Commit Graph
1117 Commits
Author SHA1 Message Date
Zachary Wasserman c269886389 Fix target search behavior with - and + symbols (#2067)
This PR makes the target search more user-friendly by stripping symbols that
have a special interpretation in MySQL FTS.

Closes #2017
2019-07-03 10:47:43 -07:00
Zachary Wasserman 261b7f916c Save details provided by host during enrollment (#2066)
When an osqueryd agent sends an enroll request it automatically sends
some details about the system. We now save these details which helps
ensure we send the correct platform config.

Closes #2065
2019-07-01 16:50:04 -07:00
Zachary Wasserman f3df07318c Improve server and browser performance on host dashboard (#2061)
- Prevent a second (unnecessary) retrieval of all hosts when page loaded.
- Disable automatic reloading of hosts when over 100 hosts are present.

This is a stopgap solution to reduce the performance impact of
repeatedly loading many hosts. The final solution will be to implement
proper pagination.
2019-06-26 16:03:47 -04:00
Zachary Wasserman 2060d001c6 Run correct query even after targets are set (#2060)
This PR corrects the query editor behavior to run the correct query in
all (tested) circumstances.

Fixes the original issue in #2028 and #2054 (introduced by the fix in #2030)

Closes #2054
2019-06-12 10:39:50 -07:00
Zachary Wasserman bf6c6b3a40 Update docs and Makefile to use Github releases for binaries (#2055) 2019-06-04 13:42:41 -04:00
Zachary Wasserman eb212116dc Merge pull request from GHSA-6g7f-8qm4-f7h8
When LOGIN authentication was used, Fleet would send SMTP credentials
even if the connection the SMTP server was not secured via TLS.

Copying the pattern used in the standard library PlainAuth
implementation, we now only send credentials when the connection is
secure or the server is localhost.
2019-05-30 15:02:17 -04:00
Zachary Wasserman bf36146320 Modify updating documentation to point to Github releases page (#2045) 2019-05-16 17:53:54 -04:00
Zachary Wasserman caae22593f Add 'id' prefix to generated SAML IDs (#2046)
Though the SAML spec does not specify what the contents of the ID must
be, the Azure IdP implementation prohibits it beginning with a number.
We follow their suggestion to prefix with 'id'.

See https://docs.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol.

Fixes #2044.
2019-05-16 13:51:42 -07:00
Zachary Wasserman 918b9facd1 Update changelog for 2.1.1 release (#2036) 2019-04-25 14:01:37 -07:00
Zachary Wasserman 9ef377a2b0 Run correct query when navigating to query by URL (#2030)
Fixes a bug in which the default query would run rather than the query
displayed in the editor unless that query was manually edited after the
page loaded.

Fixes #2028
2019-04-25 11:00:35 -07:00
Eduardo Lopez ad12ee4db4 Allow Firehose authentication using sts credentials (#2034) 2019-04-24 16:30:16 -07:00
Zachary Wasserman 75868a7005 Do not panic after error reading config file (#2033)
Fixes #1445
2019-04-23 15:59:02 -07:00
Zachary Wasserman 5b486a1849 Update logic for setting primary NIC (#2032)
- The most active NIC will be picked even if a formerly more active
  interface still exists (previously, a NIC would stay primary as long
  as it existed).
- Ignore link-local and loopback interfaces when choosing the primary.
- Fix bugs in which update status of the primary interface could be
  reported incorrectly.

Fixes #2020
2019-04-23 15:58:45 -07:00
Zachary Wasserman 3b349304fb Disable editing of logged in user email in admin panel (#2031)
Doing so has long resulted in an error when submitting the form. This
disables the input field when editing the logged in users details in the
admin panel.

The logged in user can still change their own email using the "Account
Settings" page accessed in the top left of the sidebar.
2019-04-23 15:58:32 -07:00
Zachary Wasserman 1f7cffba11 Fix newlines in log output (#2029)
Fixes a regression introduced in 2.1.0 in which separate log lines are
no longer output separated by a newline. Now log lines in both output
plugins will do so.
2019-04-17 15:55:31 -07:00
Zachary Wasserman ab948beb71 Update changelog for 2.1.0 release (#2027) 2019-04-09 11:24:18 -07:00
Zachary Wasserman 955972e1a1 Cleanup incoming hosts that do not complete enrollment (#2026)
Deletes hosts that have enrolled but never updated their details (these
hosts show up as "incoming host" in the UI).

Closes #1438
2019-04-09 11:11:11 -07:00
Zachary Wasserman 1acebec4b6 Close flate writer before base64 encoding SAML authorization request (#2025)
Fixes an issue in which the requests are not able to be read by some SAML
request decoders.

Fixes #2024
2019-04-09 09:23:22 -07:00
Zachary Wasserman e59714242e Add Firehose logging capabilities for result and status logs (#2022)
- Refactor configuration for logging to use separate plugins
- Move existing filesystem logging to filesystem plugin
- Create new AWS firehose plugin
- Update documentation around logging
2019-04-08 11:47:15 -07:00
Zachary Wasserman 7153e0043c Update email contents and subjects (#2023)
- Refer to "Kolide" as "Fleet"
- Fix link to documentation
- Remove suggestion to email support@kolide.co
2019-04-04 18:56:15 -04:00
Zachary Wasserman eb4770f730 Use host.docker.internal to connect test osqueryd instances (#2019)
Newer versions of Docker support this hostname, which allows test
osquery instances to be started with less configuration.
2019-04-02 08:31:09 -04:00
Zachary Wasserman 992151fb8f Clarify labels UI (#2012)
- Clarify language
- Add note about label queries being immutable

Closes #1384
2019-03-10 13:51:25 -07:00
Zachary Wasserman 03c23973ca Small cleanup in live query code (#2011)
- Additional comments
- Fix some cases where websocket may not be closed appropriately
2019-03-10 13:51:11 -07:00
Joseph Henrich 878879faa3 Update uses of config_tls_refresh to config_refresh in docs (#2009) 2019-03-09 13:48:19 -08:00
Zachary Wasserman 2b2866a413 Tooltip for Add User button indicating why it is disabled (#2010) 2019-03-07 12:01:41 -08:00
seph 7f316bf306 Upgrade lodash (#2005)
There’s a minor security alert in lodash < 4.17.11.  Update to quiet security scanners
2019-03-07 14:59:11 -05:00
Zachary Wasserman 4135ad7d3f Hide labels for platforms with no hosts. (#1998)
Rather than displaying 0 hosts for each of the platforms, remove the platform
listing. The platforms will appear once they have a host.
2019-02-12 12:03:55 -08:00
Zachary Wasserman c8229cc0d6 Replace uses of the term "Kolide" with "Fleet" (#1999)
Almost two years ago, we began referring to the project as Fleet, but there are
many occurences of the term "Kolide" throughout the UI and documentation. This
PR attempts to clear up those uses where it is easily achievable.

The term "Kolide" is used throughout the code as well, but modifying this would
be more likely to introduce bugs.
2019-01-24 09:39:32 -08:00
Zachary Wasserman 8ca0358bf2 Update changelog for 2.0.2 release (#1996) 2019-01-17 16:26:02 -08:00
Zachary Wasserman 6ec951ab73 Default scheduled query name if not specified (#1995)
Brings the behavior of the server in line with the documentation, by using the
query name if the scheduled query name is not specified in a pack spec.

Closes #1990
2019-01-17 15:59:42 -08:00
Zachary Wasserman fb9be42a45 Add jwt_key to the example Fleet configurations (#1993) 2019-01-17 11:26:44 -08:00
Zachary Wasserman 38d280bca1 Add FAQ for Fleet deployments (#1992) 2019-01-16 15:28:38 -08:00
Zachary Wasserman 76591eaee2 Add documentation on OWASP Top 10 (#1991)
Thanks to @benbasscom who interviewed me and put together this document.

Closes #1951
2019-01-16 12:50:50 -08:00
Zachary Wasserman ca84f84078 Add query editor support for control-return (#1979)
- Control-return in the editor will now run the query

Closes #1631
2019-01-15 11:06:52 -08:00
Zachary Wasserman 16cf164adb Add --timeout flag to fleetctl query (#1989)
This change makes it easier to run `fleetctl query` within scripts, by providing
an option to halt the query after a timeout has passed.

Closes #1987
2019-01-15 11:06:22 -08:00
Joseph Henrich 4cc41b9485 Fix typo in query yaml example (#1984) 2019-01-14 13:48:44 -08:00
Zachary Wasserman 6767369d48 Upgrade React to version 16 (#1983)
- Update all associated dependencies
- Very minimal changes to components
- Extensive refactoring for broken tests

Closes #1978
2019-01-14 13:45:28 -08:00
James Thomas 5e5e4f3918 Add Support for SMTP LOGIN Authentication Method (#1988)
This PR adds support for the SMTP LOGIN authentication method. Office 365 Exchange removed support for PLAIN authentication some time ago, and only supports LOGIN and an OAuth2 authentication method. This patch has been tested with a licensed O365 account. This method should also be usable with any other email server that advertises LOGIN in its 250-AUTH response.

Note: If using this with O365, the account used must not have MFA enabled.

Closes #1663
2019-01-14 12:35:23 -08:00
Zachary Wasserman f7875dc19e Clarify platform overrides in fleetctl docs (#1985) 2019-01-11 09:21:28 -05:00
Zachary Wasserman 546bfc0e03 Add documentation on server_tls_compatibility flag (#1982) 2019-01-07 15:03:51 -08:00
Zachary Wasserman dc4b97d15f Fix React deprecation warnings (#1976)
- Refactor imports of PropTypes to use the prop-types package
- Upgrade dependencies that were setting off deprecation warnings
2019-01-06 17:25:33 -08:00
Zachary Wasserman 085415aa7b Allow selection of query targets by UUID in URL params (#1972)
Closes #1934
2019-01-06 17:21:15 -08:00
blaedj be85377326 Add 'get hosts' command to fleetctl (#1977)
This commit:
 - adds a new sub-command for fetching hosts to `fleetctl get` command.

Why?
 - this allows for listing of all hosts via the fleetctl interface.
 There may be additional attributes of the host that we'd like to
 display, but this should be a good start.

Closes #1962
2019-01-03 16:19:23 -06:00
Zachary Wasserman 759a69b5b7 Upgrade Bourbon to 5.1.0 and fix deprecation warnings (#1973)
- Replace uses of deprecated Bourbon helpers with raw CSS
- Add autoprefixer into the build chain to prefix the now removed helpers

This process was achieved by running through each of the deprecation warnings and using the following bash function to replace it in all files:

```
function bourbon-deprecate() {
    grep -rl "@include $1" ./frontend --exclude-dir=.git | xargs sed -i '' -E "s/@include $1[(](.*)[)]/$1: \1/g"
}
```

For some helpers, this did not result in valid CSS, so manual modifications were made.

Closes #1189 #1274
2019-01-03 12:46:55 -08:00
Zachary Wasserman 0f99b454a0 Add username support to fleetctl setup (#1971)
Username continues to default to email if not specified in the options.

Closes #1970
2019-01-02 15:27:37 -08:00
Zachary Wasserman b752073d05 Fix slow return of results in fleetctl query with high host count (#1965)
Prior to this change, the live query status was calculated after each retrieved
result. This was fine at a low host count, but when more hosts are added, doing
this calculation becomes slower.

Now, the status is only calculated every 5 seconds, while results can be
streamed continuously.

Fixes #1895
2018-12-20 17:44:49 -08:00
Jordan R 1c6ab46e40 Properly convert intervals in fleetctl convert (#1969)
Fixes a bug in which unquoted integers end up as 0 after conversion.
2018-12-20 17:43:00 -08:00
Zachary Wasserman c9334f1c83 Fix missing word in adding hosts to fleet docs (#1964) 2018-12-07 15:20:44 -08:00
Zachary Wasserman d01727dff2 Update changelog for 2.0.1 release (#1961) 2018-11-26 11:18:15 -08:00
Zachary Wasserman 0b21a3d42c Delete soft-deleted entities (#1959)
Avoids potential bugs in which soft-deleted entities are returned from database
queries (soft-deletion is now deprecated), but some records may still exist.

Fixes #1956
2018-11-20 17:41:55 -08:00