Release - 0.6.3 New release published by javuto 🔖 Release 0.6.3 What's New • Staging docker environment by @javuto in #1131 • Adding

--prepare

mode to

provision.sh

by @javuto in #1132 • Frontend and API under a configurable URL prefix by @javuto in #1133 • Optional DB read replica for dashboard and node list reads by @javuto in #1134 • Route more staleness-tolerant reads to the DB read replica by @javuto in #1135 • Route

osctrl-tls

lag-tolerant reads to the DB read replica by @javuto in #1136 • Cache use improvements in

osctrl-api

and

osctrl-tls

by @javuto in #1137 • Fixes for high severity issues found in audit by @javuto in #1138 • Fixes for medium severity issues found in audit by @javuto in #1139 • Console: help on open, Tab completion, command history by @javuto in #1140 • Fix: Hide node Alert button from environment admins by @javuto in #1141 • Replace stale permission TODO in query/carve target resolution by @javuto in #1143 • Add global RBAC roles: user management, env management, read-only, alert admin by @javuto in #1144 • Never orphan nodes on environment rename or delete by @javuto in #1145 • Granular RBAC part 2: query/carve tiers and node visibility by @javuto in #1146 • Granular RBAC part 3: sensitive nodes by @javuto in #1147 • Keep query results readable after an environment rename by @javuto in #1148 • Granular RBAC part 4: sensitive carve paths by @javuto in #1149 • Sensitive carve paths: catch macOS alias parents, fix carve list page overflow by @javuto in #1150 • Granular RBAC part 5: frontend for roles, tiers, sensitive tags and paths by @javuto in #1151 • RBAC frontend: environment lookup by UUID on the nodes page, accurate users-page label by @javuto in #1152 • Harden osctrl-tls: random node keys, bounded query-result processing by @javuto in #1153 • `osctrl-tls`: answer unknown environments like bad credentials by @javuto in #1154 • `osctrl-api`: default request body cap and query length limit by @javuto in #1155 • Fix query/carve targeting widening on an empty selector; remove unused

CheckCarve

by @javuto in #1156 • Keep queries consistent when pending targets are cancelled by @javuto in #1157 •

osctrl-cli

and API client RBAC new permissions by @javuto in #1158 •

osctrl-cli

shell: keep tag type on API-mode edit, save tags on DB-mode add by @javuto in #1159 • Drop 'Super-admin view' from page subtitles other roles can now open by @javuto in #1160 • Make osctrl act as a Santa sync server by @javuto in #1161 • Upgrade osquery

5.24.1

by @javuto in #1182 • Prepare for release 0.6.3 by @javuto in #1183 Full Changelog: v0.6.2...v0.6.3 jmpsec/osctrl