The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

What is read protection?

Prev Next

Read protection is a feature that protects the files, directories , and volumes by preventing the data in the files from being read. This feature is identified as deny-read in the features list.

Read protection is disabled by default and can be enabled by using the command sadmin features enable deny-read and it works only when the software is in Enabled mode.

If you read-protect a component, the allow listed files in that component aren't permitted to run. Also, if you create a file in a read-protected component, the file can't be added to the allow list. If a read-protected file or directory is moved to a different path, it is no longer read-protected.

Tip

Make sure that read-protected files are also write-protected. This ensures that the content of the files can't be read by renaming or moving the files. A read-protected file that isn't write-protected becomes readable if it's renamed or moved to another location.