Commit graph

12104 commits

Author SHA1 Message Date
Andrwe Lord Weber
a8a1054b36
add linux platform tuxedo (#19011)
# Changes

I'm running orbit based osqueryd on a laptop with [Tuxedo
OS](https://www.tuxedocomputers.com/en/TUXEDO-OS_1.tuxedo#).
This OS identifies its platform via osquery as `tuxedo` and is therefore
not recognized by the Fleet server:

```json
{
    "err": "unrecognized platform",
    "hostID": 76,
    "level": "error",
    "platform": "tuxedo",
    "ts": "2024-05-15T13:17:34.513509387Z"
}
```

This causes policy and scheduled queries to not being run on my system.
With this PR Im adding `tuxedo` to all occurrences found when searching
for `kali`.

Additionally pre-commit checks were failing for me locally as it could
not find the hook-id `RuboCop`. This could be solved by using `rubocop`
instead.
Afterwards all pre-commit checks succeeded locally.

# Checklist for submitter

- [x] Added/updated tests

Signed-off-by: Andreas Ulm <andreas.ulm@prisma-capacity.eu>
2024-05-29 13:54:07 -03:00
Lucas Manuel Rodriguez
55c8c74cab
Add few missing iOS/iPadOS UI changes (#19323)
#18119

Figma:
https://www.figma.com/design/eiKrrFY5cUpTit6ha4VNbB/%2318119-iOS%2FiPadOS-automatic-(DEP)-enrollment?node-id=2-130
2024-05-29 13:50:44 -03:00
RachelElysia
e090819c75
[small released bugs] Fleet UI: Host queries styling fixes (#19175) 2024-05-29 12:48:51 -04:00
RachelElysia
5c35a922b0
Fleet UI: Add reminder banners for ABM and APNs expirations (#19085) 2024-05-29 12:03:05 -04:00
Robert Fairburn
5abfe5e4fa
Update terraform example to support FLEET_SERVER_PRIVATE_KEY (#19330) 2024-05-29 10:45:35 -05:00
Robert Fairburn
9283cb16a6
Terraform fleet server private key (#19321) 2024-05-29 10:26:08 -05:00
Noah Talerman
34c6055ced
it-and-security/ CODEOWNERS (#19327)
- Add @getvictor
2024-05-29 09:55:18 -05:00
RachelElysia
5e6184340c
Fleet UI: Updated styles to license expiration banner (#18856) 2024-05-29 09:41:07 -04:00
Jahziel Villasana-Espinoza
c2a9ba6f86
fix: remove references to adminstrator users in script (#19318)
> Related issue: #18461

Non-functional change; there were some comments in the embedded script
that referenced Administrator accounts. These references needed to be
removed, as the script can lock out all accounts now.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-05-29 09:37:18 -04:00
Tim Lee
d1db2e3650
Ubuntu Kernel Vulns Part 2: Matching (#19303) 2024-05-29 06:59:12 -06:00
Roberto Dip
9ec92a601f
prevent a bug causing SCEP renewals to fail (#19313)
for #19311

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-05-28 20:31:53 -03:00
Lucas Manuel Rodriguez
cdf2a0c47c
iPhone/iPad support (#19221)
#18119

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [x] Added/updated tests
- [X] Manual QA for all new/changed functionality

---------

Co-authored-by: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
Co-authored-by: Jacob Shandling <61553566+jacobshandling@users.noreply.github.com>
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-05-28 19:17:14 -03:00
Jahziel Villasana-Espinoza
13a272594b chore: changes file 2024-05-28 17:49:19 -04:00
Jahziel Villasana-Espinoza
a2909c9691 fix: remove references to adminstrator users in script 2024-05-28 17:45:28 -04:00
Robert Fairburn
0cf1f78bf1
Update loadtest osquery-perf to cleanup vulns in built image (#19317)
Note this is the same Dockerfile used in cloud for adding fake hosts to
preview/tests environments.
2024-05-28 16:33:55 -05:00
Jacob Shandling
a5ab2213bf
UI – Activity feed webhook automation modal (#19285)
_This PR is the direct-to-`main` replacement for #19096, which merged to
a now-defunct feature branch_

## Addresses #19052 

- update config, webhook interfaces, mock
- clean up deprecated Sandbox code
- implement Activity Feed Automations Modal and associated logic
- Also addresses #19284 

![Screenshot-2024-05-24-at-21725PM](https://github.com/fleetdm/fleet/assets/61553566/1afc62f7-eeb3-49a8-a545-b971f2a19921)

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-05-28 13:18:02 -07:00
Tim Lee
14fa3e2cbe
Ubuntu Kernel Vulns Part 1: Generate OVAL JSON (#19210) 2024-05-28 13:40:32 -06:00
Noah Talerman
84a1c84244
Update docs: Best practice infra for deploy security agents (#19251)
- Add S3 to AWS reference architecture docs
- Add note that GCP support for add/install software (deploy security
agents) and file carves is coming soon
- Add note that Render support for add/install software (deploy security
agents) is coming soon
- Update links to best practice Terraform example
2024-05-28 14:41:54 -04:00
Lucas Manuel Rodriguez
984711060f
Some docs added while learning DDM for iOS/iPadOS support research (#18561)
Some docs added while working on #18423.
2024-05-28 15:03:39 -03:00
Rachael Shaw
8f2ea71cd2
Update story issue template (#19309)
Add :product label to user story issue template
2024-05-28 13:54:54 -04:00
Gabe Lopez
ad761456fe
Update release-qa.md (#19237)
fixed typo and removed migration testing for Percona since the customer
has switched to mySQL

# Checklist for submitter

If some of the following don't apply, delete the relevant line.
2024-05-28 10:03:42 -07:00
Noah Talerman
78037e246b
Add attribution for Mac Admins tables (#19302)
- Add note for all tables
2024-05-28 12:59:35 -04:00
Eric
d9594ba2bf
Website: update quote links on landing pages (#19307)
Closes: #18966

Changes:
- Updated the styles of the quote links on the product category landing
pages.
2024-05-28 11:45:25 -05:00
Lucas Manuel Rodriguez
f8cee672e0
Support environment variables in config profiles (#18891)
#17309

I added some missing env var replacement tests for policies, queries,
etc.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
2024-05-28 13:44:43 -03:00
Jahziel Villasana-Espinoza
ddcdaa61c0
feat: enabled locking for windows admins (#19145)
> Related issue: #18461

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-05-28 12:06:38 -04:00
Tim Lee
1d2d9d4222
Support status and label filters in bulk opts (#17723) 2024-05-28 08:53:16 -06:00
Tim Lee
6f008b40f2
Fix backoff in vuln stream logging (#19148) 2024-05-28 08:13:46 -06:00
Lucas Manuel Rodriguez
363c4bdd77
Friday cleanup ld: warning: ignoring duplicate libraries: '-lproc' (#18581)
To get rid of the warning:
```
ld: warning: ignoring duplicate libraries: '-lproc'
```
See https://github.com/elastic/go-sysinfo/releases/tag/v1.11.2.

```
go mod why github.com/elastic/go-sysinfo
# github.com/elastic/go-sysinfo
github.com/fleetdm/fleet/v4/server/contexts/ctxerr
go.elastic.co/apm/v2
github.com/elastic/go-sysinfo
```

I ran:
```
go get github.com/elastic/go-sysinfo@v1.11.2
go mod tidy
```
2024-05-28 10:31:09 -03:00
Roberto Dip
d98e1ecf27
allow to customize the signed CSR return type (#19213)
for #19027, this modifies the website to accept an `deliveryMethod` parameter to
respond with the signed CSR instead of delivering an email.

The current approach also maintains backwards compatibility:

**Response without `deliveryMethod` (unchanged except for custom headers)**

```
$ curl --insecure -v -H 'content-type: application/json' http://localhost:2024/api/v1/deliver-apple-csr -d '{"unsignedCsrData": "foo"}'
*   Trying [::1]:2024...
* Connected to localhost (::1) port 2024
> POST /api/v1/deliver-apple-csr HTTP/1.1
> Host: localhost:2024
> User-Agent: curl/8.4.0
> Accept: */*
> content-type: application/json
> Content-Length: 26
>
< HTTP/1.1 200 OK
< X-Powered-By: Sails <sailsjs.com>
< Cache-Control: no-cache, no-store
< X-Exit: success
< X-Exit-Description: Delivered email to specified email address with certificate signing request attached.
< Content-Type: text/plain; charset=utf-8
< Content-Length: 2
< ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
< Set-Cookie: sails.sid=s%3AqOZoNKY2CCZ6PFb9fIKaAjtiTKjB7Gum.9jodWIUG6DCNnXu%2Bn%2BF8cJmI%2Fn19Tk%2FdIkDPBl%2BILbI; Path=/; HttpOnly
< Date: Wed, 22 May 2024 18:23:16 GMT
< Connection: keep-alive
< Keep-Alive: timeout=5
<
* Connection #0 to host localhost left intact
OK
```

**Response with `deliveryMethod=json`**

```
$ curl --insecure -v -H 'content-type: application/json' http://localhost:2024/api/v1/deliver-apple-csr?deliveryMethod=json -d '{"unsignedCsrData": "foo"}'
*   Trying [::1]:2024...
* Connected to localhost (::1) port 2024
> POST /api/v1/deliver-apple-csr?alt=json HTTP/1.1
> Host: localhost:2024
> User-Agent: curl/8.4.0
> Accept: */*
> content-type: application/json
> Content-Length: 26
>
< HTTP/1.1 200 OK
< X-Powered-By: Sails <sailsjs.com>
< Cache-Control: no-cache, no-store
< Content-Type: application/json; charset=utf-8
< X-Exit: success
< X-Exit-Description: Delivered email to specified email address with certificate signing request attached.
< X-Exit-Output-Friendly-Name: RSS feed XML
< Content-Length: 26
< ETag: W/"1a-NnuclRv86ZEKA9WB967iUGlz84s"
< Set-Cookie: sails.sid=s%3AbpaKOTbNe4E911qH4z1-12ABGd_z2d2I.mAimDARoZgnq8zpJHcF95y8qFJXX0iky4Suj0HUKjpI; Path=/; HttpOnly
< Date: Wed, 22 May 2024 18:22:07 GMT
< Connection: keep-alive
< Keep-Alive: timeout=5
<
* Connection #0 to host localhost left intact
{"csr":"UEQ5NGJXdy4uLg=="}
```

# Checklist for submitter

- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-28 10:08:03 -03:00
Sam Pfluger
1fd0e3796e
Handbook/digital-experience: add obtain a signature from the CEO (#19299) 2024-05-27 19:19:15 -05:00
Eric
02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00
Sam Pfluger
1b28707c60
Update DRI in Digital Exp rituals (#19298) 2024-05-27 17:45:10 -05:00
Eric
2af2c41572
Website: Update round robin in salesforce helpers & move lead creation to save-questionnaire-progress. (#19209)
Closes: #18932

Changes:
- Updated `update-or-create-contact-and-account.js` to not round robin
new account records created.
- Updated create-lead to reassign accounts owned by the integrations
admin user when a new lead is created.
- Updated logged warnings in signup, deliver-contact-form-message and
deliver-talk-to-us-form-submission.
- Updated signup.js to not create salesforce leads (only account and
contact records)
- Updated save-questionnaire-progress to create Salesforce leads when we
know the user has a use case for Fleet.
2024-05-27 16:43:40 -05:00
Nathanael Holliday
b1a18bc4a5
Remove former employee from receive-from-github.js (#19189)
Removed departed employee

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
Co-authored-by: Sampfluger88 <sampfluger88@gmail.com>
2024-05-24 19:29:00 -05:00
Joanne Stableford
ed159cebc8
Update communications with demand references (#19273) 2024-05-24 18:38:05 -05:00
Isabell Reedy
f02afe09c1
Add steps for running international commission payroll to bizops page (#19227)
Co-authored-by: Joanne Stableford <59930035+JoStableford@users.noreply.github.com>
Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
2024-05-24 18:37:13 -05:00
Joanne Stableford
9244732220
Update Demand handbook page (#19270) 2024-05-24 18:35:44 -05:00
Eric
7bd7c023e2
Docs: Fix broken relative link on SSO docs page (#19216)
Changes:
- Fixed a broken relative link
2024-05-24 16:57:29 -05:00
Jacob Shandling
c73904ec8c
UI – Place all TooltipWrapper tooltips on the bottom (#19002)
## Addresses #18741 
<img width="727" alt="Screenshot 2024-05-14 at 3 26 20 PM"
src="https://github.com/fleetdm/fleet/assets/61553566/671c680e-00db-4481-a7b3-5425bf6a610d">

- [x] Changes file added for user-visible changes in `changes/`,
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2024-05-24 14:30:54 -07:00
Joanne Stableford
fc5f16c464
Correct BizOps page formatting and numbers (#19231) 2024-05-24 15:59:32 -05:00
Noah Talerman
b43a203b25
features.yml: Software management features (#19279) 2024-05-24 13:27:48 -07:00
Luke Heath
f84124718e
Add network and system hardening standards to handbook (#19263) 2024-05-24 15:09:00 -05:00
Benjamin Edwards
978a9413ee
kinesis logging destination module (#19269)
Create a Kinesis Logging Terraform Module similar to the existing
Firehose Logging Terraform Module.

- [X] Manual QA for all new/changed functionality

relates to https://github.com/fleetdm/confidential/issues/6548
2024-05-24 15:24:15 -04:00
Brock Walters
88e94b1c4f
Update authdb.yml (#19274)
Modified Description field.
2024-05-24 15:23:09 -04:00
Sharon Katz
f75f0776e6
additional stats (#19078)
Additional telemetry stats to report to Heroku.
FYI - @eashaw, we could later add to datadog as well.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-05-24 15:06:10 -04:00
Brock Walters
4545e960ae
Update arp_cache.yml (#19254)
Updates to Fleet Table Docs per
https://github.com/fleetdm/fleet/issues/16993

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-05-24 15:05:57 -04:00
Sam Pfluger
87225ece32
Update README.md (#19266) 2024-05-24 12:20:50 -05:00
JD
81e98eab6b
Article: Endpoint mgmt role in healthcare. (#19226)
Article: Endpoint management's crucial role in healthcare.
https://github.com/fleetdm/confidential/issues/6568
2024-05-24 10:16:18 -07:00
Victor Lyuboslavsky
addbceece0
Activity feed webhooks backend (#19261)
This is a redo of the already-approved PR
https://github.com/fleetdm/fleet/pull/19125

The difference is that this merge is into main as opposed to the feature
branch.
2024-05-24 11:25:27 -05:00
Noah Talerman
d81ffdb5db
Update 4.45.0 release article (#19257)
- Credit @grahamgilbert and
[macadmins/osquery-extension](https://github.com/macadmins/osquery-extension)

Thank you for your awesome work Graham
2024-05-24 10:26:19 -04:00