|
Administrators can apply the following configuration settings
for Adobe AIR running on Windows:
-
Preventing installation of AIR applications
-
Preventing installation of untrusted AIR applications
-
Disabling automatic updates of Adobe AIR updates
These settings are intended for use only within a closed environment,
such as an enterprise where an IT administrator controls the end-users
systems. These settings cannot be used as part of a native installer
for distribution in an open environment.
On both Windows and Mac OS, there are administrative settings
for SWF content loaded into Adobe AIR from external sources (outside
the application).
Preventing installation of AIR applications
On Windows, add a DWORD value named AppInstallDisabled
to the HKey_Local_Machine\Software\Policies\Adobe\AIR registry key,
and set the value to 1.
On Linux, modify the AppInstallDisabled setting in the globalRuntime.conf configuration
file in /etc/opt/Adobe\ AIR/. For example, set AppInstallDisabled=1 to
prevent installation of AIR applications.
If no setting is present or if the value is set to 0, installation
of AIR applications is allowed. However, users still need system
privileges to install to the application’s destination directory.
Also, if system policy prohibits installation via Windows Installer
(MSI), that policy is also respected by AIR.
Even if installation of AIR applications is allowed, the following
restrictions are observed:
-
On Mac OS and Linux, to install or update an application,
the user needs to have adequate system privileges to install to
the application directory (and administrative privileges if the
application needs to update Adobe AIR).
-
On Windows, a user needs to have administrative privileges.
Preventing installation of untrusted AIR applications
On Windows, add a DWORD value named UntrustedAppInstallDisabled
to the HKey_Local_Machine\Software\Policies\Adobe\AIR registry key,
and set the value to 1.
On Linux, modify the UntrustedAppInstallDisabled setting in the
globalRuntime.conf configuration file in /etc/opt/Adobe\ AIR/. For
example, set UntrustedAppInstallDisabled=1 to prevent installation
of untrusted AIR applications.
If no setting is present or if the value is set to 0, installation
of untrusted AIR applications is allowed. However, users still need
system privileges to install to the application’s destination directory.
An AIR application is trusted when it has been signed with a
certificate that is trusted, or which chains to a certificate that
is trusted on the installation computer. For more information, see
“Code signing” in the
Adobe AIR Security white paper
.
Preventing automatic updates to Adobe AIR
On Windows, add a DWORD value named UpdateDisabled to the HKey_Local_Machine\Software\Policies\Adobe\AIR
registry key, and set the value to 1.
On Linux, modify the UpdateDisabled setting in the globalRuntime.conf
configuration file in /etc/opt/Adobe\ AIR/. For example, set UpdateDisabled=1
to prevent automatic updates of Adobe AIR.
On Mac OS, create a file named updateDisabled in the /Users/<username>/Library/Application
Support/Adobe/AIR directory.
If no setting is present or if the value is set to 0, automatic
updates of the runtime are allowed (when required by an AIR application)
or when an update becomes available via the background update mechanism.
However, users still need system privileges to install to the application’s
destination directory.
Even if automatic updates are not prevented through this setting,
the user needs to have administrative privileges for automatic updates
of the runtime to proceed.
Settings for SWF content loaded externally
AIR applications can load SWF content and HTML content
loaded from outside the application (for example, from a web URL
or from a directory). Content loaded from outside the application
observes the same security rules as content loaded in a web browser.
For example, such content
cannot
call AIR APIs that provide
access to the local file system.
Flash Player configuration files apply to SWF content loaded
from outside the applications. For information on these settings,
see the
Adobe Flash Player Administration Guide
.
Group Policy Objects (GPO)
Adobe AIR currently does not support Group Policy Objects
(GPOs). To be notified when this option becomes available send e-mail
to DL-license-air-enterprise@adobe.com.
|
|
|
