Skip to content

MacOS Tanium executor doesn't work #2768

Open
@impolitepanda

Description

@impolitepanda

Description

After having installed the Tanium Client to use it as an agent in OpenBAS, it doesn't seem possible to send payloads through openbas to it.

Environment

  1. OS: MacOS
  2. OpenBAS version: 1.14
  3. OpenBAS client: 1.14
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Install TaniumClient on MacOS by following documentation from Tanium (Shared Services -> Client Management -> Install the Tanium Client externally)
  2. Make sure OpenBAS is configured to use Tanium correctly (application.properties data filled in) and that the TaniumClient is registered on your mac
  3. Through Tanium UI: send payload (select your mac -> Deploy Action -> Select OpenBas Unix package and send a command: it should work
  4. Through OpenBAS: launch an atomic test on your mac asset: it will not work

Expected Output

Payload should be executed on macos as well

Actual Output

Nothing

Additional information

By default, Tanium Client is installed in /Library/Tanium/TaniumClient.
Logs are available in /Library/Tanium/TaniumClient/Logs
action-history0.txt log is the best one to check that an action has been performed. Action IDs can be matched with Tanium's UI Administration -> Action History

Screenshots (optional)

Metadata

Metadata

Assignees

Labels

buguse for describing something not working as expectedtechnical improvementTechnical refactor or improvement is needed

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions