google/santa issues and pull requests

#1233 - Entitlements logging config options

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: logging, santad, configurator

#1232 - Switch to evaluating the live `SecCodeRef` when authorizing new execs

Issue - State: open - Opened by mlw over 1 year ago - 1 comment
Labels: enhancement

#1231 - Fix internal build issues, minor cleanup.

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: cleanup, build

#1230 - Explicitly cast strings to std::string_view

Pull Request - State: closed - Opened by Coderlane over 1 year ago
Labels: testing, build

#1229 - Parquet output

Issue - State: open - Opened by the80srobot over 1 year ago - 9 comments
Labels: enhancement

#1228 - [wip] Build and Test

Pull Request - State: closed - Opened by kyoshisuki over 1 year ago - 1 comment

#1227 - Add Bundle Scanning with EnableSilentMode

Pull Request - State: closed - Opened by eopeter over 1 year ago - 9 comments
Labels: enhancement

#1226 - Dismiss santa popup after integration tests

Pull Request - State: closed - Opened by kallsyms over 1 year ago

#1225 - Add support for logging entitlements in EXEC events

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad

#1224 - Instruction to Remove Adhoc Build

Pull Request - State: closed - Opened by eopeter over 1 year ago - 1 comment
Labels: cla: yes

#1223 - Add name for white space check

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: testing

#1222 - Only remount on startup if remount args are set

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad

#1221 - Update to the latest hedron_compile_commands

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: build

#1220 - Fix remount issue for APFS formatted drives

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: bug, santad

#1219 - Add OnStartUSBOptions to santactl status

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santactl

#1218 - Record metrics for device manager startup operations

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: metrics, santad

#1217 - santactl status discrepancy when running as root/non-root

Issue - State: closed - Opened by kallsyms over 1 year ago - 1 comment
Labels: bug, configurator

#1216 - Support remounting devices at startup with correct flags

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad

#1215 - Additional build deps

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: build

#1214 - Add E2E testing for usb

Pull Request - State: closed - Opened by kallsyms over 1 year ago
Labels: testing

#1213 - Support printing bundle info via santactl fileinfo command

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santactl

#1212 - Bundle Scanning Does Not Start When EnableSilentMode = YES

Issue - State: closed - Opened by eopeter over 1 year ago - 5 comments
Labels: enhancement

#1211 - Unmount USB on start

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad, configurator

#1210 - Add Support for CS_INVALIDATED Events

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: logging, santad

#1209 - Enable e2e testing on macOS 14

Pull Request - State: closed - Opened by kallsyms over 1 year ago
Labels: testing

#1208 - Docs: Remove Adhoc Build Instruction

Pull Request - State: closed - Opened by eopeter over 1 year ago - 1 comment

#1207 - Binary Blocked But FileInfo Says Allowed

Issue - State: closed - Opened by eopeter over 1 year ago - 8 comments

#1206 - Santa is Blocking SantaCtl

Issue - State: closed - Opened by eopeter over 1 year ago - 7 comments
Labels: santactl

#1205 - Update syncing-overview.md with note on push notifications

Pull Request - State: closed - Opened by p-harrison over 1 year ago
Labels: docs

#1204 - Update configuration.md that push notifications not widely available

Pull Request - State: closed - Opened by p-harrison over 1 year ago
Labels: docs

#1203 - Update configuration.md to explain EnableDebugLogging

Pull Request - State: closed - Opened by p-harrison over 1 year ago

#1202 - Remove mention of KEXT from README.md

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: docs

#1201 - System Extension or Kernel?

Issue - State: closed - Opened by macnotes over 1 year ago - 1 comment
Labels: question, docs

#1200 - Support for advanced rulesets, including evaluation of flags, via Common Expression Language

Issue - State: open - Opened by keeleysam over 1 year ago - 1 comment
Labels: enhancement, rules

#1199 - Fix issue preventing rule import / export from working

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: santactl

#1198 - Upon install app fails to pick up config from MDM

Issue - State: open - Opened by chrisathook over 1 year ago - 3 comments

#1197 - Minor doc updates. Add missing FAA config options.

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: docs

#1196 - santactl/sync: Drop root requirement

Pull Request - State: closed - Opened by russellhancox over 1 year ago
Labels: sync service

#1195 - Options for speeding up the sync of new rules

Issue - State: closed - Opened by p-harrison over 1 year ago - 3 comments

#1194 - Transitive Rules for Bazel Build Agent

Issue - State: closed - Opened by eopeter over 1 year ago - 1 comment
Labels: question

#1193 - Fix missing Santa block gif

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: docs

#1192 - Remove defunct reference to a screenshot/video in the README.md

Pull Request - State: closed - Opened by u269c over 1 year ago - 1 comment

#1191 - Only eval TID and SID rules when the binary signature is valid

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: bug, santad, testing

#1190 - Feature Request: System Notifications in Monitor Mode

Issue - State: closed - Opened by jamiestrachan-shopify over 1 year ago - 4 comments

#1188 - Remove superfluous import

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: build

#1187 - Update sync-protocol.md

Pull Request - State: closed - Opened by p-harrison over 1 year ago
Labels: docs, sync service

#1186 - Add ability to specify custom event URLs and button text for FAA dialog

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: gui, file access authorization

#1185 - Use 'set -xo pipefail' instead for lint.sh

Pull Request - State: closed - Opened by tnek over 1 year ago
Labels: build

#1184 - Pin GitHub Actions to Specific Versions

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: build

#1183 - Internal build fixes

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: build

#1182 - Flatten deps to satisfy internal checkers

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: build

#1181 - Intellij IDE Debugging Blocked in Lockdown Mode

Issue - State: open - Opened by eopeter over 1 year ago - 6 comments
Labels: question, transitive allowlisting

#1180 - Unable to get transitive rules working with XCode

Issue - State: open - Opened by p-harrison over 1 year ago - 13 comments
Labels: question, rules, transitive allowlisting

#1179 - Update Protobuf and Abseil versions

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: build

#1178 - Bump bazel and build_bazel_rules_apple versions

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: build

#1177 - Make Transitive Allowlisting Work with Signing ID rules

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: santad, rules

#1176 - Make Signing ID Rules Work With Transitive Allowlisting

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: santad, rules

#1175 - Add ability to override File Access actions via config and sync settings

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: sync service, santad, configurator

#1174 - UI For Blocked File Access

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad, gui, file access authorization

#1173 - Add Tests for #1165 Behavior.

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: santad, testing

#1172 - Update rules.md with more detail on Transitive/Compiler rules

Pull Request - State: closed - Opened by p-harrison over 1 year ago - 1 comment
Labels: docs

#1171 - Compiler rules not allowing specified compiler binary to run?

Issue - State: closed - Opened by p-harrison over 1 year ago - 7 comments
Labels: question

#1170 - Add basic support for importing and exporting rules to/from JSON

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago
Labels: rules, santactl

#1169 - Fix typo in troubleshooting.md

Pull Request - State: closed - Opened by kyoshisuki over 1 year ago - 1 comment
Labels: docs

#1168 - Remove logupload stage from syncing-overview.md

Pull Request - State: closed - Opened by p-harrison over 1 year ago - 1 comment
Labels: docs

#1166 - Document SyncExtraHeaders in configuration.md

Pull Request - State: closed - Opened by p-harrison over 1 year ago - 1 comment
Labels: docs

#1165 - Fix issue where client mode was almost always logged as "Unknown"

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: bug, logging, santad

#1164 - Restore file_bundle_hash & file_bundle_binary_count to Sync Protocol Docs

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago - 2 comments
Labels: docs, sync service

#1163 - Enhancement idea: Wildcards in SigningID rules

Issue - State: open - Opened by p-harrison over 1 year ago - 7 comments
Labels: enhancement

#1162 - Fix new buildifier issues

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: cleanup, build

#1161 - Use default event detail button text when a custom URL is set

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: gui

#1160 - Additional metrics for File Access Authorizer client

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: metrics, santad

#1159 - Correction to sync-protocol.md

Pull Request - State: closed - Opened by p-harrison over 1 year ago
Labels: docs

#1158 - Add SigningID/TeamID to Event definition in sync-protocol.md

Pull Request - State: closed - Opened by p-harrison over 1 year ago
Labels: docs

#1157 - Unable to enable lockdown mode

Issue - State: closed - Opened by ihateprogramming88 over 1 year ago - 5 comments
Labels: question

#1156 - sync: Send `rules_received` and `rules_processed` fields in postflight request

Pull Request - State: closed - Opened by russellhancox over 1 year ago
Labels: sync service

#1155 - Remove references to old EnableSystemExtension config key

Pull Request - State: closed - Opened by mlw over 1 year ago

#1154 - How to build santa universal binary

Issue - State: closed - Opened by izzh over 1 year ago - 8 comments
Labels: question, docs

#1153 - Add mount from name information to disk appear events

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad

#1152 - v2023.6 Does not Apply Path Scope Rules

Issue - State: closed - Opened by eopeter over 1 year ago - 1 comment

#1151 - Fix issue where re config types couldn't be overridden

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad, testing

#1150 - Added TransitiveWhitelisting explanation to rules.md

Pull Request - State: closed - Opened by p-harrison over 1 year ago

#1149 - Simple developer bootstrap - still possible?

Issue - State: closed - Opened by HowlingEverett over 1 year ago - 2 comments

#1148 - Add support for was_mmaped_writeable to file write monitoring when using macOS 13+

Pull Request - State: closed - Opened by pmarkowsky over 1 year ago - 1 comment
Labels: santad, transitive allowlisting

#1147 - Project: Split integration VM license into its own LICENSE file

Pull Request - State: closed - Opened by russellhancox over 1 year ago

#1146 - Cast enum to int

Pull Request - State: closed - Opened by itf over 1 year ago

#1145 - Add hot cache for targets of read only policies

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad, file access authorization

#1144 - sync: Add SyncExtraHeaders config option.

Pull Request - State: closed - Opened by russellhancox over 1 year ago
Labels: enhancement, sync service

#1143 - Config: Add ability to include custom headers in sync requests

Issue - State: closed - Opened by russellhancox over 1 year ago
Labels: enhancement, sync service, configurator

#1142 - Only update daemon settings when sync settings explicitly set

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: sync service, santad

#1141 - Have distributed notifications delivered immediately

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: gui

#1140 - sync/UI: Add ability to send custom URLs for blocking rules.

Pull Request - State: closed - Opened by russellhancox over 1 year ago - 1 comment
Labels: enhancement, sync service, rules, gui

#1139 - Blocked Execution system notification is not processed unless receiver is focussed

Issue - State: closed - Opened by jamiestrachan-shopify over 1 year ago - 5 comments

#1138 - Check if spool dir has changed before estimating size

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: logging, santad

#1137 - Allow events not being sent to sync server in Lockdown mode

Issue - State: closed - Opened by p-harrison over 1 year ago - 5 comments

#1136 - Incorrect event decision code being synced to server (ALLOW_UNKNOWN instead of ALLOW_TEAMID)

Issue - State: closed - Opened by p-harrison over 1 year ago - 5 comments
Labels: bug

#1135 - Change "exponential" backoff in SNTSyncStage.m to be exponential

Pull Request - State: closed - Opened by alexgraehl over 1 year ago - 2 comments

#1134 - Add additional dep to satisfy import issue

Pull Request - State: closed - Opened by mlw over 1 year ago

#1133 - Present information in the Santa blocked pop-up so it is more readily copy/pasted to a new rule

Issue - State: open - Opened by p-harrison over 1 year ago - 2 comments
Labels: enhancement, gui

#1132 - Enforce expected case for various rule type identifiers

Pull Request - State: closed - Opened by mlw over 1 year ago
Labels: santad, testing

GitHub / google/santa issues and pull requests