osquery-1/specs/groups.table

table_name("groups")
description("Local system groups.")
schema([
    Column("gid", BIGINT, "Unsigned int64 group ID"),
    Column("gid_signed", BIGINT, "A signed int64 version of gid"),
    Column("groupname", TEXT, "Canonical local group name"),
])
implementation("groups@genGroups")
examples([
  "select * from groups where gid = 0",
  # Group/user_groups is not JOIN optimized
  #"select g.groupname, ug.uid from groups g, user_groups ug where g.gid = ug.gid",
])
Adding groups vtable and refactoring users 2014-10-10 22:09:14 +00:00			`table_name("groups")`
Add more table descriptions for API generation 2015-02-09 01:40:35 +00:00			`description("Local system groups.")`
Adding groups vtable and refactoring users 2014-10-10 22:09:14 +00:00			`schema([`
Add more table descriptions for API generation 2015-02-09 01:40:35 +00:00			`Column("gid", BIGINT, "Unsigned int64 group ID"),`
			`Column("gid_signed", BIGINT, "A signed int64 version of gid"),`
			`Column("groupname", TEXT, "Canonical local group name"),`
Adding groups vtable and refactoring users 2014-10-10 22:09:14 +00:00			`])`
Removing old code for generating virtual tables 2014-10-14 04:58:26 +00:00			`implementation("groups@genGroups")`
Move specs to a top-level path, add query examples 1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds. 2015-06-01 22:53:52 +00:00			`examples([`
			`"select * from groups where gid = 0",`
			`# Group/user_groups is not JOIN optimized`
			`#"select g.groupname, ug.uid from groups g, user_groups ug where g.gid = ug.gid",`
			`])`