Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
u
Usama Nathani
09/21/2020, 8:11 PM
When installing through the msi, there was osqueryd and osqueri available to run however when I build it, I cant run the service or find them
z
zwass
09/21/2020, 9:02 PM
When you build it you will find those in
.\osquery\RelWithDebInfo\osqueryd.exe
u
Usama Nathani
09/21/2020, 11:22 PM
Thank you for your reply, I tried running it however I got this:
G:\osquery\build\osquery\RelWithDebInfo>.\osqueryd.exe E0921 16:21:19.682631 33404 shutdown.cpp:69] [Ref #1382] osqueryd has unsafe permissions: G:\osquery\build\osquery\RelWithDebInfo\osqueryd.exe
Is it some permission error?
z
zwass
09/22/2020, 3:29 PM
Yeah, you can look at how the permissions are set up in the MSI installer to see what "safe" permissions look like. If you just want to get it to run during development you can add the
--allow_unsafe
flag.
u
Usama Nathani
09/24/2020, 7:50 PM
Thank you, I made it work 🙂
7 Views
#general
Join Slack