Notes
- The Santa system extension now prevents
santa-driver.kextfrom being loaded, to prevent the two systems from dueling, which can happen if an old version of Santa is installed after a sysx version has been enabled. - Add support for
%hostname%,%uuid%,%serial%to EventDetailURL (thanks to @hughneale!) - Allow a sync server to remotely set FullSyncInterval during preflight (thanks to @hughneale!)
- Add a config key (
IgnoreOtherEndpointSecurityClients) to ignore events generated by other EndpointSecurity clients, which may cause increased CPU usage. - Add a config key (
EnableDebugLogging) to enable debug logging for all Santa components - Fix a bug in santactl/sync that can cause infinite recursion discovering identities from self-signed roots (issue #497).
Important
The v1.x versions of Santa include many architectural changes. Including the usage of EndpointSecurity and SystemExtensions for systems running macOS 10.15+.
Once Santa's SystemExtension is installed, it cannot be removed without prompting the user.
See the notes for the v1.0.3 release regarding SystemExtension and TCC permissions required to run this release on 10.15.