Commit Graph
11685 Commits
Author SHA1 Message Date
Mike McNeil c538aa62c6 handbook: fix broken link (#18632) 2024-04-30 03:09:12 -05:00
Mike McNeil 7bf5dfde5f Update layout.ejs (#18631) 2024-04-30 03:00:43 -05:00
Mike McNeil c01d0ff82a Website: If org name + email specified but no matches, try again (#18629) 2024-04-30 01:40:06 -05:00
Mike McNeil 8252320c3b Fix 500 errors by ensuring organization exists (#18628) 2024-04-30 01:12:53 -05:00
Mike McNeil cdbe6055d1 Website: Improve enrichment (#18627) 2024-04-30 01:03:59 -05:00
Eric 31c67130d4 Website: Update searchBy criteria in get-enriched helper (#18626)
Changes:
- Removed the organization name search in the get-enriched helper to
improve organization enrichment.
2024-04-29 23:37:09 -05:00
Eric 7259ec6473 Website: Update save-questionnaire-progress (#18625)
Related to https://github.com/fleetdm/confidential/issues/6357

Changes:
- Updated `save-questionnaire-progress` to only call
`sails.helpers.salesforce.updateOrCreateContactAndAccount` is called
when a user's `psychologicalStage` changes.
2024-04-29 19:20:00 -05:00
Mike McNeil b09d34fa4b Website: Quick and dirty fix for signups (#18622)
Eric, please test fully before merging, this is just the quick and dirty
cut.
2024-04-29 19:01:47 -05:00
Robert Fairburn a4bd6aad04 engine_version in wrong place (#18624) 2024-04-29 18:41:11 -05:00
Luke Heath 9bd87ca87f Bump dogfood terraform to 8.0.mysql_aurora.3.05.2 (#18620) 2024-04-29 18:00:43 -05:00
Robert Fairburn 27a4071a89 Make terraform match prod RDS versions (#18621) 2024-04-29 17:58:17 -05:00
Eric 2ba0f01502 Website: update personalization on homepage and endpoint ops (#18616)
Closes: https://github.com/fleetdm/confidential/issues/6336

Changes:
- Updated personalization on the homepage and the endpoint ops page
2024-04-29 16:40:57 -05:00
Eric bde910a827 Website: Update get-enriched to return undefined. (#18614)
Changes:
- Updated the `iq/get-enriched` helper to return enrichment data as
undefined.
2024-04-29 16:29:23 -05:00
Michael Pinto 3f2d906717 Update security-audits description (#18611)
Adding a description and link for the 2023 penetration test.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-04-29 16:23:40 -05:00
Luke HeathandRachael Shaw a38fa0d517 Change calendar event name (#18579)
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-29 15:51:16 -05:00
Roberto Dip 05719633a1 add consistent MDM host lifecycle management (#18510)
The mantra for MDM lifecycle events is:

> - Noah: When MDM is turned on, install fleetd, bootstrap package (if
DEP),
> and profiles. Don't clear host vitals (everything you see on the Host
>      details page)
>    - Noah: On re-enrollment, don't clear host vitals.
>    - Noah: On lock and wipe, don't clear host vitals.
>    - Noah: On delete, clear host vitals.

This addresses issues:

- https://github.com/fleetdm/fleet/issues/17243
- https://github.com/fleetdm/fleet/issues/17481
- https://github.com/fleetdm/fleet/issues/17292
- https://github.com/fleetdm/fleet/issues/18030
- https://github.com/fleetdm/fleet/issues/18031
2024-04-29 16:43:15 -03:00
Michael PintoandRobert Fairburn 373e9153b7 Add 2023 penetration test (#18375)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-04-29 14:39:28 -05:00
Victor Lyuboslavsky bf0f6ec55a Added release-fleetd-base workflow. (#18194)
#16347

New GitHub workflow.
- Uses `tools/tuf/status/tuf-status.go` to check the latest
osquery/orbit/fleet-desktop versions
- Uploads https://download-testing.fleetdm.com/meta.json to keep track
of versions
- macOS: https://download-testing.fleetdm.com/fleetd-base.pkg
- Windows: https://download-testing.fleetdm.com/fleetd-base.msi

This version creates and uploads macOS and fleetd base packages to
https://download-testing.fleetdm.com

QA instructions updated in the issue. After QA, we will update the
workflow to upload to https://download.fleetdm.com
2024-04-29 11:51:40 -05:00
Mike McNeil b903e5258f Handbook: Make departmental page preambles consistent (#18594) 2024-04-29 11:22:54 -05:00
Rachael ShawandEric 895d4bc2f7 Use "Fleet's agent (fleetd)" naming in the docs (#18138)
For #16512

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-29 11:12:03 -05:00
Victor Lyuboslavsky 51f8e1de67 fleetd-chrome 1.3.0 release (#18546)
#18466 

The beta release is already available at:
https://chrome-beta.fleetdm.com/updates.xml
2024-04-29 10:55:37 -05:00
Victor Lyuboslavsky fa9373a68f Updated host_operating_system INSERT. (#18556)
#16562 

Updated MySQL host_operating_system insert statement to reduce table
lock time.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
  - Existing tests provide full coverage of the changes.
- [x] Manual QA for all new/changed functionality
2024-04-29 10:54:50 -05:00
Victor Lyuboslavsky d0f0d3d017 When updating a policy's 'platform' field, the aggregated policy stats are now cleared. (#18415)
#18157
When updating a policy's 'platform' field, the aggregated policy stats
are now cleared.

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-29 10:20:59 -05:00
JD 0b66bc4a9b Add Windows AV policy (#18551)
Adds policy and query to verify Windows Defender is installed and
working on Windows. https://github.com/fleetdm/fleet/issues/18494
2024-04-29 07:53:04 -07:00
Jacob Shandling ea86f9ed0f UI –Restore missing tooltips (#18598) 2024-04-29 10:48:35 -04:00
Mike McNeil 61e3e0c8ab Handbook: Update product-groups.md (#18590)
(The numbers were confusing.  It was like: "(1) P0, (2) P1, (3) P2")
2024-04-29 09:34:47 -05:00
Dante Catalfamo 3aa9437d35 fleetctl get teams prints team id (#18395)
#18394
2024-04-29 09:56:04 -04:00
Dante Catalfamo 9b3d6e590d Linux Wipe Async (#18372)
#18173

Creates a detached child shell process to wipe the host. This lets the
main shell script return and tells the server the command has completed,
clearing it from the run queue.

Now shuts the host down after being wiped instead of leaving it running
without files like a zombie
2024-04-29 09:55:05 -04:00
Martin Angers 26b83de925 Fix sending of "install Fleetd" commands repeatedly on Azure-enrolled Windows devices (#18453) 2024-04-29 08:48:54 -04:00
JD 8eec8e5371 Update spelling & grammar in pwd_policy.yml (#18547)
Markdown updates to spelling and grammar.
2024-04-26 18:02:16 -05:00
Eric 4bac6ca321 Website: update SOC 2 link in footer (#18577)
Closes: https://github.com/fleetdm/confidential/issues/6319

Changes:
- Updated the website footer ("SOC2 Type 2 certified" » "SOC2 Type 2")
2024-04-26 15:37:47 -05:00
Rachael Shaw 8bcdd93f2c Update fleetctl package usage description (#18545)
Slight verbiage change requested by @noahtalerman re: #16512
2024-04-26 15:10:28 -05:00
Dante Catalfamo 1cb670a3c1 Tools: Choose Enrollment VM base image using environment variable (#18070)
Good for running out older versions of macOS during an semi-automated
test
2024-04-26 15:30:58 -04:00
RachelElysia 13f4703f01 Fleet UI: Activity log expiry settings (#18243) 2024-04-26 15:14:49 -04:00
Isabell Reedy ee6c59d01f Add Gabe Lopez to engineering page and MDM product group (#18523) 2024-04-26 14:02:41 -05:00
Lucas Manuel Rodriguez 3e5f7d5cf5 Fix users query for linux devices (#18454)
#18424

I believe the hosts users for linux broke when we added Chrome support
(https://github.com/fleetdm/fleet/pull/10281/files).

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [x] Added/updated tests
- ~[ ] If database migrations are included, checked table schema to
confirm autoupdate~
- ~For database migrations:~
- ~[ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.~
- ~[ ] Confirmed that updating the timestamps is acceptable, and will
not cause unwanted side effects.~
- ~[ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).~
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2024-04-26 15:05:34 -03:00
Victor Lyuboslavsky 9ff682e0ff Windows orbit.exe and fleet-desktop.exe are now signed. (#18201)
#17187 

Windows orbit.exe and fleet-desktop.exe are now signed.

Signed fleet-desktop.exe artifact at:
https://github.com/fleetdm/fleet/actions/runs/8834788809
Signed orbit.exe artifact at:
https://github.com/fleetdm/fleet/actions/runs/8834817940

For signing fleetctl.exe, opened a new issue:
https://github.com/fleetdm/fleet/issues/18540
2024-04-26 12:46:23 -05:00
Eric d74f5cd6ea Website: Update psychologicalStage changes in save-questionnaire-progress.js (#18498)
Closes: https://github.com/fleetdm/confidential/issues/6215

Changes:
- Updated how psychological stages are set when a user completes a step
of the get started questionnaire

> Note: I'm creating this as a draft PR until I review these changes to
make sure this is what we want to do.
2024-04-26 12:42:48 -05:00
George Karr b75545ba26 Adding changes for patch 4.49.1 (#18573) 2024-04-26 12:35:44 -05:00
Roberto Dip 08b5e1c7b5 fixed a bug causing servers with Windows MDM only to crash (#18568) 2024-04-26 10:09:01 -05:00
Eric a6c09cb5f4 Website: Update update-or-create-contact-and-account helper (#18565)
Changes:
- Updated the `salesforce/update-or-create-contact-and-account` helper
to not to try to use `enrichementData.employer.emailDomain` if an
`organization` was provided.
2024-04-26 09:13:46 -05:00
Lucas Manuel Rodriguez 1b26129465 Delete expired activities in cleanup cron (#18441)
#16989

API draft PR: #17809.
UI draft PR: #18243.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- ~[ ] If database migrations are included, checked table schema to
confirm autoupdate~
- ~For database migrations:~
- ~[ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.~
- ~[ ] Confirmed that updating the timestamps is acceptable, and will
not cause unwanted side effects.~
- ~[ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).~
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2024-04-26 07:22:31 -03:00
Eric 75511b3d26 Website: update values passed into helper & don't run the Salesforce helper in development environment. (#18560)
Changes:
- Updated the default value that is being sent as a
primaryBuyingSituation
- Updated the updateOrCreateContactAndAccount Salesforce helper to do
nothing in development.
2024-04-26 03:33:26 -05:00
Eric 262b5644ba Website: pin version of jsforce (#18559)
Changes:
- `"jsforce": "^1.11.1",` » `"jsforce": "1.11.1",`
2024-04-26 02:00:23 -05:00
Mike McNeilandEric e4f1339d6e Website: sails.helpers.iq.getEnriched() and use code instead of nocode (#18538)
Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-26 01:50:31 -05:00
Jason Lewis 255cea08cc removing CSE role from website (#18557) 2024-04-25 17:56:11 -05:00
Marko LisicaandRachael Shaw a0a8579b56 API design: API endpoint for updating a host's manual labels (#16979)
API design for: 
- #16767

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-25 15:53:01 -05:00
Luke Heath 3886a322fd Move freeze start time to 11am pacific (#18549) 2024-04-25 14:34:02 -05:00
Roberto Dip 08866bcc1c fix js-lint CI check (#18542)
it's currently failing on `main`
2024-04-25 16:27:34 -03:00
Noah Talerman ef767de2f9 Update pricing-features-table.yml (#18250)
- Deploy security agents coming next sprint
- Plan for customer-reedtimmer has changed to hosting S3 bucket for
Munki
2024-04-25 14:56:30 -04:00