fleet/orbit/changes
Roberto Dip 35e06fa1ee
ensure file permissions of the nudge config file are consistent (#11374)
For #11218, In the initial implementation of the feature, we used to
launch Nudge as a root, so setting the permissions of the config file to
0600 was okay.

As part of the fix for #10044, we now launch Nudge as the current user
(which is also recommended in the Nudge wiki), but previous
installations of the beta version (probably only Fleeties using Dogfood)
still have the configuration file with restrictive permissions, so Nudge
wasn't able to read the config when launched as a user.

This is kind of hidden because `os.WriteFile` takes a permission
arugment, but it's only used if it's writing the file for the first
time.
2023-04-27 10:22:42 -03:00
..
.keep Add 'orbit/' from commit 'ab3047bb39f1e2be331d1ff18b4eb768619033c4' 2021-08-04 16:58:25 -03:00
6441-duplicated-fleet-desktop-bis Orbit: Handle SIGTERM on unix and kill pre-existing fleet-desktop processes at startup (#7966) 2022-09-27 11:57:56 -03:00
6581-remote-flags-management Orbit to support environments with revoked enroll secrets (#8056) 2022-10-03 17:28:19 -03:00
7517-token-rotation token rotation for fleet desktop (#7779) 2022-10-10 17:15:35 -03:00
7970-orbit-mtls-support Add mTLS support to fleetd (#11319) 2023-04-27 08:44:39 -03:00
8373-fix-desktop-free-spam fix issue in fleet desktop causing it to spam free installations (#8396) 2022-10-21 09:56:18 -07:00
8485-dump-pprof Dump pprof when orbit is given a SIGUSR1. Fixes #8456 (#8485) 2022-10-28 16:39:47 -04:00
8901-augeas-lenses Embed augeas lenses in orbit binary (#8901) 2022-12-02 10:19:54 -05:00
9132-orbit-enroll-set-osquery-db-to-retrieve-uuid Orbit to set --database_path when invoking osquery to retrieve system info (#10308) 2023-03-13 18:54:18 -03:00
9239-cis-2.3.2.2 Add table implementation to query SNTP servers (#9312) 2023-01-16 12:31:02 -03:00
9253-add-fleetd-table-pmset Add CIS checks for 2.9.X and add pmset table to fleetd (#9470) 2023-02-08 13:08:17 -03:00
9260-add-authdb-table Add CIS check for 5.7 (#9748) 2023-02-08 12:30:55 -03:00
9260-add-dscl-table-cis-5.6 Add check for CIS 5.6 (#9756) 2023-02-09 14:27:40 -03:00
9260-add-firmware_eficheck_integity_check-table Add check for CIS 5.6 (#9756) 2023-02-09 14:27:40 -03:00
9260-add-sudo_info-table-cis-5.X Add CIS checks for 5.4 and 5.5 (#9747) 2023-02-09 12:35:43 -03:00
9310-new-mdm-bridge-osquery-table Adding new Windows MDM table to interact with the Windows MDM stack (#9448) 2023-01-30 11:29:29 -03:00
9459-read-config Read enroll-secret and fleet-url from config profile on macOS (#10134) 2023-02-28 15:54:06 -03:00
9459-use-system-config explicitly enable orbit to read config from the system (#10980) 2023-04-05 15:02:18 -03:00
10044-orbit-hang launch Nudge using /usr/bin/open (#10051) 2023-02-23 14:48:40 -03:00
10300-symlink-not-present-quirk Issue 10300 self healing (#10335) 2023-03-08 14:49:03 -03:00
10520-mac-cis-1.1-fix-query CIS MAC 1.1 fix (#10619) 2023-03-29 09:24:33 -04:00
11218-nudge-config-permissinos ensure file permissions of the nudge config file are consistent (#11374) 2023-04-27 10:22:42 -03:00
add-retries-bootstrap-mdm-push Orbit: Add retries to launchctl bootstrap to fix issue with MDM push (#8187) 2022-10-12 15:59:01 -03:00
bug-3563-uninstall-does-not-remove-files Removing orbit files using MSI installer custom actions (#9362) 2023-01-26 15:14:31 -03:00
bug-6479-store-proxy-cert-at-secure-location Bug 6479: Storing proxy certificate in a secure location to avoid unexpected deletion. (#7811) 2022-09-19 09:42:53 -03:00
bug-6935-cannot-run-orbit-shell-on-windows Fixing osquery shell issue caused by osquery extension namedpipe name reuse (#9527) 2023-01-27 12:34:38 -03:00
bug-7874-call-scm-on-service-start Bug 7874: Adding SCM calls to register Orbit as a windows service (#7934) 2022-09-27 11:52:41 -03:00
bug-8009-fleet-desktop-duplicated-icon 8009 fleet desktop icon duplication (#8017) 2022-10-13 10:58:37 -03:00
bug-8974-smbios-uuid-value-retrieval Adding fallback mechanism to retrive UUID on Windows (#8993) 2022-12-13 18:04:49 -03:00
bug-9053-update-symlink-on-change orbit: Always update orbit symlink when changing channels (#9188) 2023-01-05 16:16:19 -05:00
bug-9157-secret-orbit-node-file-is-world-accessible Setting restricted ACL for windows secret-orbit-node-file (#9457) 2023-01-26 18:51:24 -03:00
bug-9576-orbit-fails-to-install-on-legacy-windows-servers Adding fix to not use COM installer object (#9661) 2023-04-06 17:26:33 -03:00
bug-orbit-restart-empty-flags Fix Orbit bug when setting empty command_line_flags in agent options (#8176) 2022-10-11 20:11:01 -03:00
icloud-private-relay Add icloud_private_relay table (#8655) 2022-11-21 10:56:15 -08:00
issue-9278-orbit-renew-enrollment-profile orbit: run the profiles command to renew the enrollment profile when signaled by fleet (#9409) 2023-01-24 09:23:58 -05:00
issue-9347-kickstart-softwareupdated Kickstart sofwareupdated periodically from fleetd/orbit to work around a macOS bug (#9465) 2023-01-24 10:14:17 -05:00
issue-9550-default-carver-block-size update file carver block size and various MySQL references (#9625) 2023-02-02 01:01:34 -05:00
orbit-extensions-autoupdate Orbit extensions autoupdate (#8906) 2022-12-21 01:00:55 +05:30
orbit-extensions-csrutil_info CIS 5.1.3+5.1.4 (#9642) 2023-02-07 13:26:05 -05:00
orbit-extensions-nvram-info CIS 5.1.3+5.1.4 (#9642) 2023-02-07 13:26:05 -05:00
orbit-extensions-pwd-policy Cis 5.2.x (#9489) 2023-01-25 15:53:24 -05:00
orbit-extensions-user-login-settings CIS 2.11.1 Add Table for 2.11.1 (Ensure Users' Accounts Do Not Have a Password Hint) (#9439) 2023-01-23 15:23:59 -05:00
remove-desktop-errors-tooltip Remove errors tooltips from Fleet Desktop menu (#7678) 2022-09-12 08:35:26 -07:00
retry-enroll-on-unauth-error Orbit enroll retry on unauth (#7928) 2022-09-24 03:16:33 +05:30
windows-theme-detection Windows desktop theme detection (#7363) 2022-09-23 10:07:38 -07:00