fleet/schema/tables/alf.yml
Eric 02437a098e
Schema: change default block scalar used in schema override files (#19296)
Closes: #19271
Closes: #19286

Changes:
- Updated the example in the schema folder readme
- Updated the block scalar used in Fleet's osquery override
documentation (`>-` » `|-`) and removed extra newlines
- Updated the block scalar used in URLs used to create new yaml override
files
- Regenerated osqeury_fleet_schema.json
2024-05-27 18:18:56 -05:00

13 lines
648 B
YAML

name: alf
description: Details about the status of the built-in firewall protection on this Mac.
examples: |-
See the state of the Application Layer Firewall on a Mac. A result of 0 means
it is disabled, 1 means it is enabled, and 2 means it is enabled and blocking
all inbound connections. See our standard query library for an example policy
query using this.
```
SELECT global_state FROM alf;
```
notes: |-
- This table provides information about the built-in firewall in macOS, also known as [Application Layer Firewall (ALF)](https://support.apple.com/guide/mac-help/block-connections-to-your-mac-with-a-firewall-mh34041/mac)