Commit Graph

1420 Commits

Author SHA1 Message Date
Greg Neagle fa6e4c3348 Merge branch 'master' into Munki3dev 2018-10-16 10:26:00 -07:00
Jim Zajkowski 6af274bd61 Sort the conditionals list so they always run in the same order (#870) 2018-10-16 10:25:20 -07:00
Greg Neagle c44e935759 Merge branch 'master' into Munki3dev 2018-10-03 15:51:04 +02:00
Arjen van Bochoven 0bfa5a38b5 Remove .lower() from check_mode() in pkginfolib (#867)
Fix #866
2018-10-03 15:48:55 +02:00
Greg Neagle 3cc8badcfd use --applicationpath with startosinstall only on pre-Mojave 2018-09-25 08:39:33 -07:00
Greg Neagle 5935e22418 After further investigation, only drop --applicationpath from Mojave startosinstall runs 2018-09-25 08:34:36 -07:00
Greg Neagle 7b6822f9c6 Don't use --applicationpath option for startosinstall for later releases of High Sierra and for Mojave. Bump version for future release. 2018-09-25 08:11:35 -07:00
Greg Neagle 97d704c7a1 Bump version for future release 2018-09-24 13:41:29 -07:00
Greg Neagle 129b35df13 Add Mojave softwareupdate catalog to list of default catalogs 2018-09-24 13:39:43 -07:00
Greg Neagle 611050eb38 Add Mojave softwareupdate catalog to list of default catalogs 2018-09-24 13:37:08 -07:00
Greg Neagle ba941433fd Bump version for future release 2018-09-18 15:52:37 -07:00
Greg Neagle 4988436c24 Bump version for future release 2018-09-18 15:52:10 -07:00
Greg Neagle 5c05072f85 Bump version to 3.3.2 for future release 2018-08-30 10:36:20 -07:00
Greg Neagle ce6bc92dce Safer determination of short hostname; Raise a GurlError instead of allowing an unhandled exception if a download rename fails 2018-08-15 13:48:29 -07:00
Greg Neagle 2794253104 Safer determination of short hostname; Raise a GurlError instead of allowing an unhandled exception if a download rename fails 2018-08-15 13:44:43 -07:00
Greg Neagle e93b6a881c More os-version-specific startosinstall tweaking 2018-08-07 16:30:49 -07:00
Greg Neagle 9c1fb0f206 Don't add --applicationpath arguments for 10.14+ startosinstall invocations 2018-08-07 15:42:57 -07:00
Greg Neagle 0c03c28b05 precaching changes
Added precache_agent and code to run it at the end of a Munki updatecheck. Updated make_munki_mpkg* scripts to include
the new precache_agent in the core package.
2018-07-18 14:21:33 -07:00
Greg Neagle 0716732a6f appleupdates changes
During install of Apple updates on 10.11+, only use the --no-scan flag if we cannot reach the softwareupdate server.
This is an attempt to minimize issues seen with "too old" cached updates on 10.12+ -- the thought is that if softwareupdate
is allowed to check with the server it can "update" or "refresh" the "stale" updates before attempting an install.
All of this is educated guesswork, sadly.
2018-07-18 09:24:08 -07:00
Greg Neagle 6111ce6c17 Change default mode adjustments for copy_from_dmg items from o-w to o-w,go+rX to address dumb developers who don't test anything other than manual drag-n-drop on single-user Macs 2018-07-02 14:05:32 -07:00
Greg Neagle e2a4a12950 Don't exit with an unhandled exception if LaunchServices._LSCopyAllApplicationURLs(None) returns None/nil 2018-06-25 11:29:11 -07:00
Greg Neagle f438b5def9 Don't exit with an unhandled exception if LaunchServices._LSCopyAllApplicationURLs(None) returns None/nil 2018-06-25 11:28:34 -07:00
Greg Neagle ee7be2997d Before copying a directory for a copy_from_dmg item, ensure it is owned by root (in addition to the 0700 check) 2018-06-19 15:31:35 -07:00
Greg Neagle 43cedc5d1c Before copying a directory for a copy_from_dmg item, ensure it is owned by root (in addition to the 0700 check) 2018-06-19 15:30:38 -07:00
Greg Neagle a489f9caa3 Catch exception if we cannot securely create the destination directory for a copy_from_dmg item 2018-06-19 14:47:09 -07:00
Greg Neagle 8496349b73 Catch exception if we cannot securely create the destination directory for a copy_from_dmg item 2018-06-19 14:46:33 -07:00
Greg Neagle 9d7733ea24 Merge branch 'no-serveserve-symlink' into Munki3dev 2018-06-19 09:45:22 -07:00
Greg Neagle 1485aa82fe Merge branch 'copy-from-dmg-fix' into Munki3dev 2018-06-19 09:45:12 -07:00
Greg Neagle 470013ac8a Merge branch 'no-serveserve-symlink' 2018-06-19 09:37:41 -07:00
Greg Neagle 18ef54ca00 Don't allow user-writable SelfServiceManifest to be a symlink 2018-06-18 14:42:52 -07:00
Greg Neagle 9e0d4e0426 More strict validation of permissions when copying directories from a disk image. 2018-06-18 11:28:50 -07:00
Clayton Burlison b1e94a072b fix: Remove OpenSSL import in keychain.py (#856)
In Mojave 10.14 Apple has updated the openssl version to a newer release
of LibreSSL (2.6.4) that no longer contains the proper Symbols for SSLv3.
This causes import errors in the OpenSSL module that ships with 10.14.

To resolve the import errors we now shell out to openssl to get the
client cert common name. This has been hand tested with the following
macOS/openssl versions:

- 10.12 - 0.9.8zh 14 Jan 2016
- 10.13 - LibreSSL 2.2.7
- 10.14b1 - LibreSSL 2.6.4

Fix: #855
2018-06-12 08:23:13 -07:00
Clayton Burlison c7774a0130 fix: Remove OpenSSL import in keychain.py (#856)
In Mojave 10.14 Apple has updated the openssl version to a newer release
of LibreSSL (2.6.4) that no longer contains the proper Symbols for SSLv3.
This causes import errors in the OpenSSL module that ships with 10.14.

To resolve the import errors we now shell out to openssl to get the
client cert common name. This has been hand tested with the following
macOS/openssl versions:

- 10.12 - 0.9.8zh 14 Jan 2016
- 10.13 - LibreSSL 2.2.7
- 10.14b1 - LibreSSL 2.6.4

Fix: #855
2018-06-06 13:46:18 -07:00
Greg Neagle 24c0e41054 When storing password for authrestart, also store (and retreive) username for use with APFS on High Sierra+ 2018-06-04 15:35:56 -07:00
Greg Neagle d248ec8121 When storing password for authrestart, also store (and retreive) username for use with APFS on High Sierra+ 2018-06-04 15:35:18 -07:00
Greg Neagle 4bc577bb97 When checking for evidence of installation when evaluating a managed_uninstall, do not be fooled by an empty installs array. 2018-05-30 13:55:15 -07:00
Greg Neagle 0bf8d5d23c When checking for evidence of installation when evaluating a managed_uninstall, do not be fooled by an empty installs array. 2018-05-30 13:54:50 -07:00
Greg Neagle 2d0e4797c5 Don't crash if DomainName is not set in the current network configuration when attempting to auto-detect the repo URL 2018-05-30 08:10:32 -07:00
Greg Neagle ff0832fdf3 Don't crash if DomainName is not set in the current network configuration when attempting to auto-detect the repo URL 2018-05-30 08:10:01 -07:00
Greg Neagle 3f3d3ea032 Merge branch 'precaching' into Munki3dev 2018-05-17 18:56:00 -07:00
Greg Neagle 5d7a1671f4 Bumping version for future release 2018-05-16 21:53:08 -07:00
Greg Neagle 6a2586e655 Bumping version for future release 2018-05-16 06:22:49 -07:00
Greg Neagle 2ad96d86af Fix for inaccurate detection of already-mounted disk images 2018-05-08 17:02:40 -07:00
Greg Neagle b6a21b3809 Start of precaching support. 2018-05-06 21:58:15 -07:00
Greg Neagle ceb3e347bb Merge branch 'aysiu-precache' into precaching 2018-05-06 15:29:08 -07:00
aysiu 2db087ebb5 Wrap precache code 2018-05-04 15:50:31 -07:00
aysiu 1aef5d9a77 Prevent precache optional installs from deletion 2018-05-04 08:44:30 -07:00
aysiu 63a0a92fba Add precache info to iteminfo 2018-05-04 08:43:11 -07:00
Greg Neagle ddac5a7ea7 When installing Apple updates via softwareupdate, attempt to use the InstallHistory.plist to determine installation success before using the parsed outout of the softwareupdate binary. 2018-04-24 16:39:34 -07:00
Greg Neagle 975d2b1f36 When SoftwareRepoURL is not defined, try several default URLs starting with some https:// urls 2018-04-17 22:34:40 -07:00