You can remove binaries authorized by name to prevent them from executing on a protected system.
Run these commands at the command prompt.
Command
Description
sadmin attr remove -a <filename>Removes the added rule to authorize the specified binary by name. Specify the same file name or path that was used to add the rule.
sadmin attr remove -m <filename>Removes the added rule to block the interactive mode for a file.
sadmin attr remove -u <filename>Removes the added rule to ban the specified binary by name. Specify the same file name or path that was used to add the rule.
sadmin attr flush -aRemoves the authorized by name rules for all files.
sadmin attr flush -mRemoves the block in interactive mode rules for all files.
sadmin attr flush -uRemoves the banned by name rules for all files.