D+ doesn’t seem to support the Subsystem for UNIX-based Applications (SUA) properly. Here are two required changes:
- Add the associated executables to the whitelist - psxss.exe, init, inetd, etc. Note that init and inetd aren’t signed…
- Support adding POSIX subsystem executables to the safe files list, recursively. Currently if you try to add a folder + its files CIS only selects dll/exe files.