Re: Unknown temp directories and library files

Hi Laurenz,

What kind of security was breached here or you think needs to be tightened
up? And how to prove this is a security issue or not ?

Pretty worried,
Priyanka

On Fri, Oct 11, 2024 at 3:09 PM Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
wrote:

> On Thu, 2024-10-10 at 12:22 +0200, Priancka Chatz wrote:
> > I am observing a new/unknown behavior on some of my instances. My
> postgres Data
> > directory path is /home/postgres/pgdata/pgroot/data. And I see a temp
> directory
> > present inside /home/postgres/pgdata which has 100s of directory
> underneath it
> > and inside each directory some library files related to Psycopg2. Not
> sure what
> > these files are and why it is getting created. I am attaching
> screenshots for reference.
> > Can anyone shed some light or direct me to any links to troubleshoot
> this?
>
> I'd say somebody broke into your database and is abusing it for his
> purposes.
>
> If that proves true, rescue what you can of the data and start with a new
> installation, preferably with better security.
>
> Yours,
> Laurenz Albe
>