Ensure a hard-limit quota policy is enforced on the root managed directory of every file system

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

From the CLI: ; Run the command puredir quota list to display all directories with an attached quota policy. Verify that the root managed directories for your file systems are listed. ; Run the command purepolicy quota rule list to inspect the rules for the attached policies. Verify that the Enforced column is set to True and an appropriate Quota Limit is established.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To align with the security recommendations, create a quota policy with an enforced hard limit and attach it to the root managed directory of each file system. From the GUI: ; Navigate to Storage > Policies. ; In the Quota Policies panel, click the + (Create Policy) icon. ; In the pop-up window, enter a Name for the policy. ; In the rules section, specify the Quota Limit (e.g., 5T). ; Click the Enabled toggle icon next to Enforced so that it turns blue. This ensures new writes are blocked when the limit is exceeded. Click Create. ; Click the name of your newly created quota policy. ; In the Members panel, click the menu icon and select Add Member.