Excessive resource usage: dbus (AlmaLinux 9.x)

You may receive following email from Config Server Firewall (CSF or LFD monitor): "Excessive resource usage: dbus (740 (Parent PID:736)" under account "dbus". This false positive warning triggered by CSF firewall.

What is "dbus" or "Desktop Bus"?

The dbus-broker project is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation.

D-bus is a message-oriented middleware mechanism that allows communication between multiple processes running concurrently on the same machine.

How to disable "excessive resource usage" in CSF?

The resource usage limits can be modified by changing the PT_USERMEM and PT_USERTIME settings from the "Firewall Configuration" settings of "ConfigServer Security & Firewall" in WHM.

Alternatively, you can configure LFD to ignore certain processes or users in the /etc/csf/csf.pignore file. Add the following line under all excluded processes:

exe:/usr/bin/dbus-broker

Then save /etc/csf/csf.pignore and then restart config server firewall via WHM.

If you need any assistance with server upgrade, OS reload or account restore / transfer, please contact us at any time: help@nyhost.net. If you have dedicated server, VPS or VDS with us, server management is free of charge.