mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 10:23:54 +00:00
113 lines
3.4 KiB
C++
113 lines
3.4 KiB
C++
// Copyright 2004-present Facebook. All Rights Reserved.
|
|
|
|
#include <glog/logging.h>
|
|
|
|
#include <osquery/core.h>
|
|
#include <osquery/flags.h>
|
|
#include <osquery/filesystem.h>
|
|
#include <osquery/registry.h>
|
|
|
|
namespace osquery {
|
|
|
|
const std::string kDescription =
|
|
"your operating system as a high-performance "
|
|
"relational database";
|
|
const std::string kEpilog = "osquery project page <http://osquery.io>.";
|
|
|
|
DEFINE_osquery_flag(bool, debug, false, "Enable debug messages.");
|
|
|
|
DEFINE_osquery_flag(bool,
|
|
verbose_debug,
|
|
false,
|
|
"Enable verbose debug messages.");
|
|
|
|
DEFINE_osquery_flag(bool,
|
|
disable_logging,
|
|
false,
|
|
"Disable ERROR/INFO logging.");
|
|
|
|
DEFINE_osquery_flag(string,
|
|
osquery_log_dir,
|
|
"/var/log/osquery/",
|
|
"Directory to store ERROR/INFO and results logging.");
|
|
|
|
static const char* basename(const char* filename) {
|
|
const char* sep = strrchr(filename, '/');
|
|
return sep ? sep + 1 : filename;
|
|
}
|
|
|
|
void initOsquery(int argc, char* argv[], int tool) {
|
|
std::string binary(basename(argv[0]));
|
|
std::string first_arg = (argc > 1) ? std::string(argv[1]) : "";
|
|
|
|
if ((first_arg == "--help" || first_arg == "-h" || first_arg == "-help") &&
|
|
tool != OSQUERY_TOOL_TEST) {
|
|
// Parse help options before gflags. Only display osquery-related options.
|
|
fprintf(stdout, "osquery " OSQUERY_VERSION ", %s\n", kDescription.c_str());
|
|
if (tool == OSQUERY_TOOL_SHELL) {
|
|
// The shell allows a caller to run a single SQL statement and exit.
|
|
fprintf(
|
|
stdout, "Usage: %s [OPTION]... [SQL STATEMENT]\n\n", binary.c_str());
|
|
} else {
|
|
fprintf(stdout, "Usage: %s [OPTION]...\n\n", binary.c_str());
|
|
}
|
|
fprintf(stdout,
|
|
"The following options control the osquery "
|
|
"daemon and shell.\n\n");
|
|
|
|
Flag::printFlags(Flag::get().flags());
|
|
|
|
if (tool == OSQUERY_TOOL_SHELL) {
|
|
// Print shell flags.
|
|
fprintf(stdout, "\nThe following options control the osquery shell.\n\n");
|
|
Flag::printFlags(Flag::get().shellFlags());
|
|
}
|
|
|
|
fprintf(stdout, "\n%s\n", kEpilog.c_str());
|
|
|
|
::exit(0);
|
|
}
|
|
|
|
FLAGS_alsologtostderr = true;
|
|
FLAGS_logbufsecs = 0; // flush the log buffer immediately
|
|
FLAGS_stop_logging_if_full_disk = true;
|
|
FLAGS_max_log_size = 10; // max size for individual log file is 10MB
|
|
|
|
// Set version string from CMake build
|
|
__GFLAGS_NAMESPACE::SetVersionString(OSQUERY_VERSION);
|
|
|
|
// Let gflags parse the non-help options/flags.
|
|
__GFLAGS_NAMESPACE::ParseCommandLineFlags(&argc, &argv, false);
|
|
|
|
// The log dir is used for glogging and the filesystem results logs.
|
|
if (isWritable(FLAGS_osquery_log_dir.c_str()).ok()) {
|
|
FLAGS_log_dir = FLAGS_osquery_log_dir;
|
|
}
|
|
|
|
if (FLAGS_verbose_debug) {
|
|
// Turn verbosity up to 1.
|
|
// Do log DEBUG, INFO, WARNING, ERROR to their log files.
|
|
// Do log the above and verbose=1 to stderr.
|
|
FLAGS_debug = true;
|
|
FLAGS_v = 1;
|
|
}
|
|
|
|
if (!FLAGS_debug) {
|
|
// Do NOT log INFO, WARNING, ERROR to stderr.
|
|
// Do log to their log files.
|
|
FLAGS_minloglevel = 0; // INFO
|
|
FLAGS_alsologtostderr = false;
|
|
}
|
|
|
|
if (FLAGS_disable_logging) {
|
|
// Do log ERROR to stderr.
|
|
// Do NOT log INFO, WARNING, ERROR to their log files.
|
|
FLAGS_logtostderr = true;
|
|
FLAGS_minloglevel = 2; // ERROR
|
|
}
|
|
|
|
google::InitGoogleLogging(argv[0]);
|
|
osquery::InitRegistry::get().run();
|
|
}
|
|
}
|