How again do you query values in specific textfiles e g the

Question

How again do you query values in specific textfiles e g the presence of PermitRootLogin no in an sshd config

Tilman Bender · Answer

There was some kind of subprojet for that but I cannot recall the name

Hugh (Zercurity) · Answer

Augeaus can parse the config

Hugh (Zercurity) · Answer

Hugh (Zercurity) · Answer

osquery gt SELECT CASE WHEN COUNT = 1 THEN PASSING ELSE FAILING END AS state FROM augeas WHERE path = etc ssh sshd config AND label = PermitRootLogin AND value = yes

Tilman Bender · Answer

Ah that was it Was reading your medium article a couple of mins after I asked

Hugh (Zercurity) · Answer

grin

Tilman Bender · Answer

Do you happen to use that with fleet btw

Tilman Bender · Answer

Still not 100 certain about vanilla osquery vs what fleet bundles into their agent

Hugh (Zercurity) · Answer

Zercurity is another fleet like manager for osquery

seph · Answer

Launcher Kolide s agent ships a variety of things to help with this But It s much more oriented around using our SaaS than rolling your own