Return
-
Title
Antivirus exclusions for QoreStor -
Description
Antivirius software can cause files or disable processes in the Qorestor server and corresponding repositories to be quarantined causing a QoreStor system to go offline, into maintenance mode and initiate a filesystem scan in which there will be data-loss.
-
Cause
Antivirus software incorrectly identifies files in the datastore as viruses and quarantines or deletes them per the antiviruses rule set. -
Resolution
The following processes and directories should be excluded from antivirus scans:Processes:- /opt/pbis/sbin/lwsmd
- /opt/qorestor/bin/cleanupd
- /opt/qorestor/bin/likewise.sh
- /opt/qorestor/bin/ndmp_home/ndmp
- /opt/qorestor/bin/ndmp_home/ndmpd
- /opt/qorestor/bin/ndmp_home/session_monitor
- /opt/qorestor/bin/object_server
- /opt/qorestor/bin/ocaconfigsvc
- /opt/qorestor/bin/ocafsd
- /opt/qorestor/bin/ocardslogwriter
- /opt/qorestor/bin/policy_mgr
- /opt/qorestor/bin/r3-ui/ocaagent_charts
- /opt/qorestor/bin/r3-ui/ocaagent_keepalive
- /opt/qorestor/bin/r3-ui/ocaagent_manage
- /opt/qorestor/bin/r3-ui/ocaagent_registration
- /opt/qorestor/bin/r3-ui/ocahttp
- /opt/qorestor/bin/secure_connect/sc_server
- /opt/qorestor/bin/session_monitor
- /opt/qorestor/bin/smb-notifyd
- /opt/qorestor/bin/smbstatus
- /opt/qorestor/bin/storage-server-services/watcher_spawn
- /opt/qorestor/bin/tgtd
- /opt/qorestor/bin/tgtd
- /opt/qorestor/bin/vtllibrary
- /opt/qorestor/bin/vtltape
- /opt/qorestor/bin/watcher
- /opt/qorestor/choam/bin/nhm
- /opt/qorestor/samba/usr/bin/smbcontrol
- /opt/qorestor/samba/usr/bin/smbpasswd
- /opt/qorestor/samba/usr/sbin/smbd
Directories:
- /etc/oca/
- /opt/oca/
- /opt/pbis/
- /opt/qorestor/
- /usr/local/qorestor-libs/
- /var/log/oca/
- /var/ocarina/
- Data repository locations. (.../ocaroot/)
- Metadata repository locaton.(.../qs_metadata/)
Note: You can check the Data and Metadata repository locations with the following commands:]# /opt/qorestor/bin/system --show | grep qs_metadataMetadata location : /QSmetadata/qs_metadata]# /opt/qorestor/bin/system --show --storageENCLs Path Total(GiB) Available(GiB) Used(GiB) StatusENCL_0 /QSData/ocaroot 1000 900 100 OnENCL_1 /QSData1/ocaroot_1 1000 900 100 OnENCL_2 /QSData2/ocaroot_2 1000 900 100 OnENCL_3 /QSData3/ocaroot_3 1000 900 100 OnExample for Microsoft Defender for Endpoint on a Linux installation; you would run the following commands to add exclusions from the example above:
- mdatp exclusion folder add --path /var/log/oca
- mdatp exclusion folder add --path /opt/qorestor
- mdatp exclusion folder add --path /etc/oca
- mdatp exclusion folder add --path /QSData/ocaroot
- mdatp exclusion folder add --path /QSData1/ocaroot_1
- mdatp exclusion folder add --path /QSData2/ocaroot_2
- mdatp exclusion folder add --path /QSData3/ocaroot_3
- mdatp exclusion folder add --path /QSmetadata/qs_metadata