public inbox for [email protected]
help / color / mirror / Atom feedAnti virus scanning for Postgres database servers
7+ messages / 5 participants
[nested] [flat]
* Anti virus scanning for Postgres database servers
@ 2025-09-22 20:03 soumen rana <[email protected]>
2025-09-23 04:18 ` Re: Anti virus scanning for Postgres database servers Ian Lawrence Barwick <[email protected]>
2025-09-23 06:22 ` Re: Anti virus scanning for Postgres database servers Laurenz Albe <[email protected]>
2025-09-23 12:47 ` Re: Anti virus scanning for Postgres database servers srinivasan s <[email protected]>
0 siblings, 3 replies; 7+ messages in thread
From: soumen rana @ 2025-09-22 20:03 UTC (permalink / raw)
To: [email protected]
Hi Everyone,
The oganization I work for uses some postgres databases installed on Linux
servers. The security team is planning to initiate Microsoft Defender Anti
Virus scanning on these servers in an "Active" mode.
This will mean that the Postgres Installation directories and files will be
scanned by Microsoft Defender and quarantine any threats.
We have requested to exclude the data directories from the Antivirus
scanning.
Is anyone aware of any performance, operational, or data-loss related
challenges with Anti Virus scanning of Postgres binaries?
Thanking you in advance.
Greetings,
Soumen Rana
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers
2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]>
@ 2025-09-23 04:18 ` Ian Lawrence Barwick <[email protected]>
2 siblings, 0 replies; 7+ messages in thread
From: Ian Lawrence Barwick @ 2025-09-23 04:18 UTC (permalink / raw)
To: soumen rana <[email protected]>; +Cc: [email protected]
2025年9月23日(火) 6:21 soumen rana <[email protected]>:
>
> Hi Everyone,
>
> The oganization I work for uses some postgres databases installed on Linux servers. The security team is planning to initiate Microsoft Defender Anti Virus scanning on these servers in an "Active" mode.
>
> This will mean that the Postgres Installation directories and files will be scanned by Microsoft Defender and quarantine any threats.
>
> We have requested to exclude the data directories from the Antivirus scanning.
> Is anyone aware of any performance, operational, or data-loss related challenges with Anti Virus scanning of Postgres binaries?
I'm pretty sure I've worked on support cases in the past caused by
antivirus software doing things it shouldn't...
If the antivirus software in question modifies files in any way, it
will corrupt your PostgreSQL installation.
A few places warning against using antivirus software on PostgreSQL
data directories:
- https://www.highgo.ca/2021/01/27/avoiding-identifying-and-dealing-with-postgresql-database-corruptio...
- https://www.postgresql.eu/events/pgconfeu2023/sessions/session/4602/slides/406/data_corruption.pdf
- https://docs.microfocus.com/UCMDB/11.0/ucmdb-docs/docs/eng/doc_lib/Content/database/PostgresConfig_c...
Regards
Ian Barwick
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers
2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]>
@ 2025-09-23 06:22 ` Laurenz Albe <[email protected]>
2025-09-23 12:03 ` Re: Anti virus scanning for Postgres database servers Bruce Momjian <[email protected]>
2 siblings, 1 reply; 7+ messages in thread
From: Laurenz Albe @ 2025-09-23 06:22 UTC (permalink / raw)
To: soumen rana <[email protected]>; [email protected]
On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote:
> This will mean that the Postgres Installation directories and files will be
> scanned by Microsoft Defender and quarantine any threats.
>
> We have requested to exclude the data directories from the Antivirus scanning.
> Is anyone aware of any performance, operational, or data-loss related
> challenges with Anti Virus scanning of Postgres binaries?
I think that should be safe, at least until Microsoft starts to perceive
PostgreSQL as a threat...
Yours,
Laurenz Albe
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers
2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]>
2025-09-23 06:22 ` Re: Anti virus scanning for Postgres database servers Laurenz Albe <[email protected]>
@ 2025-09-23 12:03 ` Bruce Momjian <[email protected]>
2025-09-23 15:49 ` Re: Anti virus scanning for Postgres database servers Laurenz Albe <[email protected]>
0 siblings, 1 reply; 7+ messages in thread
From: Bruce Momjian @ 2025-09-23 12:03 UTC (permalink / raw)
To: Laurenz Albe <[email protected]>; +Cc: soumen rana <[email protected]>; [email protected]
On Tue, Sep 23, 2025 at 08:22:51AM +0200, Laurenz Albe wrote:
> On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote:
> > This will mean that the Postgres Installation directories and files will be
> > scanned by Microsoft Defender and quarantine any threats.
> >
> > We have requested to exclude the data directories from the Antivirus scanning.
> > Is anyone aware of any performance, operational, or data-loss related
> > challenges with Anti Virus scanning of Postgres binaries?
>
> I think that should be safe, at least until Microsoft starts to perceive
> PostgreSQL as a threat...
Uh, if the anti-virus software does not modify any files, you are likely
to get false positives when the antivirus software thinks Postgres data
is a virus. If the anti-virus software modifies the data directory in
any way, you are likely to get database corruption or a non-operational
database.
--
Bruce Momjian <[email protected]> https://momjian.us
EDB https://enterprisedb.com
Do not let urgent matters crowd out time for investment in the future.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers
2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]>
2025-09-23 06:22 ` Re: Anti virus scanning for Postgres database servers Laurenz Albe <[email protected]>
2025-09-23 12:03 ` Re: Anti virus scanning for Postgres database servers Bruce Momjian <[email protected]>
@ 2025-09-23 15:49 ` Laurenz Albe <[email protected]>
2025-09-23 16:19 ` Re: Anti virus scanning for Postgres database servers Bruce Momjian <[email protected]>
0 siblings, 1 reply; 7+ messages in thread
From: Laurenz Albe @ 2025-09-23 15:49 UTC (permalink / raw)
To: Bruce Momjian <[email protected]>; +Cc: soumen rana <[email protected]>; [email protected]
On Tue, 2025-09-23 at 08:03 -0400, Bruce Momjian wrote:
> On Tue, Sep 23, 2025 at 08:22:51AM +0200, Laurenz Albe wrote:
> > On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote:
> > > This will mean that the Postgres Installation directories and files will be
> > > scanned by Microsoft Defender and quarantine any threats.
> > >
> > > We have requested to exclude the data directories from the Antivirus scanning.
> > > Is anyone aware of any performance, operational, or data-loss related
> > > challenges with Anti Virus scanning of Postgres binaries?
> >
> > I think that should be safe, at least until Microsoft starts to perceive
> > PostgreSQL as a threat...
>
> Uh, if the anti-virus software does not modify any files, you are likely
> to get false positives when the antivirus software thinks Postgres data
> is a virus. If the anti-virus software modifies the data directory in
> any way, you are likely to get database corruption or a non-operational
> database.
Absolutely. I was commenting the suggestion to exempt the data directory
from the virus scan and only scan the PostgreSQL binaries.
Yours,
Laurenz Albe
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers
2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]>
2025-09-23 06:22 ` Re: Anti virus scanning for Postgres database servers Laurenz Albe <[email protected]>
2025-09-23 12:03 ` Re: Anti virus scanning for Postgres database servers Bruce Momjian <[email protected]>
2025-09-23 15:49 ` Re: Anti virus scanning for Postgres database servers Laurenz Albe <[email protected]>
@ 2025-09-23 16:19 ` Bruce Momjian <[email protected]>
0 siblings, 0 replies; 7+ messages in thread
From: Bruce Momjian @ 2025-09-23 16:19 UTC (permalink / raw)
To: Laurenz Albe <[email protected]>; +Cc: soumen rana <[email protected]>; [email protected]
On Tue, Sep 23, 2025 at 05:49:39PM +0200, Laurenz Albe wrote:
> On Tue, 2025-09-23 at 08:03 -0400, Bruce Momjian wrote:
> > On Tue, Sep 23, 2025 at 08:22:51AM +0200, Laurenz Albe wrote:
> > > On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote:
> > > > This will mean that the Postgres Installation directories and files will be
> > > > scanned by Microsoft Defender and quarantine any threats.
> > > >
> > > > We have requested to exclude the data directories from the Antivirus scanning.
> > > > Is anyone aware of any performance, operational, or data-loss related
> > > > challenges with Anti Virus scanning of Postgres binaries?
> > >
> > > I think that should be safe, at least until Microsoft starts to perceive
> > > PostgreSQL as a threat...
> >
> > Uh, if the anti-virus software does not modify any files, you are likely
> > to get false positives when the antivirus software thinks Postgres data
> > is a virus. If the anti-virus software modifies the data directory in
> > any way, you are likely to get database corruption or a non-operational
> > database.
>
> Absolutely. I was commenting the suggestion to exempt the data directory
> from the virus scan and only scan the PostgreSQL binaries.
Ah, yes, the Postges binaries should be safe to scan, and probably
useful to scan.
--
Bruce Momjian <[email protected]> https://momjian.us
EDB https://enterprisedb.com
Do not let urgent matters crowd out time for investment in the future.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers
2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]>
@ 2025-09-23 12:47 ` srinivasan s <[email protected]>
2 siblings, 0 replies; 7+ messages in thread
From: srinivasan s @ 2025-09-23 12:47 UTC (permalink / raw)
To: soumen rana <[email protected]>; +Cc: [email protected]
Microsoft defender locks the data files in the data directory during the
scans. Which created a problem for us in the past. You need to skip the
data directory from the Microsoft defender scans.
On Tue, 23 Sept, 2025, 2:51 am soumen rana, <[email protected]> wrote:
> Hi Everyone,
>
> The oganization I work for uses some postgres databases installed on Linux
> servers. The security team is planning to initiate Microsoft Defender Anti
> Virus scanning on these servers in an "Active" mode.
>
> This will mean that the Postgres Installation directories and files will
> be scanned by Microsoft Defender and quarantine any threats.
>
> We have requested to exclude the data directories from the Antivirus
> scanning.
> Is anyone aware of any performance, operational, or data-loss related
> challenges with Anti Virus scanning of Postgres binaries?
>
> Thanking you in advance.
>
> Greetings,
> Soumen Rana
>
>
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2025-09-23 16:19 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]>
2025-09-23 04:18 ` Ian Lawrence Barwick <[email protected]>
2025-09-23 06:22 ` Laurenz Albe <[email protected]>
2025-09-23 12:03 ` Bruce Momjian <[email protected]>
2025-09-23 15:49 ` Laurenz Albe <[email protected]>
2025-09-23 16:19 ` Bruce Momjian <[email protected]>
2025-09-23 12:47 ` srinivasan s <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox