osquery-1/specs/linux/kernel_integrity.table
2015-07-15 23:23:42 -07:00

11 lines
407 B
Plaintext

table_name("kernel_integrity")
description("Various Linux kernel integrity checked attributes.")
schema([
Column("sycall_addr_modified", INTEGER,
"0 or 1, for whether a syscall table pointer is modified"),
Column("text_segment_hash", TEXT,
"Hash value for the kernel's .text memory segment"),
])
attributes(kernel_required=True)
implementation("kernel_integrity@genKernelIntegrity")