Excluding files and paths from the allow list

Prev Next

You can bypass the solidification status of a file by creating an exclusion. This process prevents specified files and paths from being added to the allow list and also "unsolidifies" files that are already on it.

This feature is used when files or paths do not need solidification. Unsolidified files and paths are not allowed to execute unless permitted by another rule. You can apply this exclusion by running a sadmin command.

To create an exclusion using a command:

  • Run the following command:

    sadmin skiplist add -s <path/file>

Risk assessment

The risk associated with this process is low. Once files are unsolidified, they cannot be executed by default. The only risk is that if you unsolidify a legitimate application, its execution is denied until another rule explicitly allows it.