I’m not worried about a user with privileged acces...
# general
h
I’m not worried about a user with privileged access using osquery as an interface to access data they already have access to My concern is moreso... if osqueryd is running under a privileged system account, is there an interface (aside from modifying the config files, which shouldn’t be writeable by normal useless) that the users could issue queries to the instance of osquery running as the privileged user