Security-55471.14.18.tar.gz

[apple/security.git] / libsecurity_codesigning / lib / SecCodeSigner.h

diff --git a/libsecurity_codesigning/lib/SecCodeSigner.h b/libsecurity_codesigning/lib/SecCodeSigner.h
index d5c15962eb9523382b8ed1c8023ed3578a0d57de..f34f273bca17ef24d2800788cc47691857d73a55 100644 (file)
--- a/libsecurity_codesigning/lib/SecCodeSigner.h
+++ b/libsecurity_codesigning/lib/SecCodeSigner.h
@@ -190,6 +190,8 @@ enum {
        kSecCSSignOpaque = 1 << 3,                      // treat all files as resources (no nest scan, no flexibility)
        kSecCSSignV1 = 1 << 4,                          // sign ONLY in V1 form
        kSecCSSignNoV1 = 1 << 5,                        // do not include V1 form
+       kSecCSSignBundleRoot = 1 << 6,          // include files in bundle root
+       kSecCSSignStrictPreflight = 1 << 7, // fail signing operation if signature would fail strict validation
 };