osquery-1/specs/darwin/authorization_mechanisms.table
Teddy Reed b28c4d8d0f Introduce table options (#2101)
Table options includes a change to the Registry::call API for TablePlugins.
When requesting route information or the 'columns' action, a new 'op' key is included.
2016-05-18 12:23:52 -07:00

16 lines
761 B
Plaintext

table_name("authorization_mechanisms")
description("OS X Authorization mechanisms database.")
schema([
Column("label", TEXT, "Label of the authorization right", index=True),
Column("plugin", TEXT, "Authorization plugin name"),
Column("mechanism", TEXT, "Name of the mechanism that will be called"),
Column("privileged", TEXT, "If privileged it will run as root, else as an anonymous user"),
Column("entry", TEXT, "The whole string entry"),
])
implementation("system/darwin/authorization_mechanisms@genAuthorizationMechanisms")
examples([
"select * from authorization_mechanisms;",
"select * from authorization_mechanisms where label = 'system.login.console';",
"select * from authorization_mechanisms where label = 'authenticate';"
])