changed 2 years ago
Linked with GitHub

osquery office hours 2023-06-05

YouTube Link: https://www.youtube.com/watch?v=Kt3UXXILObo

Announcements and Highlights since the last meeting

  • Slack invite link changed! We don't really know why, seph has a slack support ticket open

Any Questions / Issues / PRs people want to discuss?

The intent of this section is to provide a clear time for community members to bring up anything.

Broad questions? Bugs? Deployment questions? Blocked PRs?

  • Kimbrough askes about #7819. We think it's fine and will merge it

Agenda down here

5.9.0

So, how about a 5.9.0 release?

PRs:

More osquery-go maintainers?

General approval for adding people

  • Kolide people?
  • Fleet person
  • Grahm from MacAdmins

New ES events in Sonoma

  • profile add/remove
  • sudo

Apple doesn't backport, so we might have to bring the SDK target forward.

These are super exciting events. But how do we support the long tail. Discussion about whether we can do things with multiple framework versions.

Other WWDC

Environment Constraints

Some kind of support for limiting what environmental variables a process has access to.

This is like hardened runtime with more hardening

https://developer.apple.com/videos/play/wwdc2023/10266/

Look At Open CVS / Security Tickets

List of Issues tagged with Security

Look at old PRs

(If there's time, we've been trying to re-visit old PRs)

Reverse Sorted List of PRs

Select a repo