fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.01k stars 418 forks source link

Ignore FileVault and fleetd configuration on /mdm/apple/profiles/match #12204

Closed roperzh closed 1 year ago

roperzh commented 1 year ago

Fleet version: 9c44ce040f12b36362cc4d64f52ccaf90df7593f

This part of the query: https://github.com/fleetdm/fleet/blob/9c44ce040f12b36362cc4d64f52ccaf90df7593f/server/datastore/mysql/apple_mdm.go#L128-L130 Never finds a matching team because there are two profiles that can be in mdm_apple_configuration_profiles but are not sent by the Puppet module: FileVault and fleetd configuration (both always have an identifier that's included in here)

fleet-release commented 1 year ago

FileVault breeze calms, Fleetd config drifts away, Glass city unites.