I have users that are incapable of unchecking the box for installing Ask
Toolbar/McAfee AV when they are prompted to install Java updates. It’s not
enough that Java is a complete security nightmare by itself, but do I have
to endlessly uninstall these apps? Anyone with a solution to repackage Java
to avoid this?
GofBorg sounds like they ‘said’:
[color=blue]
I have users that are incapable of unchecking the box for installing
Ask Toolbar/McAfee AV when they are prompted to install Java updates.
It’s not enough that Java is a complete security nightmare by itself,
but do I have to endlessly uninstall these apps? Anyone with a
solution to repackage Java to avoid this?[/color]
So my response to GofBorg’s comment is…
I’m sure someone would have said it anyway, so I’ll say it
first…ZEN. 
–
Stevo
On Tue, 28 May 2013 19:54:07 GMT, GofBorg
GofBorg@no-mx.forums.opensuse.org wrote:
[color=blue]
I have users that are incapable of unchecking the box for installing Ask
Toolbar/McAfee AV when they are prompted to install Java updates. It’s not
enough that Java is a complete security nightmare by itself, but do I have
to endlessly uninstall these apps? Anyone with a solution to repackage Java
to avoid this?[/color]
Another option is Sophos Anti-virus. Sophos has an “Application
Control Policy” that you can use to prohibit certain applications. All
I had to do was select “McAfee Security Scan” and add it to the
Blocked list and it cannot install here anymore. Took seconds to do.
Of course that assumes you are already using Sophos as your AV
product.
I’m also looking into using Bundle Commander with ZCM to preconfigure
how Java, Flash, etc get installed. That should hopefully remove the
prompts for users to install/update the software.
Gosh… none of the RPMs I’ve installed have included those crappy bits
and pieces.
Good luck.
it’s easy to fix with or without zen (though zen makes it certainly
easier)
what you want to do is create a transform using something like orca and
disable all the update related junk and manage the deployment of updates
yourself
if you run the install from the msi with an appropriate transform there
is no more toolbar / mcaffee rubbish installed
–
gleach1
gleach1’s Profile: http://forums.novell.com/member.php?userid=934
View this thread: http://forums.novell.com/showthread.php?t=467074
On 5/28/2013 3:54 PM, GofBorg wrote:[color=blue]
I have users that are incapable of unchecking the box for installing Ask
Toolbar/McAfee AV when they are prompted to install Java updates. It’s not
enough that Java is a complete security nightmare by itself, but do I have
to endlessly uninstall these apps? Anyone with a solution to repackage Java
to avoid this?
[/color]
You can extract the MSI and deploy it like this or similar:
http://www.java.com/en/download/help/msi_install.xml
http://www.adminarsenal.com/admin-arsenal-blog/bid/58608/Install-Java-Silently
GofBorg wrote:
[color=blue]
I have users that are incapable of unchecking the box for installing
Ask Toolbar/McAfee AV when they are prompted to install Java updates.
It’s not enough that Java is a complete security nightmare by itself,
but do I have to endlessly uninstall these apps? Anyone with a
solution to repackage Java to avoid this?[/color]
Back when I used to manage an environment I would configure Java to not
autoupdate and then I handled updates either completely manually or
through ZCM (depended on the user).
–
Does this washcloth smell like chloroform?
Yah, thing is, they seem to update it daily.
Another option is Sophos Anti-virus. Sophos has an “Application[color=blue]
Control Policy” that you can use to prohibit certain applications. All
I had to do was select “McAfee Security Scan” and add it to the
Blocked list and it cannot install here anymore. Took seconds to do.
Of course that assumes you are already using Sophos as your AV
product.[/color]
This actually is the easiest solution. Is their AV engine more efficient
these days? We used to be a customer until it turned into serious bloatware
and crippled every PC I installed it on. Switched to F-Prot back around
2008, can’t even notice it running. Gives me an idea though, maybe I can
script to check for it installed and run a silent uninstall…Hmmm.
On Wed, 29 May 2013 15:32:04 GMT, GofBorg
GofBorg@no-mx.forums.opensuse.org wrote:
[color=blue][color=green]
Another option is Sophos Anti-virus. Sophos has an “Application
Control Policy” that you can use to prohibit certain applications. All
I had to do was select “McAfee Security Scan” and add it to the
Blocked list and it cannot install here anymore. Took seconds to do.
Of course that assumes you are already using Sophos as your AV
product.[/color]This actually is the easiest solution. Is their AV engine more efficient
these days? We used to be a customer until it turned into serious bloatware
and crippled every PC I installed it on. Switched to F-Prot back around
2008, can’t even notice it running. Gives me an idea though, maybe I can
script to check for it installed and run a silent uninstall…Hmmm.[/color]
I’ve been running Sophos since about 2001. I never had problems with
crippled PCs…maybe the settings I use. On-access scan works great.
Some of my older PCs have a slight slowdown during a full system scan,
but I only do that once a week.
Ken
GofBorg wrote:
[color=blue]
Yah, thing is, they seem to update it daily.[/color]
It’s not quite that bad. 
–
Does this washcloth smell like chloroform?
Hey Joseph Marton,
[color=blue]
It’s not quite that bad.[/color]
Almost.
–
Kim - 5/29/2013 12:58:09 PM
I’ve been running Sophos since about 2001. I never had problems with[color=blue]
crippled PCs…maybe the settings I use. On-access scan works great.
Some of my older PCs have a slight slowdown during a full system scan,
but I only do that once a week.[/color]
I was a big fan as well, but like I said performance went way downhill
after one of their engine changes and never came back. So I had really no
choice other than to abandon it. Really really awful on laptops. It may
be you’re just used to it. Maybe they’ve resolved the issues, the inquiry I
made they basically assigned as “won’t fix” so I assigned it to “won’t use”.
I’ll download it again and revisit. Thanks for the suggestion.
On Wed, 29 May 2013 22:29:30 GMT, GofBorg
GofBorg@no-mx.forums.opensuse.org wrote:
[color=blue][color=green]
I’ve been running Sophos since about 2001. I never had problems with
crippled PCs…maybe the settings I use. On-access scan works great.
Some of my older PCs have a slight slowdown during a full system scan,
but I only do that once a week.[/color]I was a big fan as well, but like I said performance went way downhill
after one of their engine changes and never came back. So I had really no
choice other than to abandon it. Really really awful on laptops. It may
be you’re just used to it. Maybe they’ve resolved the issues, the inquiry I
made they basically assigned as “won’t fix” so I assigned it to “won’t use”.
I’ll download it again and revisit. Thanks for the suggestion.[/color]
Did you notice the problem all the time or just during certain types
of scans? Was there a specific amount of ram or cpu that it was
taking? I’d like to compare against what I see here now.
Did you notice the problem all the time or just during certain types[color=blue]
of scans? Was there a specific amount of ram or cpu that it was
taking? I’d like to compare against what I see here now.[/color]
Been too long ago to remember specifics now. Sorry.
On Fri, 31 May 2013 17:27:28 GMT, GofBorg
GofBorg@no-mx.forums.opensuse.org wrote:
[color=blue][color=green]
Did you notice the problem all the time or just during certain types
of scans? Was there a specific amount of ram or cpu that it was
taking? I’d like to compare against what I see here now.[/color]Been too long ago to remember specifics now. Sorry.[/color]
Ok…no problem.