osquery / osquery-go

Go bindings for osquery
MIT License
386 stars 78 forks source link

Constraints that are not `==` don't appear to be passed along #88

Open directionless opened 3 years ago

directionless commented 3 years ago

As pointed out on slack, it's not clear how to get a constraint that isn't ==

I added a spew to table.Call and I don't see the constraints coming in.

If I look at a trace in panic, I don't see much in between that, and the thrift layer.

directionless commented 3 years ago

This issue appears present in both the python sdk, and the go one. And in both osquery 4.5.1 and 3.3.2. Upstream it is! https://github.com/osquery/osquery/issues/6734