seph

Hrm. Mostly I'm guessing based on what feels like it might be right. Under the hood, launcher is running those `loginctl` commands every few seconds. Can you wrap your for...

Wow, that sounds like a pretty solid test of the `loginctl` theory. Thank you I'm at a loss, since the code path in question isn't near any kind of dbus...

The code relating to log sending is pretty simple. It starts around https://github.com/kolide/launcher/blob/59ad0a639927f3cb838188b9d92bc381f0836566/pkg/osquery/extension.go#L647 Start a bboltdb transaction, ingest logs into an array, send the array over the network to our...

> I assume there is some OSquery that interrupts other system processes, even though they have higher rt priority (such as audio processes). I'm not sure what would do that.

(I'm pulling from the merge queue, because I want to ponder pty with micah. We can carry on if we don't want to pick that up)

This relates to https://github.com/kolide/launcher/issues/1143 * `.../data` should be private * `.../conf/secret` isn't very secret, but should be private. * `.../conf/launcher.flags` (or whatever it's called) should not be secret. It's possible...

> I have experienced similar behavior on Ubuntu after initial agent install. Hi @johnmarzella-immutable I suspect that's going to be a different issue, there may be more than one in...

Maybe the first thing to look at are the MDM certs. All devices that are in an MDM have a certificate, usually delievered by SCEP.

I found [`certstore`](https://github.com/github/smimesign/blob/main/certstore), which is a little out of date, but the underlying macOS framework calls look correct. Writing a test program with that I can: 1. List the identities...

We've decided to not pursue this right now. But some notes before I mothball it. Our usually pattern would be to have this brokered by launcher. That pattern would look...