Commit Graph
6826 Commits
Author SHA1 Message Date
Eric 9a8024d5c9 Website: Update signup.js error handling and increase timeout in Sandbox provisioner request (#9818)
Changes:
- Updated `signup.js` to:
   - Add a new exit: `requestToSandboxTimedOut`
- Increased the timeout on the request to the Fleet Sandbox provisioner
from 5000ms to 10000ms
- Changed the error thrown when a request times out to a logged warning.
- return the `requestToSandboxTimedOut` exit when a request to the Fleet
Sandbox provisioner times out.
- Added an error message to the Sandbox registration page for when
requests time out
2023-02-14 11:58:12 -06:00
Mike ThomasandEric 0ce8c65960 Update mdm and compliance landpages (#9814)
- changed /device-management to a teaser layout as per this [Slack
thread](https://fleetdm.slack.com/archives/C01ALP02RB5/p1676053098600709).
- updated pre-header styling on /device-management and /compliance
- updated badge in the navigation to say "Limited beta".

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-14 11:19:04 -06:00
Gabriel Hernandez 52d0078bbc check disk encryption key from host details page (#9691)
related to https://github.com/fleetdm/fleet/issues/8708

This allows a user to check a disk encryption key for a host on the host
details page.

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2023-02-14 17:00:36 +00:00
Noah Talerman 1c44d54454 MDM docs: Update migration instructions (#9820)
- For automatically enrolled hosts, add extra step to
first unassigned hosts from old MDM and then assign hosts to Fleet
2023-02-14 11:51:35 -05:00
Noah Talerman b3f5683428 Hosts page UI: Fix MDM tooltips (#9819)
- Switch **MDM status** and **MDM server URL** tooltips
2023-02-14 11:50:10 -05:00
gillespi314 f1227d7303 Add authz and datastore methods for mdm config profiles (#9781) 2023-02-14 09:12:18 -06:00
Sharon Katz 9125263c14 add details to CIS label (#9811) 2023-02-14 10:05:44 -05:00
Roberto Dip 0f5a35061e don't filter DEP hosts by OS before ingesting and improve logs (#9815)
Related to https://github.com/fleetdm/fleet/issues/9653 I couldn't find
any documentation to back this up, but I have a strong suspicion that
the `os` field in the device sync response might come empty in some
scenarios (particularly, when a laptop is brand new, which is hard to
reproduce 😅)

My thoughts are:

1. For the recently purchased MacBooks,
`IngestMDMAppleDevicesFromDEPSync` didn't create an entry in the
database, BUT `nanodep.Assigner.ProcessDeviceResponse` correctly
assigned a DEP profile (the devices were able to enroll). Both methods
filter by `op_type` but only ours filters by `os`.
2. I think this is safe-ish to do, as you will normally assign a MDM
server per device type in ABM

![image](https://user-images.githubusercontent.com/4419992/218732609-0936e3a9-cadf-4485-9aa4-af2c9398cff9.png)
3. I have added extra logs to try to prove this hypothesis next time a
brand new device comes in, let's keep an eye on and re-evaluate this
approach.
2023-02-14 10:23:19 -03:00
JD 35e513adf7 Spelling Correction (#9799)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-14 09:50:37 -03:00
Mike ThomasandEric 8b99dc9943 create new landing page called /compliance (#9787)
- created a new page on fleetdm.com called /compliance
- updated the main nav to include this page under 'Platform'

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-14 08:06:02 +09:00
Roberto Dip 119ada71da fix XML formatting of RemoveProfile command (#9805)
potential fix for https://github.com/fleetdm/fleet/issues/9802, I still
can't reproduce locally but it might be that ngrok is doing some magic
encoding/decoding the bytes transferred.
2023-02-13 17:20:43 -03:00
Jacob ShandlingandJacob Shandling d8bb038f85 Fix sentence casing bug (#9803)
# Addresses #9772 
![Screenshot 2023-02-13 at 9 59 00
AM](https://user-images.githubusercontent.com/61553566/218536112-a6e0f0ae-1f18-4b86-85d3-39c6cbb1fabc.png)

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-13 10:29:14 -08:00
Charlie Chance 6e0626a01c handbook: security account recovery process update (#9804) 2023-02-13 11:15:26 -07:00
Nathanael Holliday 26931c178d Do not solicit check (#9467)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-13 10:57:38 -07:00
dependabot[bot] 47543707ac Bump http-cache-semantics from 4.1.0 to 4.1.1 (#9685)
Bumps
[http-cache-semantics](https://github.com/kornelski/http-cache-semantics)
from 4.1.0 to 4.1.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kornelski/http-cache-semantics/commit/24496504352199caf360d1b4d4a01efdc8a7249e"><code>2449650</code></a>
Update mocha</li>
<li><a
href="https://github.com/kornelski/http-cache-semantics/commit/560b2d8ef452bbba20ffed69dc155d63ac757b74"><code>560b2d8</code></a>
Don't use regex to trim whitespace</li>
<li><a
href="https://github.com/kornelski/http-cache-semantics/commit/b1bdb92638426fab978f31e1330b6833015cabf0"><code>b1bdb92</code></a>
Remove linting package zoo</li>
<li><a
href="https://github.com/kornelski/http-cache-semantics/commit/c20dc7eeca608339143857953ee7ed9343fe6d3d"><code>c20dc7e</code></a>
Cache 308</li>
<li>See full diff in <a
href="https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=http-cache-semantics&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 10:19:15 -06:00
RachelElysia 2c4c3a87ea Fleet Documentation: Update agent options and enrollment secret documentation (#9565) 2023-02-13 10:45:37 -05:00
Jarod Reyes f97e760ab8 Update how-to-submit-and-publish-an-article.md (#9555)
Added Jarod as the DRI for review.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-12 11:53:53 -08:00
Eric 4093650599 Website: Add Fleet Premium CTA to documentation pages (#9796)
Closes: https://github.com/fleetdm/fleet/issues/9785

Changes:
- Updated the documentation page script to set a `currentDocsSection`
variable
- Added Fleet Premium calls to action that link to the `/upgrade` page
to the left sidebar on documentation pages.


cc: @jarodreyes
2023-02-10 18:37:47 -06:00
EricandMike McNeil 874ca7bc8a Website: Update masthead (#9782)
Closes: https://github.com/fleetdm/fleet/issues/9762

Changes:
- `routes.js`: Changed the `currentPage` local variable to
`currentSection` and updated the value based each on the dropdown
navigation menus in the website header. This variable is used to make a
section "active" in the header.
- `view-basic-article` & `view-articles`: Updated these view actions to
set a `currentSection` variable based on the Markdown article category.
- `Layout.less`: Updated styles to match wireframes
- `layout.ejs`: Updated the styles and layout of the website header to
match wireframes.
- `layout-landing.ejs`, `layout-sandbox.ejs` & `layout-customer.ejs`:
Updated to match wireframes and stylesheet changes.
- `basic-documentation.less`: adjusted the position of the sticky right
sidebar.

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
2023-02-10 18:33:12 -06:00
Mo Zhu 3de7b0c3d4 Update macos nudge docs (#9801) 2023-02-10 16:31:22 -05:00
Roberto Dip 9dc81228df add missing Fleet MDM banner on host details page (#9797)
https://github.com/fleetdm/fleet/issues/9794
2023-02-10 18:17:12 -03:00
Jacob ShandlingandJacob Shandling 793ca1b058 Write instructions for using toggle-mdm-dev to turn on and off MDM / ABM (#9716)
# Add instructions for a handy little script

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-10 13:14:34 -08:00
Zachary Winnerman c158d4e55b Change the default memory value to a sane value (#9800)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-10 15:44:51 -05:00
bcdc4691bb Enable installation and auto-updates of Nudge via Orbit (#9605)
Issue #9093 

Co-authored-by: Roberto Dip <me@roperzh.com>
Co-authored-by: Roberto Dip <dip.jesusr@gmail.com>
2023-02-10 17:03:43 -03:00
Mike McNeil c321e3f516 /device-management (fix sentence casing) (#9791)
https://fleetdm.com/handbook/marketing/content-style-guide#sentence-case

<img width="162" alt="image"
src="https://user-images.githubusercontent.com/618009/218170979-268bfd8e-ab96-418a-aebb-43cc5b32579f.png">


![image](https://user-images.githubusercontent.com/618009/218171003-a6dde049-17f2-49e1-8326-34a2bbdc5f8f.png)
2023-02-10 13:08:59 -06:00
Luke Heath 59fd2a6192 Fix top nav underline positioning and size (#9790) 2023-02-10 12:51:15 -06:00
Sharon Katz 0ddd0d64f7 CIS_fix_desc_errors (#9789) 2023-02-10 12:48:44 -05:00
Charlie Chance 4b164435bc Handbook: moving / relocation info (#9788)
Hello all, letting you know that information for when fleeties move or
relocate is added to the handbook.
2023-02-10 09:28:01 -07:00
Zach Wasserman 443e347ea6 Update FAQ to indicate Fleet Cloud Beta (#9784) 2023-02-09 17:04:30 -08:00
429edde09f Make 2nd file download async to fix (#9711)
# Addresses #9680 
- Add 100ms timeout before 2nd key is downloaded from browser
- Fix file decoding to correctly download both keys
- Fix copy

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
Co-authored-by: Roberto Dip <roberto@fleetdm.com>
2023-02-09 14:50:20 -08:00
Jacob ShandlingandJacob Shandling c2d557588d DeviceUserPage MDM banner adjustments (#9710)
# Addresses #9668 
- Turn on MDM now doesn't wrap
- Also kept banner width matching the rest of the page content:
- before: <img width="1196" alt="before"
src="https://user-images.githubusercontent.com/61553566/217093932-2ac6cdfb-6078-4895-bad3-6c777287f8cb.png">
- after: <img width="1300" alt="after"
src="https://user-images.githubusercontent.com/61553566/217093943-9f171b9c-a342-44e0-825a-63f397e2966c.png">


# Checklist for submitter
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-09 14:49:24 -08:00
Jacob ShandlingandJacob Shandling 75809889bf update links and flash error copy (#9703)
# Small copy / url updates

# Checklist for submitter
- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-09 14:49:09 -08:00
Charlie Chance bb97745d62 Charlotte chance patch 2 (#9779) 2023-02-09 11:51:59 -07:00
Artemis Tosini d36e89a0ef Add macOS CIS 6.3.3 (Safari Safe Browsing) (#9778) 2023-02-09 13:46:42 -05:00
Charlie Chance f3e5040c10 Handbook: backlog catchup - Rituals (#9776)
https://github.com/fleetdm/fleet/issues/4679
https://github.com/fleetdm/fleet/issues/4670 @zwass - FYI
https://github.com/fleetdm/confidential/issues/1051 
https://github.com/fleetdm/fleet/issues/4677
2023-02-09 11:37:05 -07:00
Charlie Chance 2ca806d3be Handbook: backlog contributor ex audits (#9777)
https://github.com/fleetdm/fleet/issues/4679
2023-02-09 11:36:36 -07:00
Lucas Manuel Rodriguez 4a5ce51d49 CIS yaml fixes (#9775) 2023-02-09 15:28:47 -03:00
Sharon Katz 1fc799577d CIS 6.4.1 (#9773) 2023-02-09 13:22:36 -05:00
Sharon Katz c7827cf5b1 CIS 6.3.7 (#9767) 2023-02-09 13:15:21 -05:00
Eric 0e076a989f Remove duplicate columns property in firmware_eficheck_integrity_check.yml (#9774)
Changes:
- Removed the duplicate `columns` property from the
`firmware_eficheck_integrity_check` table's YAML file that is currently
causing the website build script to fail.
(https://github.com/fleetdm/fleet/actions/runs/4136825407/jobs/7151210650#step:13:19)
2023-02-09 11:56:21 -06:00
Artemis Tosini 6b50914500 Add macOS CIS 2.3.3.10 (Media Sharing) (#9666) 2023-02-09 12:55:22 -05:00
Lucas Manuel Rodriguez 9fa2be0a86 Add check for CIS 5.10 (#9755)
#9260

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.~
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- ~[ ] Added/updated tests~
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-09 14:28:22 -03:00
Lucas Manuel Rodriguez 399a6f53e7 Add check for CIS 6.3.4 (#9766)
#9261
2023-02-09 14:28:02 -03:00
Lucas Manuel Rodriguez 4638e8564f Add check for CIS 5.6 (#9756)
#9260

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-09 14:27:40 -03:00
Lucas Manuel Rodriguez 8af2b56cd5 Add check for macOS CIS 5.9 (#9765)
#9260

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- ~[ ] Added/updated tests~
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-09 14:05:55 -03:00
Artemis Tosini a92b311030 Add macOS CIS 6.3.1 (Safari Automatic Opening) (#9759) 2023-02-09 11:41:18 -05:00
Zachary Winnerman 024084d993 Dogfood changes (#9769)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-09 11:31:10 -05:00
Artemis Tosini 6d82515b02 Add macOS CIS 2.3.3.8 (Internet Sharing) (#9663) 2023-02-09 11:15:40 -05:00
Lucas Manuel Rodriguez c6e1447084 Add check for CIS 6.3.6 (#9768)
#9261
2023-02-09 12:36:40 -03:00
Lucas Manuel Rodriguez 7fc3613dc5 Add CIS checks for 5.4 and 5.5 (#9747)
#9260

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-09 12:35:43 -03:00