mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 02:18:53 +00:00
dd9fa25d78
There are 3 new options that control how files are read: --read_max: controls the maximum size, in bytes, for file reads. If a file is larger than `read_max` the read will fail. --read_user_max: similar to `read_max` but applies additional limitations to user-controlled files. --read_user_links: a boolean control to enable/disable following symlinks for user-controlled files. Important highlights: If files exceed the configured max, those reads will fail. The `read_max` will override `read_user_max` if it is set lower. A default integer value of `0` will disable the limitations. The default `read_max` is set to 50M and the default `read_user_max` is 10M. |
||
---|---|---|
.. | ||
osquery |