#458

External installer checksum authorization aa67fa00b5ec

OpenDicklesworthstoneopened 15d ago

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

  • Authorization digest: aa67fa00b5ecf2b39298677b96e4dbf6a5c4787322ccb1b3ff39f1681fdb62d1
  • Authorization status: required
  • Pinned base: 36c6482e65be71d7ba8a8134807e1c1a528b714c
  • Verification report SHA256: f6b3fb43d07b27ab413241851bd2ea03fa484df21fd4fa8073faa7df3cec7f6d

First-observation evidence

  • atuin
    • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
    • expected: e632c6d1dc71e75c9710caf5f645c11131f0d94c859ed6b4266444e11240abdb
    • observed: a8bd40dc786dbed74e63bcb9c2571314c619491d0bcbc8735dba5c77a076cdb2

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:aa67fa00b5ecf2b39298677b96e4dbf6a5c4787322ccb1b3ff39f1681fdb62d1

Activity

0

No activity yet.