Use additional instead of index for admindir in deb_packages

Although both index and additional add the column to the primary key, index is meant to mark columns that make the row unique. So those columns should contain unique values. additional instead marks a column that when provided in a where clause changes the table behvior, which is more correct in this case, since the packages will be parsed from a different path than the default.
osquery · Apr 26, 2022 · f89bdcf · f89bdcf
1 parent 06831f8
commit f89bdcf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/specs/linux/deb_packages.table b/specs/linux/deb_packages.table
@@ -11,7 +11,7 @@ schema([
     Column("maintainer", TEXT, "Package maintainer"),
     Column("section", TEXT, "Package section"),
     Column("priority", TEXT, "Package priority"),
-    Column("admindir", TEXT, "libdpkg admindir. Defaults to /var/lib/dpkg", index=True),
+    Column("admindir", TEXT, "libdpkg admindir. Defaults to /var/lib/dpkg", additional=True),
 ])
 extended_schema(LINUX, [
     Column("pid_with_namespace", INTEGER, "Pids that contain a namespace", additional=True, hidden=True),