golden hour

/opt/osquery/share/osquery/lenses

File/Folder	Size	Actions
COPYING	25.91 KB
access.aug	3.58 KB
activemq_conf.aug	1.47 KB
activemq_xml.aug	864 B
afs_cellalias.aug	1.56 KB
aliases.aug	2.18 KB
anaconda.aug	775 B
anacron.aug	2.49 KB
approx.aug	1.26 KB
apt_update_manager.aug	1.11 KB
aptcacherngsecurity.aug	726 B
aptconf.aug	3.9 KB
aptpreferences.aug	1.79 KB
aptsources.aug	1.98 KB
authorized_keys.aug	1.84 KB
automaster.aug	3.31 KB
automounter.aug	4.05 KB
avahi.aug	1.38 KB
backuppchosts.aug	1014 B
bbhosts.aug	4.24 KB
bootconf.aug	3.65 KB
build.aug	16.65 KB
cachefilesd.aug	2 KB
carbon.aug	1.54 KB
ceph.aug	719 B
cgconfig.aug	3.37 KB
cgrules.aug	2.38 KB
channels.aug	3.84 KB
chrony.aug	12.87 KB
clamav.aug	1.53 KB
cobblermodules.aug	398 B
cobblersettings.aug	2.24 KB
collectd.aug	869 B
cpanel.aug	824 B
cron.aug	4.05 KB
cron_user.aug	1.26 KB
crypttab.aug	3.01 KB
csv.aug	1.18 KB
cups.aug	459 B
cyrus_imapd.aug	1.51 KB
darkice.aug	773 B
debctrl.aug	3.61 KB
desktop.aug	1.39 KB
devfsrules.aug	619 B
device_map.aug	620 B
dhclient.aug	6.69 KB
dhcpd.aug	20.88 KB
dns_zone.aug	2.89 KB
dnsmasq.aug	2.16 KB
dovecot.aug	3.98 KB
dpkg.aug	2.78 KB
dput.aug	2.16 KB
erlang.aug	4.33 KB
ethers.aug	663 B
exports.aug	2.37 KB
fai_diskconfig.aug	9.28 KB
fonts.aug	819 B
fstab.aug	1.23 KB
fuse.aug	871 B
gdm.aug	1.8 KB
getcap.aug	1.57 KB
group.aug	1.66 KB
grub.aug	11.04 KB
grubenv.aug	508 B
gshadow.aug	2.19 KB
gtkbookmarks.aug	855 B
host_conf.aug	1.9 KB
hostname.aug	435 B
hosts.aug	485 B
hosts_access.aug	4.32 KB
htpasswd.aug	1.02 KB
httpd.aug	7.35 KB
inetd.aug	6.22 KB
inifile.aug	15.49 KB
inittab.aug	780 B
inputrc.aug	1.62 KB
interfaces.aug	4.62 KB
iproute2.aug	323 B
iptables.aug	2.64 KB
iscsid.aug	684 B
jaas.aug	1.57 KB
jettyrealm.aug	1.52 KB
jmxaccess.aug	1.35 KB
jmxpassword.aug	1.34 KB
json.aug	2.15 KB
kdump.aug	2.91 KB
keepalived.aug	10.7 KB
known_hosts.aug	1.93 KB
koji.aug	898 B
krb5.aug	6.16 KB
ldif.aug	7.65 KB
ldso.aug	1.06 KB
lightdm.aug	1.75 KB
limits.aug	2.02 KB
login_defs.aug	615 B
logrotate.aug	4.22 KB
logwatch.aug	1.44 KB
lokkit.aug	2.16 KB
lvm.aug	2.03 KB
mailscanner.aug	1.66 KB
mailscanner_rules.aug	2.84 KB
masterpasswd.aug	4.36 KB
mcollective.aug	1.09 KB
mdadm_conf.aug	10.05 KB
memcached.aug	1.24 KB
mke2fs.aug	4.67 KB
modprobe.aug	3.34 KB
modules.aug	741 B
modules_conf.aug	1.04 KB
mongodbserver.aug	1.17 KB
monit.aug	2.13 KB
multipath.aug	4.21 KB
mysql.aug	1.95 KB
nagioscfg.aug	2.09 KB
nagiosobjects.aug	1.57 KB
netmasks.aug	1.69 KB
networkmanager.aug	2 KB
networks.aug	1.09 KB
nginx.aug	3.65 KB
nrpe.aug	1.75 KB
nslcd.aug	9.87 KB
nsswitch.aug	2.33 KB
ntp.aug	5.29 KB
ntpd.aug	4.75 KB
odbc.aug	1.42 KB
opendkim.aug	3.08 KB
openshift_config.aug	2.46 KB
openshift_http.aug	1.03 KB
openshift_quickstarts.aug	1.02 KB
openvpn.aug	22.28 KB
oz.aug	1.35 KB
pagekite.aug	2.6 KB
pam.aug	2.58 KB
pamconf.aug	1.23 KB
passwd.aug	3.52 KB
pbuilder.aug	638 B
pg_hba.aug	2.97 KB
pgbouncer.aug	1.43 KB
php.aug	2.34 KB
phpvars.aug	3.85 KB
postfix_access.aug	771 B
postfix_main.aug	1.52 KB
postfix_master.aug	1.9 KB
postfix_passwordmap.aug	1.28 KB
postfix_sasl_smtpd.aug	697 B
postfix_transport.aug	1.48 KB
postfix_virtual.aug	1.32 KB
postgresql.aug	2.1 KB
properties.aug	2.3 KB
protocols.aug	1.05 KB
puppet.aug	1.52 KB
puppet_auth.aug	1.95 KB
puppetfile.aug	2.27 KB
puppetfileserver.aug	3.12 KB
pylonspaste.aug	2.3 KB
pythonpaste.aug	1.99 KB
qpid.aug	670 B
quote.aug	6.71 KB
rabbitmq.aug	4.69 KB
radicale.aug	1.48 KB
rancid.aug	927 B
redis.aug	4.96 KB
reprepro_uploaders.aug	5.47 KB
resolv.aug	3.87 KB
rhsm.aug	1.1 KB
rmt.aug	788 B
rsyncd.aug	1.97 KB
rsyslog.aug	3.17 KB
rtadvd.aug	854 B
rx.aug	4.06 KB
samba.aug	1.71 KB
schroot.aug	1.79 KB
securetty.aug	450 B
semanage.aug	859 B
sep.aug	1.28 KB
services.aug	2.82 KB
shadow.aug	2.35 KB
shells.aug	745 B
shellvars.aug	11.97 KB
shellvars_list.aug	1.74 KB
simplelines.aug	1.13 KB
simplevars.aug	1.34 KB
sip_conf.aug	1.61 KB
slapd.aug	5.2 KB
smbusers.aug	781 B
solaris_system.aug	3.15 KB
soma.aug	1.14 KB
spacevars.aug	1.42 KB
splunk.aug	1.64 KB
squid.aug	15.95 KB
ssh.aug	3.91 KB
sshd.aug	4.01 KB
sssd.aug	861 B
star.aug	941 B
strongswan.aug	1.63 KB
stunnel.aug	2.21 KB
subversion.aug	2.75 KB
sudoers.aug	20.03 KB
sysconfig.aug	2.49 KB
sysconfig_route.aug	2.55 KB
sysctl.aug	923 B
syslog.aug	7.33 KB
systemd.aug	5.88 KB
termcap.aug	1.03 KB
thttpd.aug	1.31 KB
tmpfiles.aug	3.03 KB
toml.aug	4.06 KB
trapperkeeper.aug	4.01 KB
tuned.aug	387 B
up2date.aug	2.21 KB
updatedb.aug	1.13 KB
util.aug	4.85 KB
vfstab.aug	1.71 KB
vmware_config.aug	702 B
vsftpd.aug	2.72 KB
webmin.aug	1.23 KB
wine.aug	1.92 KB
xendconfsxp.aug	1.07 KB
xinetd.aug	4.02 KB
xml.aug	6.33 KB
xorg.aug	10.43 KB
xymon.aug	2.26 KB
xymon_alerting.aug	6.11 KB
yaml.aug	1.54 KB
yum.aug	2.19 KB

Edit: build.aug

(*
Module: Build
   Generic functions to build lenses

Author: Raphael Pinson <raphink@gmail.com>

About: License
  This file is licensed under the LGPL v2+, like the rest of Augeas.

About: Reference
  This file provides generic functions to build Augeas lenses
*)

module Build =

let eol = Util.eol

(************************************************************************
 * Group:               GENERIC CONSTRUCTIONS
 ************************************************************************)

(************************************************************************
 * View: brackets
 *   Put a lens inside brackets
 *
 *   Parameters:
 *     l:lens   - the left bracket lens
 *     r: lens  - the right bracket lens
 *     lns:lens - the lens to put inside brackets
 ************************************************************************)
let brackets (l:lens) (r:lens) (lns:lens) = l . lns . r

(************************************************************************
 * Group:             LIST CONSTRUCTIONS
 ************************************************************************)

(************************************************************************
 * View: list
 *   Build a list of identical lenses separated with a given separator
 *   (at least 2 elements)
 *
 *   Parameters:
 *     lns:lens - the lens to repeat in the list
 *     sep:lens - the separator lens, which can be taken from the <Sep> module
 ************************************************************************)
let list (lns:lens) (sep:lens) = lns . ( sep . lns )+

(************************************************************************
 * View: opt_list
 *   Same as <list>, but there might be only one element in the list
 *
 *   Parameters:
 *     lns:lens - the lens to repeat in the list
 *     sep:lens - the separator lens, which can be taken from the <Sep> module
 ************************************************************************)
let opt_list (lns:lens) (sep:lens) = lns . ( sep . lns )*

(************************************************************************
 * Group:                   LABEL OPERATIONS
 ************************************************************************)

(************************************************************************
 * View: xchg
 *   Replace a pattern with a different label in the tree,
 *   thus emulating a key but allowing to replace the keyword
 *   with a different value than matched
 *
 *   Parameters:
 *     m:regexp - the pattern to match
 *     d:string - the default value when a node in created
 *     l:string - the label to apply for such nodes
 ************************************************************************)
let xchg (m:regexp) (d:string) (l:string) = del m d . label l

(************************************************************************
 * View: xchgs
 *   Same as <xchg>, but the pattern is the default string
 *
 *   Parameters:
 *     m:string - the string to replace, also used as default
 *     l:string - the label to apply for such nodes
 ************************************************************************)
let xchgs (m:string) (l:string) = xchg m m l

(************************************************************************
 * Group:                   SUBNODE CONSTRUCTIONS
 ************************************************************************)

(************************************************************************
 * View: key_value_line
 *   A subnode with a keyword, a separator and a storing lens,
 *   and an end of line
 *
 *   Parameters:
 *     kw:regexp - the pattern to match as key
 *     sep:lens  - the separator lens, which can be taken from the <Sep> module
 *     sto:lens  - the storing lens
 ************************************************************************)
let key_value_line (kw:regexp) (sep:lens) (sto:lens) =
                                   [ key kw . sep . sto . eol ]

(************************************************************************
 * View: key_value_line_comment
 *   Same as <key_value_line>, but allows to have a comment in the end of a line
 *   and an end of line
 *
 *   Parameters:
 *     kw:regexp    - the pattern to match as key
 *     sep:lens     - the separator lens, which can be taken from the <Sep> module
 *     sto:lens     - the storing lens
 *     comment:lens - the comment lens, which can be taken from <Util>
 ************************************************************************)
let key_value_line_comment (kw:regexp) (sep:lens) (sto:lens) (comment:lens) =
                                   [ key kw . sep . sto . (eol|comment) ]

(************************************************************************
 * View: key_value
 *   Same as <key_value_line>, but does not end with an end of line
 *
 *   Parameters:
 *     kw:regexp - the pattern to match as key
 *     sep:lens  - the separator lens, which can be taken from the <Sep> module
 *     sto:lens  - the storing lens
 ************************************************************************)
let key_value (kw: regexp) (sep:lens) (sto:lens) =
                                   [ key kw . sep . sto ]

(************************************************************************
 * View: key_ws_value
 *
 *   Store a key/value pair where key and value are separated by whitespace
 *   and the value goes to the end of the line. Leading and trailing
 *   whitespace is stripped from the value. The end of line is consumed by
 *   this lens
 *
 *   Parameters:
 *     kw:regexp - the pattern to match as key
 ************************************************************************)
let key_ws_value (kw:regexp) =
  key_value_line kw Util.del_ws_spc (store Rx.space_in)

(************************************************************************
 * View: flag
 *   A simple flag subnode, consisting of a single key
 *
 *   Parameters:
 *     kw:regexp - the pattern to match as key
 ************************************************************************)
let flag (kw:regexp) = [ key kw ]

(************************************************************************
 * View: flag_line
 *   A simple flag line, consisting of a single key
 *
 *   Parameters:
 *     kw:regexp - the pattern to match as key
 ************************************************************************)
let flag_line (kw:regexp) = [ key kw . eol ]

(************************************************************************
 * Group:                   BLOCK CONSTRUCTIONS
 ************************************************************************)

(************************************************************************
 * View: block_generic
 *   A block enclosed in brackets
 *
 *   Parameters:
 *     entry:lens                - the entry to be stored inside the block.
 *                                 This entry should include <Util.empty>
 *                                 or its equivalent if necessary.
 *     entry_noindent:lens       - the entry to be stored inside the block,
 *                                 without indentation.
 *                                 This entry should not include <Util.empty>
 *     entry_noeol:lens          - the entry to be stored inside the block,
 *                                 without eol.
 *                                 This entry should not include <Util.empty>
 *     entry_noindent_noeol:lens - the entry to be stored inside the block,
 *                                 without indentation or eol.
 *                                 This entry should not include <Util.empty>
 *     comment:lens              - the comment lens used in the block
 *     comment_noindent:lens     - the comment lens used in the block,
 *                                 without indentation.
 *     ldelim_re:regexp          - regexp for the left delimiter
 *     rdelim_re:regexp          - regexp for the right delimiter
 *     ldelim_default:string     - default value for the left delimiter
 *     rdelim_default:string     - default value for the right delimiter
 ************************************************************************)
let block_generic
     (entry:lens) (entry_noindent:lens)
     (entry_noeol:lens) (entry_noindent_noeol:lens)
     (comment:lens) (comment_noindent:lens)
     (ldelim_re:regexp) (rdelim_re:regexp)
     (ldelim_default:string) (rdelim_default:string) =
     let block_single = entry_noindent_noeol | comment_noindent
  in let block_start  = entry_noindent | comment_noindent
  in let block_middle = (entry | comment)*
  in let block_end    = entry_noeol | comment
  in del ldelim_re ldelim_default
     . ( ( block_start . block_middle . block_end )
       | block_single )
     . del rdelim_re rdelim_default

(************************************************************************
 * View: block_setdefault
 *   A block enclosed in brackets
 *
 *   Parameters:
 *     entry:lens - the entry to be stored inside the block.
 *                  This entry should not include <Util.empty>,
 *                  <Util.comment> or <Util.comment_noindent>,
 *                  should not be indented or finish with an eol.
 *     ldelim_re:regexp      - regexp for the left delimiter
 *     rdelim_re:regexp      - regexp for the left delimiter
 *     ldelim_default:string - default value for the left delimiter
 *     rdelim_default:string - default value for the right delimiter
 ************************************************************************)
let block_setdelim (entry:lens)
                     (ldelim_re:regexp)
                     (rdelim_re:regexp)
                     (ldelim_default:string)
                     (rdelim_default:string) =
    block_generic (Util.empty | Util.indent . entry . eol)
                  (entry . eol) (Util.indent . entry) entry
                  Util.comment Util.comment_noindent
                  ldelim_re rdelim_re
                  ldelim_default rdelim_default

(* Variable: block_ldelim_re *)
let block_ldelim_re = /[ \t\n]+\{[ \t\n]*/

(* Variable: block_rdelim_re *)
let block_rdelim_re = /[ \t\n]*\}/

(* Variable: block_ldelim_default *)
let block_ldelim_default = " {\n"

(* Variable: block_rdelim_default *)
let block_rdelim_default = "}"

(************************************************************************
 * View: block
 *   A block enclosed in brackets
 *
 *   Parameters:
 *     entry:lens - the entry to be stored inside the block.
 *                  This entry should not include <Util.empty>,
 *                  <Util.comment> or <Util.comment_noindent>,
 *                  should not be indented or finish with an eol.
 ************************************************************************)
let block (entry:lens) = block_setdelim entry
                         block_ldelim_re block_rdelim_re
                         block_ldelim_default block_rdelim_default

(* Variable: block_ldelim_newlines_re *)
let block_ldelim_newlines_re = /[ \t\n]*\{([ \t\n]*\n)?/

(* Variable: block_rdelim_newlines_re *)
let block_rdelim_newlines_re = /[ \t]*\}/

(* Variable: block_ldelim_newlines_default *)
let block_ldelim_newlines_default = "\n{\n"

(* Variable: block_rdelim_newlines_default *)
let block_rdelim_newlines_default = "}"

(************************************************************************
 * View: block_newline
 *   A block enclosed in brackets, with newlines forced
 *   and indentation defaulting to a tab.
 *
 *   Parameters:
 *     entry:lens - the entry to be stored inside the block.
 *                  This entry should not include <Util.empty>,
 *                  <Util.comment> or <Util.comment_noindent>,
 *                  should be indented and finish with an eol.
 ************************************************************************)
let block_newlines (entry:lens) (comment:lens) =
   del block_ldelim_newlines_re block_ldelim_newlines_default
 . ((entry | comment) . (Util.empty | entry | comment)*)?
 . del block_rdelim_newlines_re block_rdelim_newlines_default

(************************************************************************
 * View: block_newlines_spc
 *   A block enclosed in brackets, with newlines forced
 *   and indentation defaulting to a tab. The opening brace
 *   must be preceded by whitespace
 *
 *   Parameters:
 *     entry:lens - the entry to be stored inside the block.
 *                  This entry should not include <Util.empty>,
 *                  <Util.comment> or <Util.comment_noindent>,
 *                  should be indented and finish with an eol.
 ************************************************************************)
let block_newlines_spc (entry:lens) (comment:lens) =
   del (/[ \t\n]/ . block_ldelim_newlines_re) block_ldelim_newlines_default
 . ((entry | comment) . (Util.empty | entry | comment)*)?
 . del block_rdelim_newlines_re block_rdelim_newlines_default

(************************************************************************
 * View: named_block
 *   A named <block> enclosed in brackets
 *
 *   Parameters:
 *     kw:regexp  - the regexp for the block name
 *     entry:lens - the entry to be stored inside the block
 *                   this entry should not include <Util.empty>
 ************************************************************************)
let named_block (kw:regexp) (entry:lens) = [ key kw . block entry . eol ]

(************************************************************************
 * Group:               COMBINATORICS
 ************************************************************************)

(************************************************************************
 * View: combine_two_ord
 *   Combine two lenses, ensuring first lens is first
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 ************************************************************************)
let combine_two_ord (a:lens) (b:lens) = a . b

(************************************************************************
 * View: combine_two
 *   Combine two lenses
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 ************************************************************************)
let combine_two (a:lens) (b:lens) =
  combine_two_ord a b | combine_two_ord b a

(************************************************************************
 * View: combine_two_opt_ord
 *   Combine two lenses optionally, ensuring first lens is first
 *   (a, and optionally b)
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 ************************************************************************)
let combine_two_opt_ord (a:lens) (b:lens) = a . b?

(************************************************************************
 * View: combine_two_opt
 *   Combine two lenses optionally
 *   (either a, b, or both, in any order)
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 ************************************************************************)
let combine_two_opt (a:lens) (b:lens) =
  combine_two_opt_ord a b | combine_two_opt_ord b a

(************************************************************************
 * View: combine_three_ord
 *   Combine three lenses, ensuring first lens is first
 *   (a followed by either b, c, in any order)
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 *     c:lens - the third lens
 ************************************************************************)
let combine_three_ord (a:lens) (b:lens) (c:lens) =
  combine_two_ord a (combine_two b c)

(************************************************************************
 * View: combine_three
 *   Combine three lenses
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 *     c:lens - the third lens
 ************************************************************************)
let combine_three (a:lens) (b:lens) (c:lens) =
    combine_three_ord a b c
  | combine_three_ord b a c
  | combine_three_ord c b a

(************************************************************************
 * View: combine_three_opt_ord
 *   Combine three lenses optionally, ensuring first lens is first
 *   (a followed by either b, c, or any of them, in any order)
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 *     c:lens - the third lens
 ************************************************************************)
let combine_three_opt_ord (a:lens) (b:lens) (c:lens) =
  combine_two_opt_ord a (combine_two_opt b c)

(************************************************************************
 * View: combine_three_opt
 *   Combine three lenses optionally
 *   (either a, b, c, or any of them, in any order)
 *
 *   Parameters:
 *     a:lens - the first lens
 *     b:lens - the second lens
 *     c:lens - the third lens
 ************************************************************************)
let combine_three_opt (a:lens) (b:lens) (c:lens) =
    combine_three_opt_ord a b c
  | combine_three_opt_ord b a c
  | combine_three_opt_ord c b a