
●
The
hdfs
command.
●
Lustre commands - When Lustre directories are isolated by tenant, the whitelisted wrapper command protects
against all attempts to specify a pathname or indirectly reach a pathname outside of tenant isolated space.
○
setstripe
○
getstripe
○
setdirstripe
○
getdirstripe
○
mkdir
○
pool_list
○
osts
○
mdts
○
df
○
quota
○
data_version
○
hsm_state
○
hsm_set
○
hsm_clear
○
hsm_action
○
hsm_archive
○
hsm_restore
○
hsm_release
○
hsm_remove
○
hsm_cancel
○
swap_layouts
○
migrate
○
mv
○
help
○
version
●
Two convenient commands for diagnosing problems using Urika-GX's tenant proxy mechanism:
○
env
○
true
○
false
IMPORTANT: The
env
command does not permit any command line arguments, so it does not support
command execution, and only displays the environment. All the Cray Graph Engine (CGE) CLI
commands,
mrun
and yam (commands for flexing the cluster) commands cannot be executed from within
tenants in this release. Modifying the list of whitelist commands is currently not supported.
Security
S3016
184