Commit Graph
6797 Commits
Author SHA1 Message Date
Sharon Katz 16d7091600 CIS_3.2 (#9522) 2023-02-02 13:08:02 -05:00
Sharon Katz 647c15a909 CIS 5.1.1 (#9617) 2023-02-02 12:50:01 -05:00
Lucas Manuel Rodriguez dfe6b53963 Make fleetctl get teams --yaml output compatible with fleetctl apply -f (#9626)
#9535

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-02 14:46:50 -03:00
Eric 424b370e63 Update link previews for non-article pages (#9629)
closes https://github.com/fleetdm/fleet/issues/9544

Changes:
- Updated layout.ejs to only use `summary_large_card` for link previews
if the page has a `pageImageForMeta` value
2023-02-02 10:57:58 -06:00
Sharon Katz 2957ea9bf4 CIS 5.1.2 (#9623) 2023-02-02 10:22:22 -05:00
Benjamin Edwards dbcb638809 update file carver block size and various MySQL references (#9625)
Update the default file carver block size to be compatible with MySQL 8
& S3.
Update surrounding docs.
Various other updates to references of MySQL versions (all terraform
deploys are now defaulted MySQL 8 in AWS)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
2023-02-02 01:01:34 -05:00
Sharon Katz b60f063e09 CIS 3.6 (#9582) 2023-02-01 17:35:50 -05:00
RachelElysia e933d45c3c Fleet UI: Override 4 retries to mdm apple API (#9618) 2023-02-01 16:42:55 -05:00
Marcos Oviedo 60e0ec09f2 Adding sanity check for input MDM commands (#9615) 2023-02-01 17:28:16 -03:00
Gabriel Hernandez 35f23431c6 Integrate with request CSR API (#9613) 2023-02-01 13:11:34 -06:00
Luke Heath 48978169a9 Finalize new default avatar images (#9604) 2023-02-01 13:06:06 -06:00
Roberto Dip e06b00df11 Add readonly MDM.EnabledAndConfigured to app config and device responses (#9575)
Related to #9571, this adds a new value to both responses which is
calculated when the Fleet server is started, and only set to `true` if
the server is properly configured for MDM.

This helps the UI to determine wether or not we should show certain UI
elements that we only want to show to servers with MDM enabled.
2023-02-01 14:47:52 -03:00
Zachary Winnerman 3ba801a43b Quick fixup (#9614)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-01 12:40:12 -05:00
Gabriel Hernandez 68c4e69a57 add min macos version edited activitiy (#9607)
relates to https://github.com/fleetdm/fleet/issues/9352

adds an edited minimum mac os version activity to the UI

**with team:**

![image](https://user-images.githubusercontent.com/1153709/216044501-3dc34a24-5a49-4fb5-8a83-6808eb79d9ce.png)

**without team:**

![image](https://user-images.githubusercontent.com/1153709/216044543-aa0891c1-6bd4-4453-b646-dcd254fa418b.png)

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2023-02-01 15:58:24 +00:00
Roberto Dip ffed7f8ebe return 422 status code if fleetdm.com returns any 4xx status for CSR (#9610)
Related to https://github.com/fleetdm/fleet/issues/9588, we now handle 4xx responses from the fleetdm.com server and forward those to the client.

At the time of this commit, the only 4xx response that wasn't already handled by the server is because of an invalid email domain, so we assume that, but we should look into establishing a pattern of error messages with the website instead.
2023-02-01 12:50:22 -03:00
Martin Angers f47b7f538f Mention that the min macos version activity is created when deadline is modified too (#9608)
Tiny follow-up to https://github.com/fleetdm/fleet/pull/9594
2023-02-01 09:10:29 -05:00
EricandMike Thomas fc130d9ab3 Website: Add Fleet Premium landing page (#9572)
Changes:
- Added a new page: `/upgrade-to-fleet-premium`
- Added a new action `deliver-premium-upgrade-form.js`
- Updated policies, routes, importer.less, and regenerated
cloud.setup.js

.

---------

Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
2023-02-01 08:53:09 +09:00
Mike McNeil 85e8233f5d Clarify footer link naming (#9573) 2023-01-31 17:23:50 -06:00
Martin Angers c805ea2154 Record activity when the macos minimum version requirement is edited (#9594) 2023-01-31 16:36:18 -06:00
Robert Fairburn 68673cfa6a Initial osquery-perf terraform module addon (#9556)
Added some outputs to re-use the execution and other iam roles in terraform module.
Added osquery-perf addon terraform module
2023-01-31 15:28:57 -06:00
Luke Heath a61e8ef728 Rename new avatar image files (#9584) 2023-01-31 13:54:45 -06:00
Eric 08dadaa45e Update CertificateSigningRequest model (#9585)
- Updated the emailAddress attribute of the Certificate Signing Request
model to fix the email address validation in `deliver-apple-csr.js`
https://github.com/fleetdm/fleet/blob/ee0d93a80ffb0b0448fdb61141bb6bd7690ff27d/website/api/controllers/deliver-apple-csr.js#L108-L117
2023-01-31 13:47:57 -06:00
Katheryn Satterlee ee0d93a80f Add best practice for updating team config (#9580)
Documentation only changes.
2023-01-31 13:47:10 -05:00
Roberto Dip 4c4c114e96 add mocks + tests and move things around (#9574)
#8948

- Add more go:generate commands for MDM mocks
- Add unit and integration tests for MDM code
- Move interfaces from their PoC location to match existing patterns
2023-01-31 11:46:01 -03:00
Zach Wasserman f3642b18da Update xprotect_meta.yml (#9547)
This refers to Safari extensions, not Chrome extensions.
2023-01-30 17:29:41 -08:00
Zach Wasserman 7299879365 Generate targets for osqueryd 5.7.0 (#9115)
5.7.0 is now released.
2023-01-30 17:29:19 -08:00
Zach Wasserman 7531ac20db Use stricter file permissions in fleetctl updates add (#9516)
This resolves an issue with adding updates on a macOS 13 machine. It
seems like macOS may have changed the default directory permissions and
these new stricter permissions are compatible with that default.

This is the error that was encountered before these changes:

```
Error: create dst dir for copy: Path staged/targets already exists with
mode 20000000700 instead of the expected 20000000755
```

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2023-01-30 17:28:56 -08:00
Jacob ShandlingandJacob Shandling f12780df45 UI: 9274 unenroll mdm modal (#9539)
# Addresses #9274 

https://www.loom.com/share/2edd946cbd424af2b960801cc505ac85

## Button and permissions:
- no permission, enrolled, online: <img width="1131" alt="no permission,
enrolled, online"
src="https://user-images.githubusercontent.com/61553566/215197330-abc1606d-bf0a-44ec-b2de-2ef687bd529b.png">
- permission, enrolled, online: <img width="1131" alt="permission,
enrolled, online"
src="https://user-images.githubusercontent.com/61553566/215197443-a1353b9b-10dd-408b-8295-56029f2df4c3.png">
- permission, enrolled, offline: <img width="1131" alt="permission,
enrolled, offline"
src="https://user-images.githubusercontent.com/61553566/215197544-b2a997a7-09e5-4f8a-b723-af587b61a90d.png">
- not enrolled: <img width="1131" alt="not enrolled"
src="https://user-images.githubusercontent.com/61553566/215197630-87f99cb3-63a9-45ce-bc85-57a45d54cae0.png">

## Modal
- <img width="672" alt="modal"
src="https://user-images.githubusercontent.com/61553566/215214640-96670a23-d927-4213-a8fa-89411279c075.png">
- <img width="672" alt="Screenshot 2023-01-27 at 2 12 42 PM"
src="https://user-images.githubusercontent.com/61553566/215215098-40d29556-3b73-4f52-a4ae-cc8b09122f5d.png">
- <img width="672" alt="Screenshot 2023-01-27 at 2 17 48 PM"
src="https://user-images.githubusercontent.com/61553566/215216304-b9362b13-f37f-4454-81b5-423f6fc72280.png">
- <img width="787" alt="success-shot"
src="https://user-images.githubusercontent.com/61553566/215236373-be7b1970-662d-47e6-ac59-f51eff344fcd.png">




# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` 
- [x] Updated test inventory
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-01-30 15:59:02 -08:00
Jacob ShandlingandJacob Shandling 180f7691ce UI: Only render & allow Controls page if MDM is enabled (and user is authorized) (#9568)
## Make sure authorized users can only a) see and b) access the Controls
page if MDM is enabled

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-01-30 15:31:42 -08:00
Andrew Baker 9125741b6a Fix for typos (#9567)
Found a few typos before publishing on socials - fixed

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-01-30 18:03:04 -05:00
Martin Angers 8a137e2b5b Move host details mdm properties to new mdm object (#9505) 2023-01-30 16:40:11 -06:00
bb2801ac38 submitting new blogpost content (#9563)
adding new article for splunk , osquery, mitre attck

---------

Co-authored-by: Dave Herder <dave@fleetdm.com>
Co-authored-by: Andrew Baker <89049099+DrewBakerfdm@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-01-30 17:20:46 -05:00
Lucas Manuel Rodriguez 8163b7d8da Update live query selector logic (OR -> AND) (#9559)
See requirements in #8682.

Two assumptions on the implementation (@zayhanlon please take a look):
- Hosts explicitly selected to run always run the live query (no matter
the values on the selectors).
- When selecting `All hosts`, selecting any other platform or label is
kind of a no-op. We should look into graying out all the selectors if
the user selects `All hosts`.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- ~[ ] Documented any permissions changes~
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-01-30 18:35:56 -03:00
Charlie Chance adfdce3861 handbook: Breezy tutorial (#9564) 2023-01-30 13:47:00 -07:00
Jacob ShandlingandJacob Shandling 0698e693c7 UI: Controls page polish (#9560)
# Follow up for #9349

- Address remaining small styling, directory organization/naming issues,
other than masthead styles, which are addressed separately

# Checklist for submitter
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-01-30 12:26:34 -08:00
Jacob ShandlingandJacob Shandling 60712144f2 UI: Add automatic EnrollMdm modal (#9455)
# Addresses #9365 

# Implements
MDM enrollment modal that handles both automatic and manual enrollment
instructions:
- Automatic:
<img width="1181" alt="Screenshot 2023-01-20 at 4 33 50 PM"
src="https://user-images.githubusercontent.com/61553566/213829293-6d4a5053-9a3c-4f52-8cf8-a6607dc8df4e.png">
- Manual:

<img width="1158" alt="Screenshot 2023-01-20 at 4 35 04 PM"
src="https://user-images.githubusercontent.com/61553566/213829369-73ae779d-14a8-4aa7-9c6a-b97d046d0dc1.png">

- Also includes (by mistake, but might as well include them now) some
small bash scripts for use in MDM development
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` 
- [x] Updated testing inventory
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-01-30 11:44:33 -08:00
Luke Heath d3565dc032 Finalized new masthead styling (#9536) 2023-01-30 13:37:51 -06:00
Marcos Oviedo 72c91744fe Fixing issue on mdm_bridge table enrollment status information (#9557)
This relates to #9310 

The enrollment status was being wrongly set and this PR fixes that
2023-01-30 15:17:38 -03:00
Sharon Katz ed314592c3 CIS 5.2 fixes (#9549) 2023-01-30 12:52:33 -05:00
Martin Angers c64cf8f753 Document generating SCEP via fleetctl (#9503) 2023-01-30 10:46:58 -05:00
Marcos Oviedo 97c06791dc Adding new Windows MDM table to interact with the Windows MDM stack (#9448) 2023-01-30 11:29:29 -03:00
Mike McNeil eade58565f xprotect_meta: Improve table docs: Link to where to get the foreign key (#9543) 2023-01-27 17:58:11 -06:00
Mike McNeil 73b8f96f71 Make it so chrome_extensions shows up in a search for "browser plugins", same for firefox/ie/safari (#9540)
.
2023-01-27 17:44:05 -06:00
Luke Heath 77cfb3da30 Add frontend group to codeowners (#9542) 2023-01-27 17:35:38 -06:00
Mike McNeil 3833ef4c40 Tables: Create ie_extensions.yml (#9541)
for https://github.com/fleetdm/fleet/pull/9540/files
2023-01-27 17:27:04 -06:00
Eric c238b90ecc Website: Add RSS feeds for articles (#9526)
Closes: https://github.com/fleetdm/fleet/issues/6493

Changes:
- Added a new action, `get-one-rss-feed.js`. This action generates and
returns RSS feeds for article categories on fleetdm.com.
    - This action has one required input: `categoryName`.
- Lives at `/rss/[Article Category Name]` e.g.,
`fleetdm.com/rss/releases`
- If `articles` is provided as the category, it returns an RSS feed of
all articles published on our blog.
- Updated `view-basic-article.js` to set an `articleCategorySlug`
variable, that is used to link to the RSS feed for an article category
from an article page.
- Added a "subscribe" button to articles and article category pages that
links to an RSS feed for that category.
2023-01-27 16:58:53 -06:00
Gabriel Hernandez 091ee35ba6 implement macOS update content (#9469) 2023-01-27 16:25:53 -06:00
RachelElysia 70bfc06d0c Fleet UI: MDM Apple APN API (#9533) 2023-01-27 16:05:26 -05:00
Mo Zhu e85f189d33 Update QA process and filters (#9454) 2023-01-27 11:20:10 -08:00
RachelElysia de89304e4c Fleet UI: Fix table button icons misalignment (#9513) 2023-01-27 14:16:03 -05:00