Teddy Reed
5aa225d4c3
Merge pull request #1619 from sharvilshah/wifi
...
Implement wifi_networks tables for OS X
2015-11-02 16:11:21 -08:00
Teddy Reed
e501507c87
Merge pull request #1621 from theopolis/hardening2
...
Various performance improvements, stability, and bug fixes.
2015-11-02 14:35:51 -08:00
Teddy Reed
15215cdbc0
Add persistent splays
2015-11-02 14:10:04 -08:00
Teddy Reed
402490e75b
Attempt to improve DB/query performance
2015-11-02 10:57:01 -08:00
Teddy Reed
6aae4c9aa0
Fix tests and shell escape errors (faults)
2015-11-02 10:57:01 -08:00
Teddy Reed
425e5e5596
Change the watcher limits to default=loose
2015-11-02 10:57:01 -08:00
Teddy Reed
5233d7dcf8
Add start time to osquery_info, remove md5/path
2015-11-02 10:57:01 -08:00
Teddy Reed
19427b1854
Add database benchmarks
2015-11-02 10:57:01 -08:00
Teddy Reed
75bfcddc31
Merge pull request #1622 from theopolis/faster_sockets
...
Faster socket_events on Linux
2015-11-02 10:56:37 -08:00
Teddy Reed
3fc3e5ebe2
Merge pull request #1528 from theopolis/freebsd_ci
...
[#1548 ] Build and provision edits for FreeBSD CI
2015-11-02 10:46:10 -08:00
Teddy Reed
a1a9131174
Optimize socket_events and Linux users
2015-11-02 10:37:56 -08:00
Teddy Reed
50550e607a
Build and provision edits for FreeBSD CI
2015-11-02 01:47:09 -08:00
Sharvil Shah
9a6d6d1293
Implement wifi_networks tables for OS X
...
If the option of remembering known Wi-Fi networks is enabled on a system,
they are persisted to disk as a preferences property list file.
This table is populated by parsing that file.
2015-11-01 16:53:51 -08:00
Teddy Reed
b97a2bcdb9
Merge pull request #1618 from theopolis/clang_addr_sanitize_3.7
...
Passing clang Address/Leak Sanitize version 3.7
2015-11-01 16:23:31 -08:00
Teddy Reed
6a07135648
Passing clang Address/Leak Sanitize version 3.7
2015-11-01 04:00:21 -08:00
Teddy Reed
0ae69ebec5
Merge pull request #1617 from theopolis/fix_the_world
...
Fix clang warnings, promote warnings to errors
2015-11-01 03:04:33 -08:00
Teddy Reed
d27a7ecc4c
Fix clang warnings, promote warnings to errors
2015-11-01 02:12:07 -08:00
Teddy Reed
97a6521445
Merge pull request #1614 from theopolis/drop_around_files
...
Expand the scope of permissions dropping
2015-10-30 17:07:04 -07:00
Teddy Reed
09e4e3c42e
Expand the scope of permissions dropping
2015-10-30 09:56:33 -07:00
Teddy Reed
4ac9317f64
Merge pull request #1613 from theopolis/fix_1611
...
[Fix #1611 ] Prevent fs links in inotify path search
2015-10-29 23:47:28 -07:00
Teddy Reed
2cf7543181
[ Fix #1611 ] Prevent fs links in inotify path search
2015-10-29 23:19:07 -07:00
Teddy Reed
03357d9554
Merge pull request #1610 from PickmanSec/master
...
added sh_history
2015-10-29 14:30:39 -07:00
Michael George
fb545bb85e
added sh_history
2015-10-29 10:53:04 -07:00
Teddy Reed
f7c0d49f6a
Merge pull request #1604 from theopolis/prevent_dup_execve
...
Only emit process events for 0-status execve
2015-10-28 17:54:25 -07:00
Teddy Reed
c25d75386a
Merge pull request #1606 from theopolis/flaky_tests
...
Mark flaky integration tests
2015-10-28 17:54:03 -07:00
Teddy Reed
cd8f42844a
Mark flaky integration tests
2015-10-28 09:40:17 -07:00
Teddy Reed
db58ec5e44
Only emit process events for 0-status execve
2015-10-27 17:12:23 -07:00
Teddy Reed
0589d0395e
Merge pull request #1601 from theopolis/fix_audit_proc_events
...
Fix auditd message parsing
2015-10-27 17:10:55 -07:00
Teddy Reed
a3067fcbb5
Fix auditd message parsing
2015-10-27 16:56:42 -07:00
Teddy Reed
689ec53a71
Merge pull request #1603 from theopolis/inotify_mod_only
...
[#1600 ] Put inotify into a mod-only watch mode
2015-10-27 16:53:59 -07:00
Teddy Reed
ba4eeb6a80
[ #1600 ] Put inotify into a mod-only watch mode
2015-10-27 16:42:21 -07:00
Teddy Reed
7b53044437
Merge pull request #1602 from theopolis/daemon_require_rw
...
[Fix #1583 ] Require osqueryd to have R/W access to RocksDB
2015-10-27 16:21:12 -07:00
Teddy Reed
8ca2925ef0
[ Fix #1583 ] Require osqueryd to have R/W access to RocksDB
2015-10-27 16:09:24 -07:00
Teddy Reed
811d578739
Merge pull request #1599 from theopolis/socket_events
...
Refactor a bit of config and add socket_events table to Linux
2015-10-27 15:30:15 -07:00
Teddy Reed
b81b6de6ae
This refactors a bit of config/packs and adds a socket_events table to Linux.
...
The refactor of config/packs was initiated because event subscribers needed
a method for toggling `::init` based on some configurable option. In the case
of auditd, turning on the support with `--disable_audit=false` used to start
auditing the EXECVE syscall. It was understandable that this would cause
latency based on the number of processes executing per measure of time.
A new `socket_events` table will do the same but for `bind` and `connect`. These
are less-obvious and for now, require a scan of /proc for socket tuples. In the
future this file descriptor to socket tuple will be faster.
2015-10-27 15:13:02 -07:00
Teddy Reed
34f5f2cec1
Merge pull request #1598 from theopolis/fix_readfile_toctou
...
Fix readFile TOCTOU error
2015-10-26 12:51:29 -07:00
Teddy Reed
b8087a1b26
Fix readFile TOCTOU error
2015-10-26 01:21:05 -07:00
Teddy Reed
654830cf11
Merge pull request #1594 from rcseacord/additional-sign-fixes
...
eliminated some warnings from Clang 3.7 analyze mode
2015-10-23 13:03:54 -03:00
Mike Arpaia
4f8e3b2656
Merge pull request #1597 from raphdev/kernel-configure-target-fix
...
Fixing kernel-configure-target syntax error
2015-10-22 16:57:11 -07:00
Raphael Salas
025348d9de
fixing kernel-configure-target syntax error
2015-10-22 13:13:49 -04:00
Robert C. Seacord
09481d0381
Fixed some type problems, casting away const, integer types, old style casts, etc.
2015-10-21 20:56:58 +00:00
Robert C. Seacord
1d9695ac31
eliminated some warnings from Clang 3.7 analyze mode
2015-10-21 06:02:58 +00:00
Robert C. Seacord
7a87be9ada
more sign coversion errors
2015-10-20 06:08:01 +00:00
Robert C. Seacord
bee99d4291
quieted noisey diagnostics (again)
2015-10-20 02:55:29 +00:00
Robert C. Seacord
1d7877d120
remmoved fanitize compiler option
2015-10-20 02:51:57 +00:00
Javier Marcos
f201b65ef6
Merge pull request #1592 from javuto/update_centos_readme
...
Removing link to Package CI job
2015-10-19 17:45:18 -07:00
Teddy Reed
7ca9ae89be
Merge pull request #1591 from theopolis/fix_ubuntu12_dpkg
...
Fix Ubuntu12 libdpkg version discovery
2015-10-19 17:21:56 -07:00
Javier Marcos
bc5e492193
Removing link to Package CI job
2015-10-19 16:28:56 -07:00
Teddy Reed
be61f9355c
Fix Ubuntu12 libdpkg version discovery
2015-10-19 16:09:19 -07:00
Teddy Reed
c0257aa7d1
Merge pull request #1589 from theopolis/fix_1578
...
[Fix #1578 ] Support OPENSSL_NO_SSV3
2015-10-19 11:25:46 -07:00
