Commit Graph

  • 2847397b66 Have distributed notifications delivered immediately (#1141) Matt W 2023-08-03 21:49:10 +02:00
  • ad8b4b6646 Check if spool dir has changed before estimating size (#1138) Matt W 2023-08-03 20:54:14 +02:00
  • 39ee9e7d48 sync: Change backoff in SNTSyncStage.m to be exponential (#1135) alexgraehl 2023-07-26 12:55:37 -07:00
  • 3cccacc3fb Add additional dep to satisfy import issue (#1134) Matt W 2023-07-26 18:50:29 +02:00
  • 6ed5bcd808 Enforce expected case for various rule type identifiers (#1132) Matt W 2023-07-26 18:31:28 +02:00
  • bcac65a23e Wire up TTYWriter instance to the file access client (#1129) Matt W 2023-07-26 06:11:36 +02:00
  • 03fcd0c906 Add more file access config options (#1128) Matt W 2023-07-26 06:01:04 +02:00
  • d3b71a3ba8 Update sync-protocol.md to include SIGNINGID rule type (#1130) p-harrison 2023-07-25 19:31:13 +01:00
  • 9e124f4c51 Add kSyncEnableCleanSyncEventUpload to the _forcedConfigKeyTypes dict (#1123) 2023.6 Pete Markowsky 2023-07-06 17:39:51 -04:00
  • cd719ccef4 Fix issue with invalid lengths (#1122) Matt W 2023-07-06 17:22:18 +02:00
  • dde42ee686 Fix check to detect changes to StaticRules (#1121) Matt W 2023-06-30 22:39:52 +02:00
  • d144e27798 Fix rule evaluation for TeamID and SigningID rules when encountering broken signatures. (#1120) Pete Markowsky 2023-06-30 09:54:27 -04:00
  • afc2c216b8 Add include for proto status stub (#1119) Matt W 2023-06-29 19:32:14 +02:00
  • 03d7556f22 Use angle brackets for includes (#1118) Matt W 2023-06-29 17:55:46 +02:00
  • 020827b091 Fix memleak in fsspool (#1115) Nick Gregory 2023-06-29 10:17:08 -04:00
  • baa31a5db0 Conf: Update notarization_tool in signing script (#1116) Russell Hancox 2023-06-28 22:32:58 -04:00
  • 9ba7075596 Add macOS 13 to the test matrix. (#1113) Pete Markowsky 2023-06-27 13:22:36 -04:00
  • 5d08538639 Add Support for Logging to JSON (beta feature) (#1112) Pete Markowsky 2023-06-23 10:06:45 -04:00
  • e73bafb596 Fix build issues due to macOS 13.3 SDK changes (#1110) Matt W 2023-06-21 04:23:55 +02:00
  • 1e92d109a7 Basic dialog functionality when access to a watch item is denied (#1106) Matt W 2023-06-19 20:00:35 +02:00
  • 6a6aa6dce8 Abstract TTY writing so multiple writers can be synchronized (#1108) Matt W 2023-06-14 02:19:50 +02:00
  • 0715033d6a Migrate to new SNTRuleType enum values (#1107) Matt W 2023-06-09 17:50:42 +02:00
  • 123d7a2d6a Update docs for signing id rules (#1105) Matt W 2023-05-30 19:27:29 +02:00
  • 7b4d997589 Fix missing check for FileChangesRegex (#1102) Matt W 2023-05-22 22:13:06 +02:00
  • 5307bd9b7f Fix precedence for static rule evaluation, update santactl fileinfo output. (#1100) 2023.5 Matt W 2023-05-18 21:05:23 +02:00
  • 0622e6de71 Handle database downgrade scenarios gracefully (#1099) Matt W 2023-05-17 04:31:40 +02:00
  • e7c32ae87d Update SECURITY.md (#1098) Russell Hancox 2023-05-12 10:30:58 -04:00
  • deaf3a638c Add new rule type for Signing IDs (#1090) Matt W 2023-05-12 15:22:46 +02:00
  • 8a7f1142a8 Stop unmuting the default mute set unnecessarily. (#1095) Matt W 2023-05-10 15:07:13 +02:00
  • c180205059 Return unique_ptr from Enrich instead of shared_ptr (#1093) Matt W 2023-05-08 16:55:38 +02:00
  • 337df0aa31 Don't establish the FAA client pre-macOS 13 (#1091) Matt W 2023-05-05 21:33:34 +02:00
  • e2b099aa50 santactl/rule: Fix --path argument (#1089) Russell Hancox 2023-05-04 17:57:59 -04:00
  • fc4e29f34c Docs: Added instructions for how to use config-overrides.plist (#1077) Pete Markowsky 2023-05-01 22:16:11 +02:00
  • bf3b6bc6e2 Inject additional dependencies into the serializers (#1078) Matt W 2023-05-01 21:13:54 +02:00
  • b810fc81e1 Add support to file monitoring config to invert process exceptions (#1083) Matt W 2023-05-01 21:04:40 +02:00
  • 3b3aa999c5 Switch SNTEventState to uint64_t, reposition flag values and masks (#1086) Matt W 2023-05-01 20:37:11 +02:00
  • 59428f3be3 docs: Fix documentation for clean sync field in the preflight request. (#1082) Faizan 2023-04-27 23:38:44 -04:00
  • ae6451a9b2 docs: Clarify that execution_time, file_bundle_hash_millis and quarantine_timestamp are float64 (#1080) Jason McCandless 2023-04-27 18:54:02 -04:00
  • feac080fa7 sync: Permit XSRF header between sync stages/sessions (#1081) 2023.4 Russell Hancox 2023-04-27 10:52:35 -04:00
  • d0f2a0ac4d One more TSAN fix (#1079) Nick Gregory 2023-04-26 17:30:06 +02:00
  • 7fc06ea9d8 Make the sync client content encoding a tunable (#1076) Pete Markowsky 2023-04-24 09:00:29 -04:00
  • 1dfeeac936 README: Add more badges (#1075) Russell Hancox 2023-04-21 09:54:33 -04:00
  • ac9b5d9399 Cache flush metrics (#1074) Matt W 2023-04-20 22:47:06 +02:00
  • 7f3f1c5448 Process unmount events first (#1073) Matt W 2023-04-19 17:13:13 +02:00
  • 46efd6893f config: Add EnableSilentTTYMode key to disable TTY notifications. (#1072) Russell Hancox 2023-04-19 10:38:24 -04:00
  • 50232578d6 Fix string length issues (#1070) Matt W 2023-04-13 16:03:52 +02:00
  • d83be03a20 sync: Add more complete XSSI prefix to be stripped. (#1068) Russell Hancox 2023-04-07 15:27:41 -04:00
  • 119b29b534 GUI: Device event window, handle empty remount args (#1066) Russell Hancox 2023-04-05 16:34:05 -04:00
  • be87b3eaf2 Change types of repeated args and envs fields (#1063) 2023.3 Matt W 2023-03-31 19:18:09 +02:00
  • 0fe672817e sync: Fix case of empty header name (#1062) Russell Hancox 2023-03-28 11:50:11 -04:00
  • c3b2fbf512 sync: Allow server to override the header for transmitting XSRF tokens (#1060) Russell Hancox 2023-03-27 18:11:11 -04:00
  • 2984d98cb9 Document SigningID and PlatformBinary exception keys (#1059) Matt W 2023-03-25 16:34:06 +01:00
  • 5295faef0e Fix a couple last TSAN failures (#1056) Nick Gregory 2023-03-23 11:11:29 -04:00
  • 0209344f62 santad: Fix SD Card Block not operating on Internal SD Card Readers (#1055) Liam Nicholson 2023-03-22 21:54:11 +00:00
  • 53ca5eb811 Support filesystem monitoring config embedded in main Santa config (#1054) Matt W 2023-03-20 21:47:34 +01:00
  • 33c7aab9f1 Basic rate limiting for File Access Authorizer (#1053) Matt W 2023-03-20 20:58:49 +01:00
  • f6d837ac31 chore(ci): Upgrade workflows to non-deprecated runtimes (#1052) Pål-Magnus Slåtto 2023-03-15 14:42:16 +01:00
  • 5e0a383662 Properly report "file access client enabled" metrics (#1051) Matt W 2023-03-14 20:01:03 +01:00
  • 8055b451bb Config: Ignore static rules with an invalid identifier (#1049) Russell Hancox 2023-03-07 10:33:13 -05:00
  • c5e7736eef santactl/rule: Validate identifier is a valid SHA-256 for binary/cert rules (#1045) Russell Hancox 2023-03-01 13:44:44 -05:00
  • 61558048c0 Add basic metrics to report when the FAM client is enabled (#1043) 2023.2 Matt W 2023-02-17 17:57:18 +01:00
  • cf0e3fd3db Add support for platform binary to process exceptions (#1041) Matt W 2023-02-17 17:30:46 +01:00
  • 15519c6de8 Clear ES cache when watch items change (#1042) Matt W 2023-02-17 17:04:08 +01:00
  • a415679980 Fix sync protocol diagram. (#1037) Pete Markowsky 2023-02-08 16:13:08 -05:00
  • 27ae60e265 Small test fixes to make sanitizers happy (#1030) Nick Gregory 2023-02-06 15:16:22 -05:00
  • 29a50f072c Report log type in santactl status (#1036) Matt W 2023-02-06 20:59:42 +01:00
  • a97e82e316 Replace SNTDecisionCache dictionary with SantaCache (#1034) Matt W 2023-02-03 21:58:53 +01:00
  • 532120ac02 Configurator: Return an unsafe_unretained pointer to avoid needless retain/release (#1035) Russell Hancox 2023-02-03 15:55:15 -05:00
  • ec934854fc santactl & syncservice: Use synchronousRemoteObjectProxy where it makes sense (#1033) Russell Hancox 2023-02-03 14:31:37 -05:00
  • ad0e2abdac Restart daemon on log type change (#1031) Matt W 2023-02-03 17:04:57 +01:00
  • dc11ea6534 Rework timeout handling in metrics HTTP writer (#1029) Matt W 2023-02-02 16:58:28 +01:00
  • 3acf3c1d00 Use cached sizes when serializing (#1028) Matt W 2023-01-30 22:08:38 +01:00
  • 41bc3d2542 Perf: Translocate cache, reserve proto repeated fields (#1027) Matt W 2023-01-30 18:18:32 +01:00
  • 45a5d4e800 Fix: Rewrite the SNTMetricHTTPWriter to avoid potential stack corruption (#1019) Pete Markowsky 2023-01-30 11:53:26 -05:00
  • 82bd981f31 Fix team ID and signing ID checks (#1026) Matt W 2023-01-30 15:14:27 +01:00
  • 6480d9c99b docs: fix width of sidebar on larger windows (#1025) Russell Hancox 2023-01-27 15:38:46 -05:00
  • 7e963080b3 add updated description (#1023) Henry S 2023-01-27 21:38:14 +01:00
  • e58cd7d125 Remove Default column (#1024) Matt W 2023-01-27 21:28:31 +01:00
  • db597e413b docs: Support wider pages, fix syntax highlighting of plist (#1022) Russell Hancox 2023-01-27 15:18:45 -05:00
  • 78f46896d5 Try with more vertical space (#1021) Matt W 2023-01-27 20:37:02 +01:00
  • cc0742dbfb Fsmon docs table width (#1020) Matt W 2023-01-27 20:32:58 +01:00
  • 9c2f76af72 Initial docs for file access auth feature (#1017) Matt W 2023-01-27 20:08:34 +01:00
  • a3ed5ccb40 Log type metrics (#1018) Matt W 2023-01-27 16:22:09 +01:00
  • b4149816c7 Add new continuous test run with various sanitizers (#1016) Nick Gregory 2023-01-26 16:00:47 -05:00
  • 2313d6338d Remove extra expectation in test (#1015) Matt W 2023-01-26 17:42:14 +01:00
  • 414fbff721 Project: Fix module maps for swift libraries and their dependencies (#1014) Russell Hancox 2023-01-26 09:15:30 -05:00
  • 5a2e42e9b4 Reduce calls into configurator (#1013) Matt W 2023-01-25 22:51:13 +01:00
  • f8d1b2e880 Reduce proto warning severity (#1012) Matt W 2023-01-25 20:37:00 +01:00
  • 5f4d2a92fc Ensure watch item names conform to naming requirements (#1011) Matt W 2023-01-25 19:27:27 +01:00
  • 4ccffdca01 GUI: Migrate DeviceMessageWindow to SwiftUI (#1010) Russell Hancox 2023-01-25 12:16:31 -05:00
  • e60bbe1b55 shadow rules_python for fuzzing (#1009) Nick Gregory 2023-01-23 11:11:48 -05:00
  • eee2149439 GUI: Re-write AboutWindow view in SwiftUI (#1007) Russell Hancox 2023-01-20 13:43:50 -05:00
  • dcbbc33e5e Revert "Configurator: Apply config updates in non-daemon processes (#1003)" (#1008) 2023.1 Russell Hancox 2023-01-20 13:30:06 -05:00
  • ebe5166d77 Prevent recursive reconnect attempts (#1005) Matt W 2023-01-19 16:03:15 +01:00
  • 6e5a530df5 Low hanging fruit perf changes (#1004) Matt W 2023-01-18 21:14:48 +01:00
  • 1e88b88ee6 Configurator: Apply config updates in non-daemon processes (#1003) Russell Hancox 2023-01-18 10:00:39 -05:00
  • 2d74f36ddb Reconnect to santametrics service on failure (#1001) Nick Gregory 2023-01-12 10:41:36 -05:00
  • 3a3564f36b Add watch item state to santactl status (#1000) Matt W 2023-01-12 16:38:12 +01:00
  • d3c7cbbcc3 Rename type aliases (#999) Matt W 2023-01-11 17:30:11 +01:00
  • 1ff6967934 Support configuring signing IDs for process exceptions (#998) Matt W 2023-01-11 15:42:32 +01:00