Read protection is a feature that protects the files, directories, and volumes by preventing the data in the files from being read. This feature is identified as deny-read in the features list.
Read protection is disabled by default and can be enabled by using the command sadmin features enable deny-read and it works only when the software is in Enabled mode.
If you read-protect a component, the whitelisted files in that component aren't allowed to run. Also, if you create a file in a read-protected component, the file can't be added to the whitelist. If a read-protected file or directory is moved to a different path, it is no longer read-protected.
Tip
Make sure that read-protected files are also write-protected. This ensures that the content of the files can't be read by renaming or moving the files. A read-protected file that isn't write-protected becomes readable if it's renamed or moved to another location.