autocontainment bug

Comodo Internet Security - CIS Install / Setup / Configuration Help - CIS
#1

A. THE BUG/ISSUE: removing ignored application from autocontainment rules doesnot block that application again

what I did & what happened:

if you unblock blocked application using “unblock for all security components” option then an ignore rule is added to autocontainment rules

https://b.radikal.ru/b04/1803/b7/6dcb718a6198.png

https://a.radikal.ru/a33/1803/13/2fcf21f2a00c.png

but if you disable or remove that rule the application will lunch anyway without problems p.s. if you do same things but use “unblock for components shown in blocked by column” then application will be blocked

B. YOUR SETUP
CIS v10.2.0.6526
fresh install on win 7
containment rules are changed to block every unrecognized application

#2

Hi Fashisti,

Thanks for reporting. We are investigating it.

Kind Regards,
PremJK

#3

Not a bug, when you use unblock from all components then it also changes the file rating to trusted for that file, therefore it won’t be blocked by auto-containment because auto-containment does not contain trusted rated files.

#4

hmm ??? and where is that trusted rating stored? can it be deleted? but anyway it doesnot feels intuitive when you delete ignore rule and it keeps ignoring that file

#5

Listed here . . .

#6

my bad :embarassed: i looked there multiple times but i was testing bat files and didnot saw that you need to select all file types in order to see bat files