Resources

The 'Resources' folder contains definitions of trusted and untrusted resources. The Access restriction policy uses these definitions for isolating applications.

The default list of resources is required for GeSWall functionality and it is not recommended that you modify these however, you may add your own resource definitions, e.g. define additional file folders for confidential documents, or certain untrusted files.

To create a new resource definition, choose Action\New\Add Resource... from the main menu (alternative - mouse right click on the Resources folder in the right pane). A Resource Properties dialog will open.

The Security Class combo-box specifies the security class of the resource. It can be one of:

The rest of the dialog specifies identification parameters of the resource. It includes resource and identification types. The 'Resource Type' combo-box chooses the Windows native type of the resource:

• file - file or file directory
• registry - registry key
• device - device object exposed by Windows kernel, e.g. \Device\Tcp (exposed by tcpip.sys driver to implement tcp networking), \Device\Cdrom (usual name of cdrom drives)
• network - network access via TCP/IP protocol, e.g:
  • update.microsoft.com
  • www.cnn.com:80
  • 192.168.1.1/24
  • *
• system object - an object representing particular windows service, e.g.: SAM_DOMAIN\%MACHINENAME% represents SAM database interface for given machine
• section - memory section, e.g. \KnownDlls\kernel32.dll
• any - includes all possible resource types, not recommended

GeSWall identifies resources by owner user and name.

• Owner user - a user specified as owner in the Windows Security Descriptor. In the Resource edit-box you should type a user name or choose a user by the standard 'Select Users or Groups' dialog. By default, GeSWall has two definitions: Any resources owned by the local administrators group and local system are trusted, unless they are created by an isolated application.
• Name - a resource name prefix, e.g. c:\Program Files, %SystemRoot%\system32. The name may contain macro substitutions that must follow Resource Name Syntax.