valitydev/osquery-1
14
0
Fork 0
mirror of https://github.com/valitydev/osquery-1.git synced 2024-11-06 01:25:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fixing the mixed line-endings causing PyAST error (#5645)

Browse Source
This commit is contained in:
Alex 2019-07-18 20:10:30 -07:00 committed by Teddy Reed
parent 37caa44787
commit f98403fcfc
1 changed files with 23 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

46
specs/groups.table
View File

@ -1,23 +1,23 @@
table_name("groups")
description("Local system groups.")
schema([
Column("gid", BIGINT, "Unsigned int64 group ID", index=True),
Column("gid_signed", BIGINT, "A signed int64 version of gid"),
Column("groupname", TEXT, "Canonical local group name"),
])
extended_schema(WINDOWS, [
Column("group_sid", TEXT, "Unique group ID", index=True),
Column("comment", TEXT, "Remarks or comments associated with the group"),
])
extended_schema(DARWIN, [
Column("is_hidden", INTEGER, "IsHidden attribute set in OpenDirectory"),
])
implementation("groups@genGroups")
examples([
"select * from groups where gid = 0",
# Group/user_groups is not JOIN optimized
#"select g.groupname, ug.uid from groups g, user_groups ug where g.gid = ug.gid",
# The relative group ID, or RID, is used by osquery as the "gid"
# For Windows, "gid" and "gid_signed" will always be the same.
])
table_name("groups")
description("Local system groups.")
schema([
Column("gid", BIGINT, "Unsigned int64 group ID", index=True),
Column("gid_signed", BIGINT, "A signed int64 version of gid"),
Column("groupname", TEXT, "Canonical local group name"),
])
extended_schema(WINDOWS, [
Column("group_sid", TEXT, "Unique group ID", index=True),
Column("comment", TEXT, "Remarks or comments associated with the group"),
])
extended_schema(DARWIN, [
Column("is_hidden", INTEGER, "IsHidden attribute set in OpenDirectory"),
])
implementation("groups@genGroups")
examples([
"select * from groups where gid = 0",
# Group/user_groups is not JOIN optimized
#"select g.groupname, ug.uid from groups g, user_groups ug where g.gid = ug.gid",
# The relative group ID, or RID, is used by osquery as the "gid"
# For Windows, "gid" and "gid_signed" will always be the same.
])