Allister Banks
Allister Banks
I certainly don't want to be asking for a million knobs, but would a 'just nag' mode be acceptable? While in a limited testing deployment I feel like I'd rather...
To accelerate adding to the whitelist, the most applicable criteria for building a rule to be fed into the database should be surfaced in the block GUI, rather than tracking...
Similar to how osquery collects common queries into 'packs' to be enabled in their config, it would be great to be able to import/export rules from the database as an...
# Bug report This is a follow-on of my noisiness about refinements to the os_version across multiple platforms that is related to #7657, but seems to have also been mentioned...
macOS: `alf_explicit_auths` table missing the sysprefs-listed application layer firewall exceptions
steps to repro: `osqueryi --line "select * from alf_explicit_auths"` expected: a combination of the output from `/usr/libexec/ApplicationFirewall/socketfilterfw --listapps`, an example of which is ``` ALF: total number of apps =...
When clicking 'approve requests' from toolbar, type of secret isn't in table view, also noticing type/reason for request isn't populated on admin approval view.
## Description of issue Can't build on (pretty stock) iMac Pro as of Mojave ~10.14.2 ## Expected behavior Successful 'vanilla' build ## Actual behavior Immediate fail at beginning of InstallInfo.plist...
In lieu of releases/tags or a GUI-side update mechanism, knowing what commit version the currently running version is at would be good
Workflow-wise, it may be an interface paradigm to load up a screenful of stuff to operate on, interact, then on the bottom right click 'submit'. the 'new branch' interface elements...
I'm probably missing 'dry-run' santa endpoint perms, I can add them to this PR if you'd like, naming and anything else content-wise is open to discussion as well