#ifndef _SYS_KAUTH_H
#define _SYS_KAUTH_H
#include <sys/appleapiopts.h>
#include <sys/cdefs.h>
#include <mach/boolean.h>
#include <sys/_types.h>
#include <sys/syslimits.h>
#ifdef __APPLE_API_EVOLVING
#define KAUTH_UID_NONE (~(uid_t)0 - 100)
#define KAUTH_GID_NONE (~(gid_t)0 - 100)
#include <sys/_types/_guid_t.h>
#pragma pack(1)
typedef struct {
u_int8_t sid_kind;
u_int8_t sid_authcount;
u_int8_t sid_authority[6];
#define KAUTH_NTSID_MAX_AUTHORITIES 16
u_int32_t sid_authorities[KAUTH_NTSID_MAX_AUTHORITIES];
} ntsid_t;
#pragma pack()
#define _NTSID_T
#define KAUTH_NTSID_HDRSIZE (8)
#define KAUTH_NTSID_SIZE(_s) (KAUTH_NTSID_HDRSIZE + ((_s)->sid_authcount * sizeof(u_int32_t)))
struct kauth_identity_extlookup {
u_int32_t el_seqno;
u_int32_t el_result;
#define KAUTH_EXTLOOKUP_SUCCESS 0
#define KAUTH_EXTLOOKUP_BADRQ 1
#define KAUTH_EXTLOOKUP_FAILURE 2
#define KAUTH_EXTLOOKUP_FATAL 3
#define KAUTH_EXTLOOKUP_INPROG 100
u_int32_t el_flags;
#define KAUTH_EXTLOOKUP_VALID_UID (1<<0)
#define KAUTH_EXTLOOKUP_VALID_UGUID (1<<1)
#define KAUTH_EXTLOOKUP_VALID_USID (1<<2)
#define KAUTH_EXTLOOKUP_VALID_GID (1<<3)
#define KAUTH_EXTLOOKUP_VALID_GGUID (1<<4)
#define KAUTH_EXTLOOKUP_VALID_GSID (1<<5)
#define KAUTH_EXTLOOKUP_WANT_UID (1<<6)
#define KAUTH_EXTLOOKUP_WANT_UGUID (1<<7)
#define KAUTH_EXTLOOKUP_WANT_USID (1<<8)
#define KAUTH_EXTLOOKUP_WANT_GID (1<<9)
#define KAUTH_EXTLOOKUP_WANT_GGUID (1<<10)
#define KAUTH_EXTLOOKUP_WANT_GSID (1<<11)
#define KAUTH_EXTLOOKUP_WANT_MEMBERSHIP (1<<12)
#define KAUTH_EXTLOOKUP_VALID_MEMBERSHIP (1<<13)
#define KAUTH_EXTLOOKUP_ISMEMBER (1<<14)
#define KAUTH_EXTLOOKUP_VALID_PWNAM (1<<15)
#define KAUTH_EXTLOOKUP_WANT_PWNAM (1<<16)
#define KAUTH_EXTLOOKUP_VALID_GRNAM (1<<17)
#define KAUTH_EXTLOOKUP_WANT_GRNAM (1<<18)
#define KAUTH_EXTLOOKUP_VALID_SUPGRPS (1<<19)
#define KAUTH_EXTLOOKUP_WANT_SUPGRPS (1<<20)
__darwin_pid_t el_info_pid;
u_int64_t el_extend;
u_int32_t el_info_reserved_1;
uid_t el_uid;
guid_t el_uguid;
u_int32_t el_uguid_valid;
ntsid_t el_usid;
u_int32_t el_usid_valid;
gid_t el_gid;
guid_t el_gguid;
u_int32_t el_gguid_valid;
ntsid_t el_gsid;
u_int32_t el_gsid_valid;
u_int32_t el_member_valid;
u_int32_t el_sup_grp_cnt;
gid_t el_sup_groups[NGROUPS_MAX];
};
struct kauth_cache_sizes {
u_int32_t kcs_group_size;
u_int32_t kcs_id_size;
};
#define KAUTH_EXTLOOKUP_REGISTER (0)
#define KAUTH_EXTLOOKUP_RESULT (1<<0)
#define KAUTH_EXTLOOKUP_WORKER (1<<1)
#define KAUTH_EXTLOOKUP_DEREGISTER (1<<2)
#define KAUTH_GET_CACHE_SIZES (1<<3)
#define KAUTH_SET_CACHE_SIZES (1<<4)
#define KAUTH_CLEAR_CACHES (1<<5)
#ifdef KERNEL
#if 0
struct kauth_cred_supplement {
TAILQ_ENTRY(kauth_cred_supplement) kcs_link;
int kcs_ref;
int kcs_id;
size_t kcs_size;
char kcs_data[0];
};
typedef struct kauth_cred_supplement *kauth_cred_supplement_t;
struct kauth_cred {
TAILQ_ENTRY(kauth_cred) kc_link;
int kc_ref;
uid_t kc_uid;
uid_t kc_ruid;
uid_t kc_svuid;
gid_t kc_gid;
gid_t kc_rgid;
gid_t kc_svgid;
int kc_flags;
#define KAUTH_CRED_GRPOVERRIDE (1<<0)
int kc_npvtgroups;
gid_t kc_pvtgroups[NGROUPS];
int kc_nsuppgroups;
gid_t *kc_suppgroups;
int kc_nwhtgroups;
gid_t *kc_whtgroups;
struct au_session cr_audit;
int kc_nsupplement;
kauth_cred_supplement_t *kc_supplement;
};
#else
#include <sys/ucred.h>
#endif
__BEGIN_DECLS
extern kauth_cred_t posix_cred_create(posix_cred_t pcred);
extern posix_cred_t posix_cred_get(kauth_cred_t cred);
extern void posix_cred_label(kauth_cred_t cred, posix_cred_t pcred);
extern int posix_cred_access(kauth_cred_t cred, id_t object_uid, id_t object_gid, mode_t object_mode, mode_t mode_req);
extern uid_t kauth_getuid(void);
extern uid_t kauth_getruid(void);
extern gid_t kauth_getgid(void);
extern kauth_cred_t kauth_cred_get(void);
extern kauth_cred_t kauth_cred_get_with_ref(void);
extern kauth_cred_t kauth_cred_proc_ref(proc_t procp);
extern kauth_cred_t kauth_cred_create(kauth_cred_t cred);
extern void kauth_cred_ref(kauth_cred_t _cred);
#ifndef __LP64__
extern void kauth_cred_rele(kauth_cred_t _cred) __deprecated;
#endif
extern void kauth_cred_unref(kauth_cred_t *_cred);
#if CONFIG_MACF
struct label;
extern kauth_cred_t kauth_cred_label_update(kauth_cred_t cred, struct label *label);
extern int kauth_proc_label_update(struct proc *p, struct label *label);
#else
extern kauth_cred_t kauth_cred_label_update(kauth_cred_t cred, void *label);
extern int kauth_proc_label_update(struct proc *p, void *label);
#endif
extern kauth_cred_t kauth_cred_find(kauth_cred_t cred);
extern uid_t kauth_cred_getuid(kauth_cred_t _cred);
extern uid_t kauth_cred_getruid(kauth_cred_t _cred);
extern uid_t kauth_cred_getsvuid(kauth_cred_t _cred);
extern gid_t kauth_cred_getgid(kauth_cred_t _cred);
extern gid_t kauth_cred_getrgid(kauth_cred_t _cred);
extern gid_t kauth_cred_getsvgid(kauth_cred_t _cred);
extern int kauth_cred_pwnam2guid(char *pwnam, guid_t *guidp);
extern int kauth_cred_grnam2guid(char *grnam, guid_t *guidp);
extern int kauth_cred_guid2pwnam(guid_t *guidp, char *pwnam);
extern int kauth_cred_guid2grnam(guid_t *guidp, char *grnam);
extern int kauth_cred_guid2uid(guid_t *_guid, uid_t *_uidp);
extern int kauth_cred_guid2gid(guid_t *_guid, gid_t *_gidp);
extern int kauth_cred_ntsid2uid(ntsid_t *_sid, uid_t *_uidp);
extern int kauth_cred_ntsid2gid(ntsid_t *_sid, gid_t *_gidp);
extern int kauth_cred_ntsid2guid(ntsid_t *_sid, guid_t *_guidp);
extern int kauth_cred_uid2guid(uid_t _uid, guid_t *_guidp);
extern int kauth_cred_getguid(kauth_cred_t _cred, guid_t *_guidp);
extern int kauth_cred_gid2guid(gid_t _gid, guid_t *_guidp);
extern int kauth_cred_uid2ntsid(uid_t _uid, ntsid_t *_sidp);
extern int kauth_cred_getntsid(kauth_cred_t _cred, ntsid_t *_sidp);
extern int kauth_cred_gid2ntsid(gid_t _gid, ntsid_t *_sidp);
extern int kauth_cred_guid2ntsid(guid_t *_guid, ntsid_t *_sidp);
extern int kauth_cred_ismember_gid(kauth_cred_t _cred, gid_t _gid, int *_resultp);
extern int kauth_cred_ismember_guid(kauth_cred_t _cred, guid_t *_guidp, int *_resultp);
extern int groupmember(gid_t gid, kauth_cred_t cred);
extern int kauth_cred_issuser(kauth_cred_t _cred);
extern guid_t kauth_null_guid;
extern int kauth_guid_equal(guid_t *_guid1, guid_t *_guid2);
#ifdef XNU_KERNEL_PRIVATE
extern int kauth_ntsid_equal(ntsid_t *_sid1, ntsid_t *_sid2);
#endif
#ifdef XNU_KERNEL_PRIVATE
extern int kauth_wellknown_guid(guid_t *_guid);
#define KAUTH_WKG_NOT 0
#define KAUTH_WKG_OWNER 1
#define KAUTH_WKG_GROUP 2
#define KAUTH_WKG_NOBODY 3
#define KAUTH_WKG_EVERYBODY 4
extern kauth_cred_t kauth_cred_dup(kauth_cred_t cred);
extern gid_t kauth_getrgid(void);
extern kauth_cred_t kauth_cred_alloc(void);
extern int cantrace(proc_t cur_procp, kauth_cred_t creds, proc_t traced_procp, int *errp);
extern kauth_cred_t kauth_cred_copy_real(kauth_cred_t cred);
extern kauth_cred_t kauth_cred_setresuid(kauth_cred_t cred, uid_t ruid, uid_t euid, uid_t svuid, uid_t gmuid);
extern kauth_cred_t kauth_cred_setresgid(kauth_cred_t cred, gid_t rgid, gid_t egid, gid_t svgid);
extern kauth_cred_t kauth_cred_setuidgid(kauth_cred_t cred, uid_t uid, gid_t gid);
extern kauth_cred_t kauth_cred_setsvuidgid(kauth_cred_t cred, uid_t uid, gid_t gid);
extern kauth_cred_t kauth_cred_setgroups(kauth_cred_t cred, gid_t *groups, int groupcount, uid_t gmuid);
struct uthread;
extern void kauth_cred_uthread_update(struct uthread *, proc_t);
#ifdef CONFIG_MACF
extern int kauth_proc_label_update_execve(struct proc *p, struct vfs_context *ctx, struct vnode *vp, struct vnode *scriptvp, struct label *scriptlabel, struct label *execlabel, void *psattr);
#endif
extern int kauth_cred_getgroups(kauth_cred_t _cred, gid_t *_groups, int *_groupcount);
extern int kauth_cred_assume(uid_t _uid);
extern int kauth_cred_gid_subset(kauth_cred_t _cred1, kauth_cred_t _cred2, int *_resultp);
struct auditinfo_addr;
extern kauth_cred_t kauth_cred_setauditinfo(kauth_cred_t, au_session_t *);
extern int kauth_cred_supplementary_register(const char *name, int *ident);
extern int kauth_cred_supplementary_add(kauth_cred_t cred, int ident, const void *data, size_t datasize);
extern int kauth_cred_supplementary_remove(kauth_cred_t cred, int ident);
#endif
__END_DECLS
#endif
#if defined(KERNEL) || defined (_SYS_ACL_H)
typedef u_int32_t kauth_ace_rights_t;
struct kauth_ace {
guid_t ace_applicable;
u_int32_t ace_flags;
#define KAUTH_ACE_KINDMASK 0xf
#define KAUTH_ACE_PERMIT 1
#define KAUTH_ACE_DENY 2
#define KAUTH_ACE_AUDIT 3
#define KAUTH_ACE_ALARM 4
#define KAUTH_ACE_INHERITED (1<<4)
#define KAUTH_ACE_FILE_INHERIT (1<<5)
#define KAUTH_ACE_DIRECTORY_INHERIT (1<<6)
#define KAUTH_ACE_LIMIT_INHERIT (1<<7)
#define KAUTH_ACE_ONLY_INHERIT (1<<8)
#define KAUTH_ACE_SUCCESS (1<<9)
#define KAUTH_ACE_FAILURE (1<<10)
#define KAUTH_ACE_INHERIT_CONTROL_FLAGS \
(KAUTH_ACE_FILE_INHERIT | \
KAUTH_ACE_DIRECTORY_INHERIT | \
KAUTH_ACE_LIMIT_INHERIT | \
KAUTH_ACE_ONLY_INHERIT)
kauth_ace_rights_t ace_rights;
#define KAUTH_ACE_GENERIC_ALL (1<<21)
#define KAUTH_ACE_GENERIC_EXECUTE (1<<22)
#define KAUTH_ACE_GENERIC_WRITE (1<<23)
#define KAUTH_ACE_GENERIC_READ (1<<24)
};
#ifndef _KAUTH_ACE
#define _KAUTH_ACE
typedef struct kauth_ace *kauth_ace_t;
#endif
struct kauth_acl {
u_int32_t acl_entrycount;
u_int32_t acl_flags;
struct kauth_ace acl_ace[1];
};
#define KAUTH_ACL_MAX_ENTRIES 128
#define KAUTH_ACL_FLAGS_PRIVATE (0xffff)
#define KAUTH_ACL_DEFER_INHERIT (1<<16)
#define KAUTH_ACL_NO_INHERIT (1<<17)
#define KAUTH_FILESEC_NOACL ((u_int32_t)(-1))
#define KAUTH_ACL_SIZE(c) (__offsetof(struct kauth_acl, acl_ace) + ((u_int32_t)(c) != KAUTH_FILESEC_NOACL ? ((c) * sizeof(struct kauth_ace)) : 0))
#define KAUTH_ACL_COPYSIZE(p) KAUTH_ACL_SIZE((p)->acl_entrycount)
#ifndef _KAUTH_ACL
#define _KAUTH_ACL
typedef struct kauth_acl *kauth_acl_t;
#endif
#ifdef KERNEL
__BEGIN_DECLS
kauth_acl_t kauth_acl_alloc(int size);
void kauth_acl_free(kauth_acl_t fsp);
__END_DECLS
#endif
struct kauth_filesec {
u_int32_t fsec_magic;
#define KAUTH_FILESEC_MAGIC 0x012cc16d
guid_t fsec_owner;
guid_t fsec_group;
struct kauth_acl fsec_acl;
};
#define fsec_entrycount fsec_acl.acl_entrycount
#define fsec_flags fsec_acl.acl_flags
#define fsec_ace fsec_acl.acl_ace
#define KAUTH_FILESEC_FLAGS_PRIVATE KAUTH_ACL_FLAGS_PRIVATE
#define KAUTH_FILESEC_DEFER_INHERIT KAUTH_ACL_DEFER_INHERIT
#define KAUTH_FILESEC_NO_INHERIT KAUTH_ACL_NO_INHERIT
#define KAUTH_FILESEC_NONE ((kauth_filesec_t)0)
#define KAUTH_FILESEC_WANTED ((kauth_filesec_t)1)
#ifndef _KAUTH_FILESEC
#define _KAUTH_FILESEC
typedef struct kauth_filesec *kauth_filesec_t;
#endif
#define KAUTH_FILESEC_SIZE(c) (__offsetof(struct kauth_filesec, fsec_acl) + __offsetof(struct kauth_acl, acl_ace) + (c) * sizeof(struct kauth_ace))
#define KAUTH_FILESEC_COPYSIZE(p) KAUTH_FILESEC_SIZE(((p)->fsec_entrycount == KAUTH_FILESEC_NOACL) ? 0 : (p)->fsec_entrycount)
#define KAUTH_FILESEC_COUNT(s) (((s) - KAUTH_FILESEC_SIZE(0)) / sizeof(struct kauth_ace))
#define KAUTH_FILESEC_VALID(s) ((s) >= KAUTH_FILESEC_SIZE(0) && (((s) - KAUTH_FILESEC_SIZE(0)) % sizeof(struct kauth_ace)) == 0)
#define KAUTH_FILESEC_XATTR "com.apple.system.Security"
#define KAUTH_ENDIAN_HOST 0x00000001
#define KAUTH_ENDIAN_DISK 0x00000002
#endif
#ifdef KERNEL
struct kauth_scope;
typedef struct kauth_scope *kauth_scope_t;
struct kauth_listener;
typedef struct kauth_listener *kauth_listener_t;
#ifndef _KAUTH_ACTION_T
typedef int kauth_action_t;
# define _KAUTH_ACTION_T
#endif
typedef int (* kauth_scope_callback_t)(kauth_cred_t _credential,
void *_idata,
kauth_action_t _action,
uintptr_t _arg0,
uintptr_t _arg1,
uintptr_t _arg2,
uintptr_t _arg3);
#define KAUTH_RESULT_ALLOW (1)
#define KAUTH_RESULT_DENY (2)
#define KAUTH_RESULT_DEFER (3)
struct kauth_acl_eval {
kauth_ace_t ae_acl;
int ae_count;
kauth_ace_rights_t ae_requested;
kauth_ace_rights_t ae_residual;
int ae_result;
boolean_t ae_found_deny;
int ae_options;
#define KAUTH_AEVAL_IS_OWNER (1<<0)
#define KAUTH_AEVAL_IN_GROUP (1<<1)
#define KAUTH_AEVAL_IN_GROUP_UNKNOWN (1<<2)
kauth_ace_rights_t ae_exp_gall;
kauth_ace_rights_t ae_exp_gread;
kauth_ace_rights_t ae_exp_gwrite;
kauth_ace_rights_t ae_exp_gexec;
};
typedef struct kauth_acl_eval *kauth_acl_eval_t;
__BEGIN_DECLS
kauth_filesec_t kauth_filesec_alloc(int size);
void kauth_filesec_free(kauth_filesec_t fsp);
extern kauth_scope_t kauth_register_scope(const char *_identifier, kauth_scope_callback_t _callback, void *_idata);
extern void kauth_deregister_scope(kauth_scope_t _scope);
extern kauth_listener_t kauth_listen_scope(const char *_identifier, kauth_scope_callback_t _callback, void *_idata);
extern void kauth_unlisten_scope(kauth_listener_t _scope);
extern int kauth_authorize_action(kauth_scope_t _scope, kauth_cred_t _credential, kauth_action_t _action,
uintptr_t _arg0, uintptr_t _arg1, uintptr_t _arg2, uintptr_t _arg3);
extern int kauth_authorize_allow(kauth_cred_t _credential, void *_idata, kauth_action_t _action,
uintptr_t _arg0, uintptr_t _arg1, uintptr_t _arg2, uintptr_t _arg3);
#ifdef XNU_KERNEL_PRIVATE
void kauth_filesec_acl_setendian(int, kauth_filesec_t, kauth_acl_t);
int kauth_copyinfilesec(user_addr_t xsecurity, kauth_filesec_t *xsecdestpp);
extern int kauth_acl_evaluate(kauth_cred_t _credential, kauth_acl_eval_t _eval);
extern int kauth_acl_inherit(vnode_t _dvp, kauth_acl_t _initial, kauth_acl_t *_product, int _isdir, vfs_context_t _ctx);
#endif
__END_DECLS
#define KAUTH_SCOPE_GENERIC "com.apple.kauth.generic"
#define KAUTH_GENERIC_ISSUSER 1
#ifdef XNU_KERNEL_PRIVATE
__BEGIN_DECLS
extern int kauth_authorize_generic(kauth_cred_t credential, kauth_action_t action);
__END_DECLS
#endif
#define KAUTH_SCOPE_PROCESS "com.apple.kauth.process"
#define KAUTH_PROCESS_CANSIGNAL 1
#define KAUTH_PROCESS_CANTRACE 2
__BEGIN_DECLS
extern int kauth_authorize_process(kauth_cred_t _credential, kauth_action_t _action,
struct proc *_process, uintptr_t _arg1, uintptr_t _arg2, uintptr_t _arg3);
__END_DECLS
#define KAUTH_SCOPE_VNODE "com.apple.kauth.vnode"
#define KAUTH_SCOPE_FILEOP "com.apple.kauth.fileop"
#define KAUTH_FILEOP_OPEN 1
#define KAUTH_FILEOP_CLOSE 2
#define KAUTH_FILEOP_RENAME 3
#define KAUTH_FILEOP_EXCHANGE 4
#define KAUTH_FILEOP_LINK 5
#define KAUTH_FILEOP_EXEC 6
#define KAUTH_FILEOP_DELETE 7
#define KAUTH_FILEOP_CLOSE_MODIFIED (1<<1)
__BEGIN_DECLS
#ifdef XNU_KERNEL_PRIVATE
extern int kauth_authorize_fileop_has_listeners(void);
#endif
extern int kauth_authorize_fileop(kauth_cred_t _credential, kauth_action_t _action,
uintptr_t _arg0, uintptr_t _arg1);
__END_DECLS
#endif
#if defined(KERNEL) || defined (_SYS_ACL_H)
#define KAUTH_VNODE_READ_DATA (1<<1)
#define KAUTH_VNODE_LIST_DIRECTORY KAUTH_VNODE_READ_DATA
#define KAUTH_VNODE_WRITE_DATA (1<<2)
#define KAUTH_VNODE_ADD_FILE KAUTH_VNODE_WRITE_DATA
#define KAUTH_VNODE_EXECUTE (1<<3)
#define KAUTH_VNODE_SEARCH KAUTH_VNODE_EXECUTE
#define KAUTH_VNODE_DELETE (1<<4)
#define KAUTH_VNODE_APPEND_DATA (1<<5)
#define KAUTH_VNODE_ADD_SUBDIRECTORY KAUTH_VNODE_APPEND_DATA
#define KAUTH_VNODE_DELETE_CHILD (1<<6)
#define KAUTH_VNODE_READ_ATTRIBUTES (1<<7)
#define KAUTH_VNODE_WRITE_ATTRIBUTES (1<<8)
#define KAUTH_VNODE_READ_EXTATTRIBUTES (1<<9)
#define KAUTH_VNODE_WRITE_EXTATTRIBUTES (1<<10)
#define KAUTH_VNODE_READ_SECURITY (1<<11)
#define KAUTH_VNODE_WRITE_SECURITY (1<<12)
#define KAUTH_VNODE_TAKE_OWNERSHIP (1<<13)
#define KAUTH_VNODE_CHANGE_OWNER KAUTH_VNODE_TAKE_OWNERSHIP
#define KAUTH_VNODE_SYNCHRONIZE (1<<20)
#define KAUTH_VNODE_LINKTARGET (1<<25)
#define KAUTH_VNODE_CHECKIMMUTABLE (1<<26)
#define KAUTH_VNODE_ACCESS (1<<31)
#define KAUTH_VNODE_NOIMMUTABLE (1<<30)
#define KAUTH_VNODE_SEARCHBYANYONE (1<<29)
#define KAUTH_INVALIDATE_CACHED_RIGHTS ((kauth_action_t)~0)
#define KAUTH_VNODE_GENERIC_READ_BITS (KAUTH_VNODE_READ_DATA | \
KAUTH_VNODE_READ_ATTRIBUTES | \
KAUTH_VNODE_READ_EXTATTRIBUTES | \
KAUTH_VNODE_READ_SECURITY)
#define KAUTH_VNODE_GENERIC_WRITE_BITS (KAUTH_VNODE_WRITE_DATA | \
KAUTH_VNODE_APPEND_DATA | \
KAUTH_VNODE_DELETE | \
KAUTH_VNODE_DELETE_CHILD | \
KAUTH_VNODE_WRITE_ATTRIBUTES | \
KAUTH_VNODE_WRITE_EXTATTRIBUTES | \
KAUTH_VNODE_WRITE_SECURITY)
#define KAUTH_VNODE_GENERIC_EXECUTE_BITS (KAUTH_VNODE_EXECUTE)
#define KAUTH_VNODE_GENERIC_ALL_BITS (KAUTH_VNODE_GENERIC_READ_BITS | \
KAUTH_VNODE_GENERIC_WRITE_BITS | \
KAUTH_VNODE_GENERIC_EXECUTE_BITS)
#define KAUTH_VNODE_WRITE_RIGHTS (KAUTH_VNODE_ADD_FILE | \
KAUTH_VNODE_ADD_SUBDIRECTORY | \
KAUTH_VNODE_DELETE_CHILD | \
KAUTH_VNODE_WRITE_DATA | \
KAUTH_VNODE_APPEND_DATA | \
KAUTH_VNODE_DELETE | \
KAUTH_VNODE_WRITE_ATTRIBUTES | \
KAUTH_VNODE_WRITE_EXTATTRIBUTES | \
KAUTH_VNODE_WRITE_SECURITY | \
KAUTH_VNODE_TAKE_OWNERSHIP | \
KAUTH_VNODE_LINKTARGET | \
KAUTH_VNODE_CHECKIMMUTABLE)
#endif
#ifdef KERNEL
#include <sys/lock.h>
#if 0
# ifndef _FN_KPRINTF
# define _FN_KPRINTF
void kprintf(const char *fmt, ...);
# endif
# define KAUTH_DEBUG_ENABLE
# define K_UUID_FMT "%08x:%08x:%08x:%08x"
# define K_UUID_ARG(_u) *(int *)&_u.g_guid[0],*(int *)&_u.g_guid[4],*(int *)&_u.g_guid[8],*(int *)&_u.g_guid[12]
# define KAUTH_DEBUG(fmt, args...) do { kprintf("%s:%d: " fmt "\n", __PRETTY_FUNCTION__, __LINE__ , ##args); } while (0)
# define KAUTH_DEBUG_CTX(_c) KAUTH_DEBUG("p = %p c = %p", _c->vc_proc, _c->vc_ucred)
# define VFS_DEBUG(_ctx, _vp, fmt, args...) \
do { \
kprintf("%p '%s' %s:%d " fmt "\n", \
_ctx, \
(_vp != NULL && _vp->v_name != NULL) ? _vp->v_name : "????", \
__PRETTY_FUNCTION__, __LINE__ , \
##args); \
} while(0)
#else
# define KAUTH_DEBUG(fmt, args...) do { } while (0)
# define VFS_DEBUG(ctx, vp, fmt, args...) do { } while(0)
#endif
extern lck_grp_t *kauth_lck_grp;
#ifdef XNU_KERNEL_PRIVATE
__BEGIN_DECLS
extern void kauth_init(void);
extern void kauth_cred_init(void);
#if CONFIG_EXT_RESOLVER
extern void kauth_identity_init(void);
extern void kauth_groups_init(void);
extern void kauth_resolver_init(void);
#endif
__END_DECLS
#endif
#endif
#endif
#endif