Santa Versions Save

A binary authorization and monitoring system for macOS

2023.4

1 year ago

Notes

❗ The EnableBackwardsCompatibleContentEncoding config key has been removed. We were not aware of any sync servers requiring this key; please contact us if you were using it and need an equivalent to be added.

➕ A new config key, SyncClientContentEncoding has been added to allow switching from the default deflate to gzip. This new option doesn't improve compression but is required for some servers to support compression.

➕ A new config key, EnableSilentTTYMode has been added, that allows disabling notifications from Santa to be posted in a user's terminal session.

What's Changed

GUI: Device event window, handle empty remount args by @russellhancox in https://github.com/google/santa/pull/1066
sync: Add more complete XSSI prefix to be stripped. by @russellhancox in https://github.com/google/santa/pull/1068
Fix string length issues by @mlw in https://github.com/google/santa/pull/1070
config: Add EnableSilentTTYMode key to disable TTY notifications. by @russellhancox in https://github.com/google/santa/pull/1072
Ensure unmount always flushes appropriate caches by @mlw in https://github.com/google/santa/pull/1073
Cache flush metrics by @mlw in https://github.com/google/santa/pull/1074
README: Add more badges by @russellhancox in https://github.com/google/santa/pull/1075
Make the sync client content encoding a tunable by @pmarkowsky in https://github.com/google/santa/pull/1076
One more TSAN fix by @kallsyms in https://github.com/google/santa/pull/1079
sync: Permit XSRF header between sync stages/sessions by @russellhancox in https://github.com/google/santa/pull/1081

Full Changelog: https://github.com/google/santa/compare/2023.3...2023.4

2023.3

1 year ago

What's Changed

santactl/rule: Validate identifier is a valid SHA-256 for binary/cert rules by @russellhancox in https://github.com/google/santa/pull/1045
Config: Ignore static rules with an invalid identifier by @russellhancox in https://github.com/google/santa/pull/1049
metrics: Properly report "file access client enabled" metrics by @mlw in https://github.com/google/santa/pull/1051
chore(ci): Upgrade workflows to non-deprecated runtimes by @dev-slatto in https://github.com/google/santa/pull/1052
Basic rate limiting for File Access Authorizer by @mlw in https://github.com/google/santa/pull/1053
config: Support filesystem monitoring config embedded in main Santa config by @mlw in https://github.com/google/santa/pull/1054
[BUGFIX] Fix SD Card Block not operating on Internal SD Card Readers by @liamn in https://github.com/google/santa/pull/1055
test: Fix a couple last TSAN failures by @kallsyms in https://github.com/google/santa/pull/1056
docs: Document SigningID and PlatformBinary exception keys by @mlw in https://github.com/google/santa/pull/1059
sync: Allow server to override the header for transmitting XSRF tokens by @russellhancox in https://github.com/google/santa/pull/1060
sync: Fix case of empty header name by @russellhancox in https://github.com/google/santa/pull/1062
protolog: Change types of repeated args and envs fields by @mlw in https://github.com/google/santa/pull/1063

New Contributors

@dev-slatto made their first contribution in https://github.com/google/santa/pull/1052

Full Changelog: https://github.com/google/santa/compare/2023.2...2023.3

2023.2

1 year ago

Notes

Many improvements to the File Access Authorization feature, which remains in BETA.
Platform binaries can now be excluded from authorization checks in FAA
Several performance improvements

What's Changed

GUI: Re-write AboutWindow view in SwiftUI by @russellhancox in https://github.com/google/santa/pull/1007
shadow rules_python for fuzzing by @kallsyms in https://github.com/google/santa/pull/1009
GUI: Migrate DeviceMessageWindow to SwiftUI by @russellhancox in https://github.com/google/santa/pull/1010
Ensure watch item names conform to naming requirements by @mlw in https://github.com/google/santa/pull/1011
Reduce proto warning severity by @mlw in https://github.com/google/santa/pull/1012
Reduce calls into configurator by @mlw in https://github.com/google/santa/pull/1013
Project: Fix module maps for swift libraries and their dependencies by @russellhancox in https://github.com/google/santa/pull/1014
Remove extra expectation in test by @mlw in https://github.com/google/santa/pull/1015
Add new continuous test run with various sanitizers by @kallsyms in https://github.com/google/santa/pull/1016
Log type metrics by @mlw in https://github.com/google/santa/pull/1018
Initial docs for file access auth feature by @mlw in https://github.com/google/santa/pull/1017
Fsmon docs table width by @mlw in https://github.com/google/santa/pull/1020
Try with more vertical space by @mlw in https://github.com/google/santa/pull/1021
docs: Support wider pages, fix syntax highlighting of plist by @russellhancox in https://github.com/google/santa/pull/1022
Remove Default column by @mlw in https://github.com/google/santa/pull/1024
add updated description by @headmin in https://github.com/google/santa/pull/1023
docs: fix width of sidebar on larger windows by @russellhancox in https://github.com/google/santa/pull/1025
Fix team ID and signing ID checks by @mlw in https://github.com/google/santa/pull/1026
Fix: Rewrite the SNTMetricHTTPWriter to avoid potential stack corruption by @pmarkowsky in https://github.com/google/santa/pull/1019
Perf: Translocate cache, reserve proto repeated fields by @mlw in https://github.com/google/santa/pull/1027
Use cached sizes when serializing by @mlw in https://github.com/google/santa/pull/1028
Rework timeout handling in metrics HTTP writer by @mlw in https://github.com/google/santa/pull/1029
Restart daemon on log type change by @mlw in https://github.com/google/santa/pull/1031
santactl & syncservice: Use synchronousRemoteObjectProxy where it makes sense by @russellhancox in https://github.com/google/santa/pull/1033
Configurator: Return an unsafe_unretained pointer to avoid needless retain/release by @russellhancox in https://github.com/google/santa/pull/1035
Replace SNTDecisionCache dictionary with SantaCache by @mlw in https://github.com/google/santa/pull/1034
Report log type in santactl status by @mlw in https://github.com/google/santa/pull/1036
Small test fixes to make sanitizers happy by @kallsyms in https://github.com/google/santa/pull/1030
Fix: correct sync protocol diagram by @pmarkowsky in https://github.com/google/santa/pull/1037
Clear ES cache when watch items change by @mlw in https://github.com/google/santa/pull/1042
Add support for platform binary to process exceptions by @mlw in https://github.com/google/santa/pull/1041
Add basic metrics to report when the FAM client is enabled by @mlw in https://github.com/google/santa/pull/1043

Full Changelog: https://github.com/google/santa/compare/2023.1...2023.2

2023.1

1 year ago

Notes

Dropped support for macOS 10.15, minimum version is now macOS 11.
(BETA) Added file access authorization feature, docs at https://santa.dev/deployment/file-access-auth
USB blocking will now also block SD cards (thanks @liamn)
sync: Improved debug output when auth fails
Improved reliability in reconnecting sync and metrics daemons
Several performance improvements

What's Changed

docs: Fix typo in sync-protocol, h/t to @maxwbuckley by @russellhancox in https://github.com/google/santa/pull/940
docs: Update keyserver address in SECURITY by @russellhancox in https://github.com/google/santa/pull/941
Rename santa_vnode_id_t to SantaVnode by @mlw in https://github.com/google/santa/pull/943
Switch from task_info to libproc for system resource info by @mlw in https://github.com/google/santa/pull/939
Drop macOS 10.15 by @mlw in https://github.com/google/santa/pull/944
Remove SNTCommon by @mlw in https://github.com/google/santa/pull/945
Include SD Card Mounting in the USB Block Functionality by @liamn in https://github.com/google/santa/pull/938
Watch items by @mlw in https://github.com/google/santa/pull/937
Tests: Fix some assertions comparing strings by @russellhancox in https://github.com/google/santa/pull/947
santad: Change workaround for glob header with blocks by @russellhancox in https://github.com/google/santa/pull/948
Initial work for File Access Authorizer Client by @mlw in https://github.com/google/santa/pull/949
Draft proto for new FileAccess log by @mlw in https://github.com/google/santa/pull/952
FS Access Config Version, Policy decision enums by @mlw in https://github.com/google/santa/pull/951
Import fix by @mlw in https://github.com/google/santa/pull/953
pemdas by @mlw in https://github.com/google/santa/pull/955
Config: In debug builds, allow config to be overridden from a plist file. by @russellhancox in https://github.com/google/santa/pull/957
Tests: Fix SNTEndpointSecurityFileAccessAuthorizerTest by @russellhancox in https://github.com/google/santa/pull/958
Dynamically enable/disable FS Access client based on config by @mlw in https://github.com/google/santa/pull/959
Use the appropriate variable when asynchronously processing auth messages by @mlw in https://github.com/google/santa/pull/961
Enrich file access events, prepare for logging by @mlw in https://github.com/google/santa/pull/962
santad: Flush cache when StaticRules are changed by @russellhancox in https://github.com/google/santa/pull/963
Serialize File Access events by @mlw in https://github.com/google/santa/pull/964
Introduce end-to-end testing by @kallsyms in https://github.com/google/santa/pull/919
Lint the E2E start-vm Python script by @kallsyms in https://github.com/google/santa/pull/965
Fix message lifetime by @mlw in https://github.com/google/santa/pull/966
Use absl_guarded_by instead of guarded_by by @kallsyms in https://github.com/google/santa/pull/967
Track path types for current/new watch items by @mlw in https://github.com/google/santa/pull/968
Fix import issues by @mlw in https://github.com/google/santa/pull/969
Update LICENSE for VM code by @kallsyms in https://github.com/google/santa/pull/970
Address policy consistency issues by @mlw in https://github.com/google/santa/pull/971
sync: Fix deduplication in reachability handler by @russellhancox in https://github.com/google/santa/pull/973
Fix golden test data for macOS 13 by @mlw in https://github.com/google/santa/pull/972
Project: Upgrade MOLAuthenticatingURLSession to v3.1 by @russellhancox in https://github.com/google/santa/pull/974
Adopt new ES APIs to monitor target paths by @mlw in https://github.com/google/santa/pull/975
Revitalize Fuzzing by @kallsyms in https://github.com/google/santa/pull/976
Fix import: Add build targets, lint by @mlw in https://github.com/google/santa/pull/978
Allstar: Add fuzzing artifact by @russellhancox in https://github.com/google/santa/pull/980
Fix SNTFileInfoTest for macOS 13 by @pmarkowsky in https://github.com/google/santa/pull/977
Fix loop when no override config is specified by @kallsyms in https://github.com/google/santa/pull/981
Run fuzzing in a VM by @kallsyms in https://github.com/google/santa/pull/982
Use new public api for booting VM into recoveryOS by @kallsyms in https://github.com/google/santa/pull/983
Adopt new ES APIs to watch target paths in tamper client by @mlw in https://github.com/google/santa/pull/984
Fix SNTFileInfo Fuzzing by @kallsyms in https://github.com/google/santa/pull/985
Fix nightly run cron specification by @kallsyms in https://github.com/google/santa/pull/986
Opportunistically use ES cache when possible by @mlw in https://github.com/google/santa/pull/989
Fuzz embedded plist reading by @kallsyms in https://github.com/google/santa/pull/990
Add more event coverage in the file access client by @mlw in https://github.com/google/santa/pull/991
More event type support by @mlw in https://github.com/google/santa/pull/992
lower fuzz case timeout to 5s by @kallsyms in https://github.com/google/santa/pull/993
Change name of santa config keys for file access monitoring by @mlw in https://github.com/google/santa/pull/995
docs: Fix deployment/configuration doc by @russellhancox in https://github.com/google/santa/pull/996
Add policy version and name to basic string serializer by @mlw in https://github.com/google/santa/pull/997
Adopt new FS Access Auth config format and policy application logic by @mlw in https://github.com/google/santa/pull/994
Support configuring signing IDs for process exceptions by @mlw in https://github.com/google/santa/pull/998
Rename type aliases by @mlw in https://github.com/google/santa/pull/999
Add watch item state to santactl status by @mlw in https://github.com/google/santa/pull/1000
Reconnect to santametrics service on failure by @kallsyms in https://github.com/google/santa/pull/1001
Configurator: Apply config updates in non-daemon processes by @russellhancox in https://github.com/google/santa/pull/1003
Low hanging fruit perf changes by @mlw in https://github.com/google/santa/pull/1004
Prevent recursive reconnect attempts by @mlw in https://github.com/google/santa/pull/1005
Revert "Configurator: Apply config updates in non-daemon processes" by @russellhancox in https://github.com/google/santa/pull/1008

New Contributors

@liamn made their first contribution in https://github.com/google/santa/pull/938

Full Changelog: https://github.com/google/santa/compare/2022.11...2023.1

2022.11

1 year ago

What's Changed

Docs: Fix type of {allowed,blocked}_path_regex keys in preflight by @russellhancox in https://github.com/google/santa/pull/934
Prefix tree updates by @mlw in https://github.com/google/santa/pull/931
GUI: Fix distributed notifications in silent mode by @russellhancox in https://github.com/google/santa/pull/936

Full Changelog: https://github.com/google/santa/compare/2022.10...2022.11

2022.10

1 year ago

Notes

Re-added the protobuf value for the EventLogTypeconfiguration key. This key remains a BETA and should not be used in production as changes are still being made.
The block_usb_mount and remount_usb_mode keys can now correctly be synchronized from a server.
The EnableSilentMode key for the GUI has been fixed. Note: enabling silent mode currently breaks distributed notifications; this is fixed in the 2022.11 release, which should be published within 2 weeks.**

What's Changed

Make SNTCommonEnums a textual header by @itf in https://github.com/google/santa/pull/896
Proto serializer by @mlw in https://github.com/google/santa/pull/897
Fsspool adopt by @mlw in https://github.com/google/santa/pull/900
Fix USB config sync by @np5 in https://github.com/google/santa/pull/890
Machine id proto by @mlw in https://github.com/google/santa/pull/907
Spool writer by @mlw in https://github.com/google/santa/pull/908
Proto minimization by @mlw in https://github.com/google/santa/pull/909
USB: usbBlockMessage is not being used. by @videlanicolas in https://github.com/google/santa/pull/915
Fix issue with transposed remount/banned block messages by @mlw in https://github.com/google/santa/pull/917
Fix: duplicates bug in SNTMetricSet when using multiple fields by @pmarkowsky in https://github.com/google/santa/pull/920
Event metrics by @mlw in https://github.com/google/santa/pull/918
Fix issue in test that would crash on some platforms by @mlw in https://github.com/google/santa/pull/922
Change order that ES clients are enabled by @mlw in https://github.com/google/santa/pull/923
Update Known Limitations for USB Mass Storage Blocking by @pmarkowsky in https://github.com/google/santa/pull/924
GUI: Fix EnableSilentMode key by @russellhancox in https://github.com/google/santa/pull/927
metrics and logging cleanup by @mlw in https://github.com/google/santa/pull/928
Update spool to flush on size thresholds instead of batch counts by @mlw in https://github.com/google/santa/pull/930
Don't add messages when accumulated bytes exceeds threshold by @mlw in https://github.com/google/santa/pull/932

Build fixes

Import fixes by @mlw in https://github.com/google/santa/pull/902
More import fixes by @mlw in https://github.com/google/santa/pull/904
Update include paths and add include guard by @mlw in https://github.com/google/santa/pull/905
Update build docs. by @mlw in https://github.com/google/santa/pull/911
Change include to import by @mlw in https://github.com/google/santa/pull/912
Various changes to fix import by @mlw in https://github.com/google/santa/pull/913
Fix some more includes by @mlw in https://github.com/google/santa/pull/914
More import fixes by @mlw in https://github.com/google/santa/pull/921

New Contributors

@itf made their first contribution in https://github.com/google/santa/pull/896
@videlanicolas made their first contribution in https://github.com/google/santa/pull/915

Full Changelog: https://github.com/google/santa/compare/2022.9...2022.10

2022.9

1 year ago

Notes

This release includes a major overhaul of Santa internals, primarily its logging subsystem and how it interacts with the EndpointSecurity framework to receive events.
The beta protobuf value for the EventLogType configuration key is not supported in this release.
The EnableSysxCache configuration key has been removed. There is no longer an option to disable response caching within Santa.

What's Changed

README: Fix logo link, remove coverage badge by @russellhancox in https://github.com/google/santa/pull/882
README: Try again, this time replacing the correct bit by @russellhancox in https://github.com/google/santa/pull/883
Allstar: Pre-emptively check-in binary_artifacts.yaml to exclude test binaries by @russellhancox in https://github.com/google/santa/pull/884
Refactor the SNTApplicationTest unit tests to function correctly by @pmarkowsky in https://github.com/google/santa/pull/885
Project: Update bazel and apple-rules by @russellhancox in https://github.com/google/santa/pull/887
ES and Logging Interfaces Redesign by @mlw in https://github.com/google/santa/pull/888
Ingestion fixups by @mlw in https://github.com/google/santa/pull/891
Linter and BUILD deps fixups by @mlw in https://github.com/google/santa/pull/892
Build deps by @mlw in https://github.com/google/santa/pull/893
Return a value from the test block by @mlw in https://github.com/google/santa/pull/894
Fix crash flushing cache on unmount events by @mlw in https://github.com/google/santa/pull/895

Full Changelog: https://github.com/google/santa/compare/2022.8...2022.9

2022.8

1 year ago

Notes

Sync state plist is no longer world-readable
GUI now shows team ID for App Store apps
Added EnableSilentMode configuration option to disable GUI notifications
Santa now posts NSDistributedNotificationCenter notifications for block events

What's Changed

Sync state plist | only allow santad read+write permissions by @bfreezy in https://github.com/google/santa/pull/858
Docs: Add recommended rollout doc by @kathancox in https://github.com/google/santa/pull/861
syncservice: Add tests for NSData+Zlib and Postflight by @russellhancox in https://github.com/google/santa/pull/864
Sync Protocol Docs by @pmarkowsky in https://github.com/google/santa/pull/860
Docs: Add StaticRules to example mobileconfig by @russellhancox in https://github.com/google/santa/pull/866
add link to GitHub in docs by @headmin in https://github.com/google/santa/pull/868
GUI: For App Store published apps, include team ID. by @russellhancox in https://github.com/google/santa/pull/872
GUI: Add silent mode configuration option. by @russellhancox in https://github.com/google/santa/pull/871
Santa: Post distributed notification when showing block UI by @russellhancox in https://github.com/google/santa/pull/870
GUI: Improve signing chain key reporting in distributed notifications. by @russellhancox in https://github.com/google/santa/pull/874
Project: Add a GH action to prevent trailing whitespace by @russellhancox in https://github.com/google/santa/pull/873
GUI: Expose SNTNotificationManager.h for the test. by @russellhancox in https://github.com/google/santa/pull/875
GUI: Missed a required dependency by @russellhancox in https://github.com/google/santa/pull/876
Project: Rename Source/santa -> Source/gui by @russellhancox in https://github.com/google/santa/pull/877
Fix up endTimestamp to be Monarch compliant by @pmarkowsky in https://github.com/google/santa/pull/879

Full Changelog: https://github.com/google/santa/compare/2022.7...2022.8

2022.7

1 year ago

Notes

This release adds Static Rules, which can be used to either manage rules using an MDM or for managing a fallback set of rules in case an issue occurs with a configured sync server.
Event uploads and logs now include the team ID
An option to disable event uploads for unknown binaries was added

What's Changed

Readme: http -> https link by @case in https://github.com/google/santa/pull/829
Add team ID to synced events by @np5 in https://github.com/google/santa/pull/827
Project: Upgrade bazel rules_apple to 1.0.1 release by @russellhancox in https://github.com/google/santa/pull/830
Docs: Add gemfile for running jekyll locally. by @russellhancox in https://github.com/google/santa/pull/834
Use the message copy in the dispatch blocks by @mlw in https://github.com/google/santa/pull/839
adhoc build and run santa by @tburgin in https://github.com/google/santa/pull/840
Docs: Updated home page with README files & nav changes by @kathancox in https://github.com/google/santa/pull/841
CI: Make CI workflow only run on source changes by @russellhancox in https://github.com/google/santa/pull/843
Project: Delete tulsiproj, add basic doc about hedron by @russellhancox in https://github.com/google/santa/pull/845
santad: Allow configuring a static set of rules via configuration profile by @russellhancox in https://github.com/google/santa/pull/846
santad: Improve caching of static rules by @russellhancox in https://github.com/google/santa/pull/847
santasyncservice: Keep XSRF token in memory, don't send to daemon by @russellhancox in https://github.com/google/santa/pull/851
santad: Fix re-establishment of syncservice connection by @russellhancox in https://github.com/google/santa/pull/849
santactl/status: Fix printing of static rules by @russellhancox in https://github.com/google/santa/pull/848
santad: Add DisableUnknownEventUpload option. by @russellhancox in https://github.com/google/santa/pull/852
santad: Log team ID in execution logs, where available by @russellhancox in https://github.com/google/santa/pull/850
Ensure KVO works for USB config options by @pmarkowsky in https://github.com/google/santa/pull/853
Added quick getting started page for deployments by @kathancox in https://github.com/google/santa/pull/855
Add sync server list by @kathancox in https://github.com/google/santa/pull/856
Tests: Fix un-needed expectation in SNTExecutionControllerTest.allEve… by @russellhancox in https://github.com/google/santa/pull/857

New Contributors

@case made their first contribution in https://github.com/google/santa/pull/829
@kathancox made their first contribution in https://github.com/google/santa/pull/841

Full Changelog: https://github.com/google/santa/compare/2022.6...2022.7

2022.6

1 year ago

What's Changed

Improve logging when file cannot be read. by @Safrout1 in https://github.com/google/santa/pull/817
Remove unused testing scripts by @mlw in https://github.com/google/santa/pull/816
Copy new PrinterProxy file instead of overwriting by @mlw in https://github.com/google/santa/pull/819
Mute self to reduce message volume. Remove noisy log message. by @mlw in https://github.com/google/santa/pull/820
santad: Copy/retain ES message for use in deadline handler. by @russellhancox in https://github.com/google/santa/pull/822
Added handling for Remount events to USB mass storage blocking by @pmarkowsky in https://github.com/google/santa/pull/818
santad: Fix some style nits by @russellhancox in https://github.com/google/santa/pull/824
santad: Update assert usage to avoid a string-to-bool conversion by @russellhancox in https://github.com/google/santa/pull/825
santactl/status: Remove driver connected, re-org USB blocking status by @russellhancox in https://github.com/google/santa/pull/826

New Contributors

@Safrout1 made their first contribution in https://github.com/google/santa/pull/817

Full Changelog: https://github.com/google/santa/compare/2022.5...2022.6