mirror of
https://github.com/darlinghq/darling.git
synced 2026-04-27 22:42:01 -05:00
Lubos Dolezel
122 lines
3.9 KiB
C
122 lines
3.9 KiB
C
/*
|
|
* Copyright (c) 2012 Apple Inc. All rights reserved.
|
|
*
|
|
* @APPLE_OSREFERENCE_LICENSE_HEADER_START@
|
|
*
|
|
* This file contains Original Code and/or Modifications of Original Code
|
|
* as defined in and that are subject to the Apple Public Source License
|
|
* Version 2.0 (the 'License'). You may not use this file except in
|
|
* compliance with the License. The rights granted to you under the License
|
|
* may not be used to create, or enable the creation or redistribution of,
|
|
* unlawful or unlicensed copies of an Apple operating system, or to
|
|
* circumvent, violate, or enable the circumvention or violation of, any
|
|
* terms of an Apple operating system software license agreement.
|
|
*
|
|
* Please obtain a copy of the License at
|
|
* http://www.opensource.apple.com/apsl/ and read it before using this file.
|
|
*
|
|
* The Original Code and all software distributed under the License are
|
|
* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
|
|
* EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
|
|
* INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
|
|
* Please see the License for the specific language governing rights and
|
|
* limitations under the License.
|
|
*
|
|
* @APPLE_OSREFERENCE_LICENSE_HEADER_END@
|
|
*/
|
|
|
|
#ifndef _SYS_GUARDED_H_
|
|
#define _SYS_GUARDED_H_
|
|
|
|
#include <sys/types.h>
|
|
#include <sys/cdefs.h>
|
|
|
|
#include <sys/_types/_iovec_t.h>
|
|
#ifdef PRIVATE
|
|
|
|
__BEGIN_DECLS
|
|
|
|
#if !defined(_POSIX_C_SOURCE) || defined(_DARWIN_C_SOURCE)
|
|
|
|
#ifndef _GUARDID_T
|
|
#define _GUARDID_T
|
|
typedef __uint64_t guardid_t;
|
|
#endif /* _GUARDID_T */
|
|
|
|
#if !defined(KERNEL)
|
|
extern int guarded_open_np(const char *path,
|
|
const guardid_t *guard, u_int guardflags, int flags, ...);
|
|
extern int guarded_open_dprotected_np(const char *path,
|
|
const guardid_t *guard, u_int guardflags, int flags,
|
|
int dpclass, int dpflags, ...);
|
|
extern int guarded_kqueue_np(const guardid_t *guard, u_int guardflags);
|
|
extern int guarded_close_np(int fd, const guardid_t *guard);
|
|
extern int change_fdguard_np(int fd, const guardid_t *guard, u_int guardflags,
|
|
const guardid_t *nguard, u_int nguardflags, int *fdflagsp);
|
|
extern ssize_t guarded_write_np(int fd, const guardid_t *guard, const void *buf, size_t nbyte);
|
|
extern ssize_t guarded_pwrite_np(int fd, const guardid_t *guard, const void *buf, size_t nbyte, off_t offset);
|
|
extern ssize_t guarded_writev_np(int fd, const guardid_t *guard, const struct iovec *iovp, int iovcnt);
|
|
#endif /* KERNEL */
|
|
|
|
/*
|
|
* Guard types.
|
|
*
|
|
* GUARD_TYPE_FD: Guarded file descriptor.
|
|
*/
|
|
#define GUARD_TYPE_FD 0x2
|
|
|
|
/*
|
|
* File descriptor guard flavors.
|
|
*/
|
|
|
|
/*
|
|
* Forbid close(2), and the implicit close() that a dup2(2) may do.
|
|
* Forces close-on-fork to be set immutably too.
|
|
*/
|
|
#define GUARD_CLOSE (1u << 0)
|
|
|
|
/*
|
|
* Forbid dup(2), dup2(2), and fcntl(2) subcodes F_DUPFD, F_DUPFD_CLOEXEC
|
|
* on a guarded fd. Also forbids open's of a guarded fd via /dev/fd/
|
|
* (an implicit dup.)
|
|
*/
|
|
#define GUARD_DUP (1u << 1)
|
|
|
|
/*
|
|
* Forbid sending a guarded fd via a socket
|
|
*/
|
|
#define GUARD_SOCKET_IPC (1u << 2)
|
|
|
|
/*
|
|
* Forbid creating a fileport from a guarded fd
|
|
*/
|
|
#define GUARD_FILEPORT (1u << 3)
|
|
|
|
/*
|
|
* Forbid writes on a guarded fd
|
|
*/
|
|
#define GUARD_WRITE (1u << 4)
|
|
|
|
/*
|
|
* Violating a guard results in an error (EPERM), and potentially
|
|
* an exception with one or more of the following bits set.
|
|
*/
|
|
enum guard_exception_codes {
|
|
kGUARD_EXC_CLOSE = 1u << 0, /* close of a guarded fd */
|
|
kGUARD_EXC_DUP = 1u << 1, /* dup of a guarded fd */
|
|
kGUARD_EXC_NOCLOEXEC = 1u << 2, /* clear close-on-exec */
|
|
kGUARD_EXC_SOCKET_IPC = 1u << 3, /* sendmsg of a guarded fd */
|
|
kGUARD_EXC_FILEPORT = 1u << 4, /* fileport_makeport .. */
|
|
kGUARD_EXC_MISMATCH = 1u << 5, /* wrong guard for guarded fd */
|
|
kGUARD_EXC_WRITE = 1u << 6 /* write on a guarded fd */
|
|
};
|
|
|
|
#endif /* (!_POSIX_C_SOURCE || _DARWIN_C_SOURCE) */
|
|
|
|
__END_DECLS
|
|
|
|
#endif /* PRIVATE */
|
|
|
|
#endif /* !_SYS_GUARDED_H_ */
|