topic Re: Native fpolicy questions in ONTAP Discussions

Native fpolicy questions

LimorK — Tue, 23 Jul 2024 06:44:17 GMT

Hello all,

Ontap 9.13.1

After enabling native fpolicy we encountered some quiestions:

1) How do we modify the disallowed extensions file. The current kb is a bit unclear about that.

2) After modifying the above file, how do we make sure this is the version used on all enabled svms.

3) What is the path of the original disallowed extensions file?

Re: Native fpolicy questions

SpindleNinja — Mon, 29 Jul 2024 13:25:09 GMT

If this is the same KB I'm thinking about. IIRC - You basically need to delete the existing native fpolicy config via the CLI and then reapply it via the GUI after making your edits.

Re: Native fpolicy questions

ChLokesh — Tue, 30 Jul 2024 12:26:33 GMT

Hello There,

Please find the answers below.

1) How do we modify the disallowed extensions file. The current kb is a bit unclear about that.
Use the vserver fpolicy policy scope modify -file-extensions-to-include command to add (Block)or remove (Unblock) specific file extentioss.
https://docs.netapp.com/us-en/ontap-cli-98/vserver-fpolicy-policy-scope-modify.html#parameters

2) After modifying the above file, how do we make sure this is the version used on all enabled svms.
Run a vserver fpolicy policy scope show -vserver <VSERVER_NAME> to check the include (Blocked) and exclude (Unblocked) extesnions

3) What is the path of the original disallowed extensions file?\
There is no path or file for these disallowed extentions/