Native fpolicy questions

Question

Hello all,

Ontap 9.13.1

After enabling native fpolicy we encountered some quiestions:

1) How do we modify the disallowed extensions file. The current kb is a bit unclear about that.

2) After modifying the above file, how do we make sure this is the version used on all enabled svms.

3) What is the path of the original disallowed extensions file?

ChLokesh · Accepted Answer

Hello There,

Please find the answers below.

1) How do we modify the disallowed extensions file. The current kb is a bit unclear about that.
Use the vserver fpolicy policy scope modify -file-extensions-to-include command to add (Block)or remove (Unblock) specific file extentioss.
https://docs.netapp.com/us-en/ontap-cli-98/vserver-fpolicy-policy-scope-modify.html#parameters

2) After modifying the above file, how do we make sure this is the version used on all enabled svms.
Run a vserver fpolicy policy scope show -vserver <VSERVER_NAME> to check the include (Blocked) and exclude (Unblocked) extesnions

3) What is the path of the original disallowed extensions file?\
There is no path or file for these disallowed extentions/