Tom Burgin
d026989dfb
santactl: remove extra check ( #557 )
2021-06-11 15:43:08 -04:00
Tom Burgin
e7a8e9b6ac
santactl: use host instead of http address for reachability ( #556 )
2021-06-11 15:13:50 -04:00
Russell Hancox
1d9af01353
Project: Bump dependency versions, fix reload command ( #554 )
...
* Project: Bump dependency versions, fix reload command
The reload command would fail if you used multiple compilation modes for
building as it would try extracting the versions from both comp modes.
The dependency bump includes a fix for #553
2021.5
2021-05-03 21:37:42 -04:00
Adam Sindelar
9c6af7fc03
Docs: Add job posting link to README
2021-04-26 12:16:35 -04:00
Tom Burgin
543b1a29fe
add default provisioning profile rules ( #548 )
2021-04-19 17:18:18 -04:00
Tom Burgin
625ec67789
handle PHONE_REGISTRATION_ERROR ( #549 )
2021-04-19 17:16:53 -04:00
Tom Burgin
c5696d71e7
add build release rule ( #547 )
2021-04-19 13:58:59 -04:00
Tom Burgin
5f3cef52de
cleanup ( #546 )
2021-04-19 13:37:21 -04:00
Tom Burgin
eeed0b5aa6
santactl: migrate from fcmstream to fcmconnection ( #545 )
2021-04-19 11:51:32 -04:00
Russell Hancox
9ef171e663
Docs: Fix more broken docs links ( #543 )
2021-04-19 11:17:13 -04:00
Russell Hancox
ad1868a50f
santad: Fix transitive rules when using the sysx cache feature ( #540 )
...
This fixes transitive allowlisting when `EnableSysxCache` is turned on, reduces the deadline timer to fire 5s before the ES deadline, remaps our DEBUG logs to NOTICE so they can be more easily seen in Console and prevents transitive rules being created for paths under /dev/.
2021.3
2021-03-04 09:47:32 -05:00
Russell Hancox
78643d3c49
fileinfo: Don't use non-bundle dirs as possible ancestors ( #537 )
2021-02-01 11:09:32 -05:00
Russell Hancox
8b22c85a64
Project: run buildifier on BUILD files ( #534 )
2021.2
2021-01-28 10:31:07 -05:00
Russell Hancox
58fe5d3d76
santad: Use OS_FALLTHROUGH ( #535 )
2021-01-28 10:30:47 -05:00
Russell Hancox
8b2227967e
santad: Fix caching of deny decisions ( #533 )
2021-01-28 10:12:20 -05:00
Russell Hancox
65693acea1
Docs: fix syncing-overview link in santactl doc ( #531 )
2021-01-27 12:35:02 -05:00
Russell Hancox
7cea383930
Docs: the docs build can't use symlinks ref. out of the docs dir ( #530 )
2021-01-27 12:25:50 -05:00
headmin
5ae2376158
Docs: Add example .mobileconfig profile to enable Notifications settings ( #529 )
2021-01-27 11:00:34 -05:00
Russell Hancox
e851337eac
Docs: Fix some broken links in the index ( #528 )
2021-01-27 10:32:30 -05:00
Russell Hancox
2e53834980
santactl/sync: retry individual requests during a sync ( #526 )
...
Each request is retried up to 5 times with gaps of 2s, 4s, 6s, 8s
2021-01-26 15:58:52 -05:00
Hugh Neale
aef139e93c
The configuration key "enabled_transitive_rules" should be "enable_transitive_rules" ( #525 )
2021-01-26 14:20:15 -05:00
Russell Hancox
a9e5bf09a7
santad: Add some TODOs related to cache
2021.1
2021-01-11 13:16:38 -05:00
Russell Hancox
4ee3f281c3
santactl/status: Output cache details for sysx
2021-01-11 13:16:38 -05:00
Russell Hancox
462ce89d42
Project: Fix test locations
2021-01-11 13:16:38 -05:00
Russell Hancox
44117833c0
Project: Fix build rule
2021-01-11 13:16:38 -05:00
Russell Hancox
8b6e029da2
Project: bump version to 2021.1
...
This is a new versioning scheme.
2021-01-11 13:16:38 -05:00
Russell Hancox
f183e246df
santad: Make use of caching endpoint security optional
2021-01-11 13:16:38 -05:00
Russell Hancox
c60a35f280
santad: Add caching layer to EndpointSecurity
...
This first commit is very rough, just adding the caching as simply as
possible. Refactoring is needed.
2021-01-11 13:16:38 -05:00
Russell Hancox
4f65965277
santactl/fileinfo: Fix fileinfo tests on BigSur + multiarch plists ( #523 )
...
The fileinfo tests didn't work on BigSur because of some path and binary changes.
Also, the embeddedPlist method didn't work on fat binaries, of which there are now
many, because of M1 machines. I think we didn't notice this before because we pull
the embedded plist from the first arch listed in the headers dict which generally
seemed to pick x86_64 first but with the arm64/arm64e option being added
that now appears first.
Also fixed some errors handling 32-bit segment/sections and added a test for this.
2021-01-07 19:46:48 -05:00
Tom Burgin
01e4e15b81
santactl sync: add config option to enable legacy zlib content encoding ( #522 )
1.17
2020-12-23 10:36:39 -05:00
Russell Hancox
532cb37e0b
CI: split out driver and userspace builds ( #521 )
2020-12-23 08:38:39 -05:00
Tom Burgin
9d379d3884
release: split out the kext into a separate release label ( #520 )
...
* fix SNTLoggingKernel BUILD rule (#518 )
* release: split out santa-driver.kext
* release: update ci
* remove ipa script rule
* update ci
1.16
2020-12-19 18:23:54 -05:00
Tom Burgin
3e7a191bf7
fix SNTLoggingKernel BUILD rule ( #518 )
2020-12-17 16:35:13 -05:00
Ryan Diers
c5a048f4d9
santactl/sync: Use deflate as Content-Encoding instead of zlib
...
The latter was not standards-compliant.
2020-12-14 16:19:48 -05:00
Hugh Neale
f4769bad90
Added Zercurity to list of available sync servers ( #511 )
2020-12-08 20:29:28 -05:00
Russell Hancox
254497ad15
Project: don't reference obsolete rake commands in CONTRIBUTING ( #513 )
2020-12-08 09:57:42 -05:00
avanzini
0a83445838
Log pidversion along with pid. ( #512 )
2020-12-08 09:46:34 -05:00
Tom Burgin
eff287259e
project: update Xcode project to build universal binaries ( #509 )
2020-11-17 16:18:16 -05:00
Russell Hancox
6f2c0e3457
Project: remove Travis, update CI status in README ( #508 )
2020-11-02 09:59:35 -05:00
Russell Hancox
38769f7cd1
Project: Add GitHub Actions CI workflow ( #507 )
2020-10-30 12:23:01 -04:00
Russell Hancox
fa785ad3c2
Kernel: fix some header imports ( #505 )
2020-10-26 10:05:25 -04:00
Russell Hancox
5dae0cabdd
Project: fix some lint ( #504 )
2020-10-22 14:01:32 -04:00
Russell Hancox
a8b4f4ea7e
Project: move travis to xcode12 ( #503 )
2020-10-22 13:50:32 -04:00
Russell Hancox
2221c93bbc
santa-driver: Fix some new Xcode 12 warnings ( #502 )
...
The ossharedptr-misuse warning is generated from within system headers and I couldn't
find a simple way to prevent that other than disabling the warning entirely. We don't
use OSSharedPtr directly anyway.
1.15
2020-10-22 13:41:31 -04:00
Tom Burgin
d1c33baf35
project: add EnableDebugLogging option ( #501 )
...
* project: add EnableDebugLogging option
* review updates
2020-10-22 10:11:18 -04:00
Tom Burgin
d2bbdff373
Add the option to ignore actions from other ES clients ( #498 )
...
* [com.google.santa.daemon]: add the option to ignore actions from other ES clients
* review updates
* review updates
2020-10-21 13:20:13 -04:00
Russell Hancox
db1d65f944
Project: Update dependency versions ( #500 )
...
MOLAuthenticatingURLSession: v2.8 -> v2.9
rules_apple: v0.19.0 -> v0.20.0
2020-10-21 11:55:38 -04:00
Hugh Neale
d17aeac2f4
Make it possible to remotely set the FullSyncInterval ( #494 )
...
Make it possible for the sync server to set the FullSyncInterval with "full_sync_interval" during `preflight`
2020-10-01 13:47:55 -04:00
Hugh Neale
7840270dd0
Support for %hostname%, %uuid% and %serial% to eventDetailURLForEvent ( #493 )
...
Added support for %hostname%, %uuid% and %serial% to eventDetailURLForEvent to provide additional system information for blocked events & updated documentation references for supported URL params.
2020-08-31 10:38:35 -04:00
Russell Hancox
dcf44c9872
Fix video in README ( #492 )
...
Fixes #491
2020-08-27 17:28:40 -04:00