Russell Hancox
f43e8680b8
santad: Improve SNTFileWatcher, update config file permissions if they change
2016-06-06 16:15:28 -04:00
Russell Hancox
545a6c1b36
santad: Ensure config file reloading is handled on main thread
2016-06-06 11:31:36 -04:00
Russell Hancox
f01fd8c850
Project: Try and fix CocoaPods on Travis
2016-06-03 14:12:03 -04:00
Russell Hancox
c9ec69b0b5
Tests: Fix OCMock misuse in testPreflightDatabaseCounts.
...
The block expects int64_t, not NSNumber. For some reason this didn't fail in Xcode but does from the command-line. Using OCMOCK_VALUE works properly.
2016-06-03 12:43:03 -04:00
Russell Hancox
3640e2c5f0
santad: Add a workaround for PrinterProxy
2016-06-03 11:32:55 -04:00
Russell Hancox
b3659cb456
santad: Don't spawn an event upload if one for this hash happened in the last 10 minutes
2016-06-01 17:20:16 -04:00
Russell Hancox
76284a2916
santad: Log disk mount/unmount events
2016-06-01 17:20:16 -04:00
Russell Hancox
40b1e011bd
SantaGUI/santad: Add option to send bundled binaries to a different detail URL
2016-06-01 17:13:11 -04:00
Russell Hancox
e0bebecd59
santactl/sync: Switch bundle binary uploading
...
Only upload bundle related events when the server asks for it. Do the search inside a bundle for longer
2016-06-01 17:13:11 -04:00
Russell Hancox
8ac0cf6831
santad: Catch exceptions writing to TTY
2016-06-01 17:13:10 -04:00
Russell Hancox
992163206d
Project: Switch to MOLAuthenticatingURLSession Pod.
2016-06-01 17:13:10 -04:00
Russell Hancox
86dd5d8078
santactl/sync: Refactor to reduce repetition, support XSRF tokens and add tests.
...
Move common request generating and performing code into a common
superclass.
Add code to handle XSSI in JSON responses and support XSRF
tokens via headers.
Adds tests, finally.
Changes preflight hostname to be long instead of short
2016-06-01 17:13:02 -04:00
Russell Hancox
932aa9d052
santad: For single-event syncs, use syslog logging
2016-05-25 17:52:53 -04:00
Russell Hancox
5f7f5204ec
santad: Flush cache when switching into lockdown mode
2016-05-25 11:04:53 -04:00
Russell Hancox
a154d23637
SantaGUI: Add customizable notifications when client switches modes.
2016-05-25 11:04:35 -04:00
Russell Hancox
ac2bb9d362
SNTBlockMessage: Move HTML stripping to separate method
2016-05-24 16:32:25 -04:00
Russell Hancox
b918958bfa
santactl/fileinfo: Don't fail if santad isn't running, colorize rule output on a TTY.
2016-05-19 19:08:52 -04:00
Russell Hancox
215df4ffa6
santactl: Always try to get daemonConn but only log and exit if it's marked as required
2016-05-19 19:08:52 -04:00
Russell Hancox
bb28bc5875
SNTXPCConnection: Ensure validation completes before returning remoteObjectProxy
2016-05-19 19:08:52 -04:00
Russell Hancox
a82bc3f712
SNTXPCConnection: Don't track accepted connections, it isn't useful.
2016-05-19 19:08:52 -04:00
Russell Hancox
b3a507014b
Project: Update to CocoaPods 1.0
2016-05-19 19:08:52 -04:00
Russell Hancox
49c5e35a14
santad: Improve TTY message output.
...
Bold Santa title, replace <br/> with \n, add link to EventDetailURL
2016-05-19 19:08:03 -04:00
Russell Hancox
869ed33bd4
santactl/fileinfo: Show when code signature is adhoc
2016-05-03 14:15:27 -04:00
Russell Hancox
0c4a9be482
santad: Write message to TTY when blocking execution
...
Sometimes the GUI isn't running. Sometimes the user is using SSH. Either way, printing a message to the TTY of the parent of the just denied process is user-friendly.
2016-04-28 16:07:36 -04:00
Russell Hancox
4410ec575a
santactl/fileinfo: Include rule state info
2016-04-28 16:07:24 -04:00
Russell Hancox
e3b92fc948
santactl/sync: Upload rule counts in preflight
2016-04-28 16:07:04 -04:00
Russell Hancox
4ca4692a67
santactl/flushcache: Disable flushcache in release builds.
...
It really isn't a useful command outside of development and its existence
seems to confuse people.
2016-04-28 15:00:10 -04:00
Russell Hancox
c1284d3c23
Project: Re-organize file structure, again
2016-04-28 14:11:50 -04:00
Russell Hancox
c8c0eadf72
santactl/fileinfo: Make file type output more accurate for executables
2016-04-28 10:54:54 -04:00
Russell Hancox
f4bbc8abc7
santactl/sync: Log successful stages as debug
2016-04-27 14:41:50 -04:00
Russell Hancox
a0f6ea57f8
SantaGUI: If SilencedNotifications key doesn't exist, create it
2016-04-27 14:19:25 -04:00
Russell Hancox
88d21a07ac
santad, santactl/sync: Include Bundle Path in event upload data.
2016-04-26 17:35:29 -04:00
Russell Hancox
88e3a606a0
SNTFileInfo: Use CFBundleDisplayName if available
2016-04-26 17:34:29 -04:00
Russell Hancox
fff693c3f0
santad: Close the FMResultSet left after locking db to prevent spurious messages.
2016-04-26 17:33:43 -04:00
Russell Hancox
1e8d792d39
santa-driver: Flush vnode-pid map periodically.
2016-04-15 17:10:14 -04:00
Russell Hancox
dfb149ac6a
santa-driver: Try to get uid/gid from credential if available
2016-04-15 17:05:50 -04:00
Russell Hancox
b5cfc92261
santactl/sync: Check that singleevent took an argument
2016-04-11 17:52:03 -04:00
Russell Hancox
079f3e3868
santactl/sync: Re-organize 'main' to bail earlier if config is invalid
2016-04-11 17:51:47 -04:00
Russell Hancox
15a6d58785
santactl/sync: Add long help, document --clean flag
2016-04-11 17:51:08 -04:00
Russell Hancox
a404498f8a
santactl help: If command doesn't have long help, use short help.
2016-04-11 17:40:58 -04:00
Russell Hancox
0d133e2df6
Project: Enable code coverage for "All" test target
2016-04-11 17:40:00 -04:00
Russell Hancox
488b28bfd5
SantaGUI: Log to syslog
2016-04-11 15:15:03 -04:00
Russell Hancox
0fceb7b2e1
SantaGUI: Post notifications to main thread using dispatch_async
2016-04-11 15:14:52 -04:00
Russell Hancox
a79d1a98e7
santactl/fileinfo: Only print "Signing Chain" header if certificates array isn't empty
2016-04-08 16:21:15 -04:00
Russell Hancox
43434fd445
santactl/fileinfo: Don't crash on <512b files
2016-04-08 16:20:49 -04:00
Russell Hancox
492e523884
Project: Move enums in SNTCommonEnums to NS_ENUM, part 2
2016-04-08 15:41:26 -04:00
Russell Hancox
3d1fdb7a2b
Project: Move enums in SNTCommonEnums to NS_ENUM, part 1
2016-04-08 15:17:32 -04:00
Russell Hancox
95a4bf0ec7
santad: Ensure launchd/santad rules are whitelisted on every startup
...
If they weren't already and the database is not new, log an error.
2016-04-08 15:16:12 -04:00
Russell Hancox
0d4f261e14
santad: Have SNTRuleTable return NSError when failing to add rules so user can see why
2016-04-08 15:07:43 -04:00
Russell Hancox
e96288b41b
santad: Exclusive-lock rules.db when opening
2016-04-08 12:11:08 -04:00
