Configuring a Package Installation Whitelist

You can configure a package installation whitelist from the command line. Select a whitelist type and, for binary or folder-path whitelisting, provide one or more comma-separated values.

Whitelist Types

Use the -whitelistType parameter to select the whitelist behavior, as follows:

• 0: Disable the whitelist feature. Do not provide -whitelistValues.

• 1: Configure a whitelist of approved binaries. Provide binary names in -whitelistValues as a comma-separated list.

• 2: Configure a whitelist of approved folder paths. Provide folder paths in -whitelistValues as a comma-separated list.

The installer applies the selected whitelist type and values to the local installation configuration.

Windows Installations

From the folder that contains the package, run the installation command with setup.exe.

Disable the Whitelist

To disable the whitelist, use the following command:

setup.exe -whitelistType 0

Whitelist Binaries

To pass binary names as a comma-separated list in one quoted argument, use the following command:

setup.exe -whitelistType 1 -whitelistValues "cvlib.exe,cvlibbin.dll"

Whitelist Folder Paths

To pass folder paths as a comma-separated list in one quoted argument, use the following command. Use the path separator supported by Windows.

setup.exe -whitelistType 2 -whitelistValues "C:\whitelistpath,C:\newfolder\whitelistfolder"

UNIX Installations

From the folder that contains the package, run the installation command with cvpkgadd.

Disable the Whitelist

To disable the whitelist, use the following command:

cvpkgadd -whitelistType 0

Whitelist Binaries

To pass binary names as a comma-separated list in one quoted argument, use the following command:

cvpkgadd -whitelistType 1 -whitelistValues 'cvlib.so,cvlibbin.so'

Whitelist Folder Paths

To pass folder paths as a comma-separated list in one quoted argument, use the following command:

cvpkgadd -whitelistType 2 -whitelistValues '/opt/whitelistpath,/opt/newfolder/whitelistfolder'

Validate the Configuration

After the package installation completes, verify that the selected whitelist mode and every value in the comma-separated list are present in the local installation configuration.