{"action":"created","issue":{"url":"https://api.github.com/repos/facebook/osquery/issues/1314","labels_url":"https://api.github.com/repos/facebook/osquery/issues/1314/labels{/name}","comments_url":"https://api.github.com/repos/facebook/osquery/issues/1314/comments","events_url":"https://api.github.com/repos/facebook/osquery/issues/1314/events","html_url":"https://github.com/facebook/osquery/issues/1314","id":94106958,"number":1314,"title":"Authorization plugin config","user":{"login":"arubdesu","id":388808,"avatar_url":"https://avatars.githubusercontent.com/u/388808?v=3","gravatar_id":"","url":"https://api.github.com/users/arubdesu","html_url":"https://github.com/arubdesu","followers_url":"https://api.github.com/users/arubdesu/followers","following_url":"https://api.github.com/users/arubdesu/following{/other_user}","gists_url":"https://api.github.com/users/arubdesu/gists{/gist_id}","starred_url":"https://api.github.com/users/arubdesu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/arubdesu/subscriptions","organizations_url":"https://api.github.com/users/arubdesu/orgs","repos_url":"https://api.github.com/users/arubdesu/repos","events_url":"https://api.github.com/users/arubdesu/events{/privacy}","received_events_url":"https://api.github.com/users/arubdesu/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/facebook/osquery/labels/os%20x","name":"os x","color":"d4c5f9"},{"url":"https://api.github.com/repos/facebook/osquery/labels/virtual%20tables","name":"virtual tables","color":"bfd4f2"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-07-09T17:23:51Z","updated_at":"2015-07-17T16:11:35Z","closed_at":"2015-07-17T16:11:35Z","body":"The mechanisms array from `security authorizationdb read system.login.console`, e.g.\r\n```\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\r\n<plist version=\"1.0\">\r\n<dict>\r\n\t<key>class</key>\r\n\t<string>evaluate-mechanisms</string>\r\n\t<key>comment</key>\r\n\t<string>Login mechanism based rule.  Not for general use, yet.</string>\r\n\t<key>created</key>\r\n\t<real>427767612.24763399</real>\r\n\t<key>mechanisms</key>\r\n\t<array>\r\n\t\t<string>builtin:policy-banner</string>\r\n\t\t<string>loginwindow:login</string>\r\n\t\t<string>builtin:login-begin</string>\r\n\t\t<string>builtin:reset-password,privileged</string>\r\n\t\t<string>builtin:forward-login,privileged</string>\r\n\t\t<string>builtin:auto-login,privileged</string>\r\n\t\t<string>builtin:authenticate,privileged</string>\r\n\t\t<string>PKINITMechanism:auth,privileged</string>\r\n\t\t<string>builtin:login-success</string>\r\n\t\t<string>loginwindow:success</string>\r\n\t\t<string>HomeDirMechanism:login,privileged</string>\r\n\t\t<string>HomeDirMechanism:status</string>\r\n\t\t<string>MCXMechanism:login</string>\r\n\t\t<string>loginwindow:done</string>\r\n\t</array>\r\n\t<key>modified</key>\r\n\t<real>427767612.24763399</real>\r\n\t<key>shared</key>\r\n\t<true/>\r\n\t<key>tries</key>\r\n\t<integer>10000</integer>\r\n\t<key>version</key>\r\n\t<integer>1</integer>\r\n</dict>\r\n</plist>\r\n\r\n```"},"comment":{"url":"https://api.github.com/repos/facebook/osquery/issues/comments/122329274","html_url":"https://github.com/facebook/osquery/issues/1314#issuecomment-122329274","issue_url":"https://api.github.com/repos/facebook/osquery/issues/1314","id":122329274,"user":{"login":"theopolis","id":981645,"avatar_url":"https://avatars.githubusercontent.com/u/981645?v=3","gravatar_id":"","url":"https://api.github.com/users/theopolis","html_url":"https://github.com/theopolis","followers_url":"https://api.github.com/users/theopolis/followers","following_url":"https://api.github.com/users/theopolis/following{/other_user}","gists_url":"https://api.github.com/users/theopolis/gists{/gist_id}","starred_url":"https://api.github.com/users/theopolis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theopolis/subscriptions","organizations_url":"https://api.github.com/users/theopolis/orgs","repos_url":"https://api.github.com/users/theopolis/repos","events_url":"https://api.github.com/users/theopolis/events{/privacy}","received_events_url":"https://api.github.com/users/theopolis/received_events","type":"User","site_admin":false},"created_at":"2015-07-17T16:11:35Z","updated_at":"2015-07-17T16:11:35Z","body":"We should be GTG! Thanks to @tburgin!"}}