Date: Tue, 23 Sep 2025 08:03:12 -0400
From: Bruce Momjian <bruce@momjian.us>
To: Laurenz Albe <laurenz.albe@cybertec.at>
Cc: soumen rana <soumenrana.06@gmail.com>, pgsql-admin@lists.postgresql.org
Subject: Re: Anti virus scanning for Postgres database servers
Message-ID: <aNKMgEKo8VDq0mId@momjian.us>
References: 
 <CA+nn5EVhtxMpoG64iKOMW2pSKEQGjpHbS3TiXg04HryXiETibg@mail.gmail.com>
 <c64966a2ebace75cff3c9f9f399f17231c8b3e74.camel@cybertec.at>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <c64966a2ebace75cff3c9f9f399f17231c8b3e74.camel@cybertec.at>
Archived-At: 
 <https://www.postgresql.org/message-id/aNKMgEKo8VDq0mId%40momjian.us>
Precedence: bulk

On Tue, Sep 23, 2025 at 08:22:51AM +0200, Laurenz Albe wrote:
> On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote:
> > This will mean that the Postgres Installation directories and files will be
> > scanned by Microsoft Defender and quarantine any threats.
> > 
> > We have requested to exclude the data directories from the Antivirus scanning.
> > Is anyone aware of any performance,  operational, or data-loss related
> > challenges with Anti Virus scanning of Postgres binaries?
> 
> I think that should be safe, at least until Microsoft starts to perceive
> PostgreSQL as a threat...

Uh, if the anti-virus software does not modify any files, you are likely
to get false positives when the antivirus software thinks Postgres data
is a virus.  If the anti-virus software modifies the data directory in
any way, you are likely to get database corruption or a non-operational
database.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Do not let urgent matters crowd out time for investment in the future.