From 4bc5afa84656fdfbdc833bcfad573f7aa4cdcd7b Mon Sep 17 00:00:00 2001 From: Tom Burgin Date: Mon, 19 Oct 2026 16:36:44 -0400 Subject: [PATCH] add disable_executable_integrity_recheck --- sync/v1.proto | 3 ++- syncv2/v2.proto | 6 +++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/sync/v1.proto b/sync/v1.proto index a24ebed..9bed65d 100644 --- a/sync/v1.proto +++ b/sync/v1.proto @@ -378,6 +378,7 @@ message PreflightResponse { reserved 39; reserved 40; reserved 41 to 42; + reserved 43; // These fields are deprecated forms of other fields and exist here solely for // backwards compatibility. @@ -418,7 +419,7 @@ message PreflightResponse { deprecated = true ]; - // next ID: 43 + // next ID: 44 } // The Decision enum records what decision Santa made about an execution. diff --git a/syncv2/v2.proto b/syncv2/v2.proto index bd3c10e..95dfe00 100644 --- a/syncv2/v2.proto +++ b/syncv2/v2.proto @@ -591,6 +591,10 @@ message PreflightResponse { // configuration profile message or default applies. optional string remount_removable_media_block_message = 42; + // If true, Santa skips re-hashing an executable whose code signature the + // kernel does not enforce before reusing a cached allow for it. + optional bool disable_executable_integrity_recheck = 43; + // These fields are deprecated forms of other fields and exist here solely for // backwards compatibility. optional bool deprecated_enabled_transitive_whitelisting = 1000 [ @@ -635,7 +639,7 @@ message PreflightResponse { reserved 17; reserved 38; - // next ID: 43 + // next ID: 44 } // The Decision enum records what decision Santa made about an execution.