MIME-Version: 1.0
References: 
 <CA+nn5EVhtxMpoG64iKOMW2pSKEQGjpHbS3TiXg04HryXiETibg@mail.gmail.com>
In-Reply-To: 
 <CA+nn5EVhtxMpoG64iKOMW2pSKEQGjpHbS3TiXg04HryXiETibg@mail.gmail.com>
From: Ian Lawrence Barwick <barwick@gmail.com>
Date: Tue, 23 Sep 2025 13:18:27 +0900
Message-ID: 
 <CAB8KJ=jkvA+VhSYNR19c00TN0afQ+4TmyiW81UjhsaEgq=h+2g@mail.gmail.com>
Subject: Re: Anti virus scanning for Postgres database servers
To: soumen rana <soumenrana.06@gmail.com>
Cc: pgsql-admin@lists.postgresql.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/CAB8KJ%3DjkvA%2BVhSYNR19c00TN0afQ%2B4TmyiW81UjhsaEgq%3Dh%2B2g%40mail.gmail.com>
Precedence: bulk

2025=E5=B9=B49=E6=9C=8823=E6=97=A5(=E7=81=AB) 6:21 soumen rana <soumenrana.=
06@gmail.com>:
>
> Hi Everyone,
>
> The oganization I work for uses some postgres databases installed on Linu=
x servers. The security team is planning to initiate Microsoft Defender Ant=
i Virus scanning on these servers in an "Active" mode.
>
> This will mean that the Postgres Installation directories and files will =
be scanned by Microsoft Defender and quarantine any threats.
>
> We have requested to exclude the data directories from the Antivirus scan=
ning.
> Is anyone aware of any performance,  operational, or data-loss related ch=
allenges with Anti Virus scanning of Postgres binaries?

I'm pretty sure I've worked on support cases in the past caused by
antivirus software doing things it shouldn't...

If the antivirus software in question modifies files in any way, it
will corrupt your PostgreSQL installation.
A few places warning against using antivirus software on PostgreSQL
data directories:

- https://www.highgo.ca/2021/01/27/avoiding-identifying-and-dealing-with-po=
stgresql-database-corruption-part-1/
- https://www.postgresql.eu/events/pgconfeu2023/sessions/session/4602/slide=
s/406/data_corruption.pdf
- https://docs.microfocus.com/UCMDB/11.0/ucmdb-docs/docs/eng/doc_lib/Conten=
t/database/PostgresConfig_c_notes.htm

Regards

Ian Barwick