Commit Graph
9510 Commits
Author SHA1 Message Date
Adam Gashlin e349f6e205 Show kickstart flag warning only when set (#13924)
The initial implementation of this warning in #12072 used the same `if
!c.Bool("disable-kickstart-softwareupdated")` check as the old code, but
the body of the `if` was the kickstart which was being skipped, now it
is the warning. So currently the warning is showing only when the flag
is *not* used.

I'm not building this software myself, just an end user who had a
version of this assigned to my machine. Since I noticed the warning in
logs and figured I'd submit a PR, please feel free to take it over to
finish the checklist.
2023-10-27 17:08:50 -03:00
Zach Wasserman f6db734e81 Update default TUF root keys (#14215)
Update to the new root.json for the additional timestamp, snapshot, and
targets keys.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-10-27 15:35:09 -03:00
guangwu 33858d7301 chore: remove refs to deprecated io/ioutil (#14485)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>
2023-10-27 15:28:54 -03:00
Lucas Manuel Rodriguez 5d827133c2 Add debug log for troubleshooting (#14602)
This PR just adds a debug log for #11924.
2023-10-27 14:14:41 -03:00
Gabriel Hernandez 019377368d update copy for ABM terms banner message (#14774)
relates to #13012

Updates the copy of the ABM terms banner message to reflect that Apple
may take a long time to update that the terms have been accepted.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2023-10-27 18:06:10 +01:00
RachelElysia 0b73f43ebd Fleet UI: Add usage statistics always on for premium users to to app settings page (#14604) 2023-10-27 13:05:06 -04:00
RachelElysia 4a9ef5ae07 Fleet UI: Surface policy resolution to observers in UI (#14574) 2023-10-27 13:04:29 -04:00
RachelElysia 386f2c6171 ChromeOS: [bug] Surface chrome extensions as software for ChromeOS hosts (#14624) 2023-10-27 13:04:07 -04:00
Victor Lyuboslavsky eac0838b47 Added Linux instructions for running fleetd extension. (#14770) 2023-10-27 12:00:26 -05:00
Benjamin Edwards 71709e5ef9 Handle RPM upgrade in %postun script (#14379)
This pull request addresses a key aspect of the RPM upgrade process -
handling of scripts during upgrades vice pure deletion events.

An RPM upgrade operation consists of both an Install and an Uninstall
operation, meaning that during an upgrade, our %postun script is run and
previously, it was causing the accidental deletion of binaries needed
for the upgrade.

To prevent this unwanted removal during upgrade scenarios, the %postun
script now checks for the execution scenario in which it finds itself.
2023-10-27 12:29:09 -04:00
Mike McNeil cf95e1ccda Handbook: Demand: Run an ad (#14777) 2023-10-27 11:22:50 -05:00
0eadf45f96 Handbook: Update why-this-way.md (#14718)
Co-authored-by: Sampfluger88 <108141731+Sampfluger88@users.noreply.github.com>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2023-10-27 10:57:17 -05:00
Roberto Dip 683c1dfe95 allow macOS hosts that turned on MDM via SSO to renew their enrollment (#14739)
for #14238
2023-10-27 12:42:30 -03:00
Jahziel Villasana-Espinoza c570ef1e21 feat: make analytics always true for premium customers (#14607)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2023-10-27 11:41:18 -04:00
Noah TalermanandSampfluger88 80fa6ac0be Update features.yml (#14727)
- End user initiated MDM migration is premium for now
- Move customer requests & key dates to features.yml

---------

Co-authored-by: Sampfluger88 <108141731+Sampfluger88@users.noreply.github.com>
2023-10-27 10:31:58 -05:00
Robert Fairburn dae94c3129 Fix ACL Errors (#14525) 2023-10-27 10:20:07 -05:00
Gabriel Hernandez 4d7410d7ae Fixs multiple banners on host details page when we only want to show ABM expired banner (#14772)
relates to #13010

This fixes the issue where we only want the user to see the ABM banner
on the Host Details page.

We've pulled out the rendering logic of the banners into its own
component and suppress the other banners if the ABM expired banner is
already showing.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2023-10-27 16:05:19 +01:00
Robert Fairburn aa843e7725 Initial windows-only mdm option in terraform addon module (#14639) 2023-10-27 07:09:20 -05:00
Rachael ShawandEric ae669e1749 2023-10-17 Update osquery schema version & regenerate merged schema (#14436)
When running a live query recently, I noticed some columns in the
results that we didn't have documented, and realized we weren't using
the latest osquery schema version when regenerating the merged schema.

According to the docs, [we support the latest version of
osquery](https://fleetdm.com/docs/using-fleet/enroll-hosts#supported-osquery-versions),
so figure we ought to update the schema version to the latest.

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-10-26 18:04:23 -05:00
JD 1a127b5b19 4.39.0 release article (#14764)
4.39.0 release article. https://github.com/fleetdm/fleet/issues/14240
2023-10-26 15:36:06 -07:00
Eric 2216132267 Update the deploy-fleet-website workflow (#14756)
Clsoes: https://github.com/fleetdm/fleet/issues/14162

Changes:
- Added two steps to the `deploy-fleet-website` workflow to prevent
errors when pushing to the Heroku git repo:
1. The first step runs a command to install the `heroku-repo` plugin in
the Heroku CLI.
2. The second step runs a command to reset the Heroku git repo for the
Fleet website. (This has no impact on the live Heroku app)
2023-10-26 17:24:56 -05:00
Roberto Dip 5dfc72b2a1 allow to use --context in fleetctl mdm run-command (#14665)
for #13712
2023-10-26 19:09:31 -03:00
Victor Lyuboslavsky b3462770fe Added Apple Rapid Security Response version to host details. (#14597)
#12888 

Updated code so that macOS version returns RSR, if available. For
example: `14.3.1 (a)` as opposed to simply `14.3.1`
This feature is supported by osquery with the `extra` column in
`os_version` table.

Since I could not get a real macOS running a version with RSR, I did the
following manual checks:
- ensured that `extra` column from osquery `os_version` table was being
received for processing
- hard coded the `extra` column result on the server and verified the OS
version was correct in GUI and REST APIs

Main testing was done by Zach following these
[instructions](https://docs.google.com/document/d/18xsCEFlpcBL-5EbQhvmUNuJz3XM0Ak-NfCCwxEQXVic/edit)
- I confirmed that the one incorrect query result was due to a bad query

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2023-10-26 16:57:54 -05:00
Lucas Manuel Rodriguez 2fd6fa4e04 Vulnerability processing should ignore software without version (#14612)
#13615

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-10-26 18:28:08 -03:00
Roberto Dip 3869b41041 prevent a bug preventing .mobileconfig uploads in Linux/Windows (#14716)
For #14056, per the [mdn web
docs](https://developer.mozilla.org/en-US/docs/Web/API/File/type)

> Note: Based on the current implementation, browsers won't actually
> read the bytestream of a file to determine its media type. It is
assumed
> based on the file extension; a PNG image file renamed to .txt would
give
> "text/plain" and not "image/png". Moreover, file.type is generally
> reliable only for common file types like images, HTML documents, audio
> and video. Uncommon file extensions would return an empty string.
Client
> configuration (for instance, the Windows Registry) may result in
> unexpected values even for common types. Developers are advised not to
> rely on this property as a sole validation scheme.
2023-10-26 18:20:24 -03:00
Roberto Dip 001120274c adjust response status code for mdm/apple/enqueue (#14666)
For #14529
2023-10-26 18:20:11 -03:00
Roberto Dip 6c42287914 allow to set an orbit destination via env variable (#14658)
for #14657. Seems like we're not documenting any of the orbit flags.
2023-10-26 18:19:59 -03:00
Eric cfd0260b36 Website: Remove /handbook/sales redirect (#14760)
Changes:
- Removed the redirect for `/handbook/sales`. It is currently
redirecting to `/handbook/customers/` (which redirects to
`/hanbook/sales`, creating an infinite redirect loop.)
2023-10-26 15:50:58 -05:00
gillespi314 c10ee875f2 Fix validations for applying MDM config changes (#14517) 2023-10-26 15:48:32 -05:00
Luke Heath 653aeceb06 Prepare v4.39.0 (#14647) 2023-10-26 15:07:58 -05:00
Sampfluger88 402653715b Fix Sales link (#14759)
...
2023-10-26 14:54:02 -05:00
Eric a5fff556c1 Website: Update handbook page script to not create a link to handbook/company/handbook page in handbook index. (#14755)
FYI @Sampfluger88 

Changes:
- Updated the handbook page script to:
   - Add comments explaining what links are added to the handbook index.
   - Exclude the handbook/company/handbook page from the handbook index.
2023-10-26 13:29:04 -05:00
RachelElysia 06aec6401f Fleet UI: Manage queries page uses URL params as source of truth for table and inherited table views (#14750) 2023-10-26 13:35:55 -04:00
Sampfluger88 0b650de294 Handbook/sales#submit-a-customer-contract-for-legal-review (#14747)
Conflicts with the original PR caused the need for 2 separate PRs where
there could've been a single pull request
https://github.com/fleetdm/fleet/pull/14746

...
2023-10-26 04:11:45 -05:00
Marko Lisica de5695659a Batch-apply scripts: parameters documented incorrectly (#14653)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-10-26 10:59:10 +02:00
Sampfluger88andEric 5ad4b7a36b Update handbook index to only show pages in the /handbook/company/ folder (#14746)
...

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-10-26 03:38:33 -05:00
Sampfluger88 ba554ab256 Revert "Update README.md"
This reverts commit 6a29ae48635ceaf04c44cd21c37df6eef6275051, reversing
changes made to 65d95b54897204327e614925a323dfb6c7745ef2.
2023-10-26 01:07:18 -05:00
Lucas Manuel RodriguezandJahziel Villasana-Espinoza fd99fd4121 Add optimizations for query reports at scale (#14710)
#7766

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.~
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes (docs/Using
Fleet/manage-access.md)~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~

---------

Co-authored-by: Jahziel Villasana-Espinoza <jahziel@fleetdm.com>
2023-10-25 19:20:27 -03:00
Sampfluger88 3f76c631d4 Handbook/sales#submit a contract for legal review (#14741)
... ...
2023-10-25 17:04:29 -05:00
Sampfluger88 462beec609 FIx broken "Contract review" link (#14737)
...
2023-10-25 15:39:43 -05:00
Lucas Manuel Rodriguez 3d420e71ac Oncall: Update fleetd release guide (#14681)
I added the commands that we use when releasing new versions of fleetd
components to `edge` and when promoting `edge` to `stable`.
2023-10-25 12:13:25 -03:00
Eric c12af96f7d Website: Consolidate product categories on homepage. (#14728)
Closes: #14711

Changes:
- Updated the homepage layout and styles to match the latest wireframes.
2023-10-25 09:03:45 +09:00
Noah Talerman e6b809b043 Story issue template: deduplicate (#14663)
- Remove doc checkbox from "Engineering" section
2023-10-24 16:02:29 -04:00
dependabot[bot] 4aa1301550 Bump ossf/scorecard-action from 2.1.2 to 2.3.1 (#14723) 2023-10-24 14:25:02 -05:00
Noah Talerman a7b7706228 Update Product handbook: Remove "Bug review" ritual (#14720)
- Remove "Bug review" ritual in an effort to remove recurring meetings. 
- Head of Product Design (Noah) is the DRI of keeping the "Sprint
backlog" column in the bugs board prioritized. They'll get input from
EMs on priority async and during 1:1 calls.
- Add note about recording product KPI during "Pre-sprint
prioritization"
...
2023-10-24 14:11:43 -05:00
Sampfluger88andMike McNeil 514fe52e61 Handbook/bizops#contactus (#14703)
- Add admin permissions bullet in contact-us

@JoStableford FYI
...

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-10-24 12:31:39 -05:00
f50243fe20 Windows MDM article (#14566)
Addresses: https://github.com/fleetdm/confidential/issues/3914

- Consolidate changes from #13943, #14184, and #14249 into article
- Remove "Window setup" doc page.

TODO: @spokanemac to add an image for the article and appropriate meta
tags so that the article shows up on fleetdm.com/guides

---------

Co-authored-by: spokanemac <jack@jdstrong.com>
Co-authored-by: JD <spokanemac@users.noreply.github.com>
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-10-24 08:19:18 -07:00
Martin Angers d0f276cd75 Log when ABM terms have changed without requiring debug logging (#14712) 2023-10-24 09:51:34 -04:00
Luke Heath 508d65d49e Remove g-infra product group (#14693)
...
2023-10-23 21:46:41 -05:00
Luke HeathandNoah Talerman 827e0cd533 Remove to be scheduled column from bugs board (#14679)
- Redundant; tickets should go straight from drafting > sprint backlog. 
- Remove `Needs prioritization` category. Aged out bugs either are
scheduled for the next sprint (if there's capacity) or close.
...

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2023-10-23 21:07:00 -05:00