Add and remove components from the whitelist

Prev Next

You can add new components to the initial whitelist to allow their execution on a protected system. If needed, you can remove components from the whitelist.

Task

Specify the components as file names, directory names, or volume names.
Action Command syntax Description
Add components to the whitelist. sadmin solidify [<arguments> <components>] After the initial whitelist is created, execution is blocked for the components that are not included in the whitelist. If needed, add more components to the whitelist.
Remove all components from the whitelist. sadmin unsolidify Remove all components from the whitelist using this command. When you remove components from the whitelist, they are no longer protected by Application Control.
Remove selected components from the whitelist. sadmin unsolidify [<arguments> <components>] Specify the components that you want to remove from the whitelist.

You can add or remove components from the whitelist as described in this table.

Component Description
File name Add files to the whitelist. For example,

sadmin solidify filename1 ... filenameN

Remove files from the whitelist. For example,

sadmin unsolidify filename1 ... filenameN

Directory name Add all supported files (recursively) under specified directories to the whitelist. For example,

sadmin solidify directoryname1 ... directorynameN

Remove all supported files in one or more directories from the whitelist. For example,

sadmin unsolidify directoryname1 ... directorynameN

Volume name Add all supported files (recursively) under specified system volumes to the whitelist. For example,

sadmin solidify volumename1 ... volumenameN

Remove all supported files in one or more system volumes from the whitelist. For example,

sadmin unsolidify volumename1 ... volumenameN

File name

Directory name

Volume name

Optionally, you can specify supported arguments with the command.

  • Addsadmin solidify [ –q | –v ] filename1 ... filenameN | directoryname1 ... directorynameN | volumename1 ... volumenameN
  • Removesadmin unsolidify [ –v ] filename1 ... filenameN | directoryname1 ... directorynameN | volumename1 ... volumenameN
Here are the arguments descriptions:
  • The -q argument displays only error messages.
  • The -v argument displays all messages.