Regardless of whether you create a policy or define a rule group, the framework available to define rules is the same.
These considerations apply to path-based rules.
Paths don't need to be absolute when specifying rules. For example, when defining an updater, you can specify partial or fully qualified paths.
Paths can contain white spaces.
Paths can include the wildcard characters to specify file paths and file names. When using wildcards, ensure that specified string matches a limited set of file paths or file names. If the specified string matches many files, we recommend you revise the string.
Paths can include the
* wildcard character. Using
/abc/*/def is allowed while
/abc/*.sh,
/abc/*.*, or
/abc/doc.* are not supported.
Application Control and Change Control > Application and Change Control 6.x > Trellix Application and Change Control 6.4.x - Linux Product Guide > Using the software > Using rule groups in a managed environment > Manage rule groups and policies
Application Control and Change Control > Application and Change Control 6.x > Trellix Application and Change Control 6.5.x - Linux Product Guide > Using the software > Using protection rules
Application Control and Change Control > Application and Change Control 6.x > Trellix Application and Change Control 6.4.x - Linux Product Guide > Using the software > Using protection rules