\n}\n\n#ifndef UINT64_MAX\n#define UINT64_MAX 18446744073709551615ULL\n#endif\n\nenum {\n kIODefaultProbeScore \t= 0\n};\n\n// masks for getState()\nenum {\n kIOServiceInactiveState\t= 0x00000001,\n kIOServiceRegisteredState\t= 0x00000002,\n kIOServiceMatchedState\t= 0x00000004,\n kIOServiceFirstPublishState\t= 0x00000008,\n kIOServiceFirstMatchState\t= 0x00000010\n};\n\nenum {\n // options for registerService()\n kIOServiceExclusive\t\t= 0x00000001,\n\n // options for terminate()\n kIOServiceRequired\t\t= 0x00000001,\n kIOServiceTerminate\t\t= 0x00000004,\n\n // options for registerService() & terminate()\n kIOServiceSynchronous\t= 0x00000002,\n // options for registerService()\n kIOServiceAsynchronous\t= 0x00000008\n};\n\n// options for open()\nenum {\n kIOServiceSeize\t\t= 0x00000001,\n kIOServiceFamilyOpenOptions = 0xffff0000\n};\n\n// options for close()\nenum {\n kIOServiceFamilyCloseOptions = 0xffff0000\n};\n\ntypedef void * IONotificationRef;\n\nextern const IORegistryPlane *\tgIOServicePlane;\nextern const IORegistryPlane * gIOPowerPlane;\n\nextern const OSSymbol *\t\tgIOResourcesKey;\nextern const OSSymbol *\t\tgIOResourceMatchKey;\nextern const OSSymbol *\t\tgIOProviderClassKey;\nextern const OSSymbol * \tgIONameMatchKey;\nextern const OSSymbol *\t\tgIONameMatchedKey;\nextern const OSSymbol *\t\tgIOPropertyMatchKey;\nextern const OSSymbol *\t\tgIOLocationMatchKey;\nextern const OSSymbol *\t\tgIOParentMatchKey;\nextern const OSSymbol *\t\tgIOPathMatchKey;\nextern const OSSymbol *\t\tgIOMatchCategoryKey;\nextern const OSSymbol *\t\tgIODefaultMatchCategoryKey;\nextern const OSSymbol *\t\tgIOMatchedServiceCountKey;\n\nextern const OSSymbol *\t\tgIOUserClientClassKey;\nextern const OSSymbol *\t\tgIOKitDebugKey;\nextern const OSSymbol *\t\tgIOServiceKey;\n\nextern const OSSymbol *\t\tgIOCommandPoolSizeKey;\n\nextern const OSSymbol *\t\tgIOPublishNotification;\nextern const OSSymbol *\t\tgIOFirstPublishNotification;\nextern const OSSymbol *\t\tgIOMatchedNotification;\nextern const OSSymbol *\t\tgIOFirstMatchNotification;\nextern const OSSymbol *\t\tgIOTerminatedNotification;\n\nextern const OSSymbol *\t\tgIOGeneralInterest;\nextern const OSSymbol *\t\tgIOBusyInterest;\nextern const OSSymbol *\t\tgIOOpenInterest;\nextern const OSSymbol *\t\tgIOAppPowerStateInterest;\nextern const OSSymbol *\t\tgIOPriorityPowerStateInterest;\nextern const OSSymbol *\t\tgIOConsoleSecurityInterest;\n\nextern const OSSymbol *\t\tgIODeviceMemoryKey;\nextern const OSSymbol *\t\tgIOInterruptControllersKey;\nextern const OSSymbol *\t\tgIOInterruptSpecifiersKey;\n\nextern SInt32 IOServiceOrdering( const OSMetaClassBase * inObj1, const OSMetaClassBase * inObj2, void * ref );\n\ntypedef void (*IOInterruptAction)( OSObject * target, void * refCon,\n\t\t\t\t IOService * nub, int source );\n\n/*! @typedef IOServiceNotificationHandler\n @param target Reference supplied when the notification was registered.\n @param refCon Reference constant supplied when the notification was registered.\n @param newService The IOService object the notification is delivering. It is retained for the duration of the handler's invocation and doesn't need to be released by the handler. */\n\ntypedef bool (*IOServiceNotificationHandler)( void * target, void * refCon,\n IOService * newService );\n\ntypedef bool (*IOServiceMatchingNotificationHandler)( void * target, void * refCon,\n IOService * newService,\n\t\t\t\t IONotifier * notifier );\n\n/*! @typedef IOServiceInterestHandler\n @param target Reference supplied when the notification was registered.\n @param refCon Reference constant supplied when the notification was registered.\n @param messageType Type of the message - IOKit defined in IOKit/IOMessage.h or family specific.\n @param provider The IOService object who is delivering the notification. It is retained for the duration of the handler's invocation and doesn't need to be released by the handler.\n @param messageArgument An argument for message, dependent on its type.\n @param argSize Non zero if the argument represents a struct of that size, used when delivering messages outside the kernel. */\n\ntypedef IOReturn (*IOServiceInterestHandler)( void * target, void * refCon,\n UInt32 messageType, IOService * provider,\n void * messageArgument, vm_size_t argSize );\n\ntypedef void (*IOServiceApplierFunction)(IOService * service, void * context);\ntypedef void (*OSObjectApplierFunction)(OSObject * object, void * context);\n\nclass IOUserClient;\nclass IOPlatformExpert;\n\n/*! @class IOService\n @abstract The base class for most I/O Kit families, devices, and drivers.\n @discussion The IOService base class defines APIs used to publish services, instantiate other services based on the existance of a providing service (ie. driver stacking), destroy a service and its dependent stack, notify interested parties of service state changes, and general utility functions useful across all families. \n\nTypes of service are specified with a matching dictionary that describes properties of the service. For example, a matching dictionary might describe any IOUSBDevice (or subclass), an IOUSBDevice with a certain class code, or a IOPCIDevice with a set of matching names or device & vendor IDs. Since the matching dictionary is interpreted by the family which created the service, as well as generically by IOService, the list of properties considered for matching depends on the familiy.\n\nMatching dictionaries are associated with IOService classes by the catalogue, as driver property tables, and also supplied by clients of the notification APIs.\n\nIOService provides matching based on C++ class (via OSMetaClass dynamic casting), registry entry name, a registry path to the service (which includes device tree paths), a name assigned by BSD, or by its location (its point of attachment).\n\nkIOProbeScoreKey (\"IOProbeScore\") property in the dictionary, or supplied with the notification. \n\nEach entry in the list is then processed in order - for notifications, the notification is delivered, for driver property tables a lot more happens.\n\nThe driver class is instantiated and init() called with its property table. The new driver instance is then attached to the provider, and has its @link probe probe@/link method called with the provider as an argument. The default probe method does nothing but return success, but a driver may implement this method to interrogate the provider to make sure it can work with it. It may also modify its probe score at this time. After probe, the driver is detached and the next in the list is considered (ie. attached, probed, and detached).\n\nWhen the probing phase is complete, the list consists of successfully probed drivers, in order of their probe score (after adjustment during the @link probe probe@/link call). The list is then divided into categories based on the kIOMatchCategoryKey property (\"IOMatchCategory\"); drivers without a match category are all considered in one default category. Match categories allow multiple clients of a provider to be attached and started, though the provider may also enforce open/close semantics to gain active access to it.\n\nFor each category, the highest scoring driver in that category is attached to the provider, and its @link start start@/link method called. If start is successful, the rest of the drivers in the same match category are discarded, otherwise the next highest scoring driver is started, and so on.\n\nThe driver should only consider itself in action when the start method is called, meaning it has been selected for use on the provider, and consuming that particular match category. It should also be prepared to be allocated, probed and freed even if the probe was successful.\n\nAfter the drivers have all synchronously been started, the installed \"matched\" notifications that match the registered IOService are delivered.\n\nkIOClassKey, extern const OSSymbol * gIOClassKey, \"IOClass\"\nkIOProviderClassKey, extern const OSSymbol * gIOProviderClassKey, \"IOProviderClass\"\nkIOProbeScoreKey, extern const OSSymbol * gIOProbeScoreKey, \"IOProbeScore\"\nkIOMatchCategoryKey, extern const OSSymbol * gIOMatchCategoryKey, \"IOMatchCategory\"\nIOMatchCategory property are considered to be in the same default category. Only one driver in a category can be started on each provider.\nkIONameMatchKey, extern const OSSymbol * gIONameMatchKey, \"IONameMatch\"\nkIONameMatchedKey property.\n\n@textblock\n\tIONameMatch \n\tpci106b,7 \n@/textblock\n \n\nFor a list of possible matching names, a serialized array of strings should used, eg.\n\n@textblock\n\tIONameMatch \n\t\n\t\tAPPL,happy16 \n\t\tpci106b,7 \n\t \n@/textblock\n \n\nkIONameMatchedKey, extern const OSSymbol * gIONameMatchedKey, \"IONameMatched\"\nkIONameMatchKey property will be left in the driver's property table as the kIONameMatchedKey property.\nkIOPropertyMatchKey, extern const OSSymbol * gIOPropertyMatchKey, \"IOPropertyMatch\"\nisEqualTo method.\n\n\n@textblock\n\tIOPropertyMatch \n\t\n\t\tAPPL,happy16 \n\t\tAPPL,meek8 \n\t \n@/textblock\n \n\nkIOUserClientClassKey, extern const OSSymbol * gIOUserClientClassKey, \"IOUserClientClass\"\nkIOKitDebugKey, extern const OSSymbol * gIOKitDebugKey, \"IOKitDebug\"\nIOKit/IOKitDebug.h, but 65535 works well.*/\n\nclass IOService : public IORegistryEntry\n{\n OSDeclareDefaultStructors(IOService)\n\nprotected:\n/*! @struct ExpansionData\n @discussion This structure will be used to expand the capablilties of this class in the future.\n */ \n struct ExpansionData { };\n\n/*! @var reserved\n Reserved for future use. (Internal use only) */\n ExpansionData * reserved;\n\nprivate:\n IOService *\t\t__provider;\n SInt32\t\t__providerGeneration;\n IOService *\t\t__owner;\n IOOptionBits\t__state[2];\n uint64_t\t\t__timeBusy;\n uint64_t\t\t__accumBusy;\n IOServicePM *\tpwrMgt;\n\nprotected:\n // TRUE once PMinit has been called\n bool\t\t\tinitialized;\n\npublic:\n // DEPRECATED\n void * pm_vars;\n\npublic:\n /* methods available in Mac OS X 10.1 or later */\n/*! @function requestTerminate\n @abstract Passes a termination up the stack.\n @discussion When an IOService is made inactive the default behavior is to also make any of its clients that have it as their only provider also inactive, in this way recursing the termination up the driver stack. This method allows an IOService object to override this behavior. Returning true from this method when passed a just terminated provider will cause the client to also be terminated.\n @param provider The terminated provider of this object.\n @param options Options originally passed to terminate, plus kIOServiceRecursing.\n @result true if this object should be terminated now that its provider has been. */\n\n virtual bool requestTerminate( IOService * provider, IOOptionBits options );\n\n/*! @function willTerminate\n @abstract Passes a termination up the stack.\n @discussion Notification that a provider has been terminated, sent before recursing up the stack, in root-to-leaf order.\n @param provider The terminated provider of this object.\n @param options Options originally passed to terminate.\n @result true. */\n\n virtual bool willTerminate( IOService * provider, IOOptionBits options );\n\n/*! @function didTerminate\n @abstract Passes a termination up the stack.\n @discussion Notification that a provider has been terminated, sent after recursing up the stack, in leaf-to-root order.\n @param provider The terminated provider of this object.\n @param options Options originally passed to terminate.\n @param defer If there is pending I/O that requires this object to persist, and the provider is not opened by this object set defer to true and call the IOService::didTerminate() implementation when the I/O completes. Otherwise, leave defer set to its default value of false.\n @result true. */\n\n virtual bool didTerminate( IOService * provider, IOOptionBits options, bool * defer );\n\n/*! @function nextIdleTimeout\n @availability Mac OS X v10.4 and later\n @abstract Allows subclasses to customize idle power management behavior.\n @discussion Returns the next time that the device should idle into its next lower power state. Subclasses may override for custom idle behavior.\n \n A power managed driver might override this method to provide a more sophisticated idle power off algorithm than the one defined by power management.\n @param currentTime The current time\n @param lastActivity The time of last activity on this device\n @param powerState The device's current power state.\n @result Returns the next time the device should idle off (in seconds, relative to the current time). */\n\n virtual SInt32 nextIdleTimeout(AbsoluteTime currentTime, \n AbsoluteTime lastActivity, unsigned int powerState);\n\n/*! @function systemWillShutdown\n @availability Mac OS X v10.5 and later\n @abstract Notifies members of the power plane of system shutdown and restart.\n @discussion This function is called for all members of the power plane in leaf-to-root order. If a subclass needs to wait for a pending I/O, then the call to systemWillShutdown should be postponed until the I/O completes.\n \n Any power managed driver (which has called @link joinPMtree joinPMtree@/link to join the power plane) interested in taking action at system shutdown or restart should override this method.\n @param specifier kIOMessageSystemWillPowerOff or kIOMessageSystemWillRestart. */\n\n virtual void systemWillShutdown( IOOptionBits specifier );\n\n/*! @function copyClientWithCategory\n @availability Mac OS X v10.6 and later\n @param category An OSSymbol corresponding to an IOMatchCategory matching property.\n\t@result Returns a reference to the IOService child with the given category. The result should be released by the caller.\n*/\n\n virtual IOService * copyClientWithCategory( const OSSymbol * category );\n\nprivate:\n#if __LP64__\n OSMetaClassDeclareReservedUnused(IOService, 0);\n OSMetaClassDeclareReservedUnused(IOService, 1);\n OSMetaClassDeclareReservedUnused(IOService, 2);\n OSMetaClassDeclareReservedUnused(IOService, 3);\n OSMetaClassDeclareReservedUnused(IOService, 4);\n OSMetaClassDeclareReservedUnused(IOService, 5);\n#else\n OSMetaClassDeclareReservedUsed(IOService, 0);\n OSMetaClassDeclareReservedUsed(IOService, 1);\n OSMetaClassDeclareReservedUsed(IOService, 2);\n OSMetaClassDeclareReservedUsed(IOService, 3);\n OSMetaClassDeclareReservedUsed(IOService, 4);\n OSMetaClassDeclareReservedUsed(IOService, 5);\n#endif\n\n OSMetaClassDeclareReservedUnused(IOService, 6);\n OSMetaClassDeclareReservedUnused(IOService, 7);\n OSMetaClassDeclareReservedUnused(IOService, 8);\n OSMetaClassDeclareReservedUnused(IOService, 9);\n OSMetaClassDeclareReservedUnused(IOService, 10);\n OSMetaClassDeclareReservedUnused(IOService, 11);\n OSMetaClassDeclareReservedUnused(IOService, 12);\n OSMetaClassDeclareReservedUnused(IOService, 13);\n OSMetaClassDeclareReservedUnused(IOService, 14);\n OSMetaClassDeclareReservedUnused(IOService, 15);\n OSMetaClassDeclareReservedUnused(IOService, 16);\n OSMetaClassDeclareReservedUnused(IOService, 17);\n OSMetaClassDeclareReservedUnused(IOService, 18);\n OSMetaClassDeclareReservedUnused(IOService, 19);\n OSMetaClassDeclareReservedUnused(IOService, 20);\n OSMetaClassDeclareReservedUnused(IOService, 21);\n OSMetaClassDeclareReservedUnused(IOService, 22);\n OSMetaClassDeclareReservedUnused(IOService, 23);\n OSMetaClassDeclareReservedUnused(IOService, 24);\n OSMetaClassDeclareReservedUnused(IOService, 25);\n OSMetaClassDeclareReservedUnused(IOService, 26);\n OSMetaClassDeclareReservedUnused(IOService, 27);\n OSMetaClassDeclareReservedUnused(IOService, 28);\n OSMetaClassDeclareReservedUnused(IOService, 29);\n OSMetaClassDeclareReservedUnused(IOService, 30);\n OSMetaClassDeclareReservedUnused(IOService, 31);\n OSMetaClassDeclareReservedUnused(IOService, 32);\n OSMetaClassDeclareReservedUnused(IOService, 33);\n OSMetaClassDeclareReservedUnused(IOService, 34);\n OSMetaClassDeclareReservedUnused(IOService, 35);\n OSMetaClassDeclareReservedUnused(IOService, 36);\n OSMetaClassDeclareReservedUnused(IOService, 37);\n OSMetaClassDeclareReservedUnused(IOService, 38);\n OSMetaClassDeclareReservedUnused(IOService, 39);\n OSMetaClassDeclareReservedUnused(IOService, 40);\n OSMetaClassDeclareReservedUnused(IOService, 41);\n OSMetaClassDeclareReservedUnused(IOService, 42);\n OSMetaClassDeclareReservedUnused(IOService, 43);\n OSMetaClassDeclareReservedUnused(IOService, 44);\n OSMetaClassDeclareReservedUnused(IOService, 45);\n OSMetaClassDeclareReservedUnused(IOService, 46);\n OSMetaClassDeclareReservedUnused(IOService, 47);\n\npublic:\n/*! @function getState\n @abstract Accessor for IOService state bits, not normally needed or used outside IOService.\n @result State bits for the IOService, eg. kIOServiceInactiveState, kIOServiceRegisteredState. */\n\n virtual IOOptionBits getState( void ) const;\n\n/*! @function isInactive\n @abstract Checks if the IOService object has been terminated, and is in the process of being destroyed.\n @discussion When an IOService object is successfully terminated, it is immediately made inactive, which blocks further attach()es, matching or notifications occuring on the object. It remains inactive until the last client closes, and is then finalized and destroyed.\n @result true if the IOService object has been terminated. */\n\n bool isInactive( void ) const;\n\n /* Stack creation */\n\n/*! @function registerService\n @abstract Starts the registration process for a newly discovered IOService object.\n @discussion This function allows an IOService subclass to be published and made available to possible clients, by starting the registration process and delivering notifications to registered clients. The object should be completely setup and ready to field requests from clients before registerService is called.\n @param options The default zero options mask is recommended and should be used in most cases. The registration process is usually asynchronous, with possible driver probing and notification occurring some time later. kIOServiceSynchronous may be passed to carry out the matching and notification process for currently registered clients before returning to the caller. */\n\n virtual void registerService( IOOptionBits options = 0 );\n\n/*! @function probe\n @abstract During an IOService object's instantiation, probes a matched service to see if it can be used.\n @discussion The registration process for an IOService object (the provider) includes instantiating possible driver clients. The probe method is called in the client instance to check the matched service can be used before the driver is considered to be started. Since matching screens many possible providers, in many cases the probe method can be left unimplemented by IOService subclasses. The client is already attached to the provider when probe is called.\n @param provider The registered IOService object that matches a driver personality's matching dictionary.\n @param score Pointer to the current driver's probe score, which is used to order multiple matching drivers in the same match category. It defaults to the value of the IOProbeScore property in the drivers property table, or kIODefaultProbeScore if none is specified. The probe method may alter the score to affect start order.\n @result An IOService instance or zero when the probe is unsuccessful. In almost all cases the value of this is returned on success. If another IOService object is returned, the probed instance is detached and freed, and the returned instance is used in its stead for start. */\n \n virtual IOService * probe(\tIOService * \tprovider,\n\t\t\t\tSInt32 \t *\tscore );\n\n/*! @function start\n @abstract During an IOService object's instantiation, starts the IOService object that has been selected to run on the provider.\n @discussion The start method of an IOService instance is called by its provider when it has been selected (due to its probe score and match category) as the winning client. The client is already attached to the provider when start is called.start must call start on their superclass at an appropriate point. If an implementation of start has already called super::start but subsequently determines that it will fail, it must call super::stop to balance the prior call to super::start and prevent reference leaks.\n @result true if the start was successful; false otherwise (which will cause the instance to be detached and usually freed). */\n \n virtual bool start( IOService * provider );\n \n/*! @function stop\n @abstract During an IOService termination, the stop method is called in its clients before they are detached & it is destroyed.\n @discussion The termination process for an IOService (the provider) will call stop in each of its clients, after they have closed the provider if they had it open, or immediately on termination. */\n\n virtual void stop( IOService * provider );\n\n /* Open / Close */\n\n/*! @function open\n @abstract Requests active access to a provider.\n @discussion IOService provides generic open and close semantics to track clients of a provider that have established an active datapath. The use of open and @link close close@/link, and rules regarding ownership are family defined, and defined by the @link handleOpen handleOpen@/link and @link handleClose handleClose@/link methods in the provider. Some families will limit access to a provider based on its open state.\n @param forClient Designates the client of the provider requesting the open.\n @param options Options for the open. The provider family may implement options for open; IOService defines only kIOServiceSeize to request the device be withdrawn from its current owner.\n @result true if the open was successful; false otherwise. */\n\n virtual bool open( \t IOService *\t forClient,\n IOOptionBits\t options = 0,\n void *\t\t arg = 0 );\n\n/*! @function close\n @abstract Releases active access to a provider.\n @discussion IOService provides generic open and close semantics to track clients of a provider that have established an active datapath. The use of @link open open@/link and close, and rules regarding ownership are family defined, and defined by the @link handleOpen handleOpen@/link and @link handleClose handleClose@/link methods in the provider.\n @param forClient Designates the client of the provider requesting the close.\n @param options Options available for the close. The provider family may implement options for close; IOService defines none.\n @param arg Family specific arguments which are ignored by IOService. */\n \n virtual void close( IOService *\t forClient,\n IOOptionBits\t options = 0 );\n \n/*! @function isOpen\n @abstract Determines whether a specific, or any, client has an IOService object open.\n @discussion Returns the open state of an IOService object with respect to the specified client, or when it is open by any client.\n @param forClient If non-zero, open. The object is locked via @link lockForArbitration lockForArbitration@/link before handleOpen is called.\n @param forClient Designates the client of the provider requesting the open.\n @param options Options for the open, may be interpreted by the implementor of handleOpen.\n @result trueif the open was successful; false otherwise. */\n\n virtual bool handleOpen( \tIOService *\t forClient,\n IOOptionBits\t options,\n void *\t\t arg );\n \n/*! @function handleClose\n @abstract Controls the open / close behavior of an IOService object (overrideable by subclasses).\n @discussion IOService calls this method in its subclasses in response to the @link close close@/link method, so the subclass may implement the request. The default implementation provides single owner access to an IOService object via @link open open@/link. The object is locked via @link lockForArbitration lockForArbitration@/link before handleClose is called.\n @param forClient Designates the client of the provider requesting the close.\n @param options Options for the close, may be interpreted by the implementor of @link handleOpen handleOpen@/link. */\n\n virtual void handleClose( IOService *\t forClient,\n IOOptionBits\t options );\n \n/*! @function handleIsOpen\n @abstract Controls the open / close behavior of an IOService object (overrideable by subclasses).\n @discussion IOService calls this method in its subclasses in response to the @link open open@/link method, so the subclass may implement the request. The default implementation provides single owner access to an IOService object via @link open open@/link. The object is locked via @link lockForArbitration lockForArbitration@/link before handleIsOpen is called.\n @param forClient If non-zero, isOpen returns the open state for that client. If zero is passed, isOpen returns the open state for all clients.\n @result true if the specific, or any, client has the IOService object open. */\n\n virtual bool handleIsOpen( const IOService * forClient ) const;\n\n /* Stacking change */\n\n/*! @function terminate\n @abstract Makes an IOService object inactive and begins its destruction.\n @discussion Registering an IOService object informs possible clients of its existance and instantiates drivers that may be used with it; terminate involves the opposite process of informing clients that an IOService object is no longer able to be used and will be destroyed. By default, if any client has the service open, terminate fails. If the kIOServiceRequired flag is passed however, terminate will be successful though further progress in the destruction of the IOService object will not proceed until the last client has closed it. The service will be made inactive immediately upon successful termination, and all its clients will be notified via their @link message message@/link method with a message of type kIOMessageServiceIsTerminated. Both these actions take place on the caller's thread. After the IOService object is made inactive, further matching or attach calls will fail on it. Each client has its @link stop stop@/link method called upon their close of an inactive IOService object , or on its termination if they do not have it open. After stop, @link detach detach@/link is called in each client. When all clients have been detached, the @link finalize finalize@/link method is called in the inactive service. The termination process is inherently asynchronous because it will be deferred until all clients have chosen to close.\n @param options In most cases no options are needed. kIOServiceSynchronous may be passed to cause terminate to not return until the service is finalized. */\n\n virtual bool terminate( IOOptionBits options = 0 );\n\n/*! @function finalize\n @abstract Finalizes the destruction of an IOService object.\n @discussion The finalize method is called in an inactive (ie. terminated) IOService object after the last client has detached. IOService's implementation will call @link stop stop@/link, @link close close@/link, and @link detach detach@/link on each provider. When finalize returns, the object's retain count will have no references generated by IOService's registration process.\n @param options The options passed to the @link terminate terminate@/link method of the IOService object are passed on to finalize.\n @result true. */\n \n virtual bool finalize( IOOptionBits options );\n\n/*! @function free\n @abstract Frees data structures that were allocated when power management was initialized on this service. */\n \n virtual void free( void ) override;\n\n/*! @function lockForArbitration\n @abstract Locks an IOService object against changes in state or ownership.\n @discussion The registration, termination and open / close functions of IOService use lockForArbtration to single-thread access to an IOService object. lockForArbitration grants recursive access to the same thread.\n @param isSuccessRequired If a request for access to an IOService object should be denied if it is terminated, pass false, otherwise pass true. */\n \n virtual bool lockForArbitration( bool isSuccessRequired = true );\n \n/*! @function unlockForArbitration\n @abstract Unlocks an IOService obkect after a successful @link lockForArbitration lockForArbitration@/link.\n @discussion A thread granted exclusive access to an IOService object should release it with unlockForArbitration. */\n \n virtual void unlockForArbitration( void );\n\n/*! @function terminateClient\n @abstract Passes a termination up the stack.\n @discussion When an IOService object is made inactive the default behavior is to also make any of its clients that have it as their only provider inactive, in this way recursing the termination up the driver stack. This method allows a terminated IOService object to override this behavior. Note the client may also override this behavior by overriding its @link terminate terminate@/link method.\n @param client The client of the terminated provider.\n @param options Options originally passed to @link terminate terminate@/link, plus kIOServiceRecursing.\n @result result of the terminate request on the client. */\n\n virtual bool terminateClient( IOService * client, IOOptionBits options );\n\n /* Busy state indicates discovery, matching or termination is in progress */\n\n/*! @function getBusyState\n @abstract Returns the busyState of an IOService object.\n @discussion Many activities in IOService are asynchronous. When registration, matching, or termination is in progress on an IOService object, its busyState is increased by one. Change in busyState to or from zero also changes the IOService object's provider's busyState by one, which means that an IOService object is marked busy when any of the above activities is ocurring on it or any of its clients.\n @result The busyState value. */\n\n virtual UInt32 getBusyState( void );\n \n/*! @function adjustBusy\n @abstract Adjusts the busyState of an IOService object.\n @discussion Applies a delta to an IOService object's busyState. A change in the busyState to or from zero will change the IOService object's provider's busyState by one (in the same direction). \n @param delta The delta to be applied to the IOService object's busyState. */\n\n virtual void adjustBusy( SInt32 delta );\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n\tIOReturn waitQuiet(mach_timespec_t * timeout)\n\tAPPLE_KEXT_DEPRECATED;\n\n/*! @function waitQuiet\n @abstract Waits for an IOService object's busyState to be zero.\n @discussion Blocks the caller until an IOService object is non busy.\n\t@param timeout The maximum time to wait in nanoseconds. Default is to wait forever.\n @result Returns an error code if Mach synchronization primitives fail, kIOReturnTimeout, or kIOReturnSuccess. */\n \n IOReturn waitQuiet(uint64_t timeout = UINT64_MAX);\n\n /* Matching */\n\n/*! @function matchPropertyTable\n @abstract Allows a registered IOService object to implement family specific matching.\n @discussion All matching on an IOService object will call this method to allow a family writer to implement matching in addition to the generic methods provided by IOService. The implementer should examine the matching dictionary passed to see if it contains properties the family understands for matching, and use them to match with the IOService object if so. Note that since matching is also carried out by other parts of the I/O Kit, the matching dictionary may contain properties the family does not understand - these should not be considered matching failures.\n @param table The dictionary of properties to be matched against.\n @param score Pointer to the current driver's probe score, which is used to order multiple matching drivers in the same match category. It defaults to the value of the IOProbeScore property in the drivers property table, or kIODefaultProbeScore if none is specified.\n @result false if the family considers the matching dictionary does not match in properties it understands; true otherwise. */\n\n virtual bool matchPropertyTable( OSDictionary *\ttable,\n SInt32 *\tscore );\n\n virtual bool matchPropertyTable( OSDictionary * table );\n\n/*! @function matchLocation\n @abstract Allows a registered IOService object to direct location matching.\n @discussion By default, a location matching property will be applied to an IOService object's provider. This method allows that behavior to be overridden by families.\n @param client The IOService object at which matching is taking place.\n @result Returns the IOService instance to be used for location matching. */\n\n virtual IOService * matchLocation( IOService * client );\n\n /* Resource service */\n\n/*! @function publishResource\n @abstract Uses the resource service to publish a property.\n @discussion The resource service uses IOService's matching and notification to allow objects to be published and found by any I/O Kit client by a global name. publishResource makes an object available to anyone waiting for it or looking for it in the future.\n @param key An OSSymbol key that globally identifies the object.\n @param The object to be published. */\n\n static void publishResource( const OSSymbol * key, OSObject * value = 0 );\n\n/*! @function publishResource\n @abstract Uses the resource service to publish a property.\n @discussion The resource service uses IOService object's matching and notification to allow objects to be published and found by any I/O Kit client by a global name. publishResource makes an object available to anyone waiting for it or looking for it in the future.\n @param key A C string key that globally identifies the object.\n @param The object to be published. */\n\n static void publishResource( const char * key, OSObject * value = 0 );\n virtual bool addNeededResource( const char * key );\n\n /* Notifications */\n\n/*! @function addNotification\n @abstract Deprecated use addMatchingNotification(). Adds a persistant notification handler to be notified of IOService events.\n @discussion IOService will deliver notifications of changes in state of an IOService object to registered clients. The type of notification is specified by a symbol, for example gIOMatchedNotification or gIOTerminatedNotification, and notifications will only include IOService objects that match the supplied matching dictionary. Notifications are ordered by a priority set with addNotification. When the notification is installed, its handler will be called with each of any currently existing IOService objects that are in the correct state (eg. registered) and match the supplied matching dictionary, avoiding races between finding preexisting and new IOService events. The notification request is identified by an instance of an IONotifier object, through which it can be enabled, disabled, or removed. addNotification consumes a retain count on the matching dictionary when the notification is removed.\n @param type An OSSymbol identifying the type of notification and IOService state:\ngIOPublishNotification Delivered when an IOService object is registered.\ngIOFirstPublishNotification Delivered when an IOService object is registered, but only once per IOService instance. Some IOService objects may be reregistered when their state is changed.\ngIOMatchedNotification Delivered when an IOService object has been matched with all client drivers, and they have been probed and started.\ngIOFirstMatchNotification Delivered when an IOService object has been matched with all client drivers, but only once per IOService instance. Some IOService objects may be reregistered when their state is changed.\ngIOTerminatedNotification Delivered after an IOService object has been terminated, during its finalize stage.\n @param matching A matching dictionary to restrict notifications to only matching IOService objects. The dictionary will be released when the notification is removed, consuming the passed-in reference.\n @param handler A C function callback to deliver notifications.\n @param target An instance reference for the callback's use.\n @param ref A reference constant for the callback's use.\n @param priority A constant ordering all notifications of a each type.\n @result An instance of an IONotifier object that can be used to control or destroy the notification request. */\n\n static IONotifier * addNotification(\n const OSSymbol * type, OSDictionary * matching,\n IOServiceNotificationHandler handler,\n void * target, void * ref = 0,\n SInt32 priority = 0 )\n\tAPPLE_KEXT_DEPRECATED;\n\n/*! @function addMatchingNotification\n @abstract Adds a persistant notification handler to be notified of IOService events.\n @discussion IOService will deliver notifications of changes in state of an IOService object to registered clients. The type of notification is specified by a symbol, for example gIOMatchedNotification or gIOTerminatedNotification, and notifications will only include IOService objects that match the supplied matching dictionary. Notifications are ordered by a priority set with addNotification. When the notification is installed, its handler will be called with each of any currently existing IOService objects that are in the correct state (eg. registered) and match the supplied matching dictionary, avoiding races between finding preexisting and new IOService events. The notification request is identified by an instance of an IONotifier object, through which it can be enabled, disabled, or removed. addMatchingNotification does not consume a reference on the matching dictionary when the notification is removed, unlike addNotification.\n @param type An OSSymbol identifying the type of notification and IOService state:\ngIOPublishNotification Delivered when an IOService object is registered.\ngIOFirstPublishNotification Delivered when an IOService object is registered, but only once per IOService instance. Some IOService objects may be reregistered when their state is changed.\ngIOMatchedNotification Delivered when an IOService object has been matched with all client drivers, and they have been probed and started.\ngIOFirstMatchNotification Delivered when an IOService object has been matched with all client drivers, but only once per IOService instance. Some IOService objects may be reregistered when their state is changed.\ngIOTerminatedNotification Delivered after an IOService object has been terminated, during its finalize stage.\n @param matching A matching dictionary to restrict notifications to only matching IOService objects. The dictionary is retained while the notification is installed. (Differs from addNotification).\n @param handler A C function callback to deliver notifications.\n @param target An instance reference for the callback's use.\n @param ref A reference constant for the callback's use.\n @param priority A constant ordering all notifications of a each type.\n @result An instance of an IONotifier object that can be used to control or destroy the notification request. */\n\n static IONotifier * addMatchingNotification(\n const OSSymbol * type, OSDictionary * matching,\n IOServiceMatchingNotificationHandler handler,\n void * target, void * ref = 0,\n SInt32 priority = 0 );\n\n/*! @function waitForService\n @abstract Deprecated use waitForMatchingService(). Waits for a matching to service to be published.\n @discussion Provides a method of waiting for an IOService object matching the supplied matching dictionary to be registered and fully matched. \n @param matching The matching dictionary describing the desired IOService object. waitForService consumes one reference of the matching dictionary.\n @param timeout The maximum time to wait.\n @result A published IOService object matching the supplied dictionary. */\n\n static IOService * waitForService( OSDictionary * matching,\n mach_timespec_t * timeout = 0);\n\n/*! @function waitForMatchingService\n @abstract Waits for a matching to service to be published.\n @discussion Provides a method of waiting for an IOService object matching the supplied matching dictionary to be registered and fully matched. \n @param matching The matching dictionary describing the desired IOService object. (Does not consume a reference of the matching dictionary - differs from waitForService() which does consume a reference on the matching dictionary.)\n\t@param timeout The maximum time to wait in nanoseconds. Default is to wait forever.\n @result A published IOService object matching the supplied dictionary. waitForMatchingService returns a reference to the IOService which should be released by the caller. (Differs from waitForService() which does not retain the returned object.) */\n\n static IOService * waitForMatchingService( OSDictionary * matching,\n uint64_t timeout = UINT64_MAX);\n\n/*! @function getMatchingServices\n @abstract Finds the set of current published IOService objects matching a matching dictionary.\n @discussion Provides a method of finding the current set of published IOService objects matching the supplied matching dictionary. \n @param matching The matching dictionary describing the desired IOService objects.\n @result An instance of an iterator over a set of IOService objects. To be released by the caller. */\n\n static OSIterator * getMatchingServices( OSDictionary * matching );\n\n/*! @function copyMatchingService\n @abstract Finds one of the current published IOService objects matching a matching dictionary.\n @discussion Provides a method to find one member of the set of published IOService objects matching the supplied matching dictionary. \n @param matching The matching dictionary describing the desired IOService object.\n @result The IOService object or NULL. To be released by the caller. */\n\n static IOService * copyMatchingService( OSDictionary * matching );\n\npublic:\n /* Helpers to make matching dictionaries for simple cases,\n * they add keys to an existing dictionary, or create one. */\n\n/*! @function serviceMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify an IOService class match.\n @discussion A very common matching criteria for IOService object is based on its class. serviceMatching creates a matching dictionary that specifies any IOService object of a class, or its subclasses. The class is specified by name, and an existing dictionary may be passed in, in which case the matching properties will be added to that dictionary rather than creating a new one.\n @param className The class name, as a const C string. Class matching is successful on IOService objects of this class or any subclass.\n @param table If zero, serviceMatching creates a matching dictionary and returns a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * serviceMatching( const char * className,\n\t\t\tOSDictionary * table = 0 );\n\n/*! @function serviceMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify an IOService class match.\n @discussion A very common matching criteria for IOService object is based on its class. serviceMatching creates a matching dictionary that specifies any IOService of a class, or its subclasses. The class is specified by name, and an existing dictionary may be passed in, in which case the matching properties will be added to that dictionary rather than creating a new one.\n @param className The class name, as an OSString (which includes OSSymbol). Class matching is successful on IOService objects of this class or any subclass.\n @param table If zero, serviceMatching creates a matching dictionary and returns a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * serviceMatching( const OSString * className,\n\t\t\tOSDictionary * table = 0 );\n\n/*! @function nameMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify an IOService name match.\n @discussion A very common matching criteria for IOService object is based on its name. nameMatching creates a matching dictionary that specifies any IOService object which responds successfully to the @link //apple_ref/cpp/instm/IORegistryEntry/compareName/virtualbool/(OSString*,OSString**) IORegistryEntry::compareName@/link method. An existing dictionary may be passed in, in which case the matching properties will be added to that dictionary rather than creating a new one.\n @param name The service's name, as a const C string. Name matching is successful on IOService objects that respond successfully to the IORegistryEntry::compareName method.\n @param table If zero, nameMatching creates a matching dictionary and returns a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * nameMatching( const char * name,\n\t\t\tOSDictionary * table = 0 );\n\n/*! @function nameMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify an IOService name match.\n @discussion A very common matching criteria for IOService object is based on its name. nameMatching creates a matching dictionary that specifies any IOService object which responds successfully to the @link //apple_ref/cpp/instm/IORegistryEntry/compareName/virtualbool/(OSString*,OSString**) IORegistryEntry::compareName@/link method. An existing dictionary may be passed in, in which case the matching properties will be added to that dictionary rather than creating a new one.\n @param name The service's name, as an OSString (which includes OSSymbol). Name matching is successful on IOService objects that respond successfully to the IORegistryEntry::compareName method.\n @param table If zero, nameMatching creates a matching dictionary and returns a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * nameMatching( const OSString* name,\n\t\t\tOSDictionary * table = 0 );\n\n/*! @function resourceMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify a resource service match.\n @discussion IOService maintains a resource service IOResources that allows objects to be published and found globally in the I/O Kit based on a name, using the standard IOService matching and notification calls.\n @param name The resource name, as a const C string. Resource matching is successful when an object by that name has been published with the publishResource method.\n @param table If zero, resourceMatching creates a matching dictionary and returns a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * resourceMatching( const char * name,\n\t\t\tOSDictionary * table = 0 );\n\n/*! @function resourceMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify a resource service match.\n @discussion IOService maintains a resource service IOResources that allows objects to be published and found globally in the I/O Kit based on a name, using the standard IOService matching and notification calls.\n @param name The resource name, as an OSString (which includes OSSymbol). Resource matching is successful when an object by that name has been published with the publishResource method.\n @param table If zero, resourceMatching creates a matching dictionary and returns a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * resourceMatching( const OSString * name,\n\t\t\tOSDictionary * table = 0 );\n\n\n/*! @function propertyMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify an IOService phandle match.\n @discussion TODO A very common matching criteria for IOService is based on its name. nameMatching will create a matching dictionary that specifies any IOService which respond successfully to the IORegistryEntry method compareName. An existing dictionary may be passed in, in which case the matching properties will be added to that dictionary rather than creating a new one.\n @param key The service's phandle, as a const UInt32. PHandle matching is successful on IOService objects that respond successfully to the IORegistryEntry method compareName.\n @param value The service's phandle, as a const UInt32. PHandle matching is successful on IOService's which respond successfully to the IORegistryEntry method compareName.\n @param table If zero, nameMatching will create a matching dictionary and return a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * propertyMatching( const OSSymbol * key, const OSObject * value,\n\t\t\tOSDictionary * table = 0 );\n\n/*! @function registryEntryIDMatching\n @abstract Creates a matching dictionary, or adds matching properties to an existing dictionary, that specify a IORegistryEntryID match.\n @discussion registryEntryIDMatching creates a matching dictionary that specifies the IOService object with the assigned registry entry ID (returned by IORegistryEntry::getRegistryEntryID()). An existing dictionary may be passed in, in which case the matching properties will be added to that dictionary rather than creating a new one.\n @param name The service's ID. Matching is successful on the IOService object that return that ID from the IORegistryEntry::getRegistryEntryID() method.\n @param table If zero, registryEntryIDMatching creates a matching dictionary and returns a reference to it, otherwise the matching properties are added to the specified dictionary.\n @result The matching dictionary created, or passed in, is returned on success, or zero on failure. */\n\n static OSDictionary * registryEntryIDMatching( uint64_t entryID,\n\t\t\tOSDictionary * table = 0 );\n\n\n/*! @function addLocation\n @abstract Adds a location matching property to an existing dictionary.\n @discussion This function creates matching properties that specify the location of a IOService object, as an embedded matching dictionary. This matching will be successful on an IOService object that attached to an IOService object which matches this location matching dictionary.\n @param table The matching properties are added to the specified dictionary, which must be non-zero.\n @result The location matching dictionary created is returned on success, or zero on failure. */\n\n static OSDictionary * addLocation( OSDictionary * table );\n\n /* Helpers for matching dictionaries. */\n\n/*! @function compareProperty\n @abstract Compares a property in a matching dictionary with an IOService object's property table.\n @discussion This is a helper function to aid in implementing @link matchPropertyTable matchPropertyTable@/link. If the property specified by key exists in the matching dictionary, it is compared with a property of the same name in the IOService object's property table. The comparison is performed with the isEqualTo method. If the property does not exist in the matching table, success is returned. If the property exists in the matching dictionary but not the IOService property table, failure is returned.\n @param matching The matching dictionary, which must be non-zero.\n @param key The dictionary key specifying the property to be compared, as a C string.\n @result true if the property does not exist in the matching table. If the property exists in the matching dictionary but not the IOService property table, failure is returned. Otherwise the result of calling the property from the matching dictionary's isEqualTo method with the IOService property as an argument is returned. */\n\n virtual bool compareProperty( OSDictionary * matching,\n const char * key );\n/*! @function compareProperty\n @abstract Compares a property in a matching dictionary with an IOService object's property table.\n @discussion This is a helper function to aid in implementing @link matchPropertyTable matchPropertyTable@/link. If the property specified by key exists in the matching dictionary, it is compared with a property of the same name in the IOService object's property table. The comparison is performed with the isEqualTo method. If the property does not exist in the matching table, success is returned. If the property exists in the matching dictionary but not the IOService property table, failure is returned.\n @param matching The matching dictionary, which must be non-zero.\n @param key The dictionary key specifying the property to be compared, as an OSString (which includes OSSymbol).\n @result true if the property does not exist in the matching table. If the property exists in the matching dictionary but not the IOService property table, failure is returned. Otherwise the result of calling the property from the matching dictionary's isEqualTo method with the IOService property as an argument is returned. */\n\n virtual bool compareProperty( OSDictionary * matching,\n const OSString * key );\n\n/*! @function compareProperties\n @abstract Compares a set of properties in a matching dictionary with an IOService object's property table.\n @discussion This is a helper function to aid in implementing @link matchPropertyTable matchPropertyTable@/link. A collection of dictionary keys specifies properties in a matching dictionary to be compared, with compareProperty, with an IOService object's property table, if compareProperty returns true for each key, success is returned; otherwise failure.\n @param matching The matching dictionary, which must be non-zero.\n @param keys A collection (eg. OSSet, OSArray, OSDictionary) which should contain OSStrings (or OSSymbols) that specify the property keys to be compared.\n @result Success if compareProperty returns true for each key in the collection; otherwise failure. */\n\n virtual bool compareProperties( OSDictionary * matching,\n OSCollection * keys );\n\n /* Client / provider accessors */\n\n/*! @function attach\n @abstract Attaches an IOService client to a provider in the I/O Registry.\n @discussion This function called in an IOService client enters the client into the I/O Registry as a child of the provider in the service plane. The provider must be active or the attach will fail. Multiple attach calls to the same provider are no-ops and return success. A client may be attached to multiple providers. Entering an object into the I/O Registry retains both the client and provider until they are detached.\n @param provider The IOService object which will serve as this object's provider.\n @result false if the provider is inactive or on a resource failure; otherwise true. */\n\n virtual bool attach( IOService * provider );\n \n/*! @function detach\n @abstract Detaches an IOService client from a provider in the I/O Registry.\n @discussion This function called in an IOService client removes the client as a child of the provider in the service plane of the I/O Registry. If the provider is not a parent of the client this is a no-op, otherwise the I/O Registry releases both the client and provider.\n @param provider The IOService object to detach from. */\n\n virtual void detach( IOService * provider );\n\n/*! @function getProvider\n @abstract Returns an IOService object's primary provider.\n @discussion This function called in an IOService client will return the provider to which it was first attached. Because the majority of IOService objects have only one provider, this is a useful simplification and also supports caching of the provider when the I/O Registry is unchanged.\n @result The first provider of the client, or zero if the IOService object is not attached into the I/O Registry. The provider is retained while the client is attached, and should not be released by the caller. */\n\n virtual IOService * getProvider( void ) const;\n\n/*! @function getWorkLoop\n @abstract Returns the current work loop or provider->getWorkLoop.\n @discussion This function returns a valid work loop that a client can use to add an IOCommandGate to. The intention is that an IOService client has data that needs to be protected but doesn't want to pay the cost of a dedicated thread. This data has to be accessed from a provider's call-out context as well. So to achieve both of these goals the client creates an IOCommandGate to lock access to his data but he registers it with the provider's work loop, i.e. the work loop which will make the completion call-outs. This avoids a potential deadlock because the work loop gate uses a recursive lock, which allows the same lock to be held multiple times by a single thread.\n @result A work loop, either the current work loop or it walks up the @link getProvider getProvider@/link chain calling getWorkLoop. Eventually it will reach a valid work loop-based driver or the root of the I/O tree, where it will return a system-wide work loop. Returns 0 if it fails to find (or create) a work loop.*/\n\n virtual IOWorkLoop * getWorkLoop() const;\n\n/*! @function getProviderIterator\n @abstract Returns an iterator over an IOService object's providers.\n @discussion For those few IOService objects that obtain service from multiple providers, this method supplies an iterator over a client's providers. \n @result An iterator over the providers of the client, or zero if there is a resource failure. The iterator must be released when the iteration is finished. All objects returned by the iteration are retained while the iterator is valid, though they may no longer be attached during the iteration. */\n\n virtual OSIterator * getProviderIterator( void ) const;\n\n/*! @function getOpenProviderIterator\n @abstract Returns an iterator over an client's providers that are currently opened by the client.\n @discussion For those few IOService objects that obtain service from multiple providers, this method supplies an iterator over a client's providers, locking each in turn with @link lockForArbitration lockForArbitration@/link and returning those that have been opened by the client. \n @result An iterator over the providers the client has open, or zero if there is a resource failure. The iterator must be released when the iteration is finished. All objects returned by the iteration are retained while the iterator is valid, and the current entry in the iteration is locked with lockForArbitration, protecting it from state changes. */\n\n virtual OSIterator * getOpenProviderIterator( void ) const;\n\n/*! @function getClient\n @abstract Returns an IOService object's primary client.\n @discussion This function called in an IOService provider will return the first client to attach to it. For IOService objects which have only only one client, this may be a useful simplification.\n @result The first client of the provider, or zero if the IOService object is not attached into the I/O Registry. The client is retained while it is attached, and should not be released by the caller. */\n\n virtual IOService * getClient( void ) const;\n\n/*! @function getClientIterator\n @abstract Returns an iterator over an IOService object's clients.\n @discussion For IOService objects that may have multiple clients, this method supplies an iterator over a provider's clients. \n @result An iterator over the clients of the provider, or zero if there is a resource failure. The iterator must be released when the iteration is finished. All objects returned by the iteration are retained while the iterator is valid, though they may no longer be attached during the iteration. */\n\n virtual OSIterator * getClientIterator( void ) const;\n\n/*! @function getOpenClientIterator\n @abstract Returns an iterator over a provider's clients that currently have opened the provider.\n @discussion For IOService objects that may have multiple clients, this method supplies an iterator over a provider's clients, locking each in turn with @link lockForArbitration lockForArbitration@/link and returning those that have opened the provider. \n @result An iterator over the clients that have opened the provider, or zero if there is a resource failure. The iterator must be released when the iteration is finished. All objects returned by the iteration are retained while the iterator is valid, and the current entry in the iteration is locked with lockForArbitration, protecting it from state changes. */\n\n virtual OSIterator * getOpenClientIterator( void ) const;\n\n/*! @function callPlatformFunction\n @abstract Calls the platform function with the given name.\n @discussion The platform expert or other drivers may implement various functions to control hardware features. callPlatformFunction allows any IOService object to access these functions. Normally callPlatformFunction is called on a service's provider. The provider services the request or passes it to its provider. The system's IOPlatformExpert subclass catches functions it knows about and redirects them into other parts of the service plane. If the IOPlatformExpert subclass cannot execute the function, the base class is called. The IOPlatformExpert base class attempts to find a service to execute the function by looking up the function name in an IOResources name space. A service may publish a service using publishResource(functionName, this). If no service can be found to execute the function an error is returned.\n @param functionName Name of the function to be called. When functionName is a C string, callPlatformFunction converts the C string to an OSSymbol and calls the OSSymbol version of callPlatformFunction. This process can block and should not be used from an interrupt context.\n @param waitForFunction If true, callPlatformFunction will not return until the function has been called.\n @result An IOReturn code; kIOReturnSuccess if the function was successfully executed, kIOReturnUnsupported if a service to execute the function could not be found. Other return codes may be returned by the function.*/\n\n virtual IOReturn callPlatformFunction( const OSSymbol * functionName,\n\t\t\t\t\t bool waitForFunction,\n\t\t\t\t\t void *param1, void *param2,\n\t\t\t\t\t void *param3, void *param4 );\n\n virtual IOReturn callPlatformFunction( const char * functionName,\n\t\t\t\t\t bool waitForFunction,\n\t\t\t\t\t void *param1, void *param2,\n\t\t\t\t\t void *param3, void *param4 );\n\n\n /* Some accessors */\n\n/*! @function getPlatform\n @abstract Returns a pointer to the platform expert instance for the computer.\n @discussion This method provides an accessor to the platform expert instance for the computer. \n @result A pointer to the IOPlatformExport instance. It should not be released by the caller. */\n\n static IOPlatformExpert * getPlatform( void );\n\n/*! @function getPMRootDomain\n @abstract Returns a pointer to the power management root domain instance for the computer.\n @discussion This method provides an accessor to the power management root domain instance for the computer. \n @result A pointer to the power management root domain instance. It should not be released by the caller. */\n\n static class IOPMrootDomain * getPMRootDomain( void );\n\n/*! @function getServiceRoot\n @abstract Returns a pointer to the root of the service plane.\n @discussion This method provides an accessor to the root of the service plane for the computer. \n @result A pointer to the IOService instance at the root of the service plane. It should not be released by the caller. */\n\n static IOService * getServiceRoot( void );\n\n/*! @function getResourceService\n @abstract Returns a pointer to the IOResources service.\n @discussion IOService maintains a resource service IOResources that allows objects to be published and found globally in the I/O Kit based on a name, using the standard IOService matching and notification calls.\n @result A pointer to the IOResources instance. It should not be released by the caller. */\n\n static IOService * getResourceService( void );\n\n /* Allocate resources for a matched service */\n\n/*! @function getResources\n @abstract Allocates any needed resources for a published IOService object before clients attach.\n @discussion This method is called during the registration process for an IOService object if there are successful driver matches, before any clients attach. It allows for lazy allocation of resources to an IOService object when a matching driver is found.\n @result An IOReturn code; kIOReturnSuccess is necessary for the IOService object to be successfully used, otherwise the registration process for the object is halted. */\n \n virtual IOReturn getResources( void );\n\n /* Device memory accessors */\n\n/*! @function getDeviceMemoryCount\n @abstract Returns a count of the physical memory ranges available for a device.\n @discussion This method returns the count of physical memory ranges, each represented by an IODeviceMemory instance, that have been allocated for a memory mapped device.\n @result An integer count of the number of ranges available. */\n\n virtual IOItemCount getDeviceMemoryCount( void );\n\n/*! @function getDeviceMemoryWithIndex\n @abstract Returns an instance of IODeviceMemory representing one of a device's memory mapped ranges.\n @discussion This method returns a pointer to an instance of IODeviceMemory for the physical memory range at the given index for a memory mapped device.\n @param index An index into the array of ranges assigned to the device.\n @result A pointer to an instance of IODeviceMemory, or zero if the index is beyond the count available. The IODeviceMemory is retained by the provider, so is valid while attached, or while any mappings to it exist. It should not be released by the caller. See also @link mapDeviceMemoryWithIndex mapDeviceMemoryWithIndex@/link, which creates a device memory mapping. */\n\n virtual IODeviceMemory * getDeviceMemoryWithIndex( unsigned int index );\n\n/*! @function mapDeviceMemoryWithIndex\n @abstract Maps a physical range of a device.\n @discussion This method creates a mapping for the IODeviceMemory at the given index, with IODeviceMemory::map(options). The mapping is represented by the returned instance of IOMemoryMap, which should not be released until the mapping is no longer required.\n @param index An index into the array of ranges assigned to the device.\n @result An instance of IOMemoryMap, or zero if the index is beyond the count available. The mapping should be released only when access to it is no longer required. */\n\n virtual IOMemoryMap * mapDeviceMemoryWithIndex( unsigned int index,\n\t\t\t\t\t\tIOOptionBits options = 0 );\n\n/*! @function getDeviceMemory\n @abstract Returns the array of IODeviceMemory objects representing a device's memory mapped ranges.\n @discussion This method returns an array of IODeviceMemory objects representing the physical memory ranges allocated to a memory mapped device.\n @result An OSArray of IODeviceMemory objects, or zero if none are available. The array is retained by the provider, so is valid while attached. */\n\n virtual OSArray * getDeviceMemory( void );\n\n/*! @function setDeviceMemory\n @abstract Sets the array of IODeviceMemory objects representing a device's memory mapped ranges.\n @discussion This method sets an array of IODeviceMemory objects representing the physical memory ranges allocated to a memory mapped device.\n @param array An OSArray of IODeviceMemory objects, or zero if none are available. The array will be retained by the object. */\n\n virtual void setDeviceMemory( OSArray * array );\n\n /* Interrupt accessors */\n\n/*! @function registerInterrupt\n @abstract Registers a C function interrupt handler for a device supplying interrupts.\n @discussion This method installs a C function interrupt handler to be called at primary interrupt time for a device's interrupt. Only one handler may be installed per interrupt source. IOInterruptEventSource provides a work loop based abstraction for interrupt delivery that may be more appropriate for work loop based drivers.\n @param source The index of the interrupt source in the device.\n @param target An object instance to be passed to the interrupt handler.\n @param handler The C function to be called at primary interrupt time when the interrupt occurs. The handler should process the interrupt by clearing the interrupt, or by disabling the source.\n @param refCon A reference constant for the handler's use.\n @result An IOReturn code.kIOReturnNoInterrupt is returned if the source is not valid; kIOReturnNoResources is returned if the interrupt already has an installed handler. */\n\n virtual IOReturn registerInterrupt(int source, OSObject *target,\n\t\t\t\t IOInterruptAction handler,\n\t\t\t\t void *refCon = 0);\n \n/*! @function unregisterInterrupt\n @abstract Removes a C function interrupt handler for a device supplying hardware interrupts.\n @discussion This method removes a C function interrupt handler previously installed with @link registerInterrupt registerInterrupt@/link.\n @param source The index of the interrupt source in the device.\n @result An IOReturn code (kIOReturnNoInterrupt is returned if the source is not valid). */\n\n virtual IOReturn unregisterInterrupt(int source);\n\n/*! @function getInterruptType\n @abstract Returns the type of interrupt used for a device supplying hardware interrupts.\n @param source The index of the interrupt source in the device.\n @param interruptType The interrupt type for the interrupt source will be stored here by getInterruptType.kIOInterruptTypeEdge will be returned for edge-trigggered sources.kIOInterruptTypeLevel will be returned for level-trigggered sources.\n @result An IOReturn code (kIOReturnNoInterrupt is returned if the source is not valid). */\n\n virtual IOReturn getInterruptType(int source, int *interruptType);\n\n/*! @function enableInterrupt\n @abstract Enables a device interrupt.\n @discussion It is the caller's responsiblity to keep track of the enable state of the interrupt source.\n @param source The index of the interrupt source in the device.\n @result An IOReturn code (kIOReturnNoInterrupt is returned if the source is not valid). */\n\n virtual IOReturn enableInterrupt(int source);\n\n/*! @function disableInterrupt\n @abstract Synchronously disables a device interrupt.\n @discussion If the interrupt routine is running, the call will block until the routine completes. It is the caller's responsiblity to keep track of the enable state of the interrupt source.\n @param source The index of the interrupt source in the device.\n @result An IOReturn code (kIOReturnNoInterrupt is returned if the source is not valid). */\n\n virtual IOReturn disableInterrupt(int source);\n\n/*! @function causeInterrupt\n @abstract Causes a device interrupt to occur.\n @discussion Emulates a hardware interrupt, to be called from task level.\n @param source The index of the interrupt source in the device.\n @result An IOReturn code (kIOReturnNoInterrupt is returned if the source is not valid). */\n\n virtual IOReturn causeInterrupt(int source);\n\n/*! @function requestProbe\n @abstract Requests that hardware be re-scanned for devices.\n @discussion For bus families that do not usually detect device addition or removal, this method represents an external request (eg. from a utility application) to rescan and publish or remove found devices.\n @param options Family defined options, not interpreted by IOService.\n @result An IOReturn code. */\n\n virtual IOReturn requestProbe( IOOptionBits options );\n\n /* Generic API for non-data-path upstream calls */\n\n/*! @function message\n @abstract Receives a generic message delivered from an attached provider.\n @discussion A provider may deliver messages via the message method to its clients informing them of state changes, such as kIOMessageServiceIsTerminated or kIOMessageServiceIsSuspended. Certain messages are defined by the I/O Kit in IOMessage.h while others may be family dependent. This method is implemented in the client to receive messages.\n @param type A type defined in IOMessage.h or defined by the provider family.\n @param provider The provider from which the message originates.\n @param argument An argument defined by the provider family, not used by IOService.\n @result An IOReturn code defined by the message type. */\n\n virtual IOReturn message( UInt32 type, IOService * provider,\n void * argument = 0 );\n \n/*! @function messageClient\n @abstract Sends a generic message to an attached client.\n @discussion A provider may deliver messages via the @link message message@/link method to its clients informing them of state changes, such as kIOMessageServiceIsTerminated or kIOMessageServiceIsSuspended. Certain messages are defined by the I/O Kit in IOMessage.h while others may be family dependent. This method may be called in the provider to send a message to the specified client, which may be useful for overrides.\n @param messageType A type defined in IOMessage.h or defined by the provider family.\n @param client A client of the IOService to send the message.\n @param messageArgument An argument defined by the provider family, not used by IOService.\n @param argSize Specifies the size of messageArgument, in bytes. If argSize is non-zero, messageArgument is treated as a pointer to argSize bytes of data. If argSize is 0 (the default), messageArgument is treated as an ordinal and passed by value.\n @result The return code from the client message call. */\n \n virtual IOReturn messageClient( UInt32 messageType, OSObject * client,\n void * messageArgument = 0, vm_size_t argSize = 0 );\n\n/*! @function messageClients\n @abstract Sends a generic message to all attached clients.\n @discussion A provider may deliver messages via the @link message message@/link method to its clients informing them of state changes, such as kIOMessageServiceIsTerminated or kIOMessageServiceIsSuspended. Certain messages are defined by the I/O Kit in IOMessage.h while others may be family dependent. This method may be called in the provider to send a message to all the attached clients, via the @link messageClient messageClient@/link method.\n @param type A type defined in IOMessage.h or defined by the provider family.\n @param argument An argument defined by the provider family, not used by IOService.\n @param argSize Specifies the size of argument, in bytes. If argSize is non-zero, argument is treated as a pointer to argSize bytes of data. If argSize is 0 (the default), argument is treated as an ordinal and passed by value.\n @result Any non-kIOReturnSuccess return codes returned by the clients, or kIOReturnSuccess if all return kIOReturnSuccess. */\n\n virtual IOReturn messageClients( UInt32 type,\n void * argument = 0, vm_size_t argSize = 0 );\n\n virtual IONotifier * registerInterest( const OSSymbol * typeOfInterest,\n IOServiceInterestHandler handler,\n void * target, void * ref = 0 );\n\n virtual void applyToProviders( IOServiceApplierFunction applier,\n void * context );\n\n virtual void applyToClients( IOServiceApplierFunction applier,\n void * context );\n\n virtual void applyToInterested( const OSSymbol * typeOfInterest,\n OSObjectApplierFunction applier,\n void * context );\n\n virtual IOReturn acknowledgeNotification( IONotificationRef notification,\n IOOptionBits response );\n\n /* User client create */\n\n/*! @function newUserClient\n @abstract Creates a connection for a non kernel client.\n @discussion A non kernel client may request a connection be opened via the @link //apple_ref/c/func/IOServiceOpen IOServiceOpen@/link library function, which will call this method in an IOService object. The rules and capabilities of user level clients are family dependent, and use the functions of the IOUserClient class for support. IOService's implementation returns kIOReturnUnsupported, so any family supporting user clients must implement this method.\n @param owningTask The Mach task of the client thread in the process of opening the user client. Note that in Mac OS X, each process is based on a Mach task and one or more Mach threads. For more information on the composition of a Mach task and its relationship with Mach threads, see {@linkdoc //apple_ref/doc/uid/TP30000905-CH209-TPXREF103 \"Tasks and Threads\"}.\n @param securityID A token representing the access level for the task.\n @param type A constant specifying the type of connection to be created, specified by the caller of @link //apple_ref/c/func/IOServiceOpen IOServiceOpen@/link and interpreted only by the family.\n @param handler An instance of an IOUserClient object to represent the connection, which will be released when the connection is closed, or zero if the connection was not opened. \n @param properties A dictionary of additional properties for the connection.\n @result A return code to be passed back to the caller of IOServiceOpen. */\n\n virtual IOReturn newUserClient( task_t owningTask, void * securityID,\n UInt32 type, OSDictionary * properties,\n IOUserClient ** handler );\n\n virtual IOReturn newUserClient( task_t owningTask, void * securityID,\n UInt32 type, IOUserClient ** handler );\n\n /* Return code utilities */\n\n/*! @function stringFromReturn\n @abstract Supplies a programmer-friendly string from an IOReturn code.\n @discussion Strings are available for the standard return codes in IOReturn.h in IOService, while subclasses may implement this method to interpret family dependent return codes.\n @param rtn The IOReturn code.\n @result A pointer to a constant string, or zero if the return code is unknown. */\n \n virtual const char * stringFromReturn( IOReturn rtn );\n\n/*! @function errnoFromReturn\n @abstract Translates an IOReturn code to a BSD errno.\n @discussion BSD defines its own return codes for its functions in sys/errno.h, and I/O Kit families may need to supply compliant results in BSD shims. Results are available for the standard return codes in IOReturn.h in IOService, while subclasses may implement this method to interpret family dependent return codes.\n @param rtn The IOReturn code.\n @result The BSD errno or EIO if unknown. */\n \n virtual int errnoFromReturn( IOReturn rtn );\n\n /* * * * * * * * * * * * * * * * * * * * * * * * * * * * */\n /* * * * * * * * * * end of IOService API * * * * * * * */\n /* * * * * * * * * * * * * * * * * * * * * * * * * * * * */\n\n /* for IOInterruptController implementors */\n\n int _numInterruptSources;\n IOInterruptSource *_interruptSources;\n\n /* overrides */\n virtual bool serializeProperties( OSSerialize * s ) const override;\n\n void requireMaxBusStall(UInt32 ns);\n void requireMaxInterruptDelay(uint32_t ns);\n\n /* * * * * * * * * * * * * * * * * * * * * * * * * * * * */\n /* * * * * * * * * * * * Internals * * * * * * * * * * * */\n /* * * * * * * * * * * * * * * * * * * * * * * * * * * * */\n\n\nprivate:\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n\tbool checkResources( void );\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n bool checkResource( OSObject * matching );\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n void probeCandidates( OSOrderedSet * matches );\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n bool startCandidate( IOService * candidate );\n\npublic:\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOService * getClientWithCategory( const OSSymbol * category )\n\tAPPLE_KEXT_DEPRECATED;\n\t// copyClientWithCategory is the public replacement\n\nprivate:\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n bool passiveMatch( OSDictionary * matching, bool changesOK = false);\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n void startMatching( IOOptionBits options = 0 );\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n void doServiceMatch( IOOptionBits options );\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n void doServiceTerminate( IOOptionBits options );\n\nprivate:\n\n bool matchPassive(OSDictionary * table, uint32_t options);\n bool matchInternal(OSDictionary * table, uint32_t options, unsigned int * did);\n static bool instanceMatch(const OSObject * entry, void * context);\n\n static OSObject * copyExistingServices( OSDictionary * matching,\n\t\t IOOptionBits inState, IOOptionBits options = 0 );\n\n static IONotifier * setNotification(\n\t\t\tconst OSSymbol * type, OSDictionary * matching,\n \tIOServiceMatchingNotificationHandler handler,\n void * target, void * ref,\n SInt32 priority = 0 );\n\n static IONotifier * doInstallNotification(\n\t\t\tconst OSSymbol * type, OSDictionary * matching,\n\t\t\tIOServiceMatchingNotificationHandler handler,\n\t\t\tvoid * target, void * ref,\n\t\t\tSInt32 priority, OSIterator ** existing );\n\n static bool syncNotificationHandler( void * target, void * ref,\n\t\t\tIOService * newService, IONotifier * notifier );\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n\tvoid deliverNotification( const OSSymbol * type,\n IOOptionBits orNewState, IOOptionBits andNewState );\n\n bool invokeNotifer( class _IOServiceNotifier * notify );\n\n\tAPPLE_KEXT_COMPATIBILITY_VIRTUAL\n\tvoid unregisterAllInterest( void );\n\n\tAPPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn waitForState( UInt32 mask, UInt32 value,\n\t\t\t\t mach_timespec_t * timeout = 0 );\n\n IOReturn waitForState( UInt32 mask, UInt32 value, uint64_t timeout );\n\n UInt32 _adjustBusy( SInt32 delta );\n\n bool terminatePhase1( IOOptionBits options = 0 );\n void scheduleTerminatePhase2( IOOptionBits options = 0 );\n void scheduleStop( IOService * provider );\n void scheduleFinalize( void );\n static void terminateThread( void * arg, wait_result_t unused );\n static void terminateWorker( IOOptionBits options );\n static void actionWillTerminate( IOService * victim, IOOptionBits options, \n OSArray * doPhase2List, void*, void * );\n static void actionDidTerminate( IOService * victim, IOOptionBits options,\n void *, void *, void *);\n static void actionFinalize( IOService * victim, IOOptionBits options,\n void *, void *, void *);\n static void actionStop( IOService * client, IOService * provider,\n void *, void *, void *);\n\n\tAPPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn resolveInterrupt(IOService *nub, int source);\n\tAPPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn lookupInterrupt(int source, bool resolve, IOInterruptController **interruptController);\n\n\n /* power management */\npublic:\n\n/*! @function PMinit\n @abstract Initializes power management for a driver.\n @discussion PMinit allocates and initializes the power management instance variables, and it should be called before accessing those variables or calling the power management methods. This method should be called inside the driver's start routine and must be paired with a call to @link PMstop PMstop@/link.\n Most calls to PMinit are followed by calls to @link joinPMtree joinPMtree@/link and @link registerPowerDriver registerPowerDriver@/link. */\n\n virtual void PMinit( void );\n\n/*! @function PMstop\n @abstract Stop power managing the driver.\n @discussion Removes the driver from the power plane and stop its power management. This method is synchronous against any power management method invocations (e.g. setPowerState or setAggressiveness), so when this method returns it is guaranteed those power management methods will not be entered. Driver should not call any power management methods after this call.\n Calling PMstop cleans up for the three power management initialization calls: @link PMinit PMinit@/link, @link joinPMtree joinPMtree@/link, and @link registerPowerDriver registerPowerDriver@/link. */\n\n virtual void PMstop( void );\n\n/*! @function joinPMtree\n @abstract Joins the driver into the power plane of the I/O Registry.\n @discussion A driver uses this method to call its nub when initializing (usually in its start routine after calling @link PMinit PMinit@/link), to be attached into the power management hierarchy (i.e., the power plane). A driver usually calls this method on the driver for the device that provides it power (this is frequently the nub). \n Before this call returns, the caller will probably be called at @link setPowerParent setPowerParent@/link and @link setAggressiveness setAggressiveness@/link and possibly at @link addPowerChild addPowerChild@/link as it is added to the hierarchy. This method may be overridden by a nub subclass.\n @param driver The driver to be added to the power plane, usually this. */\n\n virtual void joinPMtree( IOService * driver );\n\n/*! @function registerPowerDriver\n @abstract Registers a set of power states that the driver supports.\n @discussion A driver defines its array of supported power states with power management in its power management initialization (its start routine). If successful, power management will call the driver to instruct it to change its power state through @link setPowerState setPowerState@/link.\n Most drivers do not need to override registerPowerDriver. A nub may override registerPowerDriver if it needs to arrange its children in the power plane differently than the default placement, but this is uncommon.\n @param controllingDriver A pointer to the calling driver, usually this.\n @param powerStates A driver-defined array of power states that the driver and device support. Power states are defined in pwr_mgt/IOPMpowerState.h.\n @param numberOfStates The number of power states in the array.\n @result IOPMNoErr. All errors are logged via kprintf. */\n\n virtual IOReturn registerPowerDriver(\n IOService * controllingDriver,\n IOPMPowerState * powerStates,\n unsigned long numberOfStates );\n\n/*! @function registerInterestedDriver\n @abstract Allows an IOService object to register interest in the changing power state of a power-managed IOService object.\n @discussion Call registerInterestedDriver on the IOService object you are interested in receiving power state messages from, and pass a pointer to the interested driver (this) as an argument.\n The interested driver is retained until the power interest is removed by calling deRegisterInterestedDriver.\n The interested driver should override @link powerStateWillChangeTo powerStateWillChangeTo@/link and @link powerStateDidChangeTo powerStateDidChangeTo@/link to receive these power change messages.\n Interested drivers must acknowledge power changes in powerStateWillChangeTo or powerStateDidChangeTo, either via return value or later calls to @link acknowledgePowerChange acknowledgePowerChange@/link.\n @param theDriver The driver of interest adds this pointer to the list of interested drivers. It informs drivers on this list before and after the power change.\n @result Flags describing the capability of the device in its current power state. If the current power state is not yet defined, zero is returned (this is the case when the driver is not yet in the power domain hierarchy or hasn't fully registered with power management yet). */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOPMPowerFlags registerInterestedDriver( IOService * theDriver );\n\n/*! @function deRegisterInterestedDriver\n @abstract De-registers power state interest from a previous call to registerInterestedDriver.\n @discussion The retain from registerInterestedDriver is released. This method is synchronous against any powerStateWillChangeTo or powerStateDidChangeTo call targeting the interested driver, so when this method returns it is guaranteed those interest handlers will not be entered.\n Most drivers do not need to override deRegisterInterestedDriver.\n @param theDriver The interested driver previously passed into @link registerInterestedDriver registerInterestedDriver@/link.\n @result A return code that can be ignored by the caller. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn deRegisterInterestedDriver( IOService * theDriver );\n\n/*! @function acknowledgePowerChange\n @abstract Acknowledges an in-progress power state change.\n @discussion When power management informs an interested object (via @link powerStateWillChangeTo powerStateWillChangeTo@/link or @link powerStateDidChangeTo powerStateDidChangeTo@/link), the object can return an immediate acknowledgement via a return code, or it may return an indication that it will acknowledge later by calling acknowledgePowerChange.\n Interested objects are those that have registered as interested drivers, as well as power plane children of the power changing driver. A driver that calls @link registerInterestedDriver registerInterestedDriver@/link must call acknowledgePowerChange, or use an immediate acknowledgement return from powerStateWillChangeTo or powerStateDidChangeTo.\n @param whichDriver A pointer to the calling driver. The called object tracks all interested parties to ensure that all have acknowledged the power state change.\n @result IOPMNoErr. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn acknowledgePowerChange( IOService * whichDriver );\n\n/*! @function acknowledgeSetPowerState\n @abstract Acknowledges the belated completion of a driver's setPowerState power state change.\n @discussion After power management instructs a driver to change its state via @link setPowerState setPowerState@/link, that driver must acknowledge the change when its device has completed its transition. The acknowledgement may be immediate, via a return code from setPowerState, or delayed, via this call to acknowledgeSetPowerState.\n Any driver that does not return kIOPMAckImplied from its setPowerState implementation must later call acknowledgeSetPowerState.\n @result IOPMNoErr. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn acknowledgeSetPowerState( void );\n\n/*! @function requestPowerDomainState\n @abstract Tells a driver to adjust its power state.\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual IOReturn requestPowerDomainState(\n IOPMPowerFlags desiredState,\n IOPowerConnection * whichChild,\n unsigned long specificationFlags );\n\n/*! @function makeUsable\n @abstract Requests that a device become usable.\n @discussion This method is called when some client of a device (or the device's own driver) is asking for the device to become usable. Power management responds by telling the object upon which this method is called to change to its highest power state.\n makeUsable is implemented using @link changePowerStateToPriv changePowerStateToPriv@/link. Subsequent requests for lower power, such as from changePowerStateToPriv, will pre-empt this request.\n @result A return code that can be ignored by the caller. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn makeUsable( void );\n\n/*! @function temporaryPowerClampOn\n @abstract A driver calls this method to hold itself in the highest power state until it has children.\n @discussion Use temporaryPowerClampOn to hold your driver in its highest power state while waiting for child devices to attach. After children have attached, the clamp is released and the device's power state is controlled by the children's requirements.\n @result A return code that can be ignored by the caller. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOReturn temporaryPowerClampOn( void );\n\n/*! @function changePowerStateTo\n @abstract Sets a driver's power state.\n @discussion This function is one of several that are used to set a driver's power state. In most circumstances, however, you should call @link changePowerStateToPriv changePowerStateToPriv@/link instead.\n\tCalls to changePowerStateTo, changePowerStateToPriv, and a driver's power children all affect the power state of a driver. For legacy design reasons, they have overlapping functionality. Although you should call changePowerStateToPriv to change your device's power state, you might need to call changePowerStateTo in the following circumstances:\n If a driver will be using changePowerStateToPriv to change its power state, it should call changePowerStateTo(0) in its start routine to eliminate the influence changePowerStateTo has on power state calculations.\n Call changePowerStateTo in conjunction with @link setIdleTimerPeriod setIdleTimerPeriod@/link and @link activityTickle activityTickle@/link to idle a driver into a low power state. For a driver with 3 power states, for example, changePowerStateTo(1) sets a minimum level of power state 1, such that the idle timer period may not set your device's power any lower than state 1. capabilityFlags field for the current power state in the power state array. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n IOPMPowerFlags currentCapability( void );\n\n/*! @function currentPowerConsumption\n @abstract Finds out the current power consumption of a device.\n @discussion Most Mac OS X power managed drivers do not report their power consumption via the staticPower field. Thus this call will not accurately reflect power consumption for most drivers.\n @result A copy of the staticPower field for the current power state in the power state array. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n unsigned long currentPowerConsumption( void );\n\n/*! @function activityTickle\n @abstract Informs power management when a power-managed device is in use, so that power management can track when it is idle and adjust its power state accordingly.\n @discussion The activityTickle method is provided for objects in the system (or for the driver itself) to tell a driver that its device is being used.\n The IOService superclass can manage idleness determination with a simple idle timer mechanism and this activityTickle call. To start this up, the driver calls its superclass's setIdleTimerPeriod. This starts a timer for the time interval specified in the call. When the timer expires, the superclass checks to see if there has been any activity since the last timer expiration. (It checks to see if activityTickle has been called). If there has been activity, it restarts the timer, and this process continues. When the timer expires, and there has been no device activity, the superclass lowers the device power state to the next lower state. This can continue until the device is in state zero.\n After the device has been powered down by at least one power state, a subsequent call to activityTickle causes the device to be switched to a higher state required for the activity. \n If the driver is managing the idleness determination totally on its own, the value of the type parameter should be kIOPMSubclassPolicy, and the driver should override the activityTickle method. The superclass IOService implementation of activityTickle does nothing with the kIOPMSubclassPolicy argument.\n @param type When type is kIOPMSubclassPolicy, activityTickle is not handled in IOService and should be intercepted by the subclass. When type is kIOPMSuperclassPolicy1, an activity flag is set and the device state is checked. If the device has been powered down, it is powered up again.\n @param stateNumber When type is kIOPMSuperclassPolicy1, stateNumber contains the desired power state ordinal for the activity. If the device is in a lower state, the superclass will switch it to this state. This is for devices that can handle some accesses in lower power states; the device is powered up only as far as it needs to be for the activity.\n @result When type is kIOPMSuperclassPolicy1, the superclass returns true if the device is currently in the state specified by stateNumber. If the device is in a lower state and must be powered up, the superclass returns false; in this case the superclass will initiate a power change to power the device up. */\n\n virtual bool activityTickle(\n unsigned long type,\n unsigned long stateNumber = 0 );\n\n/*! @function setAggressiveness\n @abstract Broadcasts an aggressiveness factor from the parent of a driver to the driver.\n @discussion Implement setAggressiveness to receive a notification when an \"aggressiveness Aggressiveness factors are a loose set of power management variables that contain values for system sleep timeout, display sleep timeout, whether the system is on battery or AC, and other power management features. There are several aggressiveness factors that can be broadcast and a driver may take action on whichever factors apply to it.\n A driver that has joined the power plane via @link joinPMtree joinPMtree@/link will receive setAgressiveness calls when aggressiveness factors change.\n A driver may override this call if it needs to do something with the new factor (such as change its idle timeout). If overridden, the driver must call its superclass's setAgressiveness method in its own setAgressiveness implementation.\n Most drivers do not need to implement setAgressiveness.\n @param type The aggressiveness factor type, such as kPMMinutesToDim, kPMMinutesToSpinDown, kPMMinutesToSleep, and kPMPowerSource. (Aggressiveness factors are defined in pwr_mgt/IOPM.h.)\n @param newLevel The aggressiveness factor's new value.\n @result IOPMNoErr. */\n\n virtual IOReturn setAggressiveness(\n unsigned long type,\n unsigned long newLevel );\n\n/*! @function getAggressiveness\n @abstract Returns the current aggressiveness value for the given type.\n @param type The aggressiveness factor to query.\n @param currentLevel Upon successful return, contains the value of aggressiveness factor type.\n @result kIOReturnSuccess upon success; an I/O Kit error code otherwise. */\n\n virtual IOReturn getAggressiveness(\n unsigned long type,\n unsigned long * currentLevel );\n\n#ifndef __LP64__\n/*! @function systemWake\n @abstract Tells every driver in the power plane that the system is waking up.\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual IOReturn systemWake( void )\n APPLE_KEXT_DEPRECATED;\n\n/*! @function temperatureCriticalForZone\n @abstract Alerts a driver to a critical temperature in some thermal zone.\n @discussion This call is unused by power management. It is not intended to be called or overridden. */\n\n virtual IOReturn temperatureCriticalForZone( IOService * whichZone )\n APPLE_KEXT_DEPRECATED;\n\n/*! @function youAreRoot\n @abstract Informs power management which IOService object is the power plane root.\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual IOReturn youAreRoot( void )\n APPLE_KEXT_DEPRECATED;\n\n/*! @function setPowerParent\n @abstract This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual IOReturn setPowerParent(\n IOPowerConnection * parent,\n bool stateKnown,\n IOPMPowerFlags currentState )\n APPLE_KEXT_DEPRECATED;\n#endif /* !__LP64__ */\n\n/*! @function addPowerChild\n @abstract Informs a driver that it has a new child.\n @discussion The Platform Expert uses this method to call a driver and introduce it to a new child. This call is handled internally by power management. It is not intended to be overridden or called by drivers.\n @param theChild A pointer to the child IOService object. */\n\n virtual IOReturn addPowerChild( IOService * theChild );\n\n/*! @function removePowerChild\n @abstract Informs a power managed driver that one of its power plane childen is disappearing.\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual IOReturn removePowerChild( IOPowerConnection * theChild );\n\n#ifndef __LP64__\n/*! @function command_received\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual void command_received( void *, void * , void * , void * );\n#endif\n\n/*! @function start_PM_idle_timer\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n APPLE_KEXT_COMPATIBILITY_VIRTUAL\n void start_PM_idle_timer( void );\n\n#ifndef __LP64__\n/*! @function PM_idle_timer_expiration\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual void PM_idle_timer_expiration( void )\n APPLE_KEXT_DEPRECATED;\n\n/*! @function PM_Clamp_Timer_Expired\n @discussion This call is handled internally by power management. It is not intended to be overridden or called by drivers. */\n\n virtual void PM_Clamp_Timer_Expired( void )\n APPLE_KEXT_DEPRECATED;\n#endif\n\n/*! @function setIdleTimerPeriod\n @abstract Sets or changes the idle timer period.\n @discussion A driver using the idleness determination provided by IOService calls its superclass with this method to set or change the idle timer period. See @link activityTickle activityTickle@/link for a description of this type of idleness determination.\n @param period The desired idle timer period in seconds.\n @result kIOReturnSuccess upon success; an I/O Kit error code otherwise. */\n\n virtual IOReturn setIdleTimerPeriod( unsigned long );\n\n#ifndef __LP64__\n/*! @function getPMworkloop\n @abstract Returns a pointer to the system-wide power management work loop.\n @availability Deprecated in Mac OS X version 10.6.\n @discussion Most drivers should create their own work loops to synchronize their code; drivers should not run arbitrary code on the power management work loop. */\n\n virtual IOWorkLoop * getPMworkloop( void )\n APPLE_KEXT_DEPRECATED;\n#endif\n\n/*! @function getPowerState\n @abstract Determines a device's power state.\n @discussion A device's \"current power state\" is updated at the end of each power state transition (e.g. transition from state 1 to state 0, or state 0 to state 2). This transition includes the time spent powering on or off any power plane children. Thus, if a child calls getPowerState on its power parent during system wake from sleep, the call will return the index to the device's off state rather than its on state.\n @result The current power state's index into the device's power state array. */\n\n UInt32 getPowerState( void );\n\n/*! @function setPowerState\n @abstract Requests a power managed driver to change the power state of its device.\n @discussion A power managed driver must override setPowerState to take part in system power management. After a driver is registered with power management, the system uses setPowerState to power the device off and on for system sleep and wake.\n Calls to @link PMinit PMinit@/link and @link registerPowerDriver registerPowerDriver@/link enable power management to change a device's power state using setPowerState. setPowerState is called in a clean and separate thread context.\n @param powerStateOrdinal The number in the power state array of the state the driver is being instructed to switch to. \n @param whatDevice A pointer to the power management object which registered to manage power for this device. In most cases, whatDevice will be equal to your driver's own this pointer.\n @result The driver must return IOPMAckImplied if it has complied with the request when it returns. Otherwise if it has started the process of changing power state but not finished it, the driver should return a number of microseconds which is an upper limit of the time it will need to finish. Then, when it has completed the power switch, it should call @link acknowledgeSetPowerState acknowledgeSetPowerState@/link. */\n\n virtual IOReturn setPowerState(\n unsigned long powerStateOrdinal,\n IOService * whatDevice );\n\n#ifndef __LP64__\n/*! @function clampPowerOn\n @abstract Deprecated. Do not use. */\n\n virtual void clampPowerOn( unsigned long duration );\n#endif\n\n/*! @function maxCapabilityForDomainState\n @abstract Determines a driver's highest power state possible for a given power domain state.\n @discussion This happens when the power domain is changing state and power management needs to determine which state the device is capable of in the new domain state.\n Most drivers do not need to implement this method, and can rely upon the default IOService implementation. The IOService implementation scans the power state array looking for the highest state whose inputPowerRequirement field exactly matches the value of the domainState parameter. If more intelligent determination is required, the driver itself should implement the method and override the superclass's implementation.\n @param domainState Flags that describe the character of \"domain power\"; they represent the outputPowerCharacter field of a state in the power domain's power state array.\n @result A state number. */\n\n virtual unsigned long maxCapabilityForDomainState( IOPMPowerFlags domainState );\n\n/*! @function initialPowerStateForDomainState\n @abstract Determines which power state a device is in, given the current power domain state.\n @discussion Power management calls this method once, when the driver is initializing power management.\n Most drivers do not need to implement this method, and can rely upon the default IOService implementation. The IOService implementation scans the power state array looking for the highest state whose inputPowerRequirement field exactly matches the value of the domainState parameter. If more intelligent determination is required, the power managed driver should implement the method and override the superclass's implementation.\n @param domainState Flags that describe the character of \"domain power\"; they represent the outputPowerCharacter field of a state in the power domain's power state array.\n @result A state number. */\n\n virtual unsigned long initialPowerStateForDomainState( IOPMPowerFlags domainState );\n\n/*! @function powerStateForDomainState\n @abstract Determines what power state the device would be in for a given power domain state.\n @discussion Power management calls a driver with this method to find out what power state the device would be in for a given power domain state. This happens when the power domain is changing state and power management needs to determine the effect of the change.\n Most drivers do not need to implement this method, and can rely upon the default IOService implementation. The IOService implementation scans the power state array looking for the highest state whose inputPowerRequirement field exactly matches the value of the domainState parameter. If more intelligent determination is required, the power managed driver should implement the method and override the superclass's implementation.\n @param domainState Flags that describe the character of \"domain power\"; they represent the outputPowerCharacter field of a state in the power domain's power state array.\n @result A state number. */\n\n virtual unsigned long powerStateForDomainState( IOPMPowerFlags domainState );\n\n/*! @function powerStateWillChangeTo\n @abstract Informs interested parties that a device is about to change its power state.\n @discussion Power management informs interested parties that a device is about to change to a different power state. Interested parties are those that have registered for this notification via @link registerInterestedDriver registerInterestedDriver@/link. If you have called registerInterestedDriver on a power managed driver, you must implement powerStateWillChangeTo and @link powerStateDidChangeTo powerStateDidChangeTo@/link to receive the notifications.\n powerStateWillChangeTo is called in a clean and separate thread context. powerStateWillChangeTo is called before a power state transition takes place; powerStateDidChangeTo is called after the transition has completed.\n @param capabilities Flags that describe the capability of the device in the new power state (they come from the capabilityFlags field of the new state in the power state array).\n\t@param stateNumber The number of the state in the state array that the device is switching to.\n @param whatDevice A pointer to the driver that is changing. It can be used by a driver that is receiving power state change notifications for multiple devices to distinguish between them.\n @result The driver returns IOPMAckImplied if it has prepared for the power change when it returns. If it has started preparing but not finished, it should return a number of microseconds which is an upper limit of the time it will need to finish preparing. Then, when it has completed its preparations, it should call @link acknowledgePowerChange acknowledgePowerChange@/link. */\n\n virtual IOReturn powerStateWillChangeTo(\n IOPMPowerFlags capabilities,\n unsigned long stateNumber,\n IOService * whatDevice );\n\n/*! @function powerStateDidChangeTo\n @abstract Informs interested parties that a device has changed to a different power state.\n @discussion Power management informs interested parties that a device has changed to a different power state. Interested parties are those that have registered for this notification via @link registerInterestedDriver registerInterestedDriver@/link. If you have called registerInterestedDriver on a power managed driver, you must implemnt @link powerStateWillChangeTo powerStateWillChangeTo@/link and powerStateDidChangeTo to receive the notifications.\n powerStateDidChangeTo is called in a clean and separate thread context. powerStateWillChangeTo is called before a power state transition takes place; powerStateDidChangeTo is called after the transition has completed.\n @param capabilities Flags that describe the capability of the device in the new power state (they come from the capabilityFlags field of the new state in the power state array).\n\t@param stateNumber The number of the state in the state array that the device is switching to.\n @param whatDevice A pointer to the driver that is changing. It can be used by a driver that is receiving power state change notifications for multiple devices to distinguish between them.\n @result The driver returns IOPMAckImplied if it has prepared for the power change when it returns. If it has started preparing but not finished, it should return a number of microseconds which is an upper limit of the time it will need to finish preparing. Then, when it has completed its preparations, it should call @link acknowledgePowerChange acknowledgePowerChange@/link. */\n\n virtual IOReturn powerStateDidChangeTo(\n IOPMPowerFlags capabilities,\n unsigned long stateNumber,\n IOService * whatDevice );\n\n#ifndef __LP64__\n/*! @function didYouWakeSystem\n @abstract Asks a driver if its device is the one that just woke the system from sleep.\n @availability Deprecated in Mac OS X version 10.6.\n @discussion Power management calls a power managed driver with this method to ask if its device is the one that just woke the system from sleep. If a device is capable of waking the system from sleep, its driver should implement didYouWakeSystem and return true if its device was responsible for waking the system.\n @result true if the driver's device woke the system and false otherwise. */\n\n virtual bool didYouWakeSystem( void )\n APPLE_KEXT_DEPRECATED;\n\n/*! @function newTemperature\n @abstract Tells a power managed driver that the temperature in the thermal zone has changed.\n @discussion This call is unused by power management. It is not intended to be called or overridden. */\n\n virtual IOReturn newTemperature( long currentTemp, IOService * whichZone )\n APPLE_KEXT_DEPRECATED;\n#endif\n\n virtual bool askChangeDown( unsigned long );\n virtual bool tellChangeDown( unsigned long );\n virtual void tellNoChangeDown ( unsigned long );\n virtual void tellChangeUp( unsigned long );\n virtual IOReturn allowPowerChange( unsigned long refcon );\n virtual IOReturn cancelPowerChange( unsigned long refcon );\n\nprotected:\n/*! @function changePowerStateToPriv \n @abstract Tells a driver's superclass to change the power state of its device.\n @discussion A driver uses this method to tell its superclass to change the power state of the device. This is the recommended way to change the power state of a device.\n Three things affect driver power state: @link changePowerStateTo changePowerStateTo@/link, changePowerStateToPriv, and the desires of the driver's power plane children. Power management puts the device into the maximum state governed by those three entities.\n Drivers may eliminate the influence of the changePowerStateTo method on power state one of two ways. See @link powerOverrideOnPriv powerOverrideOnPriv@/link to ignore the method's influence, or call changePowerStateTo(0) in the driver's start routine to remove the changePowerStateTo method's power request.\n @param ordinal The number of the desired power state in the power state array.\n @result A return code that can be ignored by the caller. */\n\n IOReturn changePowerStateToPriv( unsigned long ordinal );\n\n/*! @function powerOverrideOnPriv\n @abstract Allows a driver to ignore its children's power management requests and only use changePowerStateToPriv to define its own power state.\n @discussion Power management normally keeps a device at the highest state required by its requests via @link changePowerStateTo changePowerStateTo@/link, @link changePowerStateToPriv changePowerStateToPriv@/link, and its children. However, a driver may ensure a lower power state than otherwise required by itself and its children using powerOverrideOnPriv. When the override is on, power management keeps the device's power state in the state specified by changePowerStateToPriv. Turning on the override will initiate a power change if the driver's changePowerStateToPriv desired power state is different from the maximum of the changePowerStateTo desired power state and the children's desires.\n @result A return code that can be ignored by the caller. */\n\n IOReturn powerOverrideOnPriv( void );\n\n/*! @function powerOverrideOffPriv\n @abstract Allows a driver to disable a power override.\n @discussion When a driver has enabled an override via @link powerOverrideOnPriv powerOverrideOnPriv@/link, it can disable it again by calling this method in its superclass. Disabling the override reverts to the default algorithm for determining a device's power state. The superclass will now keep the device at the highest state required by changePowerStateTo, changePowerStateToPriv, and its children. Turning off the override will initiate a power change if the driver's desired power state is different from the maximum of the power managed driver's desire and the children's desires.\n @result A return code that can be ignored by the caller. */\n\n IOReturn powerOverrideOffPriv( void );\n\n/*! @function powerChangeDone\n @abstract Tells a driver when a power state change is complete.\n @discussion Power management uses this method to inform a driver when a power change is completely done, when all interested parties have acknowledged the @link powerStateDidChangeTo powerStateDidChangeTo@/link call. The default implementation of this method is null; the method is meant to be overridden by subclassed power managed drivers. A driver should use this method to find out if a power change it initiated is complete.\n @param stateNumber The number of the state in the state array that the device has switched from. */\n\n virtual void powerChangeDone( unsigned long stateNumber );\n};\n\n#endif /* ! _IOKIT_IOSERVICE_H */\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/plugin_start.cpp",
"content": "//\n// plugin_start.cpp\n// Lilu\n//\n// Copyright © 2016-2017 vit9696. All rights reserved.\n//\n\n#include \n#include \n#include \n\n#ifndef LILU_CUSTOM_KMOD_INIT\nbool ADDPR(startSuccess) = false;\n#else\n// Workaround custom kmod code and enable by default\nbool ADDPR(startSuccess) = true;\n#endif\n\nbool ADDPR(debugEnabled) = false;\nuint32_t ADDPR(debugPrintDelay) = 0;\n\n#if !defined(LILU_CUSTOM_KMOD_INIT) || !defined(LILU_CUSTOM_IOKIT_INIT)\n\nstatic const char kextVersion[] {\n#ifdef DEBUG\n\t'D', 'B', 'G', '-',\n#else\n\t'R', 'E', 'L', '-',\n#endif\n\txStringify(MODULE_VERSION)[0], xStringify(MODULE_VERSION)[2], xStringify(MODULE_VERSION)[4], '-',\n\tgetBuildYear<0>(), getBuildYear<1>(), getBuildYear<2>(), getBuildYear<3>(), '-',\n\tgetBuildMonth<0>(), getBuildMonth<1>(), '-', getBuildDay<0>(), getBuildDay<1>(), '\\0'\n};\n\n#endif\n\n#ifndef LILU_CUSTOM_IOKIT_INIT\n\nOSDefineMetaClassAndStructors(PRODUCT_NAME, IOService)\n\nPRODUCT_NAME *ADDPR(selfInstance) = nullptr;\n\nIOService *PRODUCT_NAME::probe(IOService *provider, SInt32 *score) {\n\tADDPR(selfInstance) = this;\n\tsetProperty(\"VersionInfo\", kextVersion);\n\tauto service = IOService::probe(provider, score);\n\treturn ADDPR(startSuccess) ? service : nullptr;\n}\n\nbool PRODUCT_NAME::start(IOService *provider) {\n\tADDPR(selfInstance) = this;\n\tif (!IOService::start(provider)) {\n\t\tSYSLOG(\"init\", \"failed to start the parent\");\n\t\treturn false;\n\t}\n\t\n\treturn ADDPR(startSuccess);\n}\n\nvoid PRODUCT_NAME::stop(IOService *provider) {\n\tADDPR(selfInstance) = nullptr;\n\tIOService::stop(provider);\n}\n\n#endif /* LILU_CUSTOM_IOKIT_INIT */\n\n#ifndef LILU_CUSTOM_KMOD_INIT\n\nEXPORT extern \"C\" kern_return_t ADDPR(kern_start)(kmod_info_t *, void *) {\n\t// This is an ugly hack necessary on some systems where buffering kills most of debug output.\n\tPE_parse_boot_argn(\"liludelay\", &ADDPR(debugPrintDelay), sizeof(ADDPR(debugPrintDelay)));\n\n\tauto error = lilu.requestAccess();\n\tif (error == LiluAPI::Error::NoError) {\n\t\terror = lilu.shouldLoad(ADDPR(config).product, ADDPR(config).version, ADDPR(config).runmode, ADDPR(config).disableArg, ADDPR(config).disableArgNum,\n\t\t\t\t\t\t\t\tADDPR(config).debugArg, ADDPR(config).debugArgNum, ADDPR(config).betaArg, ADDPR(config).betaArgNum, ADDPR(config).minKernel,\n\t\t\t\t\t\t\t\tADDPR(config).maxKernel, ADDPR(debugEnabled));\n\t\t\n\t\tif (error == LiluAPI::Error::NoError) {\n\t\t\tDBGLOG(\"init\", \"%s bootstrap %s\", xStringify(PRODUCT_NAME), kextVersion);\n\t\t\t(void)kextVersion;\n\t\t\tADDPR(startSuccess) = true;\n\t\t\tADDPR(config).pluginStart();\n\t\t} else {\n\t\t\tSYSLOG(\"init\", \"parent said we should not continue %d\", error);\n\t\t}\n\t\t\n\t\tlilu.releaseAccess();\n\t} else {\n\t\tSYSLOG(\"init\", \"failed to call parent %d\", error);\n\t}\n\n\t// Report success but actually do not start and let I/O Kit unload us.\n\t// This works better and increases boot speed in some cases.\n\treturn KERN_SUCCESS;\n}\n\nEXPORT extern \"C\" kern_return_t ADDPR(kern_stop)(kmod_info_t *, void *) {\n\t// It is not safe to unload Lilu plugins unless they were disabled!\n\treturn ADDPR(startSuccess) ? KERN_FAILURE : KERN_SUCCESS;\n}\n\n#endif /* LILU_CUSTOM_KMOD_INIT */\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/security/_label.h",
"content": "/*\n * Copyright (c) 2007 Apple Inc. All rights reserved.\n *\n * @APPLE_OSREFERENCE_LICENSE_HEADER_START@\n * \n * This file contains Original Code and/or Modifications of Original Code\n * as defined in and that are subject to the Apple Public Source License\n * Version 2.0 (the 'License'). You may not use this file except in\n * compliance with the License. The rights granted to you under the License\n * may not be used to create, or enable the creation or redistribution of,\n * unlawful or unlicensed copies of an Apple operating system, or to\n * circumvent, violate, or enable the circumvention or violation of, any\n * terms of an Apple operating system software license agreement.\n * \n * Please obtain a copy of the License at\n * http://www.opensource.apple.com/apsl/ and read it before using this file.\n * \n * The Original Code and all software distributed under the License are\n * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER\n * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,\n * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.\n * Please see the License for the specific language governing rights and\n * limitations under the License.\n * \n * @APPLE_OSREFERENCE_LICENSE_HEADER_END@\n */\n/*-\n * Copyright (c) 1999, 2000, 2001, 2002 Robert N. M. Watson\n * Copyright (c) 2001, 2002 Networks Associates Technology, Inc.\n * Copyright (c) 2005 SPARTA, Inc.\n * All rights reserved.\n *\n * This software was developed by Robert Watson for the TrustedBSD Project.\n *\n * This software was developed for the FreeBSD Project in part by Network\n * Associates Laboratories, the Security Research Division of Network\n * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (\"CBOSS\"),\n * as part of the DARPA CHATS research program.\n *\n * Redistribution and use in source and binary forms, with or without\n * modification, are permitted provided that the following conditions\n * are met:\n * 1. Redistributions of source code must retain the above copyright\n * notice, this list of conditions and the following disclaimer.\n * 2. Redistributions in binary form must reproduce the above copyright\n * notice, this list of conditions and the following disclaimer in the\n * documentation and/or other materials provided with the distribution.\n *\n * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND\n * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE\n * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE\n * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE\n * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\n * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS\n * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)\n * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT\n * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY\n * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF\n * SUCH DAMAGE.\n *\n * $FreeBSD: src/sys/sys/_label.h,v 1.4 2003/05/08 19:49:42 rwatson Exp $\n */\n#ifndef _SECURITY_LABEL_H_\n#define\t_SECURITY_LABEL_H_\n\n/*\n * XXXMAC: This shouldn't be exported to userland, but is because of ucred.h\n * and various other messes.\n */\n#if CONFIG_EMBEDDED\n#define\tMAC_MAX_SLOTS\t3\n#else\n#define\tMAC_MAX_SLOTS\t7\n#endif\n\n#define\tMAC_FLAG_INITIALIZED\t0x0000001\t/* Is initialized for use. */\n\nstruct label {\n\tint\tl_flags;\n\tunion {\n\t\tvoid\t*l_ptr;\n\t\tlong\t l_long;\n\t}\tl_perpolicy[MAC_MAX_SLOTS];\n};\n\n#endif /* !_SECURITY_LABEL_H_ */\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/security/mac_framework.h",
"content": "/*\n * Copyright (c) 2007 Apple Inc. All rights reserved.\n *\n * @APPLE_OSREFERENCE_LICENSE_HEADER_START@\n *\n * This file contains Original Code and/or Modifications of Original Code\n * as defined in and that are subject to the Apple Public Source License\n * Version 2.0 (the 'License'). You may not use this file except in\n * compliance with the License. The rights granted to you under the License\n * may not be used to create, or enable the creation or redistribution of,\n * unlawful or unlicensed copies of an Apple operating system, or to\n * circumvent, violate, or enable the circumvention or violation of, any\n * terms of an Apple operating system software license agreement.\n *\n * Please obtain a copy of the License at\n * http://www.opensource.apple.com/apsl/ and read it before using this file.\n *\n * The Original Code and all software distributed under the License are\n * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER\n * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,\n * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.\n * Please see the License for the specific language governing rights and\n * limitations under the License.\n *\n * @APPLE_OSREFERENCE_LICENSE_HEADER_END@\n */\n/*-\n * Copyright (c) 1999-2002 Robert N. M. Watson\n * Copyright (c) 2001-2005 Networks Associates Technology, Inc.\n * Copyright (c) 2005-2007 SPARTA, Inc.\n * All rights reserved.\n *\n * This software was developed by Robert Watson for the TrustedBSD Project.\n *\n * This software was developed for the FreeBSD Project in part by Network\n * Associates Laboratories, the Security Research Division of Network\n * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (\"CBOSS\"),\n * as part of the DARPA CHATS research program.\n *\n * This software was enhanced by SPARTA ISSO under SPAWAR contract\n * N66001-04-C-6019 (\"SEFOS\").\n *\n * Redistribution and use in source and binary forms, with or without\n * modification, are permitted provided that the following conditions\n * are met:\n * 1. Redistributions of source code must retain the above copyright\n * notice, this list of conditions and the following disclaimer.\n * 2. Redistributions in binary form must reproduce the above copyright\n * notice, this list of conditions and the following disclaimer in the\n * documentation and/or other materials provided with the distribution.\n *\n * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND\n * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE\n * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE\n * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE\n * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\n * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS\n * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)\n * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT\n * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY\n * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF\n * SUCH DAMAGE.\n *\n * $FreeBSD: src/sys/sys/mac.h,v 1.40 2003/04/18 19:57:37 rwatson Exp $\n *\n */\n/*\n * Kernel interface for Mandatory Access Control -- how kernel services\n * interact with the TrustedBSD MAC Framework.\n */\n\n#ifndef _SECURITY_MAC_FRAMEWORK_H_\n#define\t_SECURITY_MAC_FRAMEWORK_H_\n\n//#warning \"MAC policy is not KPI, see Technical Q&A QA1574, this header will be removed in next version\"\n\n#ifdef __cplusplus\nextern \"C\" {\n#endif\n\nstruct attrlist;\nstruct auditinfo;\nstruct bpf_d;\nstruct componentname;\nstruct cs_blob;\nstruct devnode;\nstruct exception_action;\nstruct flock;\nstruct fdescnode;\nstruct fileglob;\nstruct fileproc;\nstruct ifnet;\nstruct ifreq;\nstruct image_params;\nstruct inpcb;\nstruct ipc_port;\nstruct ipq;\nstruct knote;\nstruct m_tag;\nstruct mac;\nstruct mac_module_data;\nstruct mbuf;\nstruct msg;\nstruct msqid_kernel;\nstruct mount;\nstruct pipe;\nstruct proc;\nstruct pseminfo;\nstruct pshminfo;\nstruct semid_kernel;\nstruct shmid_kernel;\nstruct sockaddr;\nstruct sockopt;\nstruct socket;\nstruct task;\nstruct thread;\nstruct timespec;\nstruct tty;\nstruct ucred;\nstruct uio;\nstruct uthread;\nstruct vfs_attr;\nstruct vfs_context;\nstruct vnode;\nstruct vnode_attr;\nstruct vop_setlabel_args;\n\n#include \n#include \n\n#if CONFIG_MACF\n\n#ifndef __IOKIT_PORTS_DEFINED__\n#define __IOKIT_PORTS_DEFINED__\n#ifdef __cplusplus\nclass OSObject;\ntypedef OSObject *io_object_t;\n#else\nstruct OSObject;\ntypedef struct OSObject *io_object_t;\n#endif\n#endif /* __IOKIT_PORTS_DEFINED__ */\n\n/*@ macros */\n#define\tVNODE_LABEL_CREATE\t1\n\n/*@ === */\nint\tmac_audit_check_postselect(kauth_cred_t cred, unsigned short syscode,\n\t void *args, int error, int retval, int mac_forced);\nint\tmac_audit_check_preselect(kauth_cred_t cred, unsigned short syscode,\n\t void *args);\nint\tmac_bpfdesc_check_receive(struct bpf_d *bpf_d, struct ifnet *ifp);\nvoid\tmac_bpfdesc_label_destroy(struct bpf_d *bpf_d);\nvoid\tmac_bpfdesc_label_init(struct bpf_d *bpf_d);\nvoid\tmac_bpfdesc_label_associate(kauth_cred_t cred, struct bpf_d *bpf_d);\nint\tmac_cred_check_label_update(kauth_cred_t cred,\n\t struct label *newlabel);\nint\tmac_cred_check_label_update_execve(vfs_context_t ctx,\n\t struct vnode *vp, off_t offset, struct vnode *scriptvp,\n\t struct label *scriptvnodelabel, struct label *execlabel,\n\t proc_t proc, void *macextensions);\nint\tmac_cred_check_visible(kauth_cred_t u1, kauth_cred_t u2);\nstruct label\t*mac_cred_label_alloc(void);\nvoid\tmac_cred_label_associate(kauth_cred_t cred_parent,\n\t kauth_cred_t cred_child);\nvoid\tmac_cred_label_associate_fork(kauth_cred_t cred, proc_t child);\nvoid\tmac_cred_label_associate_kernel(kauth_cred_t cred);\nvoid\tmac_cred_label_associate_user(kauth_cred_t cred);\nvoid\tmac_cred_label_destroy(kauth_cred_t cred);\nint\tmac_cred_label_externalize_audit(proc_t p, struct mac *mac);\nvoid\tmac_cred_label_free(struct label *label);\nvoid\tmac_cred_label_init(kauth_cred_t cred);\nint\tmac_cred_label_compare(struct label *a, struct label *b);\nvoid\tmac_cred_label_update(kauth_cred_t cred, struct label *newlabel);\nvoid\tmac_cred_label_update_execve(vfs_context_t ctx, kauth_cred_t newcred,\n\t struct vnode *vp, off_t offset, struct vnode *scriptvp,\n\t struct label *scriptvnodelabel, struct label *execlabel, u_int *csflags,\n\t void *macextensions, int *disjoint, int *labelupdateerror);\nvoid\tmac_devfs_label_associate_device(dev_t dev, struct devnode *de,\n\t const char *fullpath);\nvoid\tmac_devfs_label_associate_directory(const char *dirname, int dirnamelen,\n\t struct devnode *de, const char *fullpath);\nvoid\tmac_devfs_label_copy(struct label *, struct label *label);\nvoid\tmac_devfs_label_destroy(struct devnode *de);\nvoid\tmac_devfs_label_init(struct devnode *de);\nvoid\tmac_devfs_label_update(struct mount *mp, struct devnode *de,\n\t struct vnode *vp);\nint\tmac_execve_enter(user_addr_t mac_p, struct image_params *imgp);\nint\tmac_file_check_change_offset(kauth_cred_t cred, struct fileglob *fg);\nint\tmac_file_check_create(kauth_cred_t cred);\nint\tmac_file_check_dup(kauth_cred_t cred, struct fileglob *fg, int newfd);\nint\tmac_file_check_fcntl(kauth_cred_t cred, struct fileglob *fg, int cmd,\n\t user_long_t arg);\nint\tmac_file_check_get(kauth_cred_t cred, struct fileglob *fg,\n\t char *elements, int len);\nint\tmac_file_check_get_offset(kauth_cred_t cred, struct fileglob *fg);\nint\tmac_file_check_inherit(kauth_cred_t cred, struct fileglob *fg);\nint\tmac_file_check_ioctl(kauth_cred_t cred, struct fileglob *fg,\n\t unsigned int cmd);\nint\tmac_file_check_lock(kauth_cred_t cred, struct fileglob *fg, int op,\n\t struct flock *fl);\nint\tmac_file_check_library_validation(struct proc *proc,\n\t struct fileglob *fg, off_t slice_offset,\n\t user_long_t error_message, size_t error_message_size);\nint\tmac_file_check_mmap(kauth_cred_t cred, struct fileglob *fg,\n\t int prot, int flags, uint64_t file_pos, int *maxprot);\nvoid\tmac_file_check_mmap_downgrade(kauth_cred_t cred, struct fileglob *fg,\n\t int *prot);\nint\tmac_file_check_receive(kauth_cred_t cred, struct fileglob *fg);\nint\tmac_file_check_set(kauth_cred_t cred, struct fileglob *fg,\n\t char *bufp, int buflen);\nvoid\tmac_file_label_associate(kauth_cred_t cred, struct fileglob *fg);\nvoid\tmac_file_label_destroy(struct fileglob *fg);\nvoid\tmac_file_label_init(struct fileglob *fg);\nint\tmac_ifnet_check_transmit(struct ifnet *ifp, struct mbuf *mbuf,\n\t int family, int type);\nvoid\tmac_ifnet_label_associate(struct ifnet *ifp);\nvoid\tmac_ifnet_label_destroy(struct ifnet *ifp);\nint\tmac_ifnet_label_get(kauth_cred_t cred, struct ifreq *ifr,\n\t struct ifnet *ifp);\nvoid\tmac_ifnet_label_init(struct ifnet *ifp);\nvoid\tmac_ifnet_label_recycle(struct ifnet *ifp);\nint\tmac_ifnet_label_set(kauth_cred_t cred, struct ifreq *ifr,\n\t struct ifnet *ifp);\nint\tmac_inpcb_check_deliver(struct inpcb *inp, struct mbuf *mbuf,\n\t int family, int type);\nvoid\tmac_inpcb_label_associate(struct socket *so, struct inpcb *inp);\nvoid\tmac_inpcb_label_destroy(struct inpcb *inp);\nint\tmac_inpcb_label_init(struct inpcb *inp, int flag);\nvoid\tmac_inpcb_label_recycle(struct inpcb *inp);\nvoid\tmac_inpcb_label_update(struct socket *so);\nint\tmac_iokit_check_device(char *devtype, struct mac_module_data *mdata);\nint\tmac_iokit_check_open(kauth_cred_t cred, io_object_t user_client, unsigned int user_client_type);\nint\tmac_iokit_check_set_properties(kauth_cred_t cred, io_object_t registry_entry, io_object_t properties);\nint\tmac_iokit_check_filter_properties(kauth_cred_t cred, io_object_t registry_entry);\nint\tmac_iokit_check_get_property(kauth_cred_t cred, io_object_t registry_entry, const char *name);\nint\tmac_iokit_check_hid_control(kauth_cred_t cred);\nint\tmac_iokit_check_nvram_delete(kauth_cred_t cred, const char *name);\nint\tmac_iokit_check_nvram_get(kauth_cred_t cred, const char *name);\nint\tmac_iokit_check_nvram_set(kauth_cred_t cred, const char *name, io_object_t value);\nvoid\tmac_ipq_label_associate(struct mbuf *fragment, struct ipq *ipq);\nint\tmac_ipq_label_compare(struct mbuf *fragment, struct ipq *ipq);\nvoid\tmac_ipq_label_destroy(struct ipq *ipq);\nint\tmac_ipq_label_init(struct ipq *ipq, int flag);\nvoid\tmac_ipq_label_update(struct mbuf *fragment, struct ipq *ipq);\nvoid\tmac_mbuf_label_associate_bpfdesc(struct bpf_d *bpf_d, struct mbuf *m);\nvoid\tmac_mbuf_label_associate_ifnet(struct ifnet *ifp, struct mbuf *m);\nvoid\tmac_mbuf_label_associate_inpcb(struct inpcb *inp, struct mbuf *m);\nvoid\tmac_mbuf_label_associate_ipq(struct ipq *ipq, struct mbuf *mbuf);\nvoid\tmac_mbuf_label_associate_linklayer(struct ifnet *ifp, struct mbuf *m);\nvoid\tmac_mbuf_label_associate_multicast_encap(struct mbuf *oldmbuf,\n\t struct ifnet *ifp, struct mbuf *newmbuf);\nvoid\tmac_mbuf_label_associate_netlayer(struct mbuf *oldmbuf,\n\t struct mbuf *newmbuf);\nvoid\tmac_mbuf_label_associate_socket(struct socket *so, struct mbuf *m);\nvoid\tmac_mbuf_label_copy(struct mbuf *m_from, struct mbuf *m_to);\nvoid\tmac_mbuf_label_destroy(struct mbuf *m);\nint\tmac_mbuf_label_init(struct mbuf *m, int flag);\nvoid\tmac_mbuf_tag_copy(struct m_tag *m, struct m_tag *mtag);\nvoid\tmac_mbuf_tag_destroy(struct m_tag *mtag);\nint\tmac_mbuf_tag_init(struct m_tag *, int how);\nint\tmac_mount_check_fsctl(vfs_context_t ctx, struct mount *mp,\n\t unsigned int cmd);\nint\tmac_mount_check_getattr(vfs_context_t ctx, struct mount *mp,\n\t struct vfs_attr *vfa);\nint\tmac_mount_check_label_update(vfs_context_t ctx, struct mount *mp);\nint\tmac_mount_check_mount(vfs_context_t ctx, struct vnode *vp,\n\t struct componentname *cnp, const char *vfc_name);\nint\tmac_mount_check_snapshot_create(vfs_context_t ctx, struct mount *mp,\n\t const char *name);\nint\tmac_mount_check_snapshot_delete(vfs_context_t ctx, struct mount *mp,\n\t const char *name);\nint\tmac_mount_check_snapshot_revert(vfs_context_t ctx, struct mount *mp,\n\t const char *name);\nint\tmac_mount_check_remount(vfs_context_t ctx, struct mount *mp);\nint\tmac_mount_check_setattr(vfs_context_t ctx, struct mount *mp,\n\t struct vfs_attr *vfa);\nint\tmac_mount_check_stat(vfs_context_t ctx, struct mount *mp);\nint\tmac_mount_check_umount(vfs_context_t ctx, struct mount *mp);\nvoid\tmac_mount_label_associate(vfs_context_t ctx, struct mount *mp);\nvoid\tmac_mount_label_destroy(struct mount *mp);\nint\tmac_mount_label_externalize(struct label *label, char *elements,\n\t char *outbuf, size_t outbuflen);\nint\tmac_mount_label_get(struct mount *mp, user_addr_t mac_p);\nvoid\tmac_mount_label_init(struct mount *);\nint\tmac_mount_label_internalize(struct label *, char *string);\nvoid\tmac_netinet_fragment(struct mbuf *datagram, struct mbuf *fragment);\nvoid\tmac_netinet_icmp_reply(struct mbuf *m);\nvoid\tmac_netinet_tcp_reply(struct mbuf *m);\nint\tmac_pipe_check_ioctl(kauth_cred_t cred, struct pipe *cpipe,\n\t unsigned int cmd);\nint\tmac_pipe_check_kqfilter(kauth_cred_t cred, struct knote *kn,\n\t struct pipe *cpipe);\nint\tmac_pipe_check_read(kauth_cred_t cred, struct pipe *cpipe);\nint\tmac_pipe_check_select(kauth_cred_t cred, struct pipe *cpipe,\n\t int which);\nint\tmac_pipe_check_stat(kauth_cred_t cred, struct pipe *cpipe);\nint\tmac_pipe_check_write(kauth_cred_t cred, struct pipe *cpipe);\nstruct label\t*mac_pipe_label_alloc(void);\nvoid\tmac_pipe_label_associate(kauth_cred_t cred, struct pipe *cpipe);\nvoid\tmac_pipe_label_copy(struct label *src, struct label *dest);\nvoid\tmac_pipe_label_destroy(struct pipe *cpipe);\nvoid\tmac_pipe_label_free(struct label *label);\nvoid\tmac_pipe_label_init(struct pipe *cpipe);\nint\tmac_pipe_label_update(kauth_cred_t cred, struct pipe *cpipe,\n\t struct label *label);\nvoid mac_policy_initbsd(void);\nint\tmac_posixsem_check_create(kauth_cred_t cred, const char *name);\nint\tmac_posixsem_check_open(kauth_cred_t cred, struct pseminfo *psem);\nint\tmac_posixsem_check_post(kauth_cred_t cred, struct pseminfo *psem);\nint\tmac_posixsem_check_unlink(kauth_cred_t cred, struct pseminfo *psem,\n\t const char *name);\nint\tmac_posixsem_check_wait(kauth_cred_t cred, struct pseminfo *psem);\nvoid\tmac_posixsem_vnode_label_associate(kauth_cred_t cred,\n\t struct pseminfo *psem, struct label *plabel,\n\t vnode_t vp, struct label *vlabel);\nvoid\tmac_posixsem_label_associate(kauth_cred_t cred,\n\t struct pseminfo *psem, const char *name);\nvoid\tmac_posixsem_label_destroy(struct pseminfo *psem);\nvoid\tmac_posixsem_label_init(struct pseminfo *psem);\nint\tmac_posixshm_check_create(kauth_cred_t cred, const char *name);\nint\tmac_posixshm_check_mmap(kauth_cred_t cred, struct pshminfo *pshm,\n\t int prot, int flags);\nint\tmac_posixshm_check_open(kauth_cred_t cred, struct pshminfo *pshm,\n\t int fflags);\nint\tmac_posixshm_check_stat(kauth_cred_t cred, struct pshminfo *pshm);\nint\tmac_posixshm_check_truncate(kauth_cred_t cred, struct pshminfo *pshm,\n\t off_t s);\nint\tmac_posixshm_check_unlink(kauth_cred_t cred, struct pshminfo *pshm,\n\t const char *name);\nvoid\tmac_posixshm_vnode_label_associate(kauth_cred_t cred,\n\t struct pshminfo *pshm, struct label *plabel,\n\t vnode_t vp, struct label *vlabel);\nvoid\tmac_posixshm_label_associate(kauth_cred_t cred,\n\t struct pshminfo *pshm, const char *name);\nvoid\tmac_posixshm_label_destroy(struct pshminfo *pshm);\nvoid\tmac_posixshm_label_init(struct pshminfo *pshm);\nint\tmac_priv_check(kauth_cred_t cred, int priv);\nint\tmac_priv_grant(kauth_cred_t cred, int priv);\nint\tmac_proc_check_debug(proc_t proc1, proc_t proc2);\nint\tmac_proc_check_cpumon(proc_t curp);\nint\tmac_proc_check_proc_info(proc_t curp, proc_t target, int callnum, int flavor);\nint\tmac_proc_check_get_cs_info(proc_t curp, proc_t target, unsigned int op);\nint\tmac_proc_check_set_cs_info(proc_t curp, proc_t target, unsigned int op);\nint\tmac_proc_check_fork(proc_t proc);\nint\tmac_proc_check_suspend_resume(proc_t proc, int sr);\nint\tmac_proc_check_get_task_name(kauth_cred_t cred, struct proc *p);\nint\tmac_proc_check_get_task(kauth_cred_t cred, struct proc *p);\nint\tmac_proc_check_expose_task(kauth_cred_t cred, struct proc *p);\nint\tmac_proc_check_inherit_ipc_ports(struct proc *p, struct vnode *cur_vp, off_t cur_offset, struct vnode *img_vp, off_t img_offset, struct vnode *scriptvp);\nint\tmac_proc_check_getaudit(proc_t proc);\nint\tmac_proc_check_getauid(proc_t proc);\nint mac_proc_check_getlcid(proc_t proc1, proc_t proc2,\n\t pid_t pid);\nint mac_proc_check_ledger(proc_t curp, proc_t target, int op);\nint\tmac_proc_check_map_anon(proc_t proc, user_addr_t u_addr,\n\t user_size_t u_size, int prot, int flags, int *maxprot);\nint\tmac_proc_check_mprotect(proc_t proc,\n\t user_addr_t addr, user_size_t size, int prot);\nint\tmac_proc_check_run_cs_invalid(proc_t proc);\nint\tmac_proc_check_sched(proc_t proc, proc_t proc2);\nint\tmac_proc_check_setaudit(proc_t proc, struct auditinfo_addr *ai);\nint\tmac_proc_check_setauid(proc_t proc, uid_t auid);\nint mac_proc_check_setlcid(proc_t proc1, proc_t proc2,\n\t pid_t pid1, pid_t pid2);\nint\tmac_proc_check_signal(proc_t proc1, proc_t proc2,\n\t int signum);\nint\tmac_proc_check_wait(proc_t proc1, proc_t proc2);\nvoid\tmac_proc_set_enforce(proc_t p, int enforce_flags);\nint\tmac_setsockopt_label(kauth_cred_t cred, struct socket *so,\n\t struct mac *extmac);\nint mac_socket_check_accept(kauth_cred_t cred, struct socket *so);\nint mac_socket_check_accepted(kauth_cred_t cred, struct socket *so);\nint\tmac_socket_check_bind(kauth_cred_t cred, struct socket *so,\n\t struct sockaddr *addr);\nint\tmac_socket_check_connect(kauth_cred_t cred, struct socket *so,\n\t struct sockaddr *addr);\nint\tmac_socket_check_create(kauth_cred_t cred, int domain,\n\t int type, int protocol);\nint\tmac_socket_check_deliver(struct socket *so, struct mbuf *m);\nint\tmac_socket_check_kqfilter(kauth_cred_t cred, struct knote *kn,\n\t struct socket *so);\nint\tmac_socket_check_listen(kauth_cred_t cred, struct socket *so);\nint\tmac_socket_check_receive(kauth_cred_t cred, struct socket *so);\nint\tmac_socket_check_received(kauth_cred_t cred, struct socket *so,\n\t struct sockaddr *saddr);\nint mac_socket_check_select(kauth_cred_t cred, struct socket *so,\n\t int which);\nint\tmac_socket_check_send(kauth_cred_t cred, struct socket *so,\n\t struct sockaddr *addr);\nint\tmac_socket_check_getsockopt(kauth_cred_t cred, struct socket *so,\n\t struct sockopt *sopt);\nint\tmac_socket_check_setsockopt(kauth_cred_t cred, struct socket *so,\n\t struct sockopt *sopt);\nint\tmac_socket_check_stat(kauth_cred_t cred, struct socket *so);\nvoid\tmac_socket_label_associate(kauth_cred_t cred, struct socket *so);\nvoid\tmac_socket_label_associate_accept(struct socket *oldsocket,\n\t struct socket *newsocket);\nvoid\tmac_socket_label_copy(struct label *from, struct label *to);\nvoid\tmac_socket_label_destroy(struct socket *);\nint\tmac_socket_label_get(kauth_cred_t cred, struct socket *so,\n\t struct mac *extmac);\nint\tmac_socket_label_init(struct socket *, int waitok);\nvoid\tmac_socketpeer_label_associate_mbuf(struct mbuf *m, struct socket *so);\nvoid\tmac_socketpeer_label_associate_socket(struct socket *peersocket,\n\t struct socket *socket_to_modify);\nint\tmac_socketpeer_label_get(kauth_cred_t cred, struct socket *so,\n\t struct mac *extmac);\nint\tmac_system_check_acct(kauth_cred_t cred, struct vnode *vp);\nint\tmac_system_check_audit(kauth_cred_t cred, void *record, int length);\nint\tmac_system_check_auditctl(kauth_cred_t cred, struct vnode *vp);\nint\tmac_system_check_auditon(kauth_cred_t cred, int cmd);\nint\tmac_system_check_chud(kauth_cred_t cred);\nint\tmac_system_check_host_priv(kauth_cred_t cred);\nint\tmac_system_check_info(kauth_cred_t, const char *info_type);\nint\tmac_system_check_nfsd(kauth_cred_t cred);\nint\tmac_system_check_reboot(kauth_cred_t cred, int howto);\nint\tmac_system_check_settime(kauth_cred_t cred);\nint\tmac_system_check_swapoff(kauth_cred_t cred, struct vnode *vp);\nint\tmac_system_check_swapon(kauth_cred_t cred, struct vnode *vp);\nint\tmac_system_check_sysctlbyname(kauth_cred_t cred, const char *namestring, int *name,\n\t\t\t\t u_int namelen, user_addr_t oldctl, size_t oldlen,\n\t\t\t\t user_addr_t newctl, size_t newlen);\nint\tmac_system_check_kas_info(kauth_cred_t cred, int selector);\nvoid\tmac_sysvmsg_label_associate(kauth_cred_t cred,\n\t struct msqid_kernel *msqptr, struct msg *msgptr);\nvoid\tmac_sysvmsg_label_init(struct msg *msgptr);\nvoid\tmac_sysvmsg_label_recycle(struct msg *msgptr);\nint\tmac_sysvmsq_check_enqueue(kauth_cred_t cred, struct msg *msgptr,\n\t struct msqid_kernel *msqptr);\nint\tmac_sysvmsq_check_msgrcv(kauth_cred_t cred, struct msg *msgptr);\nint\tmac_sysvmsq_check_msgrmid(kauth_cred_t cred, struct msg *msgptr);\nint\tmac_sysvmsq_check_msqctl(kauth_cred_t cred,\n\t struct msqid_kernel *msqptr, int cmd);\nint\tmac_sysvmsq_check_msqget(kauth_cred_t cred,\n\t struct msqid_kernel *msqptr);\nint\tmac_sysvmsq_check_msqrcv(kauth_cred_t cred,\n\t struct msqid_kernel *msqptr);\nint\tmac_sysvmsq_check_msqsnd(kauth_cred_t cred,\n\t struct msqid_kernel *msqptr);\nvoid\tmac_sysvmsq_label_associate(kauth_cred_t cred,\n\t struct msqid_kernel *msqptr);\nvoid \tmac_sysvmsq_label_init(struct msqid_kernel *msqptr);\nvoid \tmac_sysvmsq_label_recycle(struct msqid_kernel *msqptr);\nint\tmac_sysvsem_check_semctl(kauth_cred_t cred,\n\t struct semid_kernel *semakptr, int cmd);\nint\tmac_sysvsem_check_semget(kauth_cred_t cred,\n\t struct semid_kernel *semakptr);\nint\tmac_sysvsem_check_semop(kauth_cred_t cred,\n\t struct semid_kernel *semakptr, size_t accesstype);\nvoid\tmac_sysvsem_label_associate(kauth_cred_t cred,\n\t struct semid_kernel *semakptr);\nvoid\tmac_sysvsem_label_destroy(struct semid_kernel *semakptr);\nvoid\tmac_sysvsem_label_init(struct semid_kernel *semakptr);\nvoid\tmac_sysvsem_label_recycle(struct semid_kernel *semakptr);\nint\tmac_sysvshm_check_shmat(kauth_cred_t cred,\n\t struct shmid_kernel *shmsegptr, int shmflg);\nint\tmac_sysvshm_check_shmctl(kauth_cred_t cred,\n\t struct shmid_kernel *shmsegptr, int cmd);\nint\tmac_sysvshm_check_shmdt(kauth_cred_t cred,\n\t struct shmid_kernel *shmsegptr);\nint\tmac_sysvshm_check_shmget(kauth_cred_t cred,\n\t struct shmid_kernel *shmsegptr, int shmflg);\nvoid\tmac_sysvshm_label_associate(kauth_cred_t cred,\n\t struct shmid_kernel *shmsegptr);\nvoid\tmac_sysvshm_label_destroy(struct shmid_kernel *shmsegptr);\nvoid\tmac_sysvshm_label_init(struct shmid_kernel* shmsegptr);\nvoid\tmac_sysvshm_label_recycle(struct shmid_kernel *shmsegptr);\nint\tmac_vnode_check_access(vfs_context_t ctx, struct vnode *vp,\n\t int acc_mode);\nint\tmac_vnode_check_chdir(vfs_context_t ctx, struct vnode *dvp);\nint\tmac_vnode_check_chroot(vfs_context_t ctx, struct vnode *dvp,\n\t struct componentname *cnp);\nint\tmac_vnode_check_clone(vfs_context_t ctx, struct vnode *dvp,\n\t struct vnode *vp, struct componentname *cnp);\nint\tmac_vnode_check_create(vfs_context_t ctx, struct vnode *dvp,\n\t struct componentname *cnp, struct vnode_attr *vap);\nint\tmac_vnode_check_deleteextattr(vfs_context_t ctx, struct vnode *vp,\n\t const char *name);\nint\tmac_vnode_check_exchangedata(vfs_context_t ctx, struct vnode *v1,\n\t struct vnode *v2);\nint\tmac_vnode_check_exec(vfs_context_t ctx, struct vnode *vp,\n\t struct image_params *imgp);\nint\tmac_vnode_check_fsgetpath(vfs_context_t ctx, struct vnode *vp);\nint\tmac_vnode_check_getattr(vfs_context_t ctx, struct ucred *file_cred,\n struct vnode *vp, struct vnode_attr *va);\nint mac_vnode_check_getattrlist(vfs_context_t ctx, struct vnode *vp,\n\t struct attrlist *alist);\nint\tmac_vnode_check_getextattr(vfs_context_t ctx, struct vnode *vp,\n\t const char *name, struct uio *uio);\nint\tmac_vnode_check_ioctl(vfs_context_t ctx, struct vnode *vp,\n\t unsigned int cmd);\nint\tmac_vnode_check_kqfilter(vfs_context_t ctx,\n\t kauth_cred_t file_cred, struct knote *kn, struct vnode *vp);\nint\tmac_vnode_check_label_update(vfs_context_t ctx, struct vnode *vp,\n\t struct label *newlabel);\nint\tmac_vnode_check_link(vfs_context_t ctx, struct vnode *dvp,\n\t struct vnode *vp, struct componentname *cnp);\nint\tmac_vnode_check_listextattr(vfs_context_t ctx, struct vnode *vp);\nint\tmac_vnode_check_lookup(vfs_context_t ctx, struct vnode *dvp,\n\t struct componentname *cnp);\nint\tmac_vnode_check_open(vfs_context_t ctx, struct vnode *vp,\n\t int acc_mode);\nint\tmac_vnode_check_read(vfs_context_t ctx,\n\t kauth_cred_t file_cred, struct vnode *vp);\nint\tmac_vnode_check_readdir(vfs_context_t ctx, struct vnode *vp);\nint\tmac_vnode_check_readlink(vfs_context_t ctx, struct vnode *vp);\nint\tmac_vnode_check_rename(vfs_context_t ctx, struct vnode *dvp,\n\t struct vnode *vp, struct componentname *cnp, struct vnode *tdvp,\n\t struct vnode *tvp, struct componentname *tcnp);\nint\tmac_vnode_check_revoke(vfs_context_t ctx, struct vnode *vp);\nint\tmac_vnode_check_searchfs(vfs_context_t ctx, struct vnode *vp,\n\t struct attrlist *alist);\nint mac_vnode_check_select(vfs_context_t ctx, struct vnode *vp,\n\t int which);\nint\tmac_vnode_check_setacl(vfs_context_t ctx, struct vnode *vp,\n\t struct kauth_acl *acl);\nint mac_vnode_check_setattrlist(vfs_context_t ctxd, struct vnode *vp,\n\t struct attrlist *alist);\nint\tmac_vnode_check_setextattr(vfs_context_t ctx, struct vnode *vp,\n\t const char *name, struct uio *uio);\nint\tmac_vnode_check_setflags(vfs_context_t ctx, struct vnode *vp,\n\t u_long flags);\nint\tmac_vnode_check_setmode(vfs_context_t ctx, struct vnode *vp,\n\t mode_t mode);\nint\tmac_vnode_check_setowner(vfs_context_t ctx, struct vnode *vp,\n\t uid_t uid, gid_t gid);\nint\tmac_vnode_check_setutimes(vfs_context_t ctx, struct vnode *vp,\n\t struct timespec atime, struct timespec mtime);\nint\tmac_vnode_check_signature(struct vnode *vp,\n\t\tstruct cs_blob *cs_blob, struct image_params *imgp,\n\t\tunsigned int *cs_flags,\n\t\tint flags);\nint\tmac_vnode_check_stat(vfs_context_t ctx,\n\t kauth_cred_t file_cred, struct vnode *vp);\nint\tmac_vnode_check_truncate(vfs_context_t ctx,\n\t kauth_cred_t file_cred, struct vnode *vp);\nint\tmac_vnode_check_uipc_bind(vfs_context_t ctx, struct vnode *dvp,\n\t struct componentname *cnp, struct vnode_attr *vap);\nint\tmac_vnode_check_uipc_connect(vfs_context_t ctx, struct vnode *vp, struct socket *so);\nint\tmac_vnode_check_unlink(vfs_context_t ctx, struct vnode *dvp,\n\t struct vnode *vp, struct componentname *cnp);\nint\tmac_vnode_check_write(vfs_context_t ctx,\n\t kauth_cred_t file_cred, struct vnode *vp);\nstruct label\t*mac_vnode_label_alloc(void);\nint\tmac_vnode_label_associate(struct mount *mp, struct vnode *vp,\n\t vfs_context_t ctx);\nvoid\tmac_vnode_label_associate_devfs(struct mount *mp, struct devnode *de,\n\t struct vnode *vp);\nint\tmac_vnode_label_associate_extattr(struct mount *mp, struct vnode *vp);\nint\tmac_vnode_label_associate_fdesc(struct mount *mp, struct fdescnode *fnp,\n\t struct vnode *vp, vfs_context_t ctx);\nvoid\tmac_vnode_label_associate_singlelabel(struct mount *mp,\n\t struct vnode *vp);\nvoid\tmac_vnode_label_copy(struct label *l1, struct label *l2);\nvoid\tmac_vnode_label_destroy(struct vnode *vp);\nint\tmac_vnode_label_externalize_audit(struct vnode *vp, struct mac *mac);\nvoid\tmac_vnode_label_free(struct label *label);\nvoid\tmac_vnode_label_init(struct vnode *vp);\nint\tmac_vnode_label_init_needed(struct vnode *vp);\nvoid\tmac_vnode_label_recycle(struct vnode *vp);\nvoid\tmac_vnode_label_update(vfs_context_t ctx, struct vnode *vp,\n\t struct label *newlabel);\nvoid\tmac_vnode_label_update_extattr(struct mount *mp, struct vnode *vp,\n\t const char *name);\nint\tmac_vnode_notify_create(vfs_context_t ctx, struct mount *mp,\n\t struct vnode *dvp, struct vnode *vp, struct componentname *cnp);\nvoid\tmac_vnode_notify_deleteextattr(vfs_context_t ctx, struct vnode *vp, const char *name);\nvoid\tmac_vnode_notify_link(vfs_context_t ctx, struct vnode *vp,\n\t struct vnode *dvp, struct componentname *cnp);\nvoid\tmac_vnode_notify_open(vfs_context_t ctx, struct vnode *vp, int acc_flags);\nvoid\tmac_vnode_notify_rename(vfs_context_t ctx, struct vnode *vp,\n\t struct vnode *dvp, struct componentname *cnp);\nvoid\tmac_vnode_notify_setacl(vfs_context_t ctx, struct vnode *vp, struct kauth_acl *acl);\nvoid\tmac_vnode_notify_setattrlist(vfs_context_t ctx, struct vnode *vp, struct attrlist *alist);\nvoid\tmac_vnode_notify_setextattr(vfs_context_t ctx, struct vnode *vp, const char *name, struct uio *uio);\nvoid\tmac_vnode_notify_setflags(vfs_context_t ctx, struct vnode *vp, u_long flags);\nvoid\tmac_vnode_notify_setmode(vfs_context_t ctx, struct vnode *vp, mode_t mode);\nvoid\tmac_vnode_notify_setowner(vfs_context_t ctx, struct vnode *vp, uid_t uid, gid_t gid);\nvoid\tmac_vnode_notify_setutimes(vfs_context_t ctx, struct vnode *vp, struct timespec atime, struct timespec mtime);\nvoid\tmac_vnode_notify_truncate(vfs_context_t ctx, kauth_cred_t file_cred, struct vnode *vp);\nint\tmac_vnode_find_sigs(struct proc *p, struct vnode *vp, off_t offsetInMacho);\nint\tvnode_label(struct mount *mp, struct vnode *dvp, struct vnode *vp,\n\t struct componentname *cnp, int flags, vfs_context_t ctx);\nvoid\tvnode_relabel(struct vnode *vp);\nvoid\tmac_pty_notify_grant(proc_t p, struct tty *tp, dev_t dev, struct label *label);\nvoid\tmac_pty_notify_close(proc_t p, struct tty *tp, dev_t dev, struct label *label);\nint\tmac_kext_check_load(kauth_cred_t cred, const char *identifier);\nint\tmac_kext_check_unload(kauth_cred_t cred, const char *identifier);\nint\tmac_kext_check_query(kauth_cred_t cred);\n\nvoid psem_label_associate(struct fileproc *fp, struct vnode *vp, struct vfs_context *ctx);\nvoid pshm_label_associate(struct fileproc *fp, struct vnode *vp, struct vfs_context *ctx);\n\n#if CONFIG_MACF_NET\nstruct label *mac_bpfdesc_label_get(struct bpf_d *d);\nvoid mac_bpfdesc_label_set(struct bpf_d *d, struct label *label);\n#endif\n\n#endif\t/* CONFIG_MACF */\n\n#ifdef __cplusplus\n}\n#endif\n\n#endif /* !_SECURITY_MAC_FRAMEWORK_H_ */\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/security/mac_policy.h",
"content": "/*\n * Copyright (c) 2007-2016 Apple Inc. All rights reserved.\n *\n * @APPLE_OSREFERENCE_LICENSE_HEADER_START@\n * \n * This file contains Original Code and/or Modifications of Original Code\n * as defined in and that are subject to the Apple Public Source License\n * Version 2.0 (the 'License'). You may not use this file except in\n * compliance with the License. The rights granted to you under the License\n * may not be used to create, or enable the creation or redistribution of,\n * unlawful or unlicensed copies of an Apple operating system, or to\n * circumvent, violate, or enable the circumvention or violation of, any\n * terms of an Apple operating system software license agreement.\n * \n * Please obtain a copy of the License at\n * http://www.opensource.apple.com/apsl/ and read it before using this file.\n * \n * The Original Code and all software distributed under the License are\n * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER\n * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,\n * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.\n * Please see the License for the specific language governing rights and\n * limitations under the License.\n * \n * @APPLE_OSREFERENCE_LICENSE_HEADER_END@\n */\n/*-\n * Copyright (c) 1999-2002 Robert N. M. Watson\n * Copyright (c) 2001-2005 Networks Associates Technology, Inc.\n * Copyright (c) 2005-2007 SPARTA, Inc.\n * All rights reserved.\n *\n * This software was developed by Robert Watson for the TrustedBSD Project.\n *\n * This software was developed for the FreeBSD Project in part by Network\n * Associates Laboratories, the Security Research Division of Network\n * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (\"CBOSS\"),\n * as part of the DARPA CHATS research program.\n *\n * This software was enhanced by SPARTA ISSO under SPAWAR contract\n * N66001-04-C-6019 (\"SEFOS\").\n *\n * Redistribution and use in source and binary forms, with or without\n * modification, are permitted provided that the following conditions\n * are met:\n * 1. Redistributions of source code must retain the above copyright\n * notice, this list of conditions and the following disclaimer.\n * 2. Redistributions in binary form must reproduce the above copyright\n * notice, this list of conditions and the following disclaimer in the\n * documentation and/or other materials provided with the distribution.\n *\n * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND\n * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE\n * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE\n * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE\n * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\n * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS\n * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)\n * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT\n * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY\n * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF\n * SUCH DAMAGE.\n *\n * $FreeBSD: src/sys/sys/mac_policy.h,v 1.39 2003/04/18 19:57:37 rwatson Exp $\n */\n\n/**\n @file mac_policy.h\n @brief Kernel Interfaces for MAC policy modules\n\n This header defines the list of operations that are defined by the\n TrustedBSD MAC Framwork on Darwin. MAC Policy modules register\n with the framework to declare interest in a specific set of\n operations. If interest in an entry point is not declared, then\n the policy will be ignored when the Framework evaluates that entry\n point.\n*/\n\n#ifndef _SECURITY_MAC_POLICY_H_\n#define _SECURITY_MAC_POLICY_H_\n\n//#warning \"MAC policy is not KPI, see Technical Q&A QA1574, this header will be removed in next version\"\n\n#ifdef __cplusplus\nextern \"C\" {\n#endif\n\n#include \n\nstruct attrlist;\nstruct auditinfo;\nstruct bpf_d;\nstruct cs_blob;\nstruct devnode;\nstruct exception_action;\nstruct fileglob;\nstruct ifnet;\nstruct inpcb;\nstruct ipq;\nstruct label;\nstruct mac_module_data;\nstruct mac_policy_conf;\nstruct mbuf;\nstruct mount;\nstruct msg;\nstruct msqid_kernel;\nstruct pipe;\nstruct pseminfo;\nstruct pshminfo;\nstruct sbuf;\nstruct semid_kernel;\nstruct shmid_kernel;\nstruct socket;\nstruct sockopt;\nstruct task;\nstruct thread;\nstruct tty;\nstruct ucred;\nstruct vfs_attr;\nstruct vnode;\n/** @struct dummy */\n\n\n\n#ifndef _KAUTH_CRED_T\n#define\t_KAUTH_CRED_T\ntypedef struct ucred *kauth_cred_t;\n#endif\t/* !_KAUTH_CRED_T */\n\n#ifndef __IOKIT_PORTS_DEFINED__\n#define __IOKIT_PORTS_DEFINED__\n#ifdef __cplusplus\nclass OSObject;\ntypedef OSObject *io_object_t;\n#else\nstruct OSObject;\ntypedef struct OSObject *io_object_t;\n#endif\n#endif /* __IOKIT_PORTS_DEFINED__ */\n\n/*-\n * MAC entry points are generally named using the following template:\n *\n * mpo__()\n *\n * or:\n *\n * mpo__check_()\n *\n * Entry points are sorted by object type.\n *\n * It may be desirable also to consider some subsystems as \"objects\", such\n * as system, iokit, etc.\n */\n\n/**\n @name Entry Points for Label Management\n\n These are the entry points corresponding to the life cycle events for\n kernel objects, such as initialization, creation, and destruction.\n\n Most policies (that use labels) will initialize labels by allocating\n space for policy-specific data. In most cases, it is permitted to\n sleep during label initialization operations; it will be noted when\n it is not permitted.\n\n Initialization usually will not require doing more than allocating a\n generic label for the given object. What follows initialization is\n creation, where a label is made specific to the object it is associated\n with. Destruction occurs when the label is no longer needed, such as\n when the corresponding object is destroyed. All necessary cleanup should\n be performed in label destroy operations.\n\n Where possible, the label entry points have identical parameters. If\n the policy module does not require structure-specific label\n information, the same function may be registered in the policy\n operation vector. Many policies will implement two such generic\n allocation calls: one to handle sleepable requests, and one to handle\n potentially non-sleepable requests.\n*/\n\n\n/**\n @brief Audit event postselection\n @param cred Subject credential\n @param syscode Syscall number\n @param args Syscall arguments\n @param error Syscall errno\n @param retval Syscall return value\n\n This is the MAC Framework audit postselect, which is called before\n exiting a syscall to determine if an audit event should be committed.\n A return value of MAC_AUDIT_NO forces the audit record to be suppressed.\n Any other return value results in the audit record being committed.\n\n @warning The suppression behavior will probably go away in Apple's\n future version of the audit implementation.\n\n @return Return MAC_AUDIT_NO to force suppression of the audit record.\n Any other value results in the audit record being committed.\n\n*/\ntypedef int mpo_audit_check_postselect_t(\n\tkauth_cred_t cred,\n\tunsigned short syscode,\n\tvoid *args,\n\tint error,\n\tint retval\n);\n/**\n @brief Audit event preselection\n @param cred Subject credential\n @param syscode Syscall number\n @param args Syscall arguments\n\n This is the MAC Framework audit preselect, which is called before a\n syscall is entered to determine if an audit event should be created.\n If the MAC policy forces the syscall to be audited, MAC_AUDIT_YES should be\n returned. A return value of MAC_AUDIT_NO causes the audit record to\n be suppressed. Returning MAC_POLICY_DEFAULT indicates that the policy wants\n to defer to the system's existing preselection mechanism.\n\n When policies return different preferences, the Framework decides what action\n to take based on the following policy. If any policy returns MAC_AUDIT_YES,\n then create an audit record, else if any policy returns MAC_AUDIT_NO, then\n suppress the creations of an audit record, else defer to the system's\n existing preselection mechanism.\n\n @warning The audit implementation in Apple's current version is\n incomplete, so the MAC policies have priority over the system's existing\n mechanisms. This will probably change in the future version where\n the audit implementation is more complete.\n\n @return Return MAC_AUDIT_YES to force auditing of the syscall,\n MAC_AUDIT_NO to force no auditing of the syscall, MAC_AUDIT_DEFAULT\n to allow auditing mechanisms to determine if the syscall is audited.\n\n*/\ntypedef int mpo_audit_check_preselect_t(\n\tkauth_cred_t cred,\n\tunsigned short syscode,\n\tvoid *args\n);\n/**\n @brief Initialize BPF descriptor label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated BPF descriptor.\n Sleeping is permitted.\n*/\ntypedef void mpo_bpfdesc_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Destroy BPF descriptor label\n @param label The label to be destroyed\n\n Destroy a BPF descriptor label. Since the BPF descriptor\n is going out of scope, policy modules should free any internal\n storage associated with the label so that it may be destroyed.\n*/\ntypedef void mpo_bpfdesc_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Associate a BPF descriptor with a label\n @param cred User credential creating the BPF descriptor\n @param bpf_d The BPF descriptor\n @param bpflabel The new label\n\n Set the label on a newly created BPF descriptor from the passed\n subject credential. This call will be made when a BPF device node\n is opened by a process with the passed subject credential.\n*/\ntypedef void mpo_bpfdesc_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct bpf_d *bpf_d,\n\tstruct label *bpflabel\n);\n/**\n @brief Check whether BPF can read from a network interface\n @param bpf_d Subject; the BPF descriptor\n @param bpflabel Policy label for bpf_d \n @param ifp Object; the network interface \n @param ifnetlabel Policy label for ifp\n\n Determine whether the MAC framework should permit datagrams from\n the passed network interface to be delivered to the buffers of\n the passed BPF descriptor. Return (0) for success, or an errno\n value for failure. Suggested failure: EACCES for label mismatches,\n EPERM for lack of privilege.\n*/\ntypedef int mpo_bpfdesc_check_receive_t(\n\tstruct bpf_d *bpf_d,\n\tstruct label *bpflabel,\n\tstruct ifnet *ifp,\n\tstruct label *ifnetlabel\n);\n/**\n @brief Indicate desire to change the process label at exec time\n @param old Existing subject credential\n @param vp File being executed\n @param offset Offset of binary within file being executed\n @param scriptvp Script being executed by interpreter, if any.\n @param vnodelabel Label corresponding to vp\n @param scriptvnodelabel Script vnode label\n @param execlabel Userspace provided execution label\n @param p Object process\n @param macpolicyattr MAC policy-specific spawn attribute data\n @param macpolicyattrlen Length of policy-specific spawn attribute data\n @see mac_execve\n @see mpo_cred_label_update_execve_t\n @see mpo_vnode_check_exec_t\n\n Indicate whether this policy intends to update the label of a newly\n created credential from the existing subject credential (old). This\n call occurs when a process executes the passed vnode. If a policy\n returns success from this entry point, the mpo_cred_label_update_execve\n entry point will later be called with the same parameters. Access\n has already been checked via the mpo_vnode_check_exec entry point,\n this entry point is necessary to preserve kernel locking constraints\n during program execution.\n\n The supplied vnode and vnodelabel correspond with the file actually\n being executed; in the case that the file is interpreted (for\n example, a script), the label of the original exec-time vnode has\n been preserved in scriptvnodelabel.\n\n The final label, execlabel, corresponds to a label supplied by a\n user space application through the use of the mac_execve system call.\n\n The vnode lock is held during this operation. No changes should be\n made to the old credential structure.\n\n @warning Even if a policy returns 0, it should behave correctly in\n the presence of an invocation of mpo_cred_label_update_execve, as that\n call may happen as a result of another policy requesting a transition.\n\n @return Non-zero if a transition is required, 0 otherwise.\n*/\ntypedef int mpo_cred_check_label_update_execve_t(\n\tkauth_cred_t old,\n\tstruct vnode *vp,\n\toff_t offset,\n\tstruct vnode *scriptvp,\n\tstruct label *vnodelabel,\n\tstruct label *scriptvnodelabel,\n\tstruct label *execlabel,\n\tstruct proc *p,\n\tvoid *macpolicyattr,\n\tsize_t macpolicyattrlen\n);\n/**\n @brief Access control check for relabelling processes\n @param cred Subject credential\n @param newlabel New label to apply to the user credential\n @see mpo_cred_label_update_t\n @see mac_set_proc\n\n Determine whether the subject identified by the credential can relabel\n itself to the supplied new label (newlabel). This access control check\n is called when the mac_set_proc system call is invoked. A user space\n application will supply a new value, the value will be internalized\n and provided in newlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_cred_check_label_update_t(\n\tkauth_cred_t cred,\n\tstruct label *newlabel\n);\n/**\n @brief Access control check for visibility of other subjects\n @param u1 Subject credential\n @param u2 Object credential\n\n Determine whether the subject identified by the credential u1 can\n \"see\" other subjects with the passed subject credential u2. This call\n may be made in a number of situations, including inter-process status\n sysctls used by ps, and in procfs lookups.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch,\n EPERM for lack of privilege, or ESRCH to hide visibility.\n*/\ntypedef int mpo_cred_check_visible_t(\n\tkauth_cred_t u1,\n\tkauth_cred_t u2\n);\n/**\n @brief Associate a credential with a new process at fork\n @param cred credential to inherited by new process\n @param proc the new process\n\n Allow a process to associate the credential with a new\n process for reference countng purposes.\n NOTE: the credential can be dis-associated in ways other\n than exit - so this strategy is flawed - should just\n\tcatch label destroy callback.\n*/\ntypedef void mpo_cred_label_associate_fork_t(\n\tkauth_cred_t cred,\n\tproc_t proc\n);\n/**\n @brief Create the first process\n @param cred Subject credential to be labeled\n\n Create the subject credential of process 0, the parent of all BSD\n kernel processes. Policies should update the label in the\n previously initialized credential structure.\n*/\ntypedef void mpo_cred_label_associate_kernel_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Create a credential label\n @param parent_cred Parent credential\n @param child_cred Child credential\n\n Set the label of a newly created credential, most likely using the\n information in the supplied parent credential.\n\n @warning This call is made when crcopy or crdup is invoked on a\n newly created struct ucred, and should not be confused with a\n process fork or creation event.\n*/\ntypedef void mpo_cred_label_associate_t(\n\tkauth_cred_t parent_cred,\n\tkauth_cred_t child_cred\n);\n/**\n @brief Create the first process\n @param cred Subject credential to be labeled\n\n Create the subject credential of process 1, the parent of all BSD\n user processes. Policies should update the label in the previously\n initialized credential structure. This is the 'init' process.\n*/\ntypedef void mpo_cred_label_associate_user_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Destroy credential label\n @param label The label to be destroyed\n\n Destroy a user credential label. Since the user credential\n is going out of scope, policy modules should free any internal\n storage associated with the label so that it may be destroyed.\n*/\ntypedef void mpo_cred_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Externalize a user credential label for auditing\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of the label\n\n Produce an external representation of the label on a user credential for\n inclusion in an audit record. An externalized label consists of a text\n representation of the label contents that will be added to the audit record\n as part of a text token. Policy-agnostic user space tools will display\n this externalized version.\n\n @return 0 on success, return non-zero if an error occurs while\n externalizing the label data.\n\n*/\ntypedef int mpo_cred_label_externalize_audit_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Externalize a user credential label\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of the label\n\n Produce an external representation of the label on a user\n credential. An externalized label consists of a text representation\n of the label contents that can be used with user applications.\n Policy-agnostic user space tools will display this externalized\n version.\n\n @return 0 on success, return non-zero if an error occurs while\n externalizing the label data.\n\n*/\ntypedef int mpo_cred_label_externalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Initialize user credential label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated user credential.\n Sleeping is permitted.\n*/\ntypedef void mpo_cred_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Internalize a user credential label\n @param label Label to be internalized\n @param element_name Name of the label namespace for which the label should\n be internalized\n @param element_data Text data to be internalized\n\n Produce a user credential label from an external representation. An\n externalized label consists of a text representation of the label\n contents that can be used with user applications. Policy-agnostic\n user space tools will forward text version to the kernel for\n processing by individual policy modules.\n\n The policy's internalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return 0 on success, Otherwise, return non-zero if an error occurs\n while internalizing the label data.\n\n*/\ntypedef int mpo_cred_label_internalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tchar *element_data\n);\n/**\n @brief Update credential at exec time\n @param old_cred Existing subject credential\n @param new_cred New subject credential to be labeled\n @param p Object process.\n @param vp File being executed\n @param offset Offset of binary within file being executed\n @param scriptvp Script being executed by interpreter, if any.\n @param vnodelabel Label corresponding to vp\n @param scriptvnodelabel Script vnode label\n @param execlabel Userspace provided execution label\n @param csflags Code signing flags to be set after exec\n @param macpolicyattr MAC policy-specific spawn attribute data.\n @param macpolicyattrlen Length of policy-specific spawn attribute data.\n @see mac_execve\n @see mpo_cred_check_label_update_execve_t\n @see mpo_vnode_check_exec_t\n\n Update the label of a newly created credential (new) from the\n existing subject credential (old). This call occurs when a process\n executes the passed vnode and one of the loaded policy modules has\n returned success from the mpo_cred_check_label_update_execve entry point.\n Access has already been checked via the mpo_vnode_check_exec entry\n point, this entry point is only used to update any policy state.\n\n The supplied vnode and vnodelabel correspond with the file actually\n being executed; in the case that the file is interpreted (for\n example, a script), the label of the original exec-time vnode has\n been preserved in scriptvnodelabel.\n\n The final label, execlabel, corresponds to a label supplied by a\n user space application through the use of the mac_execve system call.\n\n If non-NULL, the value pointed to by disjointp will be set to 0 to\n indicate that the old and new credentials are not disjoint, or 1 to\n indicate that they are.\n\n The vnode lock is held during this operation. No changes should be\n made to the old credential structure.\n @return 0 on success, Otherwise, return non-zero if update results in\n termination of child.\n*/\ntypedef int mpo_cred_label_update_execve_t(\n\tkauth_cred_t old_cred,\n\tkauth_cred_t new_cred,\n\tstruct proc *p,\n\tstruct vnode *vp,\n\toff_t offset,\n\tstruct vnode *scriptvp,\n\tstruct label *vnodelabel,\n\tstruct label *scriptvnodelabel,\n\tstruct label *execlabel,\n\tu_int *csflags,\n\tvoid *macpolicyattr,\n\tsize_t macpolicyattrlen,\n\tint *disjointp\n);\n/**\n @brief Update a credential label\n @param cred The existing credential\n @param newlabel A new label to apply to the credential\n @see mpo_cred_check_label_update_t\n @see mac_set_proc\n\n Update the label on a user credential, using the supplied new label.\n This is called as a result of a process relabel operation. Access\n control was already confirmed by mpo_cred_check_label_update.\n*/\ntypedef void mpo_cred_label_update_t(\n\tkauth_cred_t cred,\n\tstruct label *newlabel\n);\n/**\n @brief Create a new devfs device\n @param dev Major and minor numbers of special file\n @param de \"inode\" of new device file\n @param label Destination label\n @param fullpath Path relative to mount (e.g. /dev) of new device file\n\n This entry point labels a new devfs device. The label will likely be based\n on the path to the device, or the major and minor numbers.\n The policy should store an appropriate label into 'label'.\n*/\ntypedef void mpo_devfs_label_associate_device_t(\n\tdev_t dev,\n\tstruct devnode *de,\n\tstruct label *label,\n\tconst char *fullpath\n);\n/**\n @brief Create a new devfs directory\n @param dirname Name of new directory\n @param dirnamelen Length of 'dirname'\n @param de \"inode\" of new directory\n @param label Destination label\n @param fullpath Path relative to mount (e.g. /dev) of new directory\n\n This entry point labels a new devfs directory. The label will likely be\n based on the path of the new directory. The policy should store an appropriate\n label into 'label'. The devfs root directory is labelled in this way.\n*/\ntypedef void mpo_devfs_label_associate_directory_t(\n\tconst char *dirname,\n\tint dirnamelen,\n\tstruct devnode *de,\n\tstruct label *label,\n\tconst char *fullpath\n);\n/**\n @brief Copy a devfs label\n @param src Source devfs label\n @param dest Destination devfs label\n\n Copy the label information from src to dest. The devfs file system\n often duplicates (splits) existing device nodes rather than creating\n new ones.\n*/\ntypedef void mpo_devfs_label_copy_t(\n\tstruct label *src,\n\tstruct label *dest\n);\n/**\n @brief Destroy devfs label\n @param label The label to be destroyed\n\n Destroy a devfs entry label. Since the object is going out\n of scope, policy modules should free any internal storage associated\n with the label so that it may be destroyed.\n*/\ntypedef void mpo_devfs_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize devfs label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated devfs entry. Sleeping\n is permitted.\n*/\ntypedef void mpo_devfs_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Update a devfs label after relabelling its vnode\n @param mp Devfs mount point\n @param de Affected devfs directory entry\n @param delabel Label of devfs directory entry\n @param vp Vnode associated with de\n @param vnodelabel New label of vnode\n\n Update a devfs label when its vnode is manually relabelled,\n for example with setfmac(1). Typically, this will simply copy\n the vnode label into the devfs label.\n*/\ntypedef void mpo_devfs_label_update_t(\n\tstruct mount *mp,\n\tstruct devnode *de,\n\tstruct label *delabel,\n\tstruct vnode *vp,\n\tstruct label *vnodelabel\n);\n/**\n @brief Access control for sending an exception to an exception action\n @param crashlabel The crashing process's label\n @param action Exception action\n @param exclabel Policy label for exception action\n\n Determine whether the the exception message caused by the victim\n process can be sent to the exception action.\n\n @return Return 0 if the message can be sent, otherwise an\n appropriate value for errno should be returned.\n*/\ntypedef int mpo_exc_action_check_exception_send_t(\n\tstruct label *crashlabel,\n\tstruct exception_action *action,\n\tstruct label *exclabel\n);\n/**\n @brief Create an exception action label\n @param action Exception action to label\n @param exclabel Policy label to be filled in for exception action\n\n Set the label on an exception action.\n*/\ntypedef void mpo_exc_action_label_associate_t(\n\tstruct exception_action *action,\n\tstruct label *exclabel\n);\n/**\n @brief Copy an exception action label\n @param src Source exception action label\n @param dest Destination exception action label\n\n Copy the label information from src to dest.\n Exception actions are often inherited, e.g. from parent to child.\n In that case, the labels are copied instead of created fresh.\n*/\ntypedef void mpo_exc_action_label_copy_t(\n\tstruct label *src,\n\tstruct label *dest\n);\n/**\n @brief Destroy exception action label\n @param label The label to be destroyed\n\n Destroy the label on an exception action. In this entry point, a\n policy module should free any internal storage associated with\n label so that it may be destroyed.\n*/\ntypedef void mpo_exc_action_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize exception action label\n @param label New label to initialize\n\n Initialize a label for an exception action.\n*/\ntypedef int mpo_exc_action_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Update the label on an exception action\n @param p Process to update the label from\n @param exclabel Policy label to be updated for exception action\n\n Update the credentials of an exception action with the given task.\n*/\ntypedef void mpo_exc_action_label_update_t(\n\tstruct proc *p,\n\tstruct label *exclabel\n);\n/**\n @brief Access control for changing the offset of a file descriptor\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n\n Determine whether the subject identified by the credential can\n change the offset of the file represented by fg.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_file_check_change_offset_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label\n);\n/**\n @brief Access control for creating a file descriptor\n @param cred Subject credential\n\n Determine whether the subject identified by the credential can\n allocate a new file descriptor.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_file_check_create_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Access control for duplicating a file descriptor\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n @param newfd New file descriptor number\n\n Determine whether the subject identified by the credential can\n duplicate the fileglob structure represented by fg and as file\n descriptor number newfd.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_file_check_dup_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label,\n\tint newfd\n);\n/**\n @brief Access control check for fcntl\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n @param cmd Control operation to be performed; see fcntl(2)\n @param arg fcnt arguments; see fcntl(2)\n\n Determine whether the subject identified by the credential can perform\n the file control operation indicated by cmd.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_file_check_fcntl_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label,\n\tint cmd,\n\tuser_long_t arg\n);\n/**\n @brief Access control check for mac_get_fd\n @param cred Subject credential\n @param fg Fileglob structure\n @param elements Element buffer\n @param len Length of buffer\n\n Determine whether the subject identified by the credential should be allowed\n to get an externalized version of the label on the object indicated by fd.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_file_check_get_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tchar *elements,\n\tint len\n);\n/**\n @brief Access control for getting the offset of a file descriptor\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n\n Determine whether the subject identified by the credential can\n get the offset of the file represented by fg.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_file_check_get_offset_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label\n);\n/**\n @brief Access control for inheriting a file descriptor\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n\n Determine whether the subject identified by the credential can\n inherit the fileglob structure represented by fg.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_file_check_inherit_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label\n);\n/**\n @brief Access control check for file ioctl\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n @param cmd The ioctl command; see ioctl(2)\n\n Determine whether the subject identified by the credential can perform\n the ioctl operation indicated by cmd.\n\n @warning Since ioctl data is opaque from the standpoint of the MAC\n framework, policies must exercise extreme care when implementing\n access control checks.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_file_check_ioctl_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label,\n\tunsigned int cmd\n);\n/**\n @brief Access control check for file locking\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n @param op The lock operation (F_GETLK, F_SETLK, F_UNLK)\n @param fl The flock structure\n\n Determine whether the subject identified by the credential can perform\n the lock operation indicated by op and fl on the file represented by fg.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_file_check_lock_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label,\n\tint op,\n\tstruct flock *fl\n);\n/**\n @brief Check with library validation if a macho slice is allowed to be combined into a proc.\n @param p Subject process\n @param fg Fileglob structure\n @param slice_offset offset of the code slice\n @param error_message error message returned to user-space in case of error (userspace pointer)\n @param error_message_size error message size\n\n Its a little odd that the MAC/kext writes into userspace since this\n implies there is only one MAC module that implements this, however\n the alterantive is to allocate memory in xnu, on the hope that\n the MAC module will use it, or allocated in the MAC module and then\n free it in xnu. Either of these are very appeling, so lets go with\n the slightly more hacky way.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_file_check_library_validation_t(\n\tstruct proc *p,\n\tstruct fileglob *fg,\n\toff_t slice_offset,\n\tuser_long_t error_message,\n\tsize_t error_message_size\n);\n/**\n @brief Access control check for mapping a file\n @param cred Subject credential\n @param fg fileglob representing file to map\n @param label Policy label associated with vp\n @param prot mmap protections; see mmap(2)\n @param flags Type of mapped object; see mmap(2)\n @param maxprot Maximum rights\n\n Determine whether the subject identified by the credential should be\n allowed to map the file represented by fg with the protections specified\n in prot. The maxprot field holds the maximum permissions on the new\n mapping, a combination of VM_PROT_READ, VM_PROT_WRITE, and VM_PROT_EXECUTE.\n To avoid overriding prior access control checks, a policy should only\n remove flags from maxprot.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_file_check_mmap_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label,\n\tint prot,\n\tint flags,\n\tuint64_t file_pos,\n\tint *maxprot\n);\n/**\n @brief Downgrade the mmap protections\n @param cred Subject credential\n @param fg file to map\n @param label Policy label associated with vp\n @param prot mmap protections to be downgraded\n\n Downgrade the mmap protections based on the subject and object labels.\n*/\ntypedef void mpo_file_check_mmap_downgrade_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label,\n\tint *prot\n);\n/**\n @brief Access control for receiving a file descriptor\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n\n Determine whether the subject identified by the credential can\n receive the fileglob structure represented by fg.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_file_check_receive_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label\n);\n/**\n @brief Access control check for mac_set_fd\n @param cred Subject credential\n @param fg Fileglob structure\n @param elements Elements buffer\n @param len Length of elements buffer\n\n Determine whether the subject identified by the credential can\n perform the mac_set_fd operation. The mac_set_fd operation is used\n to associate a MAC label with a file.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_file_check_set_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tchar *elements,\n\tint len\n);\n/**\n @brief Create file label\n @param cred Subject credential\n @param fg Fileglob structure\n @param label Policy label for fg\n*/\ntypedef void mpo_file_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct fileglob *fg,\n\tstruct label *label\n);\n/**\n @brief Destroy file label\n @param label The label to be destroyed\n\n Destroy the label on a file descriptor. In this entry point, a\n policy module should free any internal storage associated with\n label so that it may be destroyed.\n*/\ntypedef void mpo_file_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize file label\n @param label New label to initialize\n*/\ntypedef void mpo_file_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Access control check for relabeling network interfaces\n @param cred Subject credential\n @param ifp network interface being relabeled\n @param ifnetlabel Current label of the network interfaces\n @param newlabel New label to apply to the network interfaces\n @see mpo_ifnet_label_update_t\n\n Determine whether the subject identified by the credential can\n relabel the network interface represented by ifp to the supplied\n new label (newlabel).\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_ifnet_check_label_update_t(\n\tkauth_cred_t cred,\n\tstruct ifnet *ifp,\n\tstruct label *ifnetlabel,\n\tstruct label *newlabel\n);\n/**\n @brief Access control check for relabeling network interfaces\n @param ifp Network interface mbuf will be transmitted through\n @param ifnetlabel Label of the network interfaces\n @param m The mbuf to be transmitted\n @param mbuflabel Label of the mbuf to be transmitted\n @param family Address Family, AF_*\n @param type Type of socket, SOCK_{STREAM,DGRAM,RAW}\n\n Determine whether the mbuf with label mbuflabel may be transmitted\n through the network interface represented by ifp that has the\n label ifnetlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_ifnet_check_transmit_t(\n\tstruct ifnet *ifp,\n\tstruct label *ifnetlabel,\n\tstruct mbuf *m,\n\tstruct label *mbuflabel,\n\tint family,\n\tint type\n);\n/**\n @brief Create a network interface label\n @param ifp Network interface labeled\n @param ifnetlabel Label for the network interface\n\n Set the label of a newly created network interface, most likely\n using the information in the supplied network interface struct.\n*/\ntypedef void mpo_ifnet_label_associate_t(\n\tstruct ifnet *ifp,\n\tstruct label *ifnetlabel\n);\n/**\n @brief Copy an ifnet label\n @param src Source ifnet label\n @param dest Destination ifnet label\n\n Copy the label information from src to dest.\n*/\ntypedef void mpo_ifnet_label_copy_t(\n\tstruct label *src,\n\tstruct label *dest\n);\n/**\n @brief Destroy ifnet label\n @param label The label to be destroyed\n\n Destroy the label on an ifnet label. In this entry point, a\n policy module should free any internal storage associated with\n label so that it may be destroyed.\n*/\ntypedef void mpo_ifnet_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Externalize an ifnet label\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of the label\n\n Produce an external representation of the label on an interface.\n An externalized label consists of a text representation of the\n label contents that can be used with user applications.\n Policy-agnostic user space tools will display this externalized\n version.\n\n @return 0 on success, return non-zero if an error occurs while\n externalizing the label data.\n\n*/\ntypedef int mpo_ifnet_label_externalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Initialize ifnet label\n @param label New label to initialize\n*/\ntypedef void mpo_ifnet_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Internalize an interface label\n @param label Label to be internalized\n @param element_name Name of the label namespace for which the label should\n be internalized\n @param element_data Text data to be internalized\n\n Produce an interface label from an external representation. An\n externalized label consists of a text representation of the label\n contents that can be used with user applications. Policy-agnostic\n user space tools will forward text version to the kernel for\n processing by individual policy modules.\n\n The policy's internalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return 0 on success, Otherwise, return non-zero if an error occurs\n while internalizing the label data.\n\n*/\ntypedef int mpo_ifnet_label_internalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tchar *element_data\n);\n/**\n @brief Recycle up a network interface label\n @param label The label to be recycled\n\n Recycle a network interface label. Darwin caches the struct ifnet\n of detached ifnets in a \"free pool\". Before ifnets are returned\n to the \"free pool\", policies can cleanup or overwrite any information\n present in the label.\n*/\ntypedef void mpo_ifnet_label_recycle_t(\n\tstruct label *label\n);\n/**\n @brief Update a network interface label\n @param cred Subject credential\n @param ifp The network interface to be relabeled\n @param ifnetlabel The current label of the network interface\n @param newlabel A new label to apply to the network interface\n @see mpo_ifnet_check_label_update_t\n\n Update the label on a network interface, using the supplied new label.\n*/\ntypedef void mpo_ifnet_label_update_t(\n\tkauth_cred_t cred,\n\tstruct ifnet *ifp,\n\tstruct label *ifnetlabel,\n\tstruct label *newlabel\n);\n/**\n @brief Access control check for delivering a packet to a socket\n @param inp inpcb the socket is associated with\n @param inplabel Label of the inpcb\n @param m The mbuf being received\n @param mbuflabel Label of the mbuf being received\n @param family Address family, AF_*\n @param type Type of socket, SOCK_{STREAM,DGRAM,RAW}\n\n Determine whether the mbuf with label mbuflabel may be received\n by the socket associated with inpcb that has the label inplabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_inpcb_check_deliver_t(\n\tstruct inpcb *inp,\n\tstruct label *inplabel,\n\tstruct mbuf *m,\n\tstruct label *mbuflabel,\n\tint family,\n\tint type\n);\n/**\n @brief Create an inpcb label\n @param so Socket containing the inpcb to be labeled\n @param solabel Label of the socket\n @param inp inpcb to be labeled\n @param inplabel Label for the inpcb\n\n Set the label of a newly created inpcb, most likely\n using the information in the socket and/or socket label.\n*/\ntypedef void mpo_inpcb_label_associate_t(\n\tstruct socket *so,\n\tstruct label *solabel,\n\tstruct inpcb *inp,\n\tstruct label *inplabel\n);\n/**\n @brief Destroy inpcb label\n @param label The label to be destroyed\n\n Destroy the label on an inpcb label. In this entry point, a\n policy module should free any internal storage associated with\n label so that it may be destroyed.\n*/\ntypedef void mpo_inpcb_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize inpcb label\n @param label New label to initialize\n @param flag M_WAITOK or M_NOWAIT\n*/\ntypedef int mpo_inpcb_label_init_t(\n\tstruct label *label,\n\tint flag\n);\n/**\n @brief Recycle up an inpcb label\n @param label The label to be recycled\n\n Recycle an inpcb label. Darwin allocates the inpcb as part of\n the socket structure in some cases. For this case we must recycle\n rather than destroy the inpcb as it will be reused later.\n*/\ntypedef void mpo_inpcb_label_recycle_t(\n\tstruct label *label\n);\n/**\n @brief Update an inpcb label from a socket label\n @param so Socket containing the inpcb to be relabeled\n @param solabel New label of the socket\n @param inp inpcb to be labeled\n @param inplabel Label for the inpcb\n\n Set the label of a newly created inpcb due to a change in the\n underlying socket label.\n*/\ntypedef void mpo_inpcb_label_update_t(\n\tstruct socket *so,\n\tstruct label *solabel,\n\tstruct inpcb *inp,\n\tstruct label *inplabel\n);\n/**\n @brief Device hardware access control\n @param devtype Type of device connected\n\n This is the MAC Framework device access control, which is called by the I/O\n Kit when a new device is connected to the system to determine whether that\n device should be trusted. A list of properties associated with the device\n is passed as an XML-formatted string. The routine should examine these\n properties to determine the trustworthiness of the device. A return value\n of EPERM forces the device to be claimed by a special device driver that\n will prevent its operation.\n\n @warning This is an experimental interface and may change in the future.\n\n @return Return EPERM to indicate that the device is untrusted and should\n not be allowed to operate. Return zero to indicate that the device is\n trusted and should be allowed to operate normally.\n\n*/\ntypedef int mpo_iokit_check_device_t(\n\tchar *devtype,\n\tstruct mac_module_data *mdata\n);\n/**\n @brief Access control check for opening an I/O Kit device\n @param cred Subject credential\n @param user_client User client instance\n @param user_client_type User client type\n\n Determine whether the subject identified by the credential can open an\n I/O Kit device at the passed path of the passed user client class and\n type.\n\n @return Return 0 if access is granted, or an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_iokit_check_open_t(\n\tkauth_cred_t cred,\n\tio_object_t user_client,\n\tunsigned int user_client_type\n);\n/**\n @brief Access control check for setting I/O Kit device properties\n @param cred Subject credential\n @param entry Target device\n @param properties Property list\n\n Determine whether the subject identified by the credential can set\n properties on an I/O Kit device.\n\n @return Return 0 if access is granted, or an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_iokit_check_set_properties_t(\n\tkauth_cred_t cred,\n\tio_object_t entry,\n\tio_object_t properties\n);\n/**\n @brief Indicate desire to filter I/O Kit devices properties\n @param cred Subject credential\n @param entry Target device\n @see mpo_iokit_check_get_property_t\n\n Indicate whether this policy may restrict the subject credential\n from reading properties of the target device.\n If a policy returns success from this entry point, the\n mpo_iokit_check_get_property entry point will later be called\n for each property that the subject credential tries to read from\n the target device.\n\n This entry point is primarilly to optimize bulk property reads\n by skipping calls to the mpo_iokit_check_get_property entry point\n for credentials / devices no MAC policy is interested in.\n\n @warning Even if a policy returns 0, it should behave correctly in\n the presence of an invocation of mpo_iokit_check_get_property, as that\n call may happen as a result of another policy requesting a transition.\n\n @return Non-zero if a transition is required, 0 otherwise.\n */\ntypedef int mpo_iokit_check_filter_properties_t(\n\tkauth_cred_t cred,\n\tio_object_t entry\n);\n/**\n @brief Access control check for getting I/O Kit device properties\n @param cred Subject credential\n @param entry Target device\n @param name Property name \n\n Determine whether the subject identified by the credential can get\n properties on an I/O Kit device.\n\n @return Return 0 if access is granted, or an appropriate value for\n errno.\n*/\ntypedef int mpo_iokit_check_get_property_t(\n\tkauth_cred_t cred,\n\tio_object_t entry,\n\tconst char *name\n);\n/**\n @brief Access control check for software HID control\n @param cred Subject credential\n\n Determine whether the subject identified by the credential can\n control the HID (Human Interface Device) subsystem, such as to\n post synthetic keypresses, pointer movement and clicks.\n\n @return Return 0 if access is granted, or an appropriate value for\n errno.\n*/\ntypedef int mpo_iokit_check_hid_control_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Create an IP reassembly queue label\n @param fragment First received IP fragment\n @param fragmentlabel Policy label for fragment\n @param ipq IP reassembly queue to be labeled\n @param ipqlabel Policy label to be filled in for ipq\n\n Set the label on a newly created IP reassembly queue from\n the mbuf header of the first received fragment.\n*/\ntypedef void mpo_ipq_label_associate_t(\n\tstruct mbuf *fragment,\n\tstruct label *fragmentlabel,\n\tstruct ipq *ipq,\n\tstruct label *ipqlabel\n);\n/**\n @brief Compare an mbuf header label to an ipq label\n @param fragment IP datagram fragment\n @param fragmentlabel Policy label for fragment\n @param ipq IP fragment reassembly queue\n @param ipqlabel Policy label for ipq\n\n Compare the label of the mbuf header containing an IP datagram\n (fragment) fragment with the label of the passed IP fragment\n reassembly queue (ipq). Return (1) for a successful match, or (0)\n for no match. This call is made when the IP stack attempts to\n find an existing fragment reassembly queue for a newly received\n fragment; if this fails, a new fragment reassembly queue may be\n instantiated for the fragment. Policies may use this entry point\n to prevent the reassembly of otherwise matching IP fragments if\n policy does not permit them to be reassembled based on the label\n or other information.\n*/\ntypedef int mpo_ipq_label_compare_t(\n\tstruct mbuf *fragment,\n\tstruct label *fragmentlabel,\n\tstruct ipq *ipq,\n\tstruct label *ipqlabel\n);\n/**\n @brief Destroy IP reassembly queue label\n @param label The label to be destroyed\n\n Destroy the label on an IP fragment queue. In this entry point, a\n policy module should free any internal storage associated with\n label so that it may be destroyed.\n*/\ntypedef void mpo_ipq_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize IP reassembly queue label\n @param label New label to initialize\n @param flag M_WAITOK or M_NOWAIT\n\n Initialize the label on a newly instantiated IP fragment reassembly\n queue. The flag field may be one of M_WAITOK and M_NOWAIT, and\n should be employed to avoid performing a sleeping malloc(9) during\n this initialization call. IP fragment reassembly queue allocation\n frequently occurs in performance sensitive environments, and the\n implementation should be careful to avoid sleeping or long-lived\n operations. This entry point is permitted to fail resulting in\n the failure to allocate the IP fragment reassembly queue.\n*/\ntypedef int mpo_ipq_label_init_t(\n\tstruct label *label,\n\tint flag\n);\n/**\n @brief Update the label on an IP fragment reassembly queue\n @param fragment IP fragment\n @param fragmentlabel Policy label for fragment\n @param ipq IP fragment reassembly queue\n @param ipqlabel Policy label to be updated for ipq\n\n Update the label on an IP fragment reassembly queue (ipq) based\n on the acceptance of the passed IP fragment mbuf header (fragment).\n*/\ntypedef void mpo_ipq_label_update_t(\n\tstruct mbuf *fragment,\n\tstruct label *fragmentlabel,\n\tstruct ipq *ipq,\n\tstruct label *ipqlabel\n);\n/**\n @brief Assign a label to a new mbuf\n @param bpf_d BPF descriptor\n @param b_label Policy label for bpf_d\n @param m Object; mbuf\n @param m_label Policy label to fill in for m\n\n Set the label on the mbuf header of a newly created datagram\n generated using the passed BPF descriptor. This call is made when\n a write is performed to the BPF device associated with the passed\n BPF descriptor.\n*/\ntypedef void mpo_mbuf_label_associate_bpfdesc_t(\n\tstruct bpf_d *bpf_d,\n\tstruct label *b_label,\n\tstruct mbuf *m,\n\tstruct label *m_label\n);\n/**\n @brief Assign a label to a new mbuf\n @param ifp Interface descriptor\n @param i_label Existing label of ifp\n @param m Object; mbuf\n @param m_label Policy label to fill in for m\n\n Label an mbuf based on the interface from which it was received.\n*/\ntypedef void mpo_mbuf_label_associate_ifnet_t(\n\tstruct ifnet *ifp,\n\tstruct label *i_label,\n\tstruct mbuf *m,\n\tstruct label *m_label\n);\n/**\n @brief Assign a label to a new mbuf\n @param inp inpcb structure\n @param i_label Existing label of inp\n @param m Object; mbuf\n @param m_label Policy label to fill in for m\n\n Label an mbuf based on the inpcb from which it was derived.\n*/\ntypedef void mpo_mbuf_label_associate_inpcb_t(\n\tstruct inpcb *inp,\n\tstruct label *i_label,\n\tstruct mbuf *m,\n\tstruct label *m_label\n);\n/**\n @brief Set the label on a newly reassembled IP datagram\n @param ipq IP fragment reassembly queue\n @param ipqlabel Policy label for ipq\n @param mbuf IP datagram to be labeled\n @param mbuflabel Policy label to be filled in for mbuf\n\n Set the label on a newly reassembled IP datagram (mbuf) from the IP\n fragment reassembly queue (ipq) from which it was generated.\n*/\ntypedef void mpo_mbuf_label_associate_ipq_t(\n\tstruct ipq *ipq,\n\tstruct label *ipqlabel,\n\tstruct mbuf *mbuf,\n\tstruct label *mbuflabel\n);\n/**\n @brief Assign a label to a new mbuf\n @param ifp Subject; network interface\n @param i_label Existing label of ifp\n @param m Object; mbuf\n @param m_label Policy label to fill in for m\n\n Set the label on the mbuf header of a newly created datagram\n generated for the purposes of a link layer response for the passed\n interface. This call may be made in a number of situations, including\n for ARP or ND6 responses in the IPv4 and IPv6 stacks.\n*/\ntypedef void mpo_mbuf_label_associate_linklayer_t(\n\tstruct ifnet *ifp,\n\tstruct label *i_label,\n\tstruct mbuf *m,\n\tstruct label *m_label\n);\n/**\n @brief Assign a label to a new mbuf\n @param oldmbuf mbuf headerder for existing datagram for existing datagram\n @param oldmbuflabel Policy label for oldmbuf\n @param ifp Network interface\n @param ifplabel Policy label for ifp\n @param newmbuf mbuf header to be labeled for new datagram\n @param newmbuflabel Policy label for newmbuf\n\n Set the label on the mbuf header of a newly created datagram\n generated from the existing passed datagram when it is processed\n by the passed multicast encapsulation interface. This call is made\n when an mbuf is to be delivered using the virtual interface.\n*/\ntypedef void mpo_mbuf_label_associate_multicast_encap_t(\n\tstruct mbuf *oldmbuf,\n\tstruct label *oldmbuflabel,\n\tstruct ifnet *ifp,\n\tstruct label *ifplabel,\n\tstruct mbuf *newmbuf,\n\tstruct label *newmbuflabel\n);\n/**\n @brief Assign a label to a new mbuf\n @param oldmbuf Received datagram\n @param oldmbuflabel Policy label for oldmbuf\n @param newmbuf Newly created datagram\n @param newmbuflabel Policy label for newmbuf\n\n Set the label on the mbuf header of a newly created datagram generated\n by the IP stack in response to an existing received datagram (oldmbuf).\n This call may be made in a number of situations, including when responding\n to ICMP request datagrams.\n*/\ntypedef void mpo_mbuf_label_associate_netlayer_t(\n\tstruct mbuf *oldmbuf,\n\tstruct label *oldmbuflabel,\n\tstruct mbuf *newmbuf,\n\tstruct label *newmbuflabel\n);\n/**\n @brief Assign a label to a new mbuf\n @param so Socket to label\n @param so_label Policy label for socket\n @param m Object; mbuf\n @param m_label Policy label to fill in for m\n\n An mbuf structure is used to store network traffic in transit.\n When an application sends data to a socket or a pipe, it is wrapped\n in an mbuf first. This function sets the label on a newly created mbuf header\n based on the socket sending the data. The contents of the label should be\n suitable for performing an access check on the receiving side of the\n communication.\n\n Only labeled MBUFs will be presented to the policy via this entrypoint.\n*/\ntypedef void mpo_mbuf_label_associate_socket_t(\n\tsocket_t so,\n\tstruct label *so_label,\n\tstruct mbuf *m,\n\tstruct label *m_label\n);\n/**\n @brief Copy a mbuf label\n @param src Source label\n @param dest Destination label\n\n Copy the mbuf label information in src into dest.\n\n Only called when both source and destination mbufs have labels.\n*/\ntypedef void mpo_mbuf_label_copy_t(\n\tstruct label *src,\n\tstruct label *dest\n);\n/**\n @brief Destroy mbuf label\n @param label The label to be destroyed\n\n Destroy a mbuf label. Since the\n object is going out of scope, policy modules should free any\n internal storage associated with the label so that it may be\n destroyed.\n*/\ntypedef void mpo_mbuf_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize mbuf label\n @param label New label to initialize\n @param flag Malloc flags\n\n Initialize the label for a newly instantiated mbuf.\n\n @warning Since it is possible for the flags to be set to\n M_NOWAIT, the malloc operation may fail.\n\n @return On success, 0, otherwise, an appropriate errno return value.\n*/\ntypedef int mpo_mbuf_label_init_t(\n\tstruct label *label,\n\tint flag\n);\n/**\n @brief Access control check for fsctl\n @param cred Subject credential\n @param mp The mount point\n @param label Label associated with the mount point\n @param cmd Filesystem-dependent request code; see fsctl(2)\n\n Determine whether the subject identified by the credential can perform\n the volume operation indicated by com.\n\n @warning The fsctl() system call is directly analogous to ioctl(); since\n the associated data is opaque from the standpoint of the MAC framework\n and since these operations can affect many aspects of system operation,\n policies must exercise extreme care when implementing access control checks.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_mount_check_fsctl_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *label,\n\tunsigned int cmd\n);\n/**\n @brief Access control check for the retrieval of file system attributes\n @param cred Subject credential\n @param mp The mount structure of the file system\n @param vfa The attributes requested\n\n This entry point determines whether given subject can get information\n about the given file system. This check happens during statfs() syscalls,\n but is also used by other parts within the kernel such as the audit system.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n @note Policies may change the contents of vfa to alter the list of\n file system attributes returned.\n*/\n\ntypedef int mpo_mount_check_getattr_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mp_label,\n\tstruct vfs_attr *vfa\n);\n/**\n @brief Access control check for mount point relabeling\n @param cred Subject credential\n @param mp Object file system mount point\n @param mntlabel Policy label for fle system mount point\n\n Determine whether the subject identified by the credential can relabel\n the mount point. This call is made when a file system mount is updated.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch\n or EPERM for lack of privilege.\n*/\ntypedef int mpo_mount_check_label_update_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mntlabel\n);\n/**\n @brief Access control check for mounting a file system\n @param cred Subject credential\n @param vp Vnode that is to be the mount point\n @param vlabel Label associated with the vnode\n @param cnp Component name for vp\n @param vfc_name Filesystem type name\n\n Determine whether the subject identified by the credential can perform\n the mount operation on the target vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_mount_check_mount_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct componentname *cnp,\n\tconst char *vfc_name\n);\n/**\n @brief Access control check for fs_snapshot_create\n @param cred Subject credential\n @mp Filesystem mount point to create snapshot of\n @name Name of snapshot to create\n\n Determine whether the subject identified by the credential can\n create a snapshot of the filesystem at the given mount point.\n\n @return Return 0 if access is granted, otherwise an appropriate value\n for errno should be returned.\n*/\ntypedef int mpo_mount_check_snapshot_create_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tconst char *name\n);\n/**\n @brief Access control check for fs_snapshot_delete\n @param cred Subject credential\n @mp Filesystem mount point to delete snapshot of\n @name Name of snapshot to delete\n\n Determine whether the subject identified by the credential can\n delete the named snapshot from the filesystem at the given\n mount point.\n\n @return Return 0 if access is granted, otherwise an appropriate value\n for errno should be returned.\n*/\ntypedef int mpo_mount_check_snapshot_delete_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tconst char *name\n);\n/**\n @brief Access control check for fs_snapshot_revert\n @param cred Subject credential\n @mp Filesystem mount point to revert to snapshot\n @name Name of snapshot to revert to\n\n Determine whether the subject identified by the credential can\n revert the filesystem at the given mount point to the named snapshot.\n\n @return Return 0 if access is granted, otherwise an appropriate value\n for errno should be returned.\n*/\ntypedef int mpo_mount_check_snapshot_revert_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tconst char *name\n);\n/**\n @brief Access control check remounting a filesystem\n @param cred Subject credential\n @param mp The mount point\n @param mlabel Label currently associated with the mount point\n\n Determine whether the subject identified by the credential can perform\n the remount operation on the target vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_mount_check_remount_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mlabel\n);\n/**\n @brief Access control check for the settting of file system attributes\n @param cred Subject credential\n @param mp The mount structure of the file system\n @param vfa The attributes requested\n\n This entry point determines whether given subject can set information\n about the given file system, for example the volume name.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\n\ntypedef int mpo_mount_check_setattr_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mp_label,\n\tstruct vfs_attr *vfa\n);\n/**\n @brief Access control check for file system statistics\n @param cred Subject credential\n @param mp Object file system mount\n @param mntlabel Policy label for mp\n\n Determine whether the subject identified by the credential can see\n the results of a statfs performed on the file system. This call may\n be made in a number of situations, including during invocations of\n statfs(2) and related calls, as well as to determine what file systems\n to exclude from listings of file systems, such as when getfsstat(2)\n is invoked.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch\n or EPERM for lack of privilege.\n*/\ntypedef int mpo_mount_check_stat_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mntlabel\n);\n/**\n @brief Access control check for unmounting a filesystem\n @param cred Subject credential\n @param mp The mount point\n @param mlabel Label associated with the mount point\n\n Determine whether the subject identified by the credential can perform\n the unmount operation on the target vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_mount_check_umount_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mlabel\n);\n/**\n @brief Create mount labels\n @param cred Subject credential\n @param mp Mount point of file system being mounted\n @param mntlabel Label to associate with the new mount point\n @see mpo_mount_label_init_t\n\n Fill out the labels on the mount point being created by the supplied\n user credential. This call is made when file systems are first mounted.\n*/\ntypedef void mpo_mount_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mntlabel\n);\n/**\n @brief Destroy mount label\n @param label The label to be destroyed\n\n Destroy a file system mount label. Since the\n object is going out of scope, policy modules should free any\n internal storage associated with the label so that it may be\n destroyed.\n*/\ntypedef void mpo_mount_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Externalize a mount point label\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of the label\n\n Produce an external representation of the mount point label. An\n externalized label consists of a text representation of the label\n contents that can be used with user applications. Policy-agnostic\n user space tools will display this externalized version.\n\n The policy's externalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return 0 on success, return non-zero if an error occurs while\n externalizing the label data.\n\n*/\ntypedef int mpo_mount_label_externalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Initialize mount point label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated mount structure.\n This label is typically used to store a default label in the case\n that the file system has been mounted singlelabel. Since some\n file systems do not support persistent labels (extended attributes)\n or are read-only (such as CD-ROMs), it is often necessary to store\n a default label separately from the label of the mount point\n itself. Sleeping is permitted.\n*/\ntypedef void mpo_mount_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Internalize a mount point label\n @param label Label to be internalized\n @param element_name Name of the label namespace for which the label should\n be internalized\n @param element_data Text data to be internalized\n\n Produce a mount point file system label from an external representation.\n An externalized label consists of a text representation of the label\n contents that can be used with user applications. Policy-agnostic\n user space tools will forward text version to the kernel for\n processing by individual policy modules.\n\n The policy's internalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return 0 on success, Otherwise, return non-zero if an error occurs\n while internalizing the label data.\n\n*/\ntypedef int mpo_mount_label_internalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tchar *element_data\n);\n/**\n @brief Set the label on an IPv4 datagram fragment\n @param datagram Datagram being fragmented\n @param datagramlabel Policy label for datagram\n @param fragment New fragment\n @param fragmentlabel Policy label for fragment\n\n Called when an IPv4 datagram is fragmented into several smaller datagrams.\n Policies implementing mbuf labels will typically copy the label from the\n source datagram to the new fragment.\n*/\ntypedef void mpo_netinet_fragment_t(\n\tstruct mbuf *datagram,\n\tstruct label *datagramlabel,\n\tstruct mbuf *fragment,\n\tstruct label *fragmentlabel\n);\n/**\n @brief Set the label on an ICMP reply\n @param m mbuf containing the ICMP reply\n @param mlabel Policy label for m\n\n A policy may wish to update the label of an mbuf that refers to\n an ICMP packet being sent in response to an IP packet. This may\n be called in response to a bad packet or an ICMP request.\n*/\ntypedef void mpo_netinet_icmp_reply_t(\n\tstruct mbuf *m,\n\tstruct label *mlabel\n);\n/**\n @brief Set the label on a TCP reply\n @param m mbuf containing the TCP reply\n @param mlabel Policy label for m\n\n Called for outgoing TCP packets not associated with an actual socket.\n*/\ntypedef void mpo_netinet_tcp_reply_t(\n\tstruct mbuf *m,\n\tstruct label *mlabel\n);\n/**\n @brief Access control check for pipe ioctl\n @param cred Subject credential\n @param cpipe Object to be accessed\n @param pipelabel The label on the pipe\n @param cmd The ioctl command; see ioctl(2)\n\n Determine whether the subject identified by the credential can perform\n the ioctl operation indicated by cmd.\n\n @warning Since ioctl data is opaque from the standpoint of the MAC\n framework, policies must exercise extreme care when implementing\n access control checks.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_pipe_check_ioctl_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel,\n\tunsigned int cmd\n);\n/**\n @brief Access control check for pipe kqfilter\n @param cred Subject credential\n @param kn Object knote\n @param cpipe Object to be accessed\n @param pipelabel Policy label for the pipe\n\n Determine whether the subject identified by the credential can\n receive the knote on the passed pipe.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_pipe_check_kqfilter_t(\n\tkauth_cred_t cred,\n\tstruct knote *kn,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel\n);\n/**\n @brief Access control check for pipe relabel\n @param cred Subject credential\n @param cpipe Object to be accessed\n @param pipelabel The current label on the pipe\n @param newlabel The new label to be used\n\n Determine whether the subject identified by the credential can\n perform a relabel operation on the passed pipe. The cred object holds\n the credentials of the subject performing the operation.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_pipe_check_label_update_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel,\n\tstruct label *newlabel\n);\n/**\n @brief Access control check for pipe read\n @param cred Subject credential\n @param cpipe Object to be accessed\n @param pipelabel The label on the pipe\n\n Determine whether the subject identified by the credential can\n perform a read operation on the passed pipe. The cred object holds\n the credentials of the subject performing the operation.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_pipe_check_read_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel\n);\n/**\n @brief Access control check for pipe select\n @param cred Subject credential\n @param cpipe Object to be accessed\n @param pipelabel The label on the pipe\n @param which The operation selected on: FREAD or FWRITE\n\n Determine whether the subject identified by the credential can\n perform a select operation on the passed pipe. The cred object holds\n the credentials of the subject performing the operation.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_pipe_check_select_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel,\n\tint which\n);\n/**\n @brief Access control check for pipe stat\n @param cred Subject credential\n @param cpipe Object to be accessed\n @param pipelabel The label on the pipe\n\n Determine whether the subject identified by the credential can\n perform a stat operation on the passed pipe. The cred object holds\n the credentials of the subject performing the operation.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_pipe_check_stat_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel\n);\n/**\n @brief Access control check for pipe write\n @param cred Subject credential\n @param cpipe Object to be accessed\n @param pipelabel The label on the pipe\n\n Determine whether the subject identified by the credential can\n perform a write operation on the passed pipe. The cred object holds\n the credentials of the subject performing the operation.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n*/\ntypedef int mpo_pipe_check_write_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel\n);\n/**\n @brief Create a pipe label\n @param cred Subject credential\n @param cpipe object to be labeled\n @param pipelabel Label for the pipe object\n\n Create a label for the pipe object being created by the supplied\n user credential. This call is made when the pipe is being created\n XXXPIPE(for one or both sides of the pipe?).\n\n*/\ntypedef void mpo_pipe_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel\n);\n/**\n @brief Copy a pipe label\n @param src Source pipe label\n @param dest Destination pipe label\n\n Copy the pipe label associated with src to dest.\n XXXPIPE Describe when this is used: most likely during pipe creation to\n copy from rpipe to wpipe.\n*/\ntypedef void mpo_pipe_label_copy_t(\n\tstruct label *src,\n\tstruct label *dest\n);\n/**\n @brief Destroy pipe label\n @param label The label to be destroyed\n\n Destroy a pipe label. Since the object is going out of scope,\n policy modules should free any internal storage associated with the\n label so that it may be destroyed.\n*/\ntypedef void mpo_pipe_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Externalize a pipe label\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of the label\n\n Produce an external representation of the label on a pipe.\n An externalized label consists of a text representation\n of the label contents that can be used with user applications.\n Policy-agnostic user space tools will display this externalized\n version.\n\n The policy's externalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return 0 on success, return non-zero if an error occurs while\n externalizing the label data.\n\n*/\ntypedef int mpo_pipe_label_externalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Initialize pipe label\n @param label New label to initialize\n\n Initialize label storage for use with a newly instantiated pipe object.\n Sleeping is permitted.\n*/\ntypedef void mpo_pipe_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Internalize a pipe label\n @param label Label to be internalized\n @param element_name Name of the label namespace for which the label should\n be internalized\n @param element_data Text data to be internalized\n\n Produce a pipe label from an external representation. An\n externalized label consists of a text representation of the label\n contents that can be used with user applications. Policy-agnostic\n user space tools will forward text version to the kernel for\n processing by individual policy modules.\n\n The policy's internalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return 0 on success, Otherwise, return non-zero if an error occurs\n while internalizing the label data.\n\n*/\ntypedef int mpo_pipe_label_internalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tchar *element_data\n);\n/**\n @brief Update a pipe label\n @param cred Subject credential\n @param cpipe Object to be labeled\n @param oldlabel Existing pipe label\n @param newlabel New label to replace existing label\n @see mpo_pipe_check_label_update_t\n\n The subject identified by the credential has previously requested\n and was authorized to relabel the pipe; this entry point allows\n policies to perform the actual relabel operation. Policies should\n update oldlabel using the label stored in the newlabel parameter.\n\n*/\ntypedef void mpo_pipe_label_update_t(\n\tkauth_cred_t cred,\n\tstruct pipe *cpipe,\n\tstruct label *oldlabel,\n\tstruct label *newlabel\n);\n/**\n @brief Policy unload event\n @param mpc MAC policy configuration\n\n This is the MAC Framework policy unload event. This entry point will\n only be called if the module's policy configuration allows unload (if\n the MPC_LOADTIME_FLAG_UNLOADOK is set). Most security policies won't\n want to be unloaded; they should set their flags to prevent this\n entry point from being called.\n\n @warning During this call, the mac policy list mutex is held, so\n sleep operations cannot be performed, and calls out to other kernel\n subsystems must be made with caution.\n\n @see MPC_LOADTIME_FLAG_UNLOADOK\n*/\ntypedef void mpo_policy_destroy_t(\n\tstruct mac_policy_conf *mpc\n);\n/**\n @brief Policy initialization event\n @param mpc MAC policy configuration\n @see mac_policy_register\n @see mpo_policy_initbsd_t\n\n This is the MAC Framework policy initialization event. This entry\n point is called during mac_policy_register, when the policy module\n is first registered with the MAC Framework. This is often done very\n early in the boot process, after the kernel Mach subsystem has been\n initialized, but prior to the BSD subsystem being initialized.\n Since the kernel BSD services are not yet available, it is possible\n that some initialization must occur later, possibly in the\n mpo_policy_initbsd_t policy entry point, such as registering BSD system\n controls (sysctls). Policy modules loaded at boot time will be\n registered and initialized before labeled Mach objects are created.\n\n @warning During this call, the mac policy list mutex is held, so\n sleep operations cannot be performed, and calls out to other kernel\n subsystems must be made with caution.\n*/\ntypedef void mpo_policy_init_t(\n\tstruct mac_policy_conf *mpc\n);\n/**\n @brief Policy BSD initialization event\n @param mpc MAC policy configuration\n @see mpo_policy_init_t\n\n This entry point is called after the kernel BSD subsystem has been\n initialized. By this point, the module should already be loaded,\n registered, and initialized. Since policy modules are initialized\n before kernel BSD services are available, this second initialization\n phase is necessary. At this point, BSD services (memory management,\n synchronization primitives, vfs, etc.) are available, but the first\n process has not yet been created. Mach-related objects and tasks\n will already be fully initialized and may be in use--policies requiring\n ubiquitous labeling may also want to implement mpo_policy_init_t.\n\n @warning During this call, the mac policy list mutex is held, so\n sleep operations cannot be performed, and calls out to other kernel\n subsystems must be made with caution.\n*/\ntypedef void mpo_policy_initbsd_t(\n\tstruct mac_policy_conf *mpc\n);\n/**\n @brief Policy extension service\n @param p Calling process\n @param call Policy-specific syscall number\n @param arg Pointer to syscall arguments\n\n This entry point provides a policy-multiplexed system call so that\n policies may provide additional services to user processes without\n registering specific system calls. The policy name provided during\n registration is used to demux calls from userland, and the arguments\n will be forwarded to this entry point. When implementing new\n services, security modules should be sure to invoke appropriate\n access control checks from the MAC framework as needed. For\n example, if a policy implements an augmented signal functionality,\n it should call the necessary signal access control checks to invoke\n the MAC framework and other registered policies.\n\n @warning Since the format and contents of the policy-specific\n arguments are unknown to the MAC Framework, modules must perform the\n required copyin() of the syscall data on their own. No policy\n mediation is performed, so policies must perform any necessary\n access control checks themselves. If multiple policies are loaded,\n they will currently be unable to mediate calls to other policies.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_policy_syscall_t(\n\tstruct proc *p,\n\tint call,\n\tuser_addr_t arg\n);\n/**\n @brief Access control check for POSIX semaphore create\n @param cred Subject credential\n @param name String name of the semaphore\n\n Determine whether the subject identified by the credential can create\n a POSIX semaphore specified by name.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixsem_check_create_t(\n\tkauth_cred_t cred,\n\tconst char *name\n);\n/**\n @brief Access control check for POSIX semaphore open\n @param cred Subject credential\n @param ps Pointer to semaphore information structure\n @param semlabel Label associated with the semaphore\n\n Determine whether the subject identified by the credential can open\n the named POSIX semaphore with label semlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixsem_check_open_t(\n\tkauth_cred_t cred,\n\tstruct pseminfo *ps,\n\tstruct label *semlabel\n);\n/**\n @brief Access control check for POSIX semaphore post\n @param cred Subject credential\n @param ps Pointer to semaphore information structure\n @param semlabel Label associated with the semaphore\n\n Determine whether the subject identified by the credential can unlock\n the named POSIX semaphore with label semlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixsem_check_post_t(\n\tkauth_cred_t cred,\n\tstruct pseminfo *ps,\n\tstruct label *semlabel\n);\n/**\n @brief Access control check for POSIX semaphore unlink\n @param cred Subject credential\n @param ps Pointer to semaphore information structure\n @param semlabel Label associated with the semaphore\n @param name String name of the semaphore\n\n Determine whether the subject identified by the credential can remove\n the named POSIX semaphore with label semlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixsem_check_unlink_t(\n\tkauth_cred_t cred,\n\tstruct pseminfo *ps,\n\tstruct label *semlabel,\n\tconst char *name\n);\n/**\n @brief Access control check for POSIX semaphore wait\n @param cred Subject credential\n @param ps Pointer to semaphore information structure\n @param semlabel Label associated with the semaphore\n\n Determine whether the subject identified by the credential can lock\n the named POSIX semaphore with label semlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixsem_check_wait_t(\n\tkauth_cred_t cred,\n\tstruct pseminfo *ps,\n\tstruct label *semlabel\n);\n/**\n @brief Create a POSIX semaphore label\n @param cred Subject credential\n @param ps Pointer to semaphore information structure\n @param semlabel Label to associate with the new semaphore\n @param name String name of the semaphore\n\n Label a new POSIX semaphore. The label was previously\n initialized and associated with the semaphore. At this time, an\n appropriate initial label value should be assigned to the object and\n stored in semalabel.\n*/\ntypedef void mpo_posixsem_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct pseminfo *ps,\n\tstruct label *semlabel,\n\tconst char *name\n);\n/**\n @brief Destroy POSIX semaphore label\n @param label The label to be destroyed\n\n Destroy a POSIX semaphore label. Since the object is\n going out of scope, policy modules should free any internal storage\n associated with the label so that it may be destroyed.\n*/\ntypedef void mpo_posixsem_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize POSIX semaphore label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated POSIX semaphore. Sleeping\n is permitted.\n*/\ntypedef void mpo_posixsem_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Access control check for POSIX shared memory region create\n @param cred Subject credential\n @param name String name of the shared memory region\n\n Determine whether the subject identified by the credential can create\n the POSIX shared memory region referenced by name.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixshm_check_create_t(\n\tkauth_cred_t cred,\n\tconst char *name\n);\n/**\n @brief Access control check for mapping POSIX shared memory\n @param cred Subject credential\n @param ps Pointer to shared memory information structure\n @param shmlabel Label associated with the shared memory region\n @param prot mmap protections; see mmap(2)\n @param flags shmat flags; see shmat(2)\n\n Determine whether the subject identified by the credential can map\n the POSIX shared memory segment associated with shmlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixshm_check_mmap_t(\n\tkauth_cred_t cred,\n\tstruct pshminfo *ps,\n\tstruct label *shmlabel,\n\tint prot,\n\tint flags\n);\n/**\n @brief Access control check for POSIX shared memory region open\n @param cred Subject credential\n @param ps Pointer to shared memory information structure\n @param shmlabel Label associated with the shared memory region\n @param fflags shm_open(2) open flags ('fflags' encoded)\n\n Determine whether the subject identified by the credential can open\n the POSIX shared memory region.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixshm_check_open_t(\n\tkauth_cred_t cred,\n\tstruct pshminfo *ps,\n\tstruct label *shmlabel,\n\tint fflags\n);\n/**\n @brief Access control check for POSIX shared memory stat\n @param cred Subject credential\n @param ps Pointer to shared memory information structure\n @param shmlabel Label associated with the shared memory region\n\n Determine whether the subject identified by the credential can obtain\n status for the POSIX shared memory segment associated with shmlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixshm_check_stat_t(\n\tkauth_cred_t cred,\n\tstruct pshminfo *ps,\n\tstruct label *shmlabel\n);\n/**\n @brief Access control check for POSIX shared memory truncate\n @param cred Subject credential\n @param ps Pointer to shared memory information structure\n @param shmlabel Label associated with the shared memory region\n @param len Length to truncate or extend shared memory segment\n\n Determine whether the subject identified by the credential can truncate\n or extend (to len) the POSIX shared memory segment associated with shmlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixshm_check_truncate_t(\n\tkauth_cred_t cred,\n\tstruct pshminfo *ps,\n\tstruct label *shmlabel,\n\toff_t len\n);\n/**\n @brief Access control check for POSIX shared memory unlink\n @param cred Subject credential\n @param ps Pointer to shared memory information structure\n @param shmlabel Label associated with the shared memory region\n @param name String name of the shared memory region\n\n Determine whether the subject identified by the credential can delete\n the POSIX shared memory segment associated with shmlabel.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_posixshm_check_unlink_t(\n\tkauth_cred_t cred,\n\tstruct pshminfo *ps,\n\tstruct label *shmlabel,\n\tconst char *name\n);\n/**\n @brief Create a POSIX shared memory region label\n @param cred Subject credential\n @param ps Pointer to shared memory information structure\n @param shmlabel Label to associate with the new shared memory region\n @param name String name of the shared memory region\n\n Label a new POSIX shared memory region. The label was previously\n initialized and associated with the shared memory region. At this\n time, an appropriate initial label value should be assigned to the\n object and stored in shmlabel.\n*/\ntypedef void mpo_posixshm_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct pshminfo *ps,\n\tstruct label *shmlabel,\n\tconst char *name\n);\n/**\n @brief Destroy POSIX shared memory label\n @param label The label to be destroyed\n\n Destroy a POSIX shared memory region label. Since the\n object is going out of scope, policy modules should free any\n internal storage associated with the label so that it may be\n destroyed.\n*/\ntypedef void mpo_posixshm_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize POSIX Shared Memory region label\n @param label New label to initialize\n\n Initialize the label for newly a instantiated POSIX Shared Memory\n region. Sleeping is permitted.\n*/\ntypedef void mpo_posixshm_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Access control check for privileged operations\n @param cred Subject credential\n @param priv Requested privilege (see sys/priv.h)\n\n Determine whether the subject identified by the credential can perform\n a privileged operation. Privileged operations are allowed if the cred\n is the superuser or any policy returns zero for mpo_priv_grant, unless\n any policy returns nonzero for mpo_priv_check.\n\n @return Return 0 if access is granted, otherwise EPERM should be returned.\n*/\ntypedef int mpo_priv_check_t(\n\tkauth_cred_t cred,\n\tint priv\n);\n/**\n @brief Grant regular users the ability to perform privileged operations\n @param cred Subject credential\n @param priv Requested privilege (see sys/priv.h)\n\n Determine whether the subject identified by the credential should be\n allowed to perform a privileged operation that in the absense of any\n MAC policy it would not be able to perform. Privileged operations are\n allowed if the cred is the superuser or any policy returns zero for\n mpo_priv_grant, unless any policy returns nonzero for mpo_priv_check.\n\n Unlike other MAC hooks which can only reduce the privilege of a\n credential, this hook raises the privilege of a credential when it\n returns 0. Extreme care must be taken when implementing this hook to\n avoid undermining the security of the system.\n\n @return Return 0 if additional privilege is granted, otherwise EPERM\n should be returned.\n*/\ntypedef int mpo_priv_grant_t(\n\tkauth_cred_t cred,\n\tint priv\n);\n/**\n @brief Access control check for debugging process\n @param cred Subject credential\n @param proc Object process\n\n Determine whether the subject identified by the credential can debug\n the passed process. This call may be made in a number of situations,\n including use of the ptrace(2) and ktrace(2) APIs, as well as for some\n types of procfs operations.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch,\n EPERM for lack of privilege, or ESRCH to hide visibility of the target.\n*/\ntypedef int mpo_proc_check_debug_t(\n\tkauth_cred_t cred,\n\tstruct proc *proc\n);\n/**\n @brief Access control over fork\n @param cred Subject credential\n @param proc Subject process trying to fork\n\n Determine whether the subject identified is allowed to fork.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_fork_t(\n\tkauth_cred_t cred,\n\tstruct proc *proc\n);\n/**\n @brief Access control check for setting host special ports.\n @param cred Subject credential\n @param id The host special port to set\n @param port The new value to set for the special port\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_set_host_special_port_t(\n\tkauth_cred_t cred,\n\tint id,\n\tstruct ipc_port\t*port\n);\n/**\n @brief Access control check for setting host exception ports.\n @param cred Subject credential\n @param exception Exception port to set\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_set_host_exception_port_t(\n\tkauth_cred_t cred,\n\tunsigned int exception\n);\n/**\n @brief Access control over pid_suspend and pid_resume\n @param cred Subject credential\n @param proc Subject process trying to run pid_suspend or pid_resume \n @param sr Call is suspend (0) or resume (1)\n\n Determine whether the subject identified is allowed to suspend or resume\n other processes.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_suspend_resume_t(\n\tkauth_cred_t cred,\n\tstruct proc *proc,\n\tint sr\n);\n/**\n @brief Access control check for retrieving audit information\n @param cred Subject credential\n\n Determine whether the subject identified by the credential can get\n audit information such as the audit user ID, the preselection mask,\n the terminal ID and the audit session ID, using the getaudit() system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_getaudit_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Access control check for retrieving audit user ID\n @param cred Subject credential\n\n Determine whether the subject identified by the credential can get\n the user identity being used by the auditing system, using the getauid()\n system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_getauid_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Access control check for retrieving Login Context ID\n @param p0 Calling process\n @param p Effected process\n @param pid syscall PID argument\n\n Determine if getlcid(2) system call is permitted.\n\n Information returned by this system call is similar to that returned via\n process listings etc.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_getlcid_t(\n\tstruct proc *p0,\n\tstruct proc *p,\n\tpid_t pid\n);\n/**\n @brief Access control check for retrieving ledger information\n @param cred Subject credential\n @param target Object process\n @param op ledger operation\n\n Determine if ledger(2) system call is permitted.\n\n Information returned by this system call is similar to that returned via\n process listings etc.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_ledger_t(\n\tkauth_cred_t cred,\n\tstruct proc *target,\n\tint op\n);\n/**\n @brief Access control check for escaping default CPU usage monitor parameters.\n @param cred Subject credential\n \n Determine if a credential has permission to program CPU usage monitor parameters\n that are less restrictive than the global system-wide defaults.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_cpumon_t(\n kauth_cred_t cred\n);\n/**\n @brief Access control check for retrieving process information.\n @param cred Subject credential\n @param target Target process (may be null, may be zombie)\n\n Determine if a credential has permission to access process information as defined\n by call number and flavor on target process\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_proc_info_t(\n\tkauth_cred_t cred,\n\tstruct proc *target,\n\tint callnum,\n\tint flavor\n);\n/**\n @brief Access control check for retrieving code signing information.\n @param cred Subject credential\n @param target Target process\n @param op Code signing operation being performed\n\n Determine whether the subject identified by the credential should be\n allowed to get code signing information about the target process.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_get_cs_info_t(\n\tkauth_cred_t cred,\n\tstruct proc *target,\n\tunsigned int op\n);\n/**\n @brief Access control check for setting code signing information.\n @param cred Subject credential\n @param target Target process\n @param op Code signing operation being performed.\n\n Determine whether the subject identified by the credential should be\n allowed to set code signing information about the target process.\n\n @return Return 0 if permission is granted, otherwise an appropriate\n value of errno should be returned.\n*/\ntypedef int mpo_proc_check_set_cs_info_t(\n\tkauth_cred_t cred,\n\tstruct proc *target,\n\tunsigned int op\n);\n/**\n @brief Access control check for mmap MAP_ANON\n @param proc User process requesting the memory\n @param cred Subject credential\n @param u_addr Start address of the memory range\n @param u_size Length address of the memory range\n @param prot mmap protections; see mmap(2)\n @param flags Type of mapped object; see mmap(2)\n @param maxprot Maximum rights\n\n Determine whether the subject identified by the credential should be\n allowed to obtain anonymous memory using the specified flags and \n protections on the new mapping. MAP_ANON will always be present in the\n flags. Certain combinations of flags with a non-NULL addr may\n cause a mapping to be rejected before this hook is called. The maxprot field\n holds the maximum permissions on the new mapping, a combination of\n VM_PROT_READ, VM_PROT_WRITE and VM_PROT_EXECUTE. To avoid overriding prior\n access control checks, a policy should only remove flags from maxprot.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EPERM for lack of privilege.\n*/\ntypedef int mpo_proc_check_map_anon_t(\n\tstruct proc *proc,\n\tkauth_cred_t cred,\n\tuser_addr_t u_addr,\n\tuser_size_t u_size,\n\tint prot,\n\tint flags,\n\tint *maxprot\n);\n/**\n @brief Access control check for setting memory protections\n @param cred Subject credential\n @param proc User process requesting the change\n @param addr Start address of the memory range\n @param size Length address of the memory range\n @param prot Memory protections, see mmap(2)\n\n Determine whether the subject identified by the credential should\n be allowed to set the specified memory protections on memory mapped\n in the process proc.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_mprotect_t(\n\tkauth_cred_t cred,\n\tstruct proc *proc,\n\tuser_addr_t addr,\n\tuser_size_t size,\n\tint prot\n);\n/**\n @brief Access control check for changing scheduling parameters\n @param cred Subject credential\n @param proc Object process\n\n Determine whether the subject identified by the credential can change\n the scheduling parameters of the passed process.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch,\n EPERM for lack of privilege, or ESRCH to limit visibility.\n*/\ntypedef int mpo_proc_check_sched_t(\n\tkauth_cred_t cred,\n\tstruct proc *proc\n);\n/**\n @brief Access control check for setting audit information\n @param cred Subject credential\n @param ai Audit information\n\n Determine whether the subject identified by the credential can set\n audit information such as the the preselection mask, the terminal ID\n and the audit session ID, using the setaudit() system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_setaudit_t(\n\tkauth_cred_t cred,\n\tstruct auditinfo_addr *ai\n);\n/**\n @brief Access control check for setting audit user ID\n @param cred Subject credential\n @param auid Audit user ID\n\n Determine whether the subject identified by the credential can set\n the user identity used by the auditing system, using the setauid()\n system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_setauid_t(\n\tkauth_cred_t cred,\n\tuid_t auid\n);\n/**\n @brief Access control check for setting the Login Context\n @param p0 Calling process\n @param p Effected process\n @param pid syscall PID argument\n @param lcid syscall LCID argument\n\n Determine if setlcid(2) system call is permitted.\n\n See xnu/bsd/kern/kern_prot.c:setlcid() implementation for example of\n decoding syscall arguments to determine action desired by caller.\n\n Five distinct actions are possible: CREATE JOIN LEAVE ADOPT ORPHAN\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_setlcid_t(\n\tstruct proc *p0,\n\tstruct proc *p,\n\tpid_t pid,\n\tpid_t lcid\n);\n/**\n @brief Access control check for delivering signal\n @param cred Subject credential\n @param proc Object process\n @param signum Signal number; see kill(2)\n\n Determine whether the subject identified by the credential can deliver\n the passed signal to the passed process.\n\n @warning Programs typically expect to be able to send and receive\n signals as part or their normal process lifecycle; caution should be\n exercised when implementing access controls over signal events.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch,\n EPERM for lack of privilege, or ESRCH to limit visibility.\n*/\ntypedef int mpo_proc_check_signal_t(\n\tkauth_cred_t cred,\n\tstruct proc *proc,\n\tint signum\n);\n/**\n @brief Access control check for wait\n @param cred Subject credential\n @param proc Object process\n\n Determine whether the subject identified by the credential can wait\n for process termination.\n\n @warning Caution should be exercised when implementing access\n controls for wait, since programs often wait for child processes to\n exit. Failure to be notified of a child process terminating may\n cause the parent process to hang, or may produce zombie processes.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_proc_check_wait_t(\n\tkauth_cred_t cred,\n\tstruct proc *proc\n);\n/**\n @brief Destroy process label\n @param label The label to be destroyed\n\n Destroy a process label. Since the object is going\n out of scope, policy modules should free any internal storage\n associated with the label so that it may be destroyed.\n*/\ntypedef void mpo_proc_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize process label\n @param label New label to initialize\n @see mpo_cred_label_init_t\n\n Initialize the label for a newly instantiated BSD process structure.\n Normally, security policies will store the process label in the user\n credential rather than here in the process structure. However,\n there are some floating label policies that may need to temporarily\n store a label in the process structure until it is safe to update\n the user credential label. Sleeping is permitted.\n*/\ntypedef void mpo_proc_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Access control check for socket accept\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n\n Determine whether the subject identified by the credential can accept()\n a new connection on the socket from the host specified by addr.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_accept_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel\n);\n/**\n @brief Access control check for a pending socket accept\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n @param addr Address of the listening socket (coming soon)\n\n Determine whether the subject identified by the credential can accept()\n a pending connection on the socket from the host specified by addr.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_accepted_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel,\n\tstruct sockaddr *addr\n);\n/**\n @brief Access control check for socket bind\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n @param addr Name to assign to the socket\n\n Determine whether the subject identified by the credential can bind()\n the name (addr) to the socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_bind_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel,\n\tstruct sockaddr *addr\n);\n/**\n @brief Access control check for socket connect\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n @param addr Name to assign to the socket\n\n Determine whether the subject identified by the credential can\n connect() the passed socket to the remote host specified by addr.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_connect_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel,\n\tstruct sockaddr *addr\n);\n/**\n @brief Access control check for socket() system call.\n @param cred Subject credential\n @param domain communication domain\n @param type socket type\n @param protocol socket protocol\n\n Determine whether the subject identified by the credential can\n make the socket() call.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_create_t(\n\tkauth_cred_t cred,\n\tint domain,\n\tint type,\n\tint protocol\n);\n/**\n @brief Access control check for delivering data to a user's receieve queue\n @param so The socket data is being delivered to\n @param so_label The label of so\n @param m The mbuf whose data will be deposited into the receive queue\n @param m_label The label of the sender of the data.\n\n A socket has a queue for receiving incoming data. When a packet arrives\n on the wire, it eventually gets deposited into this queue, which the\n owner of the socket drains when they read from the socket's file descriptor.\n\n This function determines whether the socket can receive data from\n the sender specified by m_label.\n\n @warning There is an outstanding design issue surrounding the placement\n of this function. The check must be placed either before or after the\n TCP sequence and ACK counters are updated. Placing the check before\n the counters are updated causes the incoming packet to be resent by\n the remote if the check rejects it. Placing the check after the counters\n are updated results in a completely silent drop. As far as each TCP stack\n is concerned the packet was received, however, the data will not be in the\n socket's receive queue. Another consideration is that the current design\n requires using the \"failed label\" occasionally. In that case, on rejection,\n we want the remote TCP to resend the data. Because of this, we chose to\n place this check before the counters are updated, so rejected packets will be\n resent by the remote host.\n\n If a policy keeps rejecting the same packet, eventually the connection will\n be dropped. Policies have several options if this design causes problems.\n For example, one options is to sanitize the mbuf such that it is acceptable,\n then accept it. That may require negotiation between policies as the\n Framework will not know to re-check the packet.\n\n The policy must handle NULL MBUF labels. This will likely be the case\n for non-local TCP sockets for example.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_deliver_t(\n\tsocket_t so,\n\tstruct label *so_label,\n\tstruct mbuf *m,\n\tstruct label *m_label\n);\n/**\n @brief Access control check for socket kqfilter\n @param cred Subject credential\n @param kn Object knote\n @param so Object socket\n @param socklabel Policy label for socket\n\n Determine whether the subject identified by the credential can\n receive the knote on the passed socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_kqfilter_t(\n\tkauth_cred_t cred,\n\tstruct knote *kn,\n\tsocket_t so,\n\tstruct label *socklabel\n);\n/**\n @brief Access control check for socket relabel\n @param cred Subject credential\n @param so Object socket\n @param so_label The current label of so\n @param newlabel The label to be assigned to so\n\n Determine whether the subject identified by the credential can\n change the label on the socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_label_update_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *so_label,\n\tstruct label *newlabel\n);\n/**\n @brief Access control check for socket listen\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n\n Determine whether the subject identified by the credential can\n listen() on the passed socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_listen_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel\n);\n/**\n @brief Access control check for socket receive\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n\n Determine whether the subject identified by the credential can\n receive data from the socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_receive_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel\n);\n\n/** \n @brief Access control check for socket receive \n @param cred Subject credential \n @param sock Object socket \n @param socklabel Policy label for socket \n @param saddr Name of the remote socket \n \n Determine whether the subject identified by the credential can \n receive data from the remote host specified by addr. \n \n @return Return 0 if access if granted, otherwise an appropriate \n value for errno should be returned. \n*/\ntypedef int mpo_socket_check_received_t(\n\t\t\t\t\tkauth_cred_t cred,\n\t\t\t\t\tstruct socket *sock,\n\t\t\t\t\tstruct label *socklabel,\n\t\t\t\t\tstruct sockaddr *saddr\n\t\t\t\t\t);\n\n\n/**\n @brief Access control check for socket select\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n @param which The operation selected on: FREAD or FWRITE\n\n Determine whether the subject identified by the credential can use the\n socket in a call to select().\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_select_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel,\n\tint which\n);\n/**\n @brief Access control check for socket send\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for socket\n @param addr Address being sent to\n\n Determine whether the subject identified by the credential can send\n data to the socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_send_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel,\n\tstruct sockaddr *addr\n);\n/**\n @brief Access control check for retrieving socket status\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for so\n\n Determine whether the subject identified by the credential can\n execute the stat() system call on the given socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_stat_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel\n);\n/**\n @brief Access control check for setting socket options\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for so\n @param sopt The options being set\n\n Determine whether the subject identified by the credential can\n execute the setsockopt system call on the given socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_setsockopt_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel,\n\tstruct sockopt *sopt\n);\n/**\n @brief Access control check for getting socket options\n @param cred Subject credential\n @param so Object socket\n @param socklabel Policy label for so\n @param sopt The options to get\n\n Determine whether the subject identified by the credential can\n execute the getsockopt system call on the given socket.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_socket_check_getsockopt_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *socklabel,\n\tstruct sockopt *sopt\n);\n/**\n @brief Label a socket\n @param oldsock Listening socket\n @param oldlabel Policy label associated with oldsock\n @param newsock New socket\n @param newlabel Policy label associated with newsock\n\n A new socket is created when a connection is accept(2)ed. This\n function labels the new socket based on the existing listen(2)ing\n socket.\n*/\ntypedef void mpo_socket_label_associate_accept_t(\n\tsocket_t oldsock,\n\tstruct label *oldlabel,\n\tsocket_t newsock,\n\tstruct label *newlabel\n);\n/**\n @brief Assign a label to a new socket\n @param cred Credential of the owning process\n @param so The socket being labeled\n @param solabel The label\n @warning cred can be NULL\n\n Set the label on a newly created socket from the passed subject\n credential. This call is made when a socket is created. The\n credentials may be null if the socket is being created by the\n kernel.\n*/\ntypedef void mpo_socket_label_associate_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *solabel\n);\n/**\n @brief Copy a socket label\n @param src Source label\n @param dest Destination label\n\n Copy the socket label information in src into dest.\n*/\ntypedef void mpo_socket_label_copy_t(\n\tstruct label *src,\n\tstruct label *dest\n);\n/**\n @brief Destroy socket label\n @param label The label to be destroyed\n\n Destroy a socket label. Since the object is going out of\n scope, policy modules should free any internal storage associated\n with the label so that it may be destroyed.\n*/\ntypedef void mpo_socket_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Externalize a socket label\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of label\n\n Produce an externalized socket label based on the label structure passed.\n An externalized label consists of a text representation of the label\n contents that can be used with userland applications and read by the\n user. If element_name does not match a namespace managed by the policy,\n simply return 0. Only return nonzero if an error occurs while externalizing\n the label data.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_socket_label_externalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Initialize socket label\n @param label New label to initialize\n @param waitok Malloc flags\n\n Initialize the label of a newly instantiated socket. The waitok\n field may be one of M_WAITOK and M_NOWAIT, and should be employed to\n avoid performing a sleeping malloc(9) during this initialization\n call. It it not always safe to sleep during this entry point.\n\n @warning Since it is possible for the waitok flags to be set to\n M_NOWAIT, the malloc operation may fail.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_socket_label_init_t(\n\tstruct label *label,\n\tint waitok\n);\n/**\n @brief Internalize a socket label\n @param label Label to be filled in\n @param element_name Name of the label namespace for which the label should\n be internalized\n @param element_data Text data to be internalized\n\n Produce an internal socket label structure based on externalized label\n data in text format.\n\n The policy's internalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_socket_label_internalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tchar *element_data\n);\n/**\n @brief Relabel socket\n @param cred Subject credential\n @param so Object; socket\n @param so_label Current label of the socket\n @param newlabel The label to be assigned to so\n\n The subject identified by the credential has previously requested\n and was authorized to relabel the socket; this entry point allows\n policies to perform the actual label update operation.\n\n @warning XXX This entry point will likely change in future versions.\n*/\ntypedef void mpo_socket_label_update_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *so_label,\n\tstruct label *newlabel\n);\n/**\n @brief Set the peer label on a socket from mbuf\n @param m Mbuf chain received on socket so\n @param m_label Label for m\n @param so Current label for the socket\n @param so_label Policy label to be filled out for the socket\n\n Set the peer label of a socket based on the label of the sender of the\n mbuf.\n\n This is called for every TCP/IP packet received. The first call for a given\n socket operates on a newly initialized label, and subsequent calls operate\n on existing label data.\n\n @warning Because this can affect performance significantly, it has\n different sematics than other 'set' operations. Typically, 'set' operations\n operate on newly initialzed labels and policies do not need to worry about\n clobbering existing values. In this case, it is too inefficient to\n initialize and destroy a label every time data is received for the socket.\n Instead, it is up to the policies to determine how to replace the label data.\n Most policies should be able to replace the data inline.\n*/\ntypedef void mpo_socketpeer_label_associate_mbuf_t(\n\tstruct mbuf *m,\n\tstruct label *m_label,\n\tsocket_t so,\n\tstruct label *so_label\n);\n/**\n @brief Set the peer label on a socket from socket\n @param source Local socket\n @param sourcelabel Policy label for source\n @param target Peer socket\n @param targetlabel Policy label to fill in for target\n\n Set the peer label on a stream UNIX domain socket from the passed\n remote socket endpoint. This call will be made when the socket pair\n is connected, and will be made for both endpoints.\n\n Note that this call is only made on connection; it is currently not updated\n during communication.\n*/\ntypedef void mpo_socketpeer_label_associate_socket_t(\n\tsocket_t source,\n\tstruct label *sourcelabel,\n\tsocket_t target,\n\tstruct label *targetlabel\n);\n/**\n @brief Destroy socket peer label\n @param label The peer label to be destroyed\n\n Destroy a socket peer label. Since the object is going out of\n scope, policy modules should free any internal storage associated\n with the label so that it may be destroyed.\n*/\ntypedef void mpo_socketpeer_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Externalize a socket peer label\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of label\n\n Produce an externalized socket peer label based on the label structure\n passed. An externalized label consists of a text representation of the\n label contents that can be used with userland applications and read by the\n user. If element_name does not match a namespace managed by the policy,\n simply return 0. Only return nonzero if an error occurs while externalizing\n the label data.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_socketpeer_label_externalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Initialize socket peer label\n @param label New label to initialize\n @param waitok Malloc flags\n\n Initialize the peer label of a newly instantiated socket. The\n waitok field may be one of M_WAITOK and M_NOWAIT, and should be\n employed to avoid performing a sleeping malloc(9) during this\n initialization call. It it not always safe to sleep during this\n entry point.\n\n @warning Since it is possible for the waitok flags to be set to\n M_NOWAIT, the malloc operation may fail.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_socketpeer_label_init_t(\n\tstruct label *label,\n\tint waitok\n);\n/**\n @brief Access control check for enabling accounting\n @param cred Subject credential\n @param vp Accounting file\n @param vlabel Label associated with vp\n\n Determine whether the subject should be allowed to enable accounting,\n based on its label and the label of the accounting log file. See\n acct(5) for more information.\n\n As accounting is disabled by passing NULL to the acct(2) system call,\n the policy should be prepared for both 'vp' and 'vlabel' to be NULL.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_acct_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Access control check for audit\n @param cred Subject credential\n @param record Audit record\n @param length Audit record length\n\n Determine whether the subject identified by the credential can submit\n an audit record for inclusion in the audit log via the audit() system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_audit_t(\n\tkauth_cred_t cred,\n\tvoid *record,\n\tint length\n);\n/**\n @brief Access control check for controlling audit\n @param cred Subject credential\n @param vp Audit file\n @param vl Label associated with vp\n\n Determine whether the subject should be allowed to enable auditing using\n the auditctl() system call, based on its label and the label of the proposed\n audit file.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_auditctl_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vl\n);\n/**\n @brief Access control check for manipulating auditing\n @param cred Subject credential\n @param cmd Audit control command\n\n Determine whether the subject identified by the credential can perform\n the audit subsystem control operation cmd via the auditon() system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_auditon_t(\n\tkauth_cred_t cred,\n\tint cmd\n);\n/**\n @brief Access control check for using CHUD facilities\n @param cred Subject credential\n\n Determine whether the subject identified by the credential can perform\n performance-related tasks using the CHUD system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_chud_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Access control check for obtaining the host control port\n @param cred Subject credential\n\n Determine whether the subject identified by the credential can\n obtain the host control port.\n\n @return Return 0 if access is granted, or non-zero otherwise.\n*/\ntypedef int mpo_system_check_host_priv_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Access control check for obtaining system information\n @param cred Subject credential\n @param info_type A description of the information requested\n\n Determine whether the subject identified by the credential should be\n allowed to obtain information about the system.\n\n This is a generic hook that can be used in a variety of situations where\n information is being returned that might be considered sensitive.\n Rather than adding a new MAC hook for every such interface, this hook can\n be called with a string identifying the type of information requested.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_info_t(\n\tkauth_cred_t cred,\n\tconst char *info_type\n);\n/**\n @brief Access control check for calling NFS services\n @param cred Subject credential\n\n Determine whether the subject identified by the credential should be\n allowed to call nfssrv(2).\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_nfsd_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Access control check for reboot\n @param cred Subject credential\n @param howto howto parameter from reboot(2)\n\n Determine whether the subject identified by the credential should be\n allowed to reboot the system in the specified manner.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_reboot_t(\n\tkauth_cred_t cred,\n\tint howto\n);\n/**\n @brief Access control check for setting system clock\n @param cred Subject credential\n\n Determine whether the subject identified by the credential should be\n allowed to set the system clock.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_settime_t(\n\tkauth_cred_t cred\n);\n/**\n @brief Access control check for removing swap devices\n @param cred Subject credential\n @param vp Swap device\n @param label Label associated with vp\n\n Determine whether the subject identified by the credential should be\n allowed to remove vp as a swap device.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_swapoff_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for adding swap devices\n @param cred Subject credential\n @param vp Swap device\n @param label Label associated with vp\n\n Determine whether the subject identified by the credential should be\n allowed to add vp as a swap device.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_swapon_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for sysctl\n @param cred Subject credential\n @param namestring String representation of sysctl name.\n @param name Integer name; see sysctl(3)\n @param namelen Length of name array of integers; see sysctl(3)\n @param old 0 or address where to store old value; see sysctl(3)\n @param oldlen Length of old buffer; see sysctl(3)\n @param newvalue 0 or address of new value; see sysctl(3)\n @param newlen Length of new buffer; see sysctl(3)\n\n Determine whether the subject identified by the credential should be\n allowed to make the specified sysctl(3) transaction.\n\n The sysctl(3) call specifies that if the old value is not desired,\n oldp and oldlenp should be set to NULL. Likewise, if a new value is\n not to be set, newp should be set to NULL and newlen set to 0.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_sysctlbyname_t(\n\tkauth_cred_t cred,\n\tconst char *namestring,\n\tint *name,\n\tu_int namelen,\n\tuser_addr_t old,\t/* NULLOK */\n\tsize_t oldlen,\n\tuser_addr_t newvalue,\t/* NULLOK */\n\tsize_t newlen\n);\n/**\n @brief Access control check for kas_info\n @param cred Subject credential\n @param selector Category of information to return. See kas_info.h\n\n Determine whether the subject identified by the credential can perform\n introspection of the kernel address space layout for\n debugging/performance analysis.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_system_check_kas_info_t(\n\tkauth_cred_t cred,\n\tint selector\n);\n/**\n @brief Create a System V message label\n @param cred Subject credential\n @param msqptr The message queue the message will be placed in\n @param msqlabel The label of the message queue\n @param msgptr The message\n @param msglabel The label of the message\n\n Label the message as its placed in the message queue.\n*/\ntypedef void mpo_sysvmsg_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct msqid_kernel *msqptr,\n\tstruct label *msqlabel,\n\tstruct msg *msgptr,\n\tstruct label *msglabel\n);\n/**\n @brief Destroy System V message label\n @param label The label to be destroyed\n\n Destroy a System V message label. Since the object is\n going out of scope, policy modules should free any internal storage\n associated with the label so that it may be destroyed.\n*/\ntypedef void mpo_sysvmsg_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize System V message label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated System V message.\n*/\ntypedef void mpo_sysvmsg_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Clean up a System V message label\n @param label The label to be destroyed\n\n Clean up a System V message label. Darwin pre-allocates\n messages at system boot time and re-uses them rather than\n allocating new ones. Before messages are returned to the \"free\n pool\", policies can cleanup or overwrite any information present in\n the label.\n*/\ntypedef void mpo_sysvmsg_label_recycle_t(\n\tstruct label *label\n);\n/**\n @brief Access control check for System V message enqueuing\n @param cred Subject credential\n @param msgptr The message\n @param msglabel The message's label\n @param msqptr The message queue\n @param msqlabel The message queue's label\n\n Determine whether the subject identified by the credential can add the\n given message to the given message queue.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvmsq_check_enqueue_t(\n\tkauth_cred_t cred,\n\tstruct msg *msgptr,\n\tstruct label *msglabel,\n\tstruct msqid_kernel *msqptr,\n\tstruct label *msqlabel\n);\n/**\n @brief Access control check for System V message reception\n @param cred The credential of the intended recipient\n @param msgptr The message\n @param msglabel The message's label\n\n Determine whether the subject identified by the credential can receive\n the given message.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvmsq_check_msgrcv_t(\n\tkauth_cred_t cred,\n\tstruct msg *msgptr,\n\tstruct label *msglabel\n);\n/**\n @brief Access control check for System V message queue removal\n @param cred The credential of the caller\n @param msgptr The message\n @param msglabel The message's label\n\n System V message queues are removed using the msgctl() system call.\n The system will iterate over each messsage in the queue, calling this\n function for each, to determine whether the caller has the appropriate\n credentials.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvmsq_check_msgrmid_t(\n\tkauth_cred_t cred,\n\tstruct msg *msgptr,\n\tstruct label *msglabel\n);\n/**\n @brief Access control check for msgctl()\n @param cred The credential of the caller\n @param msqptr The message queue\n @param msqlabel The message queue's label\n\n This access check is performed to validate calls to msgctl().\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvmsq_check_msqctl_t(\n\tkauth_cred_t cred,\n\tstruct msqid_kernel *msqptr,\n\tstruct label *msqlabel,\n\tint cmd\n);\n/**\n @brief Access control check to get a System V message queue\n @param cred The credential of the caller\n @param msqptr The message queue requested\n @param msqlabel The message queue's label\n\n On a call to msgget(), if the queue requested already exists,\n and it is a public queue, this check will be performed before the\n queue's ID is returned to the user.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvmsq_check_msqget_t(\n\tkauth_cred_t cred,\n\tstruct msqid_kernel *msqptr,\n\tstruct label *msqlabel\n);\n/**\n @brief Access control check to receive a System V message from the given queue\n @param cred The credential of the caller\n @param msqptr The message queue to receive from\n @param msqlabel The message queue's label\n\n On a call to msgrcv(), this check is performed to determine whether the\n caller has receive rights on the given queue.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvmsq_check_msqrcv_t(\n\tkauth_cred_t cred,\n\tstruct msqid_kernel *msqptr,\n\tstruct label *msqlabel\n);\n/**\n @brief Access control check to send a System V message to the given queue\n @param cred The credential of the caller\n @param msqptr The message queue to send to\n @param msqlabel The message queue's label\n\n On a call to msgsnd(), this check is performed to determine whether the\n caller has send rights on the given queue.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvmsq_check_msqsnd_t(\n\tkauth_cred_t cred,\n\tstruct msqid_kernel *msqptr,\n\tstruct label *msqlabel\n);\n/**\n @brief Create a System V message queue label\n @param cred Subject credential\n @param msqptr The message queue\n @param msqlabel The label of the message queue\n\n*/\ntypedef void mpo_sysvmsq_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct msqid_kernel *msqptr,\n\tstruct label *msqlabel\n);\n/**\n @brief Destroy System V message queue label\n @param label The label to be destroyed\n\n Destroy a System V message queue label. Since the object is\n going out of scope, policy modules should free any internal storage\n associated with the label so that it may be destroyed.\n*/\ntypedef void mpo_sysvmsq_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize System V message queue label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated System V message queue.\n*/\ntypedef void mpo_sysvmsq_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Clean up a System V message queue label\n @param label The label to be destroyed\n\n Clean up a System V message queue label. Darwin pre-allocates\n message queues at system boot time and re-uses them rather than\n allocating new ones. Before message queues are returned to the \"free\n pool\", policies can cleanup or overwrite any information present in\n the label.\n*/\ntypedef void mpo_sysvmsq_label_recycle_t(\n\tstruct label *label\n);\n/**\n @brief Access control check for System V semaphore control operation\n @param cred Subject credential\n @param semakptr Pointer to semaphore identifier\n @param semaklabel Label associated with semaphore\n @param cmd Control operation to be performed; see semctl(2)\n\n Determine whether the subject identified by the credential can perform\n the operation indicated by cmd on the System V semaphore semakptr.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvsem_check_semctl_t(\n\tkauth_cred_t cred,\n\tstruct semid_kernel *semakptr,\n\tstruct label *semaklabel,\n\tint cmd\n);\n/**\n @brief Access control check for obtaining a System V semaphore\n @param cred Subject credential\n @param semakptr Pointer to semaphore identifier\n @param semaklabel Label to associate with the semaphore\n\n Determine whether the subject identified by the credential can\n obtain a System V semaphore.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvsem_check_semget_t(\n\tkauth_cred_t cred,\n\tstruct semid_kernel *semakptr,\n\tstruct label *semaklabel\n);\n/**\n @brief Access control check for System V semaphore operations\n @param cred Subject credential\n @param semakptr Pointer to semaphore identifier\n @param semaklabel Label associated with the semaphore\n @param accesstype Flags to indicate access (read and/or write)\n\n Determine whether the subject identified by the credential can\n perform the operations on the System V semaphore indicated by\n semakptr. The accesstype flags hold the maximum set of permissions\n from the sem_op array passed to the semop system call. It may\n contain SEM_R for read-only operations or SEM_A for read/write\n operations.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvsem_check_semop_t(\n\tkauth_cred_t cred,\n\tstruct semid_kernel *semakptr,\n\tstruct label *semaklabel,\n\tsize_t accesstype\n);\n/**\n @brief Create a System V semaphore label\n @param cred Subject credential\n @param semakptr The semaphore being created\n @param semalabel Label to associate with the new semaphore\n\n Label a new System V semaphore. The label was previously\n initialized and associated with the semaphore. At this time, an\n appropriate initial label value should be assigned to the object and\n stored in semalabel.\n*/\ntypedef void mpo_sysvsem_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct semid_kernel *semakptr,\n\tstruct label *semalabel\n);\n/**\n @brief Destroy System V semaphore label\n @param label The label to be destroyed\n\n Destroy a System V semaphore label. Since the object is\n going out of scope, policy modules should free any internal storage\n associated with the label so that it may be destroyed.\n*/\ntypedef void mpo_sysvsem_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize System V semaphore label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated System V semaphore. Sleeping\n is permitted.\n*/\ntypedef void mpo_sysvsem_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Clean up a System V semaphore label\n @param label The label to be cleaned\n\n Clean up a System V semaphore label. Darwin pre-allocates\n semaphores at system boot time and re-uses them rather than\n allocating new ones. Before semaphores are returned to the \"free\n pool\", policies can cleanup or overwrite any information present in\n the label.\n*/\ntypedef void mpo_sysvsem_label_recycle_t(\n\tstruct label *label\n);\n/**\n @brief Access control check for mapping System V shared memory\n @param cred Subject credential\n @param shmsegptr Pointer to shared memory segment identifier\n @param shmseglabel Label associated with the shared memory segment\n @param shmflg shmat flags; see shmat(2)\n\n Determine whether the subject identified by the credential can map\n the System V shared memory segment associated with shmsegptr.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvshm_check_shmat_t(\n\tkauth_cred_t cred,\n\tstruct shmid_kernel *shmsegptr,\n\tstruct label *shmseglabel,\n\tint shmflg\n);\n/**\n @brief Access control check for System V shared memory control operation\n @param cred Subject credential\n @param shmsegptr Pointer to shared memory segment identifier\n @param shmseglabel Label associated with the shared memory segment\n @param cmd Control operation to be performed; see shmctl(2)\n\n Determine whether the subject identified by the credential can perform\n the operation indicated by cmd on the System V shared memory segment\n shmsegptr.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvshm_check_shmctl_t(\n\tkauth_cred_t cred,\n\tstruct shmid_kernel *shmsegptr,\n\tstruct label *shmseglabel,\n\tint cmd\n);\n/**\n @brief Access control check for unmapping System V shared memory\n @param cred Subject credential\n @param shmsegptr Pointer to shared memory segment identifier\n @param shmseglabel Label associated with the shared memory segment\n\n Determine whether the subject identified by the credential can unmap\n the System V shared memory segment associated with shmsegptr.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvshm_check_shmdt_t(\n\tkauth_cred_t cred,\n\tstruct shmid_kernel *shmsegptr,\n\tstruct label *shmseglabel\n);\n/**\n @brief Access control check obtaining System V shared memory identifier\n @param cred Subject credential\n @param shmsegptr Pointer to shared memory segment identifier\n @param shmseglabel Label associated with the shared memory segment\n @param shmflg shmget flags; see shmget(2)\n\n Determine whether the subject identified by the credential can get\n the System V shared memory segment address.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_sysvshm_check_shmget_t(\n\tkauth_cred_t cred,\n\tstruct shmid_kernel *shmsegptr,\n\tstruct label *shmseglabel,\n\tint shmflg\n);\n/**\n @brief Create a System V shared memory region label\n @param cred Subject credential\n @param shmsegptr The shared memory region being created\n @param shmlabel Label to associate with the new shared memory region\n\n Label a new System V shared memory region. The label was previously\n initialized and associated with the shared memory region. At this\n time, an appropriate initial label value should be assigned to the\n object and stored in shmlabel.\n*/\ntypedef void mpo_sysvshm_label_associate_t(\n\tkauth_cred_t cred,\n\tstruct shmid_kernel *shmsegptr,\n\tstruct label *shmlabel\n);\n/**\n @brief Destroy System V shared memory label\n @param label The label to be destroyed\n\n Destroy a System V shared memory region label. Since the\n object is going out of scope, policy modules should free any\n internal storage associated with the label so that it may be\n destroyed.\n*/\ntypedef void mpo_sysvshm_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Initialize System V Shared Memory region label\n @param label New label to initialize\n\n Initialize the label for a newly instantiated System V Shared Memory\n region. Sleeping is permitted.\n*/\ntypedef void mpo_sysvshm_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Clean up a System V Share Memory Region label\n @param shmlabel The label to be cleaned\n\n Clean up a System V Shared Memory Region label. Darwin\n pre-allocates these objects at system boot time and re-uses them\n rather than allocating new ones. Before the memory regions are\n returned to the \"free pool\", policies can cleanup or overwrite any\n information present in the label.\n*/\ntypedef void mpo_sysvshm_label_recycle_t(\n\tstruct label *shmlabel\n);\n/**\n @brief Access control check for getting a process's task name\n @param cred Subject credential\n @param p Object process\n\n Determine whether the subject identified by the credential can get\n the passed process's task name port.\n This call is used by the task_name_for_pid(2) API.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch,\n EPERM for lack of privilege, or ESRCH to hide visibility of the target.\n*/\ntypedef int mpo_proc_check_get_task_name_t(\n\tkauth_cred_t cred,\n\tstruct proc *p\n);\n/**\n @brief Access control check for getting a process's task port\n @param cred Subject credential\n @param p Object process\n\n Determine whether the subject identified by the credential can get\n the passed process's task control port.\n This call is used by the task_for_pid(2) API.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch,\n EPERM for lack of privilege, or ESRCH to hide visibility of the target.\n*/\ntypedef int mpo_proc_check_get_task_t(\n\tkauth_cred_t cred,\n\tstruct proc *p\n);\n\n/**\n @brief Access control check for exposing a process's task port\n @param cred Subject credential\n @param p Object process\n\n Determine whether the subject identified by the credential can expose\n the passed process's task control port.\n This call is used by the accessor APIs like processor_set_tasks() and\n processor_set_threads().\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch,\n EPERM for lack of privilege, or ESRCH to hide visibility of the target.\n*/\ntypedef int mpo_proc_check_expose_task_t(\n\tkauth_cred_t cred,\n\tstruct proc *p\n);\n\n/**\n @brief Check whether task's IPC may inherit across process exec\n @param p current process instance\n @param cur_vp vnode pointer to current instance\n @param cur_offset offset of binary of currently executing image\n @param img_vp vnode pointer to to be exec'ed image\n @param img_offset offset into file which is selected for execution\n @param scriptvp vnode pointer of script file if any.\n @return Return 0 if access is granted.\n \tEPERM if parent does not have any entitlements.\n\tEACCESS if mismatch in entitlements\n*/\ntypedef int mpo_proc_check_inherit_ipc_ports_t(\n\tstruct proc *p,\n\tstruct vnode *cur_vp,\n\toff_t cur_offset,\n\tstruct vnode *img_vp,\n\toff_t img_offset,\n\tstruct vnode *scriptvp\n);\n\n/**\n @brief Privilege check for a process to run invalid\n @param p Object process\n \n Determine whether the process may execute even though the system determined\n that it is untrusted (eg unidentified / modified code).\n \n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n */\ntypedef int mpo_proc_check_run_cs_invalid_t(\n\tstruct proc *p\n);\n\n/**\n @brief Perform MAC-related events when a thread returns to user space\n @param thread Mach (not BSD) thread that is returning\n\n This entry point permits policy modules to perform MAC-related\n events when a thread returns to user space, via a system call\n return or trap return.\n*/\ntypedef void mpo_thread_userret_t(\n\tstruct thread *thread\n);\n\n/**\n @brief Check vnode access\n @param cred Subject credential\n @param vp Object vnode\n @param label Label for vp\n @param acc_mode access(2) flags\n\n Determine how invocations of access(2) and related calls by the\n subject identified by the credential should return when performed\n on the passed vnode using the passed access flags. This should\n generally be implemented using the same semantics used in\n mpo_vnode_check_open.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_access_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tint acc_mode\n);\n/**\n @brief Access control check for changing working directory\n @param cred Subject credential\n @param dvp Object; vnode to chdir(2) into\n @param dlabel Policy label for dvp\n\n Determine whether the subject identified by the credential can change\n the process working directory to the passed vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_chdir_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel\n);\n/**\n @brief Access control check for changing root directory\n @param cred Subject credential\n @param dvp Directory vnode\n @param dlabel Policy label associated with dvp\n @param cnp Component name for dvp\n\n Determine whether the subject identified by the credential should be\n allowed to chroot(2) into the specified directory (dvp).\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_vnode_check_chroot_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct componentname *cnp\n);\n/**\n @brief Access control check for creating clone\n @param cred Subject credential\n @param dvp Vnode of directory to create the clone in\n @param dlabel Policy label associated with dvp\n @param vp Vnode of the file to clone from\n @param label Policy label associated with vp\n @param cnp Component name for the clone being created\n\n Determine whether the subject identified by the credential should be\n allowed to create a clone of the vnode vp with the name specified by cnp.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_clone_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct componentname *cnp\n);\n/**\n @brief Access control check for creating vnode\n @param cred Subject credential\n @param dvp Directory vnode\n @param dlabel Policy label for dvp\n @param cnp Component name for dvp\n @param vap vnode attributes for vap\n\n Determine whether the subject identified by the credential can create\n a vnode with the passed parent directory, passed name information,\n and passed attribute information. This call may be made in a number of\n situations, including as a result of calls to open(2) with O_CREAT,\n mknod(2), mkfifo(2), and others.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_create_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct componentname *cnp,\n\tstruct vnode_attr *vap\n);\n/**\n @brief Access control check for deleting extended attribute\n @param cred Subject credential\n @param vp Object vnode\n @param vlabel Label associated with vp\n @param name Extended attribute name\n\n Determine whether the subject identified by the credential can delete\n the extended attribute from the passed vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_deleteextattr_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tconst char *name\n);\n/**\n @brief Access control check for exchanging file data\n @param cred Subject credential\n @param v1 vnode 1 to swap\n @param vl1 Policy label for v1\n @param v2 vnode 2 to swap\n @param vl2 Policy label for v2\n\n Determine whether the subject identified by the credential can swap the data\n in the two supplied vnodes.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_exchangedata_t(\n\tkauth_cred_t cred,\n\tstruct vnode *v1,\n\tstruct label *vl1,\n\tstruct vnode *v2,\n\tstruct label *vl2\n);\n/**\n @brief Access control check for executing the vnode\n @param cred Subject credential\n @param vp Object vnode to execute\n @param scriptvp Script being executed by interpreter, if any.\n @param vnodelabel Label corresponding to vp\n @param scriptlabel Script vnode label\n @param execlabel Userspace provided execution label\n @param cnp Component name for file being executed\n @param macpolicyattr MAC policy-specific spawn attribute data.\n @param macpolicyattrlen Length of policy-specific spawn attribute data.\n\n Determine whether the subject identified by the credential can execute\n the passed vnode. Determination of execute privilege is made separately\n from decisions about any process label transitioning event.\n\n The final label, execlabel, corresponds to a label supplied by a\n user space application through the use of the mac_execve system call.\n This label will be NULL if the user application uses the the vendor\n execve(2) call instead of the MAC Framework mac_execve() call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_exec_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct vnode *scriptvp,\n\tstruct label *vnodelabel,\n\tstruct label *scriptlabel,\n\tstruct label *execlabel,\t/* NULLOK */\n\tstruct componentname *cnp,\n\tu_int *csflags,\n\tvoid *macpolicyattr,\n\tsize_t macpolicyattrlen\n);\n/**\n @brief Access control check for fsgetpath\n @param cred Subject credential\n @param vp Vnode for which a path will be returned\n @param label Label associated with the vnode\n\n Determine whether the subject identified by the credential can get the path\n of the given vnode with fsgetpath.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_fsgetpath_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for retrieving file attributes\n @param active_cred Subject credential\n @param file_cred Credential associated with the struct fileproc\n @param vp Object vnode\n @param vlabel Policy label for vp\n @param va Vnode attributes to retrieve\n\n Determine whether the subject identified by the credential can\n get information about the passed vnode. The active_cred hold\n the credentials of the subject performing the operation, and\n file_cred holds the credentials of the subject that originally\n opened the file. This check happens during stat(), lstat(),\n fstat(), and getattrlist() syscalls. See for\n definitions of the attributes.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n\n @note Policies may change the contents of va to alter the list of\n file attributes returned.\n*/\ntypedef int mpo_vnode_check_getattr_t(\n\tkauth_cred_t active_cred,\n\tkauth_cred_t file_cred, /* NULLOK */\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct vnode_attr *va\n);\n/**\n @brief Access control check for retrieving file attributes\n @param cred Subject credential\n @param vp Object vnode\n @param vlabel Policy label for vp\n @param alist List of attributes to retrieve\n\n Determine whether the subject identified by the credential can read\n various attributes of the specified vnode, or the filesystem or volume on\n which that vnode resides. See for definitions of the\n attributes.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege. Access control covers all attributes requested\n with this call; the security policy is not permitted to change the set of\n attributes requested.\n*/\ntypedef int mpo_vnode_check_getattrlist_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct attrlist *alist\n);\n/**\n @brief Access control check for retrieving an extended attribute\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param name Extended attribute name\n @param uio I/O structure pointer\n\n Determine whether the subject identified by the credential can retrieve\n the extended attribute from the passed vnode. The uio parameter\n will be NULL when the getxattr(2) call has been made with a NULL data\n value; this is done to request the size of the data only.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_getextattr_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\t\t/* NULLOK */\n\tconst char *name,\n\tstruct uio *uio\t\t\t/* NULLOK */\n);\n/**\n @brief Access control check for ioctl\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param cmd Device-dependent request code; see ioctl(2)\n\n Determine whether the subject identified by the credential can perform\n the ioctl operation indicated by com.\n\n @warning Since ioctl data is opaque from the standpoint of the MAC\n framework, and since ioctls can affect many aspects of system\n operation, policies must exercise extreme care when implementing\n access control checks.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_ioctl_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tunsigned int cmd\n);\n/**\n @brief Access control check for vnode kqfilter\n @param active_cred Subject credential\n @param kn Object knote\n @param vp Object vnode\n @param label Policy label for vp\n\n Determine whether the subject identified by the credential can\n receive the knote on the passed vnode.\n\n @return Return 0 if access if granted, otherwise an appropriate\n value for errno should be returned.\n*/\ntypedef int mpo_vnode_check_kqfilter_t(\n\tkauth_cred_t active_cred,\n\tkauth_cred_t file_cred,\t\t/* NULLOK */\n\tstruct knote *kn,\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for relabel\n @param cred Subject credential\n @param vp Object vnode\n @param vnodelabel Existing policy label for vp\n @param newlabel Policy label update to later be applied to vp\n @see mpo_relable_vnode_t\n\n Determine whether the subject identified by the credential can relabel\n the passed vnode to the passed label update. If all policies permit\n the label change, the actual relabel entry point (mpo_vnode_label_update)\n will follow.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_label_update_t(\n\tstruct ucred *cred,\n\tstruct vnode *vp,\n\tstruct label *vnodelabel,\n\tstruct label *newlabel\n);\n/**\n @brief Access control check for creating link\n @param cred Subject credential\n @param dvp Directory vnode\n @param dlabel Policy label associated with dvp\n @param vp Link destination vnode\n @param label Policy label associated with vp\n @param cnp Component name for the link being created\n\n Determine whether the subject identified by the credential should be\n allowed to create a link to the vnode vp with the name specified by cnp.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_link_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct componentname *cnp\n);\n/**\n @brief Access control check for listing extended attributes\n @param cred Subject credential\n @param vp Object vnode\n @param vlabel Policy label associated with vp\n\n Determine whether the subject identified by the credential can retrieve\n a list of named extended attributes from a vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_listextattr_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Access control check for lookup\n @param cred Subject credential\n @param dvp Object vnode\n @param dlabel Policy label for dvp\n @param cnp Component name being looked up\n\n Determine whether the subject identified by the credential can perform\n a lookup in the passed directory vnode for the passed name (cnp).\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_lookup_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct componentname *cnp\n);\n/**\n @brief Access control check for open\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label associated with vp\n @param acc_mode open(2) access mode\n\n Determine whether the subject identified by the credential can perform\n an open operation on the passed vnode with the passed access mode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_open_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tint acc_mode\n);\n/**\n @brief Access control check for read\n @param active_cred Subject credential\n @param file_cred Credential associated with the struct fileproc\n @param vp Object vnode\n @param label Policy label for vp\n\n Determine whether the subject identified by the credential can perform\n a read operation on the passed vnode. The active_cred hold the credentials\n of the subject performing the operation, and file_cred holds the\n credentials of the subject that originally opened the file.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_read_t(\n\tkauth_cred_t active_cred,\t/* SUBJECT */\n\tkauth_cred_t file_cred,\t/* NULLOK */\n\tstruct vnode *vp,\t\t/* OBJECT */\n\tstruct label *label\t\t/* LABEL */\n);\n/**\n @brief Access control check for read directory\n @param cred Subject credential\n @param dvp Object directory vnode\n @param dlabel Policy label for dvp\n\n Determine whether the subject identified by the credential can\n perform a readdir operation on the passed directory vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_readdir_t(\n\tkauth_cred_t cred,\t\t/* SUBJECT */\n\tstruct vnode *dvp,\t\t/* OBJECT */\n\tstruct label *dlabel\t\t/* LABEL */\n);\n/**\n @brief Access control check for read link\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n\n Determine whether the subject identified by the credential can perform\n a readlink operation on the passed symlink vnode. This call can be made\n in a number of situations, including an explicit readlink call by the\n user process, or as a result of an implicit readlink during a name\n lookup by the process.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_readlink_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for rename\n @param cred Subject credential\n @param dvp Directory vnode\n @param dlabel Policy label associated with dvp\n @param vp vnode to be renamed\n @param label Policy label associated with vp\n @param cnp Component name for vp\n @param tdvp Destination directory vnode\n @param tdlabel Policy label associated with tdvp\n @param tvp Overwritten vnode\n @param tlabel Policy label associated with tvp\n @param tcnp Destination component name\n\n Determine whether the subject identified by the credential should be allowed\n to rename the vnode vp to something else.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_rename_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct componentname *cnp,\n\tstruct vnode *tdvp,\n\tstruct label *tdlabel,\n\tstruct vnode *tvp,\n\tstruct label *tlabel,\n\tstruct componentname *tcnp\n);\n/**\n @brief Access control check for rename from\n @param cred Subject credential\n @param dvp Directory vnode\n @param dlabel Policy label associated with dvp\n @param vp vnode to be renamed\n @param label Policy label associated with vp\n @param cnp Component name for vp\n @see mpo_vnode_check_rename_t\n @see mpo_vnode_check_rename_to_t\n\n Determine whether the subject identified by the credential should be\n allowed to rename the vnode vp to something else.\n\n Due to VFS locking constraints (to make sure proper vnode locks are\n held during this entry point), the vnode relabel checks had to be\n split into two parts: relabel_from and relabel to.\n\n This hook is deprecated, mpo_vnode_check_rename_t should be used instead.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_rename_from_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct componentname *cnp\n);\n/**\n @brief Access control check for rename to\n @param cred Subject credential\n @param dvp Directory vnode\n @param dlabel Policy label associated with dvp\n @param vp Overwritten vnode\n @param label Policy label associated with vp\n @param samedir Boolean; 1 if the source and destination directories are the same\n @param cnp Destination component name\n @see mpo_vnode_check_rename_t\n @see mpo_vnode_check_rename_from_t\n\n Determine whether the subject identified by the credential should be\n allowed to rename to the vnode vp, into the directory dvp, or to the\n name represented by cnp. If there is no existing file to overwrite,\n vp and label will be NULL.\n\n Due to VFS locking constraints (to make sure proper vnode locks are\n held during this entry point), the vnode relabel checks had to be\n split into two parts: relabel_from and relabel to.\n\n This hook is deprecated, mpo_vnode_check_rename_t should be used instead.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_rename_to_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\t\t\t/* NULLOK */\n\tstruct label *label,\t\t\t/* NULLOK */\n\tint samedir,\n\tstruct componentname *cnp\n);\n/**\n @brief Access control check for revoke\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n\n Determine whether the subject identified by the credential can revoke\n access to the passed vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_revoke_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for searchfs\n @param cred Subject credential\n @param vp Object vnode\n @param vlabel Policy label for vp\n @param alist List of attributes used as search criteria\n\n Determine whether the subject identified by the credential can search the\n vnode using the searchfs system call.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_searchfs_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct attrlist *alist\n);\n/**\n @brief Access control check for select\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param which The operation selected on: FREAD or FWRITE\n\n Determine whether the subject identified by the credential can select\n the vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n*/\ntypedef int mpo_vnode_check_select_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tint which\n);\n/**\n @brief Access control check for setting ACL\n @param cred Subject credential\n @param vp Object node\n @param label Policy label for vp\n @param acl ACL structure pointer\n\n Determine whether the subject identified by the credential can set an ACL\n on the specified vnode. The ACL pointer will be NULL when removing an ACL.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_setacl_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct kauth_acl *acl\n);\n/**\n @brief Access control check for setting file attributes\n @param cred Subject credential\n @param vp Object vnode\n @param vlabel Policy label for vp\n @param alist List of attributes to set\n\n Determine whether the subject identified by the credential can set\n various attributes of the specified vnode, or the filesystem or volume on\n which that vnode resides. See for definitions of the\n attributes.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege. Access control covers all attributes requested\n with this call.\n*/\ntypedef int mpo_vnode_check_setattrlist_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct attrlist *alist\n);\n/**\n @brief Access control check for setting extended attribute\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param name Extended attribute name\n @param uio I/O structure pointer\n\n Determine whether the subject identified by the credential can set the\n extended attribute of passed name and passed namespace on the passed\n vnode. Policies implementing security labels backed into extended\n attributes may want to provide additional protections for those\n attributes. Additionally, policies should avoid making decisions based\n on the data referenced from uio, as there is a potential race condition\n between this check and the actual operation. The uio may also be NULL\n if a delete operation is being performed.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_setextattr_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tconst char *name,\n\tstruct uio *uio\n);\n/**\n @brief Access control check for setting flags\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param flags File flags; see chflags(2)\n\n Determine whether the subject identified by the credential can set\n the passed flags on the passed vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_setflags_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tu_long flags\n);\n/**\n @brief Access control check for setting mode\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param mode File mode; see chmod(2)\n\n Determine whether the subject identified by the credential can set\n the passed mode on the passed vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_setmode_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tmode_t mode\n);\n/**\n @brief Access control check for setting uid and gid\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param uid User ID\n @param gid Group ID\n\n Determine whether the subject identified by the credential can set\n the passed uid and passed gid as file uid and file gid on the passed\n vnode. The IDs may be set to (-1) to request no update.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_setowner_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tuid_t uid,\n\tgid_t gid\n);\n/**\n @brief Access control check for setting timestamps\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param atime Access time; see utimes(2)\n @param mtime Modification time; see utimes(2)\n\n Determine whether the subject identified by the credential can set\n the passed access timestamps on the passed vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_setutimes_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct timespec atime,\n\tstruct timespec mtime\n);\n/**\n @brief Access control check after determining the code directory hash\n @param vp vnode vnode to combine into proc\n @param label label associated with the vnode\n @param cs_blob the code signature to check\n @param cs_flags update code signing flags if needed\n @param flags operational flag to mpo_vnode_check_signature\n @param fatal_failure_desc description of fatal failure\n @param fatal_failure_desc_len failure description len, failure is fatal if non-0\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned.\n */\ntypedef int mpo_vnode_check_signature_t(\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct cs_blob *cs_blob,\n\tunsigned int *cs_flags,\n\tint flags,\n\tchar **fatal_failure_desc, size_t *fatal_failure_desc_len\n);\n/**\n @brief Access control check for stat\n @param active_cred Subject credential\n @param file_cred Credential associated with the struct fileproc\n @param vp Object vnode\n @param label Policy label for vp\n\n Determine whether the subject identified by the credential can stat\n the passed vnode. See stat(2) for more information. The active_cred\n hold the credentials of the subject performing the operation, and\n file_cred holds the credentials of the subject that originally\n opened the file.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_stat_t(\n\tstruct ucred *active_cred,\n\tstruct ucred *file_cred,\t/* NULLOK */\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for truncate/ftruncate\n @param active_cred Subject credential\n @param file_cred Credential associated with the struct fileproc\n @param vp Object vnode\n @param label Policy label for vp\n\n Determine whether the subject identified by the credential can\n perform a truncate operation on the passed vnode. The active_cred hold\n the credentials of the subject performing the operation, and\n file_cred holds the credentials of the subject that originally\n opened the file.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_truncate_t(\n\tkauth_cred_t active_cred,\n\tkauth_cred_t file_cred,\t/* NULLOK */\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Access control check for binding UNIX domain socket\n @param cred Subject credential\n @param dvp Directory vnode\n @param dlabel Policy label for dvp\n @param cnp Component name for dvp\n @param vap vnode attributes for vap\n\n Determine whether the subject identified by the credential can perform a\n bind operation on a UNIX domain socket with the passed parent directory,\n passed name information, and passed attribute information.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_uipc_bind_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct componentname *cnp,\n\tstruct vnode_attr *vap\n);\n/**\n @brief Access control check for connecting UNIX domain socket\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label associated with vp\n @param so Socket\n\n Determine whether the subject identified by the credential can perform a\n connect operation on the passed UNIX domain socket vnode.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_uipc_connect_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tsocket_t so\n);\n/**\n @brief Access control check for deleting vnode\n @param cred Subject credential\n @param dvp Parent directory vnode\n @param dlabel Policy label for dvp\n @param vp Object vnode to delete\n @param label Policy label for vp\n @param cnp Component name for vp\n @see mpo_check_rename_to_t\n\n Determine whether the subject identified by the credential can delete\n a vnode from the passed parent directory and passed name information.\n This call may be made in a number of situations, including as a\n results of calls to unlink(2) and rmdir(2). Policies implementing\n this entry point should also implement mpo_check_rename_to to\n authorize deletion of objects as a result of being the target of a rename.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_unlink_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct componentname *cnp\n);\n/**\n @brief Access control check for write\n @param active_cred Subject credential\n @param file_cred Credential associated with the struct fileproc\n @param vp Object vnode\n @param label Policy label for vp\n\n Determine whether the subject identified by the credential can\n perform a write operation on the passed vnode. The active_cred hold\n the credentials of the subject performing the operation, and\n file_cred holds the credentials of the subject that originally\n opened the file.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EACCES for label mismatch or\n EPERM for lack of privilege.\n*/\ntypedef int mpo_vnode_check_write_t(\n\tkauth_cred_t active_cred,\n\tkauth_cred_t file_cred,\t/* NULLOK */\n\tstruct vnode *vp,\n\tstruct label *label\n);\n/**\n @brief Associate a vnode with a devfs entry\n @param mp Devfs mount point\n @param mntlabel Devfs mount point label\n @param de Devfs directory entry\n @param delabel Label associated with de\n @param vp vnode associated with de\n @param vlabel Label associated with vp\n\n Fill in the label (vlabel) for a newly created devfs vnode. The\n label is typically derived from the label on the devfs directory\n entry or the label on the filesystem, supplied as parameters.\n*/\ntypedef void mpo_vnode_label_associate_devfs_t(\n\tstruct mount *mp,\n\tstruct label *mntlabel,\n\tstruct devnode *de,\n\tstruct label *delabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Associate a label with a vnode\n @param mp File system mount point\n @param mntlabel File system mount point label\n @param vp Vnode to label\n @param vlabel Label associated with vp\n\n Attempt to retrieve label information for the vnode, vp, from the\n file system extended attribute store. The label should be stored in\n the supplied vlabel parameter. If a policy cannot retrieve an\n extended attribute, sometimes it is acceptible to fallback to using\n the mntlabel.\n\n If the policy requires vnodes to have a valid label elsewhere it\n MUST NOT return other than temporary errors, and must always provide\n a valid label of some sort. Returning an error will cause vnode\n labeling to be retried at a later access. Failure to handle policy\n centric errors internally (corrupt labels etc.) will result in\n inaccessible files.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n*/\ntypedef int mpo_vnode_label_associate_extattr_t(\n\tstruct mount *mp,\n\tstruct label *mntlabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Associate a file label with a vnode\n @param cred User credential\n @param mp Fdesc mount point\n @param mntlabel Fdesc mount point label\n @param fg Fileglob structure\n @param label Policy label for fg\n @param vp Vnode to label\n @param vlabel Label associated with vp\n\n Associate label information for the vnode, vp, with the label of\n the open file descriptor described by fg.\n The label should be stored in the supplied vlabel parameter.\n*/\ntypedef void mpo_vnode_label_associate_file_t(\n\tstruct ucred *cred,\n\tstruct mount *mp,\n\tstruct label *mntlabel,\n\tstruct fileglob *fg,\n\tstruct label *label,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Associate a pipe label with a vnode\n @param cred User credential for the process that opened the pipe\n @param cpipe Pipe structure\n @param pipelabel Label associated with pipe\n @param vp Vnode to label\n @param vlabel Label associated with vp\n\n Associate label information for the vnode, vp, with the label of\n the pipe described by the pipe structure cpipe.\n The label should be stored in the supplied vlabel parameter.\n*/\ntypedef void mpo_vnode_label_associate_pipe_t(\n\tstruct ucred *cred,\n\tstruct pipe *cpipe,\n\tstruct label *pipelabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Associate a POSIX semaphore label with a vnode\n @param cred User credential for the process that create psem\n @param psem POSIX semaphore structure\n @param psemlabel Label associated with psem\n @param vp Vnode to label\n @param vlabel Label associated with vp\n\n Associate label information for the vnode, vp, with the label of\n the POSIX semaphore described by psem.\n The label should be stored in the supplied vlabel parameter.\n*/\ntypedef void mpo_vnode_label_associate_posixsem_t(\n\tstruct ucred *cred,\n\tstruct pseminfo *psem,\n\tstruct label *psemlabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Associate a POSIX shared memory label with a vnode\n @param cred User credential for the process that created pshm\n @param pshm POSIX shared memory structure\n @param pshmlabel Label associated with pshm\n @param vp Vnode to label\n @param vlabel Label associated with vp\n\n Associate label information for the vnode, vp, with the label of\n the POSIX shared memory region described by pshm.\n The label should be stored in the supplied vlabel parameter.\n*/\ntypedef void mpo_vnode_label_associate_posixshm_t(\n\tstruct ucred *cred,\n\tstruct pshminfo *pshm,\n\tstruct label *pshmlabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Associate a label with a vnode\n @param mp File system mount point\n @param mntlabel File system mount point label\n @param vp Vnode to label\n @param vlabel Label associated with vp\n\n On non-multilabel file systems, set the label for a vnode. The\n label will most likely be based on the file system label.\n*/\ntypedef void mpo_vnode_label_associate_singlelabel_t(\n\tstruct mount *mp,\n\tstruct label *mntlabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Associate a socket label with a vnode\n @param cred User credential for the process that opened the socket\n @param so Socket structure\n @param solabel Label associated with so\n @param vp Vnode to label\n @param vlabel Label associated with vp\n\n Associate label information for the vnode, vp, with the label of\n the open socket described by the socket structure so.\n The label should be stored in the supplied vlabel parameter.\n*/\ntypedef void mpo_vnode_label_associate_socket_t(\n\tkauth_cred_t cred,\n\tsocket_t so,\n\tstruct label *solabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel\n);\n/**\n @brief Copy a vnode label\n @param src Source vnode label\n @param dest Destination vnode label\n\n Copy the vnode label information from src to dest. On Darwin, this\n is currently only necessary when executing interpreted scripts, but\n will later be used if vnode label externalization cannot be an\n atomic operation.\n*/\ntypedef void mpo_vnode_label_copy_t(\n\tstruct label *src,\n\tstruct label *dest\n);\n/**\n @brief Destroy vnode label\n @param label The label to be destroyed\n\n Destroy a vnode label. Since the object is going out of scope,\n policy modules should free any internal storage associated with the\n label so that it may be destroyed.\n*/\ntypedef void mpo_vnode_label_destroy_t(\n\tstruct label *label\n);\n/**\n @brief Externalize a vnode label for auditing\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of the label\n\n Produce an external representation of the label on a vnode suitable for\n inclusion in an audit record. An externalized label consists of a text\n representation of the label contents that will be added to the audit record\n as part of a text token. Policy-agnostic user space tools will display\n this externalized version.\n\n @return 0 on success, return non-zero if an error occurs while\n externalizing the label data.\n\n*/\ntypedef int mpo_vnode_label_externalize_audit_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Externalize a vnode label\n @param label Label to be externalized\n @param element_name Name of the label namespace for which labels should be\n externalized\n @param sb String buffer to be filled with a text representation of the label\n\n Produce an external representation of the label on a vnode. An\n externalized label consists of a text representation of the label\n contents that can be used with user applications. Policy-agnostic\n user space tools will display this externalized version.\n\n @return 0 on success, return non-zero if an error occurs while\n externalizing the label data.\n\n*/\ntypedef int mpo_vnode_label_externalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tstruct sbuf *sb\n);\n/**\n @brief Initialize vnode label\n @param label New label to initialize\n\n Initialize label storage for use with a newly instantiated vnode, or\n for temporary storage associated with the copying in or out of a\n vnode label. While it is necessary to allocate space for a\n kernel-resident vnode label, it is not yet necessary to link this vnode\n with persistent label storage facilities, such as extended attributes.\n Sleeping is permitted.\n*/\ntypedef void mpo_vnode_label_init_t(\n\tstruct label *label\n);\n/**\n @brief Internalize a vnode label\n @param label Label to be internalized\n @param element_name Name of the label namespace for which the label should\n be internalized\n @param element_data Text data to be internalized\n\n Produce a vnode label from an external representation. An\n externalized label consists of a text representation of the label\n contents that can be used with user applications. Policy-agnostic\n user space tools will forward text version to the kernel for\n processing by individual policy modules.\n\n The policy's internalize entry points will be called only if the\n policy has registered interest in the label namespace.\n\n @return 0 on success, Otherwise, return non-zero if an error occurs\n while internalizing the label data.\n*/\ntypedef int mpo_vnode_label_internalize_t(\n\tstruct label *label,\n\tchar *element_name,\n\tchar *element_data\n);\n/**\n @brief Clean up a vnode label\n @param label The label to be cleaned for re-use\n\n Clean up a vnode label. Darwin (Tiger, 8.x) allocates vnodes on demand, but\n typically never frees them. Before vnodes are placed back on free lists for\n re-use, policies can cleanup or overwrite any information present in the label.\n*/\ntypedef void mpo_vnode_label_recycle_t(\n\tstruct label *label\n);\n/**\n @brief Write a label to a extended attribute\n @param cred Subject credential\n @param vp The vnode for which the label is being stored\n @param vlabel Label associated with vp\n @param intlabel The new label to store\n\n Store a new label in the extended attribute corresponding to the\n supplied vnode. The policy has already authorized the operation;\n this call must be implemented in order to perform the actual\n operation.\n\n @return In the event of an error, an appropriate value for errno\n should be returned, otherwise return 0 upon success.\n\n @warning XXX After examining the extended attribute implementation on\n Apple's future release, this entry point may be changed.\n*/\ntypedef int mpo_vnode_label_store_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct label *intlabel\n);\n/**\n @brief Update vnode label from extended attributes\n @param mp File system mount point\n @param mntlabel Mount point label\n @param vp Vnode to label\n @param vlabel Label associated with vp\n @param name Name of the xattr\n @see mpo_vnode_check_setextattr_t\n\n When an extended attribute is updated via the Vendor attribute management\n functions, the MAC vnode label might also require an update.\n Policies should first determine if 'name' matches their xattr label\n name. If it does, the kernel is has either replaced or removed the\n named extended attribute that was previously associated with the\n vnode. Normally labels should only be modified via MAC Framework label\n management calls, but sometimes the user space components will directly\n modify extended attributes. For example, 'cp', 'tar', etc. manage\n extended attributes in userspace, not the kernel.\n\n This entry point is called after the label update has occurred, so\n it cannot return a failure. However, the operation is preceded by\n the mpo_vnode_check_setextattr() access control check.\n\n If the vnode label needs to be updated the policy should return\n a non-zero value. The vnode label will be marked for re-association\n by the framework.\n*/\ntypedef int mpo_vnode_label_update_extattr_t(\n\tstruct mount *mp,\n\tstruct label *mntlabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tconst char *name\n);\n/**\n @brief Update a vnode label\n @param cred Subject credential\n @param vp The vnode to relabel\n @param vnodelabel Existing vnode label\n @param label New label to replace existing label\n @see mpo_vnode_check_label_update_t\n\n The subject identified by the credential has previously requested\n and was authorized to relabel the vnode; this entry point allows\n policies to perform the actual relabel operation. Policies should\n update vnodelabel using the label stored in the label parameter.\n*/\ntypedef void mpo_vnode_label_update_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *vnodelabel,\n\tstruct label *label\n);\n/**\n @brief Find deatched signatures for a shared library\n @param p file trying to find the signature\n @param vp The vnode to relabel\n @param offset offset in the macho that the signature is requested for (for fat binaries)\n @param label Existing vnode label\n\n*/\ntypedef int mpo_vnode_find_sigs_t(\n\tstruct proc *p,\n\tstruct vnode *vp,\n\toff_t offset,\n\tstruct label *label\n);\n/**\n @brief Create a new vnode, backed by extended attributes\n @param cred User credential for the creating process\n @param mp File system mount point\n @param mntlabel File system mount point label\n @param dvp Parent directory vnode\n @param dlabel Parent directory vnode label\n @param vp Newly created vnode\n @param vlabel Label to associate with the new vnode\n @param cnp Component name for vp\n\n Write out the label for the newly created vnode, most likely storing\n the results in a file system extended attribute. Most policies will\n derive the new vnode label using information from a combination\n of the subject (user) credential, the file system label, the parent\n directory label, and potentially the path name component.\n\n @return If the operation succeeds, store the new label in vlabel and\n return 0. Otherwise, return an appropriate errno value.\n*/\ntypedef int mpo_vnode_notify_create_t(\n\tkauth_cred_t cred,\n\tstruct mount *mp,\n\tstruct label *mntlabel,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct componentname *cnp\n);\n\n/**\n @brief Inform MAC policies that a vnode has been opened\n @param cred User credential for the creating process\n @param vp vnode opened\n @param label Policy label for the vp\n @param acc_mode open(2) access mode used\n\n Inform Mac policies that a vnode have been successfully opened\n (passing all MAC polices and DAC).\n*/\ntypedef void mpo_vnode_notify_open_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tint acc_mode\n);\n\n/**\n @brief Inform MAC policies that a vnode has been renamed\n @param cred User credential for the renaming process\n @param vp Vnode that's being renamed\n @param label Policy label for vp\n @param dvp Parent directory for the destination\n @param dlabel Policy label for dvp\n @param cnp Component name for the destination\n\n Inform MAC policies that a vnode has been renamed.\n */\ntypedef void mpo_vnode_notify_rename_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct componentname *cnp\n);\n\n/**\n @brief Inform MAC policies that a vnode has been linked\n @param cred User credential for the renaming process\n @param dvp Parent directory for the destination\n @param dlabel Policy label for dvp\n @param vp Vnode that's being linked\n @param vlabel Policy label for vp\n @param cnp Component name for the destination\n\n Inform MAC policies that a vnode has been linked.\n */\ntypedef void mpo_vnode_notify_link_t(\n\tkauth_cred_t cred,\n\tstruct vnode *dvp,\n\tstruct label *dlabel,\n\tstruct vnode *vp,\n\tstruct label *vlabel,\n\tstruct componentname *cnp\n);\n\n/**\n @brief Inform MAC policies that an extended attribute has been removed from a vnode\n @param cred Subject credential\n @param vp Object node\n @param label Policy label for vp\n @param name Extended attribute name\n\n Inform MAC policies that an extended attribute has been removed from a vnode.\n*/\ntypedef void mpo_vnode_notify_deleteextattr_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tconst char *name\n);\n\n\n/**\n @brief Inform MAC policies that an ACL has been set on a vnode\n @param cred Subject credential\n @param vp Object node\n @param label Policy label for vp\n @param acl ACL structure pointer\n\n Inform MAC policies that an ACL has been set on a vnode.\n*/\ntypedef void mpo_vnode_notify_setacl_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct kauth_acl *acl\n);\n\n/**\n @brief Inform MAC policies that an attributes have been set on a vnode\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param alist List of attributes to set\n\n Inform MAC policies that an attributes have been set on a vnode.\n*/\ntypedef void mpo_vnode_notify_setattrlist_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct attrlist *alist\n);\n\n/**\n @brief Inform MAC policies that an extended attribute has been set on a vnode\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param name Extended attribute name\n @param uio I/O structure pointer\n\n Inform MAC policies that an extended attribute has been set on a vnode.\n*/\ntypedef void mpo_vnode_notify_setextattr_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tconst char *name,\n\tstruct uio *uio\n);\n\n/**\n @brief Inform MAC policies that flags have been set on a vnode\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param flags File flags; see chflags(2)\n\n Inform MAC policies that flags have been set on a vnode.\n*/\ntypedef void mpo_vnode_notify_setflags_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tu_long flags\n);\n\n/**\n @brief Inform MAC policies that a new mode has been set on a vnode\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param mode File mode; see chmod(2)\n\n Inform MAC policies that a new mode has been set on a vnode.\n*/\ntypedef void mpo_vnode_notify_setmode_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tmode_t mode\n);\n\n/**\n @brief Inform MAC policies that new uid/gid have been set on a vnode\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param uid User ID\n @param gid Group ID\n\n Inform MAC policies that new uid/gid have been set on a vnode.\n*/\ntypedef void mpo_vnode_notify_setowner_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tuid_t uid,\n\tgid_t gid\n);\n\n/**\n @brief Inform MAC policies that new timestamps have been set on a vnode\n @param cred Subject credential\n @param vp Object vnode\n @param label Policy label for vp\n @param atime Access time; see utimes(2)\n @param mtime Modification time; see utimes(2)\n\n Inform MAC policies that new timestamps have been set on a vnode.\n*/\ntypedef void mpo_vnode_notify_setutimes_t(\n\tkauth_cred_t cred,\n\tstruct vnode *vp,\n\tstruct label *label,\n\tstruct timespec atime,\n\tstruct timespec mtime\n);\n\n/**\n @brief Inform MAC policies that a vnode has been truncated\n @param cred Subject credential\n @param file_cred Credential associated with the struct fileproc\n @param vp Object vnode\n @param label Policy label for vp\n\n Inform MAC policies that a vnode has been truncated.\n*/\ntypedef void mpo_vnode_notify_truncate_t(\n\tkauth_cred_t cred,\n\tkauth_cred_t file_cred,\n\tstruct vnode *vp,\n\tstruct label *label\n);\n\n\n/**\n @brief Inform MAC policies that a pty slave has been granted\n @param p Responsible process\n @param tp tty data structure\n @param dev Major and minor numbers of device\n @param label Policy label for tp\n \n Inform MAC policies that a pty slave has been granted.\n*/\ntypedef void mpo_pty_notify_grant_t(\n\tproc_t p,\n\tstruct tty *tp,\n\tdev_t dev,\n\tstruct label *label\n);\n\n/**\n @brief Inform MAC policies that a pty master has been closed\n @param p Responsible process\n @param tp tty data structure\n @param dev Major and minor numbers of device\n @param label Policy label for tp\n \n Inform MAC policies that a pty master has been closed.\n*/\ntypedef void mpo_pty_notify_close_t(\n\tproc_t p,\n\tstruct tty *tp,\n\tdev_t dev,\n\tstruct label *label\n);\n\n/**\n @brief Access control check for kext loading\n @param cred Subject credential\n @param identifier Kext identifier\n\n Determine whether the subject identified by the credential can load the\n specified kext.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EPERM for lack of privilege.\n*/\ntypedef int mpo_kext_check_load_t(\n\tkauth_cred_t cred,\n\tconst char *identifier\n);\n\n/**\n @brief Access control check for kext unloading\n @param cred Subject credential\n @param identifier Kext identifier\n\n Determine whether the subject identified by the credential can unload the\n specified kext.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EPERM for lack of privilege.\n*/\ntypedef int mpo_kext_check_unload_t(\n\tkauth_cred_t cred,\n\tconst char *identifier\n);\n\n/**\n @brief Access control check for querying information about loaded kexts\n @param cred Subject credential\n\n Determine whether the subject identified by the credential can query\n information about loaded kexts.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EPERM for lack of privilege.\n*/\ntypedef int mpo_kext_check_query_t(\n\tkauth_cred_t cred\n);\n\n/**\n @brief Access control check for getting NVRAM variables.\n @param cred Subject credential\n @param name NVRAM variable to get\n\n Determine whether the subject identifier by the credential can get the\n value of the named NVRAM variable.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EPERM for lack of privilege.\n*/\ntypedef int mpo_iokit_check_nvram_get_t(\n\tkauth_cred_t cred,\n\tconst char *name\n);\n\n/**\n @brief Access control check for setting NVRAM variables.\n @param cred Subject credential\n @param name NVRAM variable to set\n @param value The new value for the NVRAM variable\n\n Determine whether the subject identifier by the credential can set the\n value of the named NVRAM variable.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EPERM for lack of privilege.\n*/\ntypedef int mpo_iokit_check_nvram_set_t(\n\tkauth_cred_t cred,\n\tconst char *name,\n\tio_object_t value\n);\n\n/**\n @brief Access control check for deleting NVRAM variables.\n @param cred Subject credential\n @param name NVRAM variable to delete\n\n Determine whether the subject identifier by the credential can delete the\n named NVRAM variable.\n\n @return Return 0 if access is granted, otherwise an appropriate value for\n errno should be returned. Suggested failure: EPERM for lack of privilege.\n*/\ntypedef int mpo_iokit_check_nvram_delete_t(\n\tkauth_cred_t cred,\n\tconst char *name\n);\n\n/*\n * Placeholder for future events that may need mac hooks.\n */\ntypedef void mpo_reserved_hook_t(void);\n\n/*\n * Policy module operations.\n *\n * Please note that this should be kept in sync with the check assumptions\n * policy in bsd/kern/policy_check.c (policy_ops struct).\n */\n#define MAC_POLICY_OPS_VERSION 47 /* inc when new reserved slots are taken */\nstruct mac_policy_ops {\n\tmpo_audit_check_postselect_t\t\t*mpo_audit_check_postselect;\n\tmpo_audit_check_preselect_t\t\t*mpo_audit_check_preselect;\n\n\tmpo_bpfdesc_label_associate_t\t\t*mpo_bpfdesc_label_associate;\n\tmpo_bpfdesc_label_destroy_t\t\t*mpo_bpfdesc_label_destroy;\n\tmpo_bpfdesc_label_init_t\t\t*mpo_bpfdesc_label_init;\n\tmpo_bpfdesc_check_receive_t\t\t*mpo_bpfdesc_check_receive;\n\n\tmpo_cred_check_label_update_execve_t\t*mpo_cred_check_label_update_execve;\n\tmpo_cred_check_label_update_t\t\t*mpo_cred_check_label_update;\n\tmpo_cred_check_visible_t\t\t*mpo_cred_check_visible;\n\tmpo_cred_label_associate_fork_t\t\t*mpo_cred_label_associate_fork;\n\tmpo_cred_label_associate_kernel_t\t*mpo_cred_label_associate_kernel;\n\tmpo_cred_label_associate_t\t\t*mpo_cred_label_associate;\n\tmpo_cred_label_associate_user_t\t\t*mpo_cred_label_associate_user;\n\tmpo_cred_label_destroy_t\t\t*mpo_cred_label_destroy;\n\tmpo_cred_label_externalize_audit_t\t*mpo_cred_label_externalize_audit;\n\tmpo_cred_label_externalize_t\t\t*mpo_cred_label_externalize;\n\tmpo_cred_label_init_t\t\t\t*mpo_cred_label_init;\n\tmpo_cred_label_internalize_t\t\t*mpo_cred_label_internalize;\n\tmpo_cred_label_update_execve_t\t\t*mpo_cred_label_update_execve;\n\tmpo_cred_label_update_t\t\t\t*mpo_cred_label_update;\n\n\tmpo_devfs_label_associate_device_t\t*mpo_devfs_label_associate_device;\n\tmpo_devfs_label_associate_directory_t\t*mpo_devfs_label_associate_directory;\n\tmpo_devfs_label_copy_t\t\t\t*mpo_devfs_label_copy;\n\tmpo_devfs_label_destroy_t\t\t*mpo_devfs_label_destroy;\n\tmpo_devfs_label_init_t\t\t\t*mpo_devfs_label_init;\n\tmpo_devfs_label_update_t\t\t*mpo_devfs_label_update;\n\n\tmpo_file_check_change_offset_t\t\t*mpo_file_check_change_offset;\n\tmpo_file_check_create_t\t\t\t*mpo_file_check_create;\n\tmpo_file_check_dup_t\t\t\t*mpo_file_check_dup;\n\tmpo_file_check_fcntl_t\t\t\t*mpo_file_check_fcntl;\n\tmpo_file_check_get_offset_t\t\t*mpo_file_check_get_offset;\n\tmpo_file_check_get_t\t\t\t*mpo_file_check_get;\n\tmpo_file_check_inherit_t\t\t*mpo_file_check_inherit;\n\tmpo_file_check_ioctl_t\t\t\t*mpo_file_check_ioctl;\n\tmpo_file_check_lock_t\t\t\t*mpo_file_check_lock;\n\tmpo_file_check_mmap_downgrade_t\t\t*mpo_file_check_mmap_downgrade;\n\tmpo_file_check_mmap_t\t\t\t*mpo_file_check_mmap;\n\tmpo_file_check_receive_t\t\t*mpo_file_check_receive;\n\tmpo_file_check_set_t\t\t\t*mpo_file_check_set;\n\tmpo_file_label_init_t\t\t\t*mpo_file_label_init;\n\tmpo_file_label_destroy_t\t\t*mpo_file_label_destroy;\n\tmpo_file_label_associate_t\t\t*mpo_file_label_associate;\n\n\tmpo_ifnet_check_label_update_t\t\t*mpo_ifnet_check_label_update;\n\tmpo_ifnet_check_transmit_t\t\t*mpo_ifnet_check_transmit;\n\tmpo_ifnet_label_associate_t\t\t*mpo_ifnet_label_associate;\n\tmpo_ifnet_label_copy_t\t\t\t*mpo_ifnet_label_copy;\n\tmpo_ifnet_label_destroy_t\t\t*mpo_ifnet_label_destroy;\n\tmpo_ifnet_label_externalize_t\t\t*mpo_ifnet_label_externalize;\n\tmpo_ifnet_label_init_t\t\t\t*mpo_ifnet_label_init;\n\tmpo_ifnet_label_internalize_t\t\t*mpo_ifnet_label_internalize;\n\tmpo_ifnet_label_update_t\t\t*mpo_ifnet_label_update;\n\tmpo_ifnet_label_recycle_t\t\t*mpo_ifnet_label_recycle;\n\n\tmpo_inpcb_check_deliver_t\t\t*mpo_inpcb_check_deliver;\n\tmpo_inpcb_label_associate_t\t\t*mpo_inpcb_label_associate;\n\tmpo_inpcb_label_destroy_t\t\t*mpo_inpcb_label_destroy;\n\tmpo_inpcb_label_init_t\t\t\t*mpo_inpcb_label_init;\n\tmpo_inpcb_label_recycle_t\t\t*mpo_inpcb_label_recycle;\n\tmpo_inpcb_label_update_t\t\t*mpo_inpcb_label_update;\n\n\tmpo_iokit_check_device_t\t\t*mpo_iokit_check_device;\n\n\tmpo_ipq_label_associate_t\t\t*mpo_ipq_label_associate;\n\tmpo_ipq_label_compare_t\t\t\t*mpo_ipq_label_compare;\n\tmpo_ipq_label_destroy_t\t\t\t*mpo_ipq_label_destroy;\n\tmpo_ipq_label_init_t\t\t\t*mpo_ipq_label_init;\n\tmpo_ipq_label_update_t\t\t\t*mpo_ipq_label_update;\n\n\tmpo_file_check_library_validation_t *mpo_file_check_library_validation;\n\tmpo_vnode_notify_setacl_t *mpo_vnode_notify_setacl;\n\tmpo_vnode_notify_setattrlist_t *mpo_vnode_notify_setattrlist;\n\tmpo_vnode_notify_setextattr_t *mpo_vnode_notify_setextattr;\n\tmpo_vnode_notify_setflags_t *mpo_vnode_notify_setflags;\n\tmpo_vnode_notify_setmode_t *mpo_vnode_notify_setmode;\n\tmpo_vnode_notify_setowner_t *mpo_vnode_notify_setowner;\n\tmpo_vnode_notify_setutimes_t *mpo_vnode_notify_setutimes;\n\tmpo_vnode_notify_truncate_t *mpo_vnode_notify_truncate;\n\n\tmpo_mbuf_label_associate_bpfdesc_t\t*mpo_mbuf_label_associate_bpfdesc;\n\tmpo_mbuf_label_associate_ifnet_t\t*mpo_mbuf_label_associate_ifnet;\n\tmpo_mbuf_label_associate_inpcb_t\t*mpo_mbuf_label_associate_inpcb;\n\tmpo_mbuf_label_associate_ipq_t\t\t*mpo_mbuf_label_associate_ipq;\n\tmpo_mbuf_label_associate_linklayer_t\t*mpo_mbuf_label_associate_linklayer;\n\tmpo_mbuf_label_associate_multicast_encap_t *mpo_mbuf_label_associate_multicast_encap;\n\tmpo_mbuf_label_associate_netlayer_t\t*mpo_mbuf_label_associate_netlayer;\n\tmpo_mbuf_label_associate_socket_t\t*mpo_mbuf_label_associate_socket;\n\tmpo_mbuf_label_copy_t\t\t\t*mpo_mbuf_label_copy;\n\tmpo_mbuf_label_destroy_t\t\t*mpo_mbuf_label_destroy;\n\tmpo_mbuf_label_init_t\t\t\t*mpo_mbuf_label_init;\n\n\tmpo_mount_check_fsctl_t\t\t\t*mpo_mount_check_fsctl;\n\tmpo_mount_check_getattr_t\t\t*mpo_mount_check_getattr;\n\tmpo_mount_check_label_update_t\t\t*mpo_mount_check_label_update;\n\tmpo_mount_check_mount_t\t\t\t*mpo_mount_check_mount;\n\tmpo_mount_check_remount_t\t\t*mpo_mount_check_remount;\n\tmpo_mount_check_setattr_t\t\t*mpo_mount_check_setattr;\n\tmpo_mount_check_stat_t\t\t\t*mpo_mount_check_stat;\n\tmpo_mount_check_umount_t\t\t*mpo_mount_check_umount;\n\tmpo_mount_label_associate_t\t\t*mpo_mount_label_associate;\n\tmpo_mount_label_destroy_t\t\t*mpo_mount_label_destroy;\n\tmpo_mount_label_externalize_t\t\t*mpo_mount_label_externalize;\n\tmpo_mount_label_init_t\t\t\t*mpo_mount_label_init;\n\tmpo_mount_label_internalize_t\t\t*mpo_mount_label_internalize;\n\n\tmpo_netinet_fragment_t\t\t\t*mpo_netinet_fragment;\n\tmpo_netinet_icmp_reply_t\t\t*mpo_netinet_icmp_reply;\n\tmpo_netinet_tcp_reply_t\t\t\t*mpo_netinet_tcp_reply;\n\n\tmpo_pipe_check_ioctl_t\t\t\t*mpo_pipe_check_ioctl;\n\tmpo_pipe_check_kqfilter_t\t\t*mpo_pipe_check_kqfilter;\n\tmpo_pipe_check_label_update_t\t\t*mpo_pipe_check_label_update;\n\tmpo_pipe_check_read_t\t\t\t*mpo_pipe_check_read;\n\tmpo_pipe_check_select_t\t\t\t*mpo_pipe_check_select;\n\tmpo_pipe_check_stat_t\t\t\t*mpo_pipe_check_stat;\n\tmpo_pipe_check_write_t\t\t\t*mpo_pipe_check_write;\n\tmpo_pipe_label_associate_t\t\t*mpo_pipe_label_associate;\n\tmpo_pipe_label_copy_t\t\t\t*mpo_pipe_label_copy;\n\tmpo_pipe_label_destroy_t\t\t*mpo_pipe_label_destroy;\n\tmpo_pipe_label_externalize_t\t\t*mpo_pipe_label_externalize;\n\tmpo_pipe_label_init_t\t\t\t*mpo_pipe_label_init;\n\tmpo_pipe_label_internalize_t\t\t*mpo_pipe_label_internalize;\n\tmpo_pipe_label_update_t\t\t\t*mpo_pipe_label_update;\n\n\tmpo_policy_destroy_t\t\t\t*mpo_policy_destroy;\n\tmpo_policy_init_t\t\t\t*mpo_policy_init;\n\tmpo_policy_initbsd_t\t\t\t*mpo_policy_initbsd;\n\tmpo_policy_syscall_t\t\t\t*mpo_policy_syscall;\n\n\tmpo_system_check_sysctlbyname_t\t\t*mpo_system_check_sysctlbyname;\n\tmpo_proc_check_inherit_ipc_ports_t\t*mpo_proc_check_inherit_ipc_ports;\n\tmpo_vnode_check_rename_t\t\t*mpo_vnode_check_rename;\n\tmpo_kext_check_query_t\t\t\t*mpo_kext_check_query;\n\tmpo_iokit_check_nvram_get_t\t\t*mpo_iokit_check_nvram_get;\n\tmpo_iokit_check_nvram_set_t\t\t*mpo_iokit_check_nvram_set;\n\tmpo_iokit_check_nvram_delete_t\t\t*mpo_iokit_check_nvram_delete;\n\tmpo_proc_check_expose_task_t\t\t*mpo_proc_check_expose_task;\n\tmpo_proc_check_set_host_special_port_t\t*mpo_proc_check_set_host_special_port;\n\tmpo_proc_check_set_host_exception_port_t *mpo_proc_check_set_host_exception_port;\n\tmpo_exc_action_check_exception_send_t\t*mpo_exc_action_check_exception_send;\n\tmpo_exc_action_label_associate_t\t*mpo_exc_action_label_associate;\n\tmpo_exc_action_label_copy_t\t\t*mpo_exc_action_label_copy;\n\tmpo_exc_action_label_destroy_t\t\t*mpo_exc_action_label_destroy;\n\tmpo_exc_action_label_init_t\t\t*mpo_exc_action_label_init;\n\tmpo_exc_action_label_update_t\t\t*mpo_exc_action_label_update;\n\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved1;\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved2;\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved3;\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved4;\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved5;\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved6;\n\n\tmpo_posixsem_check_create_t\t\t*mpo_posixsem_check_create;\n\tmpo_posixsem_check_open_t\t\t*mpo_posixsem_check_open;\n\tmpo_posixsem_check_post_t\t\t*mpo_posixsem_check_post;\n\tmpo_posixsem_check_unlink_t\t\t*mpo_posixsem_check_unlink;\n\tmpo_posixsem_check_wait_t\t\t*mpo_posixsem_check_wait;\n\tmpo_posixsem_label_associate_t\t\t*mpo_posixsem_label_associate;\n\tmpo_posixsem_label_destroy_t\t\t*mpo_posixsem_label_destroy;\n\tmpo_posixsem_label_init_t\t\t*mpo_posixsem_label_init;\n\tmpo_posixshm_check_create_t\t\t*mpo_posixshm_check_create;\n\tmpo_posixshm_check_mmap_t\t\t*mpo_posixshm_check_mmap;\n\tmpo_posixshm_check_open_t\t\t*mpo_posixshm_check_open;\n\tmpo_posixshm_check_stat_t\t\t*mpo_posixshm_check_stat;\n\tmpo_posixshm_check_truncate_t\t\t*mpo_posixshm_check_truncate;\n\tmpo_posixshm_check_unlink_t\t\t*mpo_posixshm_check_unlink;\n\tmpo_posixshm_label_associate_t\t\t*mpo_posixshm_label_associate;\n\tmpo_posixshm_label_destroy_t\t\t*mpo_posixshm_label_destroy;\n\tmpo_posixshm_label_init_t\t\t*mpo_posixshm_label_init;\n\n\tmpo_proc_check_debug_t\t\t\t*mpo_proc_check_debug;\n\tmpo_proc_check_fork_t\t\t\t*mpo_proc_check_fork;\n\tmpo_proc_check_get_task_name_t\t\t*mpo_proc_check_get_task_name;\n\tmpo_proc_check_get_task_t\t\t*mpo_proc_check_get_task;\n\tmpo_proc_check_getaudit_t\t\t*mpo_proc_check_getaudit;\n\tmpo_proc_check_getauid_t\t\t*mpo_proc_check_getauid;\n\tmpo_proc_check_getlcid_t\t\t*mpo_proc_check_getlcid;\n\tmpo_proc_check_mprotect_t\t\t*mpo_proc_check_mprotect;\n\tmpo_proc_check_sched_t\t\t\t*mpo_proc_check_sched;\n\tmpo_proc_check_setaudit_t\t\t*mpo_proc_check_setaudit;\n\tmpo_proc_check_setauid_t\t\t*mpo_proc_check_setauid;\n\tmpo_proc_check_setlcid_t\t\t*mpo_proc_check_setlcid;\n\tmpo_proc_check_signal_t\t\t\t*mpo_proc_check_signal;\n\tmpo_proc_check_wait_t\t\t\t*mpo_proc_check_wait;\n\tmpo_proc_label_destroy_t\t\t*mpo_proc_label_destroy;\n\tmpo_proc_label_init_t\t\t\t*mpo_proc_label_init;\n\n\tmpo_socket_check_accept_t\t\t*mpo_socket_check_accept;\n\tmpo_socket_check_accepted_t\t\t*mpo_socket_check_accepted;\n\tmpo_socket_check_bind_t\t\t\t*mpo_socket_check_bind;\n\tmpo_socket_check_connect_t\t\t*mpo_socket_check_connect;\n\tmpo_socket_check_create_t\t\t*mpo_socket_check_create;\n\tmpo_socket_check_deliver_t\t\t*mpo_socket_check_deliver;\n\tmpo_socket_check_kqfilter_t\t\t*mpo_socket_check_kqfilter;\n\tmpo_socket_check_label_update_t\t\t*mpo_socket_check_label_update;\n\tmpo_socket_check_listen_t\t\t*mpo_socket_check_listen;\n\tmpo_socket_check_receive_t\t\t*mpo_socket_check_receive;\n\tmpo_socket_check_received_t\t\t*mpo_socket_check_received;\n\tmpo_socket_check_select_t\t\t*mpo_socket_check_select;\n\tmpo_socket_check_send_t\t\t\t*mpo_socket_check_send;\n\tmpo_socket_check_stat_t\t\t\t*mpo_socket_check_stat;\n\tmpo_socket_check_setsockopt_t\t\t*mpo_socket_check_setsockopt;\n\tmpo_socket_check_getsockopt_t\t\t*mpo_socket_check_getsockopt;\n\tmpo_socket_label_associate_accept_t\t*mpo_socket_label_associate_accept;\n\tmpo_socket_label_associate_t\t\t*mpo_socket_label_associate;\n\tmpo_socket_label_copy_t\t\t\t*mpo_socket_label_copy;\n\tmpo_socket_label_destroy_t\t\t*mpo_socket_label_destroy;\n\tmpo_socket_label_externalize_t\t\t*mpo_socket_label_externalize;\n\tmpo_socket_label_init_t\t\t\t*mpo_socket_label_init;\n\tmpo_socket_label_internalize_t\t\t*mpo_socket_label_internalize;\n\tmpo_socket_label_update_t\t\t*mpo_socket_label_update;\n\n\tmpo_socketpeer_label_associate_mbuf_t\t*mpo_socketpeer_label_associate_mbuf;\n\tmpo_socketpeer_label_associate_socket_t\t*mpo_socketpeer_label_associate_socket;\n\tmpo_socketpeer_label_destroy_t\t\t*mpo_socketpeer_label_destroy;\n\tmpo_socketpeer_label_externalize_t\t*mpo_socketpeer_label_externalize;\n\tmpo_socketpeer_label_init_t\t\t*mpo_socketpeer_label_init;\n\n\tmpo_system_check_acct_t\t\t\t*mpo_system_check_acct;\n\tmpo_system_check_audit_t\t\t*mpo_system_check_audit;\n\tmpo_system_check_auditctl_t\t\t*mpo_system_check_auditctl;\n\tmpo_system_check_auditon_t\t\t*mpo_system_check_auditon;\n\tmpo_system_check_host_priv_t\t\t*mpo_system_check_host_priv;\n\tmpo_system_check_nfsd_t\t\t\t*mpo_system_check_nfsd;\n\tmpo_system_check_reboot_t\t\t*mpo_system_check_reboot;\n\tmpo_system_check_settime_t\t\t*mpo_system_check_settime;\n\tmpo_system_check_swapoff_t\t\t*mpo_system_check_swapoff;\n\tmpo_system_check_swapon_t\t\t*mpo_system_check_swapon;\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved7;\n\n\tmpo_sysvmsg_label_associate_t\t\t*mpo_sysvmsg_label_associate;\n\tmpo_sysvmsg_label_destroy_t\t\t*mpo_sysvmsg_label_destroy;\n\tmpo_sysvmsg_label_init_t\t\t*mpo_sysvmsg_label_init;\n\tmpo_sysvmsg_label_recycle_t\t\t*mpo_sysvmsg_label_recycle;\n\tmpo_sysvmsq_check_enqueue_t\t\t*mpo_sysvmsq_check_enqueue;\n\tmpo_sysvmsq_check_msgrcv_t\t\t*mpo_sysvmsq_check_msgrcv;\n\tmpo_sysvmsq_check_msgrmid_t\t\t*mpo_sysvmsq_check_msgrmid;\n\tmpo_sysvmsq_check_msqctl_t\t\t*mpo_sysvmsq_check_msqctl;\n\tmpo_sysvmsq_check_msqget_t\t\t*mpo_sysvmsq_check_msqget;\n\tmpo_sysvmsq_check_msqrcv_t\t\t*mpo_sysvmsq_check_msqrcv;\n\tmpo_sysvmsq_check_msqsnd_t\t\t*mpo_sysvmsq_check_msqsnd;\n\tmpo_sysvmsq_label_associate_t\t\t*mpo_sysvmsq_label_associate;\n\tmpo_sysvmsq_label_destroy_t\t\t*mpo_sysvmsq_label_destroy;\n\tmpo_sysvmsq_label_init_t\t\t*mpo_sysvmsq_label_init;\n\tmpo_sysvmsq_label_recycle_t\t\t*mpo_sysvmsq_label_recycle;\n\tmpo_sysvsem_check_semctl_t\t\t*mpo_sysvsem_check_semctl;\n\tmpo_sysvsem_check_semget_t\t\t*mpo_sysvsem_check_semget;\n\tmpo_sysvsem_check_semop_t\t\t*mpo_sysvsem_check_semop;\n\tmpo_sysvsem_label_associate_t\t\t*mpo_sysvsem_label_associate;\n\tmpo_sysvsem_label_destroy_t\t\t*mpo_sysvsem_label_destroy;\n\tmpo_sysvsem_label_init_t\t\t*mpo_sysvsem_label_init;\n\tmpo_sysvsem_label_recycle_t\t\t*mpo_sysvsem_label_recycle;\n\tmpo_sysvshm_check_shmat_t\t\t*mpo_sysvshm_check_shmat;\n\tmpo_sysvshm_check_shmctl_t\t\t*mpo_sysvshm_check_shmctl;\n\tmpo_sysvshm_check_shmdt_t\t\t*mpo_sysvshm_check_shmdt;\n\tmpo_sysvshm_check_shmget_t\t\t*mpo_sysvshm_check_shmget;\n\tmpo_sysvshm_label_associate_t\t\t*mpo_sysvshm_label_associate;\n\tmpo_sysvshm_label_destroy_t\t\t*mpo_sysvshm_label_destroy;\n\tmpo_sysvshm_label_init_t\t\t*mpo_sysvshm_label_init;\n\tmpo_sysvshm_label_recycle_t\t\t*mpo_sysvshm_label_recycle;\n\n\tmpo_reserved_hook_t\t\t\t*mpo_reserved8;\n\tmpo_mount_check_snapshot_revert_t\t*mpo_mount_check_snapshot_revert;\n\tmpo_vnode_check_getattr_t\t\t*mpo_vnode_check_getattr;\n\tmpo_mount_check_snapshot_create_t\t*mpo_mount_check_snapshot_create;\n\tmpo_mount_check_snapshot_delete_t\t*mpo_mount_check_snapshot_delete;\n\tmpo_vnode_check_clone_t\t\t\t*mpo_vnode_check_clone;\n\tmpo_proc_check_get_cs_info_t\t\t*mpo_proc_check_get_cs_info;\n\tmpo_proc_check_set_cs_info_t\t\t*mpo_proc_check_set_cs_info;\n\n\tmpo_iokit_check_hid_control_t\t\t*mpo_iokit_check_hid_control;\n\n\tmpo_vnode_check_access_t\t\t*mpo_vnode_check_access;\n\tmpo_vnode_check_chdir_t\t\t\t*mpo_vnode_check_chdir;\n\tmpo_vnode_check_chroot_t\t\t*mpo_vnode_check_chroot;\n\tmpo_vnode_check_create_t\t\t*mpo_vnode_check_create;\n\tmpo_vnode_check_deleteextattr_t\t\t*mpo_vnode_check_deleteextattr;\n\tmpo_vnode_check_exchangedata_t\t\t*mpo_vnode_check_exchangedata;\n\tmpo_vnode_check_exec_t\t\t\t*mpo_vnode_check_exec;\n\tmpo_vnode_check_getattrlist_t\t\t*mpo_vnode_check_getattrlist;\n\tmpo_vnode_check_getextattr_t\t\t*mpo_vnode_check_getextattr;\n\tmpo_vnode_check_ioctl_t\t\t\t*mpo_vnode_check_ioctl;\n\tmpo_vnode_check_kqfilter_t\t\t*mpo_vnode_check_kqfilter;\n\tmpo_vnode_check_label_update_t\t\t*mpo_vnode_check_label_update;\n\tmpo_vnode_check_link_t\t\t\t*mpo_vnode_check_link;\n\tmpo_vnode_check_listextattr_t\t\t*mpo_vnode_check_listextattr;\n\tmpo_vnode_check_lookup_t\t\t*mpo_vnode_check_lookup;\n\tmpo_vnode_check_open_t\t\t\t*mpo_vnode_check_open;\n\tmpo_vnode_check_read_t\t\t\t*mpo_vnode_check_read;\n\tmpo_vnode_check_readdir_t\t\t*mpo_vnode_check_readdir;\n\tmpo_vnode_check_readlink_t\t\t*mpo_vnode_check_readlink;\n\tmpo_vnode_check_rename_from_t\t\t*mpo_vnode_check_rename_from;\n\tmpo_vnode_check_rename_to_t\t\t*mpo_vnode_check_rename_to;\n\tmpo_vnode_check_revoke_t\t\t*mpo_vnode_check_revoke;\n\tmpo_vnode_check_select_t\t\t*mpo_vnode_check_select;\n\tmpo_vnode_check_setattrlist_t\t\t*mpo_vnode_check_setattrlist;\n\tmpo_vnode_check_setextattr_t\t\t*mpo_vnode_check_setextattr;\n\tmpo_vnode_check_setflags_t\t\t*mpo_vnode_check_setflags;\n\tmpo_vnode_check_setmode_t\t\t*mpo_vnode_check_setmode;\n\tmpo_vnode_check_setowner_t\t\t*mpo_vnode_check_setowner;\n\tmpo_vnode_check_setutimes_t\t\t*mpo_vnode_check_setutimes;\n\tmpo_vnode_check_stat_t\t\t\t*mpo_vnode_check_stat;\n\tmpo_vnode_check_truncate_t\t\t*mpo_vnode_check_truncate;\n\tmpo_vnode_check_unlink_t\t\t*mpo_vnode_check_unlink;\n\tmpo_vnode_check_write_t\t\t\t*mpo_vnode_check_write;\n\tmpo_vnode_label_associate_devfs_t\t*mpo_vnode_label_associate_devfs;\n\tmpo_vnode_label_associate_extattr_t\t*mpo_vnode_label_associate_extattr;\n\tmpo_vnode_label_associate_file_t\t*mpo_vnode_label_associate_file;\n\tmpo_vnode_label_associate_pipe_t\t*mpo_vnode_label_associate_pipe;\n\tmpo_vnode_label_associate_posixsem_t\t*mpo_vnode_label_associate_posixsem;\n\tmpo_vnode_label_associate_posixshm_t\t*mpo_vnode_label_associate_posixshm;\n\tmpo_vnode_label_associate_singlelabel_t\t*mpo_vnode_label_associate_singlelabel;\n\tmpo_vnode_label_associate_socket_t\t*mpo_vnode_label_associate_socket;\n\tmpo_vnode_label_copy_t\t\t\t*mpo_vnode_label_copy;\n\tmpo_vnode_label_destroy_t\t\t*mpo_vnode_label_destroy;\n\tmpo_vnode_label_externalize_audit_t\t*mpo_vnode_label_externalize_audit;\n\tmpo_vnode_label_externalize_t\t\t*mpo_vnode_label_externalize;\n\tmpo_vnode_label_init_t\t\t\t*mpo_vnode_label_init;\n\tmpo_vnode_label_internalize_t\t\t*mpo_vnode_label_internalize;\n\tmpo_vnode_label_recycle_t\t\t*mpo_vnode_label_recycle;\n\tmpo_vnode_label_store_t\t\t\t*mpo_vnode_label_store;\n\tmpo_vnode_label_update_extattr_t\t*mpo_vnode_label_update_extattr;\n\tmpo_vnode_label_update_t\t\t*mpo_vnode_label_update;\n\tmpo_vnode_notify_create_t\t\t*mpo_vnode_notify_create;\n\tmpo_vnode_check_signature_t\t\t*mpo_vnode_check_signature;\n\tmpo_vnode_check_uipc_bind_t\t\t*mpo_vnode_check_uipc_bind;\n\tmpo_vnode_check_uipc_connect_t\t\t*mpo_vnode_check_uipc_connect;\n\n\tmpo_proc_check_run_cs_invalid_t\t\t*mpo_proc_check_run_cs_invalid;\n\tmpo_proc_check_suspend_resume_t\t\t*mpo_proc_check_suspend_resume;\n\n\tmpo_thread_userret_t\t\t\t*mpo_thread_userret;\n\n\tmpo_iokit_check_set_properties_t\t*mpo_iokit_check_set_properties;\n\n\tmpo_system_check_chud_t\t\t\t*mpo_system_check_chud;\n\n\tmpo_vnode_check_searchfs_t\t\t*mpo_vnode_check_searchfs;\n\n\tmpo_priv_check_t\t\t\t*mpo_priv_check;\n\tmpo_priv_grant_t\t\t\t*mpo_priv_grant;\n\n\tmpo_proc_check_map_anon_t\t\t*mpo_proc_check_map_anon;\n\n\tmpo_vnode_check_fsgetpath_t\t\t*mpo_vnode_check_fsgetpath;\n\n\tmpo_iokit_check_open_t\t\t\t*mpo_iokit_check_open;\n\n \tmpo_proc_check_ledger_t\t\t\t*mpo_proc_check_ledger;\n\n\tmpo_vnode_notify_rename_t\t\t*mpo_vnode_notify_rename;\n\n\tmpo_vnode_check_setacl_t\t\t*mpo_vnode_check_setacl;\n\n\tmpo_vnode_notify_deleteextattr_t *mpo_vnode_notify_deleteextattr;\n\n\tmpo_system_check_kas_info_t\t\t*mpo_system_check_kas_info;\n\n\tmpo_proc_check_cpumon_t\t\t\t*mpo_proc_check_cpumon;\n\n\tmpo_vnode_notify_open_t\t\t\t*mpo_vnode_notify_open;\n\n\tmpo_system_check_info_t\t\t\t*mpo_system_check_info;\n\n\tmpo_pty_notify_grant_t \t\t\t*mpo_pty_notify_grant;\n\tmpo_pty_notify_close_t\t\t\t*mpo_pty_notify_close;\n\n\tmpo_vnode_find_sigs_t\t\t\t*mpo_vnode_find_sigs;\n\n\tmpo_kext_check_load_t\t\t\t*mpo_kext_check_load;\n\tmpo_kext_check_unload_t\t\t\t*mpo_kext_check_unload;\n\n\tmpo_proc_check_proc_info_t\t\t*mpo_proc_check_proc_info;\n\tmpo_vnode_notify_link_t\t\t\t*mpo_vnode_notify_link;\n\tmpo_iokit_check_filter_properties_t\t*mpo_iokit_check_filter_properties;\n\tmpo_iokit_check_get_property_t\t\t*mpo_iokit_check_get_property;\n};\n\n/**\n @brief MAC policy handle type\n\n The MAC handle is used to uniquely identify a loaded policy within\n the MAC Framework.\n\n A variable of this type is set by mac_policy_register().\n */\ntypedef unsigned int mac_policy_handle_t;\n\n#define mpc_t\tstruct mac_policy_conf *\n\n/**\n @brief Mac policy configuration\n\n This structure specifies the configuration information for a\n MAC policy module. A policy module developer must supply\n a short unique policy name, a more descriptive full name, a list of label\n namespaces and count, a pointer to the registered enty point operations,\n any load time flags, and optionally, a pointer to a label slot identifier.\n\n The Framework will update the runtime flags (mpc_runtime_flags) to\n indicate that the module has been registered.\n\n If the label slot identifier (mpc_field_off) is NULL, the Framework\n will not provide label storage for the policy. Otherwise, the\n Framework will store the label location (slot) in this field.\n\n The mpc_list field is used by the Framework and should not be\n modified by policies.\n*/\n/* XXX - reorder these for better aligment on 64bit platforms */\nstruct mac_policy_conf {\n\tconst char\t\t*mpc_name;\t\t/** policy name */\n\tconst char\t\t*mpc_fullname;\t\t/** full name */\n\tchar const * const *mpc_labelnames;\t/** managed label namespaces */\n\tunsigned int\t\t mpc_labelname_count;\t/** number of managed label namespaces */\n\tstruct mac_policy_ops\t*mpc_ops;\t\t/** operation vector */\n\tint\t\t\t mpc_loadtime_flags;\t/** load time flags */\n\tint\t\t\t*mpc_field_off;\t\t/** label slot */\n\tint\t\t\t mpc_runtime_flags;\t/** run time flags */\n\tmpc_t\t\t\t mpc_list;\t\t/** List reference */\n\tvoid\t\t\t*mpc_data;\t\t/** module data */\n};\n\n/**\n @brief MAC policy module registration routine\n\n This function is called to register a policy with the\n MAC framework. A policy module will typically call this from the\n Darwin KEXT registration routine.\n */\nint\tmac_policy_register(struct mac_policy_conf *mpc,\n mac_policy_handle_t *handlep, void *xd);\n\n/**\n @brief MAC policy module de-registration routine\n\n This function is called to de-register a policy with theD\n MAC framework. A policy module will typically call this from the\n Darwin KEXT de-registration routine.\n */\nint\tmac_policy_unregister(mac_policy_handle_t handle);\n\n/*\n * Framework entry points for the policies to add audit data.\n */\nint\tmac_audit_text(char *text, mac_policy_handle_t handle);\n\n/*\n * Calls to assist with use of Apple XATTRs within policy modules.\n */\nint\tmac_vnop_setxattr(struct vnode *, const char *, char *, size_t);\nint\tmac_vnop_getxattr(struct vnode *, const char *, char *, size_t,\n\t\t\t size_t *);\nint\tmac_vnop_removexattr(struct vnode *, const char *);\n\n/**\n @brief Set an extended attribute on a vnode-based fileglob.\n @param fg fileglob representing file to attach the extended attribute\n @param name extended attribute name\n @param buf buffer of data to use as the extended attribute value\n @param len size of buffer\n\n Sets the value of an extended attribute on a file.\n\n Caller must hold an iocount on the vnode represented by the fileglob.\n*/\nint\tmac_file_setxattr(struct fileglob *fg, const char *name, char *buf, size_t len);\n\n/**\n\t@brief Get an extended attribute from a vnode-based fileglob.\n\t@param fg fileglob representing file to read the extended attribute\n\t@param name extended attribute name\n\t@param buf buffer of data to hold the extended attribute value\n\t@param len size of buffer\n\t@param attrlen size of full extended attribute value\n\n\tGets the value of an extended attribute on a file.\n\n\tCaller must hold an iocount on the vnode represented by the fileglob.\n*/\nint\tmac_file_getxattr(struct fileglob *fg, const char *name, char *buf, size_t len,\n\t\t\t size_t *attrlen);\n\n/**\n\t@brief Remove an extended attribute from a vnode-based fileglob.\n\t@param fg fileglob representing file to remove the extended attribute\n\t@param name extended attribute name\n\n\tRemoves the named extended attribute from the file.\n\n\tCaller must hold an iocount on the vnode represented by the fileglob.\n*/\nint\tmac_file_removexattr(struct fileglob *fg, const char *name);\n\n\n/*\n * Arbitrary limit on how much data will be logged by the audit\n * entry points above.\n */\n#define\tMAC_AUDIT_DATA_LIMIT\t1024\n\n/*\n * Values returned by mac_audit_{pre,post}select. To combine the responses\n * of the security policies into a single decision,\n * mac_audit_{pre,post}select() choose the greatest value returned.\n */\n#define\tMAC_AUDIT_DEFAULT\t0\t/* use system behavior */\n#define\tMAC_AUDIT_NO\t\t1\t/* force not auditing this event */\n#define\tMAC_AUDIT_YES\t\t2\t/* force auditing this event */\n\n// \\defgroup mpc_loadtime_flags Flags for the mpc_loadtime_flags field\n\n/**\n @name Flags for the mpc_loadtime_flags field\n @see mac_policy_conf\n\n This is the complete list of flags that are supported by the\n mpc_loadtime_flags field of the mac_policy_conf structure. These\n flags specify the load time behavior of MAC Framework policy\n modules.\n*/\n\n/*@{*/\n\n/**\n @brief Flag to indicate registration preference\n\n This flag indicates that the policy module must be loaded and\n initialized early in the boot process. If the flag is specified,\n attempts to register the module following boot will be rejected. The\n flag may be used by policies that require pervasive labeling of all\n system objects, and cannot handle objects that have not been\n properly initialized by the policy.\n */\n#define\tMPC_LOADTIME_FLAG_NOTLATE\t0x00000001\n\n/**\n @brief Flag to indicate unload preference\n\n This flag indicates that the policy module may be unloaded. If this\n flag is not set, then the policy framework will reject requests to\n unload the module. This flag might be used by modules that allocate\n label state and are unable to free that state at runtime, or for\n modules that simply do not want to permit unload operations.\n*/\n#define\tMPC_LOADTIME_FLAG_UNLOADOK\t0x00000002\n\n/**\n @brief Unsupported\n\n XXX This flag is not yet supported.\n*/\n#define\tMPC_LOADTIME_FLAG_LABELMBUFS\t0x00000004\n\n/**\n @brief Flag to indicate a base policy\n\n This flag indicates that the policy module is a base policy. Only\n one module can declare itself as base, otherwise the boot process\n will be halted.\n */\n#define\tMPC_LOADTIME_BASE_POLICY\t0x00000008\n\n/*@}*/\n\n/**\n @brief Policy registration flag\n @see mac_policy_conf\n\n This flag indicates that the policy module has been successfully\n registered with the TrustedBSD MAC Framework. The Framework will\n set this flag in the mpc_runtime_flags field of the policy's\n mac_policy_conf structure after registering the policy.\n */\n#define\tMPC_RUNTIME_FLAG_REGISTERED\t0x00000001\n\n/*\n * Depends on POLICY_VER\n */\n\n#ifndef POLICY_VER\n#define\tPOLICY_VER\t1.0\n#endif\n\n#define\tMAC_POLICY_SET(handle, mpops, mpname, mpfullname, lnames, lcount, slot, lflags, rflags) \\\n\tstatic struct mac_policy_conf mpname##_mac_policy_conf = {\t\\\n\t\t.mpc_name\t\t= #mpname,\t\t\t\\\n\t\t.mpc_fullname\t\t= mpfullname,\t\t\t\\\n\t\t.mpc_labelnames\t\t= lnames,\t\t\t\\\n\t\t.mpc_labelname_count\t= lcount,\t\t\t\\\n\t\t.mpc_ops\t\t= mpops,\t\t\t\\\n\t\t.mpc_loadtime_flags\t= lflags,\t\t\t\\\n\t\t.mpc_field_off\t\t= slot,\t\t\t\t\\\n\t\t.mpc_runtime_flags\t= rflags\t\t\t\\\n\t};\t\t\t\t\t\t\t\t\\\n\t\t\t\t\t\t\t\t\t\\\n\tstatic kern_return_t\t\t\t\t\t\t\\\n\tkmod_start(kmod_info_t *ki, void *xd)\t\t\t\t\\\n\t{\t\t\t\t\t\t\t\t\\\n\t\treturn mac_policy_register(&mpname##_mac_policy_conf,\t\\\n\t\t &handle, xd);\t\t\t\t\t\\\n\t}\t\t\t\t\t\t\t\t\\\n\t\t\t\t\t\t\t\t\t\\\n\tstatic kern_return_t\t\t\t\t\t\t\\\n\tkmod_stop(kmod_info_t *ki, void *xd)\t\t\t\t\\\n\t{\t\t\t\t\t\t\t\t\\\n\t\treturn mac_policy_unregister(handle);\t\t\t\\\n\t}\t\t\t\t\t\t\t\t\\\n\t\t\t\t\t\t\t\t\t\\\n\textern kern_return_t _start(kmod_info_t *ki, void *data);\t\\\n\textern kern_return_t _stop(kmod_info_t *ki, void *data);\t\\\n\t\t\t\t\t\t\t\t\t\\\n\tKMOD_EXPLICIT_DECL(security.mpname, POLICY_VER, _start, _stop)\t\\\n\tkmod_start_func_t *_realmain = kmod_start;\t\t\t\\\n\tkmod_stop_func_t *_antimain = kmod_stop;\t\t\t\\\n\tint _kext_apple_cc = __APPLE_CC__\n\n\n#define\tLABEL_TO_SLOT(l, s)\t(l)->l_perpolicy[s]\n\n/*\n * Policy interface to map a struct label pointer to per-policy data.\n * Typically, policies wrap this in their own accessor macro that casts an\n * intptr_t to a policy-specific data type.\n */\nintptr_t mac_label_get(struct label *l, int slot);\nvoid mac_label_set(struct label *l, int slot, intptr_t v);\n\n#define\tmac_get_mpc(h)\t\t(mac_policy_list.entries[h].mpc)\n\n/**\n @name Flags for MAC allocator interfaces\n\n These flags are passed to the Darwin kernel allocator routines to\n indicate whether the allocation is permitted to block or not.\n Caution should be taken; some operations are not permitted to sleep,\n and some types of locks cannot be held when sleeping.\n */\n\n/*@{*/\n\n/**\n @brief Allocation operations may block\n\n If memory is not immediately available, the allocation routine\n will block (typically sleeping) until memory is available.\n\n @warning Inappropriate use of this flag may cause kernel panics.\n */\n#define MAC_WAITOK 0\n\n/**\n @brief Allocation operations may not block\n\n Rather than blocking, the allocator may return an error if memory\n is not immediately available. This type of allocation will not\n sleep, preserving locking semantics.\n */\n#define MAC_NOWAIT 1\n\n/*@}*/\n\t\n#ifdef __cplusplus\n}\n#endif\n\n#endif /* !_SECURITY_MAC_POLICY_H_ */\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/wrappers/build.tool",
"content": "#!/bin/bash\n#\n# build.tool\n# Lilu\n#\n# Copyright © 2018 vit9696. All rights reserved.\n#\n\ncd $(dirname \"$0\") || exit 1\n\nrm -f *.o *.bin wrappers.inc entry32 entry64\n\nclang -m32 -c entry32.S || exit 1\nclang -m64 -c entry64.S || exit 1\n\nclang -m32 entry32.o -o entry32 || exit 1\nclang -m64 entry64.o -o entry64 || exit 1\n\nif [ \"$(nm entry32.o | grep '00000000 T _main')\" == \"\" ] || [ \"$(nm entry64.o | grep '0000000000000000 T _main')\" == \"\" ]; then\n echo \"Invalid main address\"\n exit 1\nfi\n\notool -t entry32 | grep -E '^0000' | sed 's#^[0-9a-f]*##' | xxd -r -p > entry32.bin\notool -t entry64 | grep -E '^0000' | sed 's#^[0-9a-f]*##' | xxd -r -p > entry64.bin\n\nsz32=$(stat -f '%z' entry32.bin)\nsz64=$(stat -f '%z' entry64.bin)\n\nbtr32=$(nm entry32.o | grep -E 't booter$' | cut -f1 -d' ')\nbtr64=$(nm entry64.o | grep -E 't booter$' | cut -f1 -d' ')\n\nep32=$(nm entry32.o | grep -E 't entrypoint$' | cut -f1 -d' ')\nep64=$(nm entry64.o | grep -E 't entrypoint$' | cut -f1 -d' ')\n\necho '//' > wrappers.inc\necho '// wrappers.inc' >> wrappers.inc\necho '// Lilu' >> wrappers.inc\necho '//' >> wrappers.inc\necho '// Copyright © 2018 vit9696. All rights reserved.' >> wrappers.inc\necho '//' >> wrappers.inc\necho '' >> wrappers.inc\necho '// This is an autogenerated file, do not edit!' >> wrappers.inc\necho 'static uint8_t entryWrapper32[] = {' >> wrappers.inc\ncat entry32.bin | xxd -i >> wrappers.inc\necho '};' >> wrappers.inc\necho 'static uint8_t entryWrapper64[] = {' >> wrappers.inc\ncat entry64.bin | xxd -i >> wrappers.inc\necho '};' >> wrappers.inc\necho \"static_assert(sizeof(entryWrapper32) == ${sz32}, \\\"Invalid entryWrapper32 size\\\");\" >> wrappers.inc\necho \"static_assert(sizeof(entryWrapper64) == ${sz64}, \\\"Invalid entryWrapper64 size\\\");\" >> wrappers.inc\necho \"static constexpr size_t EntryWrapper32Booter {0x${btr32}};\" >> wrappers.inc\necho \"static constexpr size_t EntryWrapper64Booter {0x${btr64}};\" >> wrappers.inc\necho \"static constexpr size_t EntryWrapper32Entry {0x${ep32}};\" >> wrappers.inc\necho \"static constexpr size_t EntryWrapper64Entry {0x${ep64}};\" >> wrappers.inc\n\nrm -f *.o *.bin entry32 entry64\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/wrappers/entry32.S",
"content": "#\n# entry32.S\n# Lilu\n#\n# Copyright © 2018 vit9696. All rights reserved.\n#\n\n.text\n.global _main\n_main:\n push %ebp\n mov %esp, %ebp\n # ensure 16-byte alignment\n and $0xfffffff0, %esp\n # int main(int argc, const char* argv[], const char* envp[], const char* apple[]);\n push 20(%ebp)\n push 16(%ebp)\n push 12(%ebp)\n push 8(%ebp)\n call get_booter\n# entrypoint-compatible wrapper\nbooter:\n .word 0xFFFF\n .word 0xFFFF\nget_booter:\n pop %edx\n mov (%edx), %edx\n call *%edx\n xor %eax, %eax\n mov %ebp, %esp\n pop %ebp\n call get_entrypoint\n# original entrypoint (main)\nentrypoint:\n .word 0xFFFF\n .word 0xFFFF\nget_entrypoint:\n pop %edx\n mov (%edx), %edx\n jmp *%edx\n_end:\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/wrappers/entry64.S",
"content": "#\n# entry64.S\n# Lilu\n#\n# Copyright © 2018 vit9696. All rights reserved.\n#\n\n.text\n.global _main\n_main:\n push %rbp\n mov %rsp, %rbp\n # ensure 16-byte alignment\n and $0xfffffffffffffff0, %rsp\n # int main(int argc, const char* argv[], const char* envp[], const char* apple[]);\n push %rdi\n push %rsi\n push %rdx\n push %rcx\n call *booter(%rip)\n xor %eax, %eax\n pop %rcx\n pop %rdx\n pop %rsi\n pop %rdi\n mov %rbp, %rsp\n pop %rbp\n jmp *entrypoint(%rip)\n# original entrypoint (main)\nentrypoint:\n .word 0xFFFF\n .word 0xFFFF\n .word 0xFFFF\n .word 0xFFFF\n# entrypoint-compatible wrapper\nbooter:\n .word 0xFFFF\n .word 0xFFFF\n .word 0xFFFF\n .word 0xFFFF\n_end:\n"
},
{
"path": "EFI/CLOVER/kexts/Other/Lilu_v1.3.7.kext/Contents/Resources/Library/wrappers/wrappers.inc",
"content": "//\n// wrappers.inc\n// Lilu\n//\n// Copyright © 2018 vit9696. All rights reserved.\n//\n\n// This is an autogenerated file, do not edit!\nstatic uint8_t entryWrapper32[] = {\n 0x55, 0x89, 0xe5, 0x83, 0xe4, 0xf0, 0xff, 0x75, 0x14, 0xff, 0x75, 0x10,\n 0xff, 0x75, 0x0c, 0xff, 0x75, 0x08, 0xe8, 0x04, 0x00, 0x00, 0x00, 0xff,\n 0xff, 0xff, 0xff, 0x5a, 0x8b, 0x12, 0xff, 0xd2, 0x31, 0xc0, 0x89, 0xec,\n 0x5d, 0xe8, 0x04, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff, 0x5a, 0x8b,\n 0x12, 0xff, 0xe2\n};\nstatic uint8_t entryWrapper64[] = {\n 0x55, 0x48, 0x89, 0xe5, 0x48, 0x83, 0xe4, 0xf0, 0x57, 0x56, 0x52, 0x51,\n 0xff, 0x15, 0x18, 0x00, 0x00, 0x00, 0x31, 0xc0, 0x59, 0x5a, 0x5e, 0x5f,\n 0x48, 0x89, 0xec, 0x5d, 0xff, 0x25, 0x00, 0x00, 0x00, 0x00, 0xff, 0xff,\n 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,\n 0xff, 0xff\n};\nstatic_assert(sizeof(entryWrapper32) == 51, \"Invalid entryWrapper32 size\");\nstatic_assert(sizeof(entryWrapper64) == 50, \"Invalid entryWrapper64 size\");\nstatic constexpr size_t EntryWrapper32Booter {0x00000017};\nstatic constexpr size_t EntryWrapper64Booter {0x000000000000002a};\nstatic constexpr size_t EntryWrapper32Entry {0x0000002a};\nstatic constexpr size_t EntryWrapper64Entry {0x0000000000000022};\n"
},
{
"path": "EFI/CLOVER/kexts/Other/RealtekRTL8111.kext/Contents/Info.plist",
"content": "\n\n\n\n\tBuildMachineOSBuild \n\t16D32 \n\tCFBundleDevelopmentRegion \n\tEnglish \n\tCFBundleExecutable \n\tRealtekRTL8111 \n\tCFBundleIdentifier \n\tcom.insanelymac.RealtekRTL8111 \n\tCFBundleInfoDictionaryVersion \n\t6.0 \n\tCFBundleName \n\tRealtekRTL8111 \n\tCFBundlePackageType \n\tKEXT \n\tCFBundleShortVersionString \n\t2.2.1 \n\tCFBundleSignature \n\t???? \n\tCFBundleSupportedPlatforms \n\t\n\t\tMacOSX \n\t \n\tCFBundleVersion \n\t2.2.1 \n\tDTCompiler \n\tcom.apple.compilers.llvm.clang.1_0 \n\tDTPlatformBuild \n\t8C1002 \n\tDTPlatformVersion \n\tGM \n\tDTSDKBuild \n\t15E60 \n\tDTSDKName \n\tmacosx10.11 \n\tDTXcode \n\t0821 \n\tDTXcodeBuild \n\t8C1002 \n\tIOKitPersonalities \n\t\n\t\tRTL8111 PCIe Adapter \n\t\t\n\t\t\tCFBundleIdentifier \n\t\t\tcom.insanelymac.RealtekRTL8111 \n\t\t\tDriver_Version \n\t\t\t2.2.1 \n\t\t\tIOClass \n\t\t\tRTL8111 \n\t\t\tIOPCIMatch \n\t\t\t0x816810ec 0x81681186 \n\t\t\tIOProbeScore \n\t\t\t1000 \n\t\t\tIOProviderClass \n\t\t\tIOPCIDevice \n\t\t\tModel \n\t\t\tRTL8111 \n\t\t\tVendor \n\t\t\tRealtek \n\t\t\tdisableASPM \n\t\t\tenableCSO6 \n\t\t\tenableEEE \n\t\t\tenableTSO4 \n\t\t\tenableTSO6 \n\t\t\tintrMitigate \n\t\t\t24401 \n\t\t\trxPolling \n\t\t\t \n\t \n\tNSHumanReadableCopyright \n\tCopyright © 2013 Laura Müller. All rights reserved. \n\tOSBundleLibraries \n\t\n\t\tcom.apple.iokit.IONetworkingFamily \n\t\t1.1.0 \n\t\tcom.apple.iokit.IOPCIFamily \n\t\t1.7 \n\t\tcom.apple.kpi.bsd \n\t\t8.10.0 \n\t\tcom.apple.kpi.iokit \n\t\t8.10.0 \n\t\tcom.apple.kpi.libkern \n\t\t8.10.0 \n\t\tcom.apple.kpi.mach \n\t\t8.10.0 \n\t \n\tOSBundleRequired \n\tNetwork-Root \n \n \n"
},
{
"path": "EFI/CLOVER/kexts/Other/SMCBatteryManager.kext/Contents/Info.plist",
"content": "\n\n\n\n\tBuildMachineOSBuild \n\t18F132 \n\tCFBundleDevelopmentRegion \n\ten \n\tCFBundleExecutable \n\tSMCBatteryManager \n\tCFBundleIdentifier \n\tru.usrsse2.SMCBatteryManager \n\tCFBundleInfoDictionaryVersion \n\t6.0 \n\tCFBundleName \n\tSMCBatteryManager \n\tCFBundlePackageType \n\tKEXT \n\tCFBundleShortVersionString \n\t1.0 \n\tCFBundleSupportedPlatforms \n\t\n\t\tMacOSX \n\t \n\tCFBundleVersion \n\t1 \n\tDTCompiler \n\tcom.apple.compilers.llvm.clang.1_0 \n\tDTPlatformBuild \n\t10E1001 \n\tDTPlatformVersion \n\tGM \n\tDTSDKBuild \n\t18E219 \n\tDTSDKName \n\tmacosx10.14 \n\tDTXcode \n\t1020 \n\tDTXcodeBuild \n\t10E1001 \n\tIOKitPersonalities \n\t\n\t\tIOSMBusController \n\t\t\n\t\t\tCFBundleIdentifier \n\t\t\tru.usrsse2.SMCBatteryManager \n\t\t\tIOClass \n\t\t\tSMCSMBusController \n\t\t\tIOProviderClass \n\t\t\tIOResources \n\t\t\tIOResourceMatch \n\t\t\tIOKit \n\t\t \n\t\tSMCBatteryManager \n\t\t\n\t\t\tCFBundleIdentifier \n\t\t\tru.usrsse2.SMCBatteryManager \n\t\t\tIOClass \n\t\t\tSMCBatteryManager \n\t\t\tIOMatchCategory \n\t\t\tSMCBatteryManager \n\t\t\tIOProviderClass \n\t\t\tIOResources \n\t\t\tIOResourceMatch \n\t\t\tIOKit \n\t\t \n\t \n\tNSHumanReadableCopyright \n\tCopyright © 2018 usrsse2. All rights reserved. \n\tOSBundleCompatibleVersion \n\t1.0.0 \n\tOSBundleLibraries \n\t\n\t\tas.vit9696.Lilu \n\t\t1.2.0 \n\t\tas.vit9696.VirtualSMC \n\t\t1.0.0 \n\t\tcom.apple.iokit.IOACPIFamily \n\t\t1.0.0d1 \n\t\tcom.apple.iokit.IOSMBusFamily \n\t\t1.0.0 \n\t\tcom.apple.kpi.bsd \n\t\t12.0.0 \n\t\tcom.apple.kpi.dsep \n\t\t12.0.0 \n\t\tcom.apple.kpi.iokit \n\t\t12.0.0 \n\t\tcom.apple.kpi.libkern \n\t\t12.0.0 \n\t\tcom.apple.kpi.mach \n\t\t12.0.0 \n\t\tcom.apple.kpi.unsupported \n\t\t12.0.0 \n\t \n\tOSBundleRequired \n\tRoot \n \n \n"
},
{
"path": "EFI/CLOVER/kexts/Other/SMCProcessor.kext/Contents/Info.plist",
"content": "\n\n\n\n\tBuildMachineOSBuild \n\t18F132 \n\tCFBundleDevelopmentRegion \n\ten \n\tCFBundleExecutable \n\tSMCProcessor \n\tCFBundleIdentifier \n\tas.vit9696.SMCProcessor \n\tCFBundleInfoDictionaryVersion \n\t6.0 \n\tCFBundleName \n\tSMCProcessor \n\tCFBundlePackageType \n\tKEXT \n\tCFBundleShortVersionString \n\t1.0.5 \n\tCFBundleSignature \n\t???? \n\tCFBundleSupportedPlatforms \n\t\n\t\tMacOSX \n\t \n\tCFBundleVersion \n\t1.0.5 \n\tDTCompiler \n\tcom.apple.compilers.llvm.clang.1_0 \n\tDTPlatformBuild \n\t10E1001 \n\tDTPlatformVersion \n\tGM \n\tDTSDKBuild \n\t18E219 \n\tDTSDKName \n\tmacosx10.14 \n\tDTXcode \n\t1020 \n\tDTXcodeBuild \n\t10E1001 \n\tIOKitPersonalities \n\t\n\t\tas.vit9696.SMCProcessor \n\t\t\n\t\t\tCFBundleIdentifier \n\t\t\tas.vit9696.SMCProcessor \n\t\t\tIOClass \n\t\t\tSMCProcessor \n\t\t\tIOMatchCategory \n\t\t\tSMCProcessor \n\t\t\tIONameMatch \n\t\t\tprocessor \n\t\t\tIOPropertyMatch \n\t\t\t\n\t\t\t\t