{"action":"created","issue":{"url":"https://api.github.com/repos/facebook/osquery/issues/2609","repository_url":"https://api.github.com/repos/facebook/osquery","labels_url":"https://api.github.com/repos/facebook/osquery/issues/2609/labels{/name}","comments_url":"https://api.github.com/repos/facebook/osquery/issues/2609/comments","events_url":"https://api.github.com/repos/facebook/osquery/issues/2609/events","html_url":"https://github.com/facebook/osquery/issues/2609","id":182109537,"number":2609,"title":"logger_mode within config file is decimal instead of octal","user":{"login":"0xd0","id":17374630,"avatar_url":"https://avatars.githubusercontent.com/u/17374630?v=3","gravatar_id":"","url":"https://api.github.com/users/0xd0","html_url":"https://github.com/0xd0","followers_url":"https://api.github.com/users/0xd0/followers","following_url":"https://api.github.com/users/0xd0/following{/other_user}","gists_url":"https://api.github.com/users/0xd0/gists{/gist_id}","starred_url":"https://api.github.com/users/0xd0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0xd0/subscriptions","organizations_url":"https://api.github.com/users/0xd0/orgs","repos_url":"https://api.github.com/users/0xd0/repos","events_url":"https://api.github.com/users/0xd0/events{/privacy}","received_events_url":"https://api.github.com/users/0xd0/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-10T20:39:07Z","updated_at":"2016-10-11T02:04:00Z","closed_at":null,"body":"Trying to set the file permissions for the osqueryd.results.log file.  Initially attempted to set to 644 (-rw-r--r--) by setting the logger_mode value within osquery.conf.  Instead, I get 204 (--w----r-T).  If I set the mode to 420, I get the correct file permissions.  This seems to be a decimal/octal conversion error.  Perhaps this is correct behaviour but looking at the documentation would seem to be incorrect then.\r\n\r\nThanks\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/facebook/osquery/issues/comments/252792245","html_url":"https://github.com/facebook/osquery/issues/2609#issuecomment-252792245","issue_url":"https://api.github.com/repos/facebook/osquery/issues/2609","id":252792245,"user":{"login":"theopolis","id":981645,"avatar_url":"https://avatars.githubusercontent.com/u/981645?v=3","gravatar_id":"","url":"https://api.github.com/users/theopolis","html_url":"https://github.com/theopolis","followers_url":"https://api.github.com/users/theopolis/followers","following_url":"https://api.github.com/users/theopolis/following{/other_user}","gists_url":"https://api.github.com/users/theopolis/gists{/gist_id}","starred_url":"https://api.github.com/users/theopolis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theopolis/subscriptions","organizations_url":"https://api.github.com/users/theopolis/orgs","repos_url":"https://api.github.com/users/theopolis/repos","events_url":"https://api.github.com/users/theopolis/events{/privacy}","received_events_url":"https://api.github.com/users/theopolis/received_events","type":"User","site_admin":false},"created_at":"2016-10-11T02:04:00Z","updated_at":"2016-10-11T02:04:00Z","body":"Right, the documentation is confusing:\r\n```\r\n--logger_mode=640\r\n\r\nFile mode for output log files (provided as an octal string). Note that this affects both the query result log and the status logs. Warning: If run as root, log files may contain sensitive information!\r\n```\r\n\r\nThe example value it shows suggests decimal. Mind changing this here: https://github.com/facebook/osquery/blob/master/docs/wiki/installation/cli-flags.md"}}
{"actor":{"display_login":"theopolis"}}