Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add utc flag back for compatibility #7460

Merged
merged 1 commit into from
Jan 26, 2022

Conversation

directionless
Copy link
Member

In #7276 we removed the functionality of the --utc flag. Unfortunately, we also removed the flag. This causes osquery to break on older configurations.

While I'm generally game for some breaking changes, this presents something of a coupling issue. If one wanted utc timestamps, but needed an osquery config to work across multiple versions, there's no way to do it. So, this adds the flag back as a HIDDEN_FLAG. (Not sure we have a better pattern for this)

@directionless directionless requested review from a team as code owners January 25, 2022 02:35
Copy link
Member

@sharvilshah sharvilshah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While I'm generally game for some breaking changes, this presents something of a coupling issue. If one wanted utc timestamps, but needed an osquery config to work across multiple versions, there's no way to do it. So, this adds the flag back as a HIDDEN_FLAG. (Not sure we have a better pattern for this)

I think this is reasonable approach

(needs clang-format)

@directionless directionless merged commit 852d87b into osquery:master Jan 26, 2022
@directionless directionless deleted the seph/deprecated-utf branch January 26, 2022 13:58
@directionless directionless added this to the 5.2.2 milestone Jan 26, 2022
aikuchin pushed a commit to aikuchin/osquery that referenced this pull request Jul 11, 2023
…2 to master

* commit 'c97a1b416492585e049010deea36d2992b680556': (52 commits)
  Fix user_time and system_time unit in processes table on M1 (osquery#7473)
  Add BOOST_USE_ASAN define when enabling Asan (osquery#7469)
  Removing unnecessary macOS version check (osquery#7451)
  Add `utc` flag back for compatibility(osquery#7460)
  Add osquery version to macOS app bundle Info.plist (osquery#7452)
  Fix submodule cache for macOS CI runner (osquery#7456)
  New Table: Windows Firewall Rules (osquery#7403)
  Remove utc flag from example config file (osquery#7437)
  Update the ATC table `path` column check to be case insensitive (osquery#7442)
  Fix typos in documentation (osquery#7443)
  Fix a crash when Yara uses its own strutils functions (osquery#7439)
  Update `time` table to reflect UTC values (osquery#7276)
  Update sqlite to version 3.37.0 (osquery#7426)
  Fix linking of thirdparty_sleuthkit (osquery#7425)
  Apple Silicon support (osquery#7330)
  Fix how we disable tables in the fuzzer init method (osquery#7419)
  Prevent running discovery queries when fuzzing (osquery#7418)
  Hide the deprecate `antispyware` column in `windows_security_center` (osquery#7411)
  Fix typo in docs (osquery#7412)
  CHANGELOG 5.1.0 (osquery#7406)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants