Important
The active repository for the UniGetUI Elevator gsudo variant has moved to Devolutions/gsudo-distro. This repository will be made read-only and archived.
This project is a modified version of gerardog/gsudo so it can only be executed by a digitally-signed UniGetUI process.
Warning
Should you have security concerns or improvement ideas for/about UniGetUI Elevator, please open an issue in Devolutions/gsudo-distro or contact me directly via this form.
The UAC prompts shown to the user will have the UniGetUI name and icon, instead of the generic gsudo.
Furthermore, the elevator process will check the following before launching a UAC prompt, ensuring that an UniGetUI Elevator UAC prompt can only be spawned from UniGetUI.
- Own process name (Prevent from executing disguised as another executable via renaming)
- Parent process name (Allow only process with certain whitelisted names to execute the elevator)
- Parent process digital signature vailidity (the signature must be trusted by the system)
- Parent process digital signature subject (Only executables signed by me should allow the elevator to launch)
Should one of this fields fail verification, the execution will be immediately aborted, and no UAC prompt will be shown.
