OllieJC
05/23/2021, 4:26 PMError reading the query pack named: ...
- am I missing something? I'll put a little more details in the 🧵"*": "/usr/share/osquery/packs/*"
and "osquery-monitoring": "/usr/share/osquery/packs/osquery-monitoring.conf"
but I get Error reading the query pack named: *
and Error reading the query pack named: osquery-monitoring
respectively.
I've tried chmod -R 777 /usr/share/osquery/packs/
to rule out a permission issue..seph
05/23/2021, 4:41 PMOllieJC
05/23/2021, 9:38 PM/use/share/osquery/packs/...
I've tried all the non-macOS ones individually.
Looks like it's raised from this: https://github.com/osquery/osquery/blob/1e824a6246b46914c410d62c7a8d1449eb8ee8e7/osquery/config/config.cpp#L746
My C/C++ (?) sucks though so I have no idea how to debug it back..theopolis
05/24/2021, 3:45 PMOllieJC
05/25/2021, 6:33 AM