Loading...

Knowledge Center


JAR file execution control using scripts in Application Control
Technical Articles ID:   KB79201
Last Modified:  8/13/2019
Rated:


Environment

McAfee Application and Control (MACC) 8.x.x, 7.x.x, 6.x.x

Problem

Application Control allows you to enable the execution control for scripts. You can establish custom associations between file extensions and the interpreters that interpret the content of such files. When you establish an association, these files become the supported file types and they need to be whitelisted. Files having these extensions are executed by these interpreters.

For JAR files, the Java interpreter can run a JAR file from any extension. Renaming a valid JAR file to a file with a different extension still allows it to be executed.

In summary, even if the file was not solidified, its execution is allowed on the system.

Solution

Technical Support is investigating this issue. As a temporary measure, implement the following workaround.

Workaround

A JAR file is a .zip file with classes and Manifest in it. To control the execution of JAR files using the scripts list, add their extensions to the scripts list.

Example:
If you have WinZip as the archive tool in your environment, you need to add the following rules:
  • .zip “java.exe” “javaw.exe”
  • .7z “java.exe” “javaw.exe”
Similarly, if you have more zipping tools and extensions in your environment, add them all to the script list to control the execution of the JAR files.

Rate this document

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.