Commit Graph

2006 Commits

Author SHA1 Message Date
Greg Neagle
5b52ab1ba8 Bump version for future release 2018-09-18 15:53:00 -07:00
Greg Neagle
3fd430e298 Merge branch 'Munki3dev' into swiftapps 2018-09-02 19:16:59 -07:00
Greg Neagle
019f73d761 Safer determination of short hostname; Raise a GurlError instead of allowing an unhandled exception if a download rename fails 2018-08-15 13:48:55 -07:00
Greg Neagle
ce6bc92dce Safer determination of short hostname; Raise a GurlError instead of allowing an unhandled exception if a download rename fails 2018-08-15 13:48:29 -07:00
Greg Neagle
e93b6a881c More os-version-specific startosinstall tweaking 2018-08-07 16:30:49 -07:00
Greg Neagle
9c1fb0f206 Don't add --applicationpath arguments for 10.14+ startosinstall invocations 2018-08-07 15:42:57 -07:00
Greg Neagle
ad16841277 Merge precaching changes 2018-08-07 15:26:18 -07:00
Greg Neagle
0c03c28b05 precaching changes
Added precache_agent and code to run it at the end of a Munki updatecheck. Updated make_munki_mpkg* scripts to include
the new precache_agent in the core package.
2018-07-18 14:21:33 -07:00
Greg Neagle
0716732a6f appleupdates changes
During install of Apple updates on 10.11+, only use the --no-scan flag if we cannot reach the softwareupdate server.
This is an attempt to minimize issues seen with "too old" cached updates on 10.12+ -- the thought is that if softwareupdate
is allowed to check with the server it can "update" or "refresh" the "stale" updates before attempting an install.
All of this is educated guesswork, sadly.
2018-07-18 09:24:08 -07:00
Greg Neagle
6111ce6c17 Change default mode adjustments for copy_from_dmg items from o-w to o-w,go+rX to address dumb developers who don't test anything other than manual drag-n-drop on single-user Macs 2018-07-02 14:05:32 -07:00
Greg Neagle
e2a4a12950 Don't exit with an unhandled exception if LaunchServices._LSCopyAllApplicationURLs(None) returns None/nil 2018-06-25 11:29:11 -07:00
Greg Neagle
43cedc5d1c Before copying a directory for a copy_from_dmg item, ensure it is owned by root (in addition to the 0700 check) 2018-06-19 15:30:38 -07:00
Greg Neagle
a489f9caa3 Catch exception if we cannot securely create the destination directory for a copy_from_dmg item 2018-06-19 14:47:09 -07:00
Greg Neagle
9d7733ea24 Merge branch 'no-serveserve-symlink' into Munki3dev 2018-06-19 09:45:22 -07:00
Greg Neagle
1485aa82fe Merge branch 'copy-from-dmg-fix' into Munki3dev 2018-06-19 09:45:12 -07:00
Greg Neagle
18ef54ca00 Don't allow user-writable SelfServiceManifest to be a symlink 2018-06-18 14:42:52 -07:00
Greg Neagle
9e0d4e0426 More strict validation of permissions when copying directories from a disk image. 2018-06-18 11:28:50 -07:00
Clayton Burlison
b1e94a072b fix: Remove OpenSSL import in keychain.py (#856)
In Mojave 10.14 Apple has updated the openssl version to a newer release
of LibreSSL (2.6.4) that no longer contains the proper Symbols for SSLv3.
This causes import errors in the OpenSSL module that ships with 10.14.

To resolve the import errors we now shell out to openssl to get the
client cert common name. This has been hand tested with the following
macOS/openssl versions:

- 10.12 - 0.9.8zh 14 Jan 2016
- 10.13 - LibreSSL 2.2.7
- 10.14b1 - LibreSSL 2.6.4

Fix: #855
2018-06-12 08:23:13 -07:00
Elliot Jordan
70a4bd21a3 Add missing spaces in help strings (#857) 2018-06-12 08:22:28 -07:00
Elliot Jordan
7468a441cf Add missing spaces in help strings (#857) 2018-06-12 08:21:33 -07:00
Clayton Burlison
c7774a0130 fix: Remove OpenSSL import in keychain.py (#856)
In Mojave 10.14 Apple has updated the openssl version to a newer release
of LibreSSL (2.6.4) that no longer contains the proper Symbols for SSLv3.
This causes import errors in the OpenSSL module that ships with 10.14.

To resolve the import errors we now shell out to openssl to get the
client cert common name. This has been hand tested with the following
macOS/openssl versions:

- 10.12 - 0.9.8zh 14 Jan 2016
- 10.13 - LibreSSL 2.2.7
- 10.14b1 - LibreSSL 2.6.4

Fix: #855
2018-06-06 13:46:18 -07:00
Greg Neagle
5182909bec Add more logging to authrestartd; update comments in MSCPasswordAlertController.py 2018-06-05 16:07:24 -07:00
Greg Neagle
68a5628a34 Add more logging to authrestartd; update comments in MSCPasswordAlertController.py 2018-06-05 16:06:51 -07:00
Greg Neagle
24c0e41054 When storing password for authrestart, also store (and retreive) username for use with APFS on High Sierra+ 2018-06-04 15:35:56 -07:00
Greg Neagle
d248ec8121 When storing password for authrestart, also store (and retreive) username for use with APFS on High Sierra+ 2018-06-04 15:35:18 -07:00
Greg Neagle
4bc577bb97 When checking for evidence of installation when evaluating a managed_uninstall, do not be fooled by an empty installs array. 2018-05-30 13:55:15 -07:00
Greg Neagle
0bf8d5d23c When checking for evidence of installation when evaluating a managed_uninstall, do not be fooled by an empty installs array. 2018-05-30 13:54:50 -07:00
Greg Neagle
2d0e4797c5 Don't crash if DomainName is not set in the current network configuration when attempting to auto-detect the repo URL 2018-05-30 08:10:32 -07:00
Greg Neagle
ff0832fdf3 Don't crash if DomainName is not set in the current network configuration when attempting to auto-detect the repo URL 2018-05-30 08:10:01 -07:00
Greg Neagle
3f3d3ea032 Merge branch 'precaching' into Munki3dev 2018-05-17 18:56:00 -07:00
Greg Neagle
5d7a1671f4 Bumping version for future release 2018-05-16 21:53:08 -07:00
Greg Neagle
6a2586e655 Bumping version for future release 2018-05-16 06:22:49 -07:00
Greg Neagle
2ad96d86af Fix for inaccurate detection of already-mounted disk images 2018-05-08 17:02:40 -07:00
Greg Neagle
b6a21b3809 Start of precaching support. 2018-05-06 21:58:15 -07:00
Greg Neagle
ceb3e347bb Merge branch 'aysiu-precache' into precaching 2018-05-06 15:29:08 -07:00
aysiu
2db087ebb5 Wrap precache code 2018-05-04 15:50:31 -07:00
aysiu
1aef5d9a77 Prevent precache optional installs from deletion 2018-05-04 08:44:30 -07:00
aysiu
63a0a92fba Add precache info to iteminfo 2018-05-04 08:43:11 -07:00
Greg Neagle
ddac5a7ea7 When installing Apple updates via softwareupdate, attempt to use the InstallHistory.plist to determine installation success before using the parsed outout of the softwareupdate binary. 2018-04-24 16:39:34 -07:00
Greg Neagle
48d9c296b2 munkiimport: if no options or arguments are given, print usage 2018-04-19 15:37:39 -07:00
Greg Neagle
6cf7138c7c munkiimport: if no options or arguments are given, print usage 2018-04-19 15:37:02 -07:00
Greg Neagle
c837176d19 Add 'featured' to the list of key/values to copy from the previous pkginfo. Fixes #815. 2018-04-18 13:47:53 -07:00
Greg Neagle
46747a9848 Fix warn_if_server_is_default function to not crash when SoftwareRepoURL is None, a result of the changes in autodetecting ther Munki repo 2018-04-18 10:25:18 -07:00
Greg Neagle
975d2b1f36 When SoftwareRepoURL is not defined, try several default URLs starting with some https:// urls 2018-04-17 22:34:40 -07:00
Greg Neagle
62dd7700fd Refactor app_usage_monitor into user-level agent and privileged daemon. 2018-04-07 19:10:16 -07:00
Greg Neagle
4fd032567a Fix bad merge of version.plist 2018-03-27 17:14:01 -07:00
Greg Neagle
51efa81942 Merge branch 'master' into Munki3dev 2018-03-27 17:11:31 -07:00
Greg Neagle
e1f5f0204b Explicitly clear softwareupdate's LastSessionSuccessful value before checking for updates to minimize false reports of unsuccessful sessions. 2018-03-27 17:08:02 -07:00
Greg Neagle
332212bfce When using os.uname()[1] to get the hostname, decode('UTF-8') to convert to Unicode 2018-03-23 16:00:53 -07:00
Greg Neagle
b365ffcc0a update munkilib/version.plist for eventual release 2018-03-09 16:42:50 -08:00