empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 17:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
ed4f6e4178
fleet/server/service
History
Lucas Manuel Rodriguez ed4f6e4178
Remove old mdm_command action (do we really need it?) (#11222) 
A question in form of PR:

Do we really need the following two entities in our
[policy.rego](https://github.com/fleetdm/fleet/blob/main/server/authz/policy.rego)
`1. (object=mdm_apple_command, action=read/write)` and `2. (object=host,
action=mdm_command)`? (Maybe mdm_command is a leftover action from the
PoC?)

Guess: `mdm_apple_command` (`fleet.MDMAppleCommandAuthz`) is what we
want: `action=write` means you can enqueue, `action=read` means you can
list commands and read their results.

PS: Found this while trying to add command execution permissions to the
new `GitOps` role.
2023-04-18 07:53:33 -03:00
..
async Ingest pending MDM hosts (#9065) 2022-12-26 15:32:39 -06:00
externalsvc allow to set up a DEP flow gated by Okta auth (#10338) 2023-03-13 10:33:32 -03:00
middleware remove feature flags to enable MDM (#10746) 2023-03-27 16:30:29 -03:00
mock update mockimpl version to allow concurrent mock calls (#9989) 2023-02-21 16:36:06 -03:00
osquery_utils More robust version handling for macOS software (#10703) 2023-04-06 08:10:06 -07:00
redis_policy_set Migrate team-related endpoints to new pattern (#3740) 2022-01-19 10:52:14 -05:00
schedule Run cleanup of cron_stats outside of the schedule package to prevent outages from breaking cron jobs (#10439) 2023-03-13 16:15:30 -03:00
testdata implement bootstrap packages during DEP enrollment (#11052) 2023-04-07 17:31:02 -03:00
activities_test.go New observer_plus role (#10675) 2023-04-05 15:23:49 -03:00
activities.go Allow setting user roles during JIT provisioning (#10193) 2023-03-01 20:18:40 -03:00
appconfig_test.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
appconfig.go Move Redis cluster docker yml to separate file (#11162) 2023-04-12 15:14:28 -04:00
apple_mdm_test.go Report empty command status as "Pending", fix test (#11220) 2023-04-17 13:37:52 -04:00
apple_mdm.go Remove old mdm_command action (do we really need it?) (#11222) 2023-04-18 07:53:33 -03:00
base_client_errors.go Finalize MDM commands part 2: implement fleetctl mdm run-command (#10866) 2023-04-03 14:25:49 -04:00
base_client_test.go enhance support for orbit and fleet desktop in osquery-perf (#8217) 2022-10-28 14:27:21 -03:00
base_client.go Finalize MDM commands part 2: implement fleetctl mdm run-command (#10866) 2023-04-03 14:25:49 -04:00
campaigns_test.go Make activities typed and auto-generate docs for each type (#9069) 2022-12-23 13:05:16 -03:00
campaigns.go Remove attach check on queries and return proper bad request error (#10427) 2023-03-13 11:42:26 -03:00
carves_test.go report errors that can occur during file carving (#8972) 2022-12-09 13:21:30 -03:00
carves.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
client_appconfig.go Add macos custom profiles support via fleetctl apply (#9824) 2023-02-15 13:01:44 -05:00
client_apple_mdm.go Add fleetctl get mdm-commands command and supporting API endpoint (#11163) 2023-04-17 11:45:16 -04:00
client_carves.go Introduce API version 2022-04, deprecate use of /global in paths (#4731) 2022-04-05 11:35:53 -04:00
client_debug.go don't clear errors automatically when reading them from Redis (#5623) 2022-05-10 11:44:43 -03:00
client_hosts.go Add display_name to more results (#8204) 2022-10-14 11:14:18 -03:00
client_labels.go Introduce API version 2022-04, deprecate use of /global in paths (#4731) 2022-04-05 11:35:53 -04:00
client_live_query_test.go Add display_name to more results (#8204) 2022-10-14 11:14:18 -03:00
client_live_query.go Send custom headers for live queries (#8991) 2022-12-12 07:56:35 -08:00
client_mdm.go fix link in error (#11068) 2023-04-07 20:30:57 -03:00
client_packs.go Introduce API version 2022-04, deprecate use of /global in paths (#4731) 2022-04-05 11:35:53 -04:00
client_policies.go Introduce API version 2022-04, deprecate use of /global in paths (#4731) 2022-04-05 11:35:53 -04:00
client_queries.go Introduce API version 2022-04, deprecate use of /global in paths (#4731) 2022-04-05 11:35:53 -04:00
client_sessions.go Introduce API version 2022-04, deprecate use of /global in paths (#4731) 2022-04-05 11:35:53 -04:00
client_setup.go fleetctl preview to use v1 setup path, to support previous versions of fleet (#5331) 2022-04-25 10:02:21 -03:00
client_software.go add upgrade tests (#6596) 2022-07-19 15:11:51 -06:00
client_targets.go Add display_name to more results (#8204) 2022-10-14 11:14:18 -03:00
client_teams.go Add macos custom profiles support via fleetctl apply (#9824) 2023-02-15 13:01:44 -05:00
client_test.go Add disk_encryption option to config and team YAML (#10185) 2023-02-28 15:34:46 -05:00
client_trigger.go Add fleetctl trigger command (#8877) 2022-12-06 09:56:54 -06:00
client_users.go Introduce API version 2022-04, deprecate use of /global in paths (#4731) 2022-04-05 11:35:53 -04:00
client.go implement bootstrap packages during DEP enrollment (#11052) 2023-04-07 17:31:02 -03:00
cron_schedules_test.go Add instanceID to schedule logging (#10413) 2023-03-13 15:37:03 -03:00
cron_schedules.go Implement schedule triggers (#8747) 2022-11-28 13:28:06 -06:00
debug_handler_test.go Add fleetctl debug migrations command to get missing migrations (#2967) 2021-11-22 14:06:12 -03:00
debug_handler.go Enable errcheck linter for golangci-lint (#8899) 2022-12-05 16:50:49 -06:00
device_client_test.go Fleet desktop should use lightweight endpoint for getting failing policies count (#8159) 2022-10-12 17:13:43 -03:00
device_client.go Fleet desktop should use lightweight endpoint for getting failing policies count (#8159) 2022-10-12 17:13:43 -03:00
devices.go Fix SMTP e-mail send when SMTP server has credentials (#10758) 2023-03-28 15:23:15 -03:00
endpoint_campaigns.go override the websocket upgrader checkorigin func to return true (#10841) 2023-03-30 08:09:47 -04:00
endpoint_middleware_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
endpoint_middleware.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
endpoint_setup.go Add read replica testing helpers and fix non-sso login bug (#4908) 2022-04-04 16:52:05 -07:00
endpoint_utils_test.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
endpoint_utils.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
frontend.go add browser-related security headers to HTML responses (#8180) 2022-10-12 10:19:21 -03:00
global_policies_test.go Make activities typed and auto-generate docs for each type (#9069) 2022-12-23 13:05:16 -03:00
global_policies.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
global_schedule_test.go Refactor license so it is stored in the context (#8544) 2022-11-15 09:08:05 -05:00
global_schedule.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
handler_test.go remove feature flags to enable MDM (#10746) 2023-03-27 16:30:29 -03:00
handler.go Add fleetctl get mdm-commands command and supporting API endpoint (#11163) 2023-04-17 11:45:16 -04:00
hosts_test.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
hosts.go Update host MDM profile status to pending in response to triggering events (#10443) 2023-03-27 14:43:01 -04:00
http_auth_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
http_auth.go Remove unused request-id in context (#3632) 2022-01-13 14:12:56 -08:00
http_publicip.go Log all successful logins as activity and all attempts with ip in stderr. (#9095) 2022-12-21 18:29:51 +01:00
installer_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
installer.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
integration_core_test.go Logout to return HTTP 401 if unauthorized (#11190) 2023-04-13 18:37:42 -03:00
integration_desktop_test.go Add readonly MDM.EnabledAndConfigured to app config and device responses (#9575) 2023-02-01 14:47:52 -03:00
integration_ds_only_test.go Support async saving of hosts' last seen time (#5640) 2022-05-10 11:29:17 -04:00
integration_enterprise_test.go Add MDM configuration permissions to GitOps (#11207) 2023-04-17 12:08:55 -03:00
integration_live_queries_test.go Remove attach check on queries and return proper bad request error (#10427) 2023-03-13 11:42:26 -03:00
integration_logger_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
integration_mdm_test.go Add fleetctl get mdm-commands command and supporting API endpoint (#11163) 2023-04-17 11:45:16 -04:00
integration_sandbox_test.go Bug 10767: Don't return 500s if enroll secret not found (#11121) 2023-04-13 16:16:40 -04:00
integration_sso_test.go Add enable_jit_role_sync config (#10478) 2023-03-14 17:17:08 -03:00
invites_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
invites.go Fix SMTP e-mail send when SMTP server has credentials (#10758) 2023-03-28 15:23:15 -03:00
jitter_test.go Migrate special-case endpoints to new pattern (#4511) 2022-03-08 11:27:38 -05:00
jitter.go Migrate special-case endpoints to new pattern (#4511) 2022-03-08 11:27:38 -05:00
labels_test.go Refactor license so it is stored in the context (#8544) 2022-11-15 09:08:05 -05:00
labels.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
live_queries.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
mail_test.go Fix SMTP e-mail send when SMTP server has credentials (#10758) 2023-03-28 15:23:15 -03:00
mdm_test.go New observer_plus role (#10675) 2023-04-05 15:23:49 -03:00
mdm.go remove feature flags to enable MDM (#10746) 2023-03-27 16:30:29 -03:00
mem_failing_policies_set_test.go Fix failing policy sets for redis cluster mode (#3725) 2022-01-17 15:16:54 -05:00
metrics_appconfig.go Fix SMTP e-mail send when SMTP server has credentials (#10758) 2023-03-28 15:23:15 -03:00
metrics_change_email.go Update go-kit to 0.4.0 (#1411) 2017-03-15 08:55:30 -07:00
metrics_invites.go Add v4 suffix in go.mod (#1224) 2021-06-25 21:46:51 -07:00
metrics_labels.go Add v4 suffix in go.mod (#1224) 2021-06-25 21:46:51 -07:00
metrics_sessions.go add back-end implementation for SSO JIT provisioning (#7182) 2022-08-15 14:42:33 -03:00
metrics_users.go Add v4 suffix in go.mod (#1224) 2021-06-25 21:46:51 -07:00
metrics.go Issue 1362 fleetctl user roles (#1397) 2021-07-16 15:28:13 -03:00
orbit_client.go Orbit to set --database_path when invoking osquery to retrieve system info (#10308) 2023-03-13 18:54:18 -03:00
orbit.go Bug 10767: Don't return 500s if enroll secret not found (#11121) 2023-04-13 16:16:40 -04:00
osquery_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
osquery.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
packs_test.go Make activities typed and auto-generate docs for each type (#9069) 2022-12-23 13:05:16 -03:00
packs.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
queries_test.go Remove attach check on queries and return proper bad request error (#10427) 2023-03-13 11:42:26 -03:00
queries.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
scheduled_queries_test.go Refactor license so it is stored in the context (#8544) 2022-11-15 09:08:05 -05:00
scheduled_queries.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
service_appconfig_test.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
service_appconfig.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
service_campaign_test.go add configuration to disable origin header check (#10779) 2023-03-28 01:23:29 -04:00
service_campaigns.go Enable errcheck linter for golangci-lint (#8899) 2022-12-05 16:50:49 -06:00
service_errors.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
service_users.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
service.go Finalize MDM commands part 3: add the fleetctl get mdm-command-results command (#10964) 2023-04-05 10:50:36 -04:00
sessions_test.go Add enable_jit_role_sync config (#10478) 2023-03-14 17:17:08 -03:00
sessions.go Logout to return HTTP 401 if unauthorized (#11190) 2023-04-13 18:37:42 -03:00
software_test.go Refactor license so it is stored in the context (#8544) 2022-11-15 09:08:05 -05:00
software.go Update aggregated_stats to support "no team" in addition to "all teams" (#10466) 2023-03-14 17:01:16 -04:00
status.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
targets_test.go Refactor license so it is stored in the context (#8544) 2022-11-15 09:08:05 -05:00
targets.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
team_policies_test.go Make activities typed and auto-generate docs for each type (#9069) 2022-12-23 13:05:16 -03:00
team_policies.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
team_schedule_test.go Refactor license so it is stored in the context (#8544) 2022-11-15 09:08:05 -05:00
team_schedule.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
teams_test.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
teams.go Add disk_encryption option to config and team YAML (#10185) 2023-02-28 15:34:46 -05:00
testing_client.go Add MDM configuration permissions to GitOps (#11207) 2023-04-17 12:08:55 -03:00
testing_utils.go implement bootstrap packages during DEP enrollment (#11052) 2023-04-07 17:31:02 -03:00
translator.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
transport_error_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
transport_error.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
transport_setup.go Update go-kit to 0.4.0 (#1411) 2017-03-15 08:55:30 -07:00
transport_test.go Add v4 suffix in go.mod (#1224) 2021-06-25 21:46:51 -07:00
transport.go Feat/api/implelment filter disk encryption (#10987) 2023-04-05 17:09:23 +01:00
trigger.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
user_roles.go Set interface for response types (#9121) 2022-12-27 11:26:59 -03:00
users_test.go Add UUID to Fleet errors and clean up error msgs (#10411) 2023-03-13 13:44:06 -03:00
users.go New gitops role (#10850) 2023-04-12 16:11:04 -03:00
validation_setup.go Use new error handling approach in other packages (#2954) 2021-11-22 09:13:26 -05:00