Jacob Burley
05/01/2023, 8:04 AMfleet-osquery
1.8.0
• osquery
5.8.2
• Ubuntu desktop 22.10
• fleet
4.30.1
Weirdly, if i manually run select * from users;
from the fleet console, it picks up users 🤷 any ideas?John Speno
05/01/2023, 12:44 PMJacob Burley
05/01/2023, 2:59 PMLili
08/11/2023, 5:48 AMFleet
4.35.1
Osquery
5.8.2
Orbit
1.13.0
In configuration file I set:
features:
enable_host_users: true
Can you please help me with this problem?Saulo Guilhermino
08/11/2023, 12:25 PMKathy Satterlee
08/11/2023, 2:21 PMLili
08/14/2023, 5:58 AMWITH cached_groups AS (select * from groups)
SELECT uid, username, type, groupname, shell
FROM users LEFT JOIN cached_groups USING (gid)
WHERE type <> 'special' AND shell NOT LIKE '%/false' AND shell NOT LIKE '%/nologin' AND shell NOT LIKE '%/shutdown' AND shell NOT LIKE '%/halt' AND username NOT LIKE '%$' AND username NOT LIKE '\_%' ESCAPE '\' AND NOT (username = 'sync' AND shell ='/bin/sync' AND directory <> '')
And get users from hosts