# Copyright (c) 2014-present, Facebook, Inc. # All rights reserved. # # This source code is licensed as defined on the LICENSE file found in the # root directory of this source tree. load("//tools/build_defs/oss/osquery:codegen.bzl", "osquery_gentable_cxx_library") load("//tools/build_defs/oss/osquery:native.bzl", "osquery_filegroup", "osquery_target") osquery_filegroup( name = "specs", srcs = glob( [ "**/*.table", ], ), ) osquery_gentable_cxx_library( name = "tables", link_whole = True, platform_spec_files = [ ( "arp_cache.table", "linux,macos,windows", ), ( "atom_packages.table", "linux,macos", ), ( "darwin/account_policy_data.table", "macos", ), ( "darwin/ad_config.table", "macos", ), ( "darwin/alf.table", "macos", ), ( "darwin/alf_exceptions.table", "macos", ), ( "darwin/alf_explicit_auths.table", "macos", ), ( "darwin/app_schemes.table", "macos", ), ( "darwin/apps.table", "macos", ), ( "darwin/asl.table", "macos", ), ( "darwin/authorization_mechanisms.table", "macos", ), ( "darwin/authorizations.table", "macos", ), ( "darwin/battery.table", "macos", ), ( "darwin/browser_plugins.table", "macos", ), ( "darwin/crashes.table", "macos", ), ( "darwin/cups_destinations.table", "macos", ), ( "darwin/cups_jobs.table", "macos", ), ( "darwin/device_firmware.table", "macos", ), ( "darwin/disk_events.table", "macos", ), ( "darwin/event_taps.table", "macos", ), ( "darwin/extended_attributes.table", "macos", ), ( "darwin/fan_speed_sensors.table", "macos", ), ( "darwin/gatekeeper.table", "macos", ), ( "darwin/gatekeeper_approved_apps.table", "macos", ), ( "darwin/homebrew_packages.table", "macos", ), ( "darwin/ibridge_info.table", "macos", ), ( "darwin/iokit_devicetree.table", "macos", ), ( "darwin/iokit_registry.table", "macos", ), ( "darwin/kernel_extensions.table", "macos", ), ( "darwin/kernel_panics.table", "macos", ), ( "darwin/keychain_acls.table", "macos", ), ( "darwin/keychain_items.table", "macos", ), ( "darwin/launchd.table", "macos", ), ( "darwin/launchd_overrides.table", "macos", ), ( "darwin/managed_policies.table", "macos", ), ( "darwin/mdfind.table", "macos", ), ( "darwin/nfs_shares.table", "macos", ), ( "darwin/nvram.table", "macos", ), ( "darwin/package_bom.table", "macos", ), ( "darwin/package_install_history.table", "macos", ), ( "darwin/package_receipts.table", "macos", ), ( "darwin/plist.table", "macos", ), ( "darwin/power_sensors.table", "macos", ), ( "darwin/preferences.table", "macos", ), ( "darwin/quicklook_cache.table", "macos", ), ( "darwin/running_apps.table", "macos", ), ( "darwin/safari_extensions.table", "macos", ), ( "darwin/sandboxes.table", "macos", ), ( "darwin/shared_folders.table", "macos", ), ( "darwin/sharing_preferences.table", "macos", ), ( "darwin/signature.table", "macos", ), ( "darwin/sip_config.table", "macos", ), ( "darwin/smc_keys.table", "macos", ), ( "darwin/temperature_sensors.table", "macos", ), ( "darwin/time_machine_backups.table", "macos", ), ( "darwin/time_machine_destinations.table", "macos", ), ( "darwin/user_interaction_events.table", "macos", ), ( "darwin/virtual_memory_info.table", "macos", ), ( "darwin/wifi_networks.table", "macos", ), ( "darwin/wifi_scan.table", "macos", ), ( "darwin/wifi_status.table", "macos", ), ( "darwin/xprotect_entries.table", "macos", ), ( "darwin/xprotect_meta.table", "macos", ), ( "darwin/xprotect_reports.table", "macos", ), ( "freebsd/fbsd_kmods.table", "freebsd", ), ( "freebsd/pkg_packages.table", "freebsd", ), ( "linux/selinux_events.table", "linux", ), ( "linux/socket_events.table", "linux", ), ( "linux/elf_symbols.table", "linux", ), ( "linux/portage_use.table", "linux", ), ( "linux/rpm_package_files.table", "linux", ), ( "linux/shared_memory.table", "linux", ), ( "linux/iptables.table", "linux", ), ( "linux/portage_keywords.table", "linux", ), ( "linux/elf_segments.table", "linux", ), ( "linux/md_devices.table", "linux", ), ( "linux/process_namespaces.table", "linux", ), ( "linux/syslog_events.table", "linux", ), ( "linux/rpm_packages.table", "linux", ), ( "linux/portage_packages.table", "linux", ), ( "linux/process_file_events.table", "linux", ), ( "linux/md_drives.table", "linux", ), ( "linux/ec2_instance_tags.table", "linux", ), ( "linux/npm_packages.table", "linux", ), ( "linux/elf_info.table", "linux", ), ( "linux/md_personalities.table", "linux", ), ( "linux/kernel_modules.table", "linux", ), ( "linux/shadow.table", "linux", ), ( "linux/memory_info.table", "linux", ), ( "linux/msr.table", "linux", ), ( "linux/memory_map.table", "linux", ), ( "linux/deb_packages.table", "linux", ), ( "linux/elf_dynamic.table", "linux", ), ( "linux/ec2_instance_metadata.table", "linux", ), ( "linux/elf_sections.table", "linux", ), ( "linwin/intel_me_info.table", "linux,windows", ), ( "lldpd/lldp_neighbors.table", "linux,macos,freebsd", ), ( "kernel_info.table", "linux,macos,windows", ), ( "macwin/certificates.table", "macos,windows", ), ( "macwin/startup_items.table", "macos,windows", ), ( "posix/acpi_tables.table", "linux,macos", ), ( "posix/apt_sources.table", "linux,macos,freebsd", ), ( "posix/augeas.table", "linux,macos,freebsd", ), ( "posix/authorized_keys.table", "linux,macos,freebsd", ), ( "posix/block_devices.table", "linux,macos", ), ( "posix/cpu_time.table", "linux,macos,freebsd", ), ( "posix/crontab.table", "linux,macos,freebsd", ), ( "posix/disk_encryption.table", "linux,macos", ), ( "posix/dns_resolvers.table", "linux,macos,freebsd", ), ( "posix/docker_container_labels.table", "linux,macos,freebsd", ), ( "posix/docker_container_mounts.table", "linux,macos,freebsd", ), ( "posix/docker_container_networks.table", "linux,macos,freebsd", ), ( "posix/docker_container_ports.table", "linux,macos,freebsd", ), ( "posix/docker_container_processes.table", "linux,macos,freebsd", ), ( "posix/docker_container_stats.table", "linux,macos,freebsd", ), ( "posix/docker_containers.table", "linux,macos,freebsd", ), ( "posix/docker_image_labels.table", "linux,macos,freebsd", ), ( "posix/docker_images.table", "linux,macos,freebsd", ), ( "posix/docker_info.table", "linux,macos,freebsd", ), ( "posix/docker_network_labels.table", "linux,macos,freebsd", ), ( "posix/docker_networks.table", "linux,macos,freebsd", ), ( "posix/docker_version.table", "linux,macos,freebsd", ), ( "posix/docker_volume_labels.table", "linux,macos,freebsd", ), ( "posix/docker_volumes.table", "linux,macos,freebsd", ), ( "posix/file_events.table", "linux,macos", ), ( "posix/firefox_addons.table", "linux,macos,freebsd", ), ( "posix/hardware_events.table", "linux,macos", ), ( "posix/interface_ipv6.table", "linux,macos,freebsd", ), ( "posix/known_hosts.table", "linux,macos,freebsd", ), ( "posix/last.table", "linux,macos,freebsd", ), ( "posix/load_average.table", "linux,macos,freebsd", ), ( "posix/magic.table", "linux,macos,freebsd", ), ( "posix/memory_array_mapped_addresses.table", "linux,macos", ), ( "posix/memory_arrays.table", "linux,macos", ), ( "posix/memory_device_mapped_addresses.table", "linux,macos", ), ( "posix/memory_devices.table", "linux,macos", ), ( "posix/memory_error_info.table", "linux,macos", ), ( "posix/mounts.table", "linux,macos,freebsd", ), ( "posix/oem_strings.table", "linux,macos", ), ( "posix/opera_extensions.table", "linux,macos,freebsd", ), ( "posix/pci_devices.table", "linux,macos", ), ( "posix/process_envs.table", "linux,macos,freebsd", ), ( "posix/process_events.table", "linux,macos,freebsd", ), ( "posix/process_open_files.table", "linux,macos,freebsd", ), ( "posix/prometheus_metrics.table", "linux,macos,freebsd", ), ( "posix/shell_history.table", "linux,macos,freebsd", ), ( "posix/smbios_tables.table", "linux,macos", ), ( "posix/ssh_configs.table", "linux,macos,freebsd", ), ( "posix/sudoers.table", "linux,macos,freebsd", ), ( "posix/suid_bin.table", "linux,macos,freebsd", ), ( "posix/system_controls.table", "linux,macos,freebsd", ), ( "posix/ulimit_info.table", "linux,macos,freebsd", ), ( "posix/usb_devices.table", "linux,macos", ), ( "posix/user_events.table", "linux,macos,freebsd", ), ( "posix/user_ssh_keys.table", "linux,macos,freebsd", ), ( "posix/yum_sources.table", "linux,macos,freebsd", ), ( "sleuthkit/device_file.table", "linux,macos,freebsd", ), ( "sleuthkit/device_hash.table", "linux,macos,freebsd", ), ( "sleuthkit/device_partitions.table", "linux,macos,freebsd", ), ( "smart/smart_drive_info.table", "linux,macos", ), ( "user_groups.table", "linux,macos,windows", ), ( "windows/bitlocker_info.table", "windows", ), ( "windows/logon_sessions.table", "windows", ), ( "windows/ntfs_acl_permissions.table", "windows", ), ( "windows/scheduled_tasks.table", "windows", ), ( "windows/windows_crashes.table", "windows", ), ( "windows/services.table", "windows", ), ( "windows/kva_speculative_info.table", "windows", ), ( "windows/patches.table", "windows", ), ( "windows/ie_extensions.table", "windows", ), ( "windows/shared_resources.table", "windows", ), ( "windows/wmi_cli_event_consumers.table", "windows", ), ( "windows/video_info.table", "windows", ), ( "windows/registry.table", "windows", ), ( "windows/drivers.table", "windows", ), ( "windows/disk_info.table", "windows", ), ( "windows/chocolatey_packages.table", "windows", ), ( "windows/connectivity.table", "windows", ), ( "windows/logical_drives.table", "windows", ), ( "windows/ntdomains.table", "windows", ), ( "windows/authenticode.table", "windows", ), ( "windows/pipes.table", "windows", ), ( "windows/wmi_filter_consumer_binding.table", "windows", ), ( "windows/wmi_event_filters.table", "windows", ), ( "windows/windows_events.table", "windows", ), ( "windows/appcompat_shims.table", "windows", ), ( "windows/ntfs_journal_events.table", "windows", ), ( "windows/powershell_events.table", "windows", ), ( "windows/winbaseobj.table", "windows", ), ( "windows/cpu_info.table", "windows", ), ( "windows/wmi_bios_info.table", "windows", ), ( "windows/programs.table", "windows", ), ( "windows/wmi_script_event_consumers.table", "windows", ), ( "windows/physical_disk_performance.table", "windows", ), ( "windows/autoexec.table", "windows", ), ( "windows/default_environment.table", "windows", ), ( "yara/yara_events.table", "linux,macos", ), ( "yara/yara.table", "linux,macos,freebsd", ), ( "windows/windows_security_products.table", "windows", ), ], spec_files = [ "azure_instance_metadata.table", "azure_instance_tags.table", "carbon_black_info.table", "carves.table", "chrome_extensions.table", "cpuid.table", "curl.table", "curl_certificate.table", "etc_hosts.table", "etc_protocols.table", "etc_services.table", "groups.table", "hash.table", "interface_addresses.table", "interface_details.table", "listening_ports.table", "logged_in_users.table", "os_version.table", "platform_info.table", "process_memory_map.table", "process_open_sockets.table", "processes.table", "python_packages.table", "routes.table", "system_info.table", "uptime.table", "users.table", "utility/file.table", "utility/osquery_events.table", "utility/osquery_extensions.table", "utility/osquery_flags.table", "utility/osquery_info.table", "utility/osquery_packs.table", "utility/osquery_registry.table", "utility/osquery_schedule.table", "utility/time.table", ], spec_location = "$(location {})".format(osquery_target("specs:specs")), visibility = ["PUBLIC"], deps = [ osquery_target("osquery/tables:table_implementations"), ], )