Update moroz based on latest santa client #32
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bringing in the latest changes based on https://santa.dev/development/sync-protocol.html
Removals on Rule type:
sha256field, seems to be deprecated? Going forward, all rules will use theidentifierfield for the sha256, team id, or signing id value.Additions to Rule type:
Additions to Preflight response:
full_sync_interval. This is a required in the response from the serverAdditions to Policy type:
REMOVEpolicy for instances that an admin wants the santa client to remove a ruleUpdates all tests.
Local test (client):
Server side logs:
Local test log: