Re: iso-8859-1 temp directories and library files - Mailing list pgsql-admin

From Priancka Chatz
Subject Re: iso-8859-1 temp directories and library files
Date
Msg-id CANnOdgYuaUxnx2XwDek3ZQYK0OiO_XniVNhKB-Ezfz6TRANGtQ@mail.gmail.com
Whole thread Raw
In response to Re: iso-8859-1 temp directories and library files  (Laurenz Albe <laurenz.albe@cybertec.at>)
Responses Re: iso-8859-1 temp directories and library files
List pgsql-admin
Hi Laurenz,

What kind of security was breached here or you think needs to be tightened up?  And how to prove this is a security issue or not ? 

Pretty worried,
Priyanka

On Fri, Oct 11, 2024 at 3:09 PM Laurenz Albe <laurenz.albe@cybertec.at> wrote:
On Thu, 2024-10-10 at 12:22 +0200, Priancka Chatz wrote:
> I am observing a new/unknown behavior on some of my instances. My postgres Data
> directory path is /home/postgres/pgdata/pgroot/data. And I see a temp directory
> present inside /home/postgres/pgdata which has 100s of directory underneath it
> and inside each directory some library files related to Psycopg2. Not sure what
> these files are and why it is getting created. I am attaching screenshots for reference.
> Can anyone shed some light or direct me to any links to troubleshoot this?

I'd say somebody broke into your database and is abusing it for his purposes.

If that proves true, rescue what you can of the data and start with a new
installation, preferably with better security.

Yours,
Laurenz Albe

pgsql-admin by date:

Previous
From: Laurenz Albe
Date:
Subject: Re: iso-8859-1 temp directories and library files
Next
From: Laurenz Albe
Date:
Subject: Re: iso-8859-1 temp directories and library files