Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> prevent users from install unapproved software

While they could prevent it, that's not how. The software is never "installed". It's only unzipped to scoops install directory (usually home/scoop/...)

Then it adds the install directory to the PATH and it's done. The copied executables have never been marked as unknown by windows in my experience.

Admins could of course lock down systems to only allow executables with specific hashedls which are manually whitelisted by the admins, but just disallowing installs won't help at all

Disallowing powershell or scripting altogether makes it impossible to use as well.



> Disallowing powershell or scripting altogether makes it impossible to use as well.

You can't really do that, as pwsh can be embedded easily.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: