Fix packs to check for platform before including queries (osquery#7461)

Smjert · Feb 29, 2024 · 01ed1f6 · 01ed1f6
1 parent 0e2b8ed
commit 01ed1f6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/tools/tests/utils.py b/tools/tests/utils.py
@@ -69,6 +69,7 @@ def platform():
 
 
 def queries_from_config(config_path):
+    spec_platform = platform()
     config = {}
     rmcomment = re.compile('\/\*[\*A-Za-z0-9\n\s\.\{\}\'\/\\\:]+\*\/|\s+\/\/.*|^\/\/.*|\x5c\x5c\x0a')
     try:
@@ -100,6 +101,8 @@ def queries_from_config(config_path):
                     packcontent = rmcomment.sub('', packfile)
                     packqueries = json.loads(packcontent)
                     for queryname, query in packqueries["queries"].items():
+                        if "platform" in query and query['platform'] != spec_platform:
+                            continue
                         queries["pack_" + queryname] = query["query"]
 
     return queries