Russell Hancox
d295f2391f
santactl/sync: In --debug log the full NSError for failed requests
2015-12-15 12:36:07 -05:00
Russell Hancox
d9d9682029
santactl/sync: Let related-binary search take up to 5s
2015-12-14 16:37:19 -05:00
Russell Hancox
9b342e146a
santactl/sync: Include code sign info with related executables and encode to dict.
2015-12-10 17:37:22 -05:00
Russell Hancox
4150feece2
santactl/sync: When uploading events for bundles, look for other bundled executables.
...
Many application bundles have related helper tools, which will individually need to be whitelisted unless they're covered by a certificate. To help make user's lives easier, when an event is triggered for a binary inside a bundle look for other executables in the same bundle and upload an event for those too (with an obvious tag) so that the server can let the user vote to whitelist all the binaries together.
2015-12-10 17:01:49 -05:00
Russell Hancox
1a71cdff4a
santad/santactl: Report back if rule adding/removing failed rather than assuming success.
2015-10-15 12:15:38 -04:00
Russell Hancox
7b8068139b
santad, santactl/sync: Collect and upload quarantine data with events.
2015-10-14 23:02:20 -04:00
Russell Hancox
4e0ff224b6
Project: Remove SNTCertificate/SNTCodesignChecker, use new CocoaPod versions
2015-10-12 17:23:42 -04:00
Russell Hancox
2ed384f677
santactl/sync: Only update client mode at end of sync
2015-10-09 13:12:25 -04:00
Russell Hancox
dbf60f16bc
santactl/sync: Fix typo causing clean sync on every run
2015-09-30 16:00:39 -04:00
Russell Hancox
5782378616
santactl/sync, santad: Add clean sync and last success options, use to initiate clean sync when database is re-created
2015-09-28 16:11:17 -04:00
Russell Hancox
5fd4d56b00
santactl/sync: Add ability to sync blacklist regex
2015-09-28 16:08:11 -04:00
Russell Hancox
8faf3eec53
santactl/sync: Validate incoming rules better
2015-09-16 15:59:50 -04:00
Russell Hancox
3d2744c9e3
santactl/sync: Use lib compression for both preflight and event upload phases
2015-09-09 17:13:38 -04:00
Russell Hancox
4404b5f849
santactl/sync: Default to ephemeralSessionConfiguration to avoid caching
2015-08-03 18:03:51 -04:00
Russell Hancox
409535e617
santactl: Style, indenting.
2015-06-25 11:04:57 -04:00
Russell Hancox
f625016efe
santactl/sync: When rejecting a redirect, cancel the task to avoid hanging the task until timeout
2015-06-24 17:32:35 -04:00
Russell Hancox
f4c94ab1d7
santactl/sync: Failed log upload should not fail whole sync
2015-06-24 17:21:54 -04:00
Russell Hancox
1a31dc870f
Merge branch 'whitelistscope'
...
* whitelistscope:
Common: Rename kWhitelistDirsKey/WhitelistDirs to kWhitelistRegexKey/WhitelistRegex
santad: NSRegularExpression doesn't work with XPC.
santactl/sync: Sync whitelist regex
santad: In a rule vs scope, rule wins.
santad: Move whitelisted dirs feature to using regex instead of array. Faster and more flexible.
santactl: Update help/error wordings
santad: Add whitelisted directory support
2015-06-23 18:31:03 -04:00
Russell Hancox
0059e768b9
Common: Add __NSString__ attribute to logMessage to catch format string bugs. Fix some warnings that found.
2015-06-23 18:10:46 -04:00
Russell Hancox
4fe1550bd2
santad: NSRegularExpression doesn't work with XPC.
2015-06-23 18:09:35 -04:00
Russell Hancox
0c182c8a7f
santactl/sync: Sync whitelist regex
2015-06-23 17:33:43 -04:00
Russell Hancox
a894e018cd
santactl: Update help/error wordings
2015-06-23 17:21:17 -04:00
Russell Hancox
357e5ef963
santactl/sync: NSString doesn't have an unsignedIntegerValue method
2015-06-23 17:14:47 -04:00
Russell Hancox
60594c9f03
santad/santactl-sync: Accept backoff interval from server, disable event uploads if back off is used, re-enable on next sync.
2015-06-23 15:54:30 -04:00
Russell Hancox
9562ee86cd
Project: Add missing copy to a few properties previously missed
2015-06-19 17:32:45 -04:00
Russell Hancox
536b8969ed
santactl/sync: LogUpload - logsToUpload is part of the same class, use self.
2015-05-18 16:31:43 -04:00
Russell Hancox
0db3b6d955
santactl/sync: Split out Log Upload request generation and Rule Download rule parsing from main request methods.
2015-05-18 14:33:21 -04:00
Russell Hancox
f82da21b75
santactl/sync: Bug from 8cd9898, call completion handler even if no rules are downloaded.
2015-05-15 10:38:26 -04:00
Russell Hancox
969a5ef94e
santactl/sync: Don't release SecAsn1Coder until we're done with its data.
2015-05-14 17:35:06 -04:00
Russell Hancox
fd7ad07193
santactl/sync: Handle DER decoding failures more gracefully.
2015-05-14 17:01:49 -04:00
Russell Hancox
8cd9898cf3
santactl/sync: Don't send empty rules array to daemon.
2015-05-11 16:27:02 -04:00
Russell Hancox
6492e70599
santactl: Instead of rejecting authentication challenges and trying again, cancel the whole request.
2015-05-07 17:56:47 -04:00
Russell Hancox
be1e66c29d
Project: Enable more warnings and then fix them.
2015-05-01 17:40:39 -04:00
Russell Hancox
297fb4cb68
Add parent process name collection and upload
2015-04-30 18:21:13 -04:00
Russell Hancox
f16fa691b5
santactl: include zlib.h instead of import
2015-04-21 16:43:09 -04:00
Russell Hancox
96517573e7
santactl/sync: rename SyncStatus->SyncState, add cleanSync option that can be requested by client or server.
2015-04-10 12:39:22 -04:00
Russell Hancox
8365e00a50
Sync: Decision should be uploaded as a string, not an int. Rename serial_no to serial_num
2015-04-09 10:02:21 -04:00
Russell Hancox
a629e6cff1
Clean-up: NSString length is quicker than isEqual
2015-04-09 10:01:44 -04:00
Russell Hancox
323a38dc21
Project: Clean-up block style, order of public/private in C++ headers
2015-04-08 12:29:22 -04:00
Russell Hancox
2486cfdcff
santactl/sync: Update logging
2015-04-01 16:15:14 -04:00
Russell Hancox
ef0cc2fffd
santactl/sync: Put constant API strings in a separate file
2015-03-31 15:56:47 -04:00
Russell Hancox
6c27ac60a1
SNTConfigurator: if MachineID hasn't been overridden get one from IOKit
2015-03-26 15:08:26 -04:00
Russell Hancox
d4c4b26c3b
santactl/sync: Fix MachineOwnerPlist* config methods, don't crash if machine owner missing
2015-03-26 08:24:53 -04:00
Russell Hancox
50614f589c
santactl/sync: Update Rule download API
2015-03-25 17:17:41 -04:00
Russell Hancox
4e1e4cde3b
santactl/sync: Fix broken Log Upload, re-add gzip compression
2015-03-16 17:05:49 -04:00
Russell Hancox
0afe465ac5
santactl: Rename machineIDOverride to machineID
2015-03-13 18:18:09 -04:00
Russell Hancox
7c3b533679
santactl: Update help strings
2015-03-13 12:47:28 -04:00
Russell Hancox
d109aae6ef
santad/santactl: include pid and ppid in event upload
2015-03-09 09:52:56 -04:00
Russell Hancox
b89040c37a
santactl/sync: Add ability to refuse redirects
2015-03-06 17:41:31 -05:00
Russell Hancox
1c92e968e3
SNTAuthenticatingURLSession: remove unnecessary import
2015-03-06 12:00:33 -05:00
