v2023.7

Notes

Fixed

❗ Fixed performance regression that could occur when protobuf logging was configured and the spool directory was full

❗ Fixed issue where some daemon settings were being overridden by default values during sync preflight

Changed

↔️ Rules received now have their case forced to be what is expected during evaluation (e.g. hashes are forced to be lower case, Team IDs are uppercase)

↔️ Distributed notifications posted by Santa are now delivered immediately

↔️ All daemon settings sent during sync preflight now take effect during postflight

Added

➕ Added support for per-rule custom urls when a binary is blocked

➕ Custom headers can now be configured for sync requests

What's Changed

• Update sync-protocol.md to include SIGNINGID rule type by @p-harrison in #1130
• Add more file access config options by @mlw in #1128
• Wire up TTYWriter instance to the file access client by @mlw in #1129
• Enforce expected case for various rule type identifiers by @mlw in #1132
• Add additional dep to satisfy import issue by @mlw in #1134
• Change "exponential" backoff in SNTSyncStage.m to be exponential by @alexgraehl in #1135
• Check if spool dir has changed before estimating size by @mlw in #1138
• Have distributed notifications delivered immediately by @mlw in #1141
• Only update daemon settings when sync settings explicitly set by @mlw in #1142
• sync: Add SyncExtraHeaders config option. by @russellhancox in #1144
• sync/UI: Add ability to send custom URLs for blocking rules. by @russellhancox in #1140
• Add hot cache for targets of read only policies by @mlw in #1145
• Cast enum to int by @itf in #1146
• Project: Split integration VM license into its own LICENSE file by @russellhancox in #1147

New Contributors

• @p-harrison made their first contribution in #1130
• @alexgraehl made their first contribution in #1135

Full Changelog: 2023.6...2023.7