How to blocklist/allowlist apps on Linux devices

This document will guide you on how to deploy the allowlist/blocklist policy to block apps on Linux devices.

Applications, either system-installed or user-installed on the device, let users perform specific tasks. They interact with the system in various ways to function properly. It makes the IT admins responsible for ensuring that applications run on company devices are trusted, not only to put a check on unauthorized/malicious apps but also to maintain compliance.

With their open-source nature, Linux devices offer unmatched flexibility and support a vast range of hardware, from servers and desktops to embedded systems. Managing app access on such adaptable devices becomes effortless with Hexnode UEM.

Hexnode UEM enables administrators to blocklist or allowlist apps by curating a list of apps to allow/restrict. Blocklisting prevents users from launching restricted apps, even when they are installed on the device. Whereas, allowlisting ensures that only approved applications are available, either marking the device as non-compliant if non-approved apps are present or by blocking unapproved ones.

Blocklisting apps on Linux devices

To blocklist apps on Linux devices,

1. Log in to your Hexnode UEM portal.
2. Navigate to the Policies tab.
3. Create a New Policy or choose an existing one.
4. Select Linux as the platform.
5. Choose App Management > Blocklist/Allowlist. Click on Configure.
6. Policy name – Assign a suitable name for the policy. This is a mandatory field.
7. Description – Provide a brief description of the policy.
8. Choose Blocklist as the Type. Click on +Add button. Choose either Add App or Add Group.
9. Choose applications from among the displayed enterprise apps or store apps. Click Done.

   Or

   Select the necessary app groups and click Done.

10. Navigate to Policy Targets. Click on +Add Devices. Select the target devices. Click OK > Save.
11. To associate policies to a device group, select Device Groups from the left pane under Policy Targets, and follow the above instructions. Similarly, you can associate the policy to Users, User Groups or Domains from the same pane.

Allowlisting apps on Linux devices

1. Log in to your Hexnode UEM portal.
2. Navigate to the Policies tab.
3. Create a New Policy or choose an existing one.
4. Select Linux as the platform.
5. Choose App Management > Blocklist/Allowlist. Click on Configure.
6. Policy name – Assign a suitable name for the policy. This is a mandatory field.
7. Description – Provide a brief description of the policy.
8. Choose Allowlist as the Type. Click on +Add button. Choose either Add App or Add Group.
9. Choose applications from the list of enterprise apps or store apps, then click Done.

   Or

   Select the necessary app groups, then click Done.

10. Navigate to Policy Targets. Click on +Add Devices. Select the target devices. Click OK > Save.
11. To associate policies to a device group, select Device Groups from the left pane under Policy Targets, and follow the above instructions. Similarly, you can associate the policy to Users, User Groups or Domains from the same pane.