Commit Graph

599 Commits

Author SHA1 Message Date
Teddy Reed
24b7be320c Fix #328, add gflags defines for shell-internal flags 2014-11-02 15:40:35 -08:00
Teddy Reed
7029c72e5a Merge pull request #326 from facebook/feature-git-clang-format
Change make format to use git-clang-format
2014-11-02 12:36:20 -08:00
Teddy Reed
422cdbb3e9 Change make format to use git-clang-format 2014-11-02 11:30:56 -08:00
Teddy Reed
bb7f8b6519 Bump, change mode on provision 2014-11-02 02:07:29 -08:00
Teddy Reed
37b8336a1f Silence parentheses warnings in linux/mounts 2014-11-02 01:42:04 -08:00
Teddy Reed
287bbc06a8 Merge pull request #316 from LTD-Beget/mounts
Mounts table for linux
2014-11-02 01:37:00 -08:00
Teddy Reed
a98c7b1252 Add rpm-devel to centos deps 2014-11-02 01:33:11 -08:00
Mike Arpaia
115cc43105 Merge pull request #321 from larzconwell/install-lib-include
Closes #319, Install libraries and headers.
2014-11-01 22:05:18 -07:00
Larz Conwell
a0d7533c96 Closes #319, Install libraries and headers. 2014-11-02 00:08:11 -04:00
Alexander Polyakov apolyakov@beget.ru
fd5ed3bc19 Rename dir to path 2014-11-02 01:09:24 +03:00
Alexander Polyakov apolyakov@beget.ru
fa81e54e27 Fix indentation, no functional change 2014-11-02 00:36:56 +03:00
Alexander Polyakov
58716d6cfa Mounts table for linux 2014-11-01 16:12:56 +03:00
Mike Arpaia
77d4777eed Merge pull request #262 from facebook/rpmstuff
RPM Package Listing - In Progress
2014-11-01 00:24:03 -07:00
Teddy Reed
eb240ac527 RPM table and more robust Linux building 2014-10-31 21:59:10 -07:00
Mike Arpaia
f29b5aa45a Merge pull request #311 from deniszh/master
Fixing number of cores detection for boost builds
2014-10-31 18:52:55 -07:00
James Pearce
9060f57d64 bump 2014-10-31 17:50:02 -07:00
castrapel
2557bac3d4 RPM Package listing is now working 2014-10-31 16:52:58 -07:00
castrapel
a51f97871f Adding RPM functionality for CentOS packages (Not working in EL6 due to older rpm-devel) 2014-10-31 16:52:58 -07:00
Teddy Reed
fd8f5782ab Merge pull request #308 from facebook/lsof
Darwin lsof
2014-10-31 16:32:30 -07:00
Mark Roberts
675dc308b9 Fix possible errors with getProcPath and getProcName 2014-10-31 16:07:09 -07:00
Mike Arpaia
fba9d1143b Merge pull request #310 from facebook/quarantine
Add quarantine vtable for OSX
2014-10-31 15:35:47 -07:00
Pablo S. Torralba
42c73897bf Some minor stetic changes to keep the code clean 2014-10-31 14:27:15 -07:00
Mark Roberts
534999b396 Whitespace 2014-10-31 13:49:25 -07:00
Pablo S. Torralba
366274504b Feedback fixes to clean the code a bit 2014-10-31 13:44:00 -07:00
Teddy Reed
8ad192d448 Merge pull request #312 from facebook/pretty_print_cols
Fix 301, pragma cols pretty print
2014-10-31 11:36:02 -07:00
Mark Roberts
f38bcd390e Add file_type to process_open_files 2014-10-31 11:13:35 -07:00
Denis Zhdanov
8e1b499b18 No, reverting back to getconf _NPROCESSORS_ONLN
much simplier
2014-10-31 18:31:06 +01:00
Denis Zhdanov
0539746a9b Update provision.sh
Hm, jenkins do not likes getconf _NPROCESSORS_ONLN
trying more complex
$([[ $(uname) = 'Darwin' ]] && sysctl -n hw.logicalcpu_max || lscpu -p | egrep -v '^#' | wc -l)
2014-10-31 18:22:03 +01:00
Teddy Reed
0604b3a5e0 Fix 301, pragma cols pretty print 2014-10-31 10:19:49 -07:00
Denis Zhdanov
a2863efce1 Fixing number of cores detection for boost builds
This way of cores detection:
```bash
cat /proc/cpuinfo | grep "cpu cores" | uniq | awk '{print $NF}'
```
is cumbersome and didn't work in some cases, e.g. for VM on VirtualBox with one CPU.
It's much better to use something else, e.g.
```bash
getconf _NPROCESSORS_ONLN
```
as stated in
https://stackoverflow.com/questions/6481005/obtain-the-number-of-cpus-cores-in-linux
```nproc``` also works well but didn't compatible with MacOS X.
2014-10-31 18:04:55 +01:00
Pablo S. Torralba
a6e04efdd7 Add quarantine vtable for OSX
The tables reports:
- path: The file in quarantine
- creator: The application that created the file

Example:
osquery> select * from quarantine limit 10;

+----------------------------------------------------------------------------+---------------+
| path                                                                       | creator       |
+----------------------------------------------------------------------------+---------------+
| /Applications/Adium.app                                                    | Google Chrome |
| /Applications/Adium.app/Contents                                           | Google Chrome |
| /Applications/Adium.app/Contents/_CodeSignature                            | Google Chrome |
| /Applications/Adium.app/Contents/_CodeSignature/CodeResources              | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks                                | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework                | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Adium          | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Headers        | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/PrivateHeaders | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Resources      | Google Chrome |
+----------------------------------------------------------------------------+---------------+

Fixes issue #231
2014-10-31 06:10:51 -07:00
Mark Roberts
3cf5aa4bae Add lsof for #28 functionality to Darwin, refactor to use shared infra for process_envs 2014-10-31 03:28:14 -07:00
Teddy Reed
cdb5b29bda Merge pull request #303 from facebook/pretty_print_ptrs
Fix memset/memcpy for pretty print in osqueryi
2014-10-30 22:34:25 -07:00
Teddy Reed
bcca0824b0 Fix memset/memcpy for pretty print in osqueryi 2014-10-30 18:07:32 -07:00
Teddy Reed
fb81f9bedd Merge pull request #300 from facebook/results_log_perms
Fix #290, add permissions to osqueryd logging
2014-10-30 16:44:18 -07:00
Teddy Reed
1554bf3295 Fix #290, add permissions to osqueryd logging 2014-10-30 15:03:05 -07:00
Teddy Reed
8cab68d2a3 Merge pull request #299 from facebook/fix_quotedsource
Fix #281, quote SOURCE_DIR for source and pip
2014-10-30 14:32:56 -07:00
Teddy Reed
5e15cd0b28 Fix #281, quote SOURCE_DIR for source and pip 2014-10-30 13:03:07 -07:00
Mike Arpaia
731e1c72ab Merge pull request #296 from rjeczalik/master
Install libunwind8-dev for Ubuntu 14.10
2014-10-30 11:54:36 -07:00
Teddy Reed
403fe28ee0 Merge pull request #295 from yetanotherhacker/spellfix
Spelling fixes in comments and output.
2014-10-30 11:28:08 -07:00
Rafal Jeczalik
cf959cfc4f Install libunwind8-dev for Ubuntu 14.10 2014-10-30 10:37:32 +01:00
yetanotherhacker
8cee7e0b3c Spelling fixes in comments and output. 2014-10-30 04:27:00 -04:00
Teddy Reed
4ed61ff868 Merge pull request #288 from vmauge/NewLongType
Add new long type and migrate some vtables
2014-10-29 23:12:52 -07:00
Mike Arpaia
db2ab124fd Merge pull request #292 from ecin/patch-1
Reference wiki install instructions in the README.
2014-10-29 19:36:25 -07:00
ecin
60d53617f9 Reference wiki install instructions in the README.
Could add `brew` and `apt-get` instructions once those are available.
2014-10-29 19:24:20 -07:00
Vincent Mauge
07bd114107 Change users table to used new long long int type for uid and gid
It is now possible to do a proper order on uid or gid, ie:
SELECT * FROM users ORDER BY uid;
2014-10-29 18:57:12 -07:00
Vincent Mauge
755d8c198e Change groups table to used new long long int type for gid
It is now possible to do a proper order on gid, ie:
SELECT * FROM groups ORDER BY gid;
2014-10-29 18:57:00 -07:00
Vincent Mauge
7876d56219 Add support for long long int/BIGINT as a column type 2014-10-29 18:36:37 -07:00
Mike Arpaia
0f037d4082 Merge pull request #283 from facebook/fix_sockaddr_inc
Fix #277, add socket.h to interfaces on darwin
2014-10-29 17:41:36 -07:00
Teddy Reed
cd74544208 Fix #277, add socket.h to interfaces on darwin 2014-10-29 16:44:17 -07:00