The Match command takes one required argument, object_type_value, which is the case-sensitive AAC object type to match.
Note
Exploit Prevention is not supported in the ARM architecture.
This table lists the valid values of object_type_value.
Match object_type_ value | Description | Valid match object type | Notes |
|---|---|---|---|
FILE | Controls access to a file. | Target | |
KEY | Controls access to both key and value data in a key object. | Target | |
PROCESS | Controls access to a process handle. |
| If PROCESS is not used in the Initiator match, you must use THREAD. If the access to be blocked is CREATE, the object type must be SECTION rather than PROCESS. |
SECTION | Controls access to creating a section object. | Target | |
THREAD | Controls access to a thread handle. |
| If THREAD is not used in the Initiator match, you must use PROCESS. |
VALUE | Controls access to value data in a key object. | Target |