Russell Hancox
8f05ee7d79
santa-driver: Rename some action types
2016-03-15 12:53:44 -04:00
Russell Hancox
90e99255b1
santa-driver/santad: Split decision making and logging onto 2 data queues
...
This resolves an issue where the data queue can be overwhelmed by logging requests and fail to respond to decisions for an extended period of time.
2016-03-10 12:21:17 -05:00
Russell Hancox
84f46de940
Driver/Daemon: Collect process name in-kernel for file events, parent name for exec requests. For file events log process name and path, if possible.
2015-10-05 17:09:33 -04:00
Russell Hancox
98878f3e7c
Kernel/santad: Add file write logging and exec argv's.
...
This necessitated a large refactoring of a bunch of code, hence being a large commit. This moves all event logging into a separate class, moves logging of executions to be from FileOp events rather than Vnode events (so we can get the argv after the execve call has finished) and implements the logging of cached execs.
2015-09-08 16:33:59 -04:00
Russell Hancox
75158c11ea
santa-driver: Don't create santa_message_t structs on the stack.
...
Also rename userId field to uid and add gid field to match
2015-08-31 15:21:25 -04:00
Russell Hancox
f2f27c5675
santa-driver: Up ACTION_REQUEST_SHUTDOWN from 60->90
2015-05-18 13:06:31 -04:00
Russell Hancox
5a7ac2287b
santa-driver: Stop defining MAX_PATH_LEN, use MAXPATHLEN instead.
...
I can't recall why I did this.
2015-05-18 13:06:31 -04:00
Russell Hancox
3f5400b264
santa-driver: Split FetchDecision, notify daemon of missed executions, reorganize some methods.
2015-05-14 17:01:49 -04:00
Russell Hancox
9f6b6d10dc
santa-driver: Make room in santa_message_t->path for the terminator so we don't miss a character.
2015-05-14 17:01:47 -04:00
Russell Hancox
4fd5e1139f
Project: Style clean-ups
2015-04-21 14:29:30 -04:00
Russell Hancox
08ca3c9d95
Driver: Move SantaDecisionManager ownership to IOService level, start listeners ASAP but allow and log until daemon connects. Remove useless close method in SantaDriverClient.
2015-02-03 18:55:24 -05:00
Russell Hancox
7a03183cf0
Update Copyright years
2015-01-30 18:41:12 -05:00
Russell Hancox
42684387c5
Kernel: Rename RESPONSE_VALID macro to CHECKBW_RESPONSE_VALID
2015-01-30 17:28:04 -05:00
Russell Hancox
ecbd92646d
Update all docstrings to triple-slash doxygen style
2015-01-28 21:28:17 -05:00
Russell Hancox
71b08307a3
Driver: Move SHA-1 calculation to userland
2015-01-28 19:12:06 -05:00
Russell Hancox
7458896a2a
Driver: send down ppid to daemon
2015-01-13 16:08:29 -05:00
Russell Hancox
a78f2b37ee
Driver: style and comment cleanup
2015-01-13 16:07:03 -05:00
Russell Hancox
17f102662a
Driver: Clean-up logic when checking cache entry actions
2014-12-16 16:39:17 -05:00
Russell Hancox
07988686ae
Initial commit
2014-11-20 16:23:13 -05:00
