seph

`wifi_status` table missing fields on macOS

3

# Bug report I know Apple has been removing `bssid` access. But I was somewhat surprised not to see `ssid` and `network_name` populated In the same vein, maybe we should...

`iptables` table doesn't work with the new nftables

12

# Bug report ### What operating system and version are you using? ``` seph@seph-ubuntu-21-04-hirsute:~$ ./osqueryd -S --line "SELECT version, build, platform FROM os_version;" version = 21.04 (Hirsute Hippo) build =...

Lots of logging errors around RPM

2

I have not verified this, but we have a customer report about a 5.10.2 machine running RHEL 9.3 that has a lot of log messages like: ``` I1130 08:53:54.178153 3320...

I would really like some queries to run at (or near) startup

2

# Blueprint Today, queries are scheduled based on uptime, with no affordance for startup. This creates some very weird behaviors for system information. Take, for example, system version. Say you...

Issues around the `disk_encryption` and `block_devices` tables

2

My colleague @Micah-Kolide and I have been trying to debug some failures in the `disk_encryption` and `block_devices` tables. I am still confused, and thus, this bug report isn't as clear...

Inconsistent behavior using `-S` non-interactively

1

Tinkering with shell mode to run SQL files snippets, I see a lot of inconsistent behavior: ## Inconsistent behavior for trailing semicolons ``` $ osqueryd -S --json "select 1" [...

PID reuse can lock the pid file, and cause osquery to exit

21

# Bug report I don't have full info here, but one of our test devices recently failed to start osquery. Digging through some logs osquery logging about pid file issues,...

Upcoming changes to windows codesigning

2

Recently, the standards for certificate storage on code signing certs changed. Basically, it needs to be in hardware. There are cloud based things, but we have to figure out how...

Support self-service signup

1

This is a tracking issue for a TBD project

Osquery produces logs, and sends them to launcher, which immediately writes them to boltdb. Asynchronously, a process reads a chunk of them of them from boltdb and sends them to...