Commit Graph

  • 7513c75f88 Refactor rule and count lookups (#1298) Matt W 2024-02-26 15:09:51 -05:00
  • 9bee43130e Make FileChangesRegex apply to all file change event types (#1294) Matt W 2024-02-22 10:12:02 -05:00
  • 7fa23d4b97 Some more lint fixes (#1295) Nick Gregory 2024-02-20 15:39:24 -05:00
  • 42eb0a3669 ProcessTree: add macOS specific loader and ES adapter (2/4) (#1237) Nick Gregory 2024-02-20 13:56:54 -05:00
  • 1ea26f0ac9 docs: Document that *PathRegex does not work on symlinks (#1290) Russell Hancox 2024-02-13 18:53:17 -05:00
  • c35e9978d3 ProcessTree: fix missing direct deps (#1288) Nick Gregory 2024-02-09 10:33:57 -05:00
  • e4c0d56bb6 Remove proc tree tests for now as the code isn't yet included in santa builds (#1287) 2024.2 Matt W 2024-02-08 16:01:47 -05:00
  • 908b1bcabe Add build dep for internal process (#1286) Matt W 2024-02-08 15:43:01 -05:00
  • 64e81bedc6 Respect fail closed on deadlines (#1285) Matt W 2024-02-08 15:12:05 -05:00
  • 5dfab22fa7 Fix automatically denied events with small deadlines (#1284) Matt W 2024-02-08 10:25:06 -05:00
  • 5248e2a7eb Fix import issues and lint (#1282) Nick Gregory 2024-02-07 17:46:42 -05:00
  • e8db89c57c ProcessTree: add core process tree logic (1/4) (#1236) Nick Gregory 2024-02-05 14:30:54 -05:00
  • 70474aba3e Sync clean all (#1275) 2024.1 Matt W 2024-01-24 09:26:20 -05:00
  • f4ad76b974 Make santactl status always print out transitive rule status if set (#1277) Pete Markowsky 2024-01-22 12:16:47 -05:00
  • 3b7061ea62 chore: Fix typo s/occured/occurred/ (#1274) hugo-syn 2024-01-18 16:50:01 +01:00
  • 280d93ee08 chore: Fix multiple typos (#1273) hugo-syn 2024-01-18 15:17:52 +01:00
  • f73463117f Add back support for EnableForkAndExitLogging config key (#1271) Matt W 2024-01-14 13:42:06 -05:00
  • f93e1a56a0 Docs add missing config keys (#1270) Matt W 2024-01-13 00:08:16 -05:00
  • d5195b55d2 Added documentation to clarify clean sync with zero rule behavior (#1259) Pete Markowsky 2024-01-09 16:10:27 -05:00
  • 15e5874d43 Fix wrong srcs paths (#1265) Matt W 2024-01-03 10:49:08 -05:00
  • 5e6fa09f1c Change build target visibility (#1264) Matt W 2024-01-03 10:21:33 -05:00
  • ce2777ae94 Fix santactl rule --check (#1262) Matt W 2024-01-03 09:52:14 -05:00
  • f8a20d35b4 Fix issue with drop count calculations (#1256) Matt W 2023-12-13 17:01:11 -05:00
  • 2e69370524 Event drop metrics (#1253) Matt W 2023-12-07 15:23:51 -05:00
  • f9b4e00e0c GUI: Change default button text to "Open..." (#1254) Russell Hancox 2023-12-06 14:19:27 -05:00
  • e2e83a099c Initial support for some scoped types (#1250) Matt W 2023-12-05 18:51:07 -05:00
  • 2cbf15566a Revert "Project: Remove provisioning_profiles attributes from command-line tool rules (#1247)" (#1251) Matt W 2023-12-05 15:48:36 -05:00
  • 1596990c65 reorder e2e tests (#1249) Nick Gregory 2023-12-04 13:01:30 -05:00
  • 221664436f Expand debug logging for transitive rule failure case (#1248) 2023.10 Matt W 2023-11-30 15:47:48 -05:00
  • 65c660298c Project: Remove provisioning_profiles attributes from command-line tool rules (#1247) Russell Hancox 2023-11-30 13:50:38 -05:00
  • 2b5d55781c Revert back to C++17 for now (#1246) Matt W 2023-11-29 21:39:48 -05:00
  • 84e6d6ccff Fix USB state issue in santactl status (#1244) Matt W 2023-11-29 17:56:35 -05:00
  • c16f90f5f9 Fix test issue caused by move to C++20 (#1245) Matt W 2023-11-29 16:52:23 -05:00
  • d503eae4d9 Bump to C++20 (#1243) Matt W 2023-11-29 09:57:45 -05:00
  • 818518bb38 Ignore TeamID and SigningID rules for dev signed code (#1241) Matt W 2023-11-27 11:21:17 -05:00
  • f499654951 Experimental metrics (#1238) Matt W 2023-11-20 13:02:58 -05:00
  • a5e8d77d06 Entitlements logging config options (#1233) Matt W 2023-11-13 09:39:32 -05:00
  • edac42e8b8 Fix internal build issues, minor cleanup. (#1231) Matt W 2023-11-09 17:26:31 -05:00
  • ce5e3d0ee4 Add support for logging entitlements in EXEC events (#1225) Matt W 2023-11-09 16:26:57 -05:00
  • 3e51ec6b8a Add name for white space check (#1223) Pete Markowsky 2023-11-09 15:26:51 -05:00
  • ed227f43d4 Explicitly cast strings to std::string_view (#1230) Travis Lane 2023-11-08 14:05:08 -08:00
  • 056ed75bf1 dismiss santa popup after integration tests (#1226) Nick Gregory 2023-11-07 14:42:03 -05:00
  • 8f5f8de245 Only remount on startup if remount args are set (#1222) 2023.9 Matt W 2023-11-06 09:10:34 -05:00
  • 7c58648c35 Bump hedron commit. Minor WORKSPACE fixups. (#1221) Matt W 2023-11-03 10:03:11 -04:00
  • 3f3751eb18 Fix remount issue for APFS formatted drives (#1220) Matt W 2023-11-02 22:20:35 -04:00
  • 7aa2d69ce6 Add OnStartUSBOptions to santactl status (#1219) Matt W 2023-11-02 20:30:05 -04:00
  • f9a937a6e4 Record metrics for device manager startup operations (#1218) Matt W 2023-11-02 20:27:57 -04:00
  • d2cbddd3fb Support remounting devices at startup with correct flags (#1216) Matt W 2023-11-02 14:37:28 -04:00
  • ea7e11fc22 Add Support for CS_INVALIDATED events (#1210) Pete Markowsky 2023-11-02 10:04:18 -04:00
  • 7530b8f5c1 Add E2E testing for usb (#1214) Nick Gregory 2023-11-01 11:44:00 -04:00
  • 64bb34b2ca Additional build deps (#1215) Matt W 2023-10-31 14:16:28 -04:00
  • c5c6037085 Unmount USB on start (#1211) Matt W 2023-10-31 13:34:10 -04:00
  • 275a8ed607 Support printing bundle info via santactl fileinfo command (#1213) Matt W 2023-10-31 13:19:00 -04:00
  • 28dd6cbaed Enable e2e testing on macOS 14 (#1209) Nick Gregory 2023-10-30 17:45:37 -04:00
  • 8c466b4408 Fix issue preventing rule import / export from working (#1199) Pete Markowsky 2023-10-25 16:47:14 -04:00
  • 373c676306 Update syncing-overview.md (#1205) p-harrison 2023-10-25 19:17:22 +01:00
  • d214d510e5 Update configuration.md to note that push notifications not widely available (#1204) p-harrison 2023-10-25 19:11:15 +01:00
  • 6314fe04e3 Remove mention of KEXT from README.md (#1202) Pete Markowsky 2023-10-25 14:07:43 -04:00
  • 11d9c29daa docs: Update configuration.md to explain EnableDebugLogging (#1203) p-harrison 2023-10-16 15:29:45 +01:00
  • 60238f0ed2 Minor doc updates. Add missing FAA config options. (#1197) Matt W 2023-10-06 18:30:36 +02:00
  • 7aa731a76f santactl/sync: Drop root requirement (#1196) Russell Hancox 2023-09-29 12:56:15 -04:00
  • 5a383ebd9a Only eval TID and SID rules when the binary signature is valid (#1191) 2023.8 Matt W 2023-09-28 16:11:01 +02:00
  • 913af692e8 Fix missing Santa block gif. (#1193) Pete Markowsky 2023-09-27 14:53:45 -04:00
  • 4d6140d047 Update sync-protocol.md (#1187) p-harrison 2023-09-19 17:20:42 +01:00
  • 2edd2ddfd2 Remove superfluous import (#1188) Matt W 2023-09-19 05:01:22 +02:00
  • 1515929752 Add ability to specify custom event URLs and button text for FAA dialog (#1186) Matt W 2023-09-19 04:33:19 +02:00
  • fc2c7ffb71 Used ratchet to pin GitHub actions to specific hashes. (#1184) Pete Markowsky 2023-09-18 15:30:10 -04:00
  • 98ee36850a Use 'set -xo pipefail' instead (#1185) Kent Ma 2023-09-14 15:37:06 -04:00
  • 6f4a48866c Internal build fixes (#1183) Matt W 2023-09-14 04:17:41 +02:00
  • 51ca19b238 Fix layering issue for imported module (#1182) Matt W 2023-09-14 02:59:07 +02:00
  • b8d7ed0c07 Add basic support for importing and exporting rules to/from JSON (#1170) Pete Markowsky 2023-09-13 17:46:49 -04:00
  • ff6bf0701d Add ability to override File Access actions via config and sync settings (#1175) Matt W 2023-09-13 21:47:49 +02:00
  • 3be45fd6c0 UI For Blocked File Access (#1174) Matt W 2023-09-13 21:45:56 +02:00
  • d2e5aec635 Update Protobuf and Abseil versions (#1179) Matt W 2023-09-12 17:00:14 +02:00
  • be1169ffcb Make Transitive Allowlisting Work with Signing ID rules (#1177) Pete Markowsky 2023-09-11 14:28:23 -04:00
  • 181c3ae573 Bump bazel and build_bazel_rules_apple versions (#1178) Matt W 2023-09-11 19:41:38 +02:00
  • 5f0755efbf Add Tests for #1165 Behavior. (#1173) Pete Markowsky 2023-09-04 19:48:44 -04:00
  • f0165089a4 Update rules.md with more detail on Transitive/Compiler rules (#1172) p-harrison 2023-09-01 15:21:19 +01:00
  • 5c98ef6897 Update troubleshooting.md (#1169) kyoshisuki 2023-08-30 08:01:16 -05:00
  • e2f8ca9569 Remove logupload stage from syncing-overview.md (#1168) p-harrison 2023-08-29 17:04:33 +01:00
  • 2029e239ca Fix issue where client mode was almost always logged as "Unknown" (#1165) Matt W 2023-08-28 15:50:21 +02:00
  • cae3578b62 Document SyncExtraHeaders in configuration.md (#1166) p-harrison 2023-08-28 14:30:12 +01:00
  • 16a8c651d5 Restore file_bundle_hash & file_bundle_binary_count (#1164) Pete Markowsky 2023-08-25 11:09:02 -04:00
  • 4fdc1e5e41 Use default event detail button text when a custom URL is set (#1161) Matt W 2023-08-23 17:22:24 +02:00
  • 1cdd04f9eb Additional metrics for File Access Authorizer client (#1160) Matt W 2023-08-23 17:20:13 +02:00
  • 4d0af8838f Fix new buildifier issues (#1162) Matt W 2023-08-23 17:18:05 +02:00
  • 0400e29264 Correction to sync-protocol.md (#1159) p-harrison 2023-08-21 17:19:51 +01:00
  • 2c6da7158d Add SigningID/TeamID to Event definition in sync-protocol.md (#1158) p-harrison 2023-08-21 14:54:56 +01:00
  • b0ab761568 sync: Send rules_received and rules_processed fields in postflight request (#1156) Russell Hancox 2023-08-18 18:45:49 -04:00
  • b02336613a Remove references to old EnableSystemExtension config key (#1155) Matt W 2023-08-18 17:47:14 +02:00
  • bd86145679 Add mount from information to disk appear events (#1153) Matt W 2023-08-17 14:00:01 +02:00
  • 6dfd5ba084 Fix issue where re config types couldn't be overridden (#1151) Matt W 2023-08-14 23:40:48 +02:00
  • 72e292d80e Add support for was_mmaped_writeable to file write monitoring when using macOS 13+ (#1148) Pete Markowsky 2023-08-14 15:25:48 -04:00
  • 6588c2342b Added TransitiveWhitelisting explanation to rules.md (#1150) p-harrison 2023-08-14 17:04:24 +01:00
  • d82e64aa5f Project: Split integration VM license into its own LICENSE file (#1147) 2023.7 Russell Hancox 2023-08-08 13:29:06 -04:00
  • a9c1c730be Project: Cast some enums to int (#1146) Ivan Tadeu Ferreira Antunes Filho 2023-08-08 13:08:11 -04:00
  • 6c4362d8bb Add hot cache for targets of read only policies (#1145) Matt W 2023-08-08 18:38:33 +02:00
  • c1189493e8 sync/UI: Add ability to send custom URLs for blocking rules. (#1140) Russell Hancox 2023-08-04 15:01:45 -04:00
  • aaa0d40841 sync: Add SyncExtraHeaders config option. (#1144) Russell Hancox 2023-08-03 23:16:59 -04:00
  • a424c4afca Only update daemon settings when sync settings explicitly set (#1142) Matt W 2023-08-03 22:18:40 +02:00