Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
r
Ryan
11/01/2021, 11:47 AM
Hi 👋 I wondered if anyone could suggest some work around to this slight issue with the OS version detection:
https://github.com/osquery/osquery/issues/7268
s
seph
11/01/2021, 1:07 PM
It’s well into work-around territory, but there might be some oracle specific packages you could look for. or a specific version string somewhere
r
Ryan
11/01/2021, 5:05 PM
yeah, we actually tried symlinking the os-release file over the redhat-release file, which of course works 🙂
but the issue is we’re not sure what other components of Oracle Enterprise Linux rely on that file
seems odd that both files are part of the base image, but we confirmed they are
s
seph
11/01/2021, 5:21 PM
I was thinking totally unrealted to that file. Like, is the kernel version unique somehow. Or something like that
2 Views
#general
Join Slack