5. Locate the
FeatureLockDown
file in the Preferences folder, and open it in a text editor.
6. Find
BuiltInPermList [/s
.
7. Edit or add an extension and value in the format of <.extension>:<0-3>. For example,
.zip:1
.
Linux
To edit the registry to modify the default behavior of file attachments in Linux:
1. Navigate to
<install location>/Adobe/<application and version/Reader/globalPrefs
.
2. Open AttachmentPerms in a text editor.
3. Edit or add an extension and value in the format of
<.extension>:<0-3>
. For example,
.zip:1
.
Adding Custom Attachment Extensions
To add custom extensions, add your own file extension entries to the very end of the list. The method is
the same on both Windows and Macintosh. Use the following format for each custom extension:
|.FILEEXTENSION:PERMVALUE
For example, to add the extension .`ext` with a value of Always Allowed, you would add:
.ext:2
6.2.2 Resetting attachment permissions
Because the registry list could grow over time and users do not have direct access to the lists through the
user interface, resetting the list to its original state may result in the highest level of security.
To reset the black and white lists:
1. Choose
Preferences > Trust Manager
.
2. In the PDF File Attachments panel, choose
Restore
.
Attachment panel in Trust Manager
6.2.3 Allowing attachments to launch applications
The Trust Manager enables users to control whether or not non-PDF attachments can open with other
applications. By default, this option is enabled so that common file types such as .doc (not on the
application's black list) can be easily opened in the appropriate application.
To set attachment preferences:
1. Choose
Preferences > Trust Manager
.
2. Configure
Allow opening of non-PDF file attachments with external applications
:
• Checked: Default. The application uses its stored black list to determine whether
Acrobat should let the attachment launch an application action, so the attachment can
be opened.
• Unchecked: Clicking or opening an attachment will never result in launching it's
associated viewing application. Use this option if a higher level of security is needed.
6.2.4 Modifying permissions on-the-fly
Application Security Guide
Section 6 Attachments
Section 6 Attachments
Page 47
