Application rules order ( v3.0.17.304, x32, XP2 SP2)[Resolved]

[gibran]

IIRC easrly CFP releases prevented the use to rearrange Computer Security Policy applications.

@egemen post:60

Hi Malbeth,

There is a reason why the rules are not sortable. Because the order of the rules are very important in D+ and FW.

For example, if you notice, we have “All Applications” entry as the first entry in the rules. By default, D+ is configured to allow all applications to create files in temporary folders. This is achieved by the “All Applications” entry. If it were not the first entry, it would not work as expected. Especially when wildcards are involved, the order of the rules becomes crucial.

This is valid for the firewall rules too. So sorting is disabled for this very reason.

As a quick feature reminder, order of the rules can be easily changed in these grids by DRAG n DROP using the mouse.

Egemen

This limitation was then removed when Comodo approved user feedback requesting that.

@dchernyakov post:11

User always has ability to create contradictory rules or policies manually and we assume that he understands what he does. But there is no way for CFP to create contradictory rules automatically while user answer allow or block on security alerts.

After rule sort limitation was removed I believed that the rationale behind that was superseded but it looks like I was wrong to assume that All Application policy was applied first regardless its position.

As there is no official description about the design behaviour I guess no one really is able to undertand this.

EDIT: striked out incorrect assertions

Can you please describe the design behaviour?

Does that overriding behaviour happens only for Execute access rights?