Mission 97

Script trust review

Hash and compare a training deployment script before trusting it.

Security administration
8 minutes Admin Lesson 97 of 360
sha256sumcatstat
Lesson 97 of 360 0/360 lessons 0/17 missions Security administration · 8 minutes
0%
Continue View profile
Ops lab terminal Training lab
New learnerrank 0XP 0%complete
learner@clairos:/home/learner $ Unix ops lab: type a command, press Enter
Instructions 8 minutes

Click any instruction for the command details, the why, and the common mistake to avoid.

Hash deploy script

Run sha256sum scripts/deploy.sh.

sha256sum scripts/deploy.sh
Read checksum file

Run cat data/checksums.txt.

cat data/checksums.txt
Inspect script

Run stat scripts/deploy.sh.

stat scripts/deploy.sh
Lesson support

What to notice while you play.

Objective

Use checksum and metadata review on a script.

Hint

Hash scripts/deploy.sh and read the checksum notes.

Why it matters

Supply-chain review starts with knowing what changed.

Common mistakes
  • Trusting a script because of its name.
  • Skipping content review.
Reference

Commands in this lesson.

cat <file>

Print text file contents.

sha256sum <file>

Print a deterministic training checksum.

stat <path>

Show lab file details.