Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 22 Packages Projects Releases Wiki Activity

Re-add Zoom patch policies (#43175)

Browse Source
This commit is contained in:
Allen Houchins
2026-04-07 15:22:54 -05:00
committed by GitHub
parent a62f318d2e
commit 82b6614b2b
4 changed files with 26 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml
+5 -6
View File
@@ -33,12 +33,11 @@
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.tinyspeck.slackmacgap';
label_membership_type: dynamic
platform: darwin
# Used by macOS Zoom patch policy when enabled (see patch-fleet-maintained-apps.yml).
# - name: Macs with Zoom installed
# description: macOS hosts with Zoom installed
# query: SELECT 1 FROM apps WHERE bundle_identifier = 'us.zoom.xos';
# label_membership_type: dynamic
# platform: darwin
- name: Macs with Zoom installed
description: macOS hosts with Zoom installed
query: SELECT 1 FROM apps WHERE bundle_identifier = 'us.zoom.xos';
label_membership_type: dynamic
platform: darwin
- name: Macs with Okta Verify installed
description: macOS hosts with Okta Verify installed
query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.okta.mobile';
it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml
+5 -6
View File
@@ -18,12 +18,11 @@
query: SELECT 1 FROM programs WHERE name = 'Google Chrome' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
label_membership_type: dynamic
platform: windows
# Used by Windows Zoom patch policy when enabled (see patch-fleet-maintained-apps.yml).
# - name: x86 Windows hosts with Zoom installed
# description: x86 Windows hosts with Zoom installed
# query: SELECT 1 FROM programs WHERE name = 'Zoom Workplace (X64)' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
# label_membership_type: dynamic
# platform: windows
- name: x86 Windows hosts with Zoom installed
description: x86 Windows hosts with Zoom installed
query: SELECT 1 FROM programs WHERE name = 'Zoom Workplace (X64)' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
label_membership_type: dynamic
platform: windows
- name: Windows hosts with Brave Browser installed
description: Windows hosts with Brave Browser installed
query: SELECT 1 FROM programs WHERE name = 'Brave';
it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml
+8 -9
View File
@@ -63,15 +63,14 @@
install_software: false
labels_include_any:
- Macs with Slack installed
# Zoom patch policy disabled until Zoom FMA is present in Fleet.
# - name: macOS - Zoom up to date
# description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
# resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also delete Zoom if you are no longer using it."
# type: patch
# fleet_maintained_app_slug: zoom/darwin
# install_software: false
# labels_include_any:
# - Macs with Zoom installed
- name: macOS - Zoom up to date
description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also delete Zoom if you are no longer using it."
type: patch
fleet_maintained_app_slug: zoom/darwin
install_software: false
labels_include_any:
- Macs with Zoom installed
- name: macOS - Okta Verify up to date
description: The host may have an outdated version of Okta Verify, potentially risking security vulnerabilities or compatibility issues.
resolution: "Download the latest version from Self-service or check for updates using Okta Verify's built-in update functionality. You can also delete Okta Verify if you are no longer using it."
it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml
+8 -9
View File
@@ -30,15 +30,14 @@
install_software: false
labels_include_any:
- x86 Windows hosts with Google Chrome installed
# Zoom patch policy disabled until Zoom FMA is present in Fleet.
# - name: Windows - Zoom up to date
# description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
# resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also uninstall Zoom if you are no longer using it."
# type: patch
# fleet_maintained_app_slug: zoom/windows
# install_software: false
# labels_include_any:
# - x86 Windows hosts with Zoom installed
- name: Windows - Zoom up to date
description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also uninstall Zoom if you are no longer using it."
type: patch
fleet_maintained_app_slug: zoom/windows
install_software: false
labels_include_any:
- x86 Windows hosts with Zoom installed
- name: Windows - Brave Browser up to date
description: The host may have an outdated version of Brave Browser, potentially risking security vulnerabilities or compatibility issues.
resolution: "Download the latest version from Self-service or check for updates using Brave Browser's built-in update functionality. You can also uninstall Brave Browser if you are no longer using it."