search

kolide / launcher

Osquery launcher, autoupdater, and packager
https://kolide.com/launcher
Other
500 stars 99 forks source link

Add `kolide_brew_upgradeable` table #1634

Closed Micah-Kolide closed 4 months ago

Micah-Kolide commented 4 months ago

Add a Kolide table on both Linux and macOS for homebrew outdated packages. My initial concerns of being unable to run as sudo were correct as homebrew panics if an attempt is made to run it as sudo. This is by design in homebrew.

$ sudo brew --help
Error: Running Homebrew as root is extremely dangerous and no longer supported.
As Homebrew does not drop privileges on installation you would be giving all
build scripts full access to your system.
osquery> SELECT * FROM kolide_brew_upgradeable WHERE uid = 501;
+---------------------------------+-------------------------------+-----------------+------------+-------+-----+
| fullkey                         | parent                        | key             | value      | query | uid |
+---------------------------------+-------------------------------+-----------------+------------+-------+-----+
| formulae/0/name                 | formulae/0                    | name            | cfitsio    | *     | 501 |
| formulae/0/installed_versions/0 | formulae/0/installed_versions | 0               | 4.3.1      | *     | 501 |
| formulae/0/current_version      | formulae/0                    | current_version | 4.4.0      | *     | 501 |
| formulae/0/pinned               | formulae/0                    | pinned          | false      | *     | 501 |
| formulae/1/name                 | formulae/1                    | name            | libnghttp2 | *     | 501 |
| formulae/1/installed_versions/0 | formulae/1/installed_versions | 0               | 1.59.0     | *     | 501 |
| formulae/1/current_version      | formulae/1                    | current_version | 1.60.0     | *     | 501 |
| formulae/1/pinned               | formulae/1                    | pinned          | false      | *     | 501 |
| formulae/2/name                 | formulae/2                    | name            | libpng     | *     | 501 |
| formulae/2/installed_versions/0 | formulae/2/installed_versions | 0               | 1.6.42     | *     | 501 |
| formulae/2/current_version      | formulae/2                    | current_version | 1.6.43     | *     | 501 |
| formulae/2/pinned               | formulae/2                    | pinned          | false      | *     | 501 |
| formulae/3/name                 | formulae/3                    | name            | openjpeg   | *     | 501 |
| formulae/3/installed_versions/0 | formulae/3/installed_versions | 0               | 2.5.0_1    | *     | 501 |
| formulae/3/current_version      | formulae/3                    | current_version | 2.5.1      | *     | 501 |
| formulae/3/pinned               | formulae/3                    | pinned          | false      | *     | 501 |
| formulae/4/name                 | formulae/4                    | name            | orc        | *     | 501 |
| formulae/4/installed_versions/0 | formulae/4/installed_versions | 0               | 0.4.37     | *     | 501 |
| formulae/4/current_version      | formulae/4                    | current_version | 0.4.38     | *     | 501 |
| formulae/4/pinned               | formulae/4                    | pinned          | false      | *     | 501 |
| formulae/5/name                 | formulae/5                    | name            | xz         | *     | 501 |
| formulae/5/installed_versions/0 | formulae/5/installed_versions | 0               | 5.4.5      | *     | 501 |
| formulae/5/current_version      | formulae/5                    | current_version | 5.6.0      | *     | 501 |
| formulae/5/pinned               | formulae/5                    | pinned          | false      | *     | 501 |
+---------------------------------+-------------------------------+-----------------+------------+-------+-----+