Skip to content

Instantly share code, notes, and snippets.

@Saluki

Saluki/container-osquery_users.sql

Created January 25, 2019 14:22
Show Gist options
  • Save Saluki/62dba1c692597c0443b5b48d51b2c278 to your computer and use it in GitHub Desktop.
Save Saluki/62dba1c692597c0443b5b48d51b2c278 to your computer and use it in GitHub Desktop.
Download ZIP
MEDIUM - Container OSQuery - Docker users
Raw
container-osquery_users.sql
-- See users who can access the Docker daemon
SELECT u.username
FROM user_groups ug
LEFT JOIN users u ON u.uid=ug.uid
WHERE ug.gid IN (
SELECT gid FROM groups WHERE groupname="docker"
);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment