On 26.06.23 16:45, Rob Crittenden via FreeIPA-users wrote:
Ronald Wimmer via FreeIPA-users wrote:
> On 26.06.23 09:32, Ronald Wimmer via FreeIPA-users wrote:
>> If a company policy forces you to install an antivirus/malware scan
>> tool on Linux servers which IPA directories should be excluded because
>> a severe performance impact would be very likely?
>>
>> I would start with:
>> /var/lib/sss
>> /etc/dirsrv/slapd-LINUX-MYDOMAIN-AT
>>
>> What else?
>
> To be a little more precise I am talking about IPA servers themselves...
So you're trying to reduce/limit file I/O?
/etc/dirsrv doesn't contain much. The database is in
/var/lib/dirsrv/slapd-EXAMPLE-TEST/ and I think that's where you'd see
any performance hit reading and trying to do malware checks against huge
binary files.
Thanks for your input! Sorry. Of course I meant
/var/lib/dirsrv/somedomain...
I'll let these two directories exclude by my colleagues.