Sophos EDR 10.0.4 interfering with Postgres Flyway migrations

One of the developers that is running BigSur and the latest EAP (10.0.4) has reported issues with Flyway migrations using Postgres SQL.

The Flyway migration is failing due to "an interrupted system call" complaining that it cannot open the local file. There are no entries in the Sophos logs but if we remove the Sophos EDR all works fine.

I am running an SDU on this device: 401a7f0a-1228-b4d2-78ac-f252cf8df729_2021-03-08-15-39-17.zip

Similar issues have been reported here: https://github.com/PostgresApp/PostgresApp/issues/610 and although we are talking about a different EDR the root cause seems to be the same, a system extension from the EDR causing this issue.

I have a feeling this could be related to SystemD this time and not the Network Extension but I might be wrong...

I would appreciate if someone can investigate this as most of my members of staff are developers and Flyway migrations are pretty common.

Thanks,

Nicholas

Top Replies

Nicholas Secrier over 5 years ago in reply to Robert B +2

HI Rober, 10.0.4 is the latest version which to meet it looks like this is already in GA although it was not fully explained/mentioned here. I did install Sophos for a new joiner yesterday and it went straight to 10.0.4 which was surprising as he user/device was not part of the EAP but this also explains why I have to raise the issue with the support and not here. Hope this helps.
Jump to answer

Parents

0 Nicholas Secrier over 5 years ago

We have applied the policy exception to ensure this is not related to NetworkWebExtension and run a new SDU:

401a7f0a-1228-b4d2-78ac-f252cf8df729_2021-03-08-16-38-13.zip

The same issues are present even if the Network Extension is not loaded which reaffirms the initial belief this is related to the other extension SophosScanD.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 David Lancaster over 5 years ago in reply to Nicholas Secrier

Sorry to hear about your issue. I'm a little confused with EDR as the EDR functionality doesn't rely on an extension, although on-access scanning and a few others do. As this version is now GA I would recommended that you open a case with Support. They should help with some initial troubleshooting and investigations with you
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Nicholas Secrier over 5 years ago in reply to David Lancaster

Hi David, my bad I used the EDR in the wrong way. I mean the Endpoint Protection. The AV solution.

There might be something else in the middle (BigSur changing permissions) but I am baffled as to why if we uninstall Sophos work and if we install it stops working... This is the article that we are using to see if we can fix it at our end.

pgsnake.blogspot.com/.../macos-big-sur-upgrade-breaking.html
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 David Lancaster over 5 years ago in reply to Nicholas Secrier

Thanks for the clarification, that corresponds with comments in that article. From reading that it does appear that system extensions for the Endpoint Security Framework on Big Sur have an incompatibility with Postgres. I strongly recommended opening a case with Support so we can tackle this formally.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Robert B over 5 years ago in reply to David Lancaster

David

has the GA version for Bigsur is now available? I installed a mac and did not had to add it to the EAP
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Nicholas Secrier over 5 years ago in reply to David Lancaster

Hi David, a support case was created 03737993 and I have linked it to this discussion as well.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Nicholas Secrier over 5 years ago in reply to David Lancaster

Hi David, a support case was created 03737993 and I have linked it to this discussion as well.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data