Skip to content

RackStack v1.113.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 May 23:54
· 68 commits to master since this release
v1.113.0
69b2c43
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

RackStack v1.113.0

Auto-released by CI on version bump in Header.ps1.

SHA256 verification

c3b7d8cecf433367c53b4ec93f67fbb2a2f29892bfe915f8a83451fcd557288e  RackStack.exe
58c7b141ab197c2ef40b7ecf313c2e06fadd24aae59daeafe2a2dd07ce6e9f4e  RackStack v1.113.0.ps1
df45124ba2f3f4374068e38cc6e685ea0d58db190aeb9e66e5b5752974db0555  defaults.example.json

Verify with (Get-FileHash RackStack.exe -Algorithm SHA256).Hash.ToLower().

Supply-chain attestations

  • Build provenance (SLSA Level 3): verify the EXE came from this exact workflow run on this commit: 
    gh attestation verify RackStack.exe --owner TheAbider
  • Cosign keyless signatures: each artifact is signed via Sigstore Fulcio + GitHub OIDC. Verify with: 
    cosign verify-blob \`
  --certificate RackStack.exe.pem \`
  --signature RackStack.exe.sig \`
  --certificate-identity-regexp "^https://github.com/TheAbider/RackStack/.github/workflows/ci.yml@refs/heads/master$" \`
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \`
  RackStack.exe
  • SBOM (CycloneDX): see RackStack-1.113.0-sbom.cyclonedx.json attached below.

Changes

SMB signing + encryption enforcement — two new CLI actions plus an Operations-menu item for hardening the SMB server on this host.

  • SmbSecurityCheck (read-only) — reports the current SMB server posture: required/enabled signing, EncryptData, RejectUnencryptedAccess, and whether SMBv1 is still enabled. -OutputFormat JSON emits the posture for fleet auditing; no changes are made.
  • SmbEnforce (reversible) — requires SMB signing and encryption for every share served by this host (Set-SmbServerConfiguration -RequireSecuritySignature $true -EncryptData $true). The prior signing/encryption state is captured first and registered as a session undo action, and the change is fully Dry-Run aware (queued with an Undo closure that restores the prior values).

Operations Menu gains [35] SMB Signing & Encryption Enforcement (interactive, with a confirmation prompt and a heads-up that very old clients that cannot sign/encrypt SMB may lose access). Addition to 56-OperationsMenu (no new module). CLI actions: 194 → 196.

Assets 13
Loading