fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.15k stars 432 forks source link

Replace path-based permissions with bundleID-based permissions #24004

Open Patagonia121 opened 1 day ago

Patagonia121 commented 1 day ago

customer-figali: Gong snippet

Short description:

The customer would like to both understand why Fleet leverages path-based permissions and see support for bundleIDs to grant file access. They have concerns about unauthorized access or potentially malware gaining access to specified paths and that it could ultimate exploit permissions to access files on the host system(s). They believe that using bundle ID's instead of paths would provide more targeted and secure permissions, reducing exposure to such risks.