Title
#general
d

Divya

05/11/2022, 9:28 AM
#general I am trying to run osquery deamon with a non-root group. We donot want to give root permissions to the consumers of the the osquery hence creating a separate group(lets call it "osquery-users") and running the deamon with a conf file having
[Service]
User=root
Group=osquery-users
The default permission on socket file is coming as 755. But as the consumers are part of the group, we need it to be 765 atleast. When I set the permissions on the socket file, restart of the daemon seems to be resetting on a restart. Can someone explain the reason for it and avoid this?
d

Deepak

05/11/2022, 1:21 PM
Looks like this commit is all you wanted to create a osquery grp and have all users be part of it - https://github.com/osquery/osquery/pull/6180 Is it in the 4.x release already?
d

Divya

05/11/2022, 1:25 PM
let me check the release notes
1:46 PM
#general this issue is still open on osquery https://github.com/osquery/osquery/issues/6172. Is there a plan to resolve this in near future?