osquery-1/specs/darwin/keychain_items.table
Teddy Reed 763f4e9437 Use SQLite 3.14.0 to support LIKE and EQUALS (#2137)
This commit bumps the third-party SQLite to the 3.14.0 pre-release (18:59).
With 3.14.0 the LIKE and EQUALS constraint operators may be mixed within a
query. Previously these would fail to produce a valid set.

As part of the support, each virtual table should choose to bypass rowid-based
deduplication using the new "WITHOUT ROWID" create table epilog. This will
be appended to the schema if the table defines a PRIMARY KEY using index=True.
2016-06-06 09:36:53 -07:00

14 lines
565 B
Plaintext

table_name("keychain_items")
description("Generic details about keychain items")
schema([
Column("label", TEXT, "Generic item name"),
Column("description", TEXT, "Optional item description"),
Column("comment", TEXT, "Optional keychain comment"),
Column("created", TEXT, "Data item was created"),
Column("modified", TEXT, "Date of last modification"),
Column("type", TEXT, "Keychain item type (class)"),
Column("path", TEXT, "Path to keychain containing item",
additional=True),
])
implementation("keychain_items@genKeychainItems")