Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add VM-Assert-Signature & use to to add Google Chrome #824

Merged
merged 2 commits into from
Jan 12, 2024

Conversation

Ana06
Copy link
Member

@Ana06 Ana06 commented Jan 11, 2024

Add Google Chrome using the new VM-Assert-Signature function to check its signature instead of its hash during the installation. This PR doesn't not address the following issues which should be addressed in a different PR to make the review process easier:

Partially addresses #469. We need to use VM-Assert-Signature for sysinternals.vm` to fully address that issue.

`VM-Assert-Signature` will allows us to install packages checking their
signatures instead of their hash. Useful for Microsoft tools like
sysinternals that use URLs without version.

Co-authored-by: Genwei Jiang <[email protected]>
@Ana06 Ana06 requested review from binjo, day1player and a team January 11, 2024 16:51
@Ana06 Ana06 self-assigned this Jan 11, 2024
Copy link
Contributor

@day1player day1player left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Very simple.

Add Google Chrome using the new `VM-Assert-Signature` function.

Co-authored-by: Genwei Jiang <[email protected]>
Copy link
Contributor

@binjo binjo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Ana06 Ana06 merged commit 9775211 into mandiant:main Jan 12, 2024
4 checks passed
@Ana06 Ana06 mentioned this pull request Jan 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants