This article describes the trusted (authorized) update channel (Updater), which is available in MACC.
An Updater is a privilege granted by MACC to an authorized executable that allows it to make changes (create, modify, delete) to the files MACC protects. It can also run unauthorized (not in the white list) files. Any file operation done by an Updater process is seen as Authorized and so is allowed.
An Updater is not necessarily only an executable (.exe) file. Script files can be configured as an Updater too, but the interpreter associated with the script is granted the Updater permission. The following are prerequisites for an .exe or script to be configured and run as an Updater:
- Configured as an Updater.
- Must be an executable (.exe) or supported script.
- Must be authorized to run on an MACC protected system.
IMPORTANT: Since the release of MACC 7.0.1, MACC requires all binaries and or scripts to be solidified so
Updater permission can be granted.
|
Process (.exe file)
|
Modify solidified/write-protected/read-protected/integrity protected file
|
Run unsolidified / unauthorized
|
|
Updater
|
Allowed
|
Allowed
|
|
Non-Updater
|
Prevented
|
Prevented
|
NOTES:
- A process that is configured as Updater while it is already running must be restarted so Updater permission can be granted.
