ryan
08/03/2021, 2:30 PMpermission error
as normal user (expected since it’s a priv port) and then Failed to start: initializing service: initializing osquery logging: create filesystem status logger: create new raw logger: open /tmp/osquery_status: permission denied
if I run via sudoMystery Incorporated
08/03/2021, 3:44 PMzwass
/tmp
when running as root? Can you share the full command and output?ryan
08/05/2021, 7:07 PMzwass
sudo ls -l /tmp/osquery_status
and show the results? We are looking to see if there are unusual permissions on that file.