Hi, I'm using CIS hardened image of RHEL7 and Cent...
# general
p
Hi, I'm using CIS hardened image of RHEL7 and CentOS 6/7. On these systems query 'select * from rpm_packages' is not returning any result. On executing command 'rpm -qa' , I can see the list of packages installed but not using osquery. Can someone point me where to debug as I'm fairly new to osquery and have very limited understanding of it's internals. Which command does osquery use to fetch packages internally ? Can there be permission issue Or may be selinux might be stopping osquery to fetch the required data ? Any pointers would be appreciated. Thanks