Commit Graph
9487 Commits
Author SHA1 Message Date
Lucas Manuel Rodriguez 2fd6fa4e04 Vulnerability processing should ignore software without version (#14612)
#13615

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-10-26 18:28:08 -03:00
Roberto Dip 3869b41041 prevent a bug preventing .mobileconfig uploads in Linux/Windows (#14716)
For #14056, per the [mdn web
docs](https://developer.mozilla.org/en-US/docs/Web/API/File/type)

> Note: Based on the current implementation, browsers won't actually
> read the bytestream of a file to determine its media type. It is
assumed
> based on the file extension; a PNG image file renamed to .txt would
give
> "text/plain" and not "image/png". Moreover, file.type is generally
> reliable only for common file types like images, HTML documents, audio
> and video. Uncommon file extensions would return an empty string.
Client
> configuration (for instance, the Windows Registry) may result in
> unexpected values even for common types. Developers are advised not to
> rely on this property as a sole validation scheme.
2023-10-26 18:20:24 -03:00
Roberto Dip 001120274c adjust response status code for mdm/apple/enqueue (#14666)
For #14529
2023-10-26 18:20:11 -03:00
Roberto Dip 6c42287914 allow to set an orbit destination via env variable (#14658)
for #14657. Seems like we're not documenting any of the orbit flags.
2023-10-26 18:19:59 -03:00
Eric cfd0260b36 Website: Remove /handbook/sales redirect (#14760)
Changes:
- Removed the redirect for `/handbook/sales`. It is currently
redirecting to `/handbook/customers/` (which redirects to
`/hanbook/sales`, creating an infinite redirect loop.)
2023-10-26 15:50:58 -05:00
gillespi314 c10ee875f2 Fix validations for applying MDM config changes (#14517) 2023-10-26 15:48:32 -05:00
Luke Heath 653aeceb06 Prepare v4.39.0 (#14647) 2023-10-26 15:07:58 -05:00
Sampfluger88 402653715b Fix Sales link (#14759)
...
2023-10-26 14:54:02 -05:00
Eric a5fff556c1 Website: Update handbook page script to not create a link to handbook/company/handbook page in handbook index. (#14755)
FYI @Sampfluger88 

Changes:
- Updated the handbook page script to:
   - Add comments explaining what links are added to the handbook index.
   - Exclude the handbook/company/handbook page from the handbook index.
2023-10-26 13:29:04 -05:00
RachelElysia 06aec6401f Fleet UI: Manage queries page uses URL params as source of truth for table and inherited table views (#14750) 2023-10-26 13:35:55 -04:00
Sampfluger88 0b650de294 Handbook/sales#submit-a-customer-contract-for-legal-review (#14747)
Conflicts with the original PR caused the need for 2 separate PRs where
there could've been a single pull request
https://github.com/fleetdm/fleet/pull/14746

...
2023-10-26 04:11:45 -05:00
Marko Lisica de5695659a Batch-apply scripts: parameters documented incorrectly (#14653)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-10-26 10:59:10 +02:00
Sampfluger88andEric 5ad4b7a36b Update handbook index to only show pages in the /handbook/company/ folder (#14746)
...

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-10-26 03:38:33 -05:00
Sampfluger88 ba554ab256 Revert "Update README.md"
This reverts commit 6a29ae48635ceaf04c44cd21c37df6eef6275051, reversing
changes made to 65d95b54897204327e614925a323dfb6c7745ef2.
2023-10-26 01:07:18 -05:00
Lucas Manuel RodriguezandJahziel Villasana-Espinoza fd99fd4121 Add optimizations for query reports at scale (#14710)
#7766

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.~
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~

---------

Co-authored-by: Jahziel Villasana-Espinoza <jahziel@fleetdm.com>
2023-10-25 19:20:27 -03:00
Sampfluger88 3f76c631d4 Handbook/sales#submit a contract for legal review (#14741)
... ...
2023-10-25 17:04:29 -05:00
Sampfluger88 462beec609 FIx broken "Contract review" link (#14737)
...
2023-10-25 15:39:43 -05:00
Lucas Manuel Rodriguez 3d420e71ac Oncall: Update fleetd release guide (#14681)
I added the commands that we use when releasing new versions of fleetd
components to `edge` and when promoting `edge` to `stable`.
2023-10-25 12:13:25 -03:00
Eric c12af96f7d Website: Consolidate product categories on homepage. (#14728)
Closes: #14711

Changes:
- Updated the homepage layout and styles to match the latest wireframes.
2023-10-25 09:03:45 +09:00
Noah Talerman e6b809b043 Story issue template: deduplicate (#14663)
- Remove doc checkbox from "Engineering" section
2023-10-24 16:02:29 -04:00
dependabot[bot] 4aa1301550 Bump ossf/scorecard-action from 2.1.2 to 2.3.1 (#14723) 2023-10-24 14:25:02 -05:00
Noah Talerman a7b7706228 Update Product handbook: Remove "Bug review" ritual (#14720)
- Remove "Bug review" ritual in an effort to remove recurring meetings. 
- Head of Product Design (Noah) is the DRI of keeping the "Sprint
backlog" column in the bugs board prioritized. They'll get input from
EMs on priority async and during 1:1 calls.
- Add note about recording product KPI during "Pre-sprint
prioritization"
...
2023-10-24 14:11:43 -05:00
Sampfluger88andMike McNeil 514fe52e61 Handbook/bizops#contactus (#14703)
- Add admin permissions bullet in contact-us

@JoStableford FYI
...

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-10-24 12:31:39 -05:00
f50243fe20 Windows MDM article (#14566)
Addresses: https://github.com/fleetdm/confidential/issues/3914

- Consolidate changes from #13943, #14184, and #14249 into article
- Remove "Window setup" doc page.

TODO: @spokanemac to add an image for the article and appropriate meta
tags so that the article shows up on fleetdm.com/guides

---------

Co-authored-by: spokanemac <jack@jdstrong.com>
Co-authored-by: JD <spokanemac@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-10-24 08:19:18 -07:00
Martin Angers d0f276cd75 Log when ABM terms have changed without requiring debug logging (#14712) 2023-10-24 09:51:34 -04:00
Luke Heath 508d65d49e Remove g-infra product group (#14693)
...
2023-10-23 21:46:41 -05:00
Luke HeathandNoah Talerman 827e0cd533 Remove to be scheduled column from bugs board (#14679)
- Redundant; tickets should go straight from drafting > sprint backlog. 
- Remove `Needs prioritization` category. Aged out bugs either are
scheduled for the next sprint (if there's capacity) or close.
...

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2023-10-23 21:07:00 -05:00
Noah Talerman ac8a36523f Update product design handbook (#14704)
- Remove CEO from "Churned bug review" ritual
...
2023-10-23 20:43:11 -05:00
Andrew Baker 8a4eef88a5 Drew bakerfdm expeditioners charles (#14709)
Adding episode 5 of the ExpedITioners podcast.
2023-10-23 18:06:54 -04:00
3KindsofFish efdbf39009 add 3kindsoffish to list of humans (#14705)
...
2023-10-23 15:22:57 -05:00
Noah TalermanandMike McNeil b72badccce Update product DRIs and rituals (#14690)
- "Head of Product" => "Head of Product Design"
- #help-product => #help-product-design
- "Sprint kickoff review" is now one ritual that includes both MDM and
Endpoint ops teams
- "Pre-sprint prioritization" ritual is now one ritual that includes
both MDM and Endpoint ops teams
- Remove "Sprint release notes kickoff" ritual. Plan is to inform
#g-demand of new features asynchronously. Any discussion that needs to
happen live will happen at product office hours
- Remove "Report number of estimated stories (Endpoint ops))" and
"Report number of estimated stories (MDM)" rituals. One person (Head of
Product Design) is both reporting and tracking product KPIs
- Remove "Bug de-prioritization" ritual. Trying this instead: ~~CEO,~~
Head of Product Design, and Head of Product Development align on next
steps for which bugs to schedule into the next sprint and which can be
de-prioritized during the "Churned bug review" ritual. Less meetings.

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-10-23 13:45:30 -05:00
Mike McNeil bae8e9a600 Handbook: Clarify mdmctl (#14702) 2023-10-23 13:37:21 -05:00
Luke Heath 23d8087401 Publish on push to prepare and patch branches (#14648) 2023-10-23 11:41:41 -05:00
gillespi314 e6d4ed5f7a Route to query report page after creating new query (#14682) 2023-10-23 10:41:02 -05:00
Mike McNeil 7067ca586a Add references: Update pricing-features-table.yml (#14689) 2023-10-22 21:33:08 -05:00
Mike McNeil d077a8c3eb features.yml: Add waysToUse based on Atlassian talk (#14688)
Based on
https://www.youtube.com/watch?v=qflUfLQCnwY&list=PL6-FgoWOoK2YUR4ADGsxTSL3onb-GzCnM&index=4

Courtesy @nyanshak
2023-10-22 21:09:20 -05:00
Sampfluger88andMike McNeil 0b06a10829 Handbook/customers Delete old content (#14655)
Closes fleetdm/confidential#4018

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-10-21 13:13:35 -05:00
Sampfluger88andMike McNeil 35b33e74e9 Handbook/Marketing » Demand (#14686)
Closes fleetdm/classified#641...

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-10-21 13:01:43 -05:00
Sampfluger88 00ed554bae Handbook/ open-positions.yml:Remove CSM position (#14684)
...
2023-10-20 18:12:49 -05:00
Rachael Shaw 782d71481f Reframe note about scheduled queries not returning errors (#14683)
Move content into a blockquote (since h3s on this page are reserved for
API endpoints), and point users toward how to get errors for a
particular query via the REST API.
2023-10-20 17:34:42 -05:00
EricandMike Thomas 4a6bf0d447 2023-10-24 Website: Update /try-fleet (#14638)
Closes: https://github.com/fleetdm/confidential/issues/4015

Changes:
- Changed the url for `/fleetctl-preview` to
`/try-fleet/fleetctl-preview`
- Updated the controller for the `/fleetctl-preview` page to redirect
non-logged-in users to `/try-fleet/login`
- Removed the route for `/try-fleet/sandbox-expired`, and added a
redirect going to `/try-fleet/fleetctl-preview`.
- Updated the controller for `/try-fleet/sandbox` to redirect the users
without a non-expired Sandbox instance to `/try-fleet/fleetctl-preview`.
- Updated `signup.js` to not provision Fleet sandbox instances for
users.
- Updated the `User` model to support a third `signupReason`: "Try
Fleet"
- Updated `/try-fleet/register` to submit "Try Fleet" as a
`signupReason` when users sign up.
- Renamed the files for the `/fleetctl-preview` page (`get-started` »
`fleetctl-preview`)
- Updated/removed Fleet Sandbox related handbook sections.
- Replaced the "Fleet vs Fleet Sandbox" section in the deploying
documentation with a note about `fleetctl preview`.
- Updated links to Fleet Sandbox in articles.

---------

Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
2023-10-20 13:59:18 -05:00
gillespi314 d470127352 Update docs for host disk encryption detail API response (#14628) 2023-10-20 13:55:49 -05:00
Mike ThomasandEric 2da45f9059 Added quote to tweet component (#14668)
I added Daniel's quote to the tweet component.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-10-20 11:54:00 -05:00
JD d6456029b9 Adds attribution to MacAdmins osquery extension. (#14616)
Adds attribution to MacAdmins foundation osquery extension.
2023-10-20 06:57:04 -07:00
Lucas Manuel Rodriguez 5d7ee58a87 Do not leak ticks and fix race condition (#14667)
This PR introduces the following fixes:
- Fixes a race condition by protecting the `scheduledQueries` and
`scheduledQueryData` fields with a `sync.Mutex` (*).
- Adds some more information about request counts for /log, /config and
/distributed/read requests (and uptime).
- Fixes the resource leaks around creating time.Ticks on every for loop
iteration.

(*) Sample of the race condition when running with `-race`:
```
==================
WARNING: DATA RACE
Read at 0x00c000604800 by goroutine 20:
  main.(*agent).runLoop()
      /Users/luk/fleetdm/git/fleet/cmd/osquery-perf/agent.go:525 +0x71b
  main.main.func2()
      /Users/luk/fleetdm/git/fleet/cmd/osquery-perf/agent.go:1737 +0x4e

Previous write at 0x00c000604800 by goroutine 40:
  main.(*agent).config()
      /Users/luk/fleetdm/git/fleet/cmd/osquery-perf/agent.go:915 +0xb30
  main.(*agent).runLoop.func2()
      /Users/luk/fleetdm/git/fleet/cmd/osquery-perf/agent.go:512 +0x37
```
2023-10-20 10:29:59 -03:00
Roberto Dip 2f589ff37c document flags required for fleetd error reporting (#14656)
For #13189, this documents the server config flag required to report
errors.
...
2023-10-19 23:49:18 -05:00
Eric ab1d055cd4 Remove navSection meta tags from configuration documentation pages (#14646)
Closes: https://github.com/fleetdm/fleet/issues/14467
2023-10-19 17:05:08 -05:00
pacamaster cedf1d1ebb add line about offline (#14271)
Docs only change...

...
2023-10-19 12:23:16 -05:00
Lucas Manuel Rodriguez 99d131e96e Fix not found link in the handbook (#14650)
...
2023-10-19 12:19:46 -05:00
Eric f96cb0f561 Website: Update clickable area of the "back to top" button on documentation pages (#14649)
Changes:
- Updated the clickable area of the "Back to top" button on
documentation pages.
2023-10-19 11:19:22 -05:00