Commit Graph
12088 Commits
Author SHA1 Message Date
Tim Lee 14fa3e2cbe Ubuntu Kernel Vulns Part 1: Generate OVAL JSON (#19210) 2024-05-28 13:40:32 -06:00
Noah Talerman 84a1c84244 Update docs: Best practice infra for deploy security agents (#19251)
- Add S3 to AWS reference architecture docs
- Add note that GCP support for add/install software (deploy security
agents) and file carves is coming soon
- Add note that Render support for add/install software (deploy security
agents) is coming soon
- Update links to best practice Terraform example
2024-05-28 14:41:54 -04:00
Lucas Manuel Rodriguez 984711060f Some docs added while learning DDM for iOS/iPadOS support research (#18561)
Some docs added while working on #18423.
2024-05-28 15:03:39 -03:00
Rachael Shaw 8f2ea71cd2 Update story issue template (#19309)
Add :product label to user story issue template
2024-05-28 13:54:54 -04:00
Gabe Lopez ad761456fe Update release-qa.md (#19237)
fixed typo and removed migration testing for Percona since the customer
has switched to mySQL

# Checklist for submitter

If some of the following don't apply, delete the relevant line.
2024-05-28 10:03:42 -07:00
Noah Talerman 78037e246b Add attribution for Mac Admins tables (#19302)
- Add note for all tables
2024-05-28 12:59:35 -04:00
Eric d9594ba2bf Website: update quote links on landing pages (#19307)
Closes: #18966

Changes:
- Updated the styles of the quote links on the product category landing
pages.
2024-05-28 11:45:25 -05:00
Lucas Manuel Rodriguez f8cee672e0 Support environment variables in config profiles (#18891)
#17309

I added some missing env var replacement tests for policies, queries,
etc.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
2024-05-28 13:44:43 -03:00
Jahziel Villasana-Espinoza ddcdaa61c0 feat: enabled locking for windows admins (#19145)
> Related issue: #18461

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-05-28 12:06:38 -04:00
Tim Lee 1d2d9d4222 Support status and label filters in bulk opts (#17723) 2024-05-28 08:53:16 -06:00
Tim Lee 6f008b40f2 Fix backoff in vuln stream logging (#19148) 2024-05-28 08:13:46 -06:00
Lucas Manuel Rodriguez 363c4bdd77 Friday cleanup ld: warning: ignoring duplicate libraries: '-lproc' (#18581)
To get rid of the warning:
```
ld: warning: ignoring duplicate libraries: '-lproc'
```
See https://github.com/elastic/go-sysinfo/releases/tag/v1.11.2.

```
go mod why github.com/elastic/go-sysinfo
# github.com/elastic/go-sysinfo
github.com/fleetdm/fleet/v4/server/contexts/ctxerr
go.elastic.co/apm/v2
github.com/elastic/go-sysinfo
```

I ran:
```
go get github.com/elastic/go-sysinfo@v1.11.2
go mod tidy
```
2024-05-28 10:31:09 -03:00
Roberto DipandEric d98e1ecf27 allow to customize the signed CSR return type (#19213)
for #19027, this modifies the website to accept an `deliveryMethod` parameter to
respond with the signed CSR instead of delivering an email.

The current approach also maintains backwards compatibility:

**Response without `deliveryMethod` (unchanged except for custom headers)**

```
$ curl --insecure -v -H 'content-type: application/json' http://localhost:2024/api/v1/deliver-apple-csr -d '{"unsignedCsrData": "foo"}'
*   Trying [::1]:2024...
* Connected to localhost (::1) port 2024
> POST /api/v1/deliver-apple-csr HTTP/1.1
> Host: localhost:2024
> User-Agent: curl/8.4.0
> Accept: */*
> content-type: application/json
> Content-Length: 26
>
< HTTP/1.1 200 OK
< X-Powered-By: Sails <sailsjs.com>
< Cache-Control: no-cache, no-store
< X-Exit: success
< X-Exit-Description: Delivered email to specified email address with certificate signing request attached.
< Content-Type: text/plain; charset=utf-8
< Content-Length: 2
< ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
< Set-Cookie: sails.sid=s%3AqOZoNKY2CCZ6PFb9fIKaAjtiTKjB7Gum.9jodWIUG6DCNnXu%2Bn%2BF8cJmI%2Fn19Tk%2FdIkDPBl%2BILbI; Path=/; HttpOnly
< Date: Wed, 22 May 2024 18:23:16 GMT
< Connection: keep-alive
< Keep-Alive: timeout=5
<
* Connection #0 to host localhost left intact
OK
```

**Response with `deliveryMethod=json`**

```
$ curl --insecure -v -H 'content-type: application/json' http://localhost:2024/api/v1/deliver-apple-csr?deliveryMethod=json -d '{"unsignedCsrData": "foo"}'
*   Trying [::1]:2024...
* Connected to localhost (::1) port 2024
> POST /api/v1/deliver-apple-csr?alt=json HTTP/1.1
> Host: localhost:2024
> User-Agent: curl/8.4.0
> Accept: */*
> content-type: application/json
> Content-Length: 26
>
< HTTP/1.1 200 OK
< X-Powered-By: Sails <sailsjs.com>
< Cache-Control: no-cache, no-store
< Content-Type: application/json; charset=utf-8
< X-Exit: success
< X-Exit-Description: Delivered email to specified email address with certificate signing request attached.
< X-Exit-Output-Friendly-Name: RSS feed XML
< Content-Length: 26
< ETag: W/"1a-NnuclRv86ZEKA9WB967iUGlz84s"
< Set-Cookie: sails.sid=s%3AbpaKOTbNe4E911qH4z1-12ABGd_z2d2I.mAimDARoZgnq8zpJHcF95y8qFJXX0iky4Suj0HUKjpI; Path=/; HttpOnly
< Date: Wed, 22 May 2024 18:22:07 GMT
< Connection: keep-alive
< Keep-Alive: timeout=5
<
* Connection #0 to host localhost left intact
{"csr":"UEQ5NGJXdy4uLg=="}
```

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-28 10:08:03 -03:00
Sam Pfluger 1fd0e3796e Handbook/digital-experience: add obtain a signature from the CEO (#19299) 2024-05-27 19:19:15 -05:00
Eric 02437a098e Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00
Sam Pfluger 1b28707c60 Update DRI in Digital Exp rituals (#19298) 2024-05-27 17:45:10 -05:00
Eric 2af2c41572 Website: Update round robin in salesforce helpers & move lead creation to save-questionnaire-progress. (#19209)
Closes: #18932

Changes:
- Updated `update-or-create-contact-and-account.js` to not round robin
new account records created.
- Updated create-lead to reassign accounts owned by the integrations
admin user when a new lead is created.
- Updated logged warnings in signup, deliver-contact-form-message and
deliver-talk-to-us-form-submission.
- Updated signup.js to not create salesforce leads (only account and
contact records)
- Updated save-questionnaire-progress to create Salesforce leads when we
know the user has a use case for Fleet.
2024-05-27 16:43:40 -05:00
b1a18bc4a5 Remove former employee from receive-from-github.js (#19189)
Removed departed employee

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
Co-authored-by: Sampfluger88 <sampfluger88@gmail.com>
2024-05-24 19:29:00 -05:00
Joanne Stableford ed159cebc8 Update communications with demand references (#19273) 2024-05-24 18:38:05 -05:00
f02afe09c1 Add steps for running international commission payroll to bizops page (#19227)
Co-authored-by: Joanne Stableford <59930035+JoStableford@users.noreply.github.com>
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-05-24 18:37:13 -05:00
Joanne Stableford 9244732220 Update Demand handbook page (#19270) 2024-05-24 18:35:44 -05:00
Eric 7bd7c023e2 Docs: Fix broken relative link on SSO docs page (#19216)
Changes:
- Fixed a broken relative link
2024-05-24 16:57:29 -05:00
Jacob ShandlingandJacob Shandling c73904ec8c UI – Place all TooltipWrapper tooltips on the bottom (#19002)
## Addresses #18741 
<img width="727" alt="Screenshot 2024-05-14 at 3 26 20 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/671c680e-00db-4481-a7b3-5425bf6a610d">

- [x] Changes file added for user-visible changes in `changes/`,
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-05-24 14:30:54 -07:00
Joanne Stableford fc5f16c464 Correct BizOps page formatting and numbers (#19231) 2024-05-24 15:59:32 -05:00
Noah Talerman b43a203b25 features.yml: Software management features (#19279) 2024-05-24 13:27:48 -07:00
Luke Heath f84124718e Add network and system hardening standards to handbook (#19263) 2024-05-24 15:09:00 -05:00
Benjamin Edwards 978a9413ee kinesis logging destination module (#19269)
Create a Kinesis Logging Terraform Module similar to the existing
Firehose Logging Terraform Module.

- [X] Manual QA for all new/changed functionality

relates to https://github.com/fleetdm/confidential/issues/6548
2024-05-24 15:24:15 -04:00
Brock Walters 88e94b1c4f Update authdb.yml (#19274)
Modified Description field.
2024-05-24 15:23:09 -04:00
Sharon KatzandNoah Talerman f75f0776e6 additional stats (#19078)
Additional telemetry stats to report to Heroku.
FYI - @eashaw, we could later add to datadog as well.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-05-24 15:06:10 -04:00
Brock WaltersandEric 4545e960ae Update arp_cache.yml (#19254)
Updates to Fleet Table Docs per
https://github.com/fleetdm/fleet/issues/16993

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-24 15:05:57 -04:00
Sam Pfluger 87225ece32 Update README.md (#19266) 2024-05-24 12:20:50 -05:00
JD 81e98eab6b Article: Endpoint mgmt role in healthcare. (#19226)
Article: Endpoint management's crucial role in healthcare.
https://github.com/fleetdm/confidential/issues/6568
2024-05-24 10:16:18 -07:00
Victor Lyuboslavsky addbceece0 Activity feed webhooks backend (#19261)
This is a redo of the already-approved PR
https://github.com/fleetdm/fleet/pull/19125

The difference is that this merge is into main as opposed to the feature
branch.
2024-05-24 11:25:27 -05:00
Noah Talerman d81ffdb5db Update 4.45.0 release article (#19257)
- Credit @grahamgilbert and
[macadmins/osquery-extension](https://github.com/macadmins/osquery-extension)

Thank you for your awesome work Graham
2024-05-24 10:26:19 -04:00
Lucas Manuel Rodriguez b7aac2cfab Fix bundle_identifier for common software in osquery-perf (#19023)
bundle_identifier should be unique for the common software (should not
have hostname name in it).
2024-05-24 09:26:42 -03:00
github-actions[bot]andlucasmrod 4f315b89d3 Update versions of fleetd components in Fleet's TUF [automated] (#19220)
Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
2024-05-24 09:26:23 -03:00
3f926e7569 Update authdb.yml (#19161)
Need help to get the correct formatting for the notes key/val

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
Co-authored-by: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
2024-05-24 07:40:32 -04:00
Eric f58bc88d5b Website: Update scripts in layout.ejs (#19252)
Related to: https://github.com/fleetdm/confidential/issues/6689

Changes:
- Removed the script tags for:
   - Google tag manager
   - Hubspot
   - Heap analytics
- Moved the Snitcher, LinkedIn insight, Reddit Ads script tags from
Google tag manager to layout.ejs:
2024-05-23 17:36:27 -05:00
Luke Heath b4850cca7d Add JD to IT codeowners (#19238) 2024-05-23 17:28:50 -05:00
Sam Pfluger aabda8bb6f Update README.md (#19247)
\
2024-05-23 16:16:15 -05:00
Noah Talerman 95910d3e43 Update docs: Maintenance windows (Fleet in your calendar) (#19232)
Doc updates for the "Maintenance windows (Fleet in your calendar)" story
(#17230)
2024-05-23 17:07:53 -04:00
Noah Talerman 27cc943a4b Sever config docs: Deploy security agents (#19236)
Server configuration doc changes for "Deploy security agents" story
(#14921)
2024-05-23 17:07:28 -04:00
Noah Talerman 23e80f2ce4 API design: Deploy security agents to macOS, Windows, and Linux hosts (#19245)
API changes for:
- #14921
2024-05-23 17:07:07 -04:00
1dc53cfa93 Update Fleet-UI.md (#19135)
Added a note to warn UI users against using dot notation for column
names in their queries.

Closes https://github.com/fleetdm/confidential/issues/6506

(@dherder, please check my interpretation of the issue.)

---------

Co-authored-by: Dave Herder <27025660+dherder@users.noreply.github.com>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-05-23 15:45:27 -05:00
JD 400c81bab9 Article: Fleet 4.50.0 release (#19211) 2024-05-23 15:31:11 -05:00
Jacob ShandlingandJacob Shandling 886d53412b UI – Queries table: Fix issues with filter/sorting, optimize render behavior (#18973)
## Addresses #18881 and #18858
- Fix the bugs, memoize various props to optimize table rendering

## QA
In addition to the bugs outlined in the addressed issue, this PR
contains rendering optimizations. Please check these functionalities,
which should be unaffected (and were so in my own testing) but should be
double-checked:

- [ ] create query
- [ ] delete query
- [ ] empty state
- [ ] changing platform dropdown
- [ ] different sort orders
- [ ] delete query from table action
- [ ] results count change

## Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-05-23 13:30:24 -07:00
Jacob ShandlingandJacob Shandling a31cde9f2c Exclude host_ids field from label responses when it is empty, which is the case for the list labels endpoint (#19190)
## Addresses #18515 
<img width="989" alt="Screenshot 2024-05-21 at 4 11 53 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/99f137a1-50cf-4cfb-a3e1-0ed13264c963">


- [x] Changes file added for user-visible changes in `changes/`, 
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-05-23 13:29:46 -07:00
JD 18e42e7c32 Add script to enable MS Defender (#19234)
Add PowerShell script to enable Windows Defender per
https://github.com/fleetdm/confidential/issues/5476
2024-05-23 13:29:37 -07:00
Dave HerderandRobert Fairburn 6dc8f2b639 Adding clarification on how to override availability zones (#19207)
If an end user wishes to host in some region other than us-east-2, the
availability zones need to be updated in this example main.tf

---------

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-05-23 16:19:40 -04:00
Benjamin Edwards a2ac7e9083 increase monitoring delay (#19201)
part 1 of 2 of https://github.com/fleetdm/fleet/issues/19038
2024-05-23 16:18:38 -04:00