Commit Graph
6674 Commits
Author SHA1 Message Date
Mike McNeil f85a3327b5 Fix typo, add link, correct route (#9715) 2023-02-08 19:25:17 -06:00
Mike Thomas 24714d9b5a Update pricing-features-table.yml (#9761)
Updated Granular RBAC to Premium in the compare plans table.
2023-02-09 10:23:08 +09:00
gillespi314 aca2449566 Add new data types and table for Apple MDM config profiles (#9758) 2023-02-08 18:36:20 -06:00
Roberto Dip 7cd581866a add API endpoint to see disk encryption key (#9713)
https://github.com/fleetdm/fleet/issues/8708
2023-02-08 20:20:23 -03:00
Mike McNeil 275a5993a8 Bizops handbook (#9741)
- Think we should merge these PeopleOps and BizOps sections (and instead
surface their contents as top-level nav items)? Would make the page
easier to explore.
- Seeing navigation like "Business operations > BizOps" is confusing to
me, and we don't normally use PascalCase headings. One solution could be
to "deindent" BizOps (so its underlying sections are top level) and to
change PeopleOps to "People"
2023-02-08 13:56:52 -07:00
Sharon Katz c248968ba3 CIS 2.3.3.9 (#9752) 2023-02-08 15:43:03 -05:00
Jacob ShandlingandJacob Shandling 5c0f635966 clarify Teams > MDM settings docs (#9754)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-08 11:49:01 -08:00
Artemis Tosini 9fd70ee9e0 Add macOS CIS 2.3.3.7 (Remote Apple Events) (#9751) 2023-02-08 14:13:11 -05:00
Lucas Manuel Rodriguez 2265c84b2a Add CIS check for 5.8 (#9750)
#9260

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.~
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- ~[ ] Added/updated tests~
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-08 13:38:17 -03:00
Lucas Manuel RodriguezandSharon Katz d4a1b4d218 Add CIS checks for 2.9.X and add pmset table to fleetd (#9470)
#9253

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.~
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~

---------

Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com>
2023-02-08 13:08:17 -03:00
Mike Thomas 3cdea3c896 Website - /pricing update CTA text for Fleet Community Edition (#9746)
Updated the CTA text for Fleet Community Edition that links to sandbox
from "Get started" to "Try it out."

See [this Slack
thread](https://fleetdm.slack.com/archives/C01ALP02RB5/p1675811264928269)
for context.
2023-02-08 10:07:46 -06:00
Artemis Tosini b6968892b0 Add macOS CIS 6.1.1 (Show All Filename Extensions) (#9740)
This adds CIS 6.1.1
---------
Co-authored-by: Sharon Katz <sharon@fleetdm.com>
Approved by: Sharon Katz <sharon@fleetdm.com>
2023-02-08 10:51:42 -05:00
Lucas Manuel Rodriguez 086ec05ca7 Add CIS check for 5.7 (#9748)
#9260

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-08 12:30:55 -03:00
Sharon Katz 9672f03d37 CIS 5.1.5/5.1.6/5.1.7 (#9726) 2023-02-08 10:11:20 -05:00
Roberto Dip 046401d190 Ingest file vault recovery keys in macOS (#9712)
Related + details at https://github.com/fleetdm/fleet/issues/8708
2023-02-08 11:49:42 -03:00
Mo ZhuandMo Zhu 331c51925b Update product office hours (#9744)
Co-authored-by: Mo Zhu <mozhu@mos-macbook-air.lan>
2023-02-08 09:29:34 -05:00
TomOstertag 20484946e8 Handbook Outreach (#9727)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-07 19:38:06 -06:00
Andrew BakerandEric 24fc9244e0 Update beta availability (#9743)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-07 19:02:25 -05:00
Eric c1787e2724 Website: Update pricing footnote (#9742)
Changes:
 - Moved the footnote about additional hosts on the pricing page.
2023-02-07 17:30:16 -06:00
Mike McNeilandEric d80101924f Tolerate haiku failures (#9738)
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-07 16:07:54 -06:00
Noah Talerman f4dd05d3ee Docs: Fix images on Mobile device management page (#9734)
- Update links so that images render correctly
2023-02-07 14:00:32 -08:00
Eric 4f8e0dcd0d Regenerate osquery_fleet_schema.json (#9730)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`schema/osquery_fleet_schema.json`
2023-02-07 15:30:19 -06:00
Noah Talerman 9ae5941d8c Docs: MDM - pending hosts (#9728)
- Explain what MDM status "Pending" means
- Explain default team and how to update
2023-02-07 16:03:30 -05:00
Dave Herder 5174762e4b Update Testing-and-local-development.md (#9717)
Added some examples for referring to when generating APNs certs

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-07 13:53:23 -06:00
Noah Talerman b87c28726a Docs: Add instructions for MDM migration (#9708)
These docs address 5 out of 7 requirements in the "Docs for MDM
migration" issue here: #9009

Docs also add an "Instructions for end users" section to address docs
for "Manual enrollment" issue:
https://github.com/fleetdm/fleet/issues/7957#issuecomment-1416262879

- Add instructions for IT admins on how to switch MDM solutions for
hosts manually enrolled to the old MDM solution
- Add instructions for IT admins on how to switch MDM solutions for
hosts automatically enrolled (DEP) to the old MDM solution
- Add information for IT admins about how Fleet treats Activation Lock
Bypass codes
- Add instructions for end users on how to switch MDM solutions for
hosts manually and automatically enrolled to the old MDM solution (same
instructions)
2023-02-07 13:53:14 -06:00
Mike McNeil 532133a2ae List open positions (#9725)
In an effort to maximize our focus on delivering value for customers, we
will simplify the hiring process to use Fleet's handbook as the source
of truth for open job listings.
2023-02-07 13:39:34 -06:00
Noah Talerman 0591d6769d 4.27.0 release article: Update image (#9724)
- Replace image for failed login attempts
2023-02-07 14:02:27 -05:00
Sharon Katz 84fcee9130 CIS 5.1.3+5.1.4 (#9642) 2023-02-07 13:26:05 -05:00
Noah Talerman 46b8929e64 fleetdm.com pricing page: Add "Audit log" (#9723)
- Add "Audit log" item. Covers ability to ship activity to external
destinations. Fleet Premium only

More context here in Slack (internal):
https://fleetdm.slack.com/archives/C02A8BRABB5/p1675783658467209
2023-02-07 11:38:33 -06:00
Mike Thomas e5bd7b9a58 4.27.0 release article: Image update (#9719)
- Updated the image on the release post.
2023-02-07 12:29:16 -05:00
Mike Thomas 45c359284d Update pricing.ejs (#9718)
Updated IT placeholder text.
2023-02-07 09:23:35 -06:00
Eric 57228a63b9 Website: Update CSR email template (#9714)
Closes https://github.com/fleetdm/fleet/issues/9671

Changes:
- updated the position of the lightbulb icon in the CSR email template.
2023-02-06 16:55:44 -06:00
Andrew BakerandEric d22d82f889 Release post 4.27.0 (#9709)
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-06 17:36:26 -05:00
Artemis Tosini 61da4d3331 Add macOS CIS 2.3.3.4 (Printer Sharing) (#9665)
This makes sure printer sharing is disabled on macOS using the CUPS
configuration file. This script makes a change that both works and is
reflected in the macOS UI, unlike many of the scripts
2023-02-06 17:12:17 -05:00
Charlie Chance a57a728e10 Update ceo-handbook.md (#9707) 2023-02-06 13:35:08 -07:00
Charlie Chance 119ca732df Update ceo-handbook.md (#9706) 2023-02-06 13:31:43 -07:00
Artemis Tosini 857e6830d8 Add macOS CIS 2.3.3.11 (Bluetooth Sharing) (#9688)
This adds a test for 2.3.3.11, which verifies that all users have
Bluetooth sharing disabled.

It's not possible to create a profile and it's challenging to write a
script, so testing must be done manually.
As with all sharing tests, the machine will be compliant out of the box.
For QA you should open the sharing preference pane (System Settings >
General > Sharing) and then enable Bluetooth sharing and this test
should fail. Switching bluetooth sharing back off will fix it.
2023-02-06 15:29:47 -05:00
Charlie Chance 7e68e6b167 Update ceo-handbook.md (#9705) 2023-02-06 13:28:23 -07:00
Artemis Tosini 21428cb6a6 Add the first queries of CIS 2.3.3 looking at launchd overrides (#9619)
This adds all the CIS 2.3.3.x queries that are nearly identical and
based on launch agent overrides
2023-02-06 15:27:42 -05:00
Charlie Chance a3b744b837 Update ceo-handbook.md (#9704) 2023-02-06 13:26:23 -07:00
Eric 621b01cdf0 Website: update capitalization on pricing page (#9701) 2023-02-06 12:21:46 -06:00
Artemis Tosini 985c051ebb Add macOS CIS 2.3.3.6 (Remote Management) (#9664)
I can't find any way of adding a policy to remove ARD but this uses an
officially documented script to disable it which works on my mac.
2023-02-06 13:13:38 -05:00
Sharon Katz 7aefd5c73b Cis 3.4 (#9554) 2023-02-06 13:13:11 -05:00
Eric fb81af833b Website: Update pricing calculator (#9700)
Changes: 
- Updated the Fleet Ultimate card to show two decimal places on the
price per host, and to change color when the price per host changes
because of the pricing calculator.
- Fixed a bug where the pricing calculator would display as $NaN/month
when each field of the pricing calculator is set to 0 hosts.
2023-02-06 11:59:39 -06:00
Eric cb5b220989 Website: Disable bot comments on closed issues. (#9696)
Changes:
- Disabled the Open AI API request in the `receive-from-github` webhook.
It is currently returning a `429` response and causing `500` errors.
<img width="753" alt="image"
src="https://user-images.githubusercontent.com/7445991/217028846-77e75d98-a595-46e7-aefa-7a76811b32d4.png">
2023-02-06 10:45:29 -06:00
EricandMike Thomas 416963de36 Website: Update pricing page (#9621)
Closes https://github.com/fleetdm/confidential/issues/1818

Changes:
- Updated the layout and content of the `/pricing` page
- `pricing-features-table.yml`: Added an "Ultimate" tier with three
features.
- `build-static-content.js` - Updated the build script to add support
for the "Ultimate" tier in `pricing-features-table.yml`

---------

Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
2023-02-06 10:41:36 -06:00
Benjamin Edwards 78e41b60b3 refactor logging module to prefer logging directly to firehose (#9678)
prefer logging to firehose in target-account, this opens up more
flexibility to choose different out-of-the-box firehose destinations.

by default S3 destination is provided, as a destination is required to
create a firehose delivery stream
2023-02-06 10:38:23 -05:00
Marcos Oviedo 1c7f94b745 Adding support to user friendly command output (#9620)
This relates to #9310 

This PR adds a new column to the bridge mdm_table to provide a parsed
and user-friendly output of the input command

This will help in creating compliance queries

There is also an improvement to UTF16 to go string conversion scenarios.
This was required by scenarios on which output commands can vary in size

I've also added support to restrict input commands to read-only commands
(only the SyncML verb Get is supported)
2023-02-06 11:41:05 -03:00
Lucas Manuel Rodriguez c6ab010833 Amend the loadtesting README.md (#9650)
Amending some parts of the README.md after following the guide to load
test #9559.

PS: Great documentation we have here!
2023-02-06 06:54:44 -03:00
Luke Heath b3daf3d715 Prepare for 4.27.0 (#9683) 2023-02-03 17:03:06 -08:00