mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 09:58:54 +00:00
b28c4d8d0f
Table options includes a change to the Registry::call API for TablePlugins. When requesting route information or the 'columns' action, a new 'op' key is included.
15 lines
747 B
Plaintext
15 lines
747 B
Plaintext
table_name("keychain_acls")
|
|
description("Applications that have ACL entries in the keychain.")
|
|
schema([
|
|
Column("keychain_path", TEXT, "The path of the keychain"),
|
|
Column("authorizations", TEXT, "A space delimited set of authorization attributes"),
|
|
Column("path", TEXT, "The path of the authorized application"),
|
|
Column("description", TEXT, "The description included with the ACL entry"),
|
|
Column("label", TEXT, "An optional label tag that may be included with the keychain entry"),
|
|
])
|
|
attributes(cacheable=True)
|
|
implementation("keychain_acl@genKeychainACLApps")
|
|
examples([
|
|
"select label, description, authorizations, path, count(path) as c from keychain_acls where label != '' and path != '' group by label having c > 1;",
|
|
])
|