fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.15k stars 432 forks source link

macOS `.app`s directory name leak into software titles #23999

Open lucasmrod opened 1 day ago

lucasmrod commented 1 day ago

Fleet version: v4.59.1 (probably previous versions too)


If a user (or the system, e.g. downloading an .app twice on the ~/Downloads folder) has renamed an application .app folder, this new name of the folder can end up as the "Software Title" for the corresponding bundle identifier.

See below for steps to reproduce.

💥  Actual behavior

A user or the system renaming an .app folder should not end up in the software title.

🧑‍💻  Steps to reproduce

  1. Have macOS host A rename its /Applications/Google Chrome.app to /Applications/Google Chrome 2.app
  2. Enroll a macOS host A to Fleet.
  3. Software title for host A's Google Chrome will be Google Chrome 2.app.
  4. Enroll a macOS host B to Fleet with Chrome installed (but no renaming).
  5. Host B software tab will show Google Chrome 2.app as the software title for the installed Google Chrome version (which is not correct).

Data from customer

🕯️ More info (optional)

Related issue: https://github.com/fleetdm/fleet/issues/22994