Kaspersky Embedded Systems Security for Linux

Editing general application settings

February 15, 2024

ID 234832

Root privileges are required to change application settings.

To edit the general application settings:

  1. Save the general application settings to the configuration file using the --get-app-settings command:

    kess-control [-T] --get-app-settings --file <configuration file path>

  2. Open the created configuration file, edit the necessary settings, and save the changes.
  3. Import the settings from the configuration file into the application using the --set-app-settings command:

    kess-control [-T] --set-app-settings --file <configuration file path>

    To enable use of Kaspersky Security Network, run the kess-control --set-settings command with the --accept-ksn flag as follows: kess-control --set-app-settings UseKSN=Basic|Extended --accept-ksn.

Kaspersky Embedded Systems Security applies the new values of the settings after restart.

You can use the created configuration file to import the settings into the application installed on another device.

The kess-control --get-app-settings command

The kess-control --get-app-settings command displays the general application settings. You can also use this command to export the general application settings to a configuration file.

Command syntax

kess-control [-T] --get-app-settings [--file <configuration file path>] [--json]

Arguments and keys

--file <configuration file path> – path to the configuration file where the application settings will be saved. If you specify the name of a file without specifying its path, the file will be created in the current directory. If a file with the specified name already exists in the specified path, it will be overwritten. If the specified directory cannot be found on the disk, the configuration file will not be created. If you do not specify the --file option, the general application settings will be displayed on the console.

--json – format of the configuration file where the application settings will be saved. If a file format is not specified, the settings will be exported to an INI file.

Example:

Export the general application settings to a file named kess_config.ini. Save the created file in the current directory:

kess-control --get-app-settings --file kess_config.ini

The kess-control --set-app-settings command

The kess-control --set-app-settings command sets the general application settings using the command options or imports the general application settings from the specified configuration file.

Command syntax

kess-control [-T] --set-app-settings <setting name>=<setting value> <setting name>=<setting value>

kess-control [-T] --set-app-settings --file <configuration file path> [--json]

Arguments and keys

--file <configuration file path> – full path to the configuration file to import the settings into the application.

--json – format of the configuration file to import the settings into the application. If a file format is not specified, the application attempts to import settings from an INI file. If the import fails, an error is displayed.

Examples:

Import general settings into the application from the configuration file /home/test/kess_config.ini:

kess-control --set-app-settings --file /home/test/kess_config.ini

Set the detail level for the trace file to low:

kess-control --set-app-settings TraceLevel=NotDetailed

Add a mount point to be excluded from scan scope by tasks that use a file operation interceptor (File Threat Protection and Anti-Cryptor):

kess-control --set-app-settings ExcludedMountPoint.item_0000="/data"

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.