Notes
Fixed
❗ Fixed performance regression that could occur when protobuf logging was configured and the spool directory was full
❗ Fixed issue where some daemon settings were being overridden by default values during sync preflight
Changed
↔️ Rules received now have their case forced to be what is expected during evaluation (e.g. hashes are forced to be lower case, Team IDs are uppercase)
↔️ Distributed notifications posted by Santa are now delivered immediately
↔️ All daemon settings sent during sync preflight now take effect during postflight
Added
➕ Added support for per-rule custom urls when a binary is blocked
➕ Custom headers can now be configured for sync requests
What's Changed
- Update sync-protocol.md to include SIGNINGID rule type by @p-harrison in #1130
- Add more file access config options by @mlw in #1128
- Wire up TTYWriter instance to the file access client by @mlw in #1129
- Enforce expected case for various rule type identifiers by @mlw in #1132
- Add additional dep to satisfy import issue by @mlw in #1134
- Change "exponential" backoff in SNTSyncStage.m to be exponential by @alexgraehl in #1135
- Check if spool dir has changed before estimating size by @mlw in #1138
- Have distributed notifications delivered immediately by @mlw in #1141
- Only update daemon settings when sync settings explicitly set by @mlw in #1142
- sync: Add SyncExtraHeaders config option. by @russellhancox in #1144
- sync/UI: Add ability to send custom URLs for blocking rules. by @russellhancox in #1140
- Add hot cache for targets of read only policies by @mlw in #1145
- Cast enum to int by @itf in #1146
- Project: Split integration VM license into its own LICENSE file by @russellhancox in #1147
New Contributors
- @p-harrison made their first contribution in #1130
- @alexgraehl made their first contribution in #1135
Full Changelog: 2023.6...2023.7