Kaspersky Lab Internet Security 2011, Base, 3U, 1Y, ENG KL1837UCCFS User Manual
Product codes
KL1837UCCFS
U
S E R
G
U I D E
120
To disable the downloads of rules from Kaspersky Security Network:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Application Control component.
3. In the left part of the window, in the Applications restriction section, uncheck the Load rules for applications
from Kaspersky Security Network (KSN) box.
Do disable the updates of Kaspersky Security Network rules for previously unknown applications:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Application Control component.
3. In the right part of the window, in the Applications restriction section, uncheck the Update rules for
previously unknown applications from KSN box.
I
NHERITANCE OF RESTRICTIONS OF THE PARENT PROCESS
Application startup may be initiated either by the user or by another application running. If the startup is initiated by
another application, it creates a startup procedure including parent and child applications.
another application, it creates a startup procedure including parent and child applications.
When an application attempts to obtain access to a protected resource, Application Control analyzes the rights of all
parent processes of this application, and compares them to the rights required to access this resource. The minimum
priority rule is then observed: when comparing the access rights of the application to those of the parent process, the
access rights with a minimum priority will be applied to the application's activity.
parent processes of this application, and compares them to the rights required to access this resource. The minimum
priority rule is then observed: when comparing the access rights of the application to those of the parent process, the
access rights with a minimum priority will be applied to the application's activity.
Access right priority:
1. Allow. Access right data has the highest priority.
2. Prompt for action.
3. Block. Access right data has the lowest priority.
This mechanism prevents a non-trusted application or an application with restricted rights from using a trusted
application to perform actions requiring certain privileges.
application to perform actions requiring certain privileges.
If an application's activity is blocked because a parent process has insufficient rights, you can edit these rules (see
section "Editing application rules" on page
section "Editing application rules" on page
) or disable inheritance of restrictions from the parent process.
You should modify the rights of a parent process only if you are absolutely certain that the process' activities do not
threaten the security of the system.
threaten the security of the system.
To disable inheritance of restrictions from the parent process, perform the following steps:
1. Open the application settings window.
2. In the left part of the window, in the Protection Center section, select the Application Control component.
3. In the right part of the window, in the Configure application rules and protected resources section, click the
Applications button.
4. In the Applications window that opens, select the required application from the list.