mirror of
https://github.com/fleetdm/fleet
synced 2026-05-06 06:48:54 +00:00
02437a098e
Closes: #19271 Closes: #19286 Changes: - Updated the example in the schema folder readme - Updated the block scalar used in Fleet's osquery override documentation (`>-` » `|-`) and removed extra newlines - Updated the block scalar used in URLs used to create new yaml override files - Regenerated osqeury_fleet_schema.json
17 lines
498 B
YAML
17 lines
498 B
YAML
name: user_ssh_keys
|
|
examples: |-
|
|
```
|
|
SELECT * FROM users CROSS JOIN user_ssh_keys USING (uid);
|
|
```
|
|
|
|
Identify SSH keys stored in clear text in user directories
|
|
|
|
```
|
|
SELECT * FROM users JOIN user_ssh_keys USING (uid) WHERE encrypted = 0;
|
|
```
|
|
columns:
|
|
- name: pid_with_namespace
|
|
platforms:
|
|
- linux
|
|
- name: uid
|
|
notes: Querying this table requires joining against the `users` table. [Learn more](https://fleetdm.com/guides/osquery-consider-joining-against-the-users-table)
|