if(APPLE) ADD_OSQUERY_OBJCXX_LIBRARY(osquery_tables_objc ../core/darwin/NSProcessInfo+PECocoaBackports.mm ../core/darwin/NSProcessInfo+PECocoaBackports.h ../core/darwin/PECocoaBackportsGlobal.h system/darwin/osx_version.mm system/darwin/users.mm system/darwin/groups.mm system/darwin/ca_certs.mm ) ADD_OSQUERY_LIBRARY(osquery_tables_darwin events/darwin/passwd_changes.cpp events/darwin/hardware_events.cpp networking/darwin/interfaces.cpp networking/darwin/listening_ports.cpp networking/darwin/routes.cpp system/darwin/apps.cpp system/darwin/ca_certs_utils.cpp system/darwin/firewall.h system/darwin/firewall.cpp system/darwin/homebrew_packages.cpp system/darwin/kextstat.cpp system/darwin/launchd.cpp system/darwin/mounts.cpp system/darwin/nvram.cpp system/darwin/processes.cpp system/darwin/process_open_files.cpp system/darwin/quarantine.cpp system/darwin/pci_devices.cpp system/darwin/usb_devices.cpp system/darwin/startup_items.cpp system/darwin/xprotect.cpp ) ADD_OSQUERY_LINK("-framework Foundation") ADD_OSQUERY_LINK("-framework IOKit") ADD_OSQUERY_LINK("-framework CoreFoundation") ADD_OSQUERY_LINK("-framework Security") ADD_OSQUERY_LINK("-framework OpenDirectory") elseif(FREEBSD) ADD_OSQUERY_LIBRARY(osquery_tables_freebsd events/freebsd/passwd_changes.cpp networking/freebsd/routes.cpp system/freebsd/processes.cpp system/freebsd/users.cpp system/freebsd/groups.cpp ) else() ADD_OSQUERY_LIBRARY(osquery_tables_linux events/linux/passwd_changes.cpp events/linux/hardware_events.cpp networking/linux/routes.cpp networking/linux/socket_inode.cpp networking/linux/port_inode.cpp networking/linux/arp_cache.cpp system/linux/kernel_integrity.cpp system/linux/kernel_modules.cpp system/linux/processes.cpp system/linux/users.cpp system/linux/groups.cpp system/linux/mounts.cpp system/linux/pci_devices.cpp system/linux/usb_devices.cpp system/linux/block_devices.cpp ) if(CENTOS) # CentOS specific tables ADD_OSQUERY_LIBRARY(osquery_tables_redhat system/linux/rpm_packages.cpp ) ADD_OSQUERY_LINK("proc") ADD_OSQUERY_LINK("rpm") ADD_OSQUERY_LINK("rpmio") elseif(UBUNTU) # Ubuntu specific tables ADD_OSQUERY_LIBRARY(osquery_tables_ubuntu system/linux/deb_packages.cpp ) ADD_OSQUERY_LINK("dpkg") # Add version of libproc if(PROCPS) ADD_OSQUERY_LINK("libprocps.a") else() ADD_OSQUERY_LINK("libproc.a") endif() endif() ADD_OSQUERY_LINK("blkid") ADD_OSQUERY_LINK("udev") endif() ADD_OSQUERY_LIBRARY(osquery_tables networking/utils.cpp networking/etc_hosts.cpp networking/etc_services.cpp system/cpuid.cpp system/crontab.cpp system/last.cpp system/shell_history.cpp system/suid_bin.cpp system/logged_in_users.cpp ) ADD_OSQUERY_CORE_LIBRARY(osquery_utility_tables utility/time.cpp utility/hash.cpp utility/file.cpp utility/osquery.cpp ) ADD_OSQUERY_TEST(etc_hosts_tests networking/etc_hosts_tests.cpp) if(APPLE) ADD_OSQUERY_TEST(apps_tests system/darwin/apps_tests.cpp) ADD_OSQUERY_TEST(ca_certs_tests system/darwin/ca_certs_tests.cpp) ADD_OSQUERY_TEST(firewall_tests system/darwin/firewall_tests.cpp) ADD_OSQUERY_TEST(launchd_tests system/darwin/launchd_tests.cpp) endif()