Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1v12QS-003tuC-D5 for pgsql-admin@arkaria.postgresql.org; Tue, 23 Sep 2025 12:47:20 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1v12QQ-005PsK-UK for pgsql-admin@arkaria.postgresql.org; Tue, 23 Sep 2025 12:47:18 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1v12QQ-005PsB-Ii for pgsql-admin@lists.postgresql.org; Tue, 23 Sep 2025 12:47:18 +0000 Received: from mail-pl1-x62b.google.com ([2607:f8b0:4864:20::62b]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1v12QO-001wGi-1j for pgsql-admin@lists.postgresql.org; Tue, 23 Sep 2025 12:47:17 +0000 Received: by mail-pl1-x62b.google.com with SMTP id d9443c01a7336-267fac63459so52367045ad.1 for ; Tue, 23 Sep 2025 05:47:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1758631636; x=1759236436; darn=lists.postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=0plWk/UiJLbd7eSvcFxedU/k8sO1sAb/z6/ZG1KrjmA=; b=XBz3YCZWlvEcnsIMOypVgyVIL5dMFY3yDjMYRp19nOwlWOwmdrbU8uRrcLFNnISwLZ JlOD7xk7+2g59xrII9EMtl5ZFrW+QmJhzGDTmz6YhmUSJy/1Fj7UX+VOODsrh4A/KaQZ dGzyZ1S5TrQjhELwgVPgO74Vuk9h7p6sVVSozqt8BsXDlBKRKeeLfKiRsAA1tlnGux11 xaFti1F1miDoEC2JO9+EP5wqFWY/Si32mXurg7Ab4U++njn+jfhoc/1jbozdzDBmvHmL bx7NEspOErJkF5kYuMnfpvtxdRG8BiPBvVrgPEaLFLVVlhnWlRJfaFLgFTkuFC1Llhz8 VKpA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758631636; x=1759236436; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=0plWk/UiJLbd7eSvcFxedU/k8sO1sAb/z6/ZG1KrjmA=; b=TvP+2DX1sYJQ5ioCgK2gDL7EvY0XTCsE5+w7xw3LVuJnhJeyv11wHjeZjk2GAC8q9N IEst1zGcH4nIsPnZKBZ1ua9msohniJz+4ts0L4Q56qMvdNDmibM18P8ohmjrapkeMhvs V76BcRt6+JXwo+oujzlwkC3dStHys7d5fXQRvT2UBg8q5gXJneUpmgLne1yN2N3dWtYn zmvgU8Md8Gxeu2D+jyDdOwa9niu9Sb10cnONTSQx5JerMA7U9AfCSXjEM/MJGJ3vHQH7 PsSu0eckoeTjCduJK1YneEWE6SinW8yHR19QLKktbL25ZvCodF4pEQQCEy7CfsA0wdfv Vj3A== X-Gm-Message-State: AOJu0YwI332Wqer1zewov6qRt6tRftwf8UMn+a4tyOHo3cGM8IPRY3Wo i5Ueu0bEOHvLEAIP2Os02kK9knFMdUBkCJfbZ3f2HuivA2b59rH+cIlQ/BKKGOwQpEDqqwcCAlW FwyaMmNzA1O3NGwgDE9QutFfBPT6hvyY= X-Gm-Gg: ASbGncu1gDnXL4ySXzC8zIPCmhGhTKz13nYQ+JqoZvpwlGOtS5OIxrhorJ4u+UJ0B2D HluDBoxQswve1SGUWAeLQDQErpithWT1R6ihf4BIUFG3UjnTszXjdmH76esN4+NC5+YrlW65GE+ 6RoJFbAf0i7v3enPcRXvpQNOYl4szd2XQMhwWDmUrGEsKbt5dgpRBt0po+GI4uk8sFXLbEPdr0u mmMQbqPmz4wONYhZFt/U4UXe2Ixu63cjPd3A8wM X-Google-Smtp-Source: AGHT+IFPWODPkqBoovb9S6DX3uJjuHJRUnM+VgWbTytew4MuFoGx083P+kPMFzIJTMM9wpq1UIkf0L0mJoGu73H9CtQ= X-Received: by 2002:a17:902:f60f:b0:269:ba61:222e with SMTP id d9443c01a7336-27cc78ce8f7mr25080485ad.53.1758631635822; Tue, 23 Sep 2025 05:47:15 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: srinivasan s Date: Tue, 23 Sep 2025 18:17:03 +0530 X-Gm-Features: AS18NWDkQgPRmD-xOxF2Kk0D8_yzSl11nc3jkUWIGXpkisvbPbAHukJwLucflcc Message-ID: Subject: Re: Anti virus scanning for Postgres database servers To: soumen rana Cc: pgsql-admin@lists.postgresql.org Content-Type: multipart/alternative; boundary="000000000000f1a9ce063f77557c" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --000000000000f1a9ce063f77557c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Microsoft defender locks the data files in the data directory during the scans. Which created a problem for us in the past. You need to skip the data directory from the Microsoft defender scans. On Tue, 23 Sept, 2025, 2:51=E2=80=AFam soumen rana, wrote: > Hi Everyone, > > The oganization I work for uses some postgres databases installed on Linu= x > servers. The security team is planning to initiate Microsoft Defender Ant= i > Virus scanning on these servers in an "Active" mode. > > This will mean that the Postgres Installation directories and files will > be scanned by Microsoft Defender and quarantine any threats. > > We have requested to exclude the data directories from the Antivirus > scanning. > Is anyone aware of any performance, operational, or data-loss related > challenges with Anti Virus scanning of Postgres binaries? > > Thanking you in advance. > > Greetings, > Soumen Rana > > --000000000000f1a9ce063f77557c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Microsoft defender locks the data files in the data direc= tory during the scans. Which created a problem for us in the past. You need= to skip the data directory from the Microsoft defender scans.

On Tue, 23 Sept, 2025, 2:51=E2=80=AFam soumen rana, <soumenrana.06@gmail.com> wrote:
=
Hi Everyone,=C2=A0
The oganization I work for uses= some postgres databases installed on Linux servers. The security team is p= lanning to initiate Microsoft Defender Anti Virus scanning on these servers= in an "Active" mode.=C2=A0

This will mean that the Postgres Installation directories and= files will be scanned by Microsoft Defender and quarantine any threats.

We have requested to exclu= de the data directories from the Antivirus scanning.
Is anyone aware of any performance,=C2=A0 operational, or data-loss relate= d challenges with Anti Virus scanning of Postgres binaries?

Thanking you=C2=A0in advance.

Greetings,
Soumen Rana

--000000000000f1a9ce063f77557c--