santa extension error message about osquery-extensions HOT 10 CLOSED

Did you build the extension from source, or did you grab the compiled binaries? Perhaps we need a 1.2 release @alessandrogario

from osquery-extensions.

@mike-myers-tob I grabbed it from your most recent release. https://github.com/trailofbits/osquery-extensions/releases/download/1.1/trailofbits_osquery_extensions-macos-v1.1.zip

from osquery-extensions.

@mike-myers-tob I grabbed it from your most recent release. https://github.com/trailofbits/osquery-extensions/releases/download/1.1/trailofbits_osquery_extensions-macos-v1.1.zip

I think that's the reason; we need to put up a newer release soon. In the meantime, if you build from source, it will include the new Santa tables.

from osquery-extensions.

In the santa folder:
also getting compile error with CMakeLists.txt during compile.
CMakeLists.txt:15: *** missing separator. Stop.

Whitespace/Tab issue?

from osquery-extensions.

in the main folder osquery-extensions running Cmake:

CMake Error at CMakeLists.txt:123 (message):
Tests will not find gtest if you have built using the 'SKIP_TESTS=1'
setting!
Call Stack (most recent call first):
libraries/firewall/CMakeLists.txt:87 (AddTest)
libraries/firewall/CMakeLists.txt:102 (main)

from osquery-extensions.

Hello @tonynotears
It seems like osquery is being compiled with SKIP_TESTS set to 1 (environment variable); if that's not the case, then the dependencies are missing. Make sure the system has been initialized correctly:

make sysprep (this command should call make deps automatically)
make deps

from osquery-extensions.

@alessandrogario this is the message compling in the folder:
$ make sysprep
make: *** No rule to make target `sysprep'. Stop.

Tried both in the /santa folder and in the /osquery-extention folder

from osquery-extensions.

Hey @tonynotears

The build instructions are located in the README file: https://github.com/trailofbits/osquery-extensions#building

It is similar to how osquery is normally built, except you need to create a symbolic link to our source folder.

from osquery-extensions.

now getting this error

TypeError: cannot use a string pattern on a bytes-like object
-- Unable to detect osquery platform: ./tools/get_platform.py failed

Maybe a osquery binary issue? will post that in the #general channel in osquery

from osquery-extensions.

This has been fixed with the newly release 1.2 version (724123a)

from osquery-extensions.