Oracle Database files that needed to be excluded in Anti-virus scan or any third party tools scan:
If you do not exclude these files, there is maximum chance that your oracle files will be held into lock, while the scan is happening and oracle might have access on them when this scan happens and it might lead to i/o exceptions. In fact this is applicable to any Database system.
This might also lead to chances where your Database system might crash.
Always exclude these files :
Data files Data files generally have a *.dbf extension
Example :
....\oracle\oradata\*.dbf
Redo files Redo files have a *.log extension
NOTE: Redo logs will exist if the Oracle Development toolkit or backup and recovery are used)
Example :
....\oracle\Inventory\logs\*.log
Control files Control files have a *.ctl extension
Example :
....\oracle\oradata\*.ctl
YOU CAN GET THE PATHS FROM BELOW QUERIES :
select name from v$datafile;
select name from v$tempfile;
select member from v$logfile;
show parameter control_files;
show parameter log_archive_dest;
show log_archive_format;
Note : If you are writing audit files to server then exclude *.aud:
show parameter audit
IMPORTANT:
Most Anti-virus companies does not advise excluding entire directories (such as the Oracle database directory and sub directories) from scanning as this poses a potential high security risk. Additionally you should not exclude any temp files or folders as these can be a target for security risks.
References :
McAfee :
https://kc.mcafee.com/corporate/index?page=content&id=KB54817
Norton :
https://support.symantec.com/en_US/article.TECH134383.html
No comments:
Post a Comment