4 Commits

Author	SHA1	Message	Date
Teddy Reed	525a3b79a0	Tons of new build features ... * The OS/DISTRO are available as defines when writing tables: UBUNTU, UBUNTU_14_04, UBUNTU_12_04 CENTOS, CENTOS_6_6 DARWIN, DARWIN_10_10, DARWIN_10_9 * The table generation tooling now grabs virtual tables templates from ./osquery/tables/templates/<name>.cpp.in. * The table generation tooling will detect reserved column names. * suid_bin uses the new UBUNTU to restrict calls to root (fix #362).	2014-11-12 00:57:47 -08:00
Alexander Polyakov	00dbf282a6	/ is not always readable	2014-11-07 01:00:58 +03:00
Teddy Reed	dc77df602e	[format] Cleanup various PRs not run through clang-format	2014-11-03 17:57:01 -08:00
Vincent Mauge	471d5faaa0	Add suid_bin vtable ... The vtabel report : - path: full path of the file - unix_user: name of the owner (if not available display the uid) - unix_group: name of the groupe (if not available display the gid) - permissions: report suid or guid * S for suid bin * G for guid bin Example : osquery> select * from suid_bin; +----------------------------------------------------------------------------------------------------+-----------+---------------+-------------+ | path | unix_user | unix_group | permissions | +----------------------------------------------------------------------------------------------------+-----------+---------------+-------------+ | "/bin/ps" | root | wheel | S | | "/bin/rcp" | root | wheel | S | | "/Users/vmauge/suid_test" | vmauge | 999 | SG | | "/usr/bin/at" | root | wheel | S | | "/usr/bin/atq" | root | wheel | S | | "/usr/bin/atrm" | root | wheel | S | | "/usr/bin/batch" | root | wheel | S | | "/usr/bin/crontab" | root | wheel | S | | "/usr/bin/ipcs" | root | wheel | S | | "/usr/bin/lockfile" | root | mail | G | | "/usr/bin/login" | root | wheel | S | | "/usr/bin/newgrp" | root | wheel | S | | "/usr/bin/procmail" | root | mail | G | | "/usr/bin/quota" | root | wheel | S | | "/usr/bin/rlogin" | root | wheel | S | | "/usr/bin/rsh" | root | wheel | S | | "/usr/bin/su" | root | wheel | S | | "/usr/bin/sudo" | root | wheel | S | | "/usr/bin/top" | root | wheel | S | | "/usr/bin/wall" | root | tty | G | | "/usr/bin/write" | root | tty | G | | "/usr/sbin/postdrop" | root | _postdrop | G | | "/usr/sbin/postqueue" | root | _postdrop | G | | "/usr/sbin/rpc.net" | root | wheel | S | | "/usr/sbin/rpcset" | root | wheel | S | | "/usr/sbin/traceroute" | root | wheel | S | | "/usr/sbin/traceroute6" | root | wheel | S | +----------------------------------------------------------------------------------------------------+-----------+---------------+-------------+ This commit fixes issue #253.	2014-10-29 01:33:58 -07:00