Teddy Reed
4c4cba73c8
[Implement #593 ] Add a RLOG, TLOG helper macro
2015-03-08 15:20:36 -07:00
Teddy Reed
4916392aa8
Merge pull request #812 from theopolis/keychain
...
Add more keychain search paths for certificates
2015-03-07 23:27:50 -08:00
Theodore M. Reed
4803b441a2
Move preprocessor defines before compile flags
2015-03-06 12:11:21 -08:00
Teddy Reed
95a9716e02
Remove shell tools from daemon
2015-03-04 23:21:16 -08:00
Teddy Reed
0673900837
Registry modules
2015-03-04 20:33:10 -08:00
Teddy Reed
99beceaef6
Switch lazy=active concept for registry setup
2015-03-04 18:51:41 -08:00
Teddy Reed
8efa07e520
Watcher process will fail if DB path is incorrect
2015-03-04 18:51:41 -08:00
Teddy Reed
3c02806cd8
Extensions autoloading prequel
2015-03-04 18:51:41 -08:00
Mitchell Grenier
3d27fff697
Merge pull request #784 from jedi22/directory_monitoring
...
Adding ability to monitor whole folders
2015-03-02 17:21:24 -08:00
Teddy Reed
e123f9f0a2
Add more keychain search paths for certificates
2015-03-01 21:15:42 -08:00
Mitchell Grenier
0031c6ed57
Fixed many bugs. inotify and fsevents should be same now
2015-02-27 17:28:51 -08:00
Mitchell Grenier
70c82b5a40
Linux inotify more closely resembles fsevents and is generally more awesome
2015-02-25 16:43:37 -08:00
Mitchell Grenier
6548006d3e
Adding ability to monitor whole folders
2015-02-25 16:28:24 -08:00
Teddy Reed
9031bad609
Extensions helpers, API additions
...
Use --socket for extensions, limit help
Add an 'active' concept to registries, support a blank item call
Add osquery_registry to list the internal/external plugin details
2015-02-25 01:02:05 -07:00
Teddy Reed
925deb8e74
[lints] Basic cpp linting
2015-02-24 03:47:12 -08:00
Teddy Reed
ace433e49d
Allow external calls from within registry
2015-02-23 21:35:54 -08:00
Teddy Reed
a29addba61
Extensions integrations testing
2015-02-22 22:56:18 -07:00
Teddy Reed
dd6283b6fe
Merge pull request #779 from theopolis/events_strict
...
Removed reinterpret plugin casts
2015-02-19 17:56:59 -08:00
Teddy Reed
5334b9650a
Merge pull request #775 from theopolis/sdk_build
...
Building example extension with SDK
2015-02-19 14:26:48 -08:00
Teddy Reed
247e57f2d6
Removed reinterpret plugin casts
2015-02-19 14:23:15 -08:00
Mitchell Grenier
182c69d4af
Added ability to specify files to watch with wildcards
2015-02-19 12:43:23 -08:00
Teddy Reed
451ef686ed
Building example extension with SDK
2015-02-18 20:11:00 -08:00
mike@arpaia.co
552a663f0d
fixing teh compiler errorz
2015-02-18 10:51:26 -08:00
mike@arpaia.co
843fe3a302
syncing sdk with codemod and targets
2015-02-18 09:02:04 -08:00
Teddy Reed
0ae7cd3cc9
Merge pull request #769 from theopolis/extension_table_socket_fix
...
Fix osquery_extensions listing .0 for the core
2015-02-17 19:18:49 -08:00
Teddy Reed
8aefe1a110
Add thrift 'query' endpoint
...
This allows extensions to execute SQL through the extensions API.
2015-02-17 18:42:09 -08:00
Teddy Reed
7c8ae07559
Fix osquery_extensions listing .0 for the core
2015-02-17 16:32:26 -08:00
Teddy Reed
1f8dacec3c
Add flag aliasing, logger/flag tests
2015-02-17 16:26:14 -08:00
Teddy Reed
6f155d63c5
Improve flag storage and printing
2015-02-16 16:26:06 -08:00
Teddy Reed
6994361f26
Improved logging control
2015-02-16 14:42:22 -08:00
Teddy Reed
3c36c4196b
Merge pull request #731 from jedi22/wildcard_events
...
Added parsing of extra data along with its addition to the osqueryconfig structure
2015-02-15 19:16:54 -08:00
Zachary Wasserman
1f450fb1ef
Merge pull request #710 from zwass/distributed
...
POC for client side of distributed queries.
2015-02-13 14:25:52 -08:00
Zachary Wasserman
79034111a5
POC for client side of distributed queries.
...
This introduces the notion of a DistributedQueryHandler that uses a "provider" to read/write requests and results to and from the master. The full flow is exercised via integration tests, and unit tests for each component.
It is intended to foster discussion around this client side interface, as well as provide a base to build from.
2015-02-13 13:01:02 -08:00
Teddy Reed
aa078895d3
CentOS7 clang without fortify
...
1. _FORTIFY_SOURCE=1 will cause readlink/recv to hang when using
heap-allocated target buffers.
2. Install boost/rocksdb/thrift using source, similar to CentOS6.5
3. Remove boost::regex, prefer extended std::regex without static
link to boost_regex.
2015-02-13 12:47:30 -08:00
Mitchell Grenier
54ef2045e5
Made config a meyers singleton. Load should now only ever have to happen once
2015-02-13 12:32:54 -08:00
Mitchell Grenier
0448afbd91
Asynchronously resolve the wildcards of all the files we want to monitor
2015-02-11 19:35:57 -08:00
Mitchell Grenier
dca2f9d7bb
Added parsing of extra data along with its addition to the osqueryconfig structure
...
Added tests as well
2015-02-11 19:35:57 -08:00
Teddy Reed
04fb33cbf2
Merge pull request #737 from theopolis/safe
...
Safer compile flags
2015-02-11 12:32:36 -08:00
Teddy Reed
7bab4a4706
Merge pull request #732 from theopolis/plist_defaults
...
Added 'defaults' table called 'preferences'
2015-02-11 12:03:23 -08:00
Teddy Reed
fd92f9cb4c
Added 'defaults' table called 'preferences'
2015-02-11 11:39:25 -08:00
Teddy Reed
a59dcf01ee
Add osquery_extensions table
2015-02-11 10:52:25 -08:00
Teddy Reed
2593e8f837
Add extensions status to osquery_info
2015-02-11 10:52:25 -08:00
Teddy Reed
9eeda1f02c
Safer compile flags
2015-02-11 10:45:04 -08:00
Teddy Reed
7f7b2acd37
Merge pull request #728 from theopolis/pubs_as_runnables
...
[Fix #704 ] Events sleep with dispatcher's interruptableSleep
2015-02-10 13:06:16 -08:00
Teddy Reed
23864f220d
[ Fix #704 ] Events sleep with dispatcher's interruptableSleep
2015-02-10 12:51:26 -08:00
Teddy Reed
55dfdfcace
Move lsperms into filesystem
2015-02-10 03:00:29 -07:00
Teddy Reed
d2b18c05c9
Add watcher profiles
2015-02-09 12:38:50 -08:00
Teddy Reed
19998a001a
Harden watcher for more perf, use exec and watch from worker
2015-02-08 00:06:44 -07:00
Teddy Reed
993e2c4577
Changes to flags, extensions now loaded with shell/daemon
2015-02-06 09:40:49 -08:00
Teddy Reed
4f10a35f80
Adding thrift extension API
2015-02-06 09:40:49 -08:00
