Lucas Manuel Rodriguez
c4733a4792
Fix race on TestTriggerMultipleInstances ( #9122 )
2022-12-26 12:32:37 -03:00
Lucas Manuel Rodriguez
e1bbcfcfda
Generate audit logs for activities ( #9001 )
...
* Generate audit logs for activities
* Fix config tests
* Fix TestGetConfig/IncludeServerConfig
* Fix use of AddAttributes in results only
* Stream activities asynchronously
* Fix index and add logging
* Revert change
* Documentation fixes
2022-12-23 19:04:13 -03:00
Roberto Dip
e191f47aed
fix failed enrollments due to duplicate slashes on paths ( #9089 )
...
This ensures URLs in enrollment profiles are properly formatted,
preventing errors as described in #9088 .
2022-12-23 14:55:17 -03:00
Lucas Manuel Rodriguez
0e500c8649
Orbit: log response body to ease troubleshooting ( #9096 )
2022-12-23 13:21:49 -03:00
Lucas Manuel Rodriguez
39f1029390
Make activities typed and auto-generate docs for each type ( #9069 )
...
* Make activities type and auto-generate docs for each type
* Add pageOrderInSection to not break site
* Add do not edit note to generated file
* Add make generate-doc step
* Fix main merge
2022-12-23 13:05:16 -03:00
Roberto Dip
80dc7e7338
add an activity for SSO login ( #9110 )
2022-12-22 20:06:33 -03:00
Tomas Touceda
af0842804d
Improve how we are logging failed queries and windows detail queries ( #9059 )
...
* Improve how we are logging failed queries and windows detail queries
* Update failing tests
* Remove unneeded table in this particular select
* Update tests now that we dont rely on release_id
* Update ingestion since we want to ingest failures for policies and live queries
* We also want labels with failures
* Fix test since we are logging errors slightly differently
* Improve logging and error handling
* Revert back test change
* Actually, we need to OR the booleans to maintain logic
2022-12-21 17:37:40 -03:00
Frank Sievertsen
8e65ec67b5
Add new activity that records create/edit/delete user roles ( #9086 )
2022-12-21 18:30:19 +01:00
Frank Sievertsen
e7d6ed0f3f
Log all successful logins as activity and all attempts with ip in stderr. ( #9095 )
2022-12-21 18:29:51 +01:00
Sharvil Shah
f1577de0ac
Orbit extensions autoupdate ( #8906 )
2022-12-21 01:00:55 +05:30
Lucas Manuel Rodriguez
e3a626a00d
Fix authorization check test ( #9058 )
2022-12-19 10:37:08 -03:00
Tomas Touceda
68bd8661e9
Simplify disk encryption query in linux and filter at ingestion ( #9037 )
...
* Simplify disk encryption query in linux and filter at ingestion
* Join with mounts to detect whatever is encrypting /
2022-12-19 10:01:59 -03:00
Gabriel Hernandez
3c136e3f47
Add MDM Card to Windows and All Dashboards and change mdm data source on host details page ( #8960 )
2022-12-16 15:12:11 -06:00
Frank Sievertsen
7ebb97cd70
Fire automations for hosts that failed before automation enabled ( #9028 )
2022-12-16 22:00:54 +01:00
Michal Nicpon
37f454c0be
Add dep key pair endpoint ( #9007 )
2022-12-16 19:39:36 +01:00
gillespi314
836553ba60
Fix cron trigger bug ( #8950 )
2022-12-16 12:00:42 -06:00
Martin Angers
f18a320bd5
Add command get mdm-apple-bm to fleetctl ( #8949 )
2022-12-12 15:45:53 -05:00
Zach Wasserman
083b781c2c
Send custom headers for live queries ( #8991 )
...
This needed to be set specifically for the live query websocket dialer,
since that doesn't use the HTTP client that the rest of the API client
methods use.
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-12-12 07:56:35 -08:00
Frank Sievertsen
a228dcb170
Add critical policies as a premium feature ( #8959 )
...
* add premium feature critical policies
* update documentation
* add test for premium-only field
* update old change-file
* test policies more comprehensively
* also test team policies
* PATCH returns wrong timestamp, updating test
2022-12-09 19:23:08 +01:00
Roberto Dip
e68535d468
report errors that can occur during file carving ( #8972 )
...
related to https://github.com/fleetdm/fleet/issues/8117
2022-12-09 13:21:30 -03:00
gillespi314
43b1241a0c
Add fleetctl trigger command ( #8877 )
2022-12-06 09:56:54 -06:00
Frank Sievertsen
e0766d21a3
Add ability to mark policy as critical. ( #8896 )
2022-12-06 15:59:20 +01:00
gillespi314
6fb3a87ae9
Enable errcheck linter for golangci-lint ( #8899 )
2022-12-05 16:50:49 -06:00
Martin Angers
866829dbfa
Implement fleetctl get mdm-apple ( #8786 )
2022-12-05 11:35:45 -05:00
gillespi314
49f7180a14
Use POST instead of GET for trigger endpoint ( #8888 )
2022-11-30 11:57:42 -06:00
Artemis Tosini
486590186a
orbit: Correctly handle errors in authenticatedRequest. Fixes #8472 ( #8860 )
2022-11-29 11:54:36 -05:00
gillespi314
d5c096fa02
Implement schedule triggers ( #8747 )
2022-11-28 13:28:06 -06:00
Frank Sievertsen
8fc32acf00
Store details (query_name and query_sql) about live query in activity feed ( #8842 )
2022-11-28 16:42:32 +01:00
gillespi314
4a73d4a887
Adjust flaky tests ( #8811 )
2022-11-25 12:09:55 -06:00
Tomas Touceda
fe1fa4d78c
Clone AppConfig and ScheduledQuery list by hand to improve CPU usage ( #8794 )
...
* Close AppConfig and ScheduledQuery list by hand to improve CPU usage
* Address review comments
* Update remaining mocks
2022-11-23 12:04:06 -03:00
Roberto Dip
d9bf269c60
add dev flag to aid UI development ( #8789 )
2022-11-22 14:26:36 -03:00
gillespi314
b99ce3865b
Adjust cron schedule tests ( #8754 )
2022-11-18 11:26:51 -06:00
Roberto Dip
b6f7efe164
add <PayloadOrganization> to MDM enrollment payload ( #8752 )
...
The value of this attribute is used by macOS in "System Preferences >
Profiles" to display a note saying "This Mac is supervised and managed
by <xyz>".
When <PayloadOrganization> is not set, it uses the URL of the MDM server
for the message, which looks unpolished.
2022-11-18 11:25:44 -03:00
gillespi314
267aaf0dbe
Add holdLock and releaseLock methods to schedule package ( #8464 )
2022-11-16 15:14:38 -06:00
Jan Christian Grünhage
8fee954dba
fix: check device mounted at filesystem root for encryption ( #8719 )
2022-11-15 10:50:58 -05:00
Martin Angers
472c8bafb3
Refactor license so it is stored in the context ( #8544 )
2022-11-15 09:08:05 -05:00
Frank Sievertsen
0dbbad8e10
Exclude windows servers from mdm aggregation and lists ( #8585 )
2022-11-08 10:29:40 +01:00
Martin Angers
7fbe394b94
Ingest disk encryption flag for hosts, return in GET /hosts/{id} endpoint ( #8526 )
2022-11-02 15:44:02 -04:00
Martin Angers
8f21e026e3
Fix bug with fleetctl apply for teams, clear agent options only if key is present ( #8508 )
2022-11-01 15:22:45 -04:00
Frank Sievertsen
baa1ddc0f2
Add MDM detection for windows and mdm endpoints ( #8479 )
2022-11-01 18:22:07 +01:00
Roberto Dip
c51927e873
enhance support for orbit and fleet desktop in osquery-perf ( #8217 )
...
This improves osquery-perf with support for a more realistic orbit + fleet desktop simulation as described in #8212
This was based on the work done by @sharvilshah in his branch.
2022-10-28 14:27:21 -03:00
Juan Fernandez
53e112d264
Feature 7494: Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities ( #7889 )
...
Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities
2022-10-28 11:12:21 -04:00
Michal Nicpon
3801f1c6d1
improve primary ip host detail query ( #8407 )
...
Previously, the primary ip was determined using the interface with the most traffic. This had a few issues and required explicitly filtering out certain interfaces that we don't want eg loopback, docker.
Instead, use the default route to determine the primary (private) ip. If there are multiple, use the one with the lowest metric and prefer ipv4 addresses.
2022-10-27 16:34:49 -06:00
Lucas Manuel Rodriguez
1fa5475e6e
Log denylisted queries as errors ( #8294 )
2022-10-27 11:17:14 -05:00
Roberto Dip
fdcbbaac7e
Add method to fleetDesktopResponse to satisfy the errorer interface ( #8457 )
2022-10-26 16:17:11 -03:00
gillespi314
51e6369653
Fix password reset request expiration ( #8246 )
2022-10-25 09:46:41 -05:00
Michal Nicpon
d11db25ba9
add subject to scep payload ( #8267 )
2022-10-24 14:01:20 -06:00
gillespi314
881194b3b4
Add orbit version and osquery version usage statistics ( #8229 )
2022-10-24 11:12:56 -05:00
Martin Angers
e19191161e
Validate team spec unknown keys ( #8265 )
2022-10-24 08:49:44 -04:00
Martin Angers
a63c3ac475
Fix error returned when ordering by display_name ( #8350 )
2022-10-19 17:05:10 -04:00
