Teddy Reed
8aefe1a110
Add thrift 'query' endpoint
...
This allows extensions to execute SQL through the extensions API.
2015-02-17 18:42:09 -08:00
Teddy Reed
1f8dacec3c
Add flag aliasing, logger/flag tests
2015-02-17 16:26:14 -08:00
Teddy Reed
6f155d63c5
Improve flag storage and printing
2015-02-16 16:26:06 -08:00
Teddy Reed
6994361f26
Improved logging control
2015-02-16 14:42:22 -08:00
Teddy Reed
3c36c4196b
Merge pull request #731 from jedi22/wildcard_events
...
Added parsing of extra data along with its addition to the osqueryconfig structure
2015-02-15 19:16:54 -08:00
Zachary Wasserman
1f450fb1ef
Merge pull request #710 from zwass/distributed
...
POC for client side of distributed queries.
2015-02-13 14:25:52 -08:00
Zachary Wasserman
79034111a5
POC for client side of distributed queries.
...
This introduces the notion of a DistributedQueryHandler that uses a "provider" to read/write requests and results to and from the master. The full flow is exercised via integration tests, and unit tests for each component.
It is intended to foster discussion around this client side interface, as well as provide a base to build from.
2015-02-13 13:01:02 -08:00
Teddy Reed
aa078895d3
CentOS7 clang without fortify
...
1. _FORTIFY_SOURCE=1 will cause readlink/recv to hang when using
heap-allocated target buffers.
2. Install boost/rocksdb/thrift using source, similar to CentOS6.5
3. Remove boost::regex, prefer extended std::regex without static
link to boost_regex.
2015-02-13 12:47:30 -08:00
Mitchell Grenier
54ef2045e5
Made config a meyers singleton. Load should now only ever have to happen once
2015-02-13 12:32:54 -08:00
Mitchell Grenier
0448afbd91
Asynchronously resolve the wildcards of all the files we want to monitor
2015-02-11 19:35:57 -08:00
Mitchell Grenier
dca2f9d7bb
Added parsing of extra data along with its addition to the osqueryconfig structure
...
Added tests as well
2015-02-11 19:35:57 -08:00
Teddy Reed
04fb33cbf2
Merge pull request #737 from theopolis/safe
...
Safer compile flags
2015-02-11 12:32:36 -08:00
Teddy Reed
7bab4a4706
Merge pull request #732 from theopolis/plist_defaults
...
Added 'defaults' table called 'preferences'
2015-02-11 12:03:23 -08:00
Teddy Reed
fd92f9cb4c
Added 'defaults' table called 'preferences'
2015-02-11 11:39:25 -08:00
Teddy Reed
a59dcf01ee
Add osquery_extensions table
2015-02-11 10:52:25 -08:00
Teddy Reed
2593e8f837
Add extensions status to osquery_info
2015-02-11 10:52:25 -08:00
Teddy Reed
9eeda1f02c
Safer compile flags
2015-02-11 10:45:04 -08:00
Teddy Reed
7f7b2acd37
Merge pull request #728 from theopolis/pubs_as_runnables
...
[Fix #704 ] Events sleep with dispatcher's interruptableSleep
2015-02-10 13:06:16 -08:00
Teddy Reed
23864f220d
[ Fix #704 ] Events sleep with dispatcher's interruptableSleep
2015-02-10 12:51:26 -08:00
Teddy Reed
55dfdfcace
Move lsperms into filesystem
2015-02-10 03:00:29 -07:00
Teddy Reed
d2b18c05c9
Add watcher profiles
2015-02-09 12:38:50 -08:00
Teddy Reed
19998a001a
Harden watcher for more perf, use exec and watch from worker
2015-02-08 00:06:44 -07:00
Teddy Reed
993e2c4577
Changes to flags, extensions now loaded with shell/daemon
2015-02-06 09:40:49 -08:00
Teddy Reed
4f10a35f80
Adding thrift extension API
2015-02-06 09:40:49 -08:00
Teddy Reed
ed9bae29b7
Organizing headers/build for SDK
2015-02-03 14:59:32 -08:00
Zachary Wasserman
ac53637bcf
Add getQueryColumns function to core
...
This new getQueryColumns function allows us to determine what columns
will be returned by executing a given query. It is intended to be used
with the distributed query system, to determine a schema for the
results before sending the query.
Tested by unit tests. Also used valgrind and did not find errors that
looked related to this change (though there appear to be many errors
related to glog logging).
2015-02-02 10:11:00 -08:00
Teddy Reed
e37b16ce2f
Clang analyze fixups for Linux
2015-02-01 05:10:57 -07:00
Teddy Reed
5072b40997
Fix missing virtual destructors for event APIs
2015-02-01 04:32:18 -07:00
Teddy Reed
f96b498ae3
Remove EventFactory::deregister... in favor of ::end
2015-02-01 02:20:09 -07:00
Teddy Reed
d39f1fae95
Minor registry documentation, using macros for create/add
2015-02-01 02:20:09 -07:00
Teddy Reed
ab1cb942a8
Fix typo in passwd subscriber, merge vtable tests
2015-02-01 02:20:09 -07:00
Teddy Reed
ab08bc76a8
Towards a new registry
2015-02-01 02:20:09 -07:00
Teddy Reed
38a757c7f0
Merge pull request #673 from theopolis/fork
...
Adding a watcher/worker model for osqueryd
2015-01-30 19:09:55 -08:00
Zachary Wasserman
d840fb8896
Merge pull request #685 from zwass/status_enhancements
...
Add useful operator implementations to Status
2015-01-30 10:03:41 -08:00
Zachary Wasserman
5a2296b91b
Add useful operator implementations to Status
2015-01-29 17:33:41 -08:00
Mitchell Grenier
dcfaeda4ca
Merge pull request #674 from jedi22/filesystem_wild
...
Adding recursive directory traversal functionality
2015-01-29 17:28:35 -08:00
Mitchell Grenier
0ab10f9982
Added the ability to search through directories using wildcards
2015-01-29 17:18:39 -08:00
schettino72
f7357dd4b8
add column info to CREATE VIRTUAL TABLE statement.
2015-01-30 01:08:36 +08:00
Teddy Reed
8fd56417fd
Adding a watcher/worker model for osqueryd
2015-01-26 01:22:50 -07:00
Zachary Wasserman
f61488bbc9
Fix typo in core.h comment
2015-01-22 14:00:35 -08:00
Teddy Reed
9c1faec090
Isolate glog include and depend on libglog for #652
2015-01-21 13:37:06 -08:00
mike@arpaia.co
10d5aabd36
config-check command in osqueryd
...
This addresses #585
2015-01-21 12:59:39 -08:00
Mike Arpaia
778789d74e
Merge pull request #648 from marpaia/hash-docs
...
hash.h documentation
2015-01-20 16:04:32 -08:00
mike@arpaia.co
ecfe29282b
hash.h documentation
...
I added some doxygen docs for hash.h
2015-01-20 15:36:53 -08:00
Teddy Reed
b7549e09ca
SMBIOS parsing on Linux using mem
2015-01-20 15:10:19 -08:00
Teddy Reed
6b6649bbd4
Adding mem to Linux filesystem lib
2015-01-20 15:06:34 -08:00
Teddy Reed
64d82388e4
Update the md5 hashing callsites
2015-01-20 14:52:07 -08:00
Teddy Reed
a2d9236478
Use API macro for hash algorithms
2015-01-20 14:24:49 -08:00
Mitchell Grenier
8f407a1e8f
Moving commits around for efficientcy
2015-01-20 10:49:58 -08:00
Mitchell Grenier
c1a1013e5a
Minor code changes and namespacing
2015-01-16 12:03:23 -08:00
