microsoft / microsoft/winget-cli

Cannot override installer hash as admin. Even if EnableLua = 0 (UAC OFF)

Open
#715 64 comments 10 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Breaking-Change Issue-Feature
Dominant language
C++
Stars
26.4k
Forks
1.8k
Avg merge
1d 11h
Merged PRs (30d)
15

Description

Cannot override installer hash when running as admin, even if EnableLua = 0 (UAC OFF)

I want to install the package. Please let me install the package.

Steps to reproduce

Try to install a package with a mismatched hash while running as administrator.

Expected behavior

It allows you to install.

Actual behavior

It does not allow you to install.


Edited:

This feature is to track the work to have an administrator required setting to enable the ability to override a hash mismatch.
It would be something like winget settings --enable ignore-security-hash-argument.
The group policy on "--force" will need to be evaluated and potentially modified or a new one added for this use case.
There should be a separate argument required for "--ignore-security-hash" rather than "--force" which would work in both user and admin modes if the setting is enabled.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the CLI handling for --force, the proposed --ignore-security-hash argument, and the settings command, then inspect how administrator mode and the relevant group policy are evaluated. Done means an administrator-enabled setting permits the separate hash-override argument in the intended user and admin modes, with policy behavior clarified.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
cli, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.