Create Access Protection rules

You can create Access Protection rules, edit the rule settings, or delete the rules from the command line.

Log on to the system as a user with administrator rights.
Navigate to the default or custom directory. For example:
cd /opt/McAfee/ens/tp/bin
Run the command:
./mfetpcli --createaprule --rulename [value] --block [enable |disable] --report [enable |disable] --subrulename [value] --subruletype [file | process] --operations [value(s)] --includetargetfile [file1, file2...]

Example: Create a rule to block create file operation

./mfetpcli --createaprule --rulename test1 --block enable --report enable --subrulename stest1 --subruletype file --operations create --includetargetfile /tmp/testfile1

When you run the command from the /opt/McAfee/ens/tp/bin directory, a rule test1 with a subrule stest1 is created that blocks the user from creating a file or directory with the name testfile1 in the /tmp directory.