osquery-1/specs/darwin/alf.table
2016-09-13 20:37:31 -07:00

16 lines
742 B
Plaintext

table_name("alf")
description("OS X application layer firewall (ALF) service details.")
schema([
Column("allow_signed_enabled", INTEGER, "1 If allow signed mode is enabled else 0"),
Column("firewall_unload", INTEGER, "1 If firewall unloading enabled else 0"),
Column("global_state", INTEGER, "1 If the firewall start by default else 0"),
Column("logging_enabled", INTEGER, "1 If logging mode is enabled else 0"),
Column("logging_option", INTEGER, "Firewall logging option"),
Column("stealth_enabled", INTEGER, "1 If stealth mode is enabled else 0"),
Column("version", TEXT, "Application Layer Firewall version"),
])
implementation("firewall@genALF")
fuzz_paths([
"/Library/Preferences/com.apple.alf.plist",
])