Adobe 12001196 - Acrobat - Mac Bedienungsanleitung

Acrobat® Family of Products

Acrobat

Application Security Guide

(all versions)

Adobe Application Security Guide for the Adobe® Acrobat Family of Products.

If this guide is distributed with software that includes an end user agreement, this guide, as well as the software

described in it, is furnished under license and may be used or copied only in accordance with the terms of such license.

Except as permitted by any such license, no part of this guide may be reproduced, stored in a retrieval system, or

transmitted, in any form or by any means, electronic, mechanical, recording, or otherwise, without the prior written

permission of Adobe Systems Incorporated. Please note that the content in this guide is protected under copyright law

even if it is not distributed with software that includes an end user license agreement.

The content of this guide is furnished for informational use only, is subject to change without notice, and should not be

construed as a commitment by Adobe Systems Incorporated. Adobe Systems Incorporated assumes no responsibility or

liability for any errors or inaccuracies that may appear in the informational content contained in this guide.

Please remember that existing artwork or images that you may want to include in your project may be protected under

the copyright owner. Please be sure to obtain any permission required from the copyright owner.

Any references to company names in sample templates are for demonstration purposes only and are not intended to

refer to any actual organization.

Adobe, Acrobat®, Reader®, and the Adobe logo are either registered trademarks or trademarks of Adobe Systems

Incorporated in the United States and/or other countries.

Windows®, Windows 7®, and Windows XP® are registered trademarks of Microsoft® Corporation registered in the United

States and/or other countries. Mac® and Macintosh® are registered trademarks of Apple Computer®, Inc. in the United

States and other countries. All other trademarks are the property of their respective owners.

Adobe Systems Incorporated, 345 Park Avenue, San Jose, California 95110, USA. Notice to U.S. Government End Users.

The Software and Documentation are “Commercial Items,” as that term is defined at 48 C.F.R. §2.101, consisting of

“Commercial Computer Software” and “Commercial Computer Software Documentation,” as such terms are used in 48

C.F.R. §12.212 or 48 C.F.R. §227.7202, as applicable. Consistent with 48 C.F.R. §12.212 or 48 C.F.R. §§227.7202-1 through

227.7202-4, as applicable, the Commercial Computer Software and Commercial Computer Software Documentation are

being licensed to U.S. Government end users (a) only as Commercial Items and (b) with only those rights as are granted to

all other end users pursuant to the terms and conditions herein. Unpublished-rights reserved under the copyright laws of

the United States. Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA. For U.S. Government

End Users, Adobe agrees to comply with all applicable equal opportunity laws including, if appropriate, the provisions of

Executive Order 11246, as amended, Section 402 of the Vietnam Era Veterans Readjustment Assistance Act of 1974 (38

USC 4212), and Section 503 of the Rehabilitation Act of 1973, as amended, and the regulations at 41 CFR Parts 60-1

through 60-60, 60-250, and 60-741. The affirmative action clause and regulations contained in the preceding sentence

shall be incorporated by reference.

Contents

1 Application Security Overview 1

2 Protected View 3

2.1€€€Overview 3

2.2€€€Configuration 5

2.2.2€€€Trust overrides 5

2.3€€€Unsupported configurations 7

2.4€€€FAQs 7

3 Protected Mode 9

3.1€€€Overview 9

3.2€€€Changes across releases 10

3.3€€€Configuration 10

3.3.2€€€Trust overrides 11

3.4€€€Read policy changes for 11.0 13

3.4.2€€€User experience 14

3.5€€€Unsupported configurations 15

3.6€€€FAQs 16

4 Enhanced Security 20

4.1€€€Feature interaction 20

4.2€€€Changes across releases 20

4.3€€€Configuration 21

4.4€€€Trust overrides 24

4.4.1€€€Privileged locations 25

4.4.2€€€Internet Access 25

4.5€€€User experience 26

4.6€€€Examples 28

4.7€€€Troubleshooting and FAQs 30

5 JavaScript Controls 31

5.1€€€Permissions basics 31

5.2€€€Workflow diagrams 31

5.3€€€Changes across releases 31

5.4€€€Disabling JavaScript 32

5.5€€€Blacklisting JS APIs 33

5.5.3€€€Trusted override 34

5.6€€€Disabling menu-invoked JS 37

5.7€€€Disabling global object access 38

5.8€€€High privileged JavaScript 38

5.9€€€Certified document trust 40

5.10€€€JavaScript invoked URLs 40

5.11€€€JavaScript injection 40

5.12€€€Workflow changes by version 41

5.12.3.2€€€Overview 43

6 Attachments 45

6.1€€€Black lists and white lists 45

6.2€€€Configuration 45

6.3€€€Blacklisted extensions 48

7 Cross Domain Configuration 51

7.1€€€Cross domain basics 51

7.1.6€€€User experience 55

7.2€€€Policy file configuration 56

7.3€€€Certificate-based permissions 60

7.4€€€Server configuration 63

7.5€€€Calling policies via JavaScript 67

7.6€€€Troubleshooting 67

8 External Content Access 76

8.1€€€Internet access 76

8.1.1€€€Changes across releases 76

8.1.2€€€Configuration 76

8.2€€€Multimedia (legacy) 78

8.3€€€XObjects 82

8.4€€€3D content (9.5.1 and later) 83

8.5€€€Flash integration 83

9 Trust Methods 85

9.1€€€Privileged locations 85

9.1.1€€€Changes across releases 85

9.2€€€Internet access 89

9.3€€€Certified document trust 89

9.4€€€Per-certificate trust 90

9.5€€€Cross domain trust 90

9.6€€€XObject (stream) access 91

10 Content security 92

1 Application Security Overview

This Application Security Guide describes configuration details for the Acrobat family of products,

including sandboxing (Protected View and Protected Mode), enhanced security, scripting controls,

attachments, and other features. The primary goal here is to encourage enterprise stakeholders who

configure and deploy clients to manage them in a secure way. This content is designed for IT

administrators, workflow owners, and technically savvy users who need to customize their application's

security capabilities.

Adobe provides a security model designed to help you protect your environment from security attacks.

You should explore the options for tuning applications for the desired security level. The big picture is

relatively simple: Acrobat products allow you to apply application-wide protections and disable risky

features while at the same time allowing you to selectively assign trust to files, folders, hosts, protocols,

apis, and other workflow components.

Note

The easiest way to propagate settings across your organization is to configure an installed application

and then use the Customization Wizard's registry feature to copy the settings to the application

installer.

Best practice checklist

Protect your systems and users

1. Enable Protected Mode.

2. Enable Protected View.

3. Enable Enhanced Security.

4. Review the JavaScript controls and set as needed.

5. Review the attachment white and black lists.

6. Review multimedia restrictions.

7. Review settings for XObjects, 3D content, and Flash.

Assign trust to workflow components

1. Set up privileged locations for files, folders, and hosts.

2. Use Trust Manager to configure internet access if you need more control than that offered by

Privileged Locations.

3. Set up cross domain access if you need it.

4. For digital signature workflows, set certificate trust and control user interaction with signed PDFs via

certificates, seed values, etc.

Many HKCU settings have an HKLM mirror so that IT can disable, lock, and control permissions in a way

that prevents end user changes.

Additional resources

Core Documentation

Resource Description

Application Security Guide Section 1€€€Application Security Overview

Section 1€€€Application Security Overview Page 1

Preference Reference A dictionary of plist and registry configuration preferences.

Enhanced Security Quick Key A one page guide to enhanced security configuration.

JavaScript Quick Key A one page guide to JavaScript execution workflows and configuration.

IT-centric videos A series of configuration and deployment videos for enterprise IT.

Specs, Tools, Whitepapers

Resource Description

JavaScript Blacklist Tool This LABs utility allows IT to modify the JS API blacklist for any Acrobat product.

Flash Security in Acrobat Describes the security model when Flash runs inside a PDF document.

Cross Domain Policy File Specification A specification and guide for creating server-based cross domain policy files with examples.

News

Resource Description

Security Bulletins & Advisories Keep abreast of the latest updates which mitigate security issues.

Security Notification Service Receive alerts about vulnerabilities and updates.

Incident Response Team Blog Get news and pre-notification of updates about all Adobe products.

Secure Software Eng. Team Blog Track news and events from Adobe and the security software industry.

Section 1€€€Application Security Overview Application Security Guide

Page 2 Section 1€€€Application Security Overview

2 Protected View

On Windows, Acrobat 10.1 introduced a sandbox called Protected View (PV). With 11.0, the feature is

extended to Reader. PV is a highly secure, read-only mode that blocks most actions and application

behavior until the user decides whether or not to trust the document.

PV is another defense-in-depth feature that is tightly integrated with the existing enhanced security

feature. PV in Acrobat leverages the successful sandbox implementation already in place for Adobe

Reader while providing a user experience that should be familiar to Microsoft Office 2010 users.

Protected View

2.1 Overview

Under the covers, the PV sandbox is similar to Reader's Protected Mode sandbox and provides equal

protection. Just like Reader, Acrobat strictly confines the execution environment of untrusted programs;

that is, any PDF and the processes it invokes. When PV is enabled, Acrobat assumes some or all PDFs

are potentially malicious based on user preferences and confines processing to a restricted sandbox.

Note

For links to all documentation about Reader's sandbox, see

http://learn.adobe.com/wiki/display/security/Protected+Mode+FAQ.

Due to the rich nature of Acrobat's capabilities, Acrobat's behavior with PV enabled is slightly more

complex than Reader's. The Acrobat team has specifically tailored application behavior for two types of

scenarios: viewing PDFs with the standalone application and viewing PDFs with a browser. The rationale

behind providing two protection experiences was driven by a need to preserve usability as well as the right

level of functionality and security in each mode.

2.1.1 PV in a standalone product

In the standalone application, behavior is simple and parallels the Protected View provided by Office

2010. During a file download and/or save, web browsers and email programs typically mark documents

such as Internet files and attachments with a "potentially unsafe" flag. When you open such a document,

Application Security Guide Section 2€€€Protected View

Section 2€€€Protected View Page 3

Acrobat displays a warning bar at the top of the viewing window. In this state, many of Acrobat's features

that interact with and change the document are disabled and the associated menu items are greyed out in

order to limit user interaction.

The view is essentially read-only, and the disabled features prevent any embedded or tag-along malicious

content from tampering with your system. Once you've decided to trust the document, choosing Enable

All Features exits PV, re-enables all menu items, and provides permanent trust for the file by adding to

enhanced security's list of privileged locations (see Integration with enhanced security. The document is

now open in a full, unsandboxed Acrobat process.

Protected View: Yellow message bar

2.1.2 PV in a browser

When a PDF is opened in a browser, Protected View provides a streamlined experience that doesn't

utilize a warning bar. Instead, browser-based PDFs provide a Reader-like experience for documents that

have been "rights enabled." That is, all of Reader's features are available in addition to features that

become enabled when a document author uses Acrobat to extend features to Reader users. These

features include signing existing form fields, adding new signature fields, saving form data, etc.

In this respect, a PDF in the browser's Protected View is more capable than a PDF in the standalone

Protected View. On the other hand, the browser-based capabilities are always limited while the

standalone application enables users to achieve full functionality with a single click of a button.

Protected View 10.x: standalone vs browser functionality

Feature Standalone Browser

Drag-drop PDFs to the reading or navigation

pane

No Yes

Printing No Yes

Advanced Printing No No

Saving No Yes

Pan and Zoom No No

Loupe Tool No No

Reading mode No Yes

Full screen mode No Yes

Protected View 11.x: standalone vs browser functionality

Feature Standalone Browser

Drag-drop PDFs to the reading or navigation

pane

No No

Printing No No

Advanced Printing No No

Saving No No

Pan and Zoom No No

Loupe Tool No No

Reading mode No Yes

Full screen mode No No

Section 2€€€Protected View Application Security Guide

Page 4 Section 2€€€Protected View

2.2 Configuration

2.2.1 UI and registry config

Protected View can be enabled, disabled, and configured in other ways to provide the level of security you

need. That is, you decide when and how to use Protected View based on your level of trust for the PDFs

you interact with.

1. Go to Preferences > Security (Enhanced).

2. In the Protected View panel, select one of the following to set iProtectedView:

Registry configuration enables pre and post deployment configuration via the Customization Wizard,

scripts, GPO, and other IT-centric methodologies. The application often uses internal keys that aren't

visible by default. If the requisite key does not exist, manually create it.

2.2.2 Trust overrides

There are several ways to assign trust so that this feature works in a trusted context:

• Users can trust documents on-the-fly when the PDF opens: When the Yellow Message Bar appears,

choose the Options button and then trust the document once or always.

• Create a privileged location via the UI for the file, folder, or host.

• Create a privileged location via the registry/plist by placing a tID at:

[HKCU\Software\Adobe\<product name>\<version>\TrustManager\<cTrustedSites or TrustedFolders>\]

"(All of the cabs are populated)"

2.2.3 Locking Protected View

Protected View can be locked so that the end user cannot change the setting. When locked, the user

interface is disabled (greyed out). To do so, simply set the HKLM key as you would HKCU:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\<product name>\<version>\FeatureLockDown]

"iProtectedView"

2.2.4 Enabling logging

Logging is available for users who need to troubleshoot problems where a workflow or plugin does not

work when Protected Mode is enabled. The log may provide guidance as to whether a custom policy file

should be used to re-enable broken workflows or plugins.

In addition to enabling logging via the UI (above), you can turn on logging and configure a log file location

via the registry.

To enable logging, specify a log file location:

1. Go to HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\10.0\Privileged.

2. Right click and choose New > REG_SZ Value.

Application Security Guide Section 2€€€Protected View

Section 2€€€Protected View Page 5

3. Create tBrokerLogfilePath.

4. Right click on tBrokerLogfilePath and choose Modify.

5. Set the value. For example: C:\DOCUME~1\<username>\LOCALS~1\Temp\BrL4FBA.tmp

Policy logging for a policy violation:

[08:12/13:46:16] real_path: \BaseNamedObjects\ZonesCacheCounterMutex

[08:12/13:46:16] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[08:12/13:46:16] NtCreateMutant: STATUS_ACCESS_DENIED

[08:12/13:46:16] real_path: \BaseNamedObjects\ZonesLockedCacheCounterMutex

[08:12/13:46:16] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[08:12/13:46:16] NtCreateKey: STATUS_ACCESS_DENIED

[08:12/13:46:16] real path: \REGISTRY\USER\S-1-5-21-762979615-2031575299-929701000-51250\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

[08:12/13:46:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[08:12/13:46:16] NtCreateKey: STATUS_ACCESS_DENIED

[08:12/13:46:16] real path: \REGISTRY\USER\S-1-5-21-762979615-2031575299-929701000-51250\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

[08:12/13:46:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

2.2.5 Policy configuration

Protected view prevents a number of actions which IT can bypass by creating a white list of allowed

actions. The component that reads these policies is called a "broker." The broker performs actions based

on those policies, and when an admin provides a properly configured policy file, the broker can bypass the

application's default restrictions.

The broker first reads and applies all custom policies prior to applying the default policies. Since custom

policies take precedence, they are useful for fixing broken workflows, supporting third party plug-ins, and

cases where an unsupported machine configurations cause the Protected Mode to impair required

functionality.

Configurable policies have two requirements:

• They must reside in the Reader install directory adjacent to the AcroRd32.exe in the install folder:

D:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\

• The name of the policy file must be ProtectedModeWhitelistConfig.txt.

2.2.5.1 Enabling custom policies

To allow the application to read and use a policy file, registry configuration is required. To enable policy

files:

1. Go to

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Adobe Acrobat\10.0\FeatureLockDown.

2. Right click and choose New > DWORD Value.

3. Create bUseWhitelistConfigFile.

4. Right click on bUseWhitelistConfigFile and choose Modify.

5. Set the value to 1 to enable the white list.

2.2.6 Verifying PV is on

While you can verify whether the application has Protected View enabled by viewing the Enhanced

Security panel, it is also possible to verify the document you are currently viewing is subject to Protected

View's protections.

Note

Section 2€€€Protected View Application Security Guide

Page 6 Section 2€€€Protected View

Andere Handbücher für 12001196 - Acrobat - Mac

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Adobe Software Handbücher

Adobe

Adobe 12040118 - After Effects Standard Leitfaden

Adobe

Adobe 29180248 - Photoshop Elements 5.0 Bedienungsanleitung

Adobe

Adobe 22012057DM - Soundbooth CS3 - PC Bedienungsanleitung

Adobe

Adobe ACROBAT 7.0.5 SDK Bedienungsanleitung

Adobe

Adobe 29180155 - Photoshop Elements 4.0 Betriebsanleitung

Adobe

Adobe 65061456 Handbuch

Adobe

Adobe ATMOSPHERE Bedienungsanleitung

Adobe

Adobe 13101332 - Photoshop - Mac Bedienungsanleitung

Adobe

Adobe 38040165 - Visual Communicator - PC Bedienungsanleitung

Adobe

Adobe 65009626 - Soundbooth CS4 - PC Leitfaden

Adobe

Adobe IMPORT EXPORT FILTERS README Bedienungsanleitung

Adobe

Adobe PREMIERE PRO 4.0 Referenzhandbuch

Adobe

Adobe ILLUSTRATOR 10 Montage- und Bedienungsanleitung

Adobe

Adobe DEVICE CENTRAL CS4 - READ ME Leitfaden

Adobe

Adobe 65016038 - Contribute CS4 - Mac Bedienungsanleitung

Adobe

Adobe 62000236 Leitfaden

Adobe

Adobe 37980039 - FrameMaker Server - Unix Bedienungsanleitung

Adobe

Adobe 17510676 - InDesign CS PageMaker Edition Bedienungsanleitung

Adobe

Adobe 65030365 - FrameMaker - PC Bedienungsanleitung

Adobe

Adobe 16001500 - Illustrator CS2 - Mac Bedienungsanleitung

Adobe

Adobe ILLUSTRATOR 6.0 Bedienungsanleitung

Adobe

Adobe 65011817 - Fireworks CS4 - Mac Service-Handbuch

Adobe

Adobe FLEX 2 - CREATING AND EXTENDING COMPONENTS Bedienungsanleitung

Adobe

Adobe 65010248 - Illustrator CS4 - PC Bedienungsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Novell

Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Novell

Novell SP2 - S Bedienungsanleitung