Commit Graph

6734 Commits

Author SHA1 Message Date
Martin Angers
33f33163a9
Add macos custom profiles support via fleetctl apply (#9824) 2023-02-15 13:01:44 -05:00
Eric
d7eeb10a7c
Website: Update <call-to-action> component to include presets for Fleet Premium and Fleet MDM beta, Add CTAs to two release articles. (#9812)
Closes: #9786

Changes:
- Updated the <call-to-action> component to add support for a new prop:
`type`. This can be set to `premium-upgrade` or `mdm-beta`. If this prop
is provided, the component will render a call to action for the limited
MDM beta or Fleet Premium.
- Example usage: `<call-to-action type="mdm-beta"></call-to-action>`
- Added a CTA for upgrading to Fleet premium to the `Fleet 4.27.0`
release article
- Added a CTA for the MDM beta to the `Fleet 4.26.0` release article
2023-02-15 10:00:54 -06:00
Mike McNeil
5f19f0b251
Help Zach be able to change GitHub Actions more quickly (#9847)
See
https://github.com/fleetdm/fleet/pull/9845#pullrequestreview-1298713959
2023-02-14 20:43:40 -06:00
Eric
abde4a81ba
Website: Update layout scripts and masthead navigation (#9833)
Changes:
- Fixed the background blur on the masthead on Safari.
- Increased `scroll-margin-top` on Markdown headings to make sure
headings that are navigated to with anchor links are not hidden behind
the website's masthead
- Updated the indentation of script tags in layouts and updated code
comments.
- Added Hotjar and Heap analytics `<script>` tags from the main layout
to `layout-customer` `layout-sandbox` and `layout-landing`
- Added a link to `/compliance` landing page to the `layout-sandbox`
masthead navigation.
2023-02-14 16:26:23 -06:00
Katheryn Satterlee
112e5ec05a
Add Packs entry to FAQ (#9825)
# Checklist for submitter

Documentation only change
2023-02-14 15:30:47 -06:00
Sharon Katz
4c22fbffd6
rename cis label to win10-stand-alone (#9816) 2023-02-14 14:52:15 -05:00
Andrew Baker
241982ac80
Add GTM (#9822)
Adding Google Tag Manager code snippet.

Google Tag Manager changes will be reviewed by @eashaw before publishing
to the website.

Please feel free to push these changes once we've planned to properly
incorporate GTM(Google Tag Manager) and set up a consensus for events,
analytics, and review.

We can keep the old analytics custom events (Global site tag (gtag.js)
snippet) as they're important with SalesForce lead sources. We will need
to edit these going forward, but incorporating GTM should make that
process much easier. Once we've transitioned fully to GTM, we can remove
the gtag.js snippet as it could live inside Google Tag Manager.

# Checklist for submitter 

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-14 13:19:34 -06:00
gillespi314
8daead3ef5
Update route for hosts encryption key (#9821) 2023-02-14 12:17:31 -06:00
Eric
9a8024d5c9
Website: Update signup.js error handling and increase timeout in Sandbox provisioner request (#9818)
Changes:
- Updated `signup.js` to:
   - Add a new exit: `requestToSandboxTimedOut`
- Increased the timeout on the request to the Fleet Sandbox provisioner
from 5000ms to 10000ms
- Changed the error thrown when a request times out to a logged warning.
- return the `requestToSandboxTimedOut` exit when a request to the Fleet
Sandbox provisioner times out.
- Added an error message to the Sandbox registration page for when
requests time out
2023-02-14 11:58:12 -06:00
Mike Thomas
0ce8c65960
Update mdm and compliance landpages (#9814)
- changed /device-management to a teaser layout as per this [Slack
thread](https://fleetdm.slack.com/archives/C01ALP02RB5/p1676053098600709).
- updated pre-header styling on /device-management and /compliance
- updated badge in the navigation to say "Limited beta".

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-14 11:19:04 -06:00
Gabriel Hernandez
52d0078bbc
check disk encryption key from host details page (#9691)
related to https://github.com/fleetdm/fleet/issues/8708

This allows a user to check a disk encryption key for a host on the host
details page.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2023-02-14 17:00:36 +00:00
Noah Talerman
1c44d54454
MDM docs: Update migration instructions (#9820)
- For automatically enrolled hosts, add extra step to
first unassigned hosts from old MDM and then assign hosts to Fleet
2023-02-14 11:51:35 -05:00
Noah Talerman
b3f5683428
Hosts page UI: Fix MDM tooltips (#9819)
- Switch **MDM status** and **MDM server URL** tooltips
2023-02-14 11:50:10 -05:00
gillespi314
f1227d7303
Add authz and datastore methods for mdm config profiles (#9781) 2023-02-14 09:12:18 -06:00
Sharon Katz
9125263c14
add details to CIS label (#9811) 2023-02-14 10:05:44 -05:00
Roberto Dip
0f5a35061e
don't filter DEP hosts by OS before ingesting and improve logs (#9815)
Related to https://github.com/fleetdm/fleet/issues/9653 I couldn't find
any documentation to back this up, but I have a strong suspicion that
the `os` field in the device sync response might come empty in some
scenarios (particularly, when a laptop is brand new, which is hard to
reproduce 😅)

My thoughts are:

1. For the recently purchased MacBooks,
`IngestMDMAppleDevicesFromDEPSync` didn't create an entry in the
database, BUT `nanodep.Assigner.ProcessDeviceResponse` correctly
assigned a DEP profile (the devices were able to enroll). Both methods
filter by `op_type` but only ours filters by `os`.
2. I think this is safe-ish to do, as you will normally assign a MDM
server per device type in ABM

![image](https://user-images.githubusercontent.com/4419992/218732609-0936e3a9-cadf-4485-9aa4-af2c9398cff9.png)
3. I have added extra logs to try to prove this hypothesis next time a
brand new device comes in, let's keep an eye on and re-evaluate this
approach.
2023-02-14 10:23:19 -03:00
JD
35e513adf7
Spelling Correction (#9799)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-14 09:50:37 -03:00
Mike Thomas
8b99dc9943
create new landing page called /compliance (#9787)
- created a new page on fleetdm.com called /compliance
- updated the main nav to include this page under 'Platform'

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-14 08:06:02 +09:00
Roberto Dip
119ada71da
fix XML formatting of RemoveProfile command (#9805)
potential fix for https://github.com/fleetdm/fleet/issues/9802, I still
can't reproduce locally but it might be that ngrok is doing some magic
encoding/decoding the bytes transferred.
2023-02-13 17:20:43 -03:00
Jacob Shandling
d8bb038f85
Fix sentence casing bug (#9803)
# Addresses #9772 
![Screenshot 2023-02-13 at 9 59 00
AM](https://user-images.githubusercontent.com/61553566/218536112-a6e0f0ae-1f18-4b86-85d3-39c6cbb1fabc.png)

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-13 10:29:14 -08:00
Charlie Chance
6e0626a01c
handbook: security account recovery process update (#9804) 2023-02-13 11:15:26 -07:00
Nathanael Holliday
26931c178d
Do not solicit check (#9467)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-13 10:57:38 -07:00
dependabot[bot]
47543707ac
Bump http-cache-semantics from 4.1.0 to 4.1.1 (#9685)
Bumps
[http-cache-semantics](https://github.com/kornelski/http-cache-semantics)
from 4.1.0 to 4.1.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2449650435"><code>2449650</code></a>
Update mocha</li>
<li><a
href="560b2d8ef4"><code>560b2d8</code></a>
Don't use regex to trim whitespace</li>
<li><a
href="b1bdb92638"><code>b1bdb92</code></a>
Remove linting package zoo</li>
<li><a
href="c20dc7eeca"><code>c20dc7e</code></a>
Cache 308</li>
<li>See full diff in <a
href="https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=http-cache-semantics&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 10:19:15 -06:00
RachelElysia
2c4c3a87ea
Fleet Documentation: Update agent options and enrollment secret documentation (#9565) 2023-02-13 10:45:37 -05:00
Jarod Reyes
f97e760ab8
Update how-to-submit-and-publish-an-article.md (#9555)
Added Jarod as the DRI for review.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-12 11:53:53 -08:00
Eric
4093650599
Website: Add Fleet Premium CTA to documentation pages (#9796)
Closes: https://github.com/fleetdm/fleet/issues/9785

Changes:
- Updated the documentation page script to set a `currentDocsSection`
variable
- Added Fleet Premium calls to action that link to the `/upgrade` page
to the left sidebar on documentation pages.


cc: @jarodreyes
2023-02-10 18:37:47 -06:00
Eric
874ca7bc8a
Website: Update masthead (#9782)
Closes: https://github.com/fleetdm/fleet/issues/9762

Changes:
- `routes.js`: Changed the `currentPage` local variable to
`currentSection` and updated the value based each on the dropdown
navigation menus in the website header. This variable is used to make a
section "active" in the header.
- `view-basic-article` & `view-articles`: Updated these view actions to
set a `currentSection` variable based on the Markdown article category.
- `Layout.less`: Updated styles to match wireframes
- `layout.ejs`: Updated the styles and layout of the website header to
match wireframes.
- `layout-landing.ejs`, `layout-sandbox.ejs` & `layout-customer.ejs`:
Updated to match wireframes and stylesheet changes.
- `basic-documentation.less`: adjusted the position of the sticky right
sidebar.

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-02-10 18:33:12 -06:00
Mo Zhu
3de7b0c3d4
Update macos nudge docs (#9801) 2023-02-10 16:31:22 -05:00
Roberto Dip
9dc81228df
add missing Fleet MDM banner on host details page (#9797)
https://github.com/fleetdm/fleet/issues/9794
2023-02-10 18:17:12 -03:00
Jacob Shandling
793ca1b058
Write instructions for using toggle-mdm-dev to turn on and off MDM / ABM (#9716)
# Add instructions for a handy little script

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-10 13:14:34 -08:00
Zachary Winnerman
c158d4e55b
Change the default memory value to a sane value (#9800)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-10 15:44:51 -05:00
gillespi314
bcdc4691bb
Enable installation and auto-updates of Nudge via Orbit (#9605)
Issue #9093 

Co-authored-by: Roberto Dip <me@roperzh.com>
Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
2023-02-10 17:03:43 -03:00
Mike McNeil
c321e3f516
/device-management (fix sentence casing) (#9791)
https://fleetdm.com/handbook/marketing/content-style-guide#sentence-case

<img width="162" alt="image"
src="https://user-images.githubusercontent.com/618009/218170979-268bfd8e-ab96-418a-aebb-43cc5b32579f.png">


![image](https://user-images.githubusercontent.com/618009/218171003-a6dde049-17f2-49e1-8326-34a2bbdc5f8f.png)
2023-02-10 13:08:59 -06:00
Luke Heath
59fd2a6192
Fix top nav underline positioning and size (#9790) 2023-02-10 12:51:15 -06:00
Sharon Katz
0ddd0d64f7
CIS_fix_desc_errors (#9789) 2023-02-10 12:48:44 -05:00
Charlie Chance
4b164435bc
Handbook: moving / relocation info (#9788)
Hello all, letting you know that information for when fleeties move or
relocate is added to the handbook.
2023-02-10 09:28:01 -07:00
Zach Wasserman
443e347ea6
Update FAQ to indicate Fleet Cloud Beta (#9784) 2023-02-09 17:04:30 -08:00
Jacob Shandling
429edde09f
Make 2nd file download async to fix (#9711)
# Addresses #9680 
- Add 100ms timeout before 2nd key is downloaded from browser
- Fix file decoding to correctly download both keys
- Fix copy

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
Co-authored-by: Roberto Dip <roberto@fleetdm.com>
2023-02-09 14:50:20 -08:00
Jacob Shandling
c2d557588d
DeviceUserPage MDM banner adjustments (#9710)
# Addresses #9668 
- Turn on MDM now doesn't wrap
- Also kept banner width matching the rest of the page content:
- before: <img width="1196" alt="before"
src="https://user-images.githubusercontent.com/61553566/217093932-2ac6cdfb-6078-4895-bad3-6c777287f8cb.png">
- after: <img width="1300" alt="after"
src="https://user-images.githubusercontent.com/61553566/217093943-9f171b9c-a342-44e0-825a-63f397e2966c.png">


# Checklist for submitter
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-09 14:49:24 -08:00
Jacob Shandling
75809889bf
update links and flash error copy (#9703)
# Small copy / url updates

# Checklist for submitter
- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-09 14:49:09 -08:00
Charlie Chance
bb97745d62
Charlotte chance patch 2 (#9779) 2023-02-09 11:51:59 -07:00
Artemis Tosini
d36e89a0ef
Add macOS CIS 6.3.3 (Safari Safe Browsing) (#9778) 2023-02-09 13:46:42 -05:00
Charlie Chance
f3e5040c10
Handbook: backlog catchup - Rituals (#9776)
https://github.com/fleetdm/fleet/issues/4679
https://github.com/fleetdm/fleet/issues/4670 @zwass - FYI
https://github.com/fleetdm/confidential/issues/1051 
https://github.com/fleetdm/fleet/issues/4677
2023-02-09 11:37:05 -07:00
Charlie Chance
2ca806d3be
Handbook: backlog contributor ex audits (#9777)
https://github.com/fleetdm/fleet/issues/4679
2023-02-09 11:36:36 -07:00
Lucas Manuel Rodriguez
4a5ce51d49
CIS yaml fixes (#9775) 2023-02-09 15:28:47 -03:00
Sharon Katz
1fc799577d
CIS 6.4.1 (#9773) 2023-02-09 13:22:36 -05:00
Sharon Katz
c7827cf5b1
CIS 6.3.7 (#9767) 2023-02-09 13:15:21 -05:00
Eric
0e076a989f
Remove duplicate columns property in firmware_eficheck_integrity_check.yml (#9774)
Changes:
- Removed the duplicate `columns` property from the
`firmware_eficheck_integrity_check` table's YAML file that is currently
causing the website build script to fail.
(https://github.com/fleetdm/fleet/actions/runs/4136825407/jobs/7151210650#step:13:19)
2023-02-09 11:56:21 -06:00
Artemis Tosini
6b50914500
Add macOS CIS 2.3.3.10 (Media Sharing) (#9666) 2023-02-09 12:55:22 -05:00
Lucas Manuel Rodriguez
9fa2be0a86
Add check for CIS 5.10 (#9755)
#9260

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.~
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- ~[ ] Added/updated tests~
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-09 14:28:22 -03:00