osquery-1/specs/centos/rpm_package_files.table
Teddy Reed c2be670806 Table results caching
1. Table implementations (spec files) can mark the table as 'cachable'.
2. Cached results depend on the shortest/quickest interval of scheduled
queries that act on results of the table.
3. The table API generator blocks caching on index/additional/required
table column options.
2015-11-14 15:57:23 -08:00

13 lines
604 B
Plaintext

table_name("rpm_package_files")
description("RPM packages that are currently installed on the host system.")
schema([
Column("package", TEXT, "RPM package name", index=True),
Column("path", TEXT, "Path name"),
Column("username", TEXT, "File default username from info DB"),
Column("groupname", TEXT, "File default groupname from info DB"),
Column("mode", TEXT, "File permissions mode from info DB"),
Column("size", BIGINT, "Expected file size in bytes from RPM info DB"),
Column("sha256", TEXT, "SHA256 file digest from RPM info DB"),
])
implementation("@genRpmPackageFiles")