Teddy Reed
51fd73c449
Assure dropTo can be used safely consecutively
2015-12-14 21:27:00 -08:00
Teddy Reed
12716496aa
[ Fix #1694 ] Expire results for 'old' scheduled queries
2015-12-07 12:23:43 -08:00
Teddy Reed
4c2319f8dd
Add GID to PrivilegeDropper
2015-11-08 01:03:08 -08:00
Teddy Reed
57e8ef2ab3
[ #1546 ] Add computer_name to system_info and extend to Linux
2015-11-04 10:31:16 -08:00
Teddy Reed
edea3d6edd
[ Fix #1626 ] Add schedule blacklist and protect DBHandle
2015-11-03 20:50:22 -08:00
Teddy Reed
d27a7ecc4c
Fix clang warnings, promote warnings to errors
2015-11-01 02:12:07 -08:00
Teddy Reed
09e4e3c42e
Expand the scope of permissions dropping
2015-10-30 09:56:33 -07:00
Scott Piper
5e7d0d6a37
Added system_info table
2015-09-09 10:26:16 -07:00
Teddy Reed
0e16f56c8d
Add 'hidden' flags to customize TLS plugins
2015-08-28 12:57:53 -07:00
Teddy Reed
8082a0b5ac
Use SIGKILL on OS X
2015-07-29 17:05:45 -07:00
Teddy Reed
c934ad0df3
Update tooling/profiling paths
2015-06-03 21:22:12 -07:00
Teddy Reed
8b3686a58a
TLS plugin workflow tests
2015-05-26 19:55:00 -07:00
Teddy Reed
893f678403
Linting and asan fixups
2015-05-04 11:00:21 -07:00
Teddy Reed
e01a73b4f3
Schedule monitoring, doc updates, logger plugin fixes
2015-05-03 11:54:15 -07:00
Teddy Reed
c59ce0e4e4
Lint fixes and clang analyze
2015-04-17 09:18:46 -07:00
Teddy Reed
3c02806cd8
Extensions autoloading prequel
2015-03-04 18:51:41 -08:00
Teddy Reed
1f8dacec3c
Add flag aliasing, logger/flag tests
2015-02-17 16:26:14 -08:00
Zachary Wasserman
79034111a5
POC for client side of distributed queries.
...
This introduces the notion of a DistributedQueryHandler that uses a "provider" to read/write requests and results to and from the master. The full flow is exercised via integration tests, and unit tests for each component.
It is intended to foster discussion around this client side interface, as well as provide a base to build from.
2015-02-13 13:01:02 -08:00
Teddy Reed
d2b18c05c9
Add watcher profiles
2015-02-09 12:38:50 -08:00
Teddy Reed
19998a001a
Harden watcher for more perf, use exec and watch from worker
2015-02-08 00:06:44 -07:00
Teddy Reed
993e2c4577
Changes to flags, extensions now loaded with shell/daemon
2015-02-06 09:40:49 -08:00
Mitchell Grenier
0e7bf914a3
Removed 2 lines of code that didn't look like they were doing anything
2015-01-27 17:27:01 -08:00
Teddy Reed
a9ede83446
[ FIx #676 ] Add --force option to osqueryd
2015-01-27 16:00:39 -08:00
Teddy Reed
9c1faec090
Isolate glog include and depend on libglog for #652
2015-01-21 13:37:06 -08:00
Zachary Wasserman
ee798cdde7
Use sizeof with memcpy and memset
...
I'd like to make sure we use expressions of sizeof to relate buffer
sizes to memcpy and memset. This should make modifying the code less
error prone.
Conflicts:
osquery/tables/system/darwin/nvram.cpp
2015-01-20 12:36:36 -08:00
Teddy Reed
2ad15763e2
Provide example config, improve pid check
2015-01-07 15:22:50 -08:00
mike@arpaia.co
b9f732c31f
Updating the license comment to be the correct open source header
...
As per t5494224, all of the license headers in osquery needed to be updated
to reflect the correct open source header style.
2014-12-18 10:52:55 -08:00
mike@arpaia.co
0846b6ddd5
Fixing pidfile creation bug
...
If osqueryd was killed and another process was started with osqueryd's
old pid before a new osqueryd could start, osqueryd would encounter a
bug where osqueryd would never start.
This executes an osquery query to the processes table to make sure that
the name of the process is "osqueryd". Of course, you could perhaps
denial of service osqueryd this way, but that would require root
filesystem access (assuming that the last version of osqueryd was
ran as root). Thoughts?
2014-12-08 23:52:38 -08:00
Teddy Reed
7c738c8497
Codemod to improve include search paths
2014-12-03 15:14:02 -08:00
Teddy Reed
6a46513a08
Fix abrt in osqueryd as non-su
2014-11-30 22:36:55 -07:00
Teddy Reed
cd8413d483
Organizing affinity types into tables.
2014-11-29 22:36:05 -08:00
mike@arpaia.co
8f50cae3aa
clang-format on the codebase
...
Periodic clang-format run.
2014-11-25 09:05:16 -08:00
Teddy Reed
9a6a69a224
Merge pull request #469 from theopolis/logging-nits
...
Move expected errors to info log
2014-11-19 14:54:32 -08:00
Teddy Reed
bc9a5ed3b4
Move expected errors to info log
2014-11-19 09:03:58 -08:00
Li-Wen Hsu
6c55b51c53
Merge branch 'master' into freebsd-build
...
Conflicts:
osquery/core/system.cpp
tools/provision.sh
2014-11-19 01:50:38 +08:00
mike@arpaia.co
a680e173dd
i'm not ok
2014-11-17 19:25:06 -08:00
mike@arpaia.co
89da66458c
making the name of the flag more concise
2014-11-17 19:17:07 -08:00
mike@arpaia.co
c56b663261
pidfile for osqueryd
...
close #442
2014-11-17 18:42:36 -08:00
Li-Wen Hsu
7822d06774
No <uuid/uuid.h> under FreeBSD
2014-11-16 01:41:50 +08:00
Bryan Eastes
ec081c9a54
Added --host_identifier option
...
Conflicts:
osquery/core/system.cpp
2014-11-10 16:41:13 -05:00
mike@arpaia.co
896a4f2957
generic users function and some general cleanups
2014-11-04 11:40:54 -08:00
mike@arpaia.co
ad9b0bb5c1
Doxyfile, for docs
2014-09-13 15:18:26 -07:00
mike@arpaia.co
47bfe57272
clang-format
2014-08-30 04:06:31 -07:00
mike@arpaia.co
b7f9ecc6e1
add an extra char for the \0
2014-08-30 03:53:32 -07:00
mike@arpaia.co
15519b348e
Adding LaunchDaemon and flagfile to the repo/package
2014-08-26 11:26:52 -07:00
