[gpfsug-discuss] gpfsug-discuss Digest, Vol 28, Issue 6

[Zachary Giles]

To further the wack-a-mole problem:
If you set those extensions to be in the system pool and assume the
system pool has no data-disks, it is still possible for GPFS 3.5 to
create a file in the system pool if one is utilizing the
small-files-in-metadata feature (whatever it's called now) and if the
file is 0-3.9K in size where it will be stored in the xattrs.
So, this only works for mp3's >3.9K :) Probably OK for mp3's but not
if, say, you wanted to restrict .txt files, which are often that
small.



On Mon, May 12, 2014 at 7:12 AM, Jonathan Buzzard
<jonathan at buzzard.me.uk> wrote:
> On Mon, 2014-05-12 at 10:46 +0800, Pavel Pokorny wrote:
>> Hello,
>> after discussion with Marc A Kaplan from IBM I finished with this
>> solution. So I am sharing it with all other user just in case you need
>> it in future.
>>
>>
>> Example placement policy file:
>>
>>
>> /* --- Enable .avi so it will not be denied by default --- */
>> RULE 'enable_avi' SET POOL 'data' FOR FILESET (nfsexport) WHERE
>> RegEx(lower(name),['\.avi$'])
>>
>>
>> /* --- Deny all following extensions --- */
>> RULE 'deny_files' SET POOL 'system' FOR FILESET (nfsexport) WHERE
>> RegEx(lower(name),['\.avi$|\.mp[ae1234]$|\.mpe?g[23]?$|\.eml$|\.idx$|
>> \.mbo?x$|\.msg$|\.ost$|\.otf$|\.pab$|\.pst$|\.aac$|\.aif*$|\.as[fx]$|
>> \.au$|\.flac$|\.m3u$|\.midi?$|\.mov$|\.ogg$|\.qtw?$|\.ram$|\.rmi?$|
>> \.rmvb$|\.snd$|\.swf$|\.vob$|\.wa[vx]$|\.wm[av]$|\.wvx$|\.bmp$|\.dib$|
>> \.eps$|\.gif$|\.img$|\.jfif$|\.jpe?g?$|\.pcx$|\.png$|\.psd?$|\.raw$|
>> \.if$|\.spiff$|\.tif*$'])
>>
>
> To demonstrate why this is a wack-a-mole exercise, as a user of your
> system I will just save in iPod friendly format, all my audio AAC
> encoded in .m4a files, all my video H.264 encoded in .m4v files, and my
> audiobooks in .m4b format :-)
>
> I would further note that it is rather trivial to pick a random
> extension say .sdf and associate that with just about any program, most
> of which examine the contents of the file and don't rely on the
> extension.
>
> Further noting if you are continuing in your wack-a-mole exercise I
> could use .divx which you have conveniently not blocked.
>
> Finally being the resourceful sort I will just embed it all in a PDF, or
> word document, or powerpoint, or ...
>
> I don't know exactly what your customer is expecting, but this sounds
> like a management idea, with little understanding of how things work in
> the real world.
>
>
> JAB.
>
> --
> Jonathan A. Buzzard                 Email: jonathan (at) buzzard.me.uk
> Fife, United Kingdom.
>
>
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at gpfsug.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss



-- 
Zach Giles
zgiles at gmail.com