https://github.com/osquery/osquery logo
Title
m

Martin Westergaard Lassen

03/04/2020, 3:14 PM
Anyone having experience running ther launcher on Linux as a non-root user?
j

Jason W

03/04/2020, 3:18 PM
AFAIK osquery has to run as root
I could absolutely be wrong, though.
m

Martin Westergaard Lassen

03/04/2020, 4:32 PM
In my mind it would just be a question of having the right capabilities?
s

sundsta

03/04/2020, 4:42 PM
You can run osquery as non root, but events tables don't seem to work. I documented how to do this in my issue https://github.com/osquery/osquery/issues/6121
m

Martin Westergaard Lassen

03/04/2020, 4:44 PM
That's very valuable @sundsta!