mirror of
https://github.com/fleetdm/fleet
synced 2026-05-06 06:48:54 +00:00
02437a098e
Closes: #19271 Closes: #19286 Changes: - Updated the example in the schema folder readme - Updated the block scalar used in Fleet's osquery override documentation (`>-` » `|-`) and removed extra newlines - Updated the block scalar used in URLs used to create new yaml override files - Regenerated osqeury_fleet_schema.json
32 lines
742 B
YAML
32 lines
742 B
YAML
name: docker_containers
|
|
examples: |-
|
|
Identify containers that are running with high privileges.
|
|
|
|
```
|
|
SELECT state, status, image, image_id FROM docker_containers WHERE privileged='1';
|
|
```
|
|
columns:
|
|
- name: cgroup_namespace
|
|
platforms:
|
|
- linux
|
|
- name: ipc_namespace
|
|
platforms:
|
|
- linux
|
|
- name: mnt_namespace
|
|
platforms:
|
|
- linux
|
|
- name: net_namespace
|
|
platforms:
|
|
- linux
|
|
- name: pid_namespace
|
|
platforms:
|
|
- linux
|
|
- name: privileged
|
|
description: Is the container
|
|
[privileged](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities)
|
|
- name: user_namespace
|
|
platforms:
|
|
- linux
|
|
- name: uts_namespace
|
|
platforms:
|
|
- linux
|