Feature Request: Ability to enable/disable features in osctrl and osquery

[javuto]

Current state

Right now osctrl is expected to be used to manage osquery for logging, configuration, on-demand queries and file carves. Those endpoints are exposed in osctrl-tls and the osquery flags for the one-liners and installation packages are created by default with all of them enabled.

Proposed change

If the osctrl functionality can be enabled or disabled on demand, which leads to more functionality being enabled or disabled in osquery, less infrastructure is exposed, the operational complexity of osctrl is reduced and it will be a more configurable solution. In osquery terms they are called plugins and running osqueryi --help has some information.

Impact

• Adding configuration parameters for osctrl-tls so endpoints can be ran based on those parameters.
• Adding configuration parameters for osctrl-admin so functionality can be disabled.