Tomas Touceda
398bb38da7
Add software_updated_at field to host ( #9116 )
...
#9012
- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files )
for more information.
- [x] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [x] Added/updated tests
Co-authored-by: Lucas Rodriguez <lucas@fleetdm.com>
2023-01-09 08:55:43 -03:00
Martin Angers
656e5bfc70
Flag when the Apple BM terms have expired ( #9091 )
...
#8862
Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
Co-authored-by: gillespi314 <73313222+gillespi314@users.noreply.github.com>
2023-01-06 17:44:20 -03:00
Lucas Manuel Rodriguez
ba6b6e12cc
Fix ingestion of MDM server for macOS and Windows hosts ( #9133 )
...
* Fix ingestion of MDM server for macOS and Windows hosts
* Return early if there are no mobile_device_management_solutions to clean up
* Run make dump-test-schema
* Fix TestHosts/DeleteHosts test
* Add test for host unenrolling from MDM
* Fix lint
* Fix typo
* Identify Fleet MDM
* Move logic to deduce MDM name out of Datastore
* Run make dump-test-schema
* Remove printfs from migration
2023-01-04 10:29:48 -03:00
Frank Sievertsen
91c90b4caa
Add new configuration option to set default team for Apple Business Manager ( #9062 )
2023-01-03 16:14:18 -06:00
Lucas Manuel Rodriguez
ac22aadc13
Fleet server and tooling to use NETWORK_TEST_GITHUB_TOKEN when environment variable is set. ( #9143 )
...
* WIP
* Add more logging
* Check rate limit at end of action
* Add github client in more places
* Add new published firefox 93 vulnerabilities to tests
* Remove fmt printfs
* Restore CI check settings
* Readd newline
2023-01-03 14:56:11 -03:00
gillespi314
b990121fdc
Add mdm enrollment pending filter to API endpoints ( #9137 )
2023-01-03 11:26:23 -06:00
Roberto Dip
1b47f9e700
add activities when a host is enrolled/unenrolled from MDM ( #9127 )
...
#8996
2022-12-28 16:41:18 -03:00
gillespi314
94dd1c3745
Ingest pending MDM hosts ( #9065 )
...
Co-authored-by @roperzh
2022-12-26 15:32:39 -06:00
Lucas Manuel Rodriguez
e1bbcfcfda
Generate audit logs for activities ( #9001 )
...
* Generate audit logs for activities
* Fix config tests
* Fix TestGetConfig/IncludeServerConfig
* Fix use of AddAttributes in results only
* Stream activities asynchronously
* Fix index and add logging
* Revert change
* Documentation fixes
2022-12-23 19:04:13 -03:00
Lucas Manuel Rodriguez
39f1029390
Make activities typed and auto-generate docs for each type ( #9069 )
...
* Make activities type and auto-generate docs for each type
* Add pageOrderInSection to not break site
* Add do not edit note to generated file
* Add make generate-doc step
* Fix main merge
2022-12-23 13:05:16 -03:00
Frank Sievertsen
8e65ec67b5
Add new activity that records create/edit/delete user roles ( #9086 )
2022-12-21 18:30:19 +01:00
Tomas Touceda
68bd8661e9
Simplify disk encryption query in linux and filter at ingestion ( #9037 )
...
* Simplify disk encryption query in linux and filter at ingestion
* Join with mounts to detect whatever is encrypting /
2022-12-19 10:01:59 -03:00
Frank Sievertsen
7ebb97cd70
Fire automations for hosts that failed before automation enabled ( #9028 )
2022-12-16 22:00:54 +01:00
Michal Nicpon
37f454c0be
Add dep key pair endpoint ( #9007 )
2022-12-16 19:39:36 +01:00
Stephan Miehe
b6a409fa3b
Support redis username ( #9018 )
2022-12-14 08:53:38 -05:00
Michal Nicpon
3c9dd27d75
add fleectl generate mdm-apple-bm command ( #8979 )
2022-12-13 16:24:50 +01:00
Martin Angers
f18a320bd5
Add command get mdm-apple-bm to fleetctl ( #8949 )
2022-12-12 15:45:53 -05:00
Roberto Dip
e68535d468
report errors that can occur during file carving ( #8972 )
...
related to https://github.com/fleetdm/fleet/issues/8117
2022-12-09 13:21:30 -03:00
Michal Nicpon
10b3179b63
Add fleetctl generate mdm-apple ( #8812 )
2022-12-07 18:24:42 +01:00
Martin Angers
d4a3730610
Add new configuration options for Apple Business Manager ( #8886 )
2022-12-06 15:50:56 -05:00
gillespi314
43b1241a0c
Add fleetctl trigger command ( #8877 )
2022-12-06 09:56:54 -06:00
Frank Sievertsen
e0766d21a3
Add ability to mark policy as critical. ( #8896 )
2022-12-06 15:59:20 +01:00
gillespi314
6fb3a87ae9
Enable errcheck linter for golangci-lint ( #8899 )
2022-12-05 16:50:49 -06:00
Martin Angers
866829dbfa
Implement fleetctl get mdm-apple ( #8786 )
2022-12-05 11:35:45 -05:00
Martin Angers
f5fc316ad3
Add options for configuring APNS and SCEP keys/certs in Fleet server ( #8730 )
2022-12-05 10:22:56 -05:00
gillespi314
d5c096fa02
Implement schedule triggers ( #8747 )
2022-11-28 13:28:06 -06:00
gillespi314
267aaf0dbe
Add holdLock and releaseLock methods to schedule package ( #8464 )
2022-11-16 15:14:38 -06:00
Martin Angers
7aab706175
Document the osquery-perf os_templates flag ( #8745 )
2022-11-16 16:12:24 -05:00
Martin Angers
ca13659fe0
Fix broken test ( #8715 )
2022-11-15 09:52:47 -05:00
Martin Angers
472c8bafb3
Refactor license so it is stored in the context ( #8544 )
2022-11-15 09:08:05 -05:00
Martin Angers
f3c7a37813
Support Windows and Ubuntu in osquery-perf ( #8616 )
2022-11-15 08:24:40 -05:00
Martin Angers
54bb5448a0
Fix missing valid properties in validation of FIM and YARA agent options ( #8707 )
2022-11-14 15:50:41 -05:00
Michal Nicpon
9ad1721efd
fix issue with duplicate vulns detected using nvd ( #8613 )
...
The OVAL analyzer falsely assumes that any vulnerabilities detected on a
host only come from OVAL. However, it is possible that NVD detects
vulnerabilities on these hosts even though it excludes software from
deb_packages and rpm_packages. For example, a python package twisted
v22.20 has a vulnerability CVE-2022-39348 detected by NVD. The OVAL
analyzer would delete this vulnerability, and it would be re-inserted by
the NVD scanner on the next run. This creates a loop.
The fix is to only delete vulnerabilities that are actually detected
using OVAL. We already store this in the source column in the
software_cve table.
2022-11-10 10:28:00 -07:00
Martin Angers
7fbe394b94
Ingest disk encryption flag for hosts, return in GET /hosts/{id} endpoint ( #8526 )
2022-11-02 15:44:02 -04:00
Martin Angers
8f21e026e3
Fix bug with fleetctl apply for teams, clear agent options only if key is present ( #8508 )
2022-11-01 15:22:45 -04:00
Roberto Dip
c51927e873
enhance support for orbit and fleet desktop in osquery-perf ( #8217 )
...
This improves osquery-perf with support for a more realistic orbit + fleet desktop simulation as described in #8212
This was based on the work done by @sharvilshah in his branch.
2022-10-28 14:27:21 -03:00
Juan Fernandez
53e112d264
Feature 7494: Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities ( #7889 )
...
Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities
2022-10-28 11:12:21 -04:00
Martin Angers
49e910270b
Add vulnerability scores to Jira/Zendesk tickets for premium users ( #8346 )
2022-10-26 10:42:09 -04:00
gillespi314
51e6369653
Fix password reset request expiration ( #8246 )
2022-10-25 09:46:41 -05:00
gillespi314
881194b3b4
Add orbit version and osquery version usage statistics ( #8229 )
2022-10-24 11:12:56 -05:00
Martin Angers
e19191161e
Validate team spec unknown keys ( #8265 )
2022-10-24 08:49:44 -04:00
Roberto Dip
d0cde1aaaa
Use the same HTTP server config as the production server in tests ( #8254 )
...
* Use the same HTTP server config as the production server in tests
This abstracts the default config we use to run the server into a
function so it can be used in tests to run an HTTP server using the same
configuration.
Additionally, this fixes a data race in tests, as an HTTP server
configuration can't be changed once you call `server.Start()`[1]
[1]:
https://cs.opensource.google/go/go/+/refs/tags/go1.19.2:src/net/http/httptest/server.go;l=40;drc=19309779ac5e2f5a2fd3cbb34421dafb2855ac21
2022-10-19 07:42:21 -03:00
Martin Angers
323620bf39
Deep-clone the appconfig when getting from cache ( #8194 )
2022-10-17 15:03:49 -04:00
Frank Sievertsen
a2c47cf4f4
add host_display_name to live query rows ( #8251 )
2022-10-17 15:52:25 +02:00
gillespi314
59876d37ea
Add usage statistics to measure policy violations ( #8199 )
2022-10-14 13:55:37 -05:00
Frank Sievertsen
e54f066266
Add display_name to more results ( #8204 )
...
* Make HostResponses with one dedicated function only
* more display_name for Hosts
2022-10-14 11:14:18 -03:00
Martin Angers
fae8e4ca2c
Translate the AppConfig and Team validation messages to be more user-friendly ( #8171 )
2022-10-12 17:10:50 -04:00
Juan Fernandez
91ea7bf244
Vulnerabilities not detected if NVD CVE feed is unavailable or rate limited ( #8191 )
...
If there is any problem when synching NVD source, proceed with vuln scan
2022-10-12 15:09:18 -04:00
Frank Sievertsen
23199c3d83
Add missing display_name to getHostEndpoint ( #8174 )
2022-10-11 17:00:32 -04:00
Roberto Dip
e630fabf89
token rotation for fleet desktop ( #7779 )
...
This implements what's described in detail here https://github.com/fleetdm/fleet/blob/main/proposals/fleet-desktop-token-rotation.md
2022-10-10 17:15:35 -03:00
