Difference between revisions of "Psmon"
m |
|||
| Line 1: | Line 1: | ||
| − | = | + | = Process Monitor = |
| + | ASL includes a process monitor to ensure that services configured to run by the chkconfig or systemctl systems continue to run. If a service dies, ASL will automatically restart the process. | ||
| + | == Adding services to monitor == | ||
| + | |||
| + | To add a service, simply enable it via chkconfig or systemctl and then generate the ASL policy for the systems current start. The following steps will do this: | ||
| + | |||
| + | === Step 1: enable a service === | ||
| + | |||
| + | As the root user, run the command: | ||
| + | |||
| + | systemctl enable <servicename> | ||
| + | |||
| + | Example: | ||
| + | |||
| + | systemctl enable httpd | ||
| + | |||
| + | === Step 2: Generate the ASL policy === | ||
| + | |||
| + | asl -s -f | ||
| + | |||
| + | And you're done. | ||
| + | |||
| + | == Removing services to monitor == | ||
| + | |||
| + | To remove a service, simply disable it via chkconfig or systemctl and then generate the ASL policy for the systems current start. The following steps will do this: | ||
| + | |||
| + | === Step 1: enable a service === | ||
| + | |||
| + | As the root user, run the command: | ||
| + | |||
| + | systemctl disable <servicename> | ||
| + | |||
| + | Example: | ||
| + | |||
| + | systemctl disable httpd | ||
| + | |||
| + | === Step 2: Generate the ASL policy === | ||
| + | |||
| + | asl -s -f | ||
| + | |||
| + | And you're done. | ||
| + | |||
| + | == Disabling PSMON == | ||
| + | Note: It is not recommended that you disable the process monitor. Doing so will also tell ASL to not monitor its own services, and if a service fails for any reason ASL will not restart the service. | ||
1) edit /etc/asl/config, set the following: | 1) edit /etc/asl/config, set the following: | ||
| Line 14: | Line 57: | ||
3) kill the psmon process(es): | 3) kill the psmon process(es): | ||
| − | killall psmon | + | killall -9 psmon |
Revision as of 15:18, 8 December 2016
Contents |
Process Monitor
ASL includes a process monitor to ensure that services configured to run by the chkconfig or systemctl systems continue to run. If a service dies, ASL will automatically restart the process.
Adding services to monitor
To add a service, simply enable it via chkconfig or systemctl and then generate the ASL policy for the systems current start. The following steps will do this:
Step 1: enable a service
As the root user, run the command:
systemctl enable <servicename>
Example:
systemctl enable httpd
Step 2: Generate the ASL policy
asl -s -f
And you're done.
Removing services to monitor
To remove a service, simply disable it via chkconfig or systemctl and then generate the ASL policy for the systems current start. The following steps will do this:
Step 1: enable a service
As the root user, run the command:
systemctl disable <servicename>
Example:
systemctl disable httpd
Step 2: Generate the ASL policy
asl -s -f
And you're done.
Disabling PSMON
Note: It is not recommended that you disable the process monitor. Doing so will also tell ASL to not monitor its own services, and if a service fails for any reason ASL will not restart the service.
1) edit /etc/asl/config, set the following:
PSMON_ENABLED="no"
2) Update the security policy:
asl -s -f
3) kill the psmon process(es):
killall -9 psmon
4) Remove the packaage:
rpm -e psmon --nodeps
