[gpfsug-discuss] Spectrum Scale and vfs_fruit

David DeHaan dehaan at us.ibm.com
Tue Feb 1 16:14:07 GMT 2022




Yes, it is disabled by default.

And yes, you can tell if it has been enabled by looking at the smb config
list.
This is what a non-fruit vfs-object line looks like
vfs objects = shadow_copy2 syncops gpfs fileid time_audit
This is one that has been "fruitified"
vfs objects = shadow_copy2 syncops fruit streams_xattr gpfs fileid
time_audit


*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
David DeHaan
Spectrum Scale Test
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*



From:	"Michael Meier" <michael.meier at fau.de>
To:	gpfsug-discuss at spectrumscale.org
Date:	02/01/2022 04:26 AM
Subject:	[EXTERNAL] [gpfsug-discuss] Spectrum Scale and vfs_fruit
Sent by:	gpfsug-discuss-bounces at spectrumscale.org



Hi,

A bunch of security updates for Samba were released yesterday, most
importantly among them CVE-2021-44142
(
https://www.samba.org/samba/security/CVE-2021-44142.html
 ) in the
vfs_fruit VFS-module that adds extended support for Apple Clients.
Spectrum Scale supports that, so Spectrum Scale might be affected, and
I'm trying to find out if we're affected or not.

Now we never enabled this via "mmsmb config change --vfs-fruit-enable",
and I would expect this to be disabled by default - however, I cannot
find an explicit statement like "by default this is disabled" in
https://www.ibm.com/docs/en/spectrum-scale/5.1.2?topic=services-support-vfs-fruit-smb-protocol


Am I correct in assuming that it is indeed disabled by default?
And how would I verify that?
Am I correct in assuming that _if_ it was enabled, then 'fruit' would
show up under the 'vfs objects' in 'mmsmb config list'?

Regards,
--
Michael Meier, HPC Services
Friedrich-Alexander-Universitaet Erlangen-Nuernberg
Regionales Rechenzentrum Erlangen
Martensstrasse 1, 91058 Erlangen, Germany
Tel.: +49 9131 85-20994, Fax: +49 9131 302941
michael.meier at fau.de
hpc.fau.de
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20220201/2d109257/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20220201/2d109257/attachment-0002.gif>


More information about the gpfsug-discuss mailing list