Solutions
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Extend Fleet
Integrate your favorite tools with Fleet.
Customers
Stripe + Fleet
Stripe consolidates multiple tools with Fleet.
Foursquare + Fleet
Foursquare quickly migrates to Fleet for device management.
What people are saying
Stories from the Fleet community.
Pricing
More
Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
apparmor_events
apparmor_events EVENTED TABLE
Track AppArmor events.
| Column | Type | Description |
|---|---|---|
| apparmor | text | Apparmor Status like ALLOWED, DENIED etc. |
| capability | bigint | Capability number |
| capname | text | Capability requested by the process |
| comm | text | Command-line name of the command that was used to invoke the analyzed process |
| denied_mask | text | Denied permissions for the process |
| eid | text | Event ID Not returned in SELECT * FROM apparmor_events. |
| error | text | Error information |
| fsuid | unsigned_bigint | Filesystem user ID |
| info | text | Additional information |
| label | text | AppArmor label |
| message | text | Raw audit message |
| name | text | Process name |
| namespace | text | AppArmor namespace |
| operation | text | Permission requested by the process |
| ouid | unsigned_bigint | Object owner's user ID |
| parent | unsigned_bigint | Parent process PID |
| pid | unsigned_bigint | Process ID |
| profile | text | Apparmor profile name |
| requested_mask | text | Requested access mask |
| time | bigint | Time of execution in UNIX time |
| type | text | Event type |
| uptime | bigint | Time of execution in system uptime |
Questions?
SOC2 Type 2
