Adobe 12001196 Security Guide - Page 28

Trust overrides

Page 28 highlights

Section 4 Enhanced Security 4.3.4 UNIX configuration Enhanced security preferences cannot be locked on UNIX systems. To configure the settings: 1. Navigate to the .preferences file. For example: • ~/.adobe/Acrobat/9.0/Preferences/reader_prefs • ~/.adobe/Acrobat/8.0/Preferences/reader_prefs 2. Navigate to /TrustManager. 3. Add and set the keys in the file. 4. Save and exit. Application Security Guide Note For 8.x, only one key (bEnhancedSecurityStandalone) controls behavior for both standalone and browser modes. Do not set bEnhancedSecurityInBrowser. Preferences: Enhanced security settings for UNIX /TrustManager [/c >] 4.4 Trust overrides There are several ways to assign trust so that this feature works in a trusted context: • Specifying trusted URLs via Trust Manager • Trusting certificates for privileged network operations • Server side management of cross domain access • Users can trust documents on-the-fly when the PDF opens: When the Yellow Message Bar appears, choose the Options button and then trust the document once or always. • Create a privileged location via the UI for the file, folder, or host. • Create a privileged location via the registry/plist by placing a tID under each cab/dict at: [HKCU\Software\Adobe\\\TrustManager\(cTrustedSites or TrustedFolders)\cCrossdomain] [HKCU\Software\Adobe\\\TrustManager\(cTrustedSites or TrustedFolders)\cDataInjection] [HKCU\Software\Adobe\\\TrustManager\(cTrustedSites or TrustedFolders)\cExternalStream] [HKCU\Software\Adobe\\\TrustManager\(cTrustedSites or TrustedFolders)\cScriptInjection] [HKCU\Software\Adobe\\\TrustManager\(cTrustedSites or TrustedFolders)\cSilentPrint] [HKCU\Software\Adobe\\\TrustManager\(cTrustedSites or TrustedFolders)\cWeblink] Page 24 Section 4 Enhanced Security

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96

4.3.4
UNIX configuration
Enhanced security preferences cannot be locked on UNIX systems.
To configure the settings:
1. Navigate to the .preferences file. For example:
• ~/.adobe/Acrobat/9.0/Preferences/reader_prefs
• ~/.adobe/Acrobat/8.0/Preferences/reader_prefs
2. Navigate to /TrustManager.
3. Add and set the keys in the file.
4. Save and exit.
Note
For 8.x, only one key (
bEnhancedSecurityStandalone
) controls behavior for both standalone and
browser modes. Do not set
bEnhancedSecurityInBrowser
.
Preferences: Enhanced security settings for UNIX
/
TrustManager
[
/
c
<<
/EnhancedSecurityInBrowser [/
b false]
/EnhancedSecurityStandalone [/
b false]
>>
]
4.4
Trust overrides
There are several ways to assign trust so that this feature works in a trusted context:
Specifying trusted URLs via Trust Manager
Trusting certificates for privileged network operations
Server side management of cross domain access
Users can trust documents on-the-fly when the PDF opens: When the Yellow Message Bar appears,
choose the
Options
button and then trust the document
once
or
always
.
Create a privileged location via the UI for the file, folder, or host.
Create a privileged location via the registry/plist by placing a tID under each cab/dict at:
[HKCU\Software\Adobe\<product name>\<version>\TrustManager\(cTrustedSites or TrustedFolders)\cCrossdomain]
[HKCU\Software\Adobe\<product name>\<version>\TrustManager\(cTrustedSites or TrustedFolders)\cDataInjection]
[HKCU\Software\Adobe\<product name>\<version>\TrustManager\(cTrustedSites or TrustedFolders)\cExternalStream]
[HKCU\Software\Adobe\<product name>\<version>\TrustManager\(cTrustedSites or TrustedFolders)\cScriptInjection]
[HKCU\Software\Adobe\<product name>\<version>\TrustManager\(cTrustedSites or TrustedFolders)\cSilentPrint]
[HKCU\Software\Adobe\<product name>\<version>\TrustManager\(cTrustedSites or TrustedFolders)\cWeblink]
Section 4
Enhanced Security
Application Security Guide
Page 24
Section 4
Enhanced Security