beats icon indicating copy to clipboard operation
beats copied to clipboard

[Spike] OS Query Manager and OSqueryd FIPS comliance

Open qcorporation opened this issue 4 months ago • 1 comments

Parent Ticket:

https://github.com/elastic/ingest-dev/issues/4046

Description

Due to the initiative: Elastic Agent and Beats FIPS Compliance, one of the responsibilities of the Deployment and Devices team is to investigate the required development for OSQueryManager and OSQueryd to be inline with the Elastic requirement.

Note: Early understanding is that osqueryd binary is not controlled by Elastic. OSQueryManager pulls the most recent release and incorporates that within its release CI pipeline when packaging the final binary

Spike:

  1. Investigate if osqueryd does have FIPS binary support
  2. Work with the team managing the requirement to see what exceptions are needed if we can not control osqueryd binary
  3. Investigate alternatives, including upstreaming changes, packaging osqueryd separately or any other way to get FIPS compliance

qcorporation avatar Oct 21 '24 14:10 qcorporation