Ensure a hard-limit quota policy is enforced on the root managed directory of every file system

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

From the CLI: ; Run the command puredir quota list to display all directories with an attached quota policy. Verify that the root managed directories for your file systems are listed. ; Run the command purepolicy quota rule list to inspect the rules for the attached policies. Verify that the Enforced column is set to True and an appropriate Quota Limit is established.

How it is fixed

Fix method: Guidance or infrastructure patch

To align with the security recommendations, create a quota policy with an enforced hard limit and attach it to the root managed directory of each file system. From the GUI: ; Navigate to Storage > Policies. ; In the Quota Policies panel, click the + (Create Policy) icon. ; In the pop-up window, enter a Name for the policy. ; In the rules section, specify the Quota Limit (e.g., 5T). ; Click the Enabled toggle icon next to Enforced so that it turns blue. This ensures new writes are blocked when the limit is exceeded. Click Create. ; Click the name of your newly created quota policy. ; In the Members panel, click the menu icon and select Add Member.