public inbox for [email protected]help / color / mirror / Atom feed
Anti virus scanning for Postgres database servers 7+ messages / 5 participants [nested] [flat]
* Anti virus scanning for Postgres database servers @ 2025-09-22 20:03 soumen rana <[email protected]> 0 siblings, 3 replies; 7+ messages in thread From: soumen rana @ 2025-09-22 20:03 UTC (permalink / raw) To: [email protected] Hi Everyone, The oganization I work for uses some postgres databases installed on Linux servers. The security team is planning to initiate Microsoft Defender Anti Virus scanning on these servers in an "Active" mode. This will mean that the Postgres Installation directories and files will be scanned by Microsoft Defender and quarantine any threats. We have requested to exclude the data directories from the Antivirus scanning. Is anyone aware of any performance, operational, or data-loss related challenges with Anti Virus scanning of Postgres binaries? Thanking you in advance. Greetings, Soumen Rana ^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers @ 2025-09-23 04:18 Ian Lawrence Barwick <[email protected]> parent: soumen rana <[email protected]> 2 siblings, 0 replies; 7+ messages in thread From: Ian Lawrence Barwick @ 2025-09-23 04:18 UTC (permalink / raw) To: soumen rana <[email protected]>; +Cc: [email protected] 2025年9月23日(火) 6:21 soumen rana <[email protected]>: > > Hi Everyone, > > The oganization I work for uses some postgres databases installed on Linux servers. The security team is planning to initiate Microsoft Defender Anti Virus scanning on these servers in an "Active" mode. > > This will mean that the Postgres Installation directories and files will be scanned by Microsoft Defender and quarantine any threats. > > We have requested to exclude the data directories from the Antivirus scanning. > Is anyone aware of any performance, operational, or data-loss related challenges with Anti Virus scanning of Postgres binaries? I'm pretty sure I've worked on support cases in the past caused by antivirus software doing things it shouldn't... If the antivirus software in question modifies files in any way, it will corrupt your PostgreSQL installation. A few places warning against using antivirus software on PostgreSQL data directories: - https://www.highgo.ca/2021/01/27/avoiding-identifying-and-dealing-with-postgresql-database-corruptio... - https://www.postgresql.eu/events/pgconfeu2023/sessions/session/4602/slides/406/data_corruption.pdf - https://docs.microfocus.com/UCMDB/11.0/ucmdb-docs/docs/eng/doc_lib/Content/database/PostgresConfig_c... Regards Ian Barwick ^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers @ 2025-09-23 06:22 Laurenz Albe <[email protected]> parent: soumen rana <[email protected]> 2 siblings, 1 reply; 7+ messages in thread From: Laurenz Albe @ 2025-09-23 06:22 UTC (permalink / raw) To: soumen rana <[email protected]>; [email protected] On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote: > This will mean that the Postgres Installation directories and files will be > scanned by Microsoft Defender and quarantine any threats. > > We have requested to exclude the data directories from the Antivirus scanning. > Is anyone aware of any performance, operational, or data-loss related > challenges with Anti Virus scanning of Postgres binaries? I think that should be safe, at least until Microsoft starts to perceive PostgreSQL as a threat... Yours, Laurenz Albe ^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers @ 2025-09-23 12:03 Bruce Momjian <[email protected]> parent: Laurenz Albe <[email protected]> 0 siblings, 1 reply; 7+ messages in thread From: Bruce Momjian @ 2025-09-23 12:03 UTC (permalink / raw) To: Laurenz Albe <[email protected]>; +Cc: soumen rana <[email protected]>; [email protected] On Tue, Sep 23, 2025 at 08:22:51AM +0200, Laurenz Albe wrote: > On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote: > > This will mean that the Postgres Installation directories and files will be > > scanned by Microsoft Defender and quarantine any threats. > > > > We have requested to exclude the data directories from the Antivirus scanning. > > Is anyone aware of any performance, operational, or data-loss related > > challenges with Anti Virus scanning of Postgres binaries? > > I think that should be safe, at least until Microsoft starts to perceive > PostgreSQL as a threat... Uh, if the anti-virus software does not modify any files, you are likely to get false positives when the antivirus software thinks Postgres data is a virus. If the anti-virus software modifies the data directory in any way, you are likely to get database corruption or a non-operational database. -- Bruce Momjian <[email protected]> https://momjian.us EDB https://enterprisedb.com Do not let urgent matters crowd out time for investment in the future. ^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers @ 2025-09-23 12:47 srinivasan s <[email protected]> parent: soumen rana <[email protected]> 2 siblings, 0 replies; 7+ messages in thread From: srinivasan s @ 2025-09-23 12:47 UTC (permalink / raw) To: soumen rana <[email protected]>; +Cc: [email protected] Microsoft defender locks the data files in the data directory during the scans. Which created a problem for us in the past. You need to skip the data directory from the Microsoft defender scans. On Tue, 23 Sept, 2025, 2:51 am soumen rana, <[email protected]> wrote: > Hi Everyone, > > The oganization I work for uses some postgres databases installed on Linux > servers. The security team is planning to initiate Microsoft Defender Anti > Virus scanning on these servers in an "Active" mode. > > This will mean that the Postgres Installation directories and files will > be scanned by Microsoft Defender and quarantine any threats. > > We have requested to exclude the data directories from the Antivirus > scanning. > Is anyone aware of any performance, operational, or data-loss related > challenges with Anti Virus scanning of Postgres binaries? > > Thanking you in advance. > > Greetings, > Soumen Rana > > ^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers @ 2025-09-23 15:49 Laurenz Albe <[email protected]> parent: Bruce Momjian <[email protected]> 0 siblings, 1 reply; 7+ messages in thread From: Laurenz Albe @ 2025-09-23 15:49 UTC (permalink / raw) To: Bruce Momjian <[email protected]>; +Cc: soumen rana <[email protected]>; [email protected] On Tue, 2025-09-23 at 08:03 -0400, Bruce Momjian wrote: > On Tue, Sep 23, 2025 at 08:22:51AM +0200, Laurenz Albe wrote: > > On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote: > > > This will mean that the Postgres Installation directories and files will be > > > scanned by Microsoft Defender and quarantine any threats. > > > > > > We have requested to exclude the data directories from the Antivirus scanning. > > > Is anyone aware of any performance, operational, or data-loss related > > > challenges with Anti Virus scanning of Postgres binaries? > > > > I think that should be safe, at least until Microsoft starts to perceive > > PostgreSQL as a threat... > > Uh, if the anti-virus software does not modify any files, you are likely > to get false positives when the antivirus software thinks Postgres data > is a virus. If the anti-virus software modifies the data directory in > any way, you are likely to get database corruption or a non-operational > database. Absolutely. I was commenting the suggestion to exempt the data directory from the virus scan and only scan the PostgreSQL binaries. Yours, Laurenz Albe ^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Anti virus scanning for Postgres database servers @ 2025-09-23 16:19 Bruce Momjian <[email protected]> parent: Laurenz Albe <[email protected]> 0 siblings, 0 replies; 7+ messages in thread From: Bruce Momjian @ 2025-09-23 16:19 UTC (permalink / raw) To: Laurenz Albe <[email protected]>; +Cc: soumen rana <[email protected]>; [email protected] On Tue, Sep 23, 2025 at 05:49:39PM +0200, Laurenz Albe wrote: > On Tue, 2025-09-23 at 08:03 -0400, Bruce Momjian wrote: > > On Tue, Sep 23, 2025 at 08:22:51AM +0200, Laurenz Albe wrote: > > > On Mon, 2025-09-22 at 13:03 -0700, soumen rana wrote: > > > > This will mean that the Postgres Installation directories and files will be > > > > scanned by Microsoft Defender and quarantine any threats. > > > > > > > > We have requested to exclude the data directories from the Antivirus scanning. > > > > Is anyone aware of any performance, operational, or data-loss related > > > > challenges with Anti Virus scanning of Postgres binaries? > > > > > > I think that should be safe, at least until Microsoft starts to perceive > > > PostgreSQL as a threat... > > > > Uh, if the anti-virus software does not modify any files, you are likely > > to get false positives when the antivirus software thinks Postgres data > > is a virus. If the anti-virus software modifies the data directory in > > any way, you are likely to get database corruption or a non-operational > > database. > > Absolutely. I was commenting the suggestion to exempt the data directory > from the virus scan and only scan the PostgreSQL binaries. Ah, yes, the Postges binaries should be safe to scan, and probably useful to scan. -- Bruce Momjian <[email protected]> https://momjian.us EDB https://enterprisedb.com Do not let urgent matters crowd out time for investment in the future. ^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2025-09-23 16:19 UTC | newest] Thread overview: 7+ messages (download: mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2025-09-22 20:03 Anti virus scanning for Postgres database servers soumen rana <[email protected]> 2025-09-23 04:18 ` Ian Lawrence Barwick <[email protected]> 2025-09-23 06:22 ` Laurenz Albe <[email protected]> 2025-09-23 12:03 ` Bruce Momjian <[email protected]> 2025-09-23 15:49 ` Laurenz Albe <[email protected]> 2025-09-23 16:19 ` Bruce Momjian <[email protected]> 2025-09-23 12:47 ` srinivasan s <[email protected]>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox