Commit Graph

2082 Commits

Author SHA1 Message Date
Teddy Reed
5249e74146 [Fix #1303] Only emit rows when appropriate for processes/users.
When optimizing a table using query constraints an implementation should not add unneeded rows.
A user experience bug exists when selecting with an explicit non-existing pid/uid.
2015-07-19 20:20:04 -07:00
Teddy Reed
6bfe03f6e9 Merge pull request #1354 from theopolis/more_install
Install additional configs for HB/packages
2015-07-17 16:22:19 -07:00
Teddy Reed
a713d09f0e Install additional configs for HB/packages 2015-07-17 16:07:22 -07:00
Teddy Reed
47512f2529 Merge pull request #1352 from theopolis/tls_refresh
Add optional TLS config plugin refresh
2015-07-17 15:14:25 -07:00
Javier Marcos
df38683f84 Merge pull request #1353 from javuto/query_packs_files
Query packs files
2015-07-17 15:11:28 -07:00
Teddy Reed
6104aaebfe Add optional TLS config plugin refresh 2015-07-17 14:59:08 -07:00
Javier Marcos
36e550db0b Query packs files 2015-07-17 14:42:05 -07:00
Teddy Reed
c36fbda274 Merge pull request #1349 from theopolis/centos_version
[Fix #1319] CentOS version reporting and file read error
2015-07-17 09:07:29 -07:00
Michael O'Farrell
62f96b37eb Merge pull request #1351 from theopolis/kernel_packaging
[Fix #1339] Add kernel-build to packages when used
2015-07-16 15:41:05 -07:00
Teddy Reed
270b4da540 [Fix #1339] Add kernel-build to packages when used 2015-07-16 15:23:29 -07:00
Michael O'Farrell
395f825321 Merge pull request #1350 from achmiel/doc_urls
Fixed URLs and some typos in the documentation
2015-07-16 15:16:26 -07:00
Artur Chmiel
c0be6b5ba1 Fixed URLs and some typos in the documentation 2015-07-16 23:17:22 +02:00
Teddy Reed
f06820f578 [Fix #1319] CentOS version reporting and file read error
1. Redhat-based distributions were not reporting their version correct.
2. The file read API assumed stat would return an accurate file size.
This has been replaced with an attempt to seek to the end of the file.
2015-07-16 14:16:51 -07:00
Javier Marcos
0ff02d8146 Merge pull request #1348 from javuto/tables_only_final_releases
Fix tables JSON file name
2015-07-16 13:53:36 -07:00
Javier Marcos
7241becda1 Fix tables JSON file name 2015-07-16 13:38:31 -07:00
Javier Marcos
7172c36d6f Merge pull request #1347 from javuto/table_docs_with_package
Generation of table docs with packages and docs targets
2015-07-16 12:39:43 -07:00
Javier Marcos
84e0c77a98 Generation of table docs with packages and docs targets 2015-07-16 12:23:44 -07:00
Teddy Reed
4cb6e37f1d Merge pull request #1338 from theopolis/join_bug
Fix broken JOIN predicate passing
2015-07-16 11:45:33 -07:00
Teddy Reed
deecef81c5 Fix broken JOIN predicate passing 2015-07-16 11:29:56 -07:00
Mike Arpaia
9eeb224ce7 clang-format authorizations files 2015-07-16 11:09:16 -07:00
Mike Arpaia
664c1e1ed3 Merge pull request #1346 from javuto/populating_table_fields
Adding column description to all the missing table fields
2015-07-15 23:37:05 -07:00
Javier Marcos
25f0de07a5 Adding description to all the missing table fields 2015-07-15 23:23:42 -07:00
Mike Arpaia
333f0c5799 Merge pull request #1345 from achmiel/fix_symlinks
Updated the readFile function to correctly handle symbolic links
2015-07-15 23:21:35 -07:00
Artur Chmiel
ac9a320218 Updated the readFile function to correctly handle symbolic links 2015-07-16 07:55:12 +02:00
Mike Arpaia
485a7f78fb Merge pull request #1318 from tburgin/master
Added authdb table
2015-07-15 21:51:53 -07:00
Mike Arpaia
c61c0775b4 Merge pull request #1342 from theopolis/osqueryctl_install
[Fix #1341] Add osqueryctl to make install target
2015-07-15 21:45:03 -07:00
Javier Marcos
01fabf910d Merge pull request #1343 from javuto/generate_tables_output
Adding support to generate documentation to external files
2015-07-15 17:10:27 -07:00
Javier Marcos
ba69bf8efa Adding support to generate documentation to external files 2015-07-15 13:18:41 -07:00
Teddy Reed
5f6577deb2 [Fix #1341] Add osqueryctl to make install target 2015-07-15 11:32:55 -07:00
Tom Burgin
e8d3e45cea Added authorization_mechanisms and authorizations tables 2015-07-15 14:25:19 -04:00
Michael O'Farrell
0eba0776e5 Merge pull request #1336 from mofarrell/master
Kernel publisher only log info when not connected.  [Fix #1334]
2015-07-14 20:27:45 -07:00
Michael O'Farrell
019defc788 Kernel publisher only log info when not connected. [Fix #1334] 2015-07-14 20:10:50 -07:00
Teddy Reed
7d463180f9 Merge pull request #1333 from theopolis/fix_1332
[Fix #1332] Check mode for links in readFile
2015-07-14 19:21:28 -07:00
Teddy Reed
1cc5a52e7a Merge pull request #1337 from theopolis/brew_gflags_static
Build/install gflags' static library on build hosts.
2015-07-14 19:19:06 -07:00
Teddy Reed
341245f751 Build/install gflags' static library on build hosts.
As of [homebrew #41151](https://github.com/Homebrew/homebrew/pull/41151) gflags is not installed with a static library.
Our build hosts must have static versions of gflags.
2015-07-14 17:20:55 -07:00
Teddy Reed
263090e8f2 [Fix #1332] Check mode for links in readFile
1. "really" check for links in readFile
2. Apply the same restrictions and flag ACLs to file hashing.
2015-07-14 14:24:52 -07:00
Teddy Reed
cfad19cb53 Merge pull request #1331 from theopolis/rocksdb_lite2
Rollup of build changes
2015-07-14 14:24:34 -07:00
Teddy Reed
c269bbeaf3 Rollup of build changes 2015-07-14 13:45:53 -07:00
Michael O'Farrell
276891ad00 Merge pull request #1330 from mofarrell/kernel
Kernel!!!
2015-07-13 17:29:08 -07:00
Michael O'Farrell
9a67c18974 Merge pull request #1327 from mofarrell/kernel-publishers
Publisher system for kernel events in the kernel extension.
2015-07-13 16:54:47 -07:00
Michael O'Farrell
58ec6415d3 Created a basic publisher system for kernel events in the kernel extension. 2015-07-13 16:42:55 -07:00
Teddy Reed
19d7a9e735 Merge pull request #1328 from mofarrell/kernel
Fixed cleanup in testing script in failure cases.
2015-07-13 16:41:44 -07:00
Teddy Reed
589b410698 Merge pull request #1326 from theopolis/kernel_build2
Build separate OS X packages
2015-07-13 16:39:11 -07:00
Michael O'Farrell
b2b1f0483d Fixed cleanup in testing script in failure cases. 2015-07-13 16:11:45 -07:00
Teddy Reed
0e49a3a9a1 Build separate OS X packages 2015-07-13 15:44:16 -07:00
Teddy Reed
d8e74df1a9 Merge pull request #1325 from theopolis/wrap_deprecated
Silence OS X OpenSSL-related deprecations
2015-07-13 11:26:37 -07:00
Teddy Reed
3bd6b64b8b Silence OS X OpenSSL-related deprecations 2015-07-13 10:14:47 -07:00
Teddy Reed
1d336ccdb0 Merge pull request #1321 from sharvilshah/cert_parsing_fixes
[Fix #1032] Better/faster performance when querying certificates on OS X
2015-07-13 09:02:44 -07:00
Sharvil Shah
1ac6702f32 Better/faster performance when querying certificates on OS X
X509 parsing is now handled by OpenSSL as there does seem to be a
memory leak in SecCertificateCopyValues of Security framework which resulted
in a performance hit when querying certificates.

key_usage and key_algorithm columns now display human readable strings
(e.g. Digital Signature, CRL Sign rsaEncryption)
than the raw flags and OIDs (e.g 0x86, 1.2.840.1).

This fixes #1032
2015-07-12 11:18:53 -07:00
Teddy Reed
e86ee41f5e Merge pull request #1323 from achmiel/docfixes
Various fixes to the documentation
2015-07-11 15:22:33 -07:00