Bugs and errors under the hood (I/O Waiting processes)

hey all
I have been hardening and optimizing my system lately and I am really happy with Manjaro and my setup, however I would like to know if there are any errors under the hood.
How do I know if there are some things running in the background that are causing trouble?

One thing I found out through lynis for instance is that one or more processes which were waiting to get IO requests handled first.

With this command I checked what it was:
while true; do date; ps auxf | awk '{if($8=="D") print $0;}'; sleep 1; done

the output from that command for me is this (repeatedly):
Sun Dec 6 12:13:31 PM CET 2020
root 93931 0.0 0.0 0 0 ? D 12:08 0:00 _ [kworker/u16:38+events_unbound]

I have a few questions:

  • Is it harmful?
  • How do I fix this (is there a fix?)?
  • How to find and solve more “bugs” like this?

Thank you in advance

That is no bug - nor error - it is a kernel process

https://duckduckgo.com/?q=is+kworker+harmful

1 Like

You could try to look at the output of systemd-analyze security also…
Don’t be alarmed at the status of most system utilities that were installed by the official repos though, you could just check for unknown services…

You could try to look at the output of systemd-analyze security also…
Don’t be alarmed at the status of most system utilities that were installed by the official repos though, you could just check for unknown services…

how do you harden this?
I guess i need to change settings in the .services files?
but i don’t know what to do, I also could not really find a guide
does anybody maybe know how to tackle this?

Did you check the search engines?
Here is a search result which should give you a start :wink:

https://duckduckgo.com/?q="systemd"+hardening+services&norw=1&t=ffnt&ia=web

I know it’s kind of lame to give a link to search results, but the subject is so diverse and deep that it’s beyond scope to post here…

alright thanks man, it’s a complicated topic indeed i wish there was some kind of guide that said which services need which settings for instance.
but thanks for the link

here is another link with possible service settings:
https://www.freedesktop.org/software/systemd/man/systemd.exec.html#Sandboxing

:sweat_smile:
Would you believe me if i told you that i have a whole submenu of bookmarks related to Systemd alone?
That page is among them :wink:

1 Like