mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 01:55:20 +00:00
14 lines
720 B
Plaintext
14 lines
720 B
Plaintext
table_name("keychain_acls")
|
|
description("Applications that have ACL entries in the keychain.")
|
|
schema([
|
|
Column("keychain_path", TEXT, "The path of the keychain"),
|
|
Column("authorizations", TEXT, "A space delimited set of authorization attributes"),
|
|
Column("path", TEXT, "The path of the authorized application"),
|
|
Column("description", TEXT, "The description included with the ACL entry"),
|
|
Column("label", TEXT, "An optional label tag that may be included with the keychain entry"),
|
|
])
|
|
implementation("keychain_acl@genKeychainACLApps")
|
|
examples([
|
|
"select label, description, authorizations, path, count(path) as c from keychain_acls where label != '' and path != '' group by label having c > 1;",
|
|
])
|