"pcscd PC/SC Smart Card Daemon" ?

jimp

This is in an internal PR which will be merged soon:

diff --git a/src/etc/inc/service-utils.inc b/src/etc/inc/service-utils.inc
index e74acbfb1fb8334a8f7fc717bf58d5449ad8593d..c0a891ced023cc7abaf87bbba1c9611d03c482a6 100644
--- a/src/etc/inc/service-utils.inc
+++ b/src/etc/inc/service-utils.inc
@@ -270,12 +270,14 @@ function get_services() {
 		$services[] = $pconfig;
 	}
 
-	$pconfig = array();
-	$pconfig['name'] = "pcscd";
-	$pconfig['description'] = gettext("PC/SC Smart Card Daemon");
-	$pconfig['enabled'] = is_service_enabled("pcscd");
-	$pconfig['status'] = get_service_status($pconfig);
-	$services[] = $pconfig;
+	if (isset($config['ipsec']['pkcs11support'])) {
+		$pconfig = array();
+		$pconfig['name'] = "pcscd";
+		$pconfig['description'] = gettext("PC/SC Smart Card Daemon");
+		$pconfig['enabled'] = is_service_enabled("pcscd");
+		$pconfig['status'] = get_service_status($pconfig);
+		$services[] = $pconfig;
+	}
 
 	if (is_array($config['ntpd']) && ($config['ntpd']['enable'] != 'disabled')) {
 		$pconfig = array();

DaddyGo

@gertjan said in "pcscd PC/SC Smart Card Daemon" ?:

but it was element ninth that had to be removed.

the whole world can see how a small thing can generate a big question..

no one, but no one, is so concerned about the NSO scandal...
(I hate the politic, - personally)

this is also informatics, in my reading I hope..
(pcscd PC/SC Smart Card Daemon)

BTW:
before anyone attacks this souvenir of my opinion, excuse me

DaddyGo

@johnpoz said in "pcscd PC/SC Smart Card Daemon" ?:

And don't forget

hello everyone, I just received, now... (2 minutes ago)

hahaha, I'm going home!!! - finaly

stephenw10

Nice. Take care!

DaddyGo

@stephenw10 said in "pcscd PC/SC Smart Card Daemon" ?:

Nice. Take care!

Thanks for everyone huhuhuhuhuh, I'm traveling
I can finally hug my mum, who is 69 years old, the greatest mom!

+++edit:

I know everyone's mum is great! :)

digard

@anthonys Thanks a bunch! - Had my memory ramping up to the hilt (96%) within a few days, even killing DNS for lack of space. Then I found around 1 G used up for pcscd. Followed your suggestion, and immediately everything was down to normal.

I for one call that a real bugger!

albgen

Hello!

Current setup is pfsense 2.5.2 as a virtual appliance. I'm connected via RDP on a server on the LAN side. Basically i noted some freezing rdp issues. Than i started to ping and i saw timeout so the issue is with pfsense. As you can see i'm running out of memory. Since a reboot can easily fix this, my question is can i troubleshoot it? Any idea what is happening? the /usr/local/sbin/pcscd is eating almost 60% of ram and the swap is gone...
why it is even running the pcscd process?

edit: ok i see it is a known problem but why they have not fixed it yet :)

stephenw10

It's fixed in 2.6 and 21.09. Before then you can apply patch to 2.5.2 if you are affected:
https://redmine.pfsense.org/issues/11933#note-7

Steve

Gertjan

@albgen said in "pcscd PC/SC Smart Card Daemon" ?:

but why they have not fixed it yet :)

Because a newer version isn't released yet.
The code is merged.
Merged to into what becomes later on a future version of pfSense.

But why wait ?

You saw the code jimp posted (above).

Stop the pcscd process manually first.
Install the patches pfSense package.
Create a patch.
Copy paste the code jimp showed (see above)
Give it a description - like the URL of the forum thread.
Now : Ok - Test - and Apply.
Done.

Example :

When you created the patch, you wind up having this :

Now,
Test,
Apply.
Solved.

albgen

@gertjan @stephenw10 thanks guys

fireodo

@gertjan said in "pcscd PC/SC Smart Card Daemon" ?:

Create a patch.

Done

Copy paste the code jimp showed (see above)

Done

Give it a description - like the URL of the forum thread.

Done

Now : Ok - Test - and Apply.

APPLY is missing ... Hmmmm

SteveITS

@fireodo said in "pcscd PC/SC Smart Card Daemon" ?:

APPLY is missing

Did you Fetch (download) it? (docs) Or, if it doesn't show Apply it might not have been entered correctly, and the package is smart enough to not let you break things. The very first one I did I accidentally pasted in he wrong URL and ran into that.

If nothing else you can just stop the service (Status/Services page) until 21.09 is out. Presumably your router won't restart that often...

fireodo

@steveits said in "pcscd PC/SC Smart Card Daemon" ?:

Presumably your router won't restart that often...

Indeed. I will wait ...

stephenw10

Indeed if it doesn't show 'apply' that means it cannot be applied.

What are version are you trying to patch?

You are using this commit ID in the patch? afcc0e9c97c1993ae6b95f886665fcb4375d26c7

Steve

fireodo

@stephenw10 said in "pcscd PC/SC Smart Card Daemon" ?:

What are version are you trying to patch?

2.5.2

You are using this commit ID in the patch? afcc0e9c97c1993ae6b95f886665fcb4375d26c7

Yes.

stephenw10

Hmm, that should work, I just retested it to be sure. The only reason it wouldn't is if you already have some other changes to the files it's trying to patch.

Steve

fireodo

@stephenw10 said in "pcscd PC/SC Smart Card Daemon" ?:

The only reason it wouldn't is if you already have some other changes to the files it's trying to patch.

You're probably right - its not so important for me ...

Edit1: Found the culprit (its me) - I changed the rc.bootup manually with the modifications that came with the patch some time before ...

Edit2: I revert the changes I made and now the Patch applies correctly.

Sorry!

ozone

@jimp Just noting that saving the page with the newly present box unchecked was enough to stop the service. It did not require a reboot.

dereitz

I was investigating why my pfsense box was using over 6GB of "laundry memory" and additionally was using swap space and finally ran across this thread. Sure enough, pcscd was running on my box and was the culprit. Thanks to this thread, I was able to disable the service and immediately my memory usage went back to normal!

Another great catch by the community.. Thank you all!
-David

SjM

This is interesting.

2.5.2-RELEASE (amd64)
built on Fri Jul 02 15:33:00 EDT 2021
FreeBSD 12.2-STABLE

pfBlockerNG was starting cron jobs which didn't complete to the extent that it was consuming 100% of CPU time. Couldn't figure out what was going awry. I came across this discussion and saw the process pcscd was running on my system. After I killed pcscd the system is behaving as it should on about 4-7% CPU utilization!

Weird.

Next thing is how do I apply the patch to stop pcscd loading at startup? I don't seem to have the option to apply a patch under the system menu of pfSense.