Skip to main content

Storage / File Storage / Capabilities / DEV

POSIX File Semantics

CCC.FileStor.CP04

The service always exposes standard POSIX file and directory operations, including permissions and ownership metadata, with concurrent multi-client access to the same file system.

Related Threats

IDTitleDescription
CCC.FileStor.TH02POSIX Permissions Grant Unintended Shared AccessDefault file and directory permissions, identity mapping, or access control lists on the shared file system may be configured with broader scope than required for the workload. Users or processes on authorized mount clients can read or modify files outside their intended scope. This impacts confidentiality and integrity of file content stored on the shared file system.
CCC.FileStor.TH03File Content is Modified Through Shared Writable MountA writable NFS mount exposed to multiple clients may be used to modify, encrypt, or delete files across the shared namespace without application-level coordination. File content is altered or rendered inaccessible at scale across the mounted file system. This impacts integrity and availability of stored data and dependent workloads.