root3nl / SupportApp

The Support App is developed by Root3, specialized in managing Apple devices. Root3 offers consultancy and support for organizations to get the most out of their Apple devices and is based in The Netherlands (Halfweg).
https://www.root3.nl
MIT License
585 stars 60 forks source link

Feature Request: Enhanced SupportHelper option to add checksum (SHA256) validation for Script execution. #154

Open headmin opened 10 months ago

headmin commented 10 months ago

Hi @jordywitteman,

As discussed earlier this week at the Univ of Utah - MacAdmin meeting where we both presented, it would be great to have an additional option on the SupportHelper to only run from a list of file hashes that are allowed to run, as a measure to secure and gate when to execute privileged scripts.

This idea is already present in another great community project (hats off to @bartreardon) - so the purpose is very well explained on File Verification in the Outset wiki here, as is the approach (see here Checksum.swift).