this in the docs/template. Thanks for the report!

[gunverth]

That did it! Also learning about the ”:”

SAFE_BRACKET_PROCESSES="celeryd*"

Thank you!

[tis24dev]

Great! If you like the project and want to support us so we can keep improving it, even a small donation is always appreciated!