Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add 'vendor', 'package_group' columns to rpm_packages #6443

Conversation

Smjert
Copy link
Member

@Smjert Smjert commented May 14, 2020

As for the deb_packages table we expand the rpm_packages table, to add more information about the packages installed on the distribution and to better filter them. The two columns added are: vendor, group.

These are standard/official fields in the rpm database.

I've also enabled its respective integration test.

directionless
directionless previously approved these changes May 20, 2020
Copy link
Member

@directionless directionless left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems fine.

Do these exist in the oldest versions? (or do we need any kind of null handling)

zwass
zwass previously approved these changes May 20, 2020
@zwass
Copy link
Member

zwass commented May 20, 2020

@directionless missing values seem to be handled in getRPMAttribute, but I'll let @Smjert weigh in.

@Smjert
Copy link
Member Author

Smjert commented May 20, 2020

@directionless Yes, missing tags are handled by getRPMAttribute and this has been tested on CentOS 6.

@Smjert Smjert dismissed stale reviews from zwass and directionless via 0f9714c May 20, 2020 21:57
@Smjert Smjert force-pushed the stefano/feature/rpm-packages-extend-table branch from 635737f to 0f9714c Compare May 20, 2020 21:57
@Smjert
Copy link
Member Author

Smjert commented May 20, 2020

@directionless, @zwass I realized that group is a sqlite keyword; while it can still be named wrapping it in backticks, I think that package_group might just do it and avoid to remember to do so.

@Smjert Smjert changed the title Add 'vendor', 'group' columns to rpm_packages Add 'vendor', 'packeg_group' columns to rpm_packages May 20, 2020
@Smjert Smjert changed the title Add 'vendor', 'packeg_group' columns to rpm_packages Add 'vendor', 'packge_group' columns to rpm_packages May 20, 2020
@Smjert Smjert changed the title Add 'vendor', 'packge_group' columns to rpm_packages Add 'vendor', 'package_group' columns to rpm_packages May 20, 2020
@theopolis theopolis merged commit 9373b30 into osquery:master May 21, 2020
@Smjert Smjert deleted the stefano/feature/rpm-packages-extend-table branch June 26, 2020 12:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants