To further the wack-a-mole problem: If you set those extensions to be in the system pool and assume the system pool has no data-disks, it is still possible for GPFS 3.5 to create a file in the system pool if one is utilizing the small-files-in-metadata feature (whatever it's called now) and if the file is 0-3.9K in size where it will be stored in the xattrs. So, this only works for mp3's >3.9K :) Probably OK for mp3's but not if, say, you wanted to restrict .txt files, which are often that small.
On Mon, May 12, 2014 at 7:12 AM, Jonathan Buzzard <[email protected]> wrote: > On Mon, 2014-05-12 at 10:46 +0800, Pavel Pokorny wrote: >> Hello, >> after discussion with Marc A Kaplan from IBM I finished with this >> solution. So I am sharing it with all other user just in case you need >> it in future. >> >> >> Example placement policy file: >> >> >> /* --- Enable .avi so it will not be denied by default --- */ >> RULE 'enable_avi' SET POOL 'data' FOR FILESET (nfsexport) WHERE >> RegEx(lower(name),['\.avi$']) >> >> >> /* --- Deny all following extensions --- */ >> RULE 'deny_files' SET POOL 'system' FOR FILESET (nfsexport) WHERE >> RegEx(lower(name),['\.avi$|\.mp[ae1234]$|\.mpe?g[23]?$|\.eml$|\.idx$| >> \.mbo?x$|\.msg$|\.ost$|\.otf$|\.pab$|\.pst$|\.aac$|\.aif*$|\.as[fx]$| >> \.au$|\.flac$|\.m3u$|\.midi?$|\.mov$|\.ogg$|\.qtw?$|\.ram$|\.rmi?$| >> \.rmvb$|\.snd$|\.swf$|\.vob$|\.wa[vx]$|\.wm[av]$|\.wvx$|\.bmp$|\.dib$| >> \.eps$|\.gif$|\.img$|\.jfif$|\.jpe?g?$|\.pcx$|\.png$|\.psd?$|\.raw$| >> \.if$|\.spiff$|\.tif*$']) >> > > To demonstrate why this is a wack-a-mole exercise, as a user of your > system I will just save in iPod friendly format, all my audio AAC > encoded in .m4a files, all my video H.264 encoded in .m4v files, and my > audiobooks in .m4b format :-) > > I would further note that it is rather trivial to pick a random > extension say .sdf and associate that with just about any program, most > of which examine the contents of the file and don't rely on the > extension. > > Further noting if you are continuing in your wack-a-mole exercise I > could use .divx which you have conveniently not blocked. > > Finally being the resourceful sort I will just embed it all in a PDF, or > word document, or powerpoint, or ... > > I don't know exactly what your customer is expecting, but this sounds > like a management idea, with little understanding of how things work in > the real world. > > > JAB. > > -- > Jonathan A. Buzzard Email: jonathan (at) buzzard.me.uk > Fife, United Kingdom. > > > _______________________________________________ > gpfsug-discuss mailing list > gpfsug-discuss at gpfsug.org > http://gpfsug.org/mailman/listinfo/gpfsug-discuss -- Zach Giles [email protected] _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at gpfsug.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
