Test Access Protection installation

Test the software to make sure that Access Protection is enabled and can protect your system.

1. Log on to the system as a user with administrator rights.
2. Change the directory to the Threat Prevention bin directory.
   /opt/McAfee/ens/tp/bin
3. Run the command:
   ./mfetpcli --getapstatus
   If Access Protection status is Enabled, verify whether Access Protection is working.

   To verify whether Access Protection is working, create a rule to block a file /tmp/testfile1.

   ./mfetpcli --createaprule --rulename test1 --block enable --report enable --subrulename stest1 --subruletype file --operation create --includetargetfile /tmp/testfile1

   When you run the command from the /opt/McAfee/ens/tp/bin directory, a rule test1 with a subrule stest1 is created that blocks the user from creating a file or directory with the name testfile1 in the /tmp directory.

4. Run the command: touch /tmp/testfile1
   The following message is displayed: cannot touch '/tmp/testfile1': Permission denied

   For more information about Access Protection commands, see the Trellix Endpoint Security (ENS) for Linux product guide.