Commit Graph

956 Commits

Author SHA1 Message Date
Teddy Reed
7287ad5e63 Fix process free regression for libprocps 2014-11-17 16:52:20 -08:00
Javier Marcos
27c1147f75 Merge pull request #451 from facebook/sudo_env_support_mountain_lion
Support of osx 10.8 broke the other builds with the -E parameter
2014-11-17 15:54:45 -08:00
Javier Marcos
0c59fc9d9f Support of osx 10.8 broke the other builds with the -E parameter 2014-11-17 15:48:27 -08:00
Teddy Reed
00de10db95 Merge pull request #440 from mgoffin/mounts_table
Mounts table for OSX
2014-11-17 15:43:33 -08:00
mike@arpaia.co
f8c27bde85 Add a splay of 10% to scheduled queries so that they don't stack
close #446
2014-11-17 14:19:09 -08:00
mike@arpaia.co
ca2c63419a incorrect namespacing 2014-11-17 13:47:44 -08:00
Mike Goffin
57faad63fa Merge branch 'master' into mounts_table 2014-11-17 15:03:50 -05:00
Mike Goffin
2ce6882317 Format fixes.
- ran clang-format.
- lowercased column names for table.
- removed include for boost as it's no longer being used.
2014-11-17 15:02:33 -05:00
Mike Arpaia
3c2059227e Merge pull request #448 from facebook/444
Change glog max log size to 10MB
2014-11-17 11:39:50 -08:00
mike@arpaia.co
715e10a738 Change glog max log size to 10MB
close #444
2014-11-17 11:39:35 -08:00
Teddy Reed
1116d6a928 Merge pull request #438 from theopolis/feature-arp-table
arp_cache vtable for OSX and Linux
2014-11-17 11:36:46 -08:00
Mike Arpaia
c56d045f7a Merge pull request #447 from facebook/445
Get rid of superfluous logging in launchQueries
2014-11-17 11:29:55 -08:00
mike@arpaia.co
f707253537 close #445 2014-11-17 11:29:14 -08:00
Mike Arpaia
c5e50ff26e Merge pull request #439 from wxsBSD/macros
Use INTEGER macro.
2014-11-17 11:19:08 -08:00
Mike Goffin
0b4e382e96 Merge branch 'master' into mounts_table 2014-11-17 13:46:59 -05:00
Mike Goffin
6cddf4ad39 Mounts table for Darwin.
Associated with #255, this adds Mounts table support for Darwin.
2014-11-17 13:43:59 -05:00
Wesley Shields
c764226b77 Use INTEGER macro.
This makes the code match the example at:

https://github.com/facebook/osquery/wiki/creating-a-new-table
2014-11-17 13:30:46 -05:00
Teddy
968f8027e6 Cleaner arp_table->arp_cache on Linux/OSX 2014-11-17 02:37:15 -08:00
Javier Marcos
093c857aea Merge pull request #437 from facebook/centos_build_fix
Fixes building in CentOS, sudo was missing from some commands
2014-11-16 22:51:06 -08:00
Javier Marcos
5db8dcbae6 Fixes building in CentOS, sudo was missing from some commands 2014-11-16 22:46:12 -08:00
Teddy Reed
d50d1cf3a7 Faster build on Ubuntu 2014-11-16 19:49:41 -08:00
Teddy Reed
ee015343f9 Simplify arp, move to arp_table 2014-11-16 19:49:40 -08:00
Pablo S. Torralba
65c4ed4a7d Fix boost split on linux to remove sscanf 2014-11-16 19:49:40 -08:00
Pablo S. Torralba
2b32673445 Some fixes:
- clang-format on code
- NULL -> nullptr
- some (char *) changed in std::string favour
- Removed a memory leak.
- Moved struct inside the table namespace
2014-11-16 19:49:40 -08:00
Pablo S. Torralba
778951d6a4 Remove osx dependency on system() call to get arp information 2014-11-16 19:49:40 -08:00
Pablo S. Torralba
c7fc2cee22 rename vtable field arp->mac 2014-11-16 19:49:40 -08:00
Pablo S. Torralba
4f524abbea arp vtable different implementation in osx and linux 2014-11-16 19:49:40 -08:00
Pablo S. Torralba
413d6f068b Change fgetln (osx specific) in favour of getline (both osx and linux) 2014-11-16 19:49:40 -08:00
Pablo S. Torralba
1843d80660 arp vtable with ip, arp and interface where it was seen 2014-11-16 19:49:40 -08:00
Li-Wen Hsu
f9c197f7da Remove duplicated code in compiler & linker flags setup 2014-11-17 05:09:38 +08:00
Mike Arpaia
c594c67dae Merge pull request #436 from facebook/launchd-customization
Customizable LaunchDaemon via a command-line flag
2014-11-16 13:01:17 -08:00
Mike Arpaia
a4b9920ed9 Merge pull request #435 from facebook/blacklist-inode
blacklisting port_inode and socket_inode
2014-11-16 13:01:01 -08:00
Li-Wen Hsu
397f2f80f3 It seems that CPack supports only Linux packages for now 2014-11-17 04:45:58 +08:00
Li-Wen Hsu
b7ffc422c1 Whitespace cleanup 2014-11-17 04:29:50 +08:00
Li-Wen Hsu
15335695a1 Use uname -r for better backward compatibility 2014-11-17 04:28:55 +08:00
Li-Wen Hsu
c00074e117 linux/inotify_tests.cpp is Linux only 2014-11-17 04:27:45 +08:00
Li-Wen Hsu
bb87fe3b55 Correct "FreeBSD" case 2014-11-17 04:23:48 +08:00
mike@arpaia.co
2e49debd70 Customizable LaunchDaemon via a command-line flag
This is in response to #411. Allowing you to specify arguments on the
command-line has more edge-cases than I'd prefer, so I think this is a
bit more of a sustainable solution, especially given that you're already
supplying the tool with a path to your config file (now you can just
track one additional file).
2014-11-16 11:07:52 -08:00
mike@arpaia.co
bfceaf8453 blacklisting port_inode and socket_inode
port_inode and socket_inode have caused a few issues lately and, as of
right now, they both have open issues against them. For the time being,
I'm going to blacklist them. When the tables are production-ready, we
can re-add them back in to the base linux build.
2014-11-16 09:42:57 -08:00
Li-Wen Hsu
1ad47bbafb Make room for FreeBSD events 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
7822d06774 No <uuid/uuid.h> under FreeBSD 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
ea7b617a7c No utmpxname() under FreeBSD 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
a102a3273e Include proper headers for FreeBSD 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
e49537c8fa Add libraries and settings for FreeBSD 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
d4fc9b405a Use uname -s to determine non-Linux platform 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
cf2e376744 $DISTRO will be used for C macro, truncate unnecessary part 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
daf90d7862 Gnu make under FreeBSD is gmake 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
8138d8c193 Set flags for FreeBSD's compiler and linker 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
155b256ac3 Let FreeBSD has its own build dir 2014-11-16 01:41:50 +08:00
Li-Wen Hsu
76fa17e19c Let provision script know FreeBSD 2014-11-16 01:41:40 +08:00