<html><body><p><font size="2" face="sans-serif">Yes, it is disabled by default.</font><br><br><font size="2" face="sans-serif">And yes, you can tell if it has been enabled by looking at the smb config list.</font><br><font size="2" face="sans-serif">This is what a non-fruit vfs-object line looks like</font><br><font size="3" face="Courier New">vfs objects = shadow_copy2 syncops gpfs fileid time_audit</font><br><font size="2" face="sans-serif">This is one that has been "fruitified"</font><br><font size="3" face="Courier New">vfs objects = shadow_copy2 syncops fruit streams_xattr gpfs fileid time_audit</font><br><font size="2" face="sans-serif"><br><br>*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*<br>David DeHaan<br>Spectrum Scale Test<br>*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*</font><br><br><img width="16" height="16" src="cid:1__=88BB0D4FDFC74B718f9e8a93df938690@ibm.com" border="0" alt="Inactive hide details for "Michael Meier" ---02/01/2022 04:26:27 AM---Hi, A bunch of security updates for Samba were released y"><font size="2" color="#424282" face="sans-serif">"Michael Meier" ---02/01/2022 04:26:27 AM---Hi, A bunch of security updates for Samba were released yesterday, most</font><br><br><font size="1" color="#5F5F5F" face="sans-serif">From: </font><font size="1" face="sans-serif">"Michael Meier" <michael.meier@fau.de></font><br><font size="1" color="#5F5F5F" face="sans-serif">To: </font><font size="1" face="sans-serif">gpfsug-discuss@spectrumscale.org</font><br><font size="1" color="#5F5F5F" face="sans-serif">Date: </font><font size="1" face="sans-serif">02/01/2022 04:26 AM</font><br><font size="1" color="#5F5F5F" face="sans-serif">Subject: </font><font size="1" face="sans-serif">[EXTERNAL] [gpfsug-discuss] Spectrum Scale and vfs_fruit</font><br><font size="1" color="#5F5F5F" face="sans-serif">Sent by: </font><font size="1" face="sans-serif">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br><tt><font size="2">Hi,<br><br>A bunch of security updates for Samba were released yesterday, most<br>importantly among them CVE-2021-44142<br>(</font></tt><tt><font size="2"><a href="https://www.samba.org/samba/security/CVE-2021-44142.html">https://www.samba.org/samba/security/CVE-2021-44142.html</a></font></tt><tt><font size="2"> ) in the<br>vfs_fruit VFS-module that adds extended support for Apple Clients.<br>Spectrum Scale supports that, so Spectrum Scale might be affected, and<br>I'm trying to find out if we're affected or not.<br><br>Now we never enabled this via "mmsmb config change --vfs-fruit-enable",<br>and I would expect this to be disabled by default - however, I cannot<br>find an explicit statement like "by default this is disabled" in<br></font></tt><tt><font size="2"><a href="https://www.ibm.com/docs/en/spectrum-scale/5.1.2?topic=services-support-vfs-fruit-smb-protocol">https://www.ibm.com/docs/en/spectrum-scale/5.1.2?topic=services-support-vfs-fruit-smb-protocol</a></font></tt><tt><font size="2"><br><br>Am I correct in assuming that it is indeed disabled by default?<br>And how would I verify that?<br>Am I correct in assuming that _if_ it was enabled, then 'fruit' would<br>show up under the 'vfs objects' in 'mmsmb config list'?<br><br>Regards,<br>-- <br>Michael Meier, HPC Services<br>Friedrich-Alexander-Universitaet Erlangen-Nuernberg<br>Regionales Rechenzentrum Erlangen<br>Martensstrasse 1, 91058 Erlangen, Germany<br>Tel.: +49 9131 85-20994, Fax: +49 9131 302941<br>michael.meier@fau.de<br>hpc.fau.de<br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><tt><font size="2"><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></tt><tt><font size="2"> <br></font></tt><br><br><BR>
<BR>
</body></html>