Teddy Reed
988afd0aa9
filesystem: Use fs::path for PlatformFile ctor ( #3720 )
2017-09-24 21:24:31 -07:00
Teddy Reed
061dfeecb2
tests: Improve permissions tests as root ( #3665 )
2017-09-08 04:08:57 -04:00
Teddy Reed
205da3c698
rocksdb: Implement a 'backup' and recover feature for RocksDB ( #3635 )
2017-09-01 22:31:03 -07:00
Teddy Reed
99675fdbb2
audit: Increase speed when using socket_events ( #3449 )
2017-07-02 17:18:40 -07:00
Teddy Reed
7844a8ea1b
nits: Use char-overload for find ( #3363 )
2017-05-29 23:13:10 -07:00
Teddy Reed
df82f8c50e
filesystem: Remove read_user_max flag ( #3348 )
2017-05-28 22:36:41 -07:00
Mitchell Grenier
e0f5de75b9
Fix crash caused by boost's unhandled exception ( #3309 )
2017-05-23 09:29:03 -07:00
Nick Anderson
95d916e24b
[ Fix #3268 ] extensions autoload now correctly spawns extension processes ( #3269 )
2017-05-11 16:51:48 -07:00
Teddy Reed
67440ab101
tests: Rewrite and add filesystem tests ( #3156 )
2017-04-10 21:32:16 -07:00
Teddy Reed
345c511a61
hash: Only return hashes for files hashed ( #3106 )
2017-03-25 18:03:21 -07:00
Teddy Reed
555d59eff6
Remove fsuid permissions drop for OS X and Linux ( #2805 )
2016-11-28 22:05:08 -08:00
Nick Anderson
1a0aa988f1
Updating bytes written and read cursor index ( #2767 )
2016-11-16 17:04:17 -08:00
yying
d573cf8e16
Improvements to platformChmod for closer POSIX behavior on Windows ( #2725 )
2016-11-08 14:40:53 -08:00
Teddy Reed
59f0bad67c
Additional compiler checks, including shadow ( #2486 )
2016-11-06 01:17:04 -08:00
Nick Anderson
616d9f5953
Adding support for Windows platform_info table ( #2611 )
2016-10-12 09:01:32 -07:00
Teddy Reed
665c4fb9bc
[ Fix #2599 ] Read from Linux SMI sysfs node for SMBIOS ( #2612 )
...
This also fixes odd behavior in Linux when reading a 'regular' file
from /sys that only returns a max of a page-read in bytes.
2016-10-11 09:55:01 -07:00
Teddy Reed
6842797bf5
Create temp directory and fail over to user home ( #2529 )
2016-09-26 23:44:50 -07:00
yying
a27d6567e4
Core and Additional Tests ( #2441 )
2016-09-12 09:46:52 -07:00
yying
84e6a3401a
Reducing compiler warnings and fails on warn in VS ( #2433 )
2016-09-02 15:04:03 -07:00
Nick Anderson
fe7b8d98f9
Adding getSystemRoot function ( #2386 )
...
Adding a cross platform function for getting the OS root
and returning it as a boost::fs::path
2016-08-18 09:32:34 -07:00
Teddy Reed
1b75972181
[ Fix #2387 ] Attempt to create user's osquery homedir ( #2395 )
2016-08-17 17:27:46 -07:00
Teddy Reed
e969b92a2e
Fix code auditing job and disable Homebrew auto-update ( #2392 )
2016-08-17 16:00:30 -07:00
yying
50487c6880
Changes to make pidfile work on Windows ( #2297 )
2016-07-28 16:04:34 -07:00
Teddy Reed
54557b16e7
[ Fix #2196 ] Fix osquery home directory checking ( #2232 )
2016-07-07 17:33:52 -07:00
Teddy Reed
48cb4d555d
Add systemLog API ( #2229 )
...
This includes a minor SDK refactor as it move quite a few specialized
functions and facilities from core.h into system.h. There was a breaking point
for needing to frequently update core includes.
The new logger systemLog function allows a call site to bypass logging config
and write a line to the OS logger (aka syslog).
2016-07-07 15:16:28 -07:00
Teddy Reed
47e1a5ba74
Use noexcept boost::filesystem overloads ( #2195 )
2016-06-27 16:39:04 -07:00
Nick Anderson
72df044ef5
Adding check for nullptr before dereferencing. This fixes #2185 ( #2187 )
2016-06-24 13:59:49 -07:00
yying
9879733867
Filesystem Abstractions - Integrations ( #2128 )
...
* Integrated filesystem operation abstraction code into filesystem.cpp
* Modified filesystem unit tests to be more platform agnostic
* Added append mode for PlatformFile
* Minor bug fixes in filesystem operations
2016-06-07 14:08:50 -07:00
yying
26ad131c38
Building osquery unit tests on Windows 10 ( #2100 )
...
Integrated process abstraction code into more locations
Defined new macros for abstracting across various platforms
Added GLOG_NO_ABBREVIATED_SEVERITIES for glog to support Windows
Fixed some minor CMake issues involving thrift
Updated gflags package; reflecting change in provision script
Preparing CMake config files for WIN32 support
2016-05-17 12:39:11 -07:00
Teddy Reed
3de52846d0
Remove boost::thread
2016-03-11 11:50:44 -08:00
Teddy Reed
26c8b5640f
Fix various lint issues
2016-03-09 19:55:39 -08:00
Teddy Reed
9a54af29ce
Bump sqlite to 3.11.0
2016-02-21 22:40:37 -08:00
Baraa Hamodi
21c2237eca
[osquery] Update copyright headers to new format.
2016-02-11 11:48:58 -08:00
Teddy Reed
8947dac232
[ Fix #1814 ] Various fixes for Linux inotify
2016-02-03 17:00:41 -08:00
Teddy Reed
63d12789b4
Fix regression in file content predicate refactor
2015-12-14 15:24:55 -08:00
Teddy Reed
a99b62a31d
Preserve atime and mtime by default for readFile
2015-12-11 22:18:45 -08:00
Teddy Reed
a72fa19536
Use a noexcept method of directory checking for hash
2015-11-20 13:32:56 -08:00
Teddy Reed
0d01a382b6
[ Fix #1634 ] Add sys/stat to filesystem
2015-11-09 01:33:17 -08:00
Teddy Reed
41ba637030
Linux inotify should accept non-glob dirs
2015-11-04 13:46:47 -08:00
Teddy Reed
2cf9e95fa1
Allow user-controlled FIFOs
2015-11-04 01:29:54 -08:00
Teddy Reed
97a6521445
Merge pull request #1614 from theopolis/drop_around_files
...
Expand the scope of permissions dropping
2015-10-30 17:07:04 -07:00
Teddy Reed
09e4e3c42e
Expand the scope of permissions dropping
2015-10-30 09:56:33 -07:00
Teddy Reed
2cf7543181
[ Fix #1611 ] Prevent fs links in inotify path search
2015-10-29 23:19:07 -07:00
Teddy Reed
b8087a1b26
Fix readFile TOCTOU error
2015-10-26 01:21:05 -07:00
Robert C. Seacord
1d9695ac31
eliminated some warnings from Clang 3.7 analyze mode
2015-10-21 06:02:58 +00:00
Robert C. Seacord
acb2f6f628
eliminating diagnostics, mostly for comparisons between signed and unsigned operations
2015-10-16 16:10:37 +00:00
Teddy Reed
66888de80a
Fix potential hang with recursive globbing
2015-09-28 17:50:25 -07:00
Teddy Reed
5e3a86d2a8
Merge pull request #1376 from theopolis/fix_1367
...
[Fix #1367 ] Disable user-controlled FIFO reads
2015-07-23 18:25:52 -07:00
Teddy Reed
81aa36ecc7
[ Fix #1381 ] Add documentation/install for daemon+Homebrew
2015-07-23 16:05:59 -07:00
Teddy Reed
ad94eaf0b8
[ Fix #1367 ] Disable user-controlled FIFO reads
2015-07-22 10:15:39 -07:00
