mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-08 02:18:53 +00:00
763f4e9437
This commit bumps the third-party SQLite to the 3.14.0 pre-release (18:59). With 3.14.0 the LIKE and EQUALS constraint operators may be mixed within a query. Previously these would fail to produce a valid set. As part of the support, each virtual table should choose to bypass rowid-based deduplication using the new "WITHOUT ROWID" create table epilog. This will be appended to the schema if the table defines a PRIMARY KEY using index=True.
14 lines
625 B
Plaintext
14 lines
625 B
Plaintext
table_name("kernel_extensions")
|
|
description("OS X's kernel extensions, both loaded and within the load search path.")
|
|
schema([
|
|
Column("idx", INTEGER, "Extension load tag or index", index=True),
|
|
Column("refs", INTEGER, "Reference count"),
|
|
Column("size", BIGINT, "Bytes of wired memory used by extension"),
|
|
Column("name", TEXT, "Extension label"),
|
|
Column("version", TEXT, "Extension version"),
|
|
Column("linked_against", TEXT,
|
|
"Indexes of extensions this extension is linked against"),
|
|
Column("path", TEXT, "Optional path to extension bundle"),
|
|
])
|
|
implementation("kextstat@genKernelExtensions")
|