App Control: How to Prevent an Installer File from Having Promoted Child Files
book
Article ID: 287024
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
How to break the typical promotion propagation from installer files to their child files
Environment
- App Control Console: All Supported Versions
Resolution
- This can be accomplished using an 'Expert' rule type in Rules > Software Rules > Custom tab
- Under 'Approval Actions', the 'Demote process' and 'Don't Promote Children' actions can be used to stop the approval propagation
- Specify the process in question
Feedback
thumb_up
Yes
thumb_down
No