Hi All, is anyone having any issues with using osquery 5.4 with macOS Sonoma? Or know if there will be any compatibility issues?

The only thing I know is the one I just found and opened a hotfix for: querying

wifi_survey

most likely will cause osquery to crash.

Thats irrespective of OS though, correct? Thats a generic issue?

I don't think it's irrespective of the OS, I'm pretty sure I did run the tests which included that table when on Ventura, and didn't got a crash. The issue is connected with the inability of getting the

ssid

Gotcha, so its only crashing on Sonoma?

That is where I noticed the issue first; I'm less familiar with macOS permission model here so maybe also a permission issue could've caused this? I only know that when running tests on Ventura this crash wasn't there (and it's not missable when the API fails). I also don't own a device with Ventura on it anymore.

I know the current osquery is reasonably happy on Sonoma. I’m sure there are some issues, the wifi thing Stefano mentions. OpenBSM is gone… But 5.4 is pretty old, are you limited to that one?

wifi_survey

crash on macOS 14 is caused by Apple making SSID require location services being enabled and having user permissions. Otherwise SSID info in

CWInterface

will be nil.

wifi_survey

was not checking for nil — thus crash.

Not really limited, is there a version you would recommend with Sonoma?

I would always recommend the latest stable release