Tables
Tables{{numberOfTablesDisplayed}}
keychain_acls
Applications that have ACL entries in the keychain. NOTE: osquery limits frequent access to keychain files. This limit is controlled by keychain_access_interval flag.
| Column | Type | Description |
|---|---|---|
| authorizations | text | A space delimited set of authorization attributes |
| description | text | The description included with the ACL entry |
| keychain_path | text | The path of the keychain |
| label | text | An optional label tag that may be included with the keychain entry |
| path | text | The path of the authorized application |
Example
Identify keychain items with permissions granted to Applications at the system or user level.
SELECT * FROM keychain_acls WHERE path LIKE '/System/Applications/%%' OR path LIKE '/Users/%%/Applications/%%';
Edit page
Need more help?
Ask the community on Slack
SOC2 Type 2
© 2024 Fleet Inc.
Privacy
