IMPORTANT: This release includes a fix that can impact some operations for users on macOS 14.4. We encourage all hosts to be upgraded as soon as possible to mitigate potential disruption.
Fixed
❗ Events received with deadlines in the very near future would be automatically denied.
Changed
↔️ The FailClosed
configuration key is now respected in Lockdown
mode when determining whether automatic fallback responses to events whose deadlines are about to expire should be allowed or denied. In Monitor
mode, Santa now fails open similar to other usages of the FailClosed
key.
What's Changed
- ProcessTree: add core process tree logic (1/4) by @kallsyms in #1236
- Fix import issues and lint by @kallsyms in #1282
- Fix automatically denied events with small deadlines by @mlw in #1284
- Respect fail closed on deadlines by @mlw in #1285
- Add build dep for internal process by @mlw in #1286
- Remove proc tree tests for now as the code isn't yet included in builds by @mlw in #1287
Full Changelog: 2024.1...2024.2