platform/core/security/vist.git
4 years agoAdd server-client feature
Sangwan Kwon [Tue, 15 Oct 2019 08:13:40 +0000 (17:13 +0900)]
Add server-client feature

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoExpose policyd API
Sangwan Kwon [Mon, 14 Oct 2019 06:30:53 +0000 (15:30 +0900)]
Expose policyd API

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoDisable user, group table
Sangwan Kwon [Mon, 14 Oct 2019 04:41:43 +0000 (13:41 +0900)]
Disable user, group table

These tables are coflict with update-feature

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoExclude policy-test at docker-build
Sangwan Kwon [Mon, 14 Oct 2019 04:26:08 +0000 (13:26 +0900)]
Exclude policy-test at docker-build

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoSupport update feature with policyd
Sangwan Kwon [Fri, 11 Oct 2019 07:59:03 +0000 (16:59 +0900)]
Support update feature with policyd

Example: UPDATE policy SET value = '3' WHERE name = 'bluetooth'

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoEnable policyd to be called from osquery
Sangwan Kwon [Thu, 10 Oct 2019 06:25:57 +0000 (15:25 +0900)]
Enable policyd to be called from osquery

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoMinimize build dependencies
Sangwan Kwon [Tue, 8 Oct 2019 06:31:39 +0000 (15:31 +0900)]
Minimize build dependencies

Removed: rocksdb, lz4, zstd, snappy

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoEnable policy-manager to use policy-storage method
Sangwan Kwon [Wed, 2 Oct 2019 05:50:40 +0000 (14:50 +0900)]
Enable policy-manager to use policy-storage method

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoSupport to update policy-storage as strictest
Sangwan Kwon [Mon, 30 Sep 2019 04:16:44 +0000 (13:16 +0900)]
Support to update policy-storage as strictest

Strictest returns the strongest policy when there are multiple admins

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoEnable to enroll policy admin
Sangwan Kwon [Fri, 27 Sep 2019 07:54:58 +0000 (16:54 +0900)]
Enable to enroll policy admin

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoApply meyer's singleton to policy-manager
Sangwan Kwon [Wed, 25 Sep 2019 11:17:43 +0000 (20:17 +0900)]
Apply meyer's singleton to policy-manager

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoAdd policy-storage to policy-core
Sangwan Kwon [Wed, 25 Sep 2019 11:07:26 +0000 (20:07 +0900)]
Add policy-storage to policy-core

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoAdd policy-loader to policyd
Sangwan Kwon [Tue, 24 Sep 2019 06:39:56 +0000 (15:39 +0900)]
Add policy-loader to policyd

Disable whole features without policy-core and sdk.
* Restore the features before PR to master branch.

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoAdd policyd-sdk as header only library
Sangwan Kwon [Mon, 23 Sep 2019 01:09:43 +0000 (10:09 +0900)]
Add policyd-sdk as header only library

Policyd-sdk includes the minimum headers that policyd-sever and
policyd-provider look at in common.
Policy provider just needs policyd-sdk to make the plugin.

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoChange policyd-testbench to gtest
Sangwan Kwon [Tue, 17 Sep 2019 09:53:46 +0000 (18:53 +0900)]
Change policyd-testbench to gtest

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoApply template-method-pattern to policy-model
Sangwan Kwon [Tue, 17 Sep 2019 06:03:23 +0000 (15:03 +0900)]
Apply template-method-pattern to policy-model

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoImport device-policy-manager from tizen
Sangwan Kwon [Tue, 17 Sep 2019 05:41:20 +0000 (14:41 +0900)]
Import device-policy-manager from tizen

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoMake gbs-build stable
Sangwan Kwon [Mon, 16 Sep 2019 06:03:58 +0000 (15:03 +0900)]
Make gbs-build stable

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoMake apix-test stable
Sangwan Kwon [Mon, 16 Sep 2019 05:30:31 +0000 (14:30 +0900)]
Make apix-test stable

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoBump codegen to upstream-4.0.0
Sangwan Kwon [Mon, 16 Sep 2019 02:40:48 +0000 (11:40 +0900)]
Bump codegen to upstream-4.0.0

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoRemove numeric_monitoring feature
Sangwan Kwon [Mon, 16 Sep 2019 02:03:40 +0000 (11:03 +0900)]
Remove numeric_monitoring feature

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoRemove killswitch feature
Sangwan Kwon [Mon, 16 Sep 2019 01:45:30 +0000 (10:45 +0900)]
Remove killswitch feature

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoRemove extension, watcher features
Sangwan Kwon [Tue, 10 Sep 2019 08:42:28 +0000 (17:42 +0900)]
Remove extension, watcher features

- Disconnect thrift dependency

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoBump osquery to upstream-4.0.0 [experimental]
Sangwan Kwon [Tue, 10 Sep 2019 04:57:15 +0000 (13:57 +0900)]
Bump osquery to upstream-4.0.0 [experimental]

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoImport utils from upstream-4.0.0
Sangwan Kwon [Mon, 9 Sep 2019 06:01:40 +0000 (15:01 +0900)]
Import utils from upstream-4.0.0

- Add MIT-LICENSE for rapidjson (v1.1.0)
- Update stl from c++11 to c++14

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoMinimize table specs
Sangwan Kwon [Mon, 9 Sep 2019 04:45:40 +0000 (13:45 +0900)]
Minimize table specs

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoReorganize directory structure
Sangwan Kwon [Thu, 5 Sep 2019 08:13:13 +0000 (17:13 +0900)]
Reorganize directory structure

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoAdd command feature
Sangwan Kwon [Tue, 20 Aug 2019 05:27:21 +0000 (14:27 +0900)]
Add command feature

- Origin osquery only supports query feature (SELECT)
+ Tizen osquery adds command feature (UPDATE)

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoAdd dpm plugin implementations
Sangwan Kwon [Wed, 4 Sep 2019 06:32:58 +0000 (15:32 +0900)]
Add dpm plugin implementations

- bluetooth, usb, wifi

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoBump version to upstream-1.5.0 [stable]
Sangwan Kwon [Thu, 25 Jun 2015 08:35:51 +0000 (01:35 -0700)]
Bump version to upstream-1.5.0 [stable]

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoDraft bluetooth and usb policy
Sangwan Kwon [Thu, 1 Aug 2019 02:09:38 +0000 (11:09 +0900)]
Draft bluetooth and usb policy

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoRe-design wifi-policy
Sangwan Kwon [Sun, 28 Jul 2019 23:15:53 +0000 (08:15 +0900)]
Re-design wifi-policy

- Verification can be done with full-DPM

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoDisable circle-ci temporarily
Sangwan Kwon [Sun, 28 Jul 2019 23:22:13 +0000 (08:22 +0900)]
Disable circle-ci temporarily

- Circle-ci doesn't support libssl1.0-dev now

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
4 years agoAdd testcases about wifi-policy
Sangwan Kwon [Wed, 24 Jul 2019 03:14:16 +0000 (12:14 +0900)]
Add testcases about wifi-policy

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoCleanup CMakeLists
Sangwan Kwon [Mon, 22 Jul 2019 03:00:23 +0000 (12:00 +0900)]
Cleanup CMakeLists

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoImport dpm-wifi plugin from tizen
Sangwan Kwon [Mon, 22 Jul 2019 02:38:12 +0000 (11:38 +0900)]
Import dpm-wifi plugin from tizen

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoSupport ONLY_GBS mode
Sangwan Kwon [Sun, 21 Jul 2019 22:00:26 +0000 (07:00 +0900)]
Support ONLY_GBS mode

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoReorganize directory structure
Sangwan Kwon [Wed, 17 Jul 2019 00:41:14 +0000 (09:41 +0900)]
Reorganize directory structure

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.4.7
Sangwan Kwon [Tue, 5 May 2015 23:14:24 +0000 (16:14 -0700)]
Bump version to upstream-1.4.7

- Harden extensions/dispatcher tests
- Move specs to a top-level path
- Add syslog plugin

Added: msr(model specific register)
Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoAdd more properties
Sangwan Kwon [Thu, 11 Jul 2019 22:04:52 +0000 (07:04 +0900)]
Add more properties

Added: User, Group, MemoryMap

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoResolve SEGFAULT
Sangwan Kwon [Wed, 10 Jul 2019 20:09:45 +0000 (05:09 +0900)]
Resolve SEGFAULT

TODO: Registry locking mechanism should be checked on upstream

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoMerge upstream-1.4.5 [experimental]
Sangwan Kwon [Wed, 10 Jul 2019 03:31:01 +0000 (12:31 +0900)]
Merge upstream-1.4.5 [experimental]

Known issues
  - extension tests failed
  - virtual table tests failed (passed only when it runs as standalone)

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoAdd Properties API for getting multi-property
Sangwan Kwon [Wed, 3 Jul 2019 21:52:23 +0000 (06:52 +0900)]
Add Properties API for getting multi-property

-- API usage --
Properties<Processes> processes;
for (auto& p : processes) {
std::cout << p[&Processes::pid] << std::endl;
std::cout << p[&Processes::name] << std::endl;
std::cout << p[&Processes::path] << std::endl;
std::cout << p[&Processes::cmdline] << std::endl;
std::cout << p[&Processes::uid] << std::endl;
std::cout << p[&Processes::gid] << std::endl;
std::cout << p[&Processes::euid] << std::endl;
std::cout << p[&Processes::egid] << std::endl;
}

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoAdd Property API for type-safe getter
Sangwan Kwon [Tue, 2 Jul 2019 23:50:21 +0000 (08:50 +0900)]
Add Property API for type-safe getter

-- Time table schema --
struct time {
  int hour;
  int minutes;
  int seconds;
};

-- API usage --
Property<Time> time;
Time result = {
  time[&Time::hour];
  time[&Time::minutes];
  time[&Time::seconds];
};

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoAdd getTableName to tsqb
Sangwan Kwon [Mon, 1 Jul 2019 22:26:56 +0000 (07:26 +0900)]
Add getTableName to tsqb

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoMake variadic template class's destructor as virtual
Sangwan Kwon [Sun, 30 Jun 2019 23:21:30 +0000 (08:21 +0900)]
Make variadic template class's destructor as virtual

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoApply CRTP idiom to database
Sangwan Kwon [Sun, 30 Jun 2019 22:24:21 +0000 (07:24 +0900)]
Apply CRTP idiom to database

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoApply CRTP idiom to table
Sangwan Kwon [Thu, 27 Jun 2019 00:04:40 +0000 (09:04 +0900)]
Apply CRTP idiom to table

This patch is for single responsibility principle.

The curiously recurring template pattern (CRTP) is an idiom in C++
in which a class X derives from a class template instantiation
using X itself as template argument

ref: https://en.wikipedia.org/wiki/Curiously_recurring_template_pattern

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoImport type-safe query builder
Sangwan Kwon [Wed, 26 Jun 2019 04:04:15 +0000 (13:04 +0900)]
Import type-safe query builder

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoFix typo on license boilerplate
Sangwan Kwon [Mon, 24 Jun 2019 23:40:30 +0000 (08:40 +0900)]
Fix typo on license boilerplate

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoInvert the dependency between manager and notification
Sangwan Kwon [Mon, 24 Jun 2019 23:23:35 +0000 (08:23 +0900)]
Invert the dependency between manager and notification

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoDivide programming-interface into api and impl
Sangwan Kwon [Mon, 24 Jun 2019 23:21:12 +0000 (08:21 +0900)]
Divide programming-interface into api and impl

API header: ${project}/api/osquery_manager.h

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoAdd programming interface for event subscription
Sangwan Kwon [Wed, 19 Jun 2019 02:54:45 +0000 (11:54 +0900)]
Add programming interface for event subscription

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoApply meyer's singleton to programming interface
Sangwan Kwon [Wed, 12 Jun 2019 23:47:23 +0000 (08:47 +0900)]
Apply meyer's singleton to programming interface

- Re-design API more simply

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoAdd programming interface for excuting query
Sangwan Kwon [Mon, 10 Jun 2019 23:34:02 +0000 (08:34 +0900)]
Add programming interface for excuting query

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoFix build error on gbs
Sangwan Kwon [Tue, 9 Jul 2019 23:44:28 +0000 (08:44 +0900)]
Fix build error on gbs

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.4.5 [experimental]
Sangwan Kwon [Thu, 2 Apr 2015 20:31:51 +0000 (13:31 -0700)]
Bump version to upstream-1.4.5 [experimental]

- Fast tests (Test binary is unified to osquery-test)

Added: file_events, osquery_schedule, etc_protocols

Known issues
  - extension tests failed
  - virtual table tests failed (passed only when it runs as standalone)
  - Tizen build failed (gflag issue)

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.4.4 [experimental]
Sangwan Kwon [Wed, 18 Mar 2015 19:01:58 +0000 (12:01 -0700)]
Bump version to upstream-1.4.4 [experimental]

- Support specific config source async updating
- Remove libprocps(ng) in favor of parsing proc manually

Known issues
  - extension tests failed
  - Tizen build failed

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.4.3 [experimental]
Sangwan Kwon [Wed, 25 Feb 2015 04:29:57 +0000 (21:29 -0700)]
Bump version to upstream-1.4.3 [experimental]

Known issues
  - extension tests failed
  - Tizen build failed

Added: os_version

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoFix build error on upstream-1.4.2
Sangwan Kwon [Wed, 12 Jun 2019 23:04:03 +0000 (08:04 +0900)]
Fix build error on upstream-1.4.2

Known issues
  - extension tests failed
  - Tizen build failed

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.4.2 [experimental]
Sangwan Kwon [Sat, 14 Feb 2015 01:40:02 +0000 (17:40 -0800)]
Bump version to upstream-1.4.2 [experimental]

** Do not merge into stable branch **

- Add flag aliasing (Build error on Tizen)
- Extensions integrations testing (Test failed)

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoFix build error on upstream-1.4.1
Sangwan Kwon [Wed, 12 Jun 2019 02:28:23 +0000 (11:28 +0900)]
Fix build error on upstream-1.4.1

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.4.1
Sangwan Kwon [Tue, 10 Feb 2015 02:18:22 +0000 (18:18 -0800)]
Bump version to upstream-1.4.1

- Add distributed query feature

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoFix build error
Sangwan Kwon [Wed, 5 Jun 2019 01:37:33 +0000 (10:37 +0900)]
Fix build error

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
5 years agoUpdate resource_class in circleci config
Kuenhwan [Tue, 11 Jun 2019 02:53:31 +0000 (11:53 +0900)]
Update resource_class in circleci config

5 years agoMake the docker directory hidden
sangwan.kwon [Tue, 4 Jun 2019 07:37:25 +0000 (16:37 +0900)]
Make the docker directory hidden

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoMake all testcases successful
sangwan.kwon [Tue, 4 Jun 2019 05:00:11 +0000 (14:00 +0900)]
Make all testcases successful

docker:
  1. make docker_run
  2. cd /usr/src & make
  3. make test

tizen-standard:
  1. gbs build -A armv7l -P standard
  2. sdb push ${tizen-osquery}/tools/tests /tools/tests
  3. find /usr/bin -name "osquery*tests" -exec {} \;

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.4.0
sangwan.kwon [Thu, 22 Jan 2015 22:00:35 +0000 (14:00 -0800)]
Bump version to upstream-1.4.0

- Add a watcher/worker model for osqueryd
- Change to a new registry model
- Add getQueryColumns function to core
- Add extension API with thrift RPC

Added: kernel_info, shared_memory, process_memory_map
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.3.1
sangwan.kwon [Thu, 30 May 2019 04:31:30 +0000 (13:31 +0900)]
Bump version to upstream-1.3.1

- New hash apis

Added: smbios

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoAdd circleci badge to README
sangwan.kwon [Fri, 31 May 2019 02:52:49 +0000 (11:52 +0900)]
Add circleci badge to README

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoAdd circleci config file
sangwan.kwon [Thu, 30 May 2019 04:31:30 +0000 (13:31 +0900)]
Add circleci config file

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.2.0
sangwan.kwon [Wed, 19 Nov 2014 02:06:33 +0000 (18:06 -0800)]
Bump version to upstream-1.2.0

- Update table generators to use QueryContext
- Amalgamate generated tables
- Add -json output mode for shell

Added: hardware-events(udev)

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.1.0
sangwan.kwon [Tue, 11 Nov 2014 16:17:28 +0000 (11:17 -0500)]
Bump version to upstream-1.1.0

Added: arp

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.0.4
sangwan.kwon [Fri, 17 Oct 2014 23:57:03 +0000 (16:57 -0700)]
Bump version to upstream-1.0.4

Added: bash_history, kernel_modules, suid_bin, crontab, mounts,
       process_open_file, process_envs, socket_inode, port_inode
Excepted: cpuid, rpm

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.0.3
sangwan.kwon [Sat, 4 Oct 2014 01:00:15 +0000 (18:00 -0700)]
Bump version to upstream-1.0.3

Added: routes

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoBump version to upstream-1.0.2
sangwan.kwon [Tue, 21 May 2019 07:33:16 +0000 (16:33 +0900)]
Bump version to upstream-1.0.2

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport osqueryd from upstream
sangwan.kwon [Tue, 21 May 2019 07:26:56 +0000 (16:26 +0900)]
Import osqueryd from upstream

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport osqueryi from upstream
sangwan.kwon [Tue, 21 May 2019 06:39:54 +0000 (15:39 +0900)]
Import osqueryi from upstream

osqueryi: an interactive SQL query shell.

osquery-sqlite3 version is different from sqlite3 of tizen-repos.
So, use osquery-sqlite3 as is.

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoEnable glog plugin
sangwan.kwon [Tue, 21 May 2019 04:20:47 +0000 (13:20 +0900)]
Enable glog plugin

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport build-in tables from upstream
sangwan.kwon [Mon, 20 May 2019 06:57:59 +0000 (15:57 +0900)]
Import build-in tables from upstream

Requires: python-jinja2, libprocps, libsystemd

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport event-fw from upstream
sangwan.kwon [Fri, 17 May 2019 05:39:58 +0000 (14:39 +0900)]
Import event-fw from upstream

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport dispatcher from upstream
sangwan.kwon [Fri, 17 May 2019 03:53:50 +0000 (12:53 +0900)]
Import dispatcher from upstream

Requires: thrift

Dispatcher is a singleton which can be used to coordinate the parallel
execution of asynchronous tasks across an application. Internally,
Dispatcher is back by the Apache Thrift thread pool.

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport scheduler from upstream
sangwan.kwon [Thu, 16 May 2019 04:18:25 +0000 (13:18 +0900)]
Import scheduler from upstream

osquery comes with a scheduler, which schedules a variety of things. This
is one of the core parts of the osqueryd daemon. To use this, simply use
this function as your entry point when creating a new thread.

TBD: Fix sql_tests failed cases. (It should be come with build-in tables.)

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport logger from upstream
sangwan.kwon [Tue, 14 May 2019 07:04:03 +0000 (16:04 +0900)]
Import logger from upstream

The logger plugin that you use to define your config receiver can be
defined via a command-line flag, however, if you don't define a logger
plugin to use via the command-line, then the logger receiver which is
represented by the string stored kDefaultLogReceiverName will be used.

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport database, configuration, core from upstream
sangwan.kwon [Tue, 14 May 2019 05:11:30 +0000 (14:11 +0900)]
Import database, configuration, core from upstream

- Database
An osquery database is basically just a SQLite3 database with several
virtual tables attached. This method is the main abstraction for creating
SQLite3 databases within osquery.

- Configuration
osquery has two types on configurations. Things that don't change during
the execution of the process should be configured as command-line
arguments. Things that can change during the lifetime of program execution
should be defined using the osquery::config::Config class and the pluggable
plugin interface that is included with it.

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport registry from upstream
sangwan.kwon [Mon, 13 May 2019 10:41:38 +0000 (19:41 +0900)]
Import registry from upstream

Requires: sqlite3

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport database::results from upstream
sangwan.kwon [Mon, 13 May 2019 07:12:07 +0000 (16:12 +0900)]
Import database::results from upstream

Added data structures: Row, QueryData, DiffResults

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoEnable boost-filesystem
sangwan.kwon [Mon, 13 May 2019 05:38:43 +0000 (14:38 +0900)]
Enable boost-filesystem

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoAdd packaging for database::handle
sangwan.kwon [Mon, 13 May 2019 04:11:38 +0000 (13:11 +0900)]
Add packaging for database::handle

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoImport database::handle from upstream
sangwan.kwon [Thu, 9 May 2019 08:04:13 +0000 (17:04 +0900)]
Import database::handle from upstream

Requires: glog, rocksdb, snappy, z, bz2, lz4, zstd

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoAdd packaging for gbs
sangwan.kwon [Fri, 3 May 2019 08:20:27 +0000 (17:20 +0900)]
Add packaging for gbs

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoInitial build system and test framework
sangwan.kwon [Fri, 3 May 2019 07:20:13 +0000 (16:20 +0900)]
Initial build system and test framework

Requires: gcc-c++, make, cmake
Optional: docker

Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
5 years agoUpdate interface-draft.md
권상완/Security 2Lab(SR)/Engineer/삼성전자 [Tue, 9 Apr 2019 05:25:16 +0000 (14:25 +0900)]
Update interface-draft.md

5 years agoCreate interface-draft.md
권상완/Security 2Lab(SR)/Engineer/삼성전자 [Fri, 22 Mar 2019 05:05:30 +0000 (14:05 +0900)]
Create interface-draft.md

5 years agoUpdate README.md
권상완/Security 2Lab(SR)/Engineer/삼성전자 [Fri, 22 Mar 2019 02:28:47 +0000 (11:28 +0900)]
Update README.md

5 years agoCreate README.md
권상완/Security 2Lab(SR)/Engineer/삼성전자 [Fri, 22 Mar 2019 02:23:08 +0000 (11:23 +0900)]
Create README.md

5 years agoInitial commit
sangwan.kwon [Fri, 22 Mar 2019 01:30:10 +0000 (10:30 +0900)]
Initial commit