mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-07 09:58:54 +00:00
a105924804
1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds.
19 lines
884 B
Plaintext
19 lines
884 B
Plaintext
table_name("shared_memory")
|
|
description("OS shared memory regions.")
|
|
schema([
|
|
Column("shmid", INTEGER, "Shared memory segment ID"),
|
|
Column("owner_uid", BIGINT, "User ID of owning process"),
|
|
Column("creator_uid", BIGINT, "User ID of creator process"),
|
|
Column("pid", BIGINT, "Process ID to last use the segment"),
|
|
Column("creator_pid", BIGINT, "Process ID that created the segment"),
|
|
Column("atime", BIGINT, "Attached time"),
|
|
Column("dtime", BIGINT, "Detached time"),
|
|
Column("ctime", BIGINT, "Changed time"),
|
|
Column("permissions", TEXT, "Memory segment permissions"),
|
|
Column("size", BIGINT, "Size in bytes"),
|
|
Column("attached", INTEGER, "Number of attached processes"),
|
|
Column("status", TEXT, "Destination/attach status"),
|
|
Column("locked", INTEGER, "1 if segment is locked else 0"),
|
|
])
|
|
implementation("shared_memory@genSharedMemory")
|