gerardog / gsudo

Sudo for Windows
https://gerardog.github.io/gsudo
MIT License
5.07k stars 136 forks source link

Issue: Sophos AV blocks gsudo #347

Open bh-chwo opened 2 months ago

bh-chwo commented 2 months ago

Issue Description

I tried upgrading some apps with winget, but my Sophos AV instantly blocked the function and isolates the PC.

Steps to Reproduce

  1. powershell
  2. gsudo winget upgrade
  3. PC is isolated

Screenshots

Screenshot 2024-04-25 115125

gsudo --debug winget upgrade
Debug: Invoking Shell: PowerShellCore
Debug: Command Line: --debug winget upgrade
Debug: Command to run: "C:\Program Files\PowerShell\7\pwsh.exe" -NoLogo -NoProfile -Command "winget upgrade"
Debug: Using Console mode TokenSwitch
Debug: Caller PID: 15432
Debug: Connected via Named Pipe ProtectedPrefix\Administrators\gsudo_DF763A2E0FF2D26118E29D84696CBBF5EB5C619350AB009D1B0B680D6A5ECDE8.
Debug: Creating target process: "C:\Program Files\PowerShell\7\pwsh.exe" -NoLogo -NoProfile -Command "winget upgrade"
Debug: Process token successfully substituted.
Debug: Process exited with code 0

Context: