mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
f8cee672e0
#17309 I added some missing env var replacement tests for policies, queries, etc. - [X] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - [X] Added/updated tests - [X] Manual QA for all new/changed functionality
27 lines
744 B
YAML
27 lines
744 B
YAML
name: Team1
|
|
team_settings:
|
|
path: ./team-settings.yml
|
|
agent_options:
|
|
path: ./agent-options.yml
|
|
controls:
|
|
path: ./controls.yml
|
|
queries:
|
|
- path: ./top.queries.yml
|
|
- path: ./empty.yml
|
|
- name: osquery_info
|
|
query: SELECT * from osquery_info;
|
|
interval: 604800 # 1 week
|
|
platform: darwin,linux,windows,chrome
|
|
min_osquery_version: all
|
|
observer_can_run: false
|
|
automations_enabled: true
|
|
logging: snapshot
|
|
policies:
|
|
- path: ./top.policies.yml
|
|
- path: ./top.policies2.yml
|
|
- path: ./empty.yml
|
|
- name: 😊😊 Failing $POLICY
|
|
platform: linux
|
|
description: This policy should always fail.
|
|
resolution: There is no resolution for this policy.
|
|
query: SELECT 1 FROM osquery_info WHERE start_time < 0;
|