Pete Markowsky

We just released it today https://github.com/google/santa/releases/2023.8

@eopeter if you test this can you make sure to have `EnableDebugLogging` in your application config. This should tell us if you're making the transitive rule.

I run with about 64,000+ rules as well. Most of the rules are for binaries that aren't on my machine. Out of the options above the following makes the most...

I'm going to close this issue. Feel free to open this back up if there's more to discuss.

Still looking into internal build stuff with this.

Apologies for the long delay here. There were some internal things that needed to happen before we could resume looking at this.

@the80srobot Can you make this a static library as it simplifies the internal builds dramatically?

Another idea to get something similar to bundle ID rules is that you could use a combination of bundle hash and signing ID in the Events to figure out what...

Pro-tip: don't file bugs when tired. This looks like the check needs to be updated to follow the symlink in `/proc/1/ns/pid` to still be valid for the device number. e.g....

My $0.02 is to add the following definition: * `Events` are specific things we want the user / sync service to approve * `Logs` are Santa's official record of what...