Skip to main content

Storage / File Storage / Controls / DEV

Restrict Writable Mount Access to Authorized Clients

CCC.FileStor.CN03 · Data

Ensure that write access to the shared file system is granted only to clients explicitly authorized for modification.

Related Capabilities

IDTitleDescription
CCC.FileStor.CP01Managed File SystemsThe service always provisions managed file system resources that expose a hierarchical namespace of files and directories for shared read-write access by networked clients.
CCC.FileStor.CP02NFS Protocol Mount AccessThe service always supports mounting the file system from compute instances using the Network File System (NFS) protocol over the provider network.
CCC.FileStor.CP04POSIX File SemanticsThe service always exposes standard POSIX file and directory operations, including permissions and ownership metadata, with concurrent multi-client access to the same file system.
CCC.Core.CP01Encryption in Transit Enabled by DefaultThe service automatically encrypts all data using industry-standard cryptographic protocols prior to transmission via a network interface.
CCC.Core.CP02Encryption at Rest Enabled by DefaultThe service automatically encrypts all data using industry-standard cryptographic protocols prior to being written to a storage medium.

Related Threats

IDTitleDescription
CCC.FileStor.TH03File Content is Modified Through Shared Writable MountA writable NFS mount exposed to multiple clients may be used to modify, encrypt, or delete files across the shared namespace without application-level coordination. File content is altered or rendered inaccessible at scale across the mounted file system. This impacts integrity and availability of stored data and dependent workloads.

Assessment Requirements

IDTextApplicability
CCC.FileStor.CN03.AR01When a client that is not authorized for write access mounts the file system, the service MUST enforce a read-only mount or MUST reject write operations from that client.tlp-green, tlp-amber, tlp-red
CCC.FileStor.CN03.AR02When the file system is used by multiple concurrent clients, the service MUST support configuration that limits destructive file operations to authorized administrative principals.tlp-amber, tlp-red