Commit Graph
12411 Commits
Author SHA1 Message Date
Tim Lee 0516cd61d0 App OS Vulnerability Matching (#19486) 2024-06-13 11:20:28 -04:00
Robert Fairburn 42b1fc7e30 Tf software installers fix (#19715)
Fixed a typo in the name of the software installers bucket prefix env
var in terraform modules and removed the default prefix as the code
seems to create this prefix automatically. An additional prefix is still
supported for configuration, but can be left empty and will be so as the
default.
2024-06-13 10:07:48 -05:00
Tim Lee 6d2471d5e5 vscode false positivies (#19508)
#18733 

Added a rule for the affected CVEs and made a change to the `IfIgnore`
func. Manually tested CVE removals with `/tools/nvd/nvdvuln`. Existing
test coverage ensures the rule doesn't cause false negatives on vscode
extensions.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [] Added/updated tests
- [X] Manual QA for all new/changed functionality
2024-06-13 11:03:53 -04:00
github-actions[bot]andlucasmrod 780cdbab36 Update versions of fleetd components in Fleet's TUF [automated] (#19712)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-06-13 09:54:14 -03:00
Brock Walters 793c4a2b5e Create registry.yml (#19711)
Create registry.yml per #16993 

ps. just got your message in Slack. This has a particularly gnarly query
because the registry data is gross. I have broken it on new lines at the
commands but it's all going to be a big blob in the fixed width columns
on the site & Fleet UI anyway. We'll see what it does. If you would
prefer I could "minify" these all onto 1 line no matter how long they
are?
2024-06-12 21:11:38 -04:00
Brock Walters f38076ef69 Create programs.yml (#19701)
Create programs.yml per #16993
2024-06-12 21:09:54 -04:00
JD c455c75360 Article: defensivedepth ubuntu deployment guide (#19515)
Article: From @defensivedepth ubuntu-deployment-guide

> Would like to add something like:
> Author: Josh Brower, @defensivedepth
> Sponsored by: Internews
> 
> I also have the Internews logo if that would be possible to use.
2024-06-12 15:54:15 -07:00
Noah Talerman 19cd94385f Contributor docs: APNs and ABM in the UI (#19549)
- Remove outdated sections
2024-06-12 18:31:09 -04:00
Noah Talerman d7394aae6b Device management > Setup and Commands docs: iOS/iPadOS (#19590)
- Update "Setup" and "Commands" doc pages to mention iOS and iPadOS.
2024-06-12 18:30:46 -04:00
Noah Talerman 80677d1dd0 REST API docs: Add policy (#19699)
- Fix typo in descriptions
- Remove legacy/deprecated way of adding a policy
2024-06-12 18:30:28 -04:00
Noah Talerman bac033e0d6 REST API docs: manual enrollment profile (#19593)
- Clarify that the manual enrollment profile is unsigned
2024-06-12 18:29:19 -04:00
George KarrandLuke Heath 5af2f9751a Adding changes for Fleet v4.51.1 (#19649)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-06-12 16:27:18 -05:00
Benjamin Edwards 8742f886d2 Render installer store changes (#19705) 2024-06-12 17:06:44 -04:00
Rachael ShawandNoah Talerman 5b4488c6b7 API docs: Update macos_settings and windows_settings format (#19476)
Noticed several places where the structure of
`mdm.macos_settings.custom_settings` and
`mdm.windows_settings.custom_settings` didn't match the example response
for "Get configuration" (which I think is the most up-to-date).

(Will follow up and update the parameter descriptions for
`mdm.macos_settings.custom_settings`/`mdm.windows_settings.custom_settings`
to clarify they're objects with `path` and `labels` once
https://github.com/fleetdm/fleet/pull/19424 is merged.)

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-06-12 15:45:26 -05:00
Martin Angers 468a9ff608 Change status code 500=>408 when the MDM protocol endpoints time out reading the request body (#19698) 2024-06-12 16:30:49 -04:00
Tim Lee 33b087955b Firefox ESR Fix (#19466)
#19401
#18447 

Reverted commit 5dab2042f8, corrected
discovery query, added lint test.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
2024-06-12 16:06:40 -04:00
Brock Walters fb7e39da76 Update pipes.yml (#19685)
Added PowerShell link & updated PowerShell command to include prompt in
example.
2024-06-12 15:03:16 -04:00
Robert Fairburn f57ae38308 Add s3 installers configuration to dogfood (#19697) 2024-06-12 13:50:41 -05:00
Sarah Gillespie 3992d6f344 Fix UI bug in OS settings modal on "My device" page (#19502) 2024-06-12 13:49:58 -05:00
Sarah Gillespie 60f7c3d03c Fix color of tooltip text for run script dropdown action (#19505) 2024-06-12 13:49:40 -05:00
Sarah Gillespie e5316331f0 Add exception to UI software name-to-icon mapping for ZoomInfo (#19509) 2024-06-12 13:49:18 -05:00
Robert Fairburn dcd551f671 initial osquery docker sidecar and osquery local builds (#19641) 2024-06-12 13:25:07 -05:00
Robert Fairburn 6b024ad4e4 TF modules create s3 software installers bucket (#19659) 2024-06-12 12:50:05 -05:00
Jahziel Villasana-Espinoza 0b98411e5b fix: avoid overwriting old host data when using MacOS Migration Assistant to move to a new machine (#19682)
> Related issue: #17934 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-06-12 13:30:50 -04:00
Dave HerderandLuke Heath 30e4b252aa adding a subset of cis benchmarks policies to canary workstations team (#19572)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-06-12 08:19:51 -07:00
Eric bad0a8c363 Vuln-dash: Update sails app configuration in docker-compose.yml (#19686)
Changes:
- Updated the vulnerability dashboard configuration for the dockerized
version to make sure it uses the `safe` migration strategy
2024-06-12 10:15:52 -05:00
Martin Angers 3044eb9e6b Soft-delete entries for host script results so the details are still available in activities (#19457) 2024-06-12 10:26:03 -04:00
Noah Talerman 01b87a14be Update features.yml (#19427)
- Customer commitment is shipped
2024-06-12 09:54:31 -04:00
Noah Talerman 69fb46d9f1 Update features.yml: Customer promises (#19337)
- Add customer promises with tentative dates
2024-06-12 09:51:58 -04:00
Martin Angers ff1e17680b Fix the unlock linux host script to support users without password (#19665) 2024-06-12 09:49:37 -04:00
Victor Lyuboslavsky 8c4c739ef3 Display ingested software on host details page. (#19576)
#19348 

Fixed host details page and device details page not showing the latest
software.
- During software ingestion, software titles are now added if needed and
software items have their title_id field populated.
- In addition, after refreshing via UI, the software will be re-fetched
if it has been modified.

Added `exclude_software` query parameter to the
`/api/latest/fleet/hosts/:id` endpoint to exclude software from the
response.

PR for API doc change: #19617

Related issue filed for the Device User Page:
https://github.com/fleetdm/fleet/issues/19618

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-06-12 08:38:57 -05:00
Martin Angers 943a4566f4 Fix the windows-remove-fleetd.ps1 script so that the agent can be reinstalled (#19643) 2024-06-12 09:34:57 -04:00
Martin Angers a154f4ca04 Improve handling of timeouts and maximum size for the upload software installer endpoint (#19657) 2024-06-12 09:33:25 -04:00
dependabot[bot] 5aa5750566 Bump braces from 3.0.2 to 3.0.3 in /ee/fleetd-chrome (#19676) 2024-06-11 16:53:29 -07:00
dependabot[bot] 9c4b248cea Bump braces from 3.0.2 to 3.0.3 (#19677) 2024-06-11 16:52:58 -07:00
github-actions[bot]andlucasmrod 2a1ace1ed2 Update versions of fleetd components in Fleet's TUF [automated] (#19678)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-06-11 20:36:23 -03:00
Dave Herder 6c44a12a9e Fix dead rotating enroll secrets guide link (#19667) 2024-06-11 15:56:20 -07:00
Lucas Manuel RodriguezandSharon Katz 606635b131 Release fleetd 1.26.0 (#19673)
- **Release fleetd 1.26.0**

---------

Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com>
2024-06-11 19:51:57 -03:00
Drew Baker a035752a9b Adding macos-system-maintenance-script to workstations canary 🐣 team (#19675)
Adding script that changes macOS background to
https://fleetdm.com/images/demo/fleet-system-maintenance.png and then
changes back to the original desktop.

Added reference to the script in the workstations canary team.
2024-06-11 18:47:04 -04:00
Drew Baker 09fb6cf11e Add system maintenance background (#19663)
Adding system maintenance wallpaper background for sales demo purposes
2024-06-11 18:27:52 -04:00
Noah Talerman 436aaf1eaa Release QA issue template (#19631)
- Test the migration workflow each release
2024-06-11 18:14:43 -04:00
Drew BakerandLuke Heath c716c5d21a Add system maintenance policy to workstations canary (#19664)
Adding system maintenance policy to Workstations canary 🐣 team for demo
purposes.

---------

Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-06-11 18:04:13 -04:00
Lucas Manuel Rodriguez 1a475b857c Move changes from orbit to fleet (#19672)
Moving changes file to fleet (PR:
https://github.com/fleetdm/fleet/commit/4571b540fbaea41aa1144e87377a02a79b57f878)
2024-06-11 19:03:16 -03:00
Noah Talerman 99bf325244 Update copy for "Disable generative AI features" (#19669) 2024-06-11 14:59:57 -07:00
Noah Talerman 08c5867260 Update segment hosts (teams) docs (#19589)
- Add Fleet's best practice
2024-06-11 17:50:33 -04:00
Nathanael Holliday bdeed6c42b Update security-policies.md (#19504) 2024-06-11 14:37:40 -07:00
Jacob ShandlingandJacob Shandling 4197076b16 fleetd tcc_access table: handle non-existent user tcc.db (#19660)
## Follow up to #19355 

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-06-11 13:40:59 -07:00
Lucas Manuel Rodriguez 7c427c8ee8 Revert "Update pmset_darwin.go" (to reduce testing of 1.26.0) (#19661)
This reverts commit aa7a2689f1ce84049aa8510db795a8eeaf8f91cd.
2024-06-11 17:19:19 -03:00
Victor Lyuboslavsky e4b79fecda Updated changes file for 19332: clear secrets with gitops. (#19656)
Updated changes file for 19332: clear secrets with gitops.
2024-06-11 14:11:25 -05:00
Brock Walters 0220f8fb8c Update pmset_darwin.go (#19639)
From the pmset man page:

-g custom displays custom settings for all power sources.

i.e., pmset -g is incomplete. 

What would be even better is pmset -g everything which outputs results
from all -g options but the schema of this data is inconsistent (it's
not all key/vals) so would probably require more work.
2024-06-11 14:30:09 -04:00