Yes, it is disabled by default. And yes, you can tell if it has been enabled by looking at the smb config list. This is what a non-fruit vfs-object line looks like vfs objects = shadow_copy2 syncops gpfs fileid time_audit This is one that has been "fruitified" vfs objects = shadow_copy2 syncops fruit streams_xattr gpfs fileid time_audit *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* David DeHaan Spectrum Scale Test *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* From: "Michael Meier" <[email protected]> To: [email protected] Date: 02/01/2022 04:26 AM Subject: [EXTERNAL] [gpfsug-discuss] Spectrum Scale and vfs_fruit Sent by: [email protected] Hi, A bunch of security updates for Samba were released yesterday, most importantly among them CVE-2021-44142 ( https://www.samba.org/samba/security/CVE-2021-44142.html ) in the vfs_fruit VFS-module that adds extended support for Apple Clients. Spectrum Scale supports that, so Spectrum Scale might be affected, and I'm trying to find out if we're affected or not. Now we never enabled this via "mmsmb config change --vfs-fruit-enable", and I would expect this to be disabled by default - however, I cannot find an explicit statement like "by default this is disabled" in https://www.ibm.com/docs/en/spectrum-scale/5.1.2?topic=services-support-vfs-fruit-smb-protocol Am I correct in assuming that it is indeed disabled by default? And how would I verify that? Am I correct in assuming that _if_ it was enabled, then 'fruit' would show up under the 'vfs objects' in 'mmsmb config list'? Regards, -- Michael Meier, HPC Services Friedrich-Alexander-Universitaet Erlangen-Nuernberg Regionales Rechenzentrum Erlangen Martensstrasse 1, 91058 Erlangen, Germany Tel.: +49 9131 85-20994, Fax: +49 9131 302941 [email protected] hpc.fau.de _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
_______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
