Skip to content

1.8.0

Compare
Choose a tag to compare
@theopolis theopolis released this 14 Jul 19:52
· 3423 commits to master since this release

New features in 1.8.0:

This is a release rollup of fixes since 1.7.4.

There is an optional Thrift API change for extensions: the shutdown method.
The osquery core, extension manager, will attempt to call this optionally-implemented method
immediately before it shuts down. This request is blocking and allows an extension to perform
cleanup before its watcher thread quits.

Plugin API changes

#2224 Add shutdown() method to extensions API
#2229 The logger facilities now write catastrophic errors to syslog
#2241 Distributed queries will log verbose events indicating their query requests

Bug fixes:

#2205 Fix milli/micro conversion when waiting for active plugins (regression from 1.7.4)
#2207 Restore extension respawn limits to 20s (regression from 1.7.4)
#2217 Fix SQLite local access after ASIO URL usage (OS X)
#2228 Force RocksDB to sync writes for non-event domains
#2234 Fix various Linux process path parsing errors

Config options / CLI flags changes

--decorations_top_level Add decorators as top level JSON objects