Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-24 01:18:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 59

Add platform to policy templates in the Fleet UI (#3311)

Browse source
This commit is contained in:
Noah Talerman 2021-12-10 15:48:24 -05:00 committed by GitHub
parent 1f8f5b0d27
commit f717f55cec
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
frontend/utilities/constants.ts
View file

@ -20,6 +20,7 @@ export const DEFAULT_POLICIES = [
"Checks to make sure that the Filevault feature is enabled on macOS devices.",
resolution:
"Choose Apple menu > System Preferences, then click Security & Privacy. Click the FileVault tab. Click the Lock icon, then enter an administrator name and password. Click Turn On FileVault.",
platform: "darwin",
},
{
key: 2,
@ -29,6 +30,7 @@ export const DEFAULT_POLICIES = [
"Checks to make sure that the Gatekeeper feature is enabled on macOS devices. Gatekeeper tries to ensure only trusted software is run on a mac machine.",
resolution:
"On the failing device, run the following command in the Terminal app: /usr/sbin / spctl--master- enable",
platform: "darwin",
},
{
key: 3,
@ -38,6 +40,7 @@ export const DEFAULT_POLICIES = [
"Checks to make sure that device encryption is enabled on Windows devices.",
resolution:
"Option 1: Select the Start button. Select Settings > Update & Security > Device encryption. If Device encryption doesn't appear, skip to Option 2. If device encryption is turned off, select Turn on. Option 2: Select the Start button. Under Windows System, select Control Panel. Select System and Security. Under BitLocker Drive Encryption, select Manage BitLocker. Select Turn on BitLocker and then follow the instructions.",
platform: "windows",
},
{
key: 4,
@ -47,6 +50,7 @@ export const DEFAULT_POLICIES = [
description: "Checks to make sure that the SIP is enabled.",
resolution:
"On the failing device, run the following command in the Terminal app: /usr/sbin/spctl --master-enable",
platform: "darwin",
},
{
key: 5,
@ -57,6 +61,7 @@ export const DEFAULT_POLICIES = [
"Required: You’re already enforcing a policy via Moble Device Management (MDM). Checks to make sure that the device user cannot log in to the device without a password. It’s good practice to have both this policy and the “Is Filevault enabled on macOS devices?” policy enabled.",
resolution:
"The following example profile includes a setting to disable automatic login: https://github.com/gregneagle/profiles/blob/fecc73d66fa17b6fa78b782904cb47cdc1913aeb/loginwindow.mobileconfig#L64-L65",
platform: "darwin",
},
{
key: 6,
@ -67,6 +72,7 @@ export const DEFAULT_POLICIES = [
"Required: You’re already enforcing a policy via Moble Device Management (MDM). Checks to make sure that guest accounts cannot be used to log in to the device without a password.",
resolution:
"The following example profile includes a setting to disable automatic login: https://github.com/gregneagle/profiles/blob/fecc73d66fa17b6fa78b782904cb47cdc1913aeb/loginwindow.mobileconfig#L68-L71",
platform: "darwin",
},
{
key: 7,
@ -76,6 +82,7 @@ export const DEFAULT_POLICIES = [
description:
"Required: You’re already enforcing a policy via Moble Device Management (MDM). Checks to make sure that the Secure Keyboard Entry setting is enabled.",
resolution: "",
platform: "darwin",
},
];