fleet/orbit/pkg/table
Lucas Manuel Rodriguez 810eb58b95
macOS CIS: Use find command (exposed as fleetd table) instead of relying on the osquery core file table (#12560)
#10292, #12554

When scanning tens of thousands of files for permissions, using the
`find` command exposed as a fleetd table is more performant than trying
to use the `file` table. This change caused the watchdog to *stop*
killing osquery because of exceeding memory or CPU limit.

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or
docs/Contributing/API-for-contributors.md)~
- ~[ ] Documented any permissions changes~
- ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)~
- ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.~
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- ~[ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).~
2023-06-29 16:22:41 -03:00
..
authdb Add CIS check for 5.7 (#9748) 2023-02-08 12:30:55 -03:00
cis_audit New CIS Audit table (#11381) 2023-05-12 11:16:36 -03:00
common Add CIS checks for 2.9.X and add pmset table to fleetd (#9470) 2023-02-08 13:08:17 -03:00
csrutil_info CIS 5.1.3+5.1.4 (#9642) 2023-02-07 13:26:05 -05:00
diskutil Add macOS CIS 5.3.2 (#10726) 2023-03-28 11:57:38 -04:00
dscl Fix golangci-lint issue and run Github action on all OSs (#9944) 2023-02-21 14:30:45 -03:00
filevault_prk Create new Fleet osquery extension table to read escrowed FileVault key (#12198) 2023-06-15 10:23:59 -05:00
find_cmd macOS CIS: Use find command (exposed as fleetd table) instead of relying on the osquery core file table (#12560) 2023-06-29 16:22:41 -03:00
firmware_eficheck_integrity_check Add check for CIS 5.6 (#9756) 2023-02-09 14:27:40 -03:00
mdm Adding support for GetPolicies message (#12477) 2023-06-27 12:59:33 -03:00
nvram_info CIS 5.1.3+5.1.4 (#9642) 2023-02-07 13:26:05 -05:00
orbit_info Add documentation for missing fleetd tables and regenerate JSON (#9960) 2023-02-22 16:05:36 -03:00
pmset Fix golangci-lint issue and run Github action on all OSs (#9944) 2023-02-21 14:30:45 -03:00
privaterelay Add CIS checks for 2.9.X and add pmset table to fleetd (#9470) 2023-02-08 13:08:17 -03:00
pwd_policy add minimumMixedCaseCharacters (#10401) 2023-03-09 15:44:28 -05:00
sntp_request Add documentation for missing fleetd tables and regenerate JSON (#9960) 2023-02-22 16:05:36 -03:00
software_update Fix disk encryption banner displaying incorrectly on My Device page (#10875) 2023-03-30 17:15:45 +01:00
sudo_info Add CIS checks for 5.4 and 5.5 (#9747) 2023-02-09 12:35:43 -03:00
user_login_settings Fix golangci-lint issue and run Github action on all OSs (#9944) 2023-02-21 14:30:45 -03:00
extension_darwin.go macOS CIS: Use find command (exposed as fleetd table) instead of relying on the osquery core file table (#12560) 2023-06-29 16:22:41 -03:00
extension_stub.go add simple go osquery extension & readme to register orbit tables (#10795) 2023-03-31 10:39:13 -04:00
extension_windows.go New CIS Audit table (#11381) 2023-05-12 11:16:36 -03:00
extension.go add simple go osquery extension & readme to register orbit tables (#10795) 2023-03-31 10:39:13 -04:00