From a30d8e46a516cb86f166ba2ac618a685f0ecf8a4 Mon Sep 17 00:00:00 2001
From: Scott Gress <scottmgress@gmail.com>
Date: Wed, 24 Sep 2025 17:32:54 -0500
Subject: [PATCH] Update pwd_policy table docs (#33181)

for #31346

# Details

Updated the docs for the `days_to_expiration` column of the `pwd_policy`
table.

# Checklist for submitter

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
---
 changes/31346-update-pww-policy-table-docs | 1 +
 schema/osquery_fleet_schema.json           | 2 +-
 schema/tables/pwd_policy.yml               | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 changes/31346-update-pww-policy-table-docs

diff --git a/changes/31346-update-pww-policy-table-docs b/changes/31346-update-pww-policy-table-docs
new file mode 100644
index 0000000000..53aadeb66b
--- /dev/null
+++ b/changes/31346-update-pww-policy-table-docs
@@ -0,0 +1 @@
+- Updated docs for the `pwd_policy` table to better reflect the meaning of `days_to_expiration`.
diff --git a/schema/osquery_fleet_schema.json b/schema/osquery_fleet_schema.json
index a7a52cbe15..1a0890124c 100644
--- a/schema/osquery_fleet_schema.json
+++ b/schema/osquery_fleet_schema.json
@@ -23352,7 +23352,7 @@
         "name": "days_to_expiration",
         "type": "integer",
         "required": false,
-        "description": "How many days are left for the expiration of the current password."
+        "description": "Synonym for expires_every_n_days (not typically set in macOS 10.15+)."
       },
       {
         "name": "history_depth",
diff --git a/schema/tables/pwd_policy.yml b/schema/tables/pwd_policy.yml
index d61b05a465..dce3baf2e3 100644
--- a/schema/tables/pwd_policy.yml
+++ b/schema/tables/pwd_policy.yml
@@ -17,7 +17,7 @@ columns:
     type: integer
     required: false
     description: |-
-      How many days are left for the expiration of the current password.
+      Synonym for expires_every_n_days (not typically set in macOS 10.15+).
   - name: history_depth
     type: integer
     required: false