CptOfEvilMinions
10/20/2021, 10:40 PMosquery.flags
file on the host has --disable_carver=true
but fleet global options has --disable_carver=false
, which one wins?zwass
10/20/2021, 10:44 PMosqueryd --help
, it should only be possible to set it via flagfile. If it's highly important I would give it a double-check and file an issue for osquery to resolve it if you find that it is respected in the TLS config.CptOfEvilMinions
10/20/2021, 10:50 PMosqueryd --help
could answer my question. Thanks for the protip @zwass