Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Table schema is missing "architecture support" #249

Open
mike-myers-tob opened this issue Jun 15, 2022 · 3 comments
Open

Table schema is missing "architecture support" #249

mike-myers-tob opened this issue Jun 15, 2022 · 3 comments

Comments

@mike-myers-tob
Copy link
Member

Several tables are architecture-specific now, existing or producing results only in x86 builds of osquery (and at a future date, probably ones specific to ARM).

The schema, and the website's view of it, doesn't expose this information for the user, as several people have noted.

@directionless
Copy link
Member

I think this belongs in the osquery repo -- that's where the schema is generated. We'll need to update the website to consume it, once it exists though

@directionless directionless changed the title Add "architecture support" to the table schema Table schema is missing "architecture support" Jun 20, 2022
@zhumo
Copy link

zhumo commented Jun 24, 2022

An (interim) attempt at addressing this is here: osquery/osquery#7650

It's just language in the description of each table.

@directionless
Copy link
Member

I don't think description text is enough. I think we need to think about how to surface supported architectures, and not just platforms.

I can't quite decide if it's simple, of if we need to surface things as the intersection between arch and platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants