osquery-1/specs/darwin/sandboxes.table
Teddy Reed c2be670806 Table results caching
1. Table implementations (spec files) can mark the table as 'cachable'.
2. Cached results depend on the shortest/quickest interval of scheduled
queries that act on results of the table.
3. The table API generator blocks caching on index/additional/required
table column options.
2015-11-14 15:57:23 -08:00

13 lines
556 B
Plaintext

table_name("sandboxes")
description("OS X application sandboxes container details.")
schema([
Column("label", TEXT, "UTI-format bundle or label ID"),
Column("user", TEXT, "Sandbox owner"),
Column("enabled", INTEGER, "Application sandboxings enabled on container"),
Column("build_id", TEXT, "Sandbox-specific identifier"),
Column("bundle_path", TEXT, "Application bundle used by the sandbox"),
Column("path", TEXT, "Path to sandbox container directory"),
])
attributes(cachable=True)
implementation("sandboxes@genSandboxContainers")