osquery-1/osquery/extensions
Teddy Reed dd9fa25d78 [Fix #1171, #1089] Add configurable max reads
There are 3 new options that control how files are read:
--read_max: controls the maximum size, in bytes, for file reads. If a file is larger than `read_max` the read will fail.
--read_user_max: similar to `read_max` but applies additional limitations to user-controlled files.
--read_user_links: a boolean control to enable/disable following symlinks for user-controlled files.

Important highlights:
If files exceed the configured max, those reads will fail.
The `read_max` will override `read_user_max` if it is set lower.
A default integer value of `0` will disable the limitations.

The default `read_max` is set to 50M and the default `read_user_max` is 10M.
2015-07-06 00:49:43 -07:00
..
tests [Fix #1171, #1089] Add configurable max reads 2015-07-06 00:49:43 -07:00
CMakeLists.txt Removing trailing whitespace 2015-05-11 23:31:13 -07:00
extensions.cpp [Fix #1198] Add a small retry to ext watcher 2015-06-28 02:12:50 -07:00
interface.cpp Minify tables namespace, extra CMake macros 2015-05-22 10:29:04 -07:00
interface.h [Fix #1198] Add a small retry to ext watcher 2015-06-28 02:12:50 -07:00