izzh

Support log upload when file system monitoring denies an operation

1

I hope to support configuring a custom URL to automatically upload file system monitor blocking events to the sync server. The log content should be consistent with the fields supported...

santa daemon should have a mechanism to prevent being killed by users with root privileges.

1

If I have root privileges, I can bypass the allowlist mechanism by repeatedly killing santa daemon in a loop. ``` #!bin/bash while true; do ps aux | grep com.google.santa.daemon |...