Commit graph

6674 commits

Author SHA1 Message Date
Mike McNeil
f85a3327b5
Fix typo, add link, correct route (#9715) 2023-02-08 19:25:17 -06:00
Mike Thomas
24714d9b5a
Update pricing-features-table.yml (#9761)
Updated Granular RBAC to Premium in the compare plans table.
2023-02-09 10:23:08 +09:00
gillespi314
aca2449566
Add new data types and table for Apple MDM config profiles (#9758) 2023-02-08 18:36:20 -06:00
Roberto Dip
7cd581866a
add API endpoint to see disk encryption key (#9713)
https://github.com/fleetdm/fleet/issues/8708
2023-02-08 20:20:23 -03:00
Mike McNeil
275a5993a8
Bizops handbook (#9741)
- Think we should merge these PeopleOps and BizOps sections (and instead
surface their contents as top-level nav items)? Would make the page
easier to explore.
- Seeing navigation like "Business operations > BizOps" is confusing to
me, and we don't normally use PascalCase headings. One solution could be
to "deindent" BizOps (so its underlying sections are top level) and to
change PeopleOps to "People"
2023-02-08 13:56:52 -07:00
Sharon Katz
c248968ba3
CIS 2.3.3.9 (#9752) 2023-02-08 15:43:03 -05:00
Jacob Shandling
5c0f635966
clarify Teams > MDM settings docs (#9754)
Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
2023-02-08 11:49:01 -08:00
Artemis Tosini
9fd70ee9e0
Add macOS CIS 2.3.3.7 (Remote Apple Events) (#9751) 2023-02-08 14:13:11 -05:00
Lucas Manuel Rodriguez
2265c84b2a
Add CIS check for 5.8 (#9750)
#9260

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.~
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- ~[ ] Added/updated tests~
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-08 13:38:17 -03:00
Lucas Manuel Rodriguez
d4a1b4d218
Add CIS checks for 2.9.X and add pmset table to fleetd (#9470)
#9253

- ~[ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.~
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~

---------

Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com>
2023-02-08 13:08:17 -03:00
Mike Thomas
3cdea3c896
Website - /pricing update CTA text for Fleet Community Edition (#9746)
Updated the CTA text for Fleet Community Edition that links to sandbox
from "Get started" to "Try it out."

See [this Slack
thread](https://fleetdm.slack.com/archives/C01ALP02RB5/p1675811264928269)
for context.
2023-02-08 10:07:46 -06:00
Artemis Tosini
b6968892b0
Add macOS CIS 6.1.1 (Show All Filename Extensions) (#9740)
This adds CIS 6.1.1
---------
Co-authored-by: Sharon Katz <sharon@fleetdm.com>
Approved by: Sharon Katz <sharon@fleetdm.com>
2023-02-08 10:51:42 -05:00
Lucas Manuel Rodriguez
086ec05ca7
Add CIS check for 5.7 (#9748)
#9260

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-02-08 12:30:55 -03:00
Sharon Katz
9672f03d37
CIS 5.1.5/5.1.6/5.1.7 (#9726) 2023-02-08 10:11:20 -05:00
Roberto Dip
046401d190
Ingest file vault recovery keys in macOS (#9712)
Related + details at https://github.com/fleetdm/fleet/issues/8708
2023-02-08 11:49:42 -03:00
Mo Zhu
331c51925b
Update product office hours (#9744)
Co-authored-by: Mo Zhu <mozhu@mos-macbook-air.lan>
2023-02-08 09:29:34 -05:00
TomOstertag
20484946e8
Handbook Outreach (#9727)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-07 19:38:06 -06:00
Andrew Baker
24fc9244e0
Update beta availability (#9743)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-07 19:02:25 -05:00
Eric
c1787e2724
Website: Update pricing footnote (#9742)
Changes:
 - Moved the footnote about additional hosts on the pricing page.
2023-02-07 17:30:16 -06:00
Mike McNeil
d80101924f
Tolerate haiku failures (#9738)
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-07 16:07:54 -06:00
Noah Talerman
f4dd05d3ee
Docs: Fix images on Mobile device management page (#9734)
- Update links so that images render correctly
2023-02-07 14:00:32 -08:00
Eric
4f8e0dcd0d
Regenerate osquery_fleet_schema.json (#9730)
Changes:
- Ran the `generate-merged-schema` script to regenerate
`schema/osquery_fleet_schema.json`
2023-02-07 15:30:19 -06:00
Noah Talerman
9ae5941d8c
Docs: MDM - pending hosts (#9728)
- Explain what MDM status "Pending" means
- Explain default team and how to update
2023-02-07 16:03:30 -05:00
Dave Herder
5174762e4b
Update Testing-and-local-development.md (#9717)
Added some examples for referring to when generating APNs certs

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)
- [ ] Documented any permissions changes
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2023-02-07 13:53:23 -06:00
Noah Talerman
b87c28726a
Docs: Add instructions for MDM migration (#9708)
These docs address 5 out of 7 requirements in the "Docs for MDM
migration" issue here: #9009

Docs also add an "Instructions for end users" section to address docs
for "Manual enrollment" issue:
https://github.com/fleetdm/fleet/issues/7957#issuecomment-1416262879

- Add instructions for IT admins on how to switch MDM solutions for
hosts manually enrolled to the old MDM solution
- Add instructions for IT admins on how to switch MDM solutions for
hosts automatically enrolled (DEP) to the old MDM solution
- Add information for IT admins about how Fleet treats Activation Lock
Bypass codes
- Add instructions for end users on how to switch MDM solutions for
hosts manually and automatically enrolled to the old MDM solution (same
instructions)
2023-02-07 13:53:14 -06:00
Mike McNeil
532133a2ae
List open positions (#9725)
In an effort to maximize our focus on delivering value for customers, we
will simplify the hiring process to use Fleet's handbook as the source
of truth for open job listings.
2023-02-07 13:39:34 -06:00
Noah Talerman
0591d6769d
4.27.0 release article: Update image (#9724)
- Replace image for failed login attempts
2023-02-07 14:02:27 -05:00
Sharon Katz
84fcee9130
CIS 5.1.3+5.1.4 (#9642) 2023-02-07 13:26:05 -05:00
Noah Talerman
46b8929e64
fleetdm.com pricing page: Add "Audit log" (#9723)
- Add "Audit log" item. Covers ability to ship activity to external
destinations. Fleet Premium only

More context here in Slack (internal):
https://fleetdm.slack.com/archives/C02A8BRABB5/p1675783658467209
2023-02-07 11:38:33 -06:00
Mike Thomas
e5bd7b9a58
4.27.0 release article: Image update (#9719)
- Updated the image on the release post.
2023-02-07 12:29:16 -05:00
Mike Thomas
45c359284d
Update pricing.ejs (#9718)
Updated IT placeholder text.
2023-02-07 09:23:35 -06:00
Eric
57228a63b9
Website: Update CSR email template (#9714)
Closes https://github.com/fleetdm/fleet/issues/9671

Changes:
- updated the position of the lightbulb icon in the CSR email template.
2023-02-06 16:55:44 -06:00
Andrew Baker
d22d82f889
Release post 4.27.0 (#9709)
Co-authored-by: Eric <eashaw@sailsjs.com>
2023-02-06 17:36:26 -05:00
Artemis Tosini
61da4d3331
Add macOS CIS 2.3.3.4 (Printer Sharing) (#9665)
This makes sure printer sharing is disabled on macOS using the CUPS
configuration file. This script makes a change that both works and is
reflected in the macOS UI, unlike many of the scripts
2023-02-06 17:12:17 -05:00
Charlie Chance
a57a728e10
Update ceo-handbook.md (#9707) 2023-02-06 13:35:08 -07:00
Charlie Chance
119ca732df
Update ceo-handbook.md (#9706) 2023-02-06 13:31:43 -07:00
Artemis Tosini
857e6830d8
Add macOS CIS 2.3.3.11 (Bluetooth Sharing) (#9688)
This adds a test for 2.3.3.11, which verifies that all users have
Bluetooth sharing disabled.

It's not possible to create a profile and it's challenging to write a
script, so testing must be done manually.
As with all sharing tests, the machine will be compliant out of the box.
For QA you should open the sharing preference pane (System Settings >
General > Sharing) and then enable Bluetooth sharing and this test
should fail. Switching bluetooth sharing back off will fix it.
2023-02-06 15:29:47 -05:00
Charlie Chance
7e68e6b167
Update ceo-handbook.md (#9705) 2023-02-06 13:28:23 -07:00
Artemis Tosini
21428cb6a6
Add the first queries of CIS 2.3.3 looking at launchd overrides (#9619)
This adds all the CIS 2.3.3.x queries that are nearly identical and
based on launch agent overrides
2023-02-06 15:27:42 -05:00
Charlie Chance
a3b744b837
Update ceo-handbook.md (#9704) 2023-02-06 13:26:23 -07:00
Eric
621b01cdf0
Website: update capitalization on pricing page (#9701) 2023-02-06 12:21:46 -06:00
Artemis Tosini
985c051ebb
Add macOS CIS 2.3.3.6 (Remote Management) (#9664)
I can't find any way of adding a policy to remove ARD but this uses an
officially documented script to disable it which works on my mac.
2023-02-06 13:13:38 -05:00
Sharon Katz
7aefd5c73b
Cis 3.4 (#9554) 2023-02-06 13:13:11 -05:00
Eric
fb81af833b
Website: Update pricing calculator (#9700)
Changes: 
- Updated the Fleet Ultimate card to show two decimal places on the
price per host, and to change color when the price per host changes
because of the pricing calculator.
- Fixed a bug where the pricing calculator would display as $NaN/month
when each field of the pricing calculator is set to 0 hosts.
2023-02-06 11:59:39 -06:00
Eric
cb5b220989
Website: Disable bot comments on closed issues. (#9696)
Changes:
- Disabled the Open AI API request in the `receive-from-github` webhook.
It is currently returning a `429` response and causing `500` errors.
<img width="753" alt="image"
src="https://user-images.githubusercontent.com/7445991/217028846-77e75d98-a595-46e7-aefa-7a76811b32d4.png">
2023-02-06 10:45:29 -06:00
Eric
416963de36
Website: Update pricing page (#9621)
Closes https://github.com/fleetdm/confidential/issues/1818

Changes:
- Updated the layout and content of the `/pricing` page
- `pricing-features-table.yml`: Added an "Ultimate" tier with three
features.
- `build-static-content.js` - Updated the build script to add support
for the "Ultimate" tier in `pricing-features-table.yml`

---------

Co-authored-by: Mike Thomas <mthomas@fleetdm.com>
2023-02-06 10:41:36 -06:00
Benjamin Edwards
78e41b60b3
refactor logging module to prefer logging directly to firehose (#9678)
prefer logging to firehose in target-account, this opens up more
flexibility to choose different out-of-the-box firehose destinations.

by default S3 destination is provided, as a destination is required to
create a firehose delivery stream
2023-02-06 10:38:23 -05:00
Marcos Oviedo
1c7f94b745
Adding support to user friendly command output (#9620)
This relates to #9310 

This PR adds a new column to the bridge mdm_table to provide a parsed
and user-friendly output of the input command

This will help in creating compliance queries

There is also an improvement to UTF16 to go string conversion scenarios.
This was required by scenarios on which output commands can vary in size

I've also added support to restrict input commands to read-only commands
(only the SyncML verb Get is supported)
2023-02-06 11:41:05 -03:00
Lucas Manuel Rodriguez
c6ab010833
Amend the loadtesting README.md (#9650)
Amending some parts of the README.md after following the guide to load
test #9559.

PS: Great documentation we have here!
2023-02-06 06:54:44 -03:00
Luke Heath
b3daf3d715
Prepare for 4.27.0 (#9683) 2023-02-03 17:03:06 -08:00