Skip to content

Comments

[Security Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux in trusted apps form#218195

Merged
parkiino merged 8 commits intoelastic:mainfrom
parkiino:bug/ta-mac-linux-warningmessage
May 2, 2025
Merged

[Security Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux in trusted apps form#218195
parkiino merged 8 commits intoelastic:mainfrom
parkiino:bug/ta-mac-linux-warningmessage

Conversation

@parkiino
Copy link
Contributor

@parkiino parkiino commented Apr 15, 2025

Summary

  • This corrects a bug where the "wildcard warning" would be shown instead of the "invalid path warning" if a user tried to create a trusted app with a mac or linux OS and with the path condition field and value of /.

Note: Although / may be a valid path as in ls /, the path value expected in trusted apps and other exceptions items expect a path to an executable as opposed to a simple directory path.

Screenshots

image image

@parkiino parkiino added release_note:skip Skip the PR/issue when compiling release notes backport:skip This PR does not require backporting Team:Defend Workflows “EDR Workflows” sub-team of Security Solution v8.16.0 labels Apr 15, 2025
@parkiino parkiino requested review from a team as code owners April 15, 2025 04:09
@parkiino parkiino requested review from nikitaindik and rylnd April 15, 2025 04:09
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-defend-workflows (Team:Defend Workflows)

Copy link
Contributor

@nikitaindik nikitaindik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM from the Rules Management since this code is not used on our pages. I haven't tested it locally, just looked at the code changes.

As a side note, might be a good idea to add a test to index.test.ts to verify correctness.

return filePathRegex.test(value);
}
return /^(\/|(\/[\w\-]+)+|\/[\w\-]+\.[\w]+|(\/[\w-]+)+\/[\w\-]+\.[\w]+)$/i.test(value);
return /^((\/[\w\-]+)+|\/[\w\-]+\.[\w]+|(\/[\w-]+)+\/[\w\-]+\.[\w]+)$/i.test(value);
Copy link
Member

@ashokaditya ashokaditya Apr 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This regex should not be changed.

Copy link
Member

@ashokaditya ashokaditya left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/ is a valid unix path so the issue is not with the regex like we were discussing offline. We need to expand the conditions that show the warning.

Copy link
Contributor

@rylnd rylnd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving so as not to block here, but it looks like @ashokaditya's concerns about the regex trump any input I could have here.

@parkiino parkiino added backport:prev-major and removed backport:skip This PR does not require backporting v8.16.0 labels Apr 22, 2025
@parkiino parkiino requested a review from a team as a code owner April 26, 2025 02:48
@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 9.1MB 9.1MB +69.0B

History

@kibanamachine
Copy link
Contributor

Starting backport for target branches: 8.17, 8.18, 8.19, 9.0

https://github.com/elastic/kibana/actions/runs/14803886439

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request May 2, 2025
…mac and linux in trusted apps form (elastic#218195)

## Summary

- [x] This corrects a bug where the "wildcard warning" would be shown
instead of the "invalid path warning" if a user tried to create a
trusted app with a mac or linux OS and with the path condition field and
value of `/`.

Note: Although `/` may be a valid path as in `ls /`, the path value
expected in trusted apps and other exceptions items expect a path to an
executable as opposed to a simple directory path.

# Screenshots
<img width="807" alt="image"
src="https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42"
/>

<img width="811" alt="image"
src="https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1"
/>

(cherry picked from commit 3e67e7a)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request May 2, 2025
…mac and linux in trusted apps form (elastic#218195)

## Summary

- [x] This corrects a bug where the "wildcard warning" would be shown
instead of the "invalid path warning" if a user tried to create a
trusted app with a mac or linux OS and with the path condition field and
value of `/`.

Note: Although `/` may be a valid path as in `ls /`, the path value
expected in trusted apps and other exceptions items expect a path to an
executable as opposed to a simple directory path.

# Screenshots
<img width="807" alt="image"
src="https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42"
/>

<img width="811" alt="image"
src="https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1"
/>

(cherry picked from commit 3e67e7a)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request May 2, 2025
…mac and linux in trusted apps form (elastic#218195)

## Summary

- [x] This corrects a bug where the "wildcard warning" would be shown
instead of the "invalid path warning" if a user tried to create a
trusted app with a mac or linux OS and with the path condition field and
value of `/`.

Note: Although `/` may be a valid path as in `ls /`, the path value
expected in trusted apps and other exceptions items expect a path to an
executable as opposed to a simple directory path.

# Screenshots
<img width="807" alt="image"
src="https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42"
/>

<img width="811" alt="image"
src="https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1"
/>

(cherry picked from commit 3e67e7a)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request May 2, 2025
…mac and linux in trusted apps form (elastic#218195)

## Summary

- [x] This corrects a bug where the "wildcard warning" would be shown
instead of the "invalid path warning" if a user tried to create a
trusted app with a mac or linux OS and with the path condition field and
value of `/`.

Note: Although `/` may be a valid path as in `ls /`, the path value
expected in trusted apps and other exceptions items expect a path to an
executable as opposed to a simple directory path.

# Screenshots
<img width="807" alt="image"
src="https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42"
/>

<img width="811" alt="image"
src="https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1"
/>

(cherry picked from commit 3e67e7a)
@kibanamachine
Copy link
Contributor

💚 All backports created successfully

Status Branch Result
8.17
8.18
8.19
9.0

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit that referenced this pull request May 2, 2025
…ug for mac and linux in trusted apps form (#218195) (#220013)

# Backport

This will backport the following commits from `main` to `8.18`:
- [[Security Solution][Admin][Trusted Apps] Fixes wrong warning bug for
mac and linux in trusted apps form
(#218195)](#218195)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Candace
Park","email":"56409205+parkiino@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-05-02T21:44:43Z","message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps
form","number":218195,"url":"https://github.com/elastic/kibana/pull/218195","mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218195","number":218195,"mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}}]}]
BACKPORT-->

Co-authored-by: Candace Park <56409205+parkiino@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request May 2, 2025
…ug for mac and linux in trusted apps form (#218195) (#220014)

# Backport

This will backport the following commits from `main` to `8.19`:
- [[Security Solution][Admin][Trusted Apps] Fixes wrong warning bug for
mac and linux in trusted apps form
(#218195)](#218195)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Candace
Park","email":"56409205+parkiino@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-05-02T21:44:43Z","message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps
form","number":218195,"url":"https://github.com/elastic/kibana/pull/218195","mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218195","number":218195,"mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}}]}]
BACKPORT-->

Co-authored-by: Candace Park <56409205+parkiino@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request May 2, 2025
…ug for mac and linux in trusted apps form (#218195) (#220012)

# Backport

This will backport the following commits from `main` to `8.17`:
- [[Security Solution][Admin][Trusted Apps] Fixes wrong warning bug for
mac and linux in trusted apps form
(#218195)](#218195)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Candace
Park","email":"56409205+parkiino@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-05-02T21:44:43Z","message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps
form","number":218195,"url":"https://github.com/elastic/kibana/pull/218195","mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218195","number":218195,"mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}}]}]
BACKPORT-->

Co-authored-by: Candace Park <56409205+parkiino@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request May 5, 2025
…g for mac and linux in trusted apps form (#218195) (#220015)

# Backport

This will backport the following commits from `main` to `9.0`:
- [[Security Solution][Admin][Trusted Apps] Fixes wrong warning bug for
mac and linux in trusted apps form
(#218195)](#218195)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Candace
Park","email":"56409205+parkiino@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-05-02T21:44:43Z","message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","backport:prev-minor","backport:prev-major","v9.1.0"],"title":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps
form","number":218195,"url":"https://github.com/elastic/kibana/pull/218195","mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/218195","number":218195,"mergeCommit":{"message":"[Security
Solution][Admin][Trusted Apps] Fixes wrong warning bug for mac and linux
in trusted apps form (#218195)\n\n## Summary\n\n- [x] This corrects a
bug where the \"wildcard warning\" would be shown\ninstead of the
\"invalid path warning\" if a user tried to create a\ntrusted app with a
mac or linux OS and with the path condition field and\nvalue of
`/`.\n\nNote: Although `/` may be a valid path as in `ls /`, the path
value\nexpected in trusted apps and other exceptions items expect a path
to an\nexecutable as opposed to a simple directory path.\n\n#
Screenshots\n<img width=\"807\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42\"\n/>\n\n\n<img
width=\"811\"
alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1\"\n/>","sha":"3e67e7a670694284345f96fbbd56da446aa07c85"}}]}]
BACKPORT-->

Co-authored-by: Candace Park <56409205+parkiino@users.noreply.github.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
@parkiino parkiino deleted the bug/ta-mac-linux-warningmessage branch May 5, 2025 20:05
@mistic mistic added v8.18.2 and removed v8.18.1 labels May 6, 2025
@mistic
Copy link
Contributor

mistic commented May 6, 2025

This PR didn't make it into the latest 8.18.1, 8.17.6 and 9.0.1 BC. Updating the labels.

akowalska622 pushed a commit to akowalska622/kibana that referenced this pull request May 29, 2025
…mac and linux in trusted apps form (elastic#218195)

## Summary

- [x] This corrects a bug where the "wildcard warning" would be shown
instead of the "invalid path warning" if a user tried to create a
trusted app with a mac or linux OS and with the path condition field and
value of `/`.

Note: Although `/` may be a valid path as in `ls /`, the path value
expected in trusted apps and other exceptions items expect a path to an
executable as opposed to a simple directory path.

# Screenshots
<img width="807" alt="image"
src="https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42"
/>


<img width="811" alt="image"
src="https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1"
/>
qn895 pushed a commit to qn895/kibana that referenced this pull request Jun 3, 2025
…mac and linux in trusted apps form (elastic#218195)

## Summary

- [x] This corrects a bug where the "wildcard warning" would be shown
instead of the "invalid path warning" if a user tried to create a
trusted app with a mac or linux OS and with the path condition field and
value of `/`.

Note: Although `/` may be a valid path as in `ls /`, the path value
expected in trusted apps and other exceptions items expect a path to an
executable as opposed to a simple directory path.

# Screenshots
<img width="807" alt="image"
src="https://github.com/user-attachments/assets/fc320a85-0bb8-4d26-97f2-f3dc9a89cc42"
/>


<img width="811" alt="image"
src="https://github.com/user-attachments/assets/f3d99754-79a8-4734-8858-521f6e0778a1"
/>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release_note:skip Skip the PR/issue when compiling release notes Team:Defend Workflows “EDR Workflows” sub-team of Security Solution v8.17.7 v8.18.2 v8.19.0 v9.0.2 v9.1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants