M86 Security M86 Threat Analysis Reporter, Руководство пользователя

Страница: 515 / 938

W
EB
F
ILTER
A
PPENDICES
S
ECTION
A
PPENDIX
D
M86 S
ECURITY
U
SER
G
UIDE
487
Step 3: Add an option line for the application
Enter an option line for each application to be blocked or
bypassed.
To block an application, for example:
block_firefox -c “c:\Program Files\Mozilla Firefox\Firefox.exe” -k
To bypass an application, for example:
bypass_myapp -c “c:\Program Files\MyCorporation\MyCus-
tomApp\MyApp.exe” -b
To enabling verbose logging for an application, for example:
logall_IE -c “c:\Program Files\Internet Explorer\iexplore.exe”
-xt *,0 -xl *,0
Here’s an example of the entire set of entries to enable
verbose logging for all applications, block Firefox for
Windows, and grant unfiltered access to Myapp.exe:
Mode0
logall -c * -xl *,0 -xt *,0
block_firefox -c *\Program Files\Mozilla Firefox\Firefox.exe* -k
pass_myapp -c *\Program Files\MyCompany\MyApp\Myappl.exe* -b
NOTES : The first word of each option is an arbitrary “label”; you
can use any name containing characters [a-z],[A-Z],[0-9], or an
underscore (‘_’).
The -c option specifies a partial command line match. You could,
therefore, just specify “Firefox.exe” instead of listing the entire
path. However, doing so could also make it easier for a sophisti-
cated end user to exploit a bypass setting.