Authorizing and banning execution of binaries by name

Prev Next

You can override the applied protection by specifying the name of binaries (programs or files) to authorize or ban their execution.

When you specify a binary name to authorize its execution on a protected system, all binaries that have the same name and are present on the system or network directories are authorized to execute. Similarly, if you ban a binary by specifying its name, all binaries that have the same name are not allowed to execute.

For example,

  • sadmin attr add -a trusted_executable
  • sadmin attr add -u untrusted_executable