HEX
Server: Apache
System: Linux sg241.singhost.net 2.6.32-896.16.1.lve1.4.51.el6.x86_64 #1 SMP Wed Jan 17 13:19:23 EST 2018 x86_64
User: honghock (909)
PHP: 8.0.30
Disabled: passthru,system,shell_exec,show_source,exec,popen,proc_open
Upload Files
File: //opt/osquery/share/osquery/lenses/grubenv.aug
(* Parsing /boot/grub/grubenv *)

module GrubEnv =
  autoload xfm

  let eol = Util.del_str "\n"

  let comment = Util.comment
  let eq = Util.del_str "="
  let value   = /[^\\\n]*(\\\\(\\\\|\n)[^\\\n]*)*/

  let word = /[A-Za-z_][A-Za-z0-9_]*/
  let record = [ seq "target" .
                 [ label "name" . store word ] . eq .
                 [ label "value" . store value ] . eol ]

  let lns = ( comment | record ) *

  let xfm = transform lns (incl "/boot/grub/grubenv" . incl "/boot/grub2/grubenv")