santa icon indicating copy to clipboard operation
santa copied to clipboard

A binary authorization and monitoring system for macOS

Results 101 santa issues
Sort by recently updated
recently updated
newest added

Right now our documentation does not call out that if you send two rules in the rule download for the same identifier then the last rule will over write the...

docs
sync service

It'd be nice to have more logs for when Santa changes from enforcing USB blocking and when it stops doing so.

enhancement

This PR: * Instantiates a process tree in SantaDeps, and threads it through to the enricher and proto serializer. * Adds a new `SNTEndpointSecurityTreeAwareClient` which clients subclass from to automatically...

Santa's current icon still adheres to the pre-Big Sur style and should be updated to match the new MacOS design language. I've made such an icon and have attached the...

enhancement

Hello, I am trying to do a POC without a sync server and am having issues having the Santa configuration profile rules propagate to the client. I am using Jamf....

Wonder if somebody could tell me where I might be going wrong here please? I'm trying to enable transitive rules for XCode for our devs. I'm testing on a clean...

question
rules
transitive allowlisting

When attempting to support users developing applications using go, node (ie. the use of npm binaries), python etc. the regex string supporting either AllowedPathRegex, BlockedPathRegex & FileChangesRegex can become unwieldily....

enhancement
blocked

In [2023.10](https://github.com/google/santa/releases/2023.10) we added support for logging entitlements as part of the execution telemetry. In order for users to be able to vote / authorize binaries based on entitlements we...

sync service

This patch series adds support for building the parquet2 Rust crate and using it, from C++, to write a parquet file.

logging

I hope to support configuring a custom URL to automatically upload file system monitor blocking events to the sync server. The log content should be consistent with the fields supported...

enhancement
sync service
file access authorization