ikoniaris
10/23/2019, 7:50 PMaudit_force_reconfigure
flag crashed some boxes and I’m trying to figure out whyStefano Bonicatti
10/28/2019, 5:09 PMStefano Bonicatti
10/28/2019, 7:15 PMrequired
columns, indeed require all of them in a WHERE clause?
Though testing select * from extended_attributes where path = '/usr'
works fine, though select * from extended_attributes directory = '/'
gives an empty result (but if we confront the result from the first query, directory is '/').
So either way I would expect both query to fail, due to the required
, or both to succeed and return something.theopolis
packetzero
10/30/2019, 4:47 PMpacketzero
10/31/2019, 6:39 PMsamuel
10/31/2019, 7:19 PMnpamnani
11/01/2019, 8:38 AMtheopolis
John Ioannidis
11/07/2019, 5:45 PMpacketzero
11/07/2019, 6:54 PMTheHellaJeff
11/07/2019, 7:35 PMmake: *** No rule to make target 'test'. Stop.
response from my cwd: osquery/build/osquery
anything I’m missing?Stefano Bonicatti
11/10/2019, 5:20 PMtheopolis
cmake
. I will investigate copy-pasting the strategy used for glog
and see how far I can get.TheHellaJeff
11/12/2019, 9:36 PMStefano Bonicatti
11/13/2019, 8:28 PMFileOpsTests.test_chmod_no_read
FileOpsTests.test_chmod_no_write
FileOpsTests.test_access
FileOpsTests.test_zero_permissions_file
FilesystemTests.test_write_file
seph
happy-dude
11/18/2019, 9:10 PMtls-hostname
to a new endpoint (fresh server)
• what happens to the clients/nodes?
• do I have to manually re-enroll them? or will they re-enroll automatically?Chris Broome
11/19/2019, 6:39 PMtheopolis
theopolis
seph
defensivedepth
11/25/2019, 9:12 PMtheopolis
theopolis
com.facebook.osqueryd
to com.osquery.osqueryd
and the osqueryctl
tool had not been updated, nor did we include logic to remove the old path. This is not great and we should consider reverting this change back to com.facebook.osqueryd
. An alternative is to add logic to osqueryctl
to rename the existing launchdaemon path.timb
12/04/2019, 4:10 AMtheopolis
seph
seph
seph