Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Does McAfee virus support Redhat Linux running in an Oracle RAC Cluster?

IF so, what is the configuration, best practice?

share|improve this question

3 Answers 3

Don't do that... RAC is very complex and the last thing you need is McAfee adding in more variability. Needless to say, from a support perspective, you want to keep as much non oracle stuff away from your RAC nodes as possible.

share|improve this answer
    
+1: ...and why on earth would you want to run AV on database files - these are affectively embedded filesystems with no direct access to the files (tables, indexes etc) they actually hold - even if there was such access, it'd be really dumb to run an AV scanner on them –  symcbean Apr 20 '11 at 15:07

Running McAfee AV on your RAC server will break your system (I have done it first hand). Especially if you have OAS (On Access Scan) enabled. If you HAVE to have AV installed on the system, disable OAS and add any of you shared storage / config directories to the ODS (On Demand Scan) exclusions.

share|improve this answer

Ask yourself what you want to accomplish. The majority of virus threats McAfee will respond to on Linux will be Windows viruses. A virus scanner on Linux is most useful if you use Linux as a file server with Samba. There have been a couple of Linux proof-of-concept viruses in labs in the past, but it never took off.

For the rest: I agree with Rafael. I'm not that familiar with anti-virus stuff on Linux, so I don't exactly know what McAfee does and does not do, but my guess is Oracle will not like another program messing with it's memory and file access.

Honestly: the best anti-virus practice on a high security Linux node that is not a Samba file server, is to update regularly, limit access, be a good admin (don't run weird programs, harden your box), and, if you like, run something like tripwire and rkhunter regularly. Anti-virus software is not in that list for me.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.