mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 18:08:53 +00:00
dd9fa25d78
There are 3 new options that control how files are read: --read_max: controls the maximum size, in bytes, for file reads. If a file is larger than `read_max` the read will fail. --read_user_max: similar to `read_max` but applies additional limitations to user-controlled files. --read_user_links: a boolean control to enable/disable following symlinks for user-controlled files. Important highlights: If files exceed the configured max, those reads will fail. The `read_max` will override `read_user_max` if it is set lower. A default integer value of `0` will disable the limitations. The default `read_max` is set to 50M and the default `read_user_max` is 10M. |
||
---|---|---|
.. | ||
tests | ||
CMakeLists.txt | ||
extensions.cpp | ||
interface.cpp | ||
interface.h |