osquery-1/specs/BUCK

#  Copyright (c) 2014-present, Facebook, Inc.
#  All rights reserved.
#
#  This source code is licensed as defined on the LICENSE file found in the
#  root directory of this source tree.

load("//tools/build_defs/oss/osquery:codegen.bzl", "osquery_gentable_cxx_library")
load("//tools/build_defs/oss/osquery:native.bzl", "osquery_filegroup", "osquery_target")

osquery_filegroup(
    name = "specs",
    srcs = glob(
        [
            "**/*.table",
        ],
    ),
)

osquery_gentable_cxx_library(
    name = "tables",
    link_whole = True,
    platform_spec_files = [
        (
            "arp_cache.table",
            "linux,macos,windows",
        ),
        (
            "atom_packages.table",
            "linux,macos",
        ),
        (
            "darwin/account_policy_data.table",
            "macos",
        ),
        (
            "darwin/ad_config.table",
            "macos",
        ),
        (
            "darwin/alf.table",
            "macos",
        ),
        (
            "darwin/alf_exceptions.table",
            "macos",
        ),
        (
            "darwin/alf_explicit_auths.table",
            "macos",
        ),
        (
            "darwin/alf_services.table",
            "macos",
        ),
        (
            "darwin/app_schemes.table",
            "macos",
        ),
        (
            "darwin/apps.table",
            "macos",
        ),
        (
            "darwin/asl.table",
            "macos",
        ),
        (
            "darwin/authorization_mechanisms.table",
            "macos",
        ),
        (
            "darwin/authorizations.table",
            "macos",
        ),
        (
            "darwin/battery.table",
            "macos",
        ),
        (
            "darwin/browser_plugins.table",
            "macos",
        ),
        (
            "darwin/crashes.table",
            "macos",
        ),
        (
            "darwin/cups_destinations.table",
            "macos",
        ),
        (
            "darwin/cups_jobs.table",
            "macos",
        ),
        (
            "darwin/device_firmware.table",
            "macos",
        ),
        (
            "darwin/disk_events.table",
            "macos",
        ),
        (
            "darwin/event_taps.table",
            "macos",
        ),
        (
            "darwin/extended_attributes.table",
            "macos",
        ),
        (
            "darwin/fan_speed_sensors.table",
            "macos",
        ),
        (
            "darwin/gatekeeper.table",
            "macos",
        ),
        (
            "darwin/gatekeeper_approved_apps.table",
            "macos",
        ),
        (
            "darwin/homebrew_packages.table",
            "macos",
        ),
        (
            "darwin/iokit_devicetree.table",
            "macos",
        ),
        (
            "darwin/iokit_registry.table",
            "macos",
        ),
        (
            "darwin/kernel_extensions.table",
            "macos",
        ),
        (
            "darwin/kernel_panics.table",
            "macos",
        ),
        (
            "darwin/keychain_acls.table",
            "macos",
        ),
        (
            "darwin/keychain_items.table",
            "macos",
        ),
        (
            "darwin/launchd.table",
            "macos",
        ),
        (
            "darwin/launchd_overrides.table",
            "macos",
        ),
        (
            "darwin/managed_policies.table",
            "macos",
        ),
        (
            "darwin/mdfind.table",
            "macos",
        ),
        (
            "darwin/nfs_shares.table",
            "macos",
        ),
        (
            "darwin/nvram.table",
            "macos",
        ),
        (
            "darwin/package_bom.table",
            "macos",
        ),
        (
            "darwin/package_install_history.table",
            "macos",
        ),
        (
            "darwin/package_receipts.table",
            "macos",
        ),
        (
            "darwin/plist.table",
            "macos",
        ),
        (
            "darwin/power_sensors.table",
            "macos",
        ),
        (
            "darwin/preferences.table",
            "macos",
        ),
        (
            "darwin/quicklook_cache.table",
            "macos",
        ),
        (
            "darwin/running_apps.table",
            "macos",
        ),
        (
            "darwin/safari_extensions.table",
            "macos",
        ),
        (
            "darwin/sandboxes.table",
            "macos",
        ),
        (
            "darwin/shared_folders.table",
            "macos",
        ),
        (
            "darwin/sharing_preferences.table",
            "macos",
        ),
        (
            "darwin/signature.table",
            "macos",
        ),
        (
            "darwin/sip_config.table",
            "macos",
        ),
        (
            "darwin/smc_keys.table",
            "macos",
        ),
        (
            "darwin/temperature_sensors.table",
            "macos",
        ),
        (
            "darwin/time_machine_backups.table",
            "macos",
        ),
        (
            "darwin/time_machine_destinations.table",
            "macos",
        ),
        (
            "darwin/user_interaction_events.table",
            "macos",
        ),
        (
            "darwin/virtual_memory_info.table",
            "macos",
        ),
        (
            "darwin/wifi_networks.table",
            "macos",
        ),
        (
            "darwin/wifi_scan.table",
            "macos",
        ),
        (
            "darwin/wifi_status.table",
            "macos",
        ),
        (
            "darwin/xprotect_entries.table",
            "macos",
        ),
        (
            "darwin/xprotect_meta.table",
            "macos",
        ),
        (
            "darwin/xprotect_reports.table",
            "macos",
        ),
        (
            "freebsd/fbsd_kmods.table",
            "freebsd",
        ),
        (
            "freebsd/pkg_packages.table",
            "freebsd",
        ),
        (
            "linux/selinux_events.table",
            "linux",
        ),
        (
            "linux/socket_events.table",
            "linux",
        ),
        (
            "linux/elf_symbols.table",
            "linux",
        ),
        (
            "linux/portage_use.table",
            "linux",
        ),
        (
            "linux/rpm_package_files.table",
            "linux",
        ),
        (
            "linux/shared_memory.table",
            "linux",
        ),
        (
            "linux/iptables.table",
            "linux",
        ),
        (
            "linux/portage_keywords.table",
            "linux",
        ),
        (
            "linux/elf_segments.table",
            "linux",
        ),
        (
            "linux/md_devices.table",
            "linux",
        ),
        (
            "linux/process_namespaces.table",
            "linux",
        ),
        (
            "linux/syslog_events.table",
            "linux",
        ),
        (
            "linux/rpm_packages.table",
            "linux",
        ),
        (
            "linux/portage_packages.table",
            "linux",
        ),
        (
            "linux/process_file_events.table",
            "linux",
        ),
        (
            "linux/md_drives.table",
            "linux",
        ),
        (
            "linux/ec2_instance_tags.table",
            "linux",
        ),
        (
            "linux/npm_packages.table",
            "linux",
        ),
        (
            "linux/elf_info.table",
            "linux",
        ),
        (
            "linux/md_personalities.table",
            "linux",
        ),
        (
            "linux/kernel_modules.table",
            "linux",
        ),
        (
            "linux/shadow.table",
            "linux",
        ),
        (
            "linux/memory_info.table",
            "linux",
        ),
        (
            "linux/msr.table",
            "linux",
        ),
        (
            "linux/memory_map.table",
            "linux",
        ),
        (
            "linux/deb_packages.table",
            "linux",
        ),
        (
            "linux/elf_dynamic.table",
            "linux",
        ),
        (
            "linux/ec2_instance_metadata.table",
            "linux",
        ),
        (
            "linux/kernel_integrity.table",
            "linux",
        ),
        (
            "linux/elf_sections.table",
            "linux",
        ),
        (
            "linwin/intel_me_info.table",
            "linux,windows",
        ),
        (
            "lldpd/lldp_neighbors.table",
            "linux,macos,freebsd",
        ),
        (
            "kernel_info.table",
            "linux,macos,windows",
        ),
        (
            "macwin/certificates.table",
            "macos,windows",
        ),
        (
            "macwin/startup_items.table",
            "macos,windows",
        ),
        (
            "posix/acpi_tables.table",
            "linux,macos",
        ),
        (
            "posix/apt_sources.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/augeas.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/authorized_keys.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/block_devices.table",
            "linux,macos",
        ),
        (
            "posix/cpu_time.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/crontab.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/disk_encryption.table",
            "linux,macos",
        ),
        (
            "posix/dns_resolvers.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_container_labels.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_container_mounts.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_container_networks.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_container_ports.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_container_processes.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_container_stats.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_containers.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_image_labels.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_images.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_info.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_network_labels.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_networks.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_version.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_volume_labels.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/docker_volumes.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/file_events.table",
            "linux,macos",
        ),
        (
            "posix/firefox_addons.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/hardware_events.table",
            "linux,macos",
        ),
        (
            "posix/interface_ipv6.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/known_hosts.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/last.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/load_average.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/magic.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/memory_array_mapped_addresses.table",
            "linux,macos",
        ),
        (
            "posix/memory_arrays.table",
            "linux,macos",
        ),
        (
            "posix/memory_device_mapped_addresses.table",
            "linux,macos",
        ),
        (
            "posix/memory_devices.table",
            "linux,macos",
        ),
        (
            "posix/memory_error_info.table",
            "linux,macos",
        ),
        (
            "posix/mounts.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/oem_strings.table",
            "linux,macos",
        ),
        (
            "posix/opera_extensions.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/pci_devices.table",
            "linux,macos",
        ),
        (
            "posix/process_envs.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/process_events.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/process_open_files.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/prometheus_metrics.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/shell_history.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/smbios_tables.table",
            "linux,macos",
        ),
        (
            "posix/ssh_configs.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/sudoers.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/suid_bin.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/system_controls.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/ulimit_info.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/usb_devices.table",
            "linux,macos",
        ),
        (
            "posix/user_events.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/user_ssh_keys.table",
            "linux,macos,freebsd",
        ),
        (
            "posix/yum_sources.table",
            "linux,macos,freebsd",
        ),
        (
            "sleuthkit/device_file.table",
            "linux,macos,freebsd",
        ),
        (
            "sleuthkit/device_hash.table",
            "linux,macos,freebsd",
        ),
        (
            "sleuthkit/device_partitions.table",
            "linux,macos,freebsd",
        ),
        (
            "smart/smart_drive_info.table",
            "linux,macos",
        ),
        (
            "user_groups.table",
            "linux,macos,windows",
        ),
        (
            "windows/ntfs_acl_permissions.table",
            "windows",
        ),
        (
            "windows/scheduled_tasks.table",
            "windows",
        ),
        (
            "windows/windows_crashes.table",
            "windows",
        ),
        (
            "windows/services.table",
            "windows",
        ),
        (
            "windows/kva_speculative_info.table",
            "windows",
        ),
        (
            "windows/patches.table",
            "windows",
        ),
        (
            "windows/ie_extensions.table",
            "windows",
        ),
        (
            "windows/shared_resources.table",
            "windows",
        ),
        (
            "windows/wmi_cli_event_consumers.table",
            "windows",
        ),
        (
            "windows/video_info.table",
            "windows",
        ),
        (
            "windows/registry.table",
            "windows",
        ),
        (
            "windows/drivers.table",
            "windows",
        ),
        (
            "windows/disk_info.table",
            "windows",
        ),
        (
            "windows/chocolatey_packages.table",
            "windows",
        ),
        (
            "windows/logical_drives.table",
            "windows",
        ),
        (
            "windows/ntdomains.table",
            "windows",
        ),
        (
            "windows/authenticode.table",
            "windows",
        ),
        (
            "windows/pipes.table",
            "windows",
        ),
        (
            "windows/wmi_filter_consumer_binding.table",
            "windows",
        ),
        (
            "windows/wmi_event_filters.table",
            "windows",
        ),
        (
            "windows/windows_events.table",
            "windows",
        ),
        (
            "windows/appcompat_shims.table",
            "windows",
        ),
        (
            "windows/powershell_events.table",
            "windows",
        ),
        (
            "windows/winbaseobj.table",
            "windows",
        ),
        (
            "windows/cpu_info.table",
            "windows",
        ),
        (
            "windows/wmi_bios_info.table",
            "windows",
        ),
        (
            "windows/programs.table",
            "windows",
        ),
        (
            "windows/wmi_script_event_consumers.table",
            "windows",
        ),
        (
            "windows/physical_disk_performance.table",
            "windows",
        ),
        (
            "windows/autoexec.table",
            "windows",
        ),
        (
            "yara/yara_events.table",
            "linux,macos",
        ),
        (
            "yara/yara.table",
            "linux,macos,freebsd",
        ),
    ],
    spec_files = [
        "carbon_black_info.table",
        "carves.table",
        "chrome_extensions.table",
        "cpuid.table",
        "curl.table",
        "curl_certificate.table",
        "etc_hosts.table",
        "etc_protocols.table",
        "etc_services.table",
        "groups.table",
        "hash.table",
        "interface_addresses.table",
        "interface_details.table",
        "listening_ports.table",
        "logged_in_users.table",
        "os_version.table",
        "platform_info.table",
        "process_memory_map.table",
        "process_open_sockets.table",
        "processes.table",
        "python_packages.table",
        "routes.table",
        "system_info.table",
        "uptime.table",
        "users.table",
        "utility/file.table",
        "utility/osquery_events.table",
        "utility/osquery_extensions.table",
        "utility/osquery_flags.table",
        "utility/osquery_info.table",
        "utility/osquery_packs.table",
        "utility/osquery_registry.table",
        "utility/osquery_schedule.table",
        "utility/time.table",
    ],
    spec_location = "$(location {})".format(osquery_target("specs:specs")),
    visibility = ["PUBLIC"],
    deps = [
        osquery_target("osquery/tables:table_implementations"),
    ],
)