Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

Defender ASR rules block coreutils

Aperta
  • Qualcosa non va?
#183 1 commento 0 reazioni 0 assegnatari Vedi su GitHub

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
5/5
Tempo stimato
Più di una settimana
Idoneità per principianti
25/100
Tipo di issue
Bug
Chiarezza
Da chiarire
Stato di attività
Attiva
Stack tecnologico
rust
Ambito
cli, operating-systems

Direzione di ricerca

No source files, tests, or entry points are named. Start by reproducing the coreutils installation failure on Windows with the listed Defender Attack Surface Reduction rules, then review the attached error and determine whether compatibility or a workaround requires input from the Defender PG; done means the interaction and an agreed resolution are documented.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

I installed coreutls on a machine where the following Defender Attack Surface Reduction rules have been deployed:

Name                                                                                              Action GUID
----                                                                                              ------ ----
Block executable files from running unless they meet a prevalence, age, or trusted list criterion        01443614-cd74…
Block JavaScript or VBScript from launching downloaded executable content                                d3e037e1-3eb8…
Block process creations originating from PSExec and WMI commands                                  Block  d1e49aac-8f56…
Use advanced protection against ransomware                                                        Block  c1db55ab-c21a…
Block executable content from email client and webmail                                            Block  be9ba2d9-53ea…
Block executable content from email client and webmail                                            Block  be9ba2d9-53ea…
Block untrusted and unsigned processes that run from USB                                          Block  b2b3f03d-6a65…
Block credential stealing from the Windows local security authority subsystem (lsass.exe)         Block  9e6c4e1f-7d60…
Block all Office applications from creating child processes                                       Block  d4f940ab-401b…
Block credential stealing from the Windows local security authority subsystem (lsass.exe)         Block  9e6c4e1f-7d60…
Block Adobe Reader from creating child processes                                                  Block  7674ba52-37eb…
Block Office applications from injecting code into other processes                                Block  75668c1f-73b5…
Block execution of potentially obfuscated scripts                                                        5beb7efe-fd9a…
Block Office applications from creating executable content                                        Block  3b576869-a4ec…
Block Office applications from creating executable content                                        Block  3b576869-a4ec…
Block Office communication application from creating child processes                              Block  26190899-1602…
Block Office communication application from creating child processes                              Block  26190899-1602…
Block Win32 API calls from Office macro                                                           Block  92e97fa1-2edf…
Block persistence through WMI event subscription                                                         e6db77e5-3df2…

And this has resulted in the following error message:
Image

You might want to check with the Defender PG to check whether there is a way to get around this.

Thanks!

Lingua principale
Rust
Stelle
5.2k
Fork
109
Merge medio
1g 16h
PR unite (30g)
3

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di microsoft/coreutils

Tutte le issue di microsoft/coreutils

Issue simili

Altre issue su Rust

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.