Execution denials for .JAR files in Application Control and Change Control 6.1
Technical Articles ID:
KB79475
Last Modified: 9/26/2019
Environment
McAfee Application Control (MAC) 6.1
McAfee Change Control (MCC) 6.1
Summary
This article describes an issue where you see a denial of execution for .JAR files and archives.
Problem
The following are descriptions for each product when the denial of execution for .JAR files occurs:
MAC 6.1
Denial of execution of unsolidified jar file observed in enable mode and update mode.
MCC 6.1
Denial of execution of jar file observed in enable mode and update mode.
Solution
This issue is resolved in MAC/MCC 6.1.1 Hotfix 2 (or later), which is available from the McAfee Downloads site at: http://mcafee.com/us/downloads/downloads.aspx. For instructions to download updates, see KB56057.
Workaround
MCC 6.1 CAUTION: This article contains information about opening or modifying the registry.
The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see: http://support.microsoft.com/kb/256986.
Do not run a REG file that is not confirmed to be a genuine registry import file.
Click Start, Run, regedit,and click OK.
Navigate to: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swin\parameters\scriptauth]
Locate and delete the contents of the scriptauth registry value.
Restart your computer.
Workaround
MAC 6.1
Run the command: sadmin scripts remove jar java.exe
