Should CIS whitelist files from trusted setup globaly?

[Maniak2000]

Let’s say you have an installer that is trusted by CIS (signed), you run it and it installs just fine without questions, and all files \ executables from that installer are whitelisted locally, so every time you actually run the application it’s also runs without questions.

Now let’s say something happened and you’ve reinstalled CIS, or cleaned entire “trusted files” list, so now when you run previously installed application, it most likely won’t be recognized.

So I ask, do you think CIS should somehow update it’s online whitelist with files that came from trusted installer? Or is it parhaps too much of a risk (since, although rare, sometimes malware signatures can be found in TVL)?

[Citizen_K]

May be it should offer the possibility to safe the Trusted Files list when exporting a configuration? Or make that better do that scheduled.

[thug4real]

@EricJH post:2

May be it should offer the possibility to safe the Trusted Files list when exporting a configuration? Or make that better do that scheduled.

Yes ability to export Trusted Files list will be more then appreciated. I submit a wish for this here: https://forums.comodo.com/wishlist-cis/ability-to-export-tfl-t92586.0.html

[SanyaIV]

@Maniak2000 post:1

Let’s say you have an installer that is trusted by CIS (signed), you run it and it installs just fine without questions, and all files \ executables from that installer are whitelisted locally, so every time you actually run the application it’s also runs without questions.

Now let’s say something happened and you’ve reinstalled CIS, or cleaned entire “trusted files” list, so now when you run previously installed application, it most likely won’t be recognized.

If the installer and vendor is trusted then the files spawned by this installer would most likely be trusted even after re-install because they would most likely still have the signature of a trusted vendor, though if it spawns files without any signatures and then after you reinstall those files would probably be unrecognized but I would blame that on the vendor that created the files since they didn’t sign all of the files that the installer drops.