Stefano Bonicatti
10/28/2019, 7:15 PMrequired
columns, indeed require all of them in a WHERE clause?
Though testing select * from extended_attributes where path = '/usr'
works fine, though select * from extended_attributes directory = '/'
gives an empty result (but if we confront the result from the first query, directory is '/').
So either way I would expect both query to fail, due to the required
, or both to succeed and return something.packetzero
10/28/2019, 7:23 PMStefano Bonicatti
10/28/2019, 7:28 PMrequired_satisfied = true
only if all the required constraint are present?
Also below I see:
https://github.com/osquery/osquery/blob/0c06658e45b493583d55ec2486456e3ce44dfa35/osquery/sql/virtual_table.cpp#L938-L941
So the warning that should come out but that it doesn't in any case.
Time to open an issue I guess.packetzero
10/28/2019, 7:55 PMStefano Bonicatti
10/28/2019, 7:56 PMpacketzero
10/28/2019, 8:23 PMStefano Bonicatti
10/28/2019, 8:36 PMpacketzero
10/28/2019, 8:38 PMStefano Bonicatti
10/28/2019, 8:39 PMError: no query solution
packetzero
10/28/2019, 8:39 PMStefano Bonicatti
10/28/2019, 8:41 PMpacketzero
10/28/2019, 8:44 PM