#479

External installer checksum authorization 9f9ab2441c96

OpenDicklesworthstoneopened 9d ago

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

  • Authorization digest: 9f9ab2441c9631a6bb62170971c6de78bbc313b2912c4cbd1f97b1a318eec360
  • Authorization status: required
  • Pinned base: b6e512028704bab81b667a2af5b7c27da752f0bf
  • Verification report SHA256: 1b6c3ea708b574684ba7873ec2fae5e0f18f35e7ddb84a8dfd296f2f8c64129f

First-observation evidence

  • uv
    • URL: https://astral.sh/uv/install.sh
    • expected: 1f5390d273b0158bd5eaa3527ae049f3667baa881abb1e7c883dd637d84432f9
    • observed: 1c6e7f025499664633ac2dce43a210800510e9ef0625c52e034a8afdf8bf177a

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:9f9ab2441c9631a6bb62170971c6de78bbc313b2912c4cbd1f97b1a318eec360

Activity

0

No activity yet.