osquery-1/specs/linux/kernel_integrity.table

11 lines
407 B
Plaintext
Raw Normal View History

2014-12-06 21:40:55 +00:00
table_name("kernel_integrity")
description("Various Linux kernel integrity checked attributes.")
2014-12-06 21:40:55 +00:00
schema([
Column("sycall_addr_modified", INTEGER,
"0 or 1, for whether a syscall table pointer is modified"),
Column("text_segment_hash", TEXT,
"Hash value for the kernel's .text memory segment"),
2014-12-06 21:40:55 +00:00
])
attributes(kernel_required=True)
2014-12-06 21:40:55 +00:00
implementation("kernel_integrity@genKernelIntegrity")