Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Monday, December 12, 2016 4:56 PM
Hi there, we have an Ubuntu 14.04 VM in the Canada Central DC that is experiencing extremely high CPU usage due to the azsecd process. The VM runs normal, but intermittently we experience a spike in CPU usage from azsecd which eventually brings the VM to a crawl, forcing us to kill the process or do a restart. As you can see in the screenshot below, azsecd's tree is spawning bash and find, which is taking up 95.7% of the CPU, and has continued for over 37 hours!
Without knowing much about azsecd, I am suspicious that it is scanning the entire filesystem for vulnerable files which *could* be an issue for us. We have a mounted Azure File share which is attached to the system via fstab (actually autofs), and this share has millions (5+ million) files on that share. Could it be that azsecd is trying to traverse all of the files on the mount and it's just slowing down the system?
Is there a way to shut this process down completely or make it behave? It's severely hindering performance for us.
Thank-you in advance for any help!
All replies (3)
Tuesday, December 13, 2016 7:27 AM | 1 vote
Hi
It maybe caused by LinuxAsm. LinuxAsm scan your VM to protect your VM. However, you have 5+ million files on your VM. Base on my knowledge, it would cost much time to scan your file by using find.
If you don't want LinuxAsm to scan your VM, maybe you could uninstall extension LinuxASM. After you uninstall it, the process azsecd would be killed and the file azsecd would be deleted.
The LinuxASM is used if you enable the Azure Security Center. Azure Security Center applies to all the VMs in a subscription.
More information please refer to the following article:
/en-us/azure/security-center/security-center-faq
If you still have questions, welcome to post back here. Thanks.
Regards,
Walter
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, December 13, 2016 9:25 PM
Thank-you, I will try uninstalling it and see if that helps. Much appreciated!
Wednesday, December 14, 2016 3:20 AM
Hi
Hope this help.
Regards,
Walter
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].