Russell Hancox
8fe5e4e238
Logging: Update logMessage to use asl directly, adding a facility
2015-09-09 11:56:53 -04:00
Russell Hancox
02f23d0c62
santad: Add LogFileChanges option, remove LogAllEvents, fix key protection
2015-09-09 11:56:31 -04:00
Russell Hancox
ff6f4d4152
Common: Update SNTRule and SNTStoredEvent isEqual/hash/description methods.
2015-09-08 16:35:50 -04:00
Russell Hancox
98878f3e7c
Kernel/santad: Add file write logging and exec argv's.
...
This necessitated a large refactoring of a bunch of code, hence being a large commit. This moves all event logging into a separate class, moves logging of executions to be from FileOp events rather than Vnode events (so we can get the argv after the execve call has finished) and implements the logging of cached execs.
2015-09-08 16:33:59 -04:00
Russell Hancox
75158c11ea
santa-driver: Don't create santa_message_t structs on the stack.
...
Also rename userId field to uid and add gid field to match
2015-08-31 15:21:25 -04:00
Russell Hancox
a9ba99dc79
SNTFileInfo: Re-write mach header parsing
2015-08-27 15:25:12 -04:00
Russell Hancox
6385514257
santad: Block 32-bit binaries with missing/invalid page zero
2015-08-27 15:25:12 -04:00
Russell Hancox
bb43a04992
SNTFileInfo: Always try to get embedded info.plist before bundle plist
2015-08-05 12:01:05 -04:00
Russell Hancox
5f93dc7991
Project: Stop trying to be smart with logging destinations
2015-08-04 18:13:04 -04:00
Russell Hancox
9bc94ca658
GUI: Add defaultBlockMessage configuration
2015-08-04 13:52:44 -04:00
Russell Hancox
cfac7dbb37
Logging: Fix syslog logging and file rotation
2015-07-17 17:43:04 -04:00
Russell Hancox
e94d1175e7
santad: If file can't be hashed, log an error and allow execution.
2015-07-13 11:20:39 -04:00
Russell Hancox
1a31dc870f
Merge branch 'whitelistscope'
...
* whitelistscope:
Common: Rename kWhitelistDirsKey/WhitelistDirs to kWhitelistRegexKey/WhitelistRegex
santad: NSRegularExpression doesn't work with XPC.
santactl/sync: Sync whitelist regex
santad: In a rule vs scope, rule wins.
santad: Move whitelisted dirs feature to using regex instead of array. Faster and more flexible.
santactl: Update help/error wordings
santad: Add whitelisted directory support
2015-06-23 18:31:03 -04:00
Russell Hancox
a1712858c5
Common: Rename kWhitelistDirsKey/WhitelistDirs to kWhitelistRegexKey/WhitelistRegex
2015-06-23 18:30:42 -04:00
Russell Hancox
0059e768b9
Common: Add __NSString__ attribute to logMessage to catch format string bugs. Fix some warnings that found.
2015-06-23 18:10:46 -04:00
Russell Hancox
4fe1550bd2
santad: NSRegularExpression doesn't work with XPC.
2015-06-23 18:09:35 -04:00
Russell Hancox
bc13ac3a98
santad: Move whitelisted dirs feature to using regex instead of array. Faster and more flexible.
2015-06-23 17:22:18 -04:00
Russell Hancox
cbecfd444d
santad: Add whitelisted directory support
2015-06-23 17:21:17 -04:00
Russell Hancox
60594c9f03
santad/santactl-sync: Accept backoff interval from server, disable event uploads if back off is used, re-enable on next sync.
2015-06-23 15:54:30 -04:00
Russell Hancox
44b5bae8da
santad: Add sync execution timer to santad
2015-06-23 15:52:39 -04:00
Russell Hancox
9562ee86cd
Project: Add missing copy to a few properties previously missed
2015-06-19 17:32:45 -04:00
Russell Hancox
adfb4bc861
SNTFileInfo: Better caching of properties
2015-06-19 17:31:48 -04:00
Russell Hancox
f95245cedd
10.11 Prep: Move santad,santactl from /usr/libexec,/usr/sbin to within santa-driver.kext
2015-06-15 16:18:51 -04:00
Russell Hancox
e751a3d307
SNTFileWatcher: Only get the fileSystemRepresentation once, to avoid high memory use when file doesn't exist
2015-06-09 13:10:29 -04:00
Russell Hancox
78bb9a1bd6
common: Correct comment on default loglevels
2015-05-18 13:06:31 -04:00
Russell Hancox
f2f27c5675
santa-driver: Up ACTION_REQUEST_SHUTDOWN from 60->90
2015-05-18 13:06:31 -04:00
Russell Hancox
5a7ac2287b
santa-driver: Stop defining MAX_PATH_LEN, use MAXPATHLEN instead.
...
I can't recall why I did this.
2015-05-18 13:06:31 -04:00
Russell Hancox
3f5400b264
santa-driver: Split FetchDecision, notify daemon of missed executions, reorganize some methods.
2015-05-14 17:01:49 -04:00
Russell Hancox
9f6b6d10dc
santa-driver: Make room in santa_message_t->path for the terminator so we don't miss a character.
2015-05-14 17:01:47 -04:00
Russell Hancox
be1e66c29d
Project: Enable more warnings and then fix them.
2015-05-01 17:40:39 -04:00
Russell Hancox
297fb4cb68
Add parent process name collection and upload
2015-04-30 18:21:13 -04:00
Russell Hancox
4fd5e1139f
Project: Style clean-ups
2015-04-21 14:29:30 -04:00
Russell Hancox
96517573e7
santactl/sync: rename SyncStatus->SyncState, add cleanSync option that can be requested by client or server.
2015-04-10 12:39:22 -04:00
Russell Hancox
a629e6cff1
Clean-up: NSString length is quicker than isEqual
2015-04-09 10:01:44 -04:00
Russell Hancox
49b169ec36
SNTFileWatcher: unset source event handler correctly
2015-04-08 14:22:24 -04:00
Russell Hancox
41d1d7e3de
SNTFileWatcher: fix some dispatch bugs, move eventHandler property to
...
class extension, add tests.
2015-04-08 12:29:41 -04:00
Russell Hancox
323a38dc21
Project: Clean-up block style, order of public/private in C++ headers
2015-04-08 12:29:22 -04:00
Russell Hancox
c37f1eb006
SNTConfigurator: remove auto-reloading code, move to file watching
...
class.
2015-04-08 12:28:58 -04:00
Russell Hancox
2486cfdcff
santactl/sync: Update logging
2015-04-01 16:15:14 -04:00
Russell Hancox
7ba886ed18
SNTConfigurator: Fix broken MachineOwner parsing, part 2
2015-03-31 17:29:11 -04:00
Russell Hancox
8096701fbd
SNTConfigurator: Fix broken MachineID/MachineOwner parsing
2015-03-31 17:26:02 -04:00
Russell Hancox
f2dc7fb4b0
SNTConfigurator: Only reject and re-save client mode in santad.
2015-03-31 15:49:49 -04:00
Russell Hancox
ca19d9fde7
SNTConfigurator: Do initial file monitoring async
2015-03-30 18:37:18 -04:00
Russell Hancox
a9d6e42d5a
SNTConfigurator: Have configuration auto-reload if file on disk changes
2015-03-27 15:38:10 -04:00
Russell Hancox
2db996f8e0
SantaGUI: Add configurable About Window and Event Detail buttons
2015-03-27 15:35:16 -04:00
Russell Hancox
6c27ac60a1
SNTConfigurator: if MachineID hasn't been overridden get one from IOKit
2015-03-26 15:08:26 -04:00
Russell Hancox
d4c4b26c3b
santactl/sync: Fix MachineOwnerPlist* config methods, don't crash if machine owner missing
2015-03-26 08:24:53 -04:00
Russell Hancox
0afe465ac5
santactl: Rename machineIDOverride to machineID
2015-03-13 18:18:09 -04:00
Russell Hancox
472558a03c
santad: Add LogAllEvents option
2015-03-13 18:17:09 -04:00
Russell Hancox
9431d954b5
SNTXPCConnection: invalidate connection if verification doesn't complete
2015-03-11 21:41:53 -04:00
