From 9e095abddbf89489f948d74b88967e292f1096f6 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Fri, 3 Dec 2021 17:08:10 -0500 Subject: [PATCH] On the "New policy" page, update default policy (#3192) - Update default policy from "Gatekeeper enabled" to "Is osquery running?" --- frontend/utilities/constants.ts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/frontend/utilities/constants.ts b/frontend/utilities/constants.ts index f8ea919874..c9d1f6f109 100644 --- a/frontend/utilities/constants.ts +++ b/frontend/utilities/constants.ts @@ -81,9 +81,9 @@ export const DEFAULT_QUERY = { export const DEFAULT_POLICY = { id: 1, - name: "Gatekeeper enabled", - query: "SELECT 1 FROM gatekeeper WHERE assessments_enabled = 1;", - description: "Checks if gatekeeper is enabled on macOS devices", + name: "Is osquery running?", + query: "SELECT 1 FROM osquery_info WHERE start_time > 1;", + description: "Checks if the osquery process has started on the host.", author_id: 42, author_name: "John", author_email: "john@example.com",