Ronald Wimmer via FreeIPA-users wrote:
On 26.06.23 09:32, Ronald Wimmer via FreeIPA-users wrote:
> If a company policy forces you to install an antivirus/malware scan
> tool on Linux servers which IPA directories should be excluded because
> a severe performance impact would be very likely?
>
> I would start with:
> /var/lib/sss
> /etc/dirsrv/slapd-LINUX-MYDOMAIN-AT
>
> What else?
To be a little more precise I am talking about IPA servers themselves...
So you're trying to reduce/limit file I/O?
/etc/dirsrv doesn't contain much. The database is in
/var/lib/dirsrv/slapd-EXAMPLE-TEST/ and I think that's where you'd see
any performance hit reading and trying to do malware checks against huge
binary files.
rob