mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 18:33:54 +00:00
0846b6ddd5
If osqueryd was killed and another process was started with osqueryd's old pid before a new osqueryd could start, osqueryd would encounter a bug where osqueryd would never start. This executes an osquery query to the processes table to make sure that the name of the process is "osqueryd". Of course, you could perhaps denial of service osqueryd this way, but that would require root filesystem access (assuming that the last version of osqueryd was ran as root). Thoughts? |
||
|---|---|---|
| .. | ||
| darwin | ||
| CMakeLists.txt | ||
| conversions_tests.cpp | ||
| conversions.h | ||
| flags.cpp | ||
| init_osquery.cpp | ||
| md5.h | ||
| sql_tests.cpp | ||
| sql.cpp | ||
| sqlite_util_tests.cpp | ||
| sqlite_util.cpp | ||
| sqlite_util.h | ||
| status_tests.cpp | ||
| system.cpp | ||
| tables.cpp | ||
| test_util_tests.cpp | ||
| test_util.cpp | ||
| test_util.h | ||
| text_tests.cpp | ||
| text.cpp | ||
| virtual_table.cpp | ||
| virtual_table.h | ||