Russell Hancox
5f93dc7991
Project: Stop trying to be smart with logging destinations
2015-08-04 18:13:04 -04:00
Russell Hancox
e3593c1b0c
santad: fclose stderr for santactl sync too
2015-07-22 16:35:25 -04:00
Russell Hancox
0898940d0b
santad: Pass santa_message_t straight to SNTExecutionController
2015-07-21 14:52:53 -04:00
Russell Hancox
38b65b0ca4
santad: Move uid->username lookup to where it's actually used
2015-07-21 14:52:53 -04:00
Russell Hancox
ff99ab9cfe
santad: loggedInUsers:sessions: style clean-up
2015-07-21 14:22:42 -04:00
Russell Hancox
64995367c3
santad: Simplify eventStateForDecision:type:
2015-07-21 14:22:42 -04:00
Russell Hancox
c67f0ffc11
santad: Don't initiate event upload if syncing isn't enabled
2015-07-21 14:22:42 -04:00
Russell Hancox
d21d64cbfe
santad: Don't print log format every startup
2015-07-21 14:22:42 -04:00
Russell Hancox
cfac7dbb37
Logging: Fix syslog logging and file rotation
2015-07-17 17:43:04 -04:00
Russell Hancox
3134448eac
santad: Close password database after getpwuid
2015-07-15 18:25:26 -04:00
Russell Hancox
e94d1175e7
santad: If file can't be hashed, log an error and allow execution.
2015-07-13 11:20:39 -04:00
Russell Hancox
90c64812d0
santad: close stdout before running santactl sync
2015-07-01 17:22:40 -04:00
Russell Hancox
08d368fc49
santad: Rename watchdog thread with reverse-dns name
2015-06-26 16:29:46 -04:00
Russell Hancox
39385f0bff
santad: Put an autoreleasepool inside the watchdog thread.
2015-06-26 13:12:46 -04:00
Russell Hancox
8bc3418ce1
santad: Watchdog: only log memory use if it increased since last check. Increase threshold to 250MB
2015-06-25 17:58:17 -04:00
Russell Hancox
8234706dd3
santad: Vacuum event database after removing multiple events.
2015-06-24 11:58:38 -04:00
Russell Hancox
4fe1550bd2
santad: NSRegularExpression doesn't work with XPC.
2015-06-23 18:09:35 -04:00
Russell Hancox
bcdf746def
santad: In a rule vs scope, rule wins.
2015-06-23 17:33:08 -04:00
Russell Hancox
bc13ac3a98
santad: Move whitelisted dirs feature to using regex instead of array. Faster and more flexible.
2015-06-23 17:22:18 -04:00
Russell Hancox
cbecfd444d
santad: Add whitelisted directory support
2015-06-23 17:21:17 -04:00
Russell Hancox
60594c9f03
santad/santactl-sync: Accept backoff interval from server, disable event uploads if back off is used, re-enable on next sync.
2015-06-23 15:54:30 -04:00
Russell Hancox
44b5bae8da
santad: Add sync execution timer to santad
2015-06-23 15:52:39 -04:00
Russell Hancox
2e856196c5
santad: Move SIGCHLD SIG_IGN setting to main(), it doesn't need to be set repeatedly.
2015-06-23 15:36:59 -04:00
Russell Hancox
f323f5e3de
santad: Up watchdog interval to 60s and CPU threshold to 20%.
...
Whilst during normal operation santad doesn't use more than 5% CPU, it does spike if lots
of processes start, such as during bootup. This change helps to reduce the noise.
2015-06-22 15:28:02 -04:00
Russell Hancox
44c9d9aead
santad: Add watchdog thread to print warnings if CPU/RAM usage seem high.
2015-06-15 16:31:55 -04:00
Russell Hancox
f95245cedd
10.11 Prep: Move santad,santactl from /usr/libexec,/usr/sbin to within santa-driver.kext
2015-06-15 16:18:51 -04:00
Russell Hancox
2a8bdfd714
santad: Use _exit instead of exit after fork. Oops.
2015-06-01 17:12:12 -04:00
Russell Hancox
567e0b6431
santad: If exiting because of a failed dequeue, log the return code at ERROR level.
2015-05-18 13:06:31 -04:00
Russell Hancox
3f5400b264
santa-driver: Split FetchDecision, notify daemon of missed executions, reorganize some methods.
2015-05-14 17:01:49 -04:00
Russell Hancox
25f1b71f10
santa-driver: Move dataqueue to SantaDecisionManager rather than
...
recreating it on every connect.
2015-05-14 17:01:48 -04:00
Russell Hancox
30df44df96
santad: Correctly delete corrupt events. Add test for this.
2015-05-08 14:57:37 -04:00
Russell Hancox
fc55b86f30
santad: Switch to uint32_t for table version numbers
2015-05-08 14:56:20 -04:00
Russell Hancox
59ffb67554
santad: Reject addRules requests with empty/nil array. Also switch to NSUInteger for rule counts.
2015-05-08 14:55:28 -04:00
Russell Hancox
838da16da1
santad: Delete events that fail to unarchive
2015-05-06 14:44:09 -04:00
Russell Hancox
be1e66c29d
Project: Enable more warnings and then fix them.
2015-05-01 17:40:39 -04:00
Russell Hancox
57866308e3
santad: Consider scripts that are part of installer packages as in-scope.
2015-04-30 18:37:04 -04:00
Russell Hancox
63bc8fca2d
santad: Don't post GUI notification for SILENT_BLACKLIST rules.
2015-04-30 18:36:43 -04:00
Russell Hancox
408712f00f
santad: Don't log when client mode is not set in defaultDecision, as that can't actually happen.
2015-04-30 18:36:20 -04:00
Russell Hancox
297fb4cb68
Add parent process name collection and upload
2015-04-30 18:21:13 -04:00
Russell Hancox
4fd5e1139f
Project: Style clean-ups
2015-04-21 14:29:30 -04:00
Russell Hancox
96517573e7
santactl/sync: rename SyncStatus->SyncState, add cleanSync option that can be requested by client or server.
2015-04-10 12:39:22 -04:00
Russell Hancox
a629e6cff1
Clean-up: NSString length is quicker than isEqual
2015-04-09 10:01:44 -04:00
Russell Hancox
323a38dc21
Project: Clean-up block style, order of public/private in C++ headers
2015-04-08 12:29:22 -04:00
Russell Hancox
c37f1eb006
SNTConfigurator: remove auto-reloading code, move to file watching
...
class.
2015-04-08 12:28:58 -04:00
Russell Hancox
88897477b6
santad: Now that SNTConfigurator auto-reloads, stop tracking clientMode separately. Also reload logAllDecisions if req'd.
2015-03-27 15:38:55 -04:00
Russell Hancox
8b5720b291
santad: Update comments in DriverManager
2015-03-27 15:37:08 -04:00
Russell Hancox
472558a03c
santad: Add LogAllEvents option
2015-03-13 18:17:09 -04:00
Russell Hancox
d27a26ca50
santad: Make driver-waiting an exponential backoff up to 16s
2015-03-11 19:14:41 -04:00
Russell Hancox
d109aae6ef
santad/santactl: include pid and ppid in event upload
2015-03-09 09:52:56 -04:00
Russell Hancox
d88fa4ecfe
santad: sleep for less time when waiting for driver
2015-02-03 18:56:25 -05:00
