mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
763f4e9437
This commit bumps the third-party SQLite to the 3.14.0 pre-release (18:59). With 3.14.0 the LIKE and EQUALS constraint operators may be mixed within a query. Previously these would fail to produce a valid set. As part of the support, each virtual table should choose to bypass rowid-based deduplication using the new "WITHOUT ROWID" create table epilog. This will be appended to the schema if the table defines a PRIMARY KEY using index=True.
20 lines
794 B
Plaintext
20 lines
794 B
Plaintext
table_name("users")
|
|
description("Local system users.")
|
|
schema([
|
|
Column("uid", BIGINT, "User ID", index=True),
|
|
Column("gid", BIGINT, "Group ID (unsigned)"),
|
|
Column("uid_signed", BIGINT, "User ID as int64 signed (Apple)"),
|
|
Column("gid_signed", BIGINT, "Default group ID as int64 signed (Apple)"),
|
|
Column("username", TEXT, "Username"),
|
|
Column("description", TEXT, "Optional user description"),
|
|
Column("directory", TEXT, "User's home directory"),
|
|
Column("shell", TEXT, "User's configured default shell"),
|
|
Column("uuid", TEXT, "User's UUID (Apple)"),
|
|
])
|
|
implementation("users@genUsers")
|
|
examples([
|
|
"select * from users where uid = 1000",
|
|
"select * from users where username = 'root'",
|
|
"select count(*) from users u, user_groups ug where u.uid = ug.uid",
|
|
])
|