1*8d741a5dSApple OSS Distributions /* 2*8d741a5dSApple OSS Distributions * Copyright (c) 2014 Apple Inc. All rights reserved. 3*8d741a5dSApple OSS Distributions * 4*8d741a5dSApple OSS Distributions * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ 5*8d741a5dSApple OSS Distributions * 6*8d741a5dSApple OSS Distributions * This file contains Original Code and/or Modifications of Original Code 7*8d741a5dSApple OSS Distributions * as defined in and that are subject to the Apple Public Source License 8*8d741a5dSApple OSS Distributions * Version 2.0 (the 'License'). You may not use this file except in 9*8d741a5dSApple OSS Distributions * compliance with the License. The rights granted to you under the License 10*8d741a5dSApple OSS Distributions * may not be used to create, or enable the creation or redistribution of, 11*8d741a5dSApple OSS Distributions * unlawful or unlicensed copies of an Apple operating system, or to 12*8d741a5dSApple OSS Distributions * circumvent, violate, or enable the circumvention or violation of, any 13*8d741a5dSApple OSS Distributions * terms of an Apple operating system software license agreement. 14*8d741a5dSApple OSS Distributions * 15*8d741a5dSApple OSS Distributions * Please obtain a copy of the License at 16*8d741a5dSApple OSS Distributions * http://www.opensource.apple.com/apsl/ and read it before using this file. 17*8d741a5dSApple OSS Distributions * 18*8d741a5dSApple OSS Distributions * The Original Code and all software distributed under the License are 19*8d741a5dSApple OSS Distributions * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER 20*8d741a5dSApple OSS Distributions * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, 21*8d741a5dSApple OSS Distributions * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, 22*8d741a5dSApple OSS Distributions * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. 23*8d741a5dSApple OSS Distributions * Please see the License for the specific language governing rights and 24*8d741a5dSApple OSS Distributions * limitations under the License. 25*8d741a5dSApple OSS Distributions * 26*8d741a5dSApple OSS Distributions * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ 27*8d741a5dSApple OSS Distributions */ 28*8d741a5dSApple OSS Distributions 29*8d741a5dSApple OSS Distributions #ifndef _SYS_CSR_H_ 30*8d741a5dSApple OSS Distributions #define _SYS_CSR_H_ 31*8d741a5dSApple OSS Distributions 32*8d741a5dSApple OSS Distributions #include <stdint.h> 33*8d741a5dSApple OSS Distributions #include <sys/appleapiopts.h> 34*8d741a5dSApple OSS Distributions #include <sys/cdefs.h> 35*8d741a5dSApple OSS Distributions 36*8d741a5dSApple OSS Distributions #ifdef __APPLE_API_PRIVATE 37*8d741a5dSApple OSS Distributions 38*8d741a5dSApple OSS Distributions typedef uint32_t csr_config_t; 39*8d741a5dSApple OSS Distributions typedef uint32_t csr_op_t; 40*8d741a5dSApple OSS Distributions 41*8d741a5dSApple OSS Distributions /* CSR configuration flags */ 42*8d741a5dSApple OSS Distributions #define CSR_ALLOW_UNTRUSTED_KEXTS (1 << 0) 43*8d741a5dSApple OSS Distributions #define CSR_ALLOW_UNRESTRICTED_FS (1 << 1) 44*8d741a5dSApple OSS Distributions #define CSR_ALLOW_TASK_FOR_PID (1 << 2) 45*8d741a5dSApple OSS Distributions #define CSR_ALLOW_KERNEL_DEBUGGER (1 << 3) 46*8d741a5dSApple OSS Distributions #define CSR_ALLOW_APPLE_INTERNAL (1 << 4) 47*8d741a5dSApple OSS Distributions #define CSR_ALLOW_DESTRUCTIVE_DTRACE (1 << 5) /* name deprecated */ 48*8d741a5dSApple OSS Distributions #define CSR_ALLOW_UNRESTRICTED_DTRACE (1 << 5) 49*8d741a5dSApple OSS Distributions #define CSR_ALLOW_UNRESTRICTED_NVRAM (1 << 6) 50*8d741a5dSApple OSS Distributions #define CSR_ALLOW_DEVICE_CONFIGURATION (1 << 7) 51*8d741a5dSApple OSS Distributions #define CSR_ALLOW_ANY_RECOVERY_OS (1 << 8) 52*8d741a5dSApple OSS Distributions #define CSR_ALLOW_UNAPPROVED_KEXTS (1 << 9) 53*8d741a5dSApple OSS Distributions #define CSR_ALLOW_EXECUTABLE_POLICY_OVERRIDE (1 << 10) 54*8d741a5dSApple OSS Distributions #define CSR_ALLOW_UNAUTHENTICATED_ROOT (1 << 11) 55*8d741a5dSApple OSS Distributions #define CSR_ALLOW_RESEARCH_GUESTS (1 << 12) 56*8d741a5dSApple OSS Distributions 57*8d741a5dSApple OSS Distributions #define CSR_VALID_FLAGS (CSR_ALLOW_UNTRUSTED_KEXTS | \ 58*8d741a5dSApple OSS Distributions CSR_ALLOW_UNRESTRICTED_FS | \ 59*8d741a5dSApple OSS Distributions CSR_ALLOW_TASK_FOR_PID | \ 60*8d741a5dSApple OSS Distributions CSR_ALLOW_KERNEL_DEBUGGER | \ 61*8d741a5dSApple OSS Distributions CSR_ALLOW_APPLE_INTERNAL | \ 62*8d741a5dSApple OSS Distributions CSR_ALLOW_UNRESTRICTED_DTRACE | \ 63*8d741a5dSApple OSS Distributions CSR_ALLOW_UNRESTRICTED_NVRAM | \ 64*8d741a5dSApple OSS Distributions CSR_ALLOW_DEVICE_CONFIGURATION | \ 65*8d741a5dSApple OSS Distributions CSR_ALLOW_ANY_RECOVERY_OS | \ 66*8d741a5dSApple OSS Distributions CSR_ALLOW_UNAPPROVED_KEXTS | \ 67*8d741a5dSApple OSS Distributions CSR_ALLOW_EXECUTABLE_POLICY_OVERRIDE | \ 68*8d741a5dSApple OSS Distributions CSR_ALLOW_UNAUTHENTICATED_ROOT | \ 69*8d741a5dSApple OSS Distributions CSR_ALLOW_RESEARCH_GUESTS) 70*8d741a5dSApple OSS Distributions 71*8d741a5dSApple OSS Distributions #define CSR_ALWAYS_ENFORCED_FLAGS (CSR_ALLOW_DEVICE_CONFIGURATION | CSR_ALLOW_ANY_RECOVERY_OS) 72*8d741a5dSApple OSS Distributions 73*8d741a5dSApple OSS Distributions /* Flags set by `csrutil disable`. */ 74*8d741a5dSApple OSS Distributions #define CSR_DISABLE_FLAGS (CSR_ALLOW_UNTRUSTED_KEXTS | \ 75*8d741a5dSApple OSS Distributions CSR_ALLOW_UNRESTRICTED_FS | \ 76*8d741a5dSApple OSS Distributions CSR_ALLOW_TASK_FOR_PID | \ 77*8d741a5dSApple OSS Distributions CSR_ALLOW_KERNEL_DEBUGGER | \ 78*8d741a5dSApple OSS Distributions CSR_ALLOW_APPLE_INTERNAL | \ 79*8d741a5dSApple OSS Distributions CSR_ALLOW_UNRESTRICTED_DTRACE | \ 80*8d741a5dSApple OSS Distributions CSR_ALLOW_UNRESTRICTED_NVRAM) 81*8d741a5dSApple OSS Distributions 82*8d741a5dSApple OSS Distributions /* CSR capabilities that a booter can give to the system */ 83*8d741a5dSApple OSS Distributions #define CSR_CAPABILITY_UNLIMITED (1 << 0) 84*8d741a5dSApple OSS Distributions #define CSR_CAPABILITY_CONFIG (1 << 1) 85*8d741a5dSApple OSS Distributions #define CSR_CAPABILITY_APPLE_INTERNAL (1 << 2) 86*8d741a5dSApple OSS Distributions 87*8d741a5dSApple OSS Distributions #define CSR_VALID_CAPABILITIES (CSR_CAPABILITY_UNLIMITED | CSR_CAPABILITY_CONFIG | CSR_CAPABILITY_APPLE_INTERNAL) 88*8d741a5dSApple OSS Distributions 89*8d741a5dSApple OSS Distributions #ifdef PRIVATE 90*8d741a5dSApple OSS Distributions /* Private system call interface between Libsyscall and xnu */ 91*8d741a5dSApple OSS Distributions 92*8d741a5dSApple OSS Distributions /* Syscall flavors */ 93*8d741a5dSApple OSS Distributions enum csr_syscalls { 94*8d741a5dSApple OSS Distributions CSR_SYSCALL_CHECK, 95*8d741a5dSApple OSS Distributions CSR_SYSCALL_GET_ACTIVE_CONFIG, 96*8d741a5dSApple OSS Distributions }; 97*8d741a5dSApple OSS Distributions 98*8d741a5dSApple OSS Distributions #endif /* PRIVATE */ 99*8d741a5dSApple OSS Distributions 100*8d741a5dSApple OSS Distributions __BEGIN_DECLS 101*8d741a5dSApple OSS Distributions 102*8d741a5dSApple OSS Distributions /* Syscalls */ 103*8d741a5dSApple OSS Distributions int csr_check(csr_config_t mask); 104*8d741a5dSApple OSS Distributions int csr_get_active_config(csr_config_t *config); 105*8d741a5dSApple OSS Distributions 106*8d741a5dSApple OSS Distributions __END_DECLS 107*8d741a5dSApple OSS Distributions 108*8d741a5dSApple OSS Distributions #endif /* __APPLE_API_PRIVATE */ 109*8d741a5dSApple OSS Distributions 110*8d741a5dSApple OSS Distributions #endif /* _SYS_CSR_H_ */ 111