fleet/schema/tables/docker_containers.yml

name: docker_containers
examples: |-
  Identify containers that are running with high privileges.

  ```
  SELECT state, status, image, image_id FROM docker_containers WHERE privileged='1';
  ```
columns:
  - name: cgroup_namespace
    platforms:
      - linux
  - name: ipc_namespace
    platforms:
      - linux
  - name: mnt_namespace
    platforms:
      - linux
  - name: net_namespace
    platforms:
      - linux
  - name: pid_namespace
    platforms:
      - linux
  - name: privileged
    description: Is the container
      [privileged](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities)
  - name: user_namespace
    platforms:
      - linux
  - name: uts_namespace
    platforms:
      - linux
Add Fleet override schema files (#8278) * create schema/tables, add yaml schema tables * Update osquery-table-details.ejs * Generate schema from schema/tables/ folder * Create generate-yaml-tables-from-json.js * update created table files * update fleet override validation * update error messages, add fleetRepoUrl * Delete generate-yaml-tables-from-json.js * Update osquery-table-details.ejs * Update whitespace in table examples * Revert "Update osquery-table-details.ejs" This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468. * add YAML tables generated from updated Fleet schema * lint fixes * update arp_cache and docker_containers tables 2022-10-18 19:13:42 +00:00			`name: docker_containers`
Schema: change default block scalar used in schema override files (#19296) Closes: #19271 Closes: #19286 Changes: - Updated the example in the schema folder readme - Updated the block scalar used in Fleet's osquery override documentation (`>-` » `\|-`) and removed extra newlines - Updated the block scalar used in URLs used to create new yaml override files - Regenerated osqeury_fleet_schema.json 2024-05-27 23:18:56 +00:00			`examples: \|-`
Add Fleet override schema files (#8278) * create schema/tables, add yaml schema tables * Update osquery-table-details.ejs * Generate schema from schema/tables/ folder * Create generate-yaml-tables-from-json.js * update created table files * update fleet override validation * update error messages, add fleetRepoUrl * Delete generate-yaml-tables-from-json.js * Update osquery-table-details.ejs * Update whitespace in table examples * Revert "Update osquery-table-details.ejs" This reverts commit 2e9d63208f59997d492375ebaf1d0ec7e4afe468. * add YAML tables generated from updated Fleet schema * lint fixes * update arp_cache and docker_containers tables 2022-10-18 19:13:42 +00:00			`Identify containers that are running with high privileges.`

			```
			`SELECT state, status, image, image_id FROM docker_containers WHERE privileged='1';`
			```
			`columns:`
			`- name: cgroup_namespace`
			`platforms:`
			`- linux`
			`- name: ipc_namespace`
			`platforms:`
			`- linux`
			`- name: mnt_namespace`
			`platforms:`
			`- linux`
			`- name: net_namespace`
			`platforms:`
			`- linux`
			`- name: pid_namespace`
			`platforms:`
			`- linux`
			`- name: privileged`
			`description: Is the container`
			`[privileged](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities)`
			`- name: user_namespace`
			`platforms:`
			`- linux`
			`- name: uts_namespace`
			`platforms:`
			`- linux`