Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

Defender ASR rules block coreutils

Abierto
  • ¿Algo no está bien?
#183 1 comentario 0 reacciones 0 asignados Ver en GitHub

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
5/5
Tiempo estimado
Más de una semana
Aptitud para principiantes
25/100
Tipo de issue
Error
Claridad
Necesita aclaración
Estado de actividad
Activo
Stack tecnológico
rust
Área
cli, operating-systems

Línea de trabajo

No source files, tests, or entry points are named. Start by reproducing the coreutils installation failure on Windows with the listed Defender Attack Surface Reduction rules, then review the attached error and determine whether compatibility or a workaround requires input from the Defender PG; done means the interaction and an agreed resolution are documented.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

I installed coreutls on a machine where the following Defender Attack Surface Reduction rules have been deployed:

Name                                                                                              Action GUID
----                                                                                              ------ ----
Block executable files from running unless they meet a prevalence, age, or trusted list criterion        01443614-cd74…
Block JavaScript or VBScript from launching downloaded executable content                                d3e037e1-3eb8…
Block process creations originating from PSExec and WMI commands                                  Block  d1e49aac-8f56…
Use advanced protection against ransomware                                                        Block  c1db55ab-c21a…
Block executable content from email client and webmail                                            Block  be9ba2d9-53ea…
Block executable content from email client and webmail                                            Block  be9ba2d9-53ea…
Block untrusted and unsigned processes that run from USB                                          Block  b2b3f03d-6a65…
Block credential stealing from the Windows local security authority subsystem (lsass.exe)         Block  9e6c4e1f-7d60…
Block all Office applications from creating child processes                                       Block  d4f940ab-401b…
Block credential stealing from the Windows local security authority subsystem (lsass.exe)         Block  9e6c4e1f-7d60…
Block Adobe Reader from creating child processes                                                  Block  7674ba52-37eb…
Block Office applications from injecting code into other processes                                Block  75668c1f-73b5…
Block execution of potentially obfuscated scripts                                                        5beb7efe-fd9a…
Block Office applications from creating executable content                                        Block  3b576869-a4ec…
Block Office applications from creating executable content                                        Block  3b576869-a4ec…
Block Office communication application from creating child processes                              Block  26190899-1602…
Block Office communication application from creating child processes                              Block  26190899-1602…
Block Win32 API calls from Office macro                                                           Block  92e97fa1-2edf…
Block persistence through WMI event subscription                                                         e6db77e5-3df2…

And this has resulted in the following error message:
Image

You might want to check with the Defender PG to check whether there is a way to get around this.

Thanks!

Lenguaje dominante
Rust
Estrellas
5.2k
Forks
109
Merge medio
1 d 16 h
PR fusionados (30 d)
3

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de microsoft/coreutils

Todos los issues de microsoft/coreutils

Issues similares

Más issues de Rust

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.