mirror of
https://github.com/fleetdm/fleet
synced 2026-05-21 07:58:31 +00:00
c2f333aebb
Closes: #18240 Changes: - Updated the schema override files to use only one YAML block scalar (`>-`) - Updated the template yaml included in the link to create a new override file in get-extended-osquery-schema helper to use the `>-` block scalar - regenerated osquery_fleet_schema.json
65 lines
1.1 KiB
YAML
65 lines
1.1 KiB
YAML
name: users
|
|
platforms:
|
|
- darwin
|
|
- windows
|
|
- linux
|
|
- chrome
|
|
examples: >-
|
|
List users that have interactive access via a shell that isn't false.
|
|
|
|
```
|
|
|
|
SELECT * FROM users WHERE shell!='/usr/bin/false';
|
|
|
|
```
|
|
columns:
|
|
- name: gid
|
|
platforms:
|
|
- darwin
|
|
- windows
|
|
- linux
|
|
- name: uid_signed
|
|
platforms:
|
|
- darwin
|
|
- windows
|
|
- linux
|
|
- name: gid_signed
|
|
platforms:
|
|
- darwin
|
|
- windows
|
|
- linux
|
|
- name: description
|
|
platforms:
|
|
- darwin
|
|
- windows
|
|
- linux
|
|
- name: directory
|
|
platforms:
|
|
- darwin
|
|
- windows
|
|
- linux
|
|
- name: shell
|
|
platforms:
|
|
- darwin
|
|
- windows
|
|
- linux
|
|
- name: uuid
|
|
- name: email
|
|
required: false
|
|
type: text
|
|
description: Email
|
|
platforms:
|
|
- chrome
|
|
- name: type
|
|
platforms:
|
|
- windows
|
|
- name: is_hidden
|
|
platforms:
|
|
- darwin
|
|
- name: pid_with_namespace
|
|
platforms:
|
|
- linux
|
|
- name: username
|
|
description: Username
|
|
notes: >-
|
|
- On ChromeOS, this table requires the [fleetd Chrome extension](https://fleetdm.com/docs/using-fleet/chromeos).
|