osquery-1/specs/groups.table
Teddy Reed a105924804 Move specs to a top-level path, add query examples
1. Example queries will run with an (optional) integration test.
2. Fix bad accesses with OS X package BOMs
3. Move spec files from ./osquery/tables/specs to ./specs
4. Remove server parsers (netlib) from client builds.
2015-06-03 10:39:05 -07:00

14 lines
468 B
Plaintext

table_name("groups")
description("Local system groups.")
schema([
Column("gid", BIGINT, "Unsigned int64 group ID"),
Column("gid_signed", BIGINT, "A signed int64 version of gid"),
Column("groupname", TEXT, "Canonical local group name"),
])
implementation("groups@genGroups")
examples([
"select * from groups where gid = 0",
# Group/user_groups is not JOIN optimized
#"select g.groupname, ug.uid from groups g, user_groups ug where g.gid = ug.gid",
])