google / upvote_py2

A multi-platform binary whitelisting solution
Apache License 2.0
452 stars 35 forks source link

whitelist/blacklist docs/var names seem to be wrong #28

Open thehesiod opened 5 years ago

thehesiod commented 5 years ago

per settings.py: # If provided, a regex string that matches execution paths (read: not files),

this ends up going to santa via santa_const.PREFLIGHT.WHITELIST_REGEX, and the docs in santa say: A regex to whitelist if the binary or certificate scopes did not allow execution. Regexes are specified in ICU format.

and the examples I see say this doesn't have to be a directory.

thehesiod commented 5 years ago

also, comments should be added stating that the effects of the values will not be reflected in the blockable state until https://github.com/google/upvote/issues/30 is fixed