Is it possible to run osquery as a user other than...
# core
s
Is it possible to run osquery as a user other than root and still process events on Linux? I created a new user for the process and granted the service
AmbientCapabilities=CAP_SYS_ADMIN
via the systemd service file but the service fails to start