When installing through the msi, there was osquery...
# generalu
Usama Nathani
09/21/2020, 8:11 PMWhen installing through the msi, there was osqueryd and osqueri available to run however when I build it, I cant run the service or find them
z
zwass
09/21/2020, 9:02 PM
When you build it you will find those in
.\osquery\RelWithDebInfo\osqueryd.exeu
Usama Nathani
09/21/2020, 11:22 PMThank you for your reply, I tried running it however I got this:
Usama Nathani
09/21/2020, 11:22 PMG:\osquery\build\osquery\RelWithDebInfo>.\osqueryd.exe
E0921 162119.682631 33404 shutdown.cpp:69] [Ref #1382] osqueryd has unsafe permissions: G:\osquery\build\osquery\RelWithDebInfo\osqueryd.exe
Usama Nathani
09/22/2020, 3:16 PMIs it some permission error?
z
zwass
09/22/2020, 3:29 PM
Yeah, you can look at how the permissions are set up in the MSI installer to see what "safe" permissions look like. If you just want to get it to run during development you can add the
--allow_unsafeu
Usama Nathani
09/24/2020, 7:50 PMThank you, I made it work 🙂
11 Views