Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wifi_networks is broken on recent macOS #7206

Closed
directionless opened this issue Jul 22, 2021 · 2 comments · Fixed by #7503
Closed

wifi_networks is broken on recent macOS #7206

directionless opened this issue Jul 22, 2021 · 2 comments · Fixed by #7503

Comments

@directionless
Copy link
Member

directionless commented Jul 22, 2021

Bug report

The wifi_networks table is parsing a plist. Somewhere between Mojave and Big Sur, that plist changed:

miniseph:~ seph$ sudo ./osqueryd-4.8.0 -S --verbose "select * from wifi_networks"
I0722 11:55:15.540264 157650432 init.cpp:342] osquery initialized [version=4.8.0]
I0722 11:55:15.540942 157650432 extensions.cpp:453] Could not autoload extensions: Cannot open file for reading: /var/osquery/extensions.load
I0722 11:55:15.541041 157650432 init.cpp:553] An error occurred during extension manager startup: Extensions disabled
I0722 11:55:15.541075 157650432 auto_constructed_tables.cpp:97] Removing stale ATC entries
I0722 11:55:15.541301 157650432 init.cpp:591] Error reading config: config file does not exist: /var/osquery/osquery.conf
I0722 11:55:15.566246 157650432 wifi.mm:163] Key not found : KnownNetworks
I0722 11:55:15.566426 157650432 dispatcher.cpp:149] Thread: 0x109658e00 requesting a stop
I0722 11:55:15.566442 157650432 dispatcher.cpp:122] Thread: 0x109658e00 requesting a join
I0722 11:55:15.566452 157650432 dispatcher.cpp:144] Services and threads have been cleared
@LeShadow
Copy link
Contributor

I am currently investigating this ^^

@puffyCid
Copy link
Contributor

puffyCid commented Aug 1, 2021

I know LeShadow is investigating it, I just wanted to mention for others that were curious like myself. It looks like the wifi info (or at least some of it) was moved to: /Library/Preferences/com.apple.wifi.known-networks.plist or at least some of the wifi_networks data was move to the plist file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants