Skip to content
This repository has been archived by the owner on Apr 21, 2022. It is now read-only.

Don't add defender exclusion by default #433

Open
Hades32 opened this issue Nov 24, 2021 · 1 comment
Open

Don't add defender exclusion by default #433

Hades32 opened this issue Nov 24, 2021 · 1 comment

Comments

@Hades32
Copy link

Hades32 commented Nov 24, 2021

Adding exclusions to an anti-virus is opening the system to new attack vectors, especially when it's a guessable/well-known location which is user-writable.

Therefore, it should be possible (as a developer) to completely remove this option, or even better to remove it by default and add an explicit toggle to enable it with some note, that this is a potentially risky thing to do

Ref:

Section "Add %LOCALAPPDATA%\\${config.dirname} to Windows Defender exclusions (highly recommended for performance!)"
ExecShell "" '"$0"' "/C powershell -ExecutionPolicy Bypass -Command $\\"& {Add-MpPreference -ExclusionPath $\\"$LOCALAPPDATA\\${config.dirname}$\\"}$\\" -FFFeatureOff" SW_HIDE
SectionEnd

@Hades32
Copy link
Author

Hades32 commented Nov 24, 2021

cc @srlowe @pdcastro

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant