Releases · trailofbits/sinter · GitHub

mike-myers-tob released this on May 15 · 24 commits to master since this release

Changes from last release:

• Introduction of a configuration variable, client_mode which is either an integer 1 (MONITOR) or 2 (LOCKDOWN). LOCKDOWN works as before (implicit blocking of executions of processes with invalid or missing signatures). MONITOR works without those implicit blocking rules enforced, and only logs these violations.
• the package installer is now notarized and "stapled" as well as the Sinter app, which was already notarized, now also being stapled. This means the installer and the application should run on first launch, regardless of internet connectivity and regardless of whether the pkg installer has acquired the Quarantine attribute.

mike-myers-tob released this on May 2 · 25 commits to master since this release

Testing goals:

• Start by testing MONITOR mode
• Verify that it logs process executions
• Should not interfere with executions, or spike CPU
• Should work offline, or with a Moroz server (running locally or remote, no TLS support yet)
• Should run without signature or notarization problems or GateKeeper warnings or other problems