Ensure a hard-limit quota policy is enforced on the root managed directory of every file system

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

From the CLI: ; Run the command puredir quota list to display all directories with an attached quota policy. Verify that the root managed directories for your file systems are listed. ; Run the command purepolicy quota rule list to inspect the rules for the attached policies. Verify that the Enforced column is set to True and an appropriate Quota Limit is established.

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

To align with the security recommendations, create a quota policy with an enforced hard limit and attach it to the root managed directory of each file system. From the GUI: ; Navigate to Storage > Policies. ; In the Quota Policies panel, click the + (Create Policy) icon. ; In the pop-up window, enter a Name for the policy. ; In the rules section, specify the Quota Limit (e.g., 5T). ; Click the Enabled toggle icon next to Enforced so that it turns blue. This ensures new writes are blocked when the limit is exceeded. Click Create. ; Click the name of your newly created quota policy. ; In the Members panel, click the menu icon and select Add Member.