osquery-1/specs/posix/authorized_keys.table

20 lines
635 B
Plaintext

table_name("authorized_keys")
description("A line-delimited authorized_keys table.")
schema([
Column("uid", BIGINT, "The local owner of authorized_keys file",
additional=True),
Column("algorithm",TEXT,"algorithim of key"),
Column("key", TEXT, "parsed authorized keys line", index=True),
Column("key_file", TEXT, "Path to the authorized_keys file", index=True),
ForeignKey(column="uid", table="users"),
])
attributes(user_data=True, no_pkey=True)
implementation("authorized_keys@getAuthorizedKeys")
examples([
"select * from users join authorized_keys using (uid)",
])
fuzz_paths([
"/home",
"/Users",
])