osquery-1/osquery/tables/CMakeLists.txt

if(APPLE)
  ADD_OSQUERY_OBJCXX_LIBRARY(osquery_tables_objc
    ../core/darwin/NSProcessInfo+PECocoaBackports.mm
    ../core/darwin/NSProcessInfo+PECocoaBackports.h
    ../core/darwin/PECocoaBackportsGlobal.h
    system/darwin/osx_version.mm
    system/darwin/users.mm
    system/darwin/groups.mm
    system/darwin/ca_certs.mm
  )

  ADD_OSQUERY_LIBRARY(osquery_tables_darwin
    events/darwin/passwd_changes.cpp
    events/darwin/hardware_events.cpp
    networking/darwin/listening_ports.cpp
    networking/darwin/routes.cpp
    system/darwin/apps.cpp
    system/darwin/ca_certs_utils.cpp
    system/darwin/firewall.h
    system/darwin/firewall.cpp
    system/darwin/homebrew_packages.cpp
    system/darwin/kextstat.cpp
    system/darwin/launchd.cpp
    system/darwin/mounts.cpp
    system/darwin/nvram.cpp
    system/darwin/processes.cpp
    system/darwin/process_open_files.cpp
    system/darwin/quarantine.cpp
    system/darwin/pci_devices.cpp
    system/darwin/usb_devices.cpp
    system/darwin/startup_items.cpp
    system/darwin/xprotect.cpp
  )

  ADD_OSQUERY_LINK("-framework CoreFoundation")
  ADD_OSQUERY_LINK("-framework Security")
  ADD_OSQUERY_LINK("-framework OpenDirectory")
elseif(FREEBSD)
  ADD_OSQUERY_LIBRARY(osquery_tables_freebsd
    events/freebsd/passwd_changes.cpp
    networking/freebsd/routes.cpp
    system/freebsd/processes.cpp
    system/freebsd/users.cpp
    system/freebsd/groups.cpp
  )
else()
  ADD_OSQUERY_LIBRARY(osquery_tables_linux
    events/linux/passwd_changes.cpp
    events/linux/hardware_events.cpp
    networking/linux/routes.cpp
    networking/linux/socket_inode.cpp
    networking/linux/port_inode.cpp
    networking/linux/arp_cache.cpp
    system/linux/kernel_integrity.cpp
    system/linux/kernel_modules.cpp
    system/linux/processes.cpp
    system/linux/users.cpp
    system/linux/groups.cpp
    system/linux/mounts.cpp
    system/linux/pci_devices.cpp
    system/linux/usb_devices.cpp
    system/linux/block_devices.cpp
  )

  if(CENTOS)
    # CentOS specific tables
    ADD_OSQUERY_LIBRARY(osquery_tables_redhat
      system/linux/rpm_packages.cpp
    )

    ADD_OSQUERY_LINK("rpm")
    ADD_OSQUERY_LINK("rpmio")
  elseif(UBUNTU)
    # Ubuntu specific tables
    ADD_OSQUERY_LIBRARY(osquery_tables_ubuntu
      system/linux/deb_packages.cpp
      system/linux/apt_sources.cpp
    )

    ADD_OSQUERY_LINK("apt-pkg")
    ADD_OSQUERY_LINK("dpkg")
  endif()

  ADD_OSQUERY_LINK("procps" "proc")
  ADD_OSQUERY_LINK("blkid")
  ADD_OSQUERY_LINK("udev")
  ADD_OSQUERY_LINK("uuid")
endif()

ADD_OSQUERY_LIBRARY(osquery_tables
  networking/utils.cpp
  networking/interfaces.cpp
  networking/etc_hosts.cpp
  networking/etc_services.cpp
  system/cpuid.cpp
  system/crontab.cpp
  system/last.cpp
  system/shell_history.cpp
  system/suid_bin.cpp
  system/logged_in_users.cpp
)

ADD_OSQUERY_CORE_LIBRARY(osquery_utility_tables
  utility/time.cpp
  utility/hash.cpp
  utility/file.cpp
  utility/osquery.cpp
)

ADD_OSQUERY_TEST(etc_hosts_tests networking/etc_hosts_tests.cpp TRUE)
if(APPLE)
  ADD_OSQUERY_TEST(apps_tests system/darwin/apps_tests.cpp TRUE)
  ADD_OSQUERY_TEST(ca_certs_tests system/darwin/ca_certs_tests.cpp TRUE)
  ADD_OSQUERY_TEST(firewall_tests system/darwin/firewall_tests.cpp TRUE)
  ADD_OSQUERY_TEST(launchd_tests system/darwin/launchd_tests.cpp TRUE)
endif()