Commit Graph

3017 Commits

Author SHA1 Message Date
Greg Neagle e93b6a881c More os-version-specific startosinstall tweaking 2018-08-07 16:30:49 -07:00
Greg Neagle 9c1fb0f206 Don't add --applicationpath arguments for 10.14+ startosinstall invocations 2018-08-07 15:42:57 -07:00
Greg Neagle 7f0c1a77cd Fix for category page views 2018-08-07 15:27:55 -07:00
Greg Neagle ad16841277 Merge precaching changes 2018-08-07 15:26:18 -07:00
Greg Neagle 4d7436233c MunkiStatus: remove project.xcworkspace and xcuserdata from git tracking and cache 2018-07-29 07:43:51 -07:00
Greg Neagle 4f2f5bffa4 remove project.xcworkspace and xcuserdata from git tracking and cache 2018-07-29 07:41:39 -07:00
Greg Neagle 31cae67988 Resolves issues with blocking apps, authrestartd communication, and display of various alerts 2018-07-29 07:35:48 -07:00
Greg Neagle 619c7c455f Managed Software Center project file changes; add .gitignore 2018-07-27 16:48:46 -07:00
Greg Neagle fe8ab3be13 Implement unix domain socket and code for talking to authrestartd 2018-07-27 16:23:43 -07:00
Greg Neagle e85dc163e1 Add Swift versions of the GUI apps 2018-07-23 12:44:33 -07:00
Greg Neagle 0c03c28b05 precaching changes
Added precache_agent and code to run it at the end of a Munki updatecheck. Updated make_munki_mpkg* scripts to include
the new precache_agent in the core package.
2018-07-18 14:21:33 -07:00
Greg Neagle 0716732a6f appleupdates changes
During install of Apple updates on 10.11+, only use the --no-scan flag if we cannot reach the softwareupdate server.
This is an attempt to minimize issues seen with "too old" cached updates on 10.12+ -- the thought is that if softwareupdate
is allowed to check with the server it can "update" or "refresh" the "stale" updates before attempting an install.
All of this is educated guesswork, sadly.
2018-07-18 09:24:08 -07:00
Greg Neagle 6111ce6c17 Change default mode adjustments for copy_from_dmg items from o-w to o-w,go+rX to address dumb developers who don't test anything other than manual drag-n-drop on single-user Macs 2018-07-02 14:05:32 -07:00
Greg Neagle c306937879 One more fix for Python2.6 search paths 2018-06-30 09:47:12 -07:00
Greg Neagle ca46fedb18 Disable tabs in MunkiStatus windows. Remove PATH references to Python2.6 2018-06-30 09:43:57 -07:00
Greg Neagle ca86f48c1a Disable tabbing mode in MSC windows; remove PATH references to Python2.6 2018-06-30 09:38:16 -07:00
Greg Neagle e2a4a12950 Don't exit with an unhandled exception if LaunchServices._LSCopyAllApplicationURLs(None) returns None/nil 2018-06-25 11:29:11 -07:00
Greg Neagle f438b5def9 Don't exit with an unhandled exception if LaunchServices._LSCopyAllApplicationURLs(None) returns None/nil 2018-06-25 11:28:34 -07:00
Greg Neagle ee7be2997d Before copying a directory for a copy_from_dmg item, ensure it is owned by root (in addition to the 0700 check) 2018-06-19 15:31:35 -07:00
Greg Neagle 43cedc5d1c Before copying a directory for a copy_from_dmg item, ensure it is owned by root (in addition to the 0700 check) 2018-06-19 15:30:38 -07:00
Greg Neagle a489f9caa3 Catch exception if we cannot securely create the destination directory for a copy_from_dmg item 2018-06-19 14:47:09 -07:00
Greg Neagle 8496349b73 Catch exception if we cannot securely create the destination directory for a copy_from_dmg item 2018-06-19 14:46:33 -07:00
Greg Neagle 9d7733ea24 Merge branch 'no-serveserve-symlink' into Munki3dev 2018-06-19 09:45:22 -07:00
Greg Neagle 1485aa82fe Merge branch 'copy-from-dmg-fix' into Munki3dev 2018-06-19 09:45:12 -07:00
Greg Neagle 470013ac8a Merge branch 'no-serveserve-symlink' 2018-06-19 09:37:41 -07:00
Greg Neagle 18ef54ca00 Don't allow user-writable SelfServiceManifest to be a symlink 2018-06-18 14:42:52 -07:00
Greg Neagle 9e0d4e0426 More strict validation of permissions when copying directories from a disk image. 2018-06-18 11:28:50 -07:00
Clayton Burlison b1e94a072b fix: Remove OpenSSL import in keychain.py (#856)
In Mojave 10.14 Apple has updated the openssl version to a newer release
of LibreSSL (2.6.4) that no longer contains the proper Symbols for SSLv3.
This causes import errors in the OpenSSL module that ships with 10.14.

To resolve the import errors we now shell out to openssl to get the
client cert common name. This has been hand tested with the following
macOS/openssl versions:

- 10.12 - 0.9.8zh 14 Jan 2016
- 10.13 - LibreSSL 2.2.7
- 10.14b1 - LibreSSL 2.6.4

Fix: #855
2018-06-12 08:23:13 -07:00
Elliot Jordan 70a4bd21a3 Add missing spaces in help strings (#857) 2018-06-12 08:22:28 -07:00
Elliot Jordan 7468a441cf Add missing spaces in help strings (#857) 2018-06-12 08:21:33 -07:00
Clayton Burlison c7774a0130 fix: Remove OpenSSL import in keychain.py (#856)
In Mojave 10.14 Apple has updated the openssl version to a newer release
of LibreSSL (2.6.4) that no longer contains the proper Symbols for SSLv3.
This causes import errors in the OpenSSL module that ships with 10.14.

To resolve the import errors we now shell out to openssl to get the
client cert common name. This has been hand tested with the following
macOS/openssl versions:

- 10.12 - 0.9.8zh 14 Jan 2016
- 10.13 - LibreSSL 2.2.7
- 10.14b1 - LibreSSL 2.6.4

Fix: #855
2018-06-06 13:46:18 -07:00
Greg Neagle 5182909bec Add more logging to authrestartd; update comments in MSCPasswordAlertController.py 2018-06-05 16:07:24 -07:00
Greg Neagle 68a5628a34 Add more logging to authrestartd; update comments in MSCPasswordAlertController.py 2018-06-05 16:06:51 -07:00
Greg Neagle 24c0e41054 When storing password for authrestart, also store (and retreive) username for use with APFS on High Sierra+ 2018-06-04 15:35:56 -07:00
Greg Neagle d248ec8121 When storing password for authrestart, also store (and retreive) username for use with APFS on High Sierra+ 2018-06-04 15:35:18 -07:00
Greg Neagle 5b25093f76 Better implementation of discardTimeZoneFromDate() 2018-05-31 21:18:29 -07:00
Greg Neagle 4bc577bb97 When checking for evidence of installation when evaluating a managed_uninstall, do not be fooled by an empty installs array. 2018-05-30 13:55:15 -07:00
Greg Neagle 0bf8d5d23c When checking for evidence of installation when evaluating a managed_uninstall, do not be fooled by an empty installs array. 2018-05-30 13:54:50 -07:00
Greg Neagle 2d0e4797c5 Don't crash if DomainName is not set in the current network configuration when attempting to auto-detect the repo URL 2018-05-30 08:10:32 -07:00
Greg Neagle ff0832fdf3 Don't crash if DomainName is not set in the current network configuration when attempting to auto-detect the repo URL 2018-05-30 08:10:01 -07:00
Greg Neagle 3f3d3ea032 Merge branch 'precaching' into Munki3dev 2018-05-17 18:56:00 -07:00
Greg Neagle 5d7a1671f4 Bumping version for future release 2018-05-16 21:53:08 -07:00
Greg Neagle 6a2586e655 Bumping version for future release 2018-05-16 06:22:49 -07:00
Greg Neagle 83b3429fad Fix owner and group for /private/etc/paths.d/munki 2018-05-09 08:18:23 -07:00
Greg Neagle bd46420907 Properly set ownership for LaunchAgent in app_usage pkg 2018-05-09 06:52:02 -07:00
Greg Neagle 2ad96d86af Fix for inaccurate detection of already-mounted disk images 2018-05-08 17:02:40 -07:00
Greg Neagle b6a21b3809 Start of precaching support. 2018-05-06 21:58:15 -07:00
Greg Neagle ceb3e347bb Merge branch 'aysiu-precache' into precaching 2018-05-06 15:29:08 -07:00
aysiu 2db087ebb5 Wrap precache code 2018-05-04 15:50:31 -07:00
aysiu 1aef5d9a77 Prevent precache optional installs from deletion 2018-05-04 08:44:30 -07:00