Russell Hancox
d295f2391f
santactl/sync: In --debug log the full NSError for failed requests
2015-12-15 12:36:07 -05:00
Russell Hancox
63f6596bc2
santactl: Rename binaryinfo -> fileinfo.
2015-12-14 18:09:40 -05:00
Russell Hancox
d8a8aba0ea
SNTFileInfo: Move machoType method to binaryinfo command, add XAR archive detection.
2015-12-14 17:25:32 -05:00
Russell Hancox
d9d9682029
santactl/sync: Let related-binary search take up to 5s
2015-12-14 16:37:19 -05:00
Russell Hancox
9b342e146a
santactl/sync: Include code sign info with related executables and encode to dict.
2015-12-10 17:37:22 -05:00
Russell Hancox
4150feece2
santactl/sync: When uploading events for bundles, look for other bundled executables.
...
Many application bundles have related helper tools, which will individually need to be whitelisted unless they're covered by a certificate. To help make user's lives easier, when an event is triggered for a binary inside a bundle look for other executables in the same bundle and upload an event for those too (with an obvious tag) so that the server can let the user vote to whitelist all the binaries together.
2015-12-10 17:01:49 -05:00
Russell Hancox
c3f70703fd
santactl/status: Expose peak CPU/RAM use from santad.
2015-10-29 16:20:57 -04:00
Russell Hancox
5fda5bc081
santactl/binaryinfo: Only print bundle lines if bundle info is present
2015-10-29 12:35:27 -04:00
Russell Hancox
86e4d0db0f
santactl: Use yyyy instead of YYYY in NSDateFormatter
2015-10-27 17:58:23 -04:00
Russell Hancox
1a71cdff4a
santad/santactl: Report back if rule adding/removing failed rather than assuming success.
2015-10-15 12:15:38 -04:00
Russell Hancox
75de2526c1
santactl/binaryinfo: Only print quarantine fields if they're not empty
2015-10-14 23:37:16 -04:00
Russell Hancox
6fc4b7b120
santactl/binaryinfo: Increase key padding +1
2015-10-14 23:31:50 -04:00
Russell Hancox
7b8068139b
santad, santactl/sync: Collect and upload quarantine data with events.
2015-10-14 23:02:20 -04:00
Russell Hancox
ced7de884f
santactl/binaryinfo: Add quarantine data to output, add print method to simplify changes.
2015-10-14 20:12:04 -04:00
Russell Hancox
4e0ff224b6
Project: Remove SNTCertificate/SNTCodesignChecker, use new CocoaPod versions
2015-10-12 17:23:42 -04:00
Russell Hancox
2ed384f677
santactl/sync: Only update client mode at end of sync
2015-10-09 13:12:25 -04:00
Russell Hancox
cb9a5b6fbe
santactl: Add --json option to both status and version commands.
2015-10-05 14:15:10 -04:00
Russell Hancox
5472ff41f0
santactl/status: Show timezone as UTF offset rather than name
2015-10-05 13:00:55 -04:00
Russell Hancox
4f94c3b310
santactl/status: Use fixed format for sync date output but still include TZ.
2015-10-03 19:57:19 -04:00
Russell Hancox
5d2ce17817
santactl/status: When printing last sync date, use local timezone and locale settings
2015-10-03 18:15:41 -04:00
Russell Hancox
9f49e24dc5
santad: Update file changes logging to use a configurable regex
2015-10-01 17:57:07 -04:00
Russell Hancox
dbf60f16bc
santactl/sync: Fix typo causing clean sync on every run
2015-09-30 16:00:39 -04:00
Russell Hancox
0f3a228788
santactl/rule: Make help text a little clearer
2015-09-28 17:46:30 -04:00
Russell Hancox
d905f5b095
santactl/rule: Add ability to add certificate rules. Re-write argument parsing.
2015-09-28 17:20:34 -04:00
Russell Hancox
1c310486c7
santactl/status, santad: Show watchdog events in status output
2015-09-28 16:41:33 -04:00
Russell Hancox
4b01c6da91
santactl/status: Report some sync statuses.
2015-09-28 16:14:45 -04:00
Russell Hancox
5782378616
santactl/sync, santad: Add clean sync and last success options, use to initiate clean sync when database is re-created
2015-09-28 16:11:17 -04:00
Russell Hancox
5fd4d56b00
santactl/sync: Add ability to sync blacklist regex
2015-09-28 16:08:11 -04:00
Russell Hancox
a837aa0334
santactl/status: Use dispatch group instead of sleeping
2015-09-21 15:59:20 -04:00
Russell Hancox
8faf3eec53
santactl/sync: Validate incoming rules better
2015-09-16 15:59:50 -04:00
Russell Hancox
3d2744c9e3
santactl/sync: Use lib compression for both preflight and event upload phases
2015-09-09 17:13:38 -04:00
Russell Hancox
6385514257
santad: Block 32-bit binaries with missing/invalid page zero
2015-08-27 15:25:12 -04:00
Russell Hancox
4404b5f849
santactl/sync: Default to ephemeralSessionConfiguration to avoid caching
2015-08-03 18:03:51 -04:00
Russell Hancox
90a2f10da6
santactl/rule: Print usage when args are bad, catch missing long arguments.
...
Fixes #20
2015-07-22 13:48:43 -04:00
Russell Hancox
409535e617
santactl: Style, indenting.
2015-06-25 11:04:57 -04:00
Russell Hancox
f625016efe
santactl/sync: When rejecting a redirect, cancel the task to avoid hanging the task until timeout
2015-06-24 17:32:35 -04:00
Russell Hancox
f4c94ab1d7
santactl/sync: Failed log upload should not fail whole sync
2015-06-24 17:21:54 -04:00
Russell Hancox
1a31dc870f
Merge branch 'whitelistscope'
...
* whitelistscope:
Common: Rename kWhitelistDirsKey/WhitelistDirs to kWhitelistRegexKey/WhitelistRegex
santad: NSRegularExpression doesn't work with XPC.
santactl/sync: Sync whitelist regex
santad: In a rule vs scope, rule wins.
santad: Move whitelisted dirs feature to using regex instead of array. Faster and more flexible.
santactl: Update help/error wordings
santad: Add whitelisted directory support
2015-06-23 18:31:03 -04:00
Russell Hancox
0059e768b9
Common: Add __NSString__ attribute to logMessage to catch format string bugs. Fix some warnings that found.
2015-06-23 18:10:46 -04:00
Russell Hancox
4fe1550bd2
santad: NSRegularExpression doesn't work with XPC.
2015-06-23 18:09:35 -04:00
Russell Hancox
0c182c8a7f
santactl/sync: Sync whitelist regex
2015-06-23 17:33:43 -04:00
Russell Hancox
a894e018cd
santactl: Update help/error wordings
2015-06-23 17:21:17 -04:00
Russell Hancox
357e5ef963
santactl/sync: NSString doesn't have an unsignedIntegerValue method
2015-06-23 17:14:47 -04:00
Russell Hancox
60594c9f03
santad/santactl-sync: Accept backoff interval from server, disable event uploads if back off is used, re-enable on next sync.
2015-06-23 15:54:30 -04:00
Russell Hancox
9562ee86cd
Project: Add missing copy to a few properties previously missed
2015-06-19 17:32:45 -04:00
Russell Hancox
957232ca40
santactl: Fix event counting bug in status command
2015-06-16 18:02:41 -04:00
Russell Hancox
f95245cedd
10.11 Prep: Move santad,santactl from /usr/libexec,/usr/sbin to within santa-driver.kext
2015-06-15 16:18:51 -04:00
Russell Hancox
536b8969ed
santactl/sync: LogUpload - logsToUpload is part of the same class, use self.
2015-05-18 16:31:43 -04:00
Russell Hancox
0db3b6d955
santactl/sync: Split out Log Upload request generation and Rule Download rule parsing from main request methods.
2015-05-18 14:33:21 -04:00
Russell Hancox
f82da21b75
santactl/sync: Bug from 8cd9898, call completion handler even if no rules are downloaded.
2015-05-15 10:38:26 -04:00
