Manage Binaries Enhancements about grr

[grrrrrrrrr]

Manage Binaries is all new. Fixed.

[mbushkov]

I think this issues was closed too early. "Manage Binaries" was indeed redesigned, but we didn't add an API nor grr_config_updater command to delete old binaries. Reopening this issue.

[pidydx]

Should this get closed and tracked under the datastore management issue? Ultimately the datastore management piece is about being able to delete old stuff whether it is old drivers, installers, hunts, flows, clients, client data, blobs, etc.

[b2az]

Have i missed something?

The ability to remove old/unnecessary binaries

Where/how can i remove binaries, which are listed in "Manage Binaries"?

I repacked the client with another 'Client.name' for obfuscation as described here:
https://github.com/google/grr-doc/blob/master/deploying-grr-clients/protection.md

After testing i deleted the new files from
/usr/share/grr-server/executables/installers/ but they're still listed in the WebUI.

Any help would be appreciated.
Thanks in advance.

[mbushkov]

@b2az , answering your questions. After being repacked your clients got written to GRR datastore. So effectively, even if you delete the files from the /usr/share/grr-server/executables/installers/, they will continue to be visible in the UI, since UI gets them from the datastore. Unfortunately, at the moment, as I mentioned in my previous comment, there's no easy (and documented) way to delete binaries from the datastore. We'll fix that.

[b2az]

@mbushkov , thanks for your fast reply.
I found it out yesterday, after i greped the sqlite files for the process name string, that the binary is saved there and it doesn't have to do anything with the files in the installers folder.

This feature is at least from my sight pretty important, because i want to deploy dozens of differently obfuscated GRR clients in my environment and don't want to bloat up the SQL databases with binaries.

I will look at the process behind the removage of a client as described in:
https://github.com/google/grr-doc/blob/master/maintaining-and-tuning/low-level-maintenance-with-console.md

Thanks for reopening the issue. 👍