You can review the list of all Application Control features and their status (enabled or disabled) on your system.
Run this command at the command prompt.
sadmin features listThe features list is displayed on the screen.
Note
Starting from the Application Control 6.0.0 release, the features list has been minimized to show only the features that require changes regularly.
Feature
Description
Default status
Supported Operating System
checksum
It compares the checksum of the file to be executed with the checksum stored in the allow list.
Enabled
Linux
deny-read
It read-protects the specified components. When this feature is applied on components, they cannot be read. Read protection works only when Application Control is running in Enabled mode.
Disabled
Linux
deny-write
It write-protects the specified components. When this feature is applied on the components, they are rendered as read-only to protect your data.
Enabled
Linux
integrity
This feature:
Protects Application Control files and registry keys from unauthorized tampering.
Allows the product code to run even when the components are not present in the allow list.
Ensures that all product components are protected.
Prevents accidental or malicious removal of components from the allow list to ensure that the product doesn't become unusable.
Enabled
Linux
script-auth
It prevents the execution of supported script files that are not in the allow list. Only allow listed script files are allowed to execute on the system.
For example, script files with #! (hash exclamation point) for supported local file systems (on Linux) are added to the allow list and are allowed to run.
Enabled
Linux