Add msi, gpo, new CI and runtime/sandbox hardening

* Add msi installer via Wixtoolset
* Add PowerShell Makefile
* [MM-18135] merge lint and test step, use -quiet, clarify changing debugging port
* [MM-18135] use no sandbox, separate linting, circle 2.1
* [MM-18137] Add MSI installer job
* [MM-18137] Add windows signing
* [MM-18152] Desktop notifications (#1040)
* [MM-18345] use non-dangerous wix version
* [MM-18348] add code signing to windows build (#1044)
* [MM-18348] fix review comments
* [MM-18851] runtime/sandbox hardening (#1042)
* [MM-18906] remove GPU acceleration option from GPO settings (#1047)
* Other minor refinements
This commit is contained in:
William Gathoye
2019-10-01 14:10:25 +02:00
committed by GitHub
parent 4d7f5ab417
commit a5368a9587
26 changed files with 2282 additions and 68 deletions

View File

@@ -1,31 +1,23 @@
<?xml version="1.0" encoding="utf-8"?>
<policyDefinitionResources revision="0.1" schemaVersion="1.0" >
<policyDefinitionResources revision="0.1" schemaVersion="1.0">
<displayName/>
<description/>
<resources >
<stringTable >
<string id="SUPPORTED_MMD43">Mattermost Desktop Application 4.3 or later</string>
<string id="RequiresMattermost43">Requires Mattermost Desktop 4.3 or later</string>
<string id="mattermost">Mattermost</string>
<string id="DisableAutoUpdate">Disable Auto Updater</string>
<string id="DisableAutoUpdate_Explain">If this policy is enabled, the Mattermost Desktop Application does not receive udpates.
<string id="EnableAutoUpdater">EnableAutoUpdater</string>
<string id="EnableAutoUpdaterDescription">If this policy is enabled, users will receive notifications when new versions of the desktop app are available. System Administrator privilages on the computer are required to install the update.</string>
<string id="EnableServerManagement">EnableServerManagement</string>
<string id="EnableServerManagementDescription">If this policy is enabled, users can add or remove servers in their app settings, even if default servers are configured in DefaultServerList.
If this policy is disabled or not configured, the Mattermost Desktop Application receives updates.</string>
<string id="PreventAddNewServer">Prevent adding new Mattermost server</string>
<string id="PreventAddNewServer_Explain">If this policy is enabled, it is not possible to add new servers.
If this policy is disabled or not configured, it is possible to add new servers.</string>
<string id="ServerURL">Server addresses</string>
<string id="ServerURL_Explain">If this policy is enabled, you can set one or more Mattermost server addresses.
If this policy is disabled or not configured, no servers are preconfigured.</string>
<string id="PreventGPU">Disable GPU hardware acceleration</string>
<string id="PreventGPU_Explain">If this policy is enabled, the Mattermost Desktop Application does not use the GPU for hardware acceleration.
If this policy is disabled or not configured, the Mattermost Desktop Application does use the GPU for hardware acceleration.</string>
If this policy is disabled, the Server Management section is hidden in the app settings and only servers defined by Group Policy can be used.</string>
<string id="DefaultServerList">DefaultServerList</string>
<string id="DefaultServerListDescription">If this policy is enabled, you can define one or more Mattermost servers that will be pre-configured for users when they launch the app.</string>
</stringTable>
<presentationTable>
<presentation id="ServerURL">
<listBox refId="ServerURL">List of servers:</listBox>
<presentation id="DefaultServerList">
<listBox refId="DefaultServerList">List of default Mattermost servers:</listBox>
</presentation>
</presentationTable>
</resources>

View File

@@ -6,16 +6,16 @@
<resources minRequiredRevision="0.1"/>
<supportedOn>
<definitions>
<definition name="SUPPORTED_MMD43" displayName="$(string.SUPPORTED_MMD43)"/>
<definition name="RequiresMattermost43" displayName="$(string.RequiresMattermost43)"/>
</definitions>
</supportedOn>
<categories>
<category displayName="$(string.mattermost)" name="mattermost"></category>
</categories>
<policies>
<policy name="DisableAutoUpdate" class="Machine" displayName="$(string.DisableAutoUpdate)" explainText="$(string.DisableAutoUpdate_Explain)" key="Software\Policies\Mattermost" valueName="DisableAutoUpdate">
<policy name="EnableAutoUpdater" class="Machine" displayName="$(string.EnableAutoUpdater)" explainText="$(string.EnableAutoUpdaterDescription)" key="Software\Policies\Mattermost" valueName="EnableAutoUpdater">
<parentCategory ref="mattermost"/>
<supportedOn ref="SUPPORTED_MMD43"/>
<supportedOn ref="RequiresMattermost43"/>
<enabledValue>
<decimal value="1"/>
</enabledValue>
@@ -23,9 +23,9 @@
<decimal value="0"/>
</disabledValue>
</policy>
<policy name="PreventAddNewServer" class="Both" displayName="$(string.PreventAddNewServer)" explainText="$(string.PreventAddNewServer_Explain)" key="Software\Policies\Mattermost" valueName="PreventAddNewServer">
<policy name="EnableServerManagement" class="Both" displayName="$(string.EnableServerManagement)" explainText="$(string.EnableServerManagementDescription)" key="Software\Policies\Mattermost" valueName="EnableServerManagement">
<parentCategory ref="mattermost"/>
<supportedOn ref="SUPPORTED_MMD43"/>
<supportedOn ref="RequiresMattermost43"/>
<enabledValue>
<decimal value="1"/>
</enabledValue>
@@ -33,22 +33,12 @@
<decimal value="0"/>
</disabledValue>
</policy>
<policy name="ServerURL" class="Both" displayName="$(string.ServerURL)" explainText="$(string.ServerURL_Explain)" presentation="$(presentation.ServerURL)" key="Software\Policies\Mattermost">
<policy name="DefaultServerList" class="Both" displayName="$(string.DefaultServerList)" explainText="$(string.DefaultServerListDescription)" presentation="$(presentation.DefaultServerList)" key="Software\Policies\Mattermost">
<parentCategory ref="mattermost" />
<supportedOn ref="SUPPORTED_MMD43" />
<supportedOn ref="RequiresMattermost43" />
<elements>
<list id="ServerURL" key="Software\Policies\Mattermost\DefaultServerList" additive="true" explicitValue="true" />
<list id="DefaultServerList" key="Software\Policies\Mattermost\DefaultServerList" additive="true" explicitValue="true" />
</elements>
</policy>
<policy name="PreventGPU" class="Machine" displayName="$(string.PreventGPU)" explainText="$(string.PreventGPU_Explain)" key="Software\Policies\Mattermost" valueName="PreventGPU">
<parentCategory ref="mattermost"/>
<supportedOn ref="SUPPORTED_MMD43"/>
<enabledValue>
<decimal value="1"/>
</enabledValue>
<disabledValue>
<decimal value="0"/>
</disabledValue>
</policy>
</policies>
</policyDefinitions>