1 // Copyright (c) 2023 Apple Inc. All rights reserved.
2 //
3 // @APPLE_OSREFERENCE_LICENSE_HEADER_START@
4 //
5 // This file contains Original Code and/or Modifications of Original Code
6 // as defined in and that are subject to the Apple Public Source License
7 // Version 2.0 (the 'License'). You may not use this file except in
8 // compliance with the License. The rights granted to you under the License
9 // may not be used to create, or enable the creation or redistribution of,
10 // unlawful or unlicensed copies of an Apple operating system, or to
11 // circumvent, violate, or enable the circumvention or violation of, any
12 // terms of an Apple operating system software license agreement.
13 //
14 // Please obtain a copy of the License at
15 // http://www.opensource.apple.com/apsl/ and read it before using this file.
16 //
17 // The Original Code and all software distributed under the License are
18 // distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
19 // EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
20 // INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
21 // FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
22 // Please see the License for the specific language governing rights and
23 // limitations under the License.
24 //
25 // @APPLE_OSREFERENCE_LICENSE_HEADER_END@
26
27 #include <kern/cpc.h>
28 #include <stdbool.h>
29
30 #if __arm64__
31 #include <arm64/cpc_arm64.h>
32 #endif // __arm64__
33
34 bool
cpc_is_secure(void)35 cpc_is_secure(void)
36 {
37 #if __arm64__
38 cpc_event_policy_t policy = cpc_get_event_policy();
39 return policy == CPC_EVPOL_RESTRICT_TO_KNOWN || policy == CPC_EVPOL_DENY_ALL;
40 #else // __arm64__
41 return false;
42 #endif // !__arm64__
43 }
44
45 #if CPC_INSECURE
46
47 void
cpc_change_security(bool enforce_security)48 cpc_change_security(bool enforce_security)
49 {
50 #if __arm64__
51 cpc_set_event_policy(enforce_security ? CPC_EVPOL_RESTRICT_TO_KNOWN : CPC_EVPOL_DEFAULT);
52 #else // __arm64__
53 #pragma unused(enforce_security)
54 // Intel has no event policy or other security features.
55 #endif // !__arm64__
56 }
57
58 #endif // CPC_INSECURE
59