#general I am trying to run osquery deamon with a non-root group. We donot want to give root permissions to the consumers of the the osquery hence creating a separate group(lets call it "osquery-users") and running the deamon with a conf file having

[Service]
User=root
Group=osquery-users

The default permission on socket file is coming as 755. But as the consumers are part of the group, we need it to be 765 atleast. When I set the permissions on the socket file, restart of the daemon seems to be resetting on a restart. Can someone explain the reason for it and avoid this?

Looks like this commit is all you wanted to create a osquery grp and have all users be part of it - https://github.com/osquery/osquery/pull/6180 Is it in the 4.x release already?

let me check the release notes