empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-07 01:15:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,189 Commits 3 Branches 0 Tags 561 MiB
ea2390614a
Commit Graph

1189 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
William Theaker
ea2390614a
Update Firehose logging docs (#2230) 
Fixes a couple of inconsistencies and clarifies configuration.
 2020-05-12 13:30:14 -07:00
Charlie Gildawie
df93abd722
Reduce verbosity of default logging (#2225) 
* Moves much logging from the info level to the debug level
* Tries to retain security/auditing relevant logs at info level
 2020-04-22 14:01:34 -07:00
Zachary Wasserman
be8dbb426e
Sanitize column names for order key in MySQL (#2224) 
This adds a SQL injection prevention for a case in which we cannot use
parameters in the query.

It is not clear that this was possible to exploit. If it was possible,
it would have required a valid login to the Fleet server.
 2020-04-22 13:59:40 -07:00
Zachary Wasserman
ed79c00341
Explicitly disable CGO in build (#2229) 
Fleet does not use CGO. In some build situations, not explicitly
disabling CGO results in binaries that have linking errors when running
on an Alpine Docker container. This change should fix the build for
those containers.
 2020-04-17 16:02:05 -07:00
Lars Lehtonen
04c9acce96
server/service: Fix appConfigResponse.OrgInfo json tag (#2212) 
Fixes a typo in the JSON tag.
 2020-04-17 09:35:15 -07:00
Zachary Wasserman
08225f9c34
Update client auth docs (#2219) 
Suggest that users front Fleet with a proxy to do TLS client auth.
 2020-04-13 13:49:09 -07:00
Zachary Wasserman
bf232e8b68
Make HostResponse an exported type (#2215) 
This commit makes it easier to use the client package from outside of
Fleet by exporting the HostResponse type.
 2020-03-31 16:14:26 -07:00
Zachary Wasserman
45f6a74740
Allow import of github.com/kolide/fleet (#2213) 
Previously a Go package attempting to import Fleet packages would run
into an error like "server/kolide/emails.go:93:23: undefined: Asset".

This commit refactors bindata asset handling to allow importing Fleet as
a library without changing the typical developer experience.
 2020-03-29 19:22:04 -07:00
Zachary Wasserman
d3849d8fe1
Update CHANGELOG for 2.6.0 release (#2210) 2020-03-24 10:26:05 -07:00
billcobbler
44c40e4255
Retry sqlx transactions (#2203) 
- Add exponential backoff method to MySQL datastore
- Refactor queries using transaction to use backup.

Fixes #845
 2020-03-10 18:14:02 -07:00
Zachary Wasserman
53256917a3
Add fleetctl convert to fleetctl file format docs (#2201) 2020-03-02 17:05:01 -08:00
Zachary Wasserman
f6223ca0e4
Add ability to modify host detail update interval (#2200) 
This may be desirable for some deployments to reduce server load.
 2020-03-02 11:08:08 -08:00
Lars Lehtonen
96cbd10651
server/service: Fix Missing Test Errors (#2196) 
This fixes 9 places in the `server/service` tests where err variables were being dropped. No new test failures identified.
 2020-02-18 18:11:16 -08:00
Jean M
877cd7e39a
Added support to logging X-Forward-For header (#2133) (#2193) 
Allows Fleet to log the actual client address and not just the proxy address when communicating with the osquery endpoints.
 2020-02-11 09:16:12 -08:00
Lars Lehtonen
bc7c5704d4
server/datastore: fix missing error checks (#2194) 
Fixing these missing checks did not identify any broken tests or code.
 2020-02-10 17:32:29 -08:00
Zachary Wasserman
c19c984525
Update README with screenshots of Fleet (#2190) 2020-02-03 11:39:30 -05:00
Zachary Wasserman
8e77f4369a
Update changelog for 2.5.0 release. (#2189) 2020-01-26 13:54:18 -08:00
Zachary Wasserman
6dbc3bc77a
Implement fleetctl goquery (#2186) 
- Update fleet APIs to support necessary operations in goquery
- Implement support for goquery in fleetctl
 2020-01-23 21:27:20 -08:00
Zachary Wasserman
1c2a0b8f21
Allow CREATE in queries from web UI (#2182) 
Fixes #2168
 2020-01-23 08:12:00 -08:00
Christian Barcenas
dd6a55d527 Fix description for "Fleet App URL" config option (#2188) 
Remove a misleading warning. This configuration parameter is only used by
Fleet-internal (i.e. non-osqueryd) endpoints.
 2020-01-23 08:10:25 -08:00
Serrvosky
19896d25f7 Adding query-name flag to fleetctl query (#2185) 
Added a feature to select queries by name. If --query-name flag is defined, fleetctl makes a call to get the query already saved in Fleet, and then, if it exists, fill flQuery variable with the selected query statement.

Closes #2175
 2020-01-20 22:16:11 -08:00
Zachary Wasserman
71eef8a315
Require non-nil status for exit of fleetctl query (#2184) 
Fixes an issue some users encountered in which the query would exit
before any results were returned (when latency to the Fleet server was
high).
 2020-01-16 17:45:26 -08:00
Zachary Wasserman
ee0a6e9064
Add deprecation warning for "old" TLS compatibility (#2183) 
Warn users in advance of removing this in #2142.
 2020-01-14 09:36:07 -08:00
Zachary Wasserman
ef1d69c371
Fix bugs in error handling for creation of live queries (#2181) 
- Return the correct result type in error cases
- Handle nil values for campaign when logging
 2020-01-13 17:35:42 -08:00
billcobbler
a83a26b279 Add ability to disable live queries (#2167) 
- Add toggle to disable live queries in advanced settings
- Add new live query status endpoint (checks for disabled via config and Redis health)
- Update QueryPage UI to use new live query status endpoint

Implements #2140
 2020-01-13 16:53:04 -08:00
Zachary Wasserman
3b02640334
Update goxmldsig dependency (#2177) 
Update the github.com/russellhaering/goxmldsig dependency and apply
the appropriate fixes for the API changes.

This is a preparation for integration with
github.com/AbGuthrie/goquery, which uses a newer version of the
dependency.
 2020-01-13 16:15:14 -08:00
Zachary Wasserman
f1b8dbaf86
Fix error initializing Fleet when MySQL EVENT permissions missing (#2176) 
Fixes #2174
 2020-01-13 16:14:44 -08:00
Christian Barcenas
b3a7fc83e1 Use canonical import path for gopkg.in/guregu/null (#2171) 
The `gopkg.in` import path is used in the package's documentation, and
by downstream Linux distro maintainers (e.g. Debian Go Packaging Team).
 2020-01-13 09:11:31 -08:00
Max Bigras
b524d813ca Add MysqlConfig protocol option (#2161) 
Enables configuring MySQL to run with unix domain sockets.
Closes #2160
 2019-12-04 09:48:24 -08:00
thehellajeff
6580fe1c5a Improvements to server logging (#2155) 
- Add logging for new campaigns
- Add logging for new query creations/modification/deletion
- Add usernames for logs found in labels, options, packs, osquery options, queries and scheduled queries where something is created, modified or deleted
 2019-12-04 09:42:10 -08:00
billcobbler
a856fd5c0b Add fleetctl get/apply config (#2143) 
Implements #1953
 2019-11-19 21:13:15 -08:00
Zachary Wasserman
863ae14ab8
Default osquery container version to latest in test docker-compose (#2152) 
Now only the enroll secret needs to be configured when running osquery
containers for testing.
 2019-11-17 14:10:11 -08:00
Zachary Wasserman
b02a42dc3b
Document release process (#2151) 
Closes #2056
 2019-11-17 14:09:48 -08:00
Zachary Wasserman
5124932dc4
Update Makefile to tag and push version to Docker (#2150) 
Previously only the Git SHA and `latest` were pushed by default and
the version had to be tagged and pushed manually.
 2019-11-17 14:09:29 -08:00
Zachary Wasserman
70c6f5bd7d
Update changelog for 2.4.0 release (#2149) 2019-11-12 15:05:11 -08:00
Austin Burnett
57f65e70b8 Allow host expiry window to be altered (#2121) 
Fixes a bug in which the event expiry window would not be properly updated.

Fixes #2122
 2019-11-12 14:41:16 -08:00
Zachary Wasserman
9782ffaf60
Upgrade lodash to 4.17.15 for security vulnerability (#2148) 
There was a prototype pollution vulnerability in 4.17.11 that is
unlikely to have high impact on Fleet due to all JS executing on the
client side. Upgrading lodash to satisfy security warnings from
Github.
 2019-11-12 14:39:38 -08:00
Zachary Wasserman
7cb45305b2
Update query scheduling FAQ (#2144) 2019-11-12 08:55:46 -08:00
Lars Lehtonen
0a87bbf496 Fix dropped errors in SSO tests (#2141) 2019-11-11 09:42:31 -08:00
Lars Lehtonen
ed9f890ba0 server/mail: Handle error when write fails (#2132) 2019-11-07 08:34:50 -08:00
Brendan Shaklovitz
b92c0d3dd6 Update JS deps for node-sass fix (#2126) 
Node-sass was broken due to a newer version of NodeJS.
 2019-11-07 08:33:04 -08:00
Zachary Wasserman
d453ca3f8f
Enable eslint file resolution linting (#2119) 
Previously this was disabled (perhaps unintentionally due to the
duplicate settings in the .eslintrc.js). Enable the lint rule and fix
the violations.

May fix JS build issues on case-sensitive filesystems.
 2019-10-22 13:00:31 -07:00
Zachary Wasserman
75c79efd3b
Yarn run commands in local JS environment (#2118) 
Ensures that the JS environment specified in the repo is used when running the tools.
 2019-10-19 13:49:48 -07:00
Zachary Wasserman
adf87140a7
Add ability to prefix Fleet URLs (#2112) 
- Add the server_url_prefix flag for configuring this functionality
- Add prefix handling to the server routes
- Refactor JS to use appropriate paths from modules
- Use JS template to get URL prefix into JS environment
- Update webpack config to support prefixing

Thanks to securityonion.net for sponsoring the development of this feature.

Closes #1661
 2019-10-16 16:40:45 -07:00
Austin Burnett
59efb495ca Add automatic host expiration capability (#2117) 
When configured, this feature will delete hosts that have not checked in after the specified number of days.

Closes #1860.
 2019-10-16 16:35:17 -07:00
Matteo Piano
6439828272 Allow host search by UUID (#2116) 
- Update MySQL schema to add fulltext index on UUID
- Support UUID in host search query
 2019-10-16 10:12:35 -07:00
seph
e4cc29a269 Rename remaining file in Admin to admin (#2108) 
Improves consistency in directory naming.
 2019-10-14 16:39:06 -07:00
William Theaker
12f288730f Update SAML documentation (#2113) 
Provide details for Okta and split out Salesforce example.
 2019-10-11 15:14:56 -07:00
William Theaker
a688b5cf5b Allow idp_name to be 4 characters (#2106) 2019-09-25 10:18:30 -07:00
Zachary Wasserman
bf9ae6ec0e
Update osquery-go dependency to fix thrift module download problem. (#2105) 
Fixes #2102
 2019-09-12 17:35:10 -07:00