Pure Storage FlashArray
TMA-FLASHARRAY-3.4
Ensure a hard-limit quota policy is enforced on the root managed directory of every file system
Beschreibung
FlashArray supports configuring quota policies in order to enforce space consumption limits on directories. These allow you to limit the total amount of space any directory and its child files and directories can consume. Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).
So wird geprüft
Prüfmethode: Manuelle Prüfung
From the CLI: ; Run the command puredir quota list to display all directories with an attached quota policy. Verify that the root managed directories for your file systems are listed. ; Run the command purepolicy quota rule list to inspect the rules for the attached policies. Verify that the Enforced column is set to True and an appropriate Quota Limit is established.
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
To align with the security recommendations, create a quota policy with an enforced hard limit and attach it to the root managed directory of each file system. From the GUI: ; Navigate to Storage > Policies. ; In the Quota Policies panel, click the + (Create Policy) icon. ; In the pop-up window, enter a Name for the policy. ; In the rules section, specify the Quota Limit (e.g., 5T). ; Click the Enabled toggle icon next to Enforced so that it turns blue. This ensures new writes are blocked when the limit is exceeded. Click Create. ; Click the name of your newly created quota policy. ; In the Members panel, click the menu icon and select Add Member.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- flasharraystoragefile-services
- Referenz
- CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 3.4 Ensure a hard-limit quota policy is enforced on the root managed directory of every file system