Pete Markowsky

Closing this as we've not done it in over 5 years. We may revisit this at some point in the future but I think that needs another feature request.

Looking through Sonoma WWDC videos looks like we need this to do this to use environmental constraints https://developer.apple.com/videos/play/wwdc2023/10266/

@russellhancox is this something we could do with the cutover to Swift UI?

Related to #1133

None of us on the team have parallels so the more information you could give us the better. Can you paste the full output of the `santactl fileinfo` command? Also...

@andyury so looking at that WinAppHelper screenshot. The application is unsigned and depending on your configuration and Santa rules this is working as intended. You'd need to approve each of...

Marking this as closed since it's been stale for a while. Please feel free to reopen.

This potentially could be done with something like CEL as proposed in #1200.

Can you send us the output from `log stream --predicate 'sender == "com.google.santa.daemon"`? `/var/db/santa/santa.log` is the output log where we log execution telemetry. e.g. `[2024-01-27T00:47:59.176Z] I santad: action=EXEC|decision=ALLOW|reason=CERT|sha256=417c54bd19c3e02e0b0728eb407b75ce7912e7898585c94ecc8755242a483c61|cert_sha256=d84db96af8c2e60ac4c851a21ec460f6f84e0235beb17d24a78712b9b021ed57|cert_cn=Software Signing|pid=30214|pidversion=67632|ppid=1525|uid=501|user=user|gid=20|group=staff|mode=M|path=/bin/ls|args=ls -F`...

>FWIW I have tried to deploy both the [default template](https://github.com/google/santa/blob/main/docs/deployment/com.google.santa.example.mobileconfig) as well as a few slimmed-down versions I modified--nothing changes the rule count from zero though. @Zehpto Since it sounds...