Commit Graph

1542 Commits

Author SHA1 Message Date
Teddy Reed
40e167d7b7 Merge pull request #810 from theopolis/respect_cflags
Respect external CMake C/CXX flags
2015-03-02 16:01:53 -08:00
Teddy Reed
a6bc9d6d97 Merge pull request #804 from theopolis/network_settings
Add sysctl (system_controls) table
2015-03-02 16:01:39 -08:00
Teddy Reed
018c1b4f86 Merge pull request #807 from theopolis/with_gmake
[Fix #805] Add symlink to gmake for gflags
2015-03-02 16:01:33 -08:00
Mitchell Grenier
0016bc4a8c Addressing theopolis changes 2015-03-02 15:46:42 -08:00
Mitchell Grenier
68ea487137 Addressing theopolis changes 2015-03-02 15:43:31 -08:00
Teddy Reed
e0eff0478b [#808] Prefer /private/var for PKG install structure 2015-03-02 00:19:52 -08:00
Teddy Reed
e123f9f0a2 Add more keychain search paths for certificates 2015-03-01 21:15:42 -08:00
Teddy Reed
dcff476807 Respect external CMake C/CXX flags
Use osquery-C flags for every object compile.
Add CXX flags without conditional logic.
Move the `python-thrift` target into the CPP generation command.
Remove verbose option for extensions python unittest.
Add thrift as a pip install requirement (for unittests).
2015-03-01 21:19:31 -07:00
Mitchell Grenier
544615ef57 Bug fix for REC_LIST_FOLDERS
Fixed a bug where when using REC_LIST_FOLDERS, the root resolution directory
would not be returned.
2015-03-01 18:26:37 -08:00
Teddy Reed
be9218ecf1 Add sysctl (system_control) table 2015-03-01 18:51:33 -07:00
Teddy Reed
ff1f1c086b [Fix #805] Add symlink to gmake for gflags 2015-02-27 19:45:18 -07:00
Mitchell Grenier
0031c6ed57 Fixed many bugs. inotify and fsevents should be same now 2015-02-27 17:28:51 -08:00
Teddy Reed
a3eade9bac Merge pull request #803 from zwass/python_testing
Add Python integration testing to CTest.
2015-02-27 17:16:29 -08:00
Zachary Wasserman
eb778fa361 Add Python integration testing to CTest.
Here we create a new CMake macro for adding python integration tests,
as well as a wrapper for easy testing of osqueryi. There is a PoC test
of the time table.
2015-02-27 10:10:26 -08:00
Teddy Reed
74ae25f727 Merge pull request #801 from theopolis/openssl_x509
Rename ca_certs to certificates
2015-02-26 23:59:49 -08:00
Teddy Reed
2237f00c12 Rename ca_certs to certificates 2015-02-26 23:47:05 -08:00
Teddy Reed
c6db851833 Merge pull request #799 from theopolis/extension_help
Extensions helpers, API additions
2015-02-26 20:07:09 -08:00
Mitchell Grenier
70c82b5a40 Linux inotify more closely resembles fsevents and is generally more awesome 2015-02-25 16:43:37 -08:00
Mitchell Grenier
6548006d3e Adding ability to monitor whole folders 2015-02-25 16:28:24 -08:00
Teddy Reed
b9dbcb2545 Fix some tooling regressions 2015-02-25 00:09:43 -08:00
Teddy Reed
9031bad609 Extensions helpers, API additions
Use --socket for extensions, limit help
Add an 'active' concept to registries, support a blank item call
Add osquery_registry to list the internal/external plugin details
2015-02-25 01:02:05 -07:00
Teddy Reed
c7e4094c53 Merge pull request #795 from theopolis/fix_788
[Fix #788] Lookup ppids on OS X using CTL_KERN
2015-02-24 13:52:40 -08:00
Teddy Reed
a70873c8ea [Fix #788] Lookup ppids on OS X using CTL_KERN 2015-02-24 13:31:30 -08:00
Mike Arpaia
260375cc21 Merge pull request #793 from theopolis/fix_regex
[Fix #792] Replace std::regex with string parsing gcc below 4.9
2015-02-24 13:28:11 -08:00
Mike Arpaia
503cf32522 Merge pull request #794 from marpaia/fix-785
Adding warning text if the system is not configured
2015-02-24 13:27:16 -08:00
mike@arpaia.co
5a5ec45bbb Adding warning text if the system is not configured
See #785 for context. If you don't have a properly configured system,
osqueryd will print a convenient warning with instructions.
2015-02-24 13:19:37 -08:00
Teddy Reed
148d7385f6 [Fix #792] Replace std::regex with string parsing gcc below 4.9 2015-02-24 13:19:27 -08:00
Teddy Reed
437a3b7036 Merge pull request #790 from theopolis/lints
[lints] Basic cpp linting
2015-02-24 12:56:14 -08:00
mike@arpaia.co
451f990e80 adding osqueryctl to OS X 2015-02-24 12:27:06 -08:00
Mike Arpaia
61e309f4e2 Merge pull request #791 from marpaia/osqueryctl-dev
osqueryctl tool
2015-02-24 11:57:46 -08:00
mike@arpaia.co
7d212f80fd osquery ctl script
Addresses #585
2015-02-24 11:13:27 -08:00
Teddy Reed
925deb8e74 [lints] Basic cpp linting 2015-02-24 03:47:12 -08:00
Teddy Reed
c90d9d9ed1 Merge pull request #783 from theopolis/python_thrift
Extensions integrations testing
2015-02-23 23:26:28 -08:00
Teddy Reed
f173fb6e0a Working on sync using new non-macro decisions 2015-02-23 23:15:04 -08:00
Teddy Reed
ace433e49d Allow external calls from within registry 2015-02-23 21:35:54 -08:00
Teddy Reed
a29addba61 Extensions integrations testing 2015-02-22 22:56:18 -07:00
Teddy Reed
dd6283b6fe Merge pull request #779 from theopolis/events_strict
Removed reinterpret plugin casts
2015-02-19 17:56:59 -08:00
Teddy Reed
2529d652be Merge pull request #782 from theopolis/mkdir_generated
Move sync to CMake and remove generated mkdir
2015-02-19 17:56:45 -08:00
Teddy Reed
0f3adbbe24 Merge pull request #781 from theopolis/watcher_full_path
Use full path for exec in watcher
2015-02-19 17:02:46 -08:00
Teddy Reed
59a5e017b2 Move sync to CMake and remove generated mkdir 2015-02-19 17:00:43 -08:00
Teddy Reed
fa8dbf2b7f Use full path for exec in watcher 2015-02-19 16:00:12 -08:00
Teddy Reed
5334b9650a Merge pull request #775 from theopolis/sdk_build
Building example extension with SDK
2015-02-19 14:26:48 -08:00
Teddy Reed
247e57f2d6 Removed reinterpret plugin casts 2015-02-19 14:23:15 -08:00
Mitchell Grenier
5df58decc7 Merge pull request #770 from jedi22/add_file_event_tables
Added ability to specify files to watch with wildcards
2015-02-19 13:19:20 -08:00
Mitchell Grenier
182c69d4af Added ability to specify files to watch with wildcards 2015-02-19 12:43:23 -08:00
Mike Arpaia
843dc63fc9 Merge pull request #780 from marpaia/fix-778
add version of osquery to sync tarball
2015-02-19 12:23:07 -08:00
mike@arpaia.co
f3a047fadc add version of osquery to sync tarball
```
[root@localhost vagrant]# make sync
mkdir -p build/sync
rm -rf build/sync/osquery*
cp -R osquery build/sync
cp -R include/osquery build/sync
cp -R build/centos6/sdk/generated/ build/sync/osquery
cp osquery.thrift build/sync/osquery/extensions
find build/sync -type f -name "CMakeLists.txt" -exec rm -f {} \;
mkdir -p build/sync/code-analysis
cd build/sync/code-analysis && SDK=True cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=ON ../../../
CMake Warning at CMakeLists.txt:95 (message):
  Requested dependencies may have changed, run: make deps

-- Building for CentOS
-- Found components for DL
-- Found readline library
-- Looking for include files libunwind.h, unwind.h
-- Looking for include files libunwind.h, unwind.h - not found
-- Found RocksDB
-- Thrift version 0.9.1
-- Found library dependency /usr/lib/x86_64-linux-gnu/libboost_thread.a
-- Found library dependency /usr/lib/x86_64-linux-gnu/librt.a
-- Found library dependency /usr/lib/x86_64-linux-gnu/libboost_system.a
-- Found library dependency /usr/lib/x86_64-linux-gnu/libboost_filesystem.a
-- Configuring done
-- Generating done
-- Build files have been written to: /vagrant/build/sync/code-analysis
SDK=True
python tools/codegen/gentargets.py -i build/sync/code-analysis/compile_commands.json > build/sync/osquery/TARGETS
cd build/sync && tar -zcf osquery-sync-1.4.1-29-g472c605.tar.gz osquery
The output file is located at build/sync/osquery-sync-1.4.1-29-g472c605.tar.gz
```
2015-02-19 10:43:08 -08:00
Teddy Reed
451ef686ed Building example extension with SDK 2015-02-18 20:11:00 -08:00
Mike Arpaia
472c6052ef Merge pull request #776 from facebook/marpaia-patch-2
include the OSQUERY_BUILD_SDK flag when compiling the SDK
2015-02-18 16:16:25 -08:00
Mike Arpaia
441fd17e58 include the OSQUERY_BUILD_SDK flag when compiling the SDK 2015-02-18 16:13:52 -08:00