This looks like a good candidate for 5 8 0 <https github com osquery #code-review

This looks like a good candidate for 5.8.0: <https...

zwass

02/01/2023, 12:42 AM

This looks like a good candidate for 5.8.0: https://github.com/osquery/osquery/pull/7916. I could review it but I'm not very familiar with the relevant systems.

Lucas Rodriguez

02/01/2023, 2:58 PM

+1. For what it's worth it, we got reports from at least ~three users hitting this issue on Linux hosts.

Lucas Rodriguez

02/01/2023, 2:59 PM

And AFAICS given that the whole process hangs, the denylisting feature is not helping...

2 Views