pignore not working

[Urbaman75]

Hi,

I installed a docker on my machine, running a Discourse instance.

On the host machine, lfd coninues to call out Excessive Resource usage for some commands that I really think are coming from the docker.

Examples:

Code: Select all

Executable:   /usr/local/bin/ruby
Command Line: unicorn worker[5] -E production -c config/unicorn.conf.rb
---
Executable:   /usr/local/bin/ruby
Command Line: unicorn master -E production -c config/unicorn.conf.rb
---
Executable:   /usr/local/bin/ruby
Command Line: sidekiq 6.0.5 discourse [0 of 5 busy]

I set these lines in csf.pignore:

Code: Select all

cmd:unicorn master -E production -c config/unicorn.conf.rb
cmd:/bin/bash config/unicorn_launcher -E production -c config/unicorn.conf.rb
cmd:unicorn worker[0] -E production -c config/unicorn.conf.rb
cmd:unicorn worker[1] -E production -c config/unicorn.conf.rb
cmd:unicorn worker[2] -E production -c config/unicorn.conf.rb
cmd:unicorn worker[3] -E production -c config/unicorn.conf.rb
cmd:unicorn worker[4] -E production -c config/unicorn.conf.rb
cmd:unicorn worker[5] -E production -c config/unicorn.conf.rb
cmd:unicorn worker[6] -E production -c config/unicorn.conf.rb
cmd:unicorn worker[7] -E production -c config/unicorn.conf.rb
cmd:sidekiq 6.0.5 discourse [0 of 5 busy]

But the emails from lfd are continuing to arrive.
I do not want to whitelist the full ruby exe, is there a way to properly whitelist the cmds?

Thank you.