in chef/cookbooks/cpe_osquery/resources/cpe_osquery.rb [411:452]
def macos_uninstall
launchd 'com.facebook.osqueryd' do
action :delete
end
[
::File.join(base_bin_path, 'osqueryctl'),
::File.join(base_bin_path, 'osqueryd'),
'/etc/newsyslog.d/com.facebook.osqueryd.conf',
].each do |osquery_file|
file osquery_file do
action :delete
end
end
osqueryi = ::File.join(base_bin_path, 'osqueryi')
if ::File.symlink?(osqueryi)
link osqueryi do
action :delete
end
else
file osqueryi do
action :delete
end
end
%w[
/opt/osquery
/var/osquery
/var/log/osquery
].each do |osquery_dir|
directory osquery_dir do
recursive true
action :delete
end
end
execute '/usr/sbin/pkgutil --forget com.facebook.osquery' do
not_if { shell_out('/usr/sbin/pkgutil --pkg-info com.facebook.osquery').error? }
end
end