v1.12.3
Pre-release
Pre-release
What's Changed
Table Changes
- Added restrictions for datatypes for systemprofiler by @cesarfda in #1914
- added new store for uptime history and uptime tracking with knapsack by @cesarfda in #1923
- [KATC] Add support for doubles to indexeddb parsing by @RebeccaMahany in #1963
Build and Package
- Move off deprecated codeql-action/init@v2 by @RebeccaMahany in #1932
- add numeric install version value to windows registry on install by @zackattack01 in #1953
Features and Improvements
- Report run ID to control server in startup message by @RebeccaMahany in #1947
- upgrade watchdog service to scheduled task by @zackattack01 in #1951
- Add remote restart consumer to handle remote restart actions by @RebeccaMahany in #1948
- Retry osquery instance launch until successful or shutdown requested by @RebeccaMahany in #1952
Bug Fixes
- Get launcher.flags from correct directory in checkup by @RebeccaMahany in #1918
- always generate desktop menu json by @James-Pickett in #1920
- Remove mixer/clock due to bug by @RebeccaMahany in #1926
- Set Access-Control-Allow-Credentials: true in localserver by @RebeccaMahany in #1955
- Give launcher interactive enough time to run during doctor by @RebeccaMahany in #1958
- Set SystemDrive env var on osquery command by @RebeccaMahany in #1960
- Set all env vars on osquery process by @RebeccaMahany in #1961
- deny default write permissions from windows root directory by @zackattack01 in #1962
- Set root dir permissions on Windows with SET instead of DENY, and overwrite existing DACL by @RebeccaMahany in #1965
General
- ADR for osquery extension, runner, and instance refactor by @RebeccaMahany in #1905
- Make jsonrpc the default for transport by @RebeccaMahany in #1919
- Remove and consolidate osquery instance options by @RebeccaMahany in #1909
- Move osquery instance creation and launch into osqueryinstance.go by @RebeccaMahany in #1921
- Update receiver vars for OsqueryInstance for consistency by @RebeccaMahany in #1922
- Move key creation to runLauncher by @RebeccaMahany in #1924
- Move plugin ownership to osqueryinstance by @RebeccaMahany in #1925
- Move osquery extension management into osquery instance by @RebeccaMahany in #1927
- [Tests] Capture osquery logs for troubleshooting flaky tests; use current stable osqueryd in tests by @RebeccaMahany in #1928
- Moved run ID management to knapsack by @cesarfda in #1929
- Separate osquery instance and runner further by @RebeccaMahany in #1931
- Update osquery refactor ADR status by @RebeccaMahany in #1933
- Unique filename for osquery.sock by @RebeccaMahany in #1935
- Unique osquery database per instance by @RebeccaMahany in #1942
- Support running multiple osquery instances by @RebeccaMahany in #1941
- Store expected registration IDs separately from running instances to avoid data race by @RebeccaMahany in #1945
- Test reorganization/backfill for osquery runner and instance by @RebeccaMahany in #1946
- ActionQueue retry on failure by @cesarfda in #1944
- Refactor log file handling to standardize zip creation and improve er… by @cesarfda in #1950
- add current version to windows registry on startup by @zackattack01 in #1956
- add windows installer-info from registry to flares by @zackattack01 in #1957
- choose presence detection reason based on GOOS, enable windows by @James-Pickett in #1959
- Don't perform remote restart yet by @RebeccaMahany in #1966
Full Changelog: v1.11.6...v1.12.3