Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request - Posture Check - Resolve Symbolic Links #755

Open
NicFragale opened this issue Oct 16, 2024 · 0 comments
Open

Feature Request - Posture Check - Resolve Symbolic Links #755

NicFragale opened this issue Oct 16, 2024 · 0 comments

Comments

@NicFragale
Copy link
Contributor

The posture check functionality in (at least) Windows, when pointed at a "symlink" created in the base of an example app directory that is emulating versioned folders, is never found to be a "running process". It seems the reason for this is because when the process is actually run on the OS, (AKA I click the sym link to run it vs the versioned one in the subdirectory), the path that is reflected by the OS for that running process is the actual end of the link. The OS resolves the link in what it reports as running processes, but Ziti Posture Checking does not. Therefore, symlink usage for Posture Checking will always fail.

SYMLINK = C:\A\B\X.exe [--> C:\A\B\C_V1\X.exe] or [--> C:\A\B\C_V2\X.exe] or [--> C:\A\B\C_V3\X.exe] etc. etc.
OS reports: NOT THIS --> [THIS]
Posture Checks for: [THIS] --> NOT THIS

Alternative to this function would be to have an allowance for "" to expand all directories as a posture check (IE: C:\A\B\C_V\X.exe). This would then allow the posture check to pass.

So...this fails when running the binary using the symlink Posture check pointed to the symlink (C:\Users\nicfr\Desktop\NetFoundry\Utilities\rufus.exe)
image

And this is the only way it will pass Posture check pointed to the actual binary that symlink executes (C:\Users\nicfr\Desktop\NetFoundry\Utilities\Rufus-V1.0\rufus.exe)
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant