https://github.com/osquery/osquery logo
#fleet
Title
m

Mystery Incorporated

12/03/2022, 2:00 AM
Is it right to say that the users listed in fleet for linux devices are only users that have a shell? So for example, it is not listing the nginx www-data user.
k

Kathy Satterlee

12/05/2022, 5:38 PM
I tested this in our Fleet environment and that user is returned. Can you share the query you're using?
m

Mystery Incorporated

12/06/2022, 6:07 AM
@Kathy Satterlee I’m just letting fleet do whatever it does by default