Test the software to make sure that Access Protection is enabled and can protect your system.
Log on to the system as a user with administrator rights.
Change the directory to the Threat Prevention bin directory.
/opt/McAfee/ens/tp/binRun the command:
./mfetpcli --getapstatusIf Access Protection status is Enabled, verify whether Access Protection is working.
To verify whether Access Protection is working, create a rule to block a file
/tmp/testfile1../mfetpcli --createaprule --rulename test1 --block enable --report enable --subrulename stest1 --subruletype file --operation create --includetargetfile /tmp/testfile1When you run the command from the
/opt/McAfee/ens/tp/bindirectory, a ruletest1with a subrulestest1is created that blocks the user from creating a file or directory with the nametestfile1in the/tmpdirectory.Run the command:
touch /tmp/testfile1The following message is displayed:
cannot touch '/tmp/testfile1': Permission deniedFor more information about Access Protection commands, see the Trellix Endpoint Security (ENS) for Linux product guide.