Commit Graph

  • 53877f6114 Adopt new FS Access Auth config format and policy application logic (#994) Matt W 2023-01-10 22:40:13 +01:00
  • 8c50af4041 Add policy version and name to basic string serializer (#997) Matt W 2023-01-10 19:17:21 +01:00
  • d0d4508f77 docs: Fix deployment/configuration doc (#996) Russell Hancox 2023-01-10 09:23:52 -05:00
  • df3aac5baf Change name of santa config keys for file access monitoring (#995) Matt W 2023-01-10 03:08:57 +01:00
  • e289056e5e lower fuzz case timeout to 5s (#993) Nick Gregory 2023-01-09 12:28:45 -05:00
  • 4adad2ecfa More event type support (#992) Matt W 2023-01-06 18:51:40 +01:00
  • dc1a3c27c2 Add more event coverage in the file access client (#991) Matt W 2023-01-05 19:03:21 +01:00
  • a2f8030482 Fuzz embedded plist reading (#990) Nick Gregory 2023-01-03 14:22:31 -05:00
  • 338a4f738f Opportunistically use ES cache when possible (#989) Matt W 2023-01-03 20:09:21 +01:00
  • 845d72eebd Fix nightly run cron specification (#986) Nick Gregory 2022-12-28 17:36:54 -05:00
  • ca81270bff Fix SNTFileInfo Fuzzing (#985) Nick Gregory 2022-12-27 16:20:32 -05:00
  • 42cf1b232a Adopt new ES APIs to watch target paths in tamper client (#984) Matt W 2022-12-22 22:49:25 +01:00
  • 57285c48dd use new public api for booting VM into recoveryOS (#983) Nick Gregory 2022-12-22 16:27:38 -05:00
  • 2279cd8662 Run fuzzing in a VM (#982) Nick Gregory 2022-12-22 13:52:46 -05:00
  • 9423beecc8 fix spinloop when no override config is specified (#981) Nick Gregory 2022-12-22 13:51:46 -05:00
  • b18d4a0e30 Fix SNTFileInfoTest for macOS 13 (#977) Pete Markowsky 2022-12-22 10:37:22 -05:00
  • 290ebed15e Allstar: Add fuzzing artifact (#980) Russell Hancox 2022-12-22 09:13:53 -05:00
  • 435868aa7a Add build targets, lint (#978) Matt W 2022-12-22 04:56:20 +01:00
  • 2e3952a31d Revitalize Fuzzing (#976) Nick Gregory 2022-12-21 15:29:07 -05:00
  • 60f53bc20a Adopt new ES APIs to monitor target paths (#975) Matt W 2022-12-21 03:15:01 +01:00
  • fec3766da4 Project: Upgrade MOLAuthenticatingURLSession to v3.1 (#974) Russell Hancox 2022-12-19 15:12:09 -05:00
  • ae63055f34 Fix golden test data for macOS 13 (#972) Matt W 2022-12-19 20:47:06 +01:00
  • e5a0c3c1c0 sync: Fix deduplication in reachability handler (#973) Russell Hancox 2022-12-19 14:42:18 -05:00
  • 5680c69164 Address policy consistency issues (#971) Matt W 2022-12-19 20:20:05 +01:00
  • 8a978c1e75 Update LICENSE for VM code (#970) Nick Gregory 2022-12-16 12:21:49 -05:00
  • 6aa7c9ba86 Fix import issues (#969) Matt W 2022-12-15 22:10:26 +01:00
  • 6adef6a714 Track path types for current/new watch items (#968) Matt W 2022-12-15 21:44:47 +01:00
  • 1d8c105257 absl_guarded_by (#967) Nick Gregory 2022-12-15 13:34:32 -05:00
  • e2d7cf04fc Fix under retain (#966) Matt W 2022-12-15 18:50:59 +01:00
  • 9d448071f7 Lint the E2E start-vm Python script (#965) Nick Gregory 2022-12-14 17:37:56 -05:00
  • cd6c0e7120 Introduce end-to-end testing (#919) Nick Gregory 2022-12-14 11:15:55 -05:00
  • ec5e8177fb Serialize File Access events (#964) Matt W 2022-12-14 17:04:37 +01:00
  • 8e10c103cb santad: Flush cache when StaticRules are changed (#963) Russell Hancox 2022-12-13 16:57:13 -05:00
  • db6c14ea10 Enrich file access events, prepare for logging (#962) Matt W 2022-12-12 22:37:47 +01:00
  • 4a4f1a971c Fix issue where wrong variable was used (#961) Matt W 2022-12-09 21:07:30 +01:00
  • c5c82a18ff Dynamically enable/disable FS Access client based on config (#959) Matt W 2022-12-09 17:54:54 +01:00
  • f702c7a281 Tests: Fix SNTEndpointSecurityFileAccessAuthorizerTest (#958) Russell Hancox 2022-12-08 15:46:51 -05:00
  • 958ef52698 Config: In debug builds, allow config to be overriden from a plist file. (#957) Russell Hancox 2022-12-08 15:07:59 -05:00
  • 068ec885b2 pemdas (#955) Matt W 2022-12-07 23:07:05 +01:00
  • e572f047c0 Import fix (#953) Matt W 2022-12-07 20:07:13 +01:00
  • b904a329d9 FS Access Config Version, Policy decision enums (#951) Matt W 2022-12-07 19:33:35 +01:00
  • d19343bccd Draft proto for new FileAccess log (#952) Matt W 2022-12-07 19:06:47 +01:00
  • 09cd78d756 Initial work for File Access Authorizer Client (#949) Matt W 2022-12-07 01:52:32 +01:00
  • f169b69944 santad: Change workaround for glob header with blocks, free glob-allocated memory (#948) Russell Hancox 2022-12-05 15:52:17 -05:00
  • 40f9872c54 Tests: Fix some assertions comparing strings (#947) Russell Hancox 2022-12-05 12:54:04 -05:00
  • 5718f2e582 Watch items (#937) Matt W 2022-12-01 19:41:05 +01:00
  • 04fd742114 Include SD Card Mounting in the USB Block Functionality (#938) Liam Nicholson 2022-12-01 15:25:54 +00:00
  • 194a3a6d4a Remove SNTCommon (#945) Matt W 2022-12-01 15:14:54 +01:00
  • e1dc50fb36 Drop macOS 10.15 (#944) Matt W 2022-11-30 02:20:48 +01:00
  • 9ff2f0d631 Swtich from task_info to libproc for system resource info (#939) Matt W 2022-11-29 22:50:37 +01:00
  • 85058ec290 Rename santa_vnode_id_t to SantaVnode (#943) Matt W 2022-11-29 05:45:14 +01:00
  • 6e90673f71 docs: Update keyserver address in SECURITY (#941) Russell Hancox 2022-11-28 19:35:02 -05:00
  • a58cee908f docs: Fix typo in sync-protocol, h/t to @maxwbuckley (#940) Russell Hancox 2022-11-28 17:21:45 -05:00
  • 80b26955b4 GUI: Fix distributed notifications in silent mode (#936) 2022.11 Russell Hancox 2022-11-16 09:53:56 -05:00
  • 6a84023548 Prefix tree updates (#931) Matt W 2022-11-14 08:16:49 -05:00
  • e70acefb5c Docs: Fix type of {allowed,blocked}_path_regex keys in preflight (#934) Russell Hancox 2022-11-07 15:36:10 -05:00
  • 41c918ee87 Don't add messages when accumulated bytes exceeds threshold (#932) 2022.10 Matt W 2022-11-07 12:24:49 -05:00
  • 1adb6d2726 Update spool to flush on size thresholds instead of batch counts (#930) Matt W 2022-11-03 14:55:51 -04:00
  • 8c531a256b metrics and logging cleanup (#928) Matt W 2022-11-01 10:47:49 -04:00
  • 5829363733 GUI: Fix EnableSilentMode key (#927) Russell Hancox 2022-11-01 10:11:21 -04:00
  • 379f283c62 Update Known Limitations for USB Mass Storage Blocking (#924) Pete Markowsky 2022-10-28 20:21:38 -04:00
  • 2082345c02 Change order that ES clients are enabled (#923) Matt W 2022-10-28 20:15:26 -04:00
  • dd8f81a60e Fix issue in test that would crash on some platforms (#922) Matt W 2022-10-28 20:14:53 -04:00
  • 8ccb0813f1 More import fixes (#921) Matt W 2022-10-28 15:57:01 -04:00
  • b24e7e42bf Event metrics (#918) Matt W 2022-10-28 14:25:07 -04:00
  • 4821ebebd5 Fix: duplicates bug in SNTMetricSet when using multiple fields (#920) Pete Markowsky 2022-10-28 13:50:08 -04:00
  • efeaa82618 Fix issue with transposed remount/banned block messages (#917) Matt W 2022-10-26 20:54:17 -04:00
  • 3f3de02644 USB: usbBlockMessage is not being used. (#915) videlanicolas 2022-10-26 14:42:49 -07:00
  • f6c9456ea7 Fix some more includes (#914) Matt W 2022-10-25 16:52:19 -04:00
  • 2aaff051c8 Various changes to fix import (#913) Matt W 2022-10-25 16:16:44 -04:00
  • 2df7e91c87 Change include to import (#912) Matt W 2022-10-24 11:56:02 -04:00
  • 37644acd01 Update build docs. Fixes #910 (#911) Matt W 2022-10-24 09:55:37 -04:00
  • 899ca89e23 Proto minimization (#909) Matt W 2022-10-21 19:48:37 -04:00
  • e7281f1c55 Spool writer (#908) Matt W 2022-10-21 16:43:12 -04:00
  • bf0ca24ae7 Machine id proto (#907) Matt W 2022-10-19 10:51:38 -04:00
  • 4fe8b7908f sync: Fix USB blocking config sync (#890) np5 2022-10-18 14:01:20 +00:00
  • a8dd332402 Update include paths and add include guard (#905) Matt W 2022-10-14 17:58:36 -04:00
  • 6631b0a8e3 More import fixes (#904) Matt W 2022-10-14 17:20:20 -04:00
  • 07e09db608 Import fixes (#902) Matt W 2022-10-14 15:51:53 -04:00
  • d041a48c97 Fsspool adopt (#900) Matt W 2022-10-13 20:47:52 -04:00
  • 1683e09cc8 Proto serializer (#897) Matt W 2022-10-13 13:52:41 -04:00
  • d6c73e0c6c common: Make SNTCommonEnums a textual header (#896) Ivan Tadeu Ferreira Antunes Filho 2022-10-03 13:15:33 -04:00
  • 72969a3c92 Fix crash flushing cache on unmount events (#895) 2022.9 Matt W 2022-09-27 21:54:35 -04:00
  • d2dbed78dd Return a value from the test block (#894) Matt W 2022-09-27 15:07:20 -04:00
  • 8fa91e4ff0 Build deps (#893) Matt W 2022-09-23 13:55:48 -04:00
  • 551763146d Linter and BUILD deps fixups (#892) Matt W 2022-09-23 11:18:58 -04:00
  • 7a7f0cd5a8 Ingestion fixups (#891) Matt W 2022-09-22 12:30:34 -04:00
  • fcb49701b3 ES and Logging Interfaces Redesign (#888) Matt W 2022-09-22 10:18:41 -04:00
  • c9ef723fc5 Project: Update bazel and apple-rules (#887) Russell Hancox 2022-08-29 17:52:27 -04:00
  • dc6732ef04 Refactor the SNTApplicationTest unit tests to function correctly (#885) Pete Markowsky 2022-08-29 13:18:04 -04:00
  • a48900a4ae Allstar: Pre-emptively check-in binary_artifacts.yaml to exclude test binaries (#884) Russell Hancox 2022-08-25 09:32:43 -04:00
  • bb49118d94 README: Try again, this time replacing the correct bit (#883) Russell Hancox 2022-08-24 16:26:30 -04:00
  • 456333d6d2 README: Fix logo link, remove coverage badge (#882) Russell Hancox 2022-08-24 16:22:37 -04:00
  • fd23a5c3b7 Fix up endTimestamp to be Monarch compliant (#879) 2022.8 Pete Markowsky 2022-08-16 22:32:29 -04:00
  • ec203e8796 Project: Rename Source/santa -> Source/gui (#877) Russell Hancox 2022-08-12 14:19:01 -04:00
  • 57ff69208d GUI: Missed a required dependency (#876) Russell Hancox 2022-08-12 14:02:22 -04:00
  • f00b7d2ded GUI: Expose SNTNotificationManager.h for the test. (#875) Russell Hancox 2022-08-12 13:46:25 -04:00
  • 9791fdd53c Project: Add a GH action to prevent trailing whitespace (#873) Russell Hancox 2022-08-12 12:46:11 -04:00
  • 26e2203f1e GUI: Improve signing chain key reporting in distributed notifications. (#874) Russell Hancox 2022-08-12 11:03:21 -04:00
  • 4a47195d12 Santa: Post distributed notification when showing block UI (#870) Russell Hancox 2022-08-11 12:34:35 -04:00