Are there any plans to make osquery use the distro...
# linuxp
Phillip Boushy
11/12/2024, 9:02 PMAre there any plans to make osquery use the distro-provided libraries of common items (i.e. OpenSSL, libgcrypt, zlib, sqlite)?
Phillip Boushy
11/12/2024, 10:22 PMI'm asking because we have several kernel developers in our organization that are opposed to running software that bundles common libraries because their experience is that devs that bundle libraries don't update those bundled packages as quickly as the distro updates system libraries.
k
Keith Swagler
11/15/2024, 4:33 PMI don't think so, last I checked the team's philosophy is to have no dependencies, and using system packages when available could lead to inconsistencies
p
Phillip Boushy
11/21/2024, 4:51 PMThe issue the kernel devs have raised is that leads to a security tool having vulnerabilities that wouldn't necessarily exist if they uses the distro-provided libraries.