mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 09:58:54 +00:00
13 lines
444 B
Plaintext
13 lines
444 B
Plaintext
table_name("gatekeeper_approved_apps")
|
|
description("Gatekeeper apps a user has allowed to run.")
|
|
schema([
|
|
Column("path", TEXT, "Path of executable allowed to run"),
|
|
Column("requirement", TEXT, "Code signing requirement language"),
|
|
Column("ctime", DOUBLE, "Last change time"),
|
|
Column("mtime", DOUBLE, "Last modification time"),
|
|
])
|
|
implementation("gatekeeper@genGateKeeperApprovedApps")
|
|
fuzz_paths([
|
|
"/var/db/SystemPolicy"
|
|
])
|