Michael O'Farrell
4bbb591b37
Added kernel process events table.
2015-07-08 13:47:07 -07:00
Teddy Reed
e7ab2fc47b
Limit scope of git/tag version defines.
...
Harden plist parsing against internal fuzzing tests.
Improve file/stream read speeds.
2015-06-12 10:10:20 -07:00
Teddy Reed
c934ad0df3
Update tooling/profiling paths
2015-06-03 21:22:12 -07:00
Teddy Reed
0669d8205e
Merge pull request #1174 from theopolis/remote_logger
...
TLS/HTTPS-based logger plugin
2015-06-02 02:59:34 -07:00
Wesley Shields
6558f605ff
Implement process related tables on FreeBSD.
...
This implements the following tables on FreeBSD:
process_envs
process_memory_map
process_open_files
process_open_sockets
processes
All the heavy lifting is done with libprocstat(3). All the tables follow
the same general principle. Use the common function, getProcesses() in
procstat.cpp, to get the processes and then generate the rows for each
process returned. There is also a procstatCleanup() function commonly
used across all the tables.
The one thing I am not able to test is the process_open_sockets table on
an IPv6 machine.
2015-05-29 19:17:49 +00:00
Mitchell Grenier
418e6495c0
Adding a remote logger for osquery
...
The first draft of the remote logger for osquery. This should give a rough idea
of how the code will be structured and function. RFC please.
At the advice of @theopolis, I removed the category type and added the
http_logger key. We figure this should be more efficient and doesn't have to
be known at compile time.
2015-05-28 17:14:56 -07:00
Teddy Reed
4064fa6eb5
Pack and testing fixups
2015-05-28 12:17:27 -07:00
Teddy Reed
8b3686a58a
TLS plugin workflow tests
2015-05-26 19:55:00 -07:00
Teddy Reed
4a6c002f62
Allow unit tests execs from project root
2015-05-23 13:12:31 -07:00
Mike Arpaia
fff36af0af
Removing trailing whitespace
2015-05-11 23:31:13 -07:00
Teddy Reed
771ed4da2f
[ Fix #1125 #1126 ] Flag padding checks, config_check tests
2015-05-11 10:37:16 -07:00
Teddy Reed
c7b9114975
Towards building on FreeBSD/ports
2015-05-07 23:12:30 -07:00
Teddy Reed
d0bbb0bc4f
Towards safer and shuffled unittests
2015-04-29 14:43:27 -07:00
Teddy Reed
2c5cbdee63
Various shell fixups
2015-04-27 16:40:05 -07:00
Teddy Reed
be65922569
Fast tests
2015-04-27 09:40:31 -07:00
Teddy Reed
e69f72cd56
Documentation updates
2015-04-10 14:31:34 -07:00
Teddy Reed
14a09cc6f2
Change schedule to a map, splay on config update
2015-03-24 16:28:49 -07:00
Teddy Reed
5b227c8e3d
Scheduler organization for async config updates
2015-03-24 16:27:35 -07:00
Teddy Reed
91dce32095
Speed up shell and add max value size
2015-03-18 15:07:13 -07:00
Teddy Reed
8b990c546d
[ Fix #852 ] Use a user-specific temporary dir for shell state
2015-03-16 09:29:50 -07:00
Teddy Reed
fe0f369af0
Extension-dependent config/logger plugins
2015-03-13 12:01:30 -07:00
Teddy Reed
99beceaef6
Switch lazy=active concept for registry setup
2015-03-04 18:51:41 -08:00
Teddy Reed
3c02806cd8
Extensions autoloading prequel
2015-03-04 18:51:41 -08:00
Teddy Reed
451ef686ed
Building example extension with SDK
2015-02-18 20:11:00 -08:00
Teddy Reed
6f155d63c5
Improve flag storage and printing
2015-02-16 16:26:06 -08:00
Teddy Reed
5810a35cec
Add a SQLiteDBManager
2015-02-11 15:27:45 -08:00
Teddy Reed
9eeda1f02c
Safer compile flags
2015-02-11 10:45:04 -08:00
Teddy Reed
19998a001a
Harden watcher for more perf, use exec and watch from worker
2015-02-08 00:06:44 -07:00
Teddy Reed
771887c27a
Fix GTest/siginfo redefine by libthrift
2015-02-06 09:40:50 -08:00
Teddy Reed
993e2c4577
Changes to flags, extensions now loaded with shell/daemon
2015-02-06 09:40:49 -08:00
Teddy Reed
4f10a35f80
Adding thrift extension API
2015-02-06 09:40:49 -08:00
Teddy Reed
ed9bae29b7
Organizing headers/build for SDK
2015-02-03 14:59:32 -08:00
Mike Arpaia
38369bb30f
Update daemon.cpp
2015-02-03 14:27:17 -08:00
Teddy Reed
f96b498ae3
Remove EventFactory::deregister... in favor of ::end
2015-02-01 02:20:09 -07:00
Teddy Reed
d39f1fae95
Minor registry documentation, using macros for create/add
2015-02-01 02:20:09 -07:00
Teddy Reed
ab08bc76a8
Towards a new registry
2015-02-01 02:20:09 -07:00
Teddy Reed
8fd56417fd
Adding a watcher/worker model for osqueryd
2015-01-26 01:22:50 -07:00
Teddy Reed
9c1faec090
Isolate glog include and depend on libglog for #652
2015-01-21 13:37:06 -08:00
mike@arpaia.co
10d5aabd36
config-check command in osqueryd
...
This addresses #585
2015-01-21 12:59:39 -08:00
Teddy Reed
2ad15763e2
Provide example config, improve pid check
2015-01-07 15:22:50 -08:00
Teddy Reed
80276471c5
Add --daemonize option to osqueryd
2015-01-04 19:27:04 -08:00
Teddy Reed
94811f3ee8
Removed 'core' tables as a build dependency
2014-12-25 12:46:59 -08:00
Theodore M. Reed
53d683a3b3
Remove tables dependency from CMake build
2014-12-23 14:37:07 -08:00
mike@arpaia.co
b9f732c31f
Updating the license comment to be the correct open source header
...
As per t5494224, all of the license headers in osquery needed to be updated
to reflect the correct open source header style.
2014-12-18 10:52:55 -08:00
mike@arpaia.co
e260007f04
Change exit(-1) to exit(EXIT_FAILURE)
2014-12-08 10:40:10 -08:00
Teddy Reed
7c738c8497
Codemod to improve include search paths
2014-12-03 15:14:02 -08:00
mike@arpaia.co
c56b663261
pidfile for osqueryd
...
close #442
2014-11-17 18:42:36 -08:00
Teddy Reed
078d4cf7d2
Refector shell flags/versioning
2014-11-08 20:27:28 -08:00
Teddy Reed
62d6472cfe
Rethinking some build improvements
2014-11-08 19:28:35 -08:00
Teddy Reed
6e60612520
Using clang-format 3.5
2014-10-27 17:37:36 -07:00
