fleetdm/fleet fleet-v4.28.0

on GitHub

Changes

• Added logic to ingest and decrypt FileVault recovery keys on macOS if Fleet's MDM is enabled.

• Create activity feed types for the creation, update, and deletion of macOS profiles (settings) via
  MDM.

• Added an API endpoint to retrieve a host disk encryption key for macOS if Fleet's MDM is enabled.

• Added UI implementation for users to upload, download, and deleted macos profiles.

• Added activity feed types for the creation, update, and deletion of macOS profiles (settings) via
  MDM.

• Added API endpoints to create, delete, list, and download MDM configuration profiles.

• Added "edited macos profiles" activity when updating a team's (or no team's) custom macOS settings via fleetctl apply.

• Enabled installation and auto-updates of Nudge via Orbit.

• Added support for providing macos_settings.custom_settings profiles for team (with Fleet Premium) and no-team levels via fleetctl apply.

• Added --policies-team flag to fleetctl apply to easily import a group of policies into a team.

• Remove requirement for Rosetta in installation of macOS packages on Apple Silicon. The binaries have been "universal" for a while now, but the installer still required Rosetta until now.

• Added max height on org logo image to ensure consistent height of the nav bar.

• UI default policies pre-select targeted platform(s) only.

• Parse the Mac Office release notes and use that for doing vulnerability processing.

• Only set public IPs on the host.public_ip field and add documentation on how to properly configure the deployment to ingest correct public IPs from enrolled devices.

• Added tooltip with link to UI when Public IP address cannot be determined.

• Update to better URL validation in UI.

• Set policy platforms using the platform checkboxes as a user would expect the options to successfully save.

• Standardized on a default value for empty cells in the UI.

• Added link to query table in UI source (fleetdm.com/tables/table_name).

• Added live query distributed interval warnings on select targets picker and live query result page.

• Added a macOS settings indicator and modal on the host details and device user pages.

• Added configuration parameters for the filesystem logging destination -- max_size, max_age, and max_backups are now configurable rather than hardcoded values.

• Live query/policy selecting "All hosts" is mutually exclusive from other filters.

• Minor server changes to support Fleetd for ChromeOS (to be released soon).

• Fixed network_interface_unix and network_interface_windows to ingest "Private IPs" only
  (filter out "Public IPs").

• Fixed how the Fleet MDM server URL is generated when stored for hosts enrolled in Fleet MDM.

• Fixed a panic when loading information for a host enrolled in MDM and its is_server field is
  NULL.

• Fixed bug with host count on hosts filtered by operating system version.

• Fixed permissions warnings reported by Suspicious Package in macos pkg installers. These warnings
  appeared to be purely cosmetic.

• Fixed UI bug: Long words in activity feed wrap within the div.

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

0f4a88bf8c7a61ab4617d9bce456997cd29a3d84b7f47ae469d80a992cfc06fd  fleet_v4.28.0_linux.tar.gz
24f203acd3ed6f5632c30a37e9fdaeb7b0953b41909d89d3d7efd23415cb2313  fleetctl_v4.28.0_linux.tar.gz
5f17e72ed6dc8fc853008f983e1d73d157543f7131b0ec65af53f34513e62ce6  fleetctl_v4.28.0_linux.zip
7f0dc33095bbd7cf555af786b18bd05dd7602c3606ca0eab61e25eed737e28f7  fleetctl_v4.28.0_windows.zip
842cbf2a46648d826b8eeef0a7c97e1bcd5ef591a335c069cd6fa13c57c9ed67  fleetctl_v4.28.0_macos.tar.gz
852a4c11fe41b367f0b1db4c498f8b2f8b092939fdfdbffbbf1682da997cc7a8  fleetctl_v4.28.0_macos.zip
b7cca2bae9b94fb93d28f73a6b28e959b26b0954f0143e25d8bb3c4bc815b27e  fleetctl_v4.28.0_windows.tar.gz