Teddy Reed
37188f788b
Fixups in tables, add DOUBLE, shell extensions
2015-06-22 04:17:23 -04:00
Teddy Reed
e7ab2fc47b
Limit scope of git/tag version defines.
...
Harden plist parsing against internal fuzzing tests.
Improve file/stream read speeds.
2015-06-12 10:10:20 -07:00
Teddy Reed
d143b22cfa
[ Fix #1202 ] Replace argv[*] with spaces, fallback to path in [0]
2015-06-11 20:58:17 -07:00
Teddy Reed
727f5b091f
Various table perf improvements and TLS docs
2015-06-05 22:03:15 -07:00
Teddy Reed
1168b6ef3b
Fix the watchdog/scheduler limit tracking
2015-06-04 17:43:37 -07:00
Teddy Reed
e244883ea4
[ #1190 ] Schedule queries without logging removed results
2015-06-04 13:53:55 -07:00
Teddy Reed
c934ad0df3
Update tooling/profiling paths
2015-06-03 21:22:12 -07:00
Teddy Reed
33f53809ad
Fix DBHandle checking with concurrent processes.
...
`make tests` fails with another osquery process running.
The backing-store check happens after a config plugin is setUp and
the initial load occures. This may involve calls to cached keys, the
check should occur pre-config initialize.
2015-06-02 02:50:04 -07:00
Michael O'Farrell
77aa36fa0b
Constraint existence now check for constraints using specific operator types.
...
This change allows QueryContext constraints to be checked for based on
operator type. This makes checks for the existence of an equality
operator allow enumeration.
Example:
if (context.constraints["pid"].exists(EQUALS)) {
pids = context.constraints["pid"].getAll(EQUALS);
} else {
osquery::procProcesses(pids);
}
2015-05-29 13:47:04 -07:00
Mark Ignacio
84f8203dfd
Converted CFAbsoluteTime in X509 certificates to UNIX time
2015-05-27 15:23:46 -07:00
Teddy Reed
8b3686a58a
TLS plugin workflow tests
2015-05-26 19:55:00 -07:00
Teddy Reed
5e8c9b66d4
Merge pull request #1153 from theopolis/cleans
...
Detect TLS version from OpenSSL/CMake FIND_LIBRARY
2015-05-23 13:57:23 -07:00
Teddy Reed
4a6c002f62
Allow unit tests execs from project root
2015-05-23 13:12:31 -07:00
Teddy Reed
5969ae4fbf
Clean up TLS-version from OpenSSL detection
2015-05-23 13:04:36 -07:00
Teddy Reed
700384dedc
Minify tables namespace, extra CMake macros
2015-05-22 10:29:04 -07:00
Mike Arpaia
fff36af0af
Removing trailing whitespace
2015-05-11 23:31:13 -07:00
Teddy Reed
771ed4da2f
[ Fix #1125 #1126 ] Flag padding checks, config_check tests
2015-05-11 10:37:16 -07:00
Teddy Reed
a7daa0ace5
Apply a safe permissions check to worker
2015-05-07 00:19:10 -07:00
Teddy Reed
23933cefe8
Harden extensions/dispatcher tests
2015-05-05 23:34:10 -07:00
Teddy Reed
cdb112eccb
Add a CMake variable for packages
2015-05-04 17:09:09 -07:00
Teddy Reed
d6eb63ae2f
Merge pull request #1097 from theopolis/intel_perf_limits
...
Limit memory checks to worker allocations
2015-05-04 12:14:43 -07:00
Teddy Reed
5b60eb9fb8
Limit memory checks to worker allocations
2015-05-04 11:30:25 -07:00
Teddy Reed
893f678403
Linting and asan fixups
2015-05-04 11:00:21 -07:00
Teddy Reed
c63bf0451a
Various exception hardening
2015-05-03 14:18:20 -07:00
Teddy Reed
e01a73b4f3
Schedule monitoring, doc updates, logger plugin fixes
2015-05-03 11:54:15 -07:00
Sharvil Shah
2735e731de
Implement --disable_tables runtime flag
2015-04-30 01:41:01 -07:00
Teddy Reed
b66a350526
Allow snapshot scheduled items
2015-04-29 15:55:00 -07:00
Teddy Reed
d0bbb0bc4f
Towards safer and shuffled unittests
2015-04-29 14:43:27 -07:00
Teddy Reed
2c5cbdee63
Various shell fixups
2015-04-27 16:40:05 -07:00
Teddy Reed
be65922569
Fast tests
2015-04-27 09:40:31 -07:00
Teddy Reed
b90aeab2fe
Fix dameon flags loading from options
2015-04-24 11:37:51 -07:00
Javier Marcos
ddb41ae84a
Adding tests to the prototocols table
2015-04-22 17:49:27 -07:00
Teddy Reed
c59ce0e4e4
Lint fixes and clang analyze
2015-04-17 09:18:46 -07:00
Mike Arpaia
c37be342ec
updating wiki link to read the docs
2015-04-15 01:02:58 -07:00
Teddy Reed
e1f0106710
Various fixes, checks
2015-04-11 15:57:12 -07:00
Mike Arpaia
5cebb95134
Merge pull request #979 from theopolis/fast_shell_query
...
Skip event publishers when a single query is used
2015-04-10 23:03:51 -07:00
Teddy Reed
aaecffa096
Skip event publishers when a single query is used
2015-04-10 17:37:49 -07:00
Mitchell Grenier
41283223af
Better extended attributes
...
For the second time in a couple of weeks, I've rewritten the xattr table into
a new extended_attributes table.
If we find an attribute that we don't have a parser for, we will check if it
contains non printable characters. If it does, we'll base64 it. If it doesn't,
we will just output the unencoded string.
2015-04-10 13:17:22 -07:00
Sharvil Shah
e7a3d24ece
Fix etc_hosts hostname parsing so that inline comments are now ignored; update tests
2015-04-06 23:32:56 -07:00
Mike Arpaia
91e70d1df3
Merge pull request #928 from theopolis/config_check_pp
...
[#915 ] Skip daemon initialization if checking config
2015-04-04 00:12:12 -07:00
Teddy Reed
2b20d3dde0
Merge yara subscribers
2015-04-03 00:48:13 -07:00
Teddy Reed
6dd92bd051
[ #915 ] Skip daemon initialization if checking config
2015-04-02 13:31:51 -07:00
Teddy Reed
38bfed3414
Remove libprocps(ng) in favor of parsing proc manually
2015-03-27 12:37:16 -07:00
Teddy Reed
14a09cc6f2
Change schedule to a map, splay on config update
2015-03-24 16:28:49 -07:00
Teddy Reed
79ddc5ba38
Remove unused shell functions
2015-03-19 16:14:29 -07:00
Teddy Reed
afd11fe1f3
Set osquery_extensions for worker child
2015-03-17 10:36:19 -07:00
Teddy Reed
1a0334ec9a
Use a .load file instead of delimited dirs
2015-03-17 10:11:43 -07:00
Teddy Reed
dd354c279d
Merge pull request #854 from theopolis/osqueryi_tmp
...
[Fix #852 ] Use a user-specific temporary dir for shell state
2015-03-16 10:51:38 -07:00
Teddy Reed
8b990c546d
[ Fix #852 ] Use a user-specific temporary dir for shell state
2015-03-16 09:29:50 -07:00
Teddy Reed
4440b2f791
Renamed osx_version to os_version, include Linux versions
2015-03-15 16:07:49 -07:00
