Teddy Reed
2d3de51510
Restrict permissions on RocksDB paths
2015-04-14 21:07:21 -07:00
Teddy Reed
14a09cc6f2
Change schedule to a map, splay on config update
2015-03-24 16:28:49 -07:00
Mitchell Grenier
c8e116aa7d
Reinstated the extra escape with changes
...
I put the original escape back in but redirected the call to a new function
that will escape characters in the form of \xNN when:
`byte < 0x20 || byte >= 0x80`
This leaves slashes alone and should fix this issue.
UPDATE: Tests have also been added. Added an English test to test for NOP.
2015-03-23 10:49:28 -07:00
Mitchell Grenier
3d26cea88e
[ Fix #877 ] Removing an extra escape
...
I believe the cause of the problem was that an extraneous escape was happening
in the `addNewResults` function in query.cpp.
I believe this can be safely removed because it's purpose is only to make things
JSON safe. However, I don't think this function is ever called with out a JSON
serialization later, making this unnecessary.
2015-03-19 13:56:47 -07:00
Teddy Reed
3c02806cd8
Extensions autoloading prequel
2015-03-04 18:51:41 -08:00
Teddy Reed
1f8dacec3c
Add flag aliasing, logger/flag tests
2015-02-17 16:26:14 -08:00
Teddy Reed
19998a001a
Harden watcher for more perf, use exec and watch from worker
2015-02-08 00:06:44 -07:00
Teddy Reed
993e2c4577
Changes to flags, extensions now loaded with shell/daemon
2015-02-06 09:40:49 -08:00
Teddy Reed
ed9bae29b7
Organizing headers/build for SDK
2015-02-03 14:59:32 -08:00
Zachary Wasserman
ac53637bcf
Add getQueryColumns function to core
...
This new getQueryColumns function allows us to determine what columns
will be returned by executing a given query. It is intended to be used
with the distributed query system, to determine a schema for the
results before sending the query.
Tested by unit tests. Also used valgrind and did not find errors that
looked related to this change (though there appear to be many errors
related to glog logging).
2015-02-02 10:11:00 -08:00
Teddy Reed
ab08bc76a8
Towards a new registry
2015-02-01 02:20:09 -07:00
Teddy Reed
9c1faec090
Isolate glog include and depend on libglog for #652
2015-01-21 13:37:06 -08:00
Teddy Reed
2bf86ebda9
Merge pull request #562 from theopolis/plugins_refactor
...
Plugins Refactor: Towards external plugins
2014-12-29 13:37:03 -08:00
Theodore M. Reed
53d683a3b3
Remove tables dependency from CMake build
2014-12-23 14:37:07 -08:00
Bryan Eastes
93cb303abc
Merge branch 'master' of github.com:facebook/osquery into 520_pt_json_workaround
2014-12-20 18:24:33 -08:00
Bryan Eastes
5ad8d3ec55
Changes from CR
2014-12-20 18:19:33 -08:00
mike@arpaia.co
b9f732c31f
Updating the license comment to be the correct open source header
...
As per t5494224, all of the license headers in osquery needed to be updated
to reflect the correct open source header style.
2014-12-18 10:52:55 -08:00
Bryan Eastes
bd97cb501a
First draft of workaround for #520
2014-12-10 00:15:27 -08:00
Teddy Reed
7c738c8497
Codemod to improve include search paths
2014-12-03 15:14:02 -08:00
mike@arpaia.co
febfd2488f
changing comments around MemEnv
2014-11-17 19:56:04 -08:00
mike@arpaia.co
fe138d7a78
nullptr checks
2014-11-17 19:53:05 -08:00
mike@arpaia.co
e7fedd8833
throw in ctor if an error occurs
2014-11-17 19:47:44 -08:00
mike@arpaia.co
18a111679d
updating the rocksdb database path
2014-11-17 19:39:25 -08:00
Teddy Reed
565bce3c07
Fix unwind exception catching
2014-11-14 01:42:00 -08:00
Teddy Reed
0c675b23f2
Fix testing (only requireInstance) for DBHandle once
2014-11-13 09:33:13 -08:00
Teddy Reed
b419c79791
[ Fix #386 ] This is a hack to fix Ubuntu unwinding
2014-11-12 17:12:37 -07:00
mike@arpaia.co
88bec43d8a
removing superfluous nullptr checks. close #404
2014-11-11 11:17:28 -05:00
Bryan Eastes
ec081c9a54
Added --host_identifier option
...
Conflicts:
osquery/core/system.cpp
2014-11-10 16:41:13 -05:00
mike@arpaia.co
bd4d1dfc0f
Removing superfluous logging from DBHandle. close #387
2014-11-10 12:15:35 -05:00
mike@arpaia.co
dfc206035c
using std::find instead of manual iteration
2014-11-03 12:14:14 -08:00
mike@arpaia.co
75ded8b881
Ensuring that listening_ports results are unique
2014-11-03 12:03:57 -08:00
Teddy Reed
1554bf3295
Fix #290 , add permissions to osqueryd logging
2014-10-30 15:03:05 -07:00
yetanotherhacker
8cee7e0b3c
Spelling fixes in comments and output.
2014-10-30 04:27:00 -04:00
Scott Robinson
e57bfac5fb
Fix a small typo.
2014-10-30 08:25:25 +11:00
Teddy Reed
6e60612520
Using clang-format 3.5
2014-10-27 17:37:36 -07:00
Teddy Reed
0a1925200e
Clean flags usage in daemon/shell and dbhandle
2014-10-27 12:09:35 -07:00
Teddy Reed
991cbdfb00
Fix permissions on DB handle
2014-10-27 10:05:08 -07:00
Teddy Reed
67dce20974
Log event results as a flat map
2014-10-26 10:18:26 -07:00
Teddy Reed
a82792b3f7
Log results as events
2014-10-24 17:05:17 -07:00
Teddy Reed
6eb9c5fd44
EventFactory, Dispatcher as singletons
2014-09-29 20:47:24 -07:00
Teddy Reed
ed338e8356
[events] Events lifecycle complete, passwd_changes vtable
2014-09-26 12:58:32 -07:00
mike@arpaia.co
4218a4c2ab
cmake cleanups
2014-09-22 21:23:16 -07:00
mike@arpaia.co
9e2507409c
linking tests against libosquery
2014-09-22 19:54:59 -07:00
mike@arpaia.co
ebfc47b399
Edits to https://github.com/facebook/osquery/pull/148/
2014-09-22 14:35:59 -07:00
mike@arpaia.co
16122544f5
Reorganizing tests so that the public headers don't have to include gtest
2014-09-22 14:30:52 -07:00
Teddy Reed
9b42c060ea
[events] Linux inotify event type
2014-09-22 01:47:50 -07:00
mike@arpaia.co
627821abc1
Periodic clang-format
2014-09-21 14:29:28 -07:00
mike@arpaia.co
b5ee19f49f
Removing the osquery::db namespace
2014-09-21 14:27:09 -07:00
Teddy Reed
9516bf8fd7
Regressions from core NS removal, linux includes
2014-09-17 10:29:22 -06:00
mike@arpaia.co
4a048db278
database namespace documentation
2014-09-15 17:13:22 -07:00
mike@arpaia.co
6a0e5b7ddb
Removing the unimplemented transaction locking methods in DBHandle
2014-09-13 13:53:12 -07:00
mike@arpaia.co
e838110e84
Moving header to include
2014-09-12 17:50:03 -07:00
Mike Arpaia
db0f0105dd
Revert "Skip tests when making 'fast'"
2014-09-09 21:37:08 -07:00
mike@arpaia.co
c9fafc00d3
using '#pragma once' instead of '#ifndef HEADER'
...
let's start using #pragma once for our headers. it's less lines of code,
clang supports it, headers become more movable, etc. it's all around a
better plan.
2014-09-09 18:54:53 -07:00
mike@arpaia.co
cec7b33afb
removing unused header includes
2014-09-09 18:43:41 -07:00
Teddy Reed
2e150ef8a9
Skip tests when making 'fast'
2014-09-09 16:25:22 -07:00
Mike Arpaia
d6699bd0fe
Adding header files to CMakeLists.txt so that other build tools can perform better introspection into the codebase.
2014-09-09 10:53:59 -07:00
Teddy Reed
7e470747b4
Moving sublibs to single libosquery
2014-09-08 01:58:29 -07:00
Teddy Reed
4ffd184eaf
Changes for Linux (Ubuntu 14.04) build
2014-09-05 10:58:58 -07:00
mike@arpaia.co
66a2a6fdec
Fix performance issue with the disk serializer
...
This is the issue noted in #76 . Keeping all historical results of
queries in the HistoricalQueryResults struct makes serializing and
deserializing those structs very, very slow as time goes on. By only
storing the last execution of the query, we keep the performance
constant, but we kill the feature where osquery can rebuild timelines
without accessing logs. After talking it over, we decided that this
isn't actually that big of a deal because, if you really wanted to
rebuild the old data, you should be able to process the logs, similarly
to bin log replication in MySQL.
2014-09-02 13:13:12 -07:00
mike@arpaia.co
63070a0d49
migrating project to use CMake's CTest to run unit tests
2014-09-02 11:14:21 -07:00
mike@arpaia.co
0e806eff83
Proper ARC in Objective-C++ code
2014-08-30 00:22:26 -07:00
mike@arpaia.co
eaed8c2dec
const reference iteration of kDomains vector (since it's const itself)
2014-08-28 19:21:52 -07:00
mike@arpaia.co
15519b348e
Adding LaunchDaemon and flagfile to the repo/package
2014-08-26 11:26:52 -07:00
mike@arpaia.co
e723306c13
Ran clang-format across the codebase
2014-08-15 12:29:51 -07:00
mike@arpaia.co
2a571d8aae
making sure that database objects aren't built before rocksdb is
2014-08-11 18:03:25 -07:00
mike@arpaia.co
9a9ae03506
renaming CMakeLists.txt
2014-08-10 02:07:15 -07:00
mike@arpaia.co
7c81d42de5
reordering includes in cpp files
2014-08-05 17:37:04 -07:00
mike@arpaia.co
ec30260f37
core/status to status and header cleanup
2014-08-05 16:13:55 -07:00
mike@arpaia.co
73a32b7294
Initial commit
2014-07-30 17:35:19 -07:00
