Commit graph

11695 commits

Author SHA1 Message Date
Roberto Dip
92e540aee5
add scripts to add/remove software (#18649)
for:

- https://github.com/fleetdm/fleet/issues/18314
- https://github.com/fleetdm/fleet/issues/18315
- https://github.com/fleetdm/fleet/issues/18317
- https://github.com/fleetdm/fleet/issues/18316

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-05-01 14:15:59 -03:00
Martin Angers
7d014f9fad
Extract metadata from installers part 2 (#18608) 2024-04-30 11:20:53 -04:00
Gabriel Hernandez
1992561714 fix go mod conflicts 2024-04-30 11:42:11 +01:00
Gabriel Hernandez
7983e91933 Merge branch 'main' into feat-software-installers 2024-04-30 11:40:55 +01:00
Mike McNeil
c538aa62c6
handbook: fix broken link (#18632) 2024-04-30 03:09:12 -05:00
Mike McNeil
7bf5dfde5f
Update layout.ejs (#18631) 2024-04-30 03:00:43 -05:00
Mike McNeil
c01d0ff82a
Website: If org name + email specified but no matches, try again (#18629) 2024-04-30 01:40:06 -05:00
Mike McNeil
8252320c3b
Fix 500 errors by ensuring organization exists (#18628) 2024-04-30 01:12:53 -05:00
Mike McNeil
cdbe6055d1
Website: Improve enrichment (#18627) 2024-04-30 01:03:59 -05:00
Eric
31c67130d4
Website: Update searchBy criteria in get-enriched helper (#18626)
Changes:
- Removed the organization name search in the get-enriched helper to
improve organization enrichment.
2024-04-29 23:37:09 -05:00
Eric
7259ec6473
Website: Update save-questionnaire-progress (#18625)
Related to https://github.com/fleetdm/confidential/issues/6357

Changes:
- Updated `save-questionnaire-progress` to only call
`sails.helpers.salesforce.updateOrCreateContactAndAccount` is called
when a user's `psychologicalStage` changes.
2024-04-29 19:20:00 -05:00
Mike McNeil
b09d34fa4b
Website: Quick and dirty fix for signups (#18622)
Eric, please test fully before merging, this is just the quick and dirty
cut.
2024-04-29 19:01:47 -05:00
Robert Fairburn
a4bd6aad04
engine_version in wrong place (#18624) 2024-04-29 18:41:11 -05:00
Luke Heath
9bd87ca87f
Bump dogfood terraform to 8.0.mysql_aurora.3.05.2 (#18620) 2024-04-29 18:00:43 -05:00
Robert Fairburn
27a4071a89
Make terraform match prod RDS versions (#18621) 2024-04-29 17:58:17 -05:00
Eric
2ba0f01502
Website: update personalization on homepage and endpoint ops (#18616)
Closes: https://github.com/fleetdm/confidential/issues/6336

Changes:
- Updated personalization on the homepage and the endpoint ops page
2024-04-29 16:40:57 -05:00
Eric
bde910a827
Website: Update get-enriched to return undefined. (#18614)
Changes:
- Updated the `iq/get-enriched` helper to return enrichment data as
undefined.
2024-04-29 16:29:23 -05:00
Michael Pinto
3f2d906717
Update security-audits description (#18611)
Adding a description and link for the 2023 penetration test.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-04-29 16:23:40 -05:00
Luke Heath
a38fa0d517
Change calendar event name (#18579)
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-04-29 15:51:16 -05:00
Roberto Dip
05719633a1
add consistent MDM host lifecycle management (#18510)
The mantra for MDM lifecycle events is:

> - Noah: When MDM is turned on, install fleetd, bootstrap package (if
DEP),
> and profiles. Don't clear host vitals (everything you see on the Host
>      details page)
>    - Noah: On re-enrollment, don't clear host vitals.
>    - Noah: On lock and wipe, don't clear host vitals.
>    - Noah: On delete, clear host vitals.

This addresses issues:

- https://github.com/fleetdm/fleet/issues/17243
- https://github.com/fleetdm/fleet/issues/17481
- https://github.com/fleetdm/fleet/issues/17292
- https://github.com/fleetdm/fleet/issues/18030
- https://github.com/fleetdm/fleet/issues/18031
2024-04-29 16:43:15 -03:00
Michael Pinto
373e9153b7
Add 2023 penetration test (#18375)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-04-29 14:39:28 -05:00
Sarah Gillespie
ced8e560c9
Update software installers schema with reference to software titles (#18589) 2024-04-29 12:22:59 -05:00
Victor Lyuboslavsky
bf0f6ec55a
Added release-fleetd-base workflow. (#18194)
#16347

New GitHub workflow.
- Uses `tools/tuf/status/tuf-status.go` to check the latest
osquery/orbit/fleet-desktop versions
- Uploads https://download-testing.fleetdm.com/meta.json to keep track
of versions
- macOS: https://download-testing.fleetdm.com/fleetd-base.pkg
- Windows: https://download-testing.fleetdm.com/fleetd-base.msi

This version creates and uploads macOS and fleetd base packages to
https://download-testing.fleetdm.com

QA instructions updated in the issue. After QA, we will update the
workflow to upload to https://download.fleetdm.com
2024-04-29 11:51:40 -05:00
Mike McNeil
b903e5258f
Handbook: Make departmental page preambles consistent (#18594) 2024-04-29 11:22:54 -05:00
Rachael Shaw
895d4bc2f7
Use "Fleet's agent (fleetd)" naming in the docs (#18138)
For #16512

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-04-29 11:12:03 -05:00
Victor Lyuboslavsky
51f8e1de67
fleetd-chrome 1.3.0 release (#18546)
#18466 

The beta release is already available at:
https://chrome-beta.fleetdm.com/updates.xml
2024-04-29 10:55:37 -05:00
Victor Lyuboslavsky
fa9373a68f
Updated host_operating_system INSERT. (#18556)
#16562 

Updated MySQL host_operating_system insert statement to reduce table
lock time.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Added/updated tests
  - Existing tests provide full coverage of the changes.
- [x] Manual QA for all new/changed functionality
2024-04-29 10:54:50 -05:00
Victor Lyuboslavsky
d0f0d3d017
When updating a policy's 'platform' field, the aggregated policy stats are now cleared. (#18415)
#18157
When updating a policy's 'platform' field, the aggregated policy stats
are now cleared.

# Checklist for submitter
- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-04-29 10:20:59 -05:00
JD
0b66bc4a9b
Add Windows AV policy (#18551)
Adds policy and query to verify Windows Defender is installed and
working on Windows. https://github.com/fleetdm/fleet/issues/18494
2024-04-29 07:53:04 -07:00
Jacob Shandling
ea86f9ed0f
UI –Restore missing tooltips (#18598) 2024-04-29 10:48:35 -04:00
Mike McNeil
61e3e0c8ab
Handbook: Update product-groups.md (#18590)
(The numbers were confusing.  It was like: "(1) P0, (2) P1, (3) P2")
2024-04-29 09:34:47 -05:00
Dante Catalfamo
3aa9437d35
fleetctl get teams prints team id (#18395)
#18394
2024-04-29 09:56:04 -04:00
Dante Catalfamo
9b3d6e590d
Linux Wipe Async (#18372)
#18173

Creates a detached child shell process to wipe the host. This lets the
main shell script return and tells the server the command has completed,
clearing it from the run queue.

Now shuts the host down after being wiped instead of leaving it running
without files like a zombie
2024-04-29 09:55:05 -04:00
Martin Angers
563d55c218
Software installers: extract metadata from installers (part 1) (#18509) 2024-04-29 09:13:36 -04:00
Martin Angers
26b83de925
Fix sending of "install Fleetd" commands repeatedly on Azure-enrolled Windows devices (#18453) 2024-04-29 08:48:54 -04:00
JD
8eec8e5371
Update spelling & grammar in pwd_policy.yml (#18547)
Markdown updates to spelling and grammar.
2024-04-26 18:02:16 -05:00
Eric
4bac6ca321
Website: update SOC 2 link in footer (#18577)
Closes: https://github.com/fleetdm/confidential/issues/6319

Changes:
- Updated the website footer ("SOC2 Type 2 certified" » "SOC2 Type 2")
2024-04-26 15:37:47 -05:00
Rachael Shaw
8bcdd93f2c
Update fleetctl package usage description (#18545)
Slight verbiage change requested by @noahtalerman re: #16512
2024-04-26 15:10:28 -05:00
Dante Catalfamo
1cb670a3c1
Tools: Choose Enrollment VM base image using environment variable (#18070)
Good for running out older versions of macOS during an semi-automated
test
2024-04-26 15:30:58 -04:00
RachelElysia
13f4703f01
Fleet UI: Activity log expiry settings (#18243) 2024-04-26 15:14:49 -04:00
Isabell Reedy
ee6c59d01f
Add Gabe Lopez to engineering page and MDM product group (#18523) 2024-04-26 14:02:41 -05:00
Lucas Manuel Rodriguez
3e5f7d5cf5
Fix users query for linux devices (#18454)
#18424

I believe the hosts users for linux broke when we added Chrome support
(https://github.com/fleetdm/fleet/pull/10281/files).

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [x] Added/updated tests
- ~[ ] If database migrations are included, checked table schema to
confirm autoupdate~
- ~For database migrations:~
- ~[ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.~
- ~[ ] Confirmed that updating the timestamps is acceptable, and will
not cause unwanted side effects.~
- ~[ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).~
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2024-04-26 15:05:34 -03:00
Victor Lyuboslavsky
9ff682e0ff
Windows orbit.exe and fleet-desktop.exe are now signed. (#18201)
#17187 

Windows orbit.exe and fleet-desktop.exe are now signed.

Signed fleet-desktop.exe artifact at:
https://github.com/fleetdm/fleet/actions/runs/8834788809
Signed orbit.exe artifact at:
https://github.com/fleetdm/fleet/actions/runs/8834817940

For signing fleetctl.exe, opened a new issue:
https://github.com/fleetdm/fleet/issues/18540
2024-04-26 12:46:23 -05:00
Eric
d74f5cd6ea
Website: Update psychologicalStage changes in save-questionnaire-progress.js (#18498)
Closes: https://github.com/fleetdm/confidential/issues/6215

Changes:
- Updated how psychological stages are set when a user completes a step
of the get started questionnaire

> Note: I'm creating this as a draft PR until I review these changes to
make sure this is what we want to do.
2024-04-26 12:42:48 -05:00
George Karr
b75545ba26
Adding changes for patch 4.49.1 (#18573) 2024-04-26 12:35:44 -05:00
Roberto Dip
08b5e1c7b5
fixed a bug causing servers with Windows MDM only to crash (#18568) 2024-04-26 10:09:01 -05:00
Eric
a6c09cb5f4
Website: Update update-or-create-contact-and-account helper (#18565)
Changes:
- Updated the `salesforce/update-or-create-contact-and-account` helper
to not to try to use `enrichementData.employer.emailDomain` if an
`organization` was provided.
2024-04-26 09:13:46 -05:00
Lucas Manuel Rodriguez
1b26129465
Delete expired activities in cleanup cron (#18441)
#16989

API draft PR: #17809.
UI draft PR: #18243.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- ~[ ] If database migrations are included, checked table schema to
confirm autoupdate~
- ~For database migrations:~
- ~[ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.~
- ~[ ] Confirmed that updating the timestamps is acceptable, and will
not cause unwanted side effects.~
- ~[ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).~
- [X] Manual QA for all new/changed functionality
  - ~For Orbit and Fleet Desktop changes:~
- ~[ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.~
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2024-04-26 07:22:31 -03:00
Eric
75511b3d26
Website: update values passed into helper & don't run the Salesforce helper in development environment. (#18560)
Changes:
- Updated the default value that is being sent as a
primaryBuyingSituation
- Updated the updateOrCreateContactAndAccount Salesforce helper to do
nothing in development.
2024-04-26 03:33:26 -05:00
Eric
262b5644ba
Website: pin version of jsforce (#18559)
Changes:
- `"jsforce": "^1.11.1",` » `"jsforce": "1.11.1",`
2024-04-26 02:00:23 -05:00