mirror of
https://github.com/valitydev/osquery-1.git
synced 2024-11-06 09:35:20 +00:00
a105924804
1. Example queries will run with an (optional) integration test. 2. Fix bad accesses with OS X package BOMs 3. Move spec files from ./osquery/tables/specs to ./specs 4. Remove server parsers (netlib) from client builds.
18 lines
766 B
Plaintext
18 lines
766 B
Plaintext
table_name("preferences")
|
|
description("OS X defaults and managed preferences.")
|
|
schema([
|
|
Column("domain", TEXT, "Application ID usually in com.name.product format",
|
|
index=True),
|
|
Column("key", TEXT, "Preference top-level key"),
|
|
Column("subkey", TEXT, "Intemediate key path, includes lists/dicts"),
|
|
Column("value", TEXT, "String value of most CF types"),
|
|
Column("forced", INTEGER, "1 if the value is forced/managed, else 0"),
|
|
Column("path", TEXT, "(optional) read preferences from a plist",
|
|
additional=True),
|
|
])
|
|
implementation("system/darwin/preferences@genOSXPreferences")
|
|
examples([
|
|
"select * from preferences where domain = 'loginwindow'",
|
|
"select * from preferences where path = '/Library/Preferences/loginwindow.plist'"
|
|
])
|