hello, I posted awhile back about osqueryd losing full disk access on macs. we’re not yet set up with orbit/fleetd, so i’m following these instructions, however not having luck pushing out the PPPC with JAMF. trying to figure out some discrepancies. we did upgrade several osquery versions last year. the old code requirement was

identifier osqueryd...

; i re-ran the codesign and now it’s

identifier "io.osquery.agent"...

so i’ve updated that section. the docs I linked say to use

/usr/local/bin/osqueryd

as the identifier, however my osquery binary appears to be at

/usr/local/bin/osqueryctl

(I’ve tried setting the configuration profile to both + restarting to no avail). the process is running out of

/opt/osquery/lib/osquery.app/Contents/MacOS/osqueryd

. if anyone can help me understand what’s going on, i’d appreciate 🙏