Comments (4)
Done. I made a few changes to match reality.
Can the regex's be arrays that therefore evaluate sequentially, or does it have to be 'one superregex to rule them all'?
No, it has to be one regex for performance reasons. Of course, you can use | and the like.
Also about regex's, I'm assuming the code comments are telling me the truth about prepending ^ to those that don't have it
The code comments are correct but all that means is that the regex anchors at the beginning of the string so it can't start matching part way through a path. This helps to avoid accidental matches and improves performance.
I also removed the notes about the regexes only applying to the root volume, as that isn't true; file changes on external volumes will be logged if they match the regex.
I messed up the attempt at putting 'skip's in asl.conf, if you could please throw in your working example
Done.
from santa.
Cool! Just one thing I finally figured out: without restarting, HUP'ing syslogd is necessary to have the new config picked up. Please add that note to the bottom of https://github.com/google/santa/wiki/Configuration#logging-configuration
sudo killall -HUP syslogd
from santa.
Done
from santa.
Cool! I'll consider this closed until new features drop. Thanks!
from santa.
Related Issues (20)
- Allow events not being sent to sync server in Lockdown mode HOT 5
- Blocked Execution system notification is not processed unless receiver is focussed HOT 5
- Config: Add ability to include custom headers in sync requests
- Simple developer bootstrap - still possible? HOT 2
- v2023.6 Does not Apply Path Scope Rules HOT 1
- How to build santa universal binary HOT 8
- Unable to enable lockdown mode HOT 5
- Enhancement idea: Wildcards in SigningID rules HOT 4
- Compiler rules not allowing specified compiler binary to run? HOT 7
- Unable to get transitive rules working with XCode HOT 13
- Intellij IDE Debugging Blocked in Lockdown Mode HOT 6
- Feature Request: System Notifications in Monitor Mode HOT 4
- Transitive Rules for Bazel Build Agent HOT 1
- Options for speeding up the sync of new rules HOT 3
- Upon install app fails to pick up config from MDM HOT 2
- Support for advanced rulesets, including evaluation of flags, via Common Expression Language HOT 1
- System Extension or Kernel? HOT 1
- Santa is Blocking SantaCtl HOT 7
- Binary Blocked But FileInfo Says Allowed HOT 8
- Bundle Scanning Does Not Start When EnableSilentMode = YES HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from santa.