Pete Markowsky
Pete Markowsky
As part of documenting the Santa sync protocol over at https://github.com/google/santa/pull/860. We'd like to clean up implementations that are using the old identifiers.
Many of our unit tests e.g. those in `SNTFileInfoTest`, reference absolute paths like `/Applicaitions/Safari.app` which on macOS 13 are symlinks to `/System/Cryptexes/App/System/Applications/Safari.app` as such tests fail.
Right now our documentation does not call out that if you send two rules in the rule download for the same identifier then the last rule will over write the...
It'd be nice to have more logs for when Santa changes from enforcing USB blocking and when it stops doing so.
In [2023.10](https://github.com/google/santa/releases/2023.10) we added support for logging entitlements as part of the execution telemetry. In order for users to be able to vote / authorize binaries based on entitlements we...
Running on an Ubuntu 22 VM with a 5.15 kernel the PID namespace check incorrectly identified that it was in a namespace. This looks like the check for the device...
First off thank you for the documentation, it's great. A lot of the links in the documentation link twitter threads that no longer exists. Any chance that these threads are...
This PR refactors SNTPolicyProcessor to use a flat_hash_map instead of the switch statement. This is being done for two reasons: 1. To make it easier to add rules in the...
In Santa we have a few conventions that we try to stick to in the codebase. This needs to be documented. * Hashes -- should be lowercase * CDHash --...
There's a lot of hard to test command line parsing in santactl. This should be refactored to use [Abseil's Flag library](https://abseil.io/docs/cpp/guides/flags).