google / santa

A binary authorization and monitoring system for macOS

https://santa.dev

google/santa Issues

compiler rule with golang
Closed 2 days ago5
Unable to set the configuration element enable_transitive_rules using santactl
Updated 3 days ago12
Document transitive allowlisting limitations
Updated 3 days ago1
Document differences between events for sync servers and telemetry
Updated 8 days ago
Support log upload when file system monitoring denies an operation
Updated 8 days ago1
Document formatting conventions
Updated 9 days ago
Migrate to bazel modules
Updated 10 days ago1
CDHash serialization issue in fileinfo
Closed 13 days ago3
Document that last rule for a given identifier applies
Updated 14 days ago
How to Allow debugserver Output
Updated 21 days ago5
Apple Signed Binary Blocked: RemotePairingDataVaultHelper
Closed 21 days ago3
Issue with agent reading Santa config
Updated a month ago6
Rewrite Santactl Command Line Parsing to use Abseil
Updated a month ago1
So Many Copies of santactl Process. Is this Normal?
Closed a month ago6
Add OIDs to Certificates in EventUpload
Closed a month ago1
Extend the Sync Protocol's PostFlight step to indicate if policies blocking system critical binaries were pushed
Updated a month ago
`santactl rule` should allow clearing ruleset
Closed a month ago1
Bypass via Recovery Mode
Closed 2 months ago3
Enhancement: Allow rules to be filtered by user
Updated 2 months ago1
Santa should evaluate and potentially kill running processes
Updated 2 months ago2
`contactsd` seem to be able to bypass santa's silent block on macOS Sonoma 14.1.1
Closed 2 months ago6
Symbolic Link Scope
Closed 2 months ago2
deadline exceeded in monitor mode still ends up denying execution
Closed 2 months ago3
Big Sur Style Icon for Santa
Updated 3 months ago
Unable to get transitive rules working with XCode
Updated 3 months ago13
Clean syncs should only optionally remove transitive rules
Closed 3 months ago
Transitive Rules for Bazel Build Agent
Closed 3 months ago1
Make santactl status report on the status of enableTransitiveRules even when not using a sync server
Closed 3 months ago1
The configuration key `EnableForkAndExitLogging` is broken
Closed 3 months ago
Preflight `clean_sync` has no effect when no rules are sent.
Closed 3 months ago4
Add Entitlements to EventUpload in the Sync Protocol
Updated 3 months ago
`santactl rule --check` is broken
Closed 4 months ago2
Intellij IDE Debugging Blocked in Lockdown Mode
Updated 4 months ago6
Parquet output
Updated 4 months ago9
Bundle Scanning Does Not Start When EnableSilentMode = YES
Closed 4 months ago5
Compiler Rule: How to Check?
Closed 4 months ago3
How to remove santa without having access to terminal or applications folder?
Closed 4 months ago
santactl status discrepancy when running as root/non-root
Closed 5 months ago1
Why is Clean Sync Required Always YES Even When Sync Server Sends NO
Closed 5 months ago9
Efficient mechanism for rule pruning
Updated 5 months ago4
santa daemon should have a mechanism to prevent being killed by users with root privileges.
Updated 5 months ago1
Switch to evaluating the live `SecCodeRef` when authorizing new execs
Updated 5 months ago
Binary Blocked But FileInfo Says Allowed
Closed 6 months ago8
System Extension or Kernel?
Closed 6 months ago1
Santa is Blocking SantaCtl
Closed 6 months ago7
Upon install app fails to pick up config from MDM
Updated 6 months ago2
Support for advanced rulesets, including evaluation of flags, via Common Expression Language
Updated 6 months ago1
Options for speeding up the sync of new rules
Closed 7 months ago3
Feature Request: System Notifications in Monitor Mode
Closed 7 months ago4
Compiler rules not allowing specified compiler binary to run?
Closed 7 months ago7