bsd/sys/proc.h

   1 /*
   2  * Copyright (c) 2000-2018 Apple Inc. All rights reserved.
   3  *
   4  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. The rights granted to you under the License
  10  * may not be used to create, or enable the creation or redistribution of,
  11  * unlawful or unlicensed copies of an Apple operating system, or to
  12  * circumvent, violate, or enable the circumvention or violation of, any
  13  * terms of an Apple operating system software license agreement.
  14  *
  15  * Please obtain a copy of the License at
  16  * http://www.opensource.apple.com/apsl/ and read it before using this file.
  17  *
  18  * The Original Code and all software distributed under the License are
  19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  23  * Please see the License for the specific language governing rights and
  24  * limitations under the License.
  25  *
  26  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  27  */
  28 /* Copyright (c) 1995, 1997 Apple Computer, Inc. All Rights Reserved */
  29 /*-
  30  * Copyright (c) 1986, 1989, 1991, 1993
  31  *      The Regents of the University of California.  All rights reserved.
  32  * (c) UNIX System Laboratories, Inc.
  33  * All or some portions of this file are derived from material licensed
  34  * to the University of California by American Telephone and Telegraph
  35  * Co. or Unix System Laboratories, Inc. and are reproduced herein with
  36  * the permission of UNIX System Laboratories, Inc.
  37  *
  38  * Redistribution and use in source and binary forms, with or without
  39  * modification, are permitted provided that the following conditions
  40  * are met:
  41  * 1. Redistributions of source code must retain the above copyright
  42  *    notice, this list of conditions and the following disclaimer.
  43  * 2. Redistributions in binary form must reproduce the above copyright
  44  *    notice, this list of conditions and the following disclaimer in the
  45  *    documentation and/or other materials provided with the distribution.
  46  * 3. All advertising materials mentioning features or use of this software
  47  *    must display the following acknowledgement:
  48  *      This product includes software developed by the University of
  49  *      California, Berkeley and its contributors.
  50  * 4. Neither the name of the University nor the names of its contributors
  51  *    may be used to endorse or promote products derived from this software
  52  *    without specific prior written permission.
  53  *
  54  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  55  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  56  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  57  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  58  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  59  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  60  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  61  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  62  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  63  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  64  * SUCH DAMAGE.
  65  *
  66  *      @(#)proc.h      8.15 (Berkeley) 5/19/95
  67  */
  68
  69 #ifndef _SYS_PROC_H_
  70 #define _SYS_PROC_H_
  71
  72 #include <sys/appleapiopts.h>
  73 #include <sys/cdefs.h>
  74 #include <sys/select.h>                 /* For struct selinfo. */
  75 #include <sys/queue.h>
  76 #include <sys/lock.h>
  77 #include <sys/param.h>
  78 #include <sys/event.h>
  79 #include <sys/time.h>
  80 #ifdef KERNEL
  81 #include <sys/kernel_types.h>
  82 #include <uuid/uuid.h>
  83 #endif
  84 #include <mach/boolean.h>
  85
  86 #ifdef XNU_KERNEL_PRIVATE
  87 #include <mach/coalition.h>             /* COALITION_NUM_TYPES */
  88 #endif
  89
  90 #if defined(XNU_KERNEL_PRIVATE) || !defined(KERNEL)
  91
  92 struct session;
  93 struct pgrp;
  94 struct proc;
  95 struct proc_ident;
  96
  97 /* Exported fields for kern sysctls */
  98 struct extern_proc {
  99         union {
 100                 struct {
 101                         struct  proc *__p_forw; /* Doubly-linked run/sleep queue. */
 102                         struct  proc *__p_back;
 103                 } p_st1;
 104                 struct timeval __p_starttime;   /* process start time */
 105         } p_un;
 106 #define p_forw p_un.p_st1.__p_forw
 107 #define p_back p_un.p_st1.__p_back
 108 #define p_starttime p_un.__p_starttime
 109         struct  vmspace *p_vmspace;     /* Address space. */
 110         struct  sigacts *p_sigacts;     /* Signal actions, state (PROC ONLY). */
 111         int     p_flag;                 /* P_* flags. */
 112         char    p_stat;                 /* S* process status. */
 113         pid_t   p_pid;                  /* Process identifier. */
 114         pid_t   p_oppid;         /* Save parent pid during ptrace. XXX */
 115         int     p_dupfd;         /* Sideways return value from fdopen. XXX */
 116         /* Mach related  */
 117         caddr_t user_stack;     /* where user stack was allocated */
 118         void    *exit_thread;   /* XXX Which thread is exiting? */
 119         int             p_debugger;             /* allow to debug */
 120         boolean_t       sigwait;        /* indication to suspend */
 121         /* scheduling */
 122         u_int   p_estcpu;        /* Time averaged value of p_cpticks. */
 123         int     p_cpticks;       /* Ticks of cpu time. */
 124         fixpt_t p_pctcpu;        /* %cpu for this process during p_swtime */
 125         void    *p_wchan;        /* Sleep address. */
 126         char    *p_wmesg;        /* Reason for sleep. */
 127         u_int   p_swtime;        /* Time swapped in or out. */
 128         u_int   p_slptime;       /* Time since last blocked. */
 129         struct  itimerval p_realtimer;  /* Alarm timer. */
 130         struct  timeval p_rtime;        /* Real time. */
 131         u_quad_t p_uticks;              /* Statclock hits in user mode. */
 132         u_quad_t p_sticks;              /* Statclock hits in system mode. */
 133         u_quad_t p_iticks;              /* Statclock hits processing intr. */
 134         int     p_traceflag;            /* Kernel trace points. */
 135         struct  vnode *p_tracep;        /* Trace to vnode. */
 136         int     p_siglist;              /* DEPRECATED. */
 137         struct  vnode *p_textvp;        /* Vnode of executable. */
 138         int     p_holdcnt;              /* If non-zero, don't swap. */
 139         sigset_t p_sigmask;     /* DEPRECATED. */
 140         sigset_t p_sigignore;   /* Signals being ignored. */
 141         sigset_t p_sigcatch;    /* Signals being caught by user. */
 142         u_char  p_priority;     /* Process priority. */
 143         u_char  p_usrpri;       /* User-priority based on p_cpu and p_nice. */
 144         char    p_nice;         /* Process "nice" value. */
 145         char    p_comm[MAXCOMLEN + 1];
 146         struct  pgrp *p_pgrp;   /* Pointer to process group. */
 147         struct  user *p_addr;   /* Kernel virtual addr of u-area (PROC ONLY). */
 148         u_short p_xstat;        /* Exit status for wait; also stop signal. */
 149         u_short p_acflag;       /* Accounting flags. */
 150         struct  rusage *p_ru;   /* Exit information. XXX */
 151 };
 152
 153
 154 /* Status values. */
 155 #define SIDL    1               /* Process being created by fork. */
 156 #define SRUN    2               /* Currently runnable. */
 157 #define SSLEEP  3               /* Sleeping on an address. */
 158 #define SSTOP   4               /* Process debugging or suspension. */
 159 #define SZOMB   5               /* Awaiting collection by parent. */
 160
 161 /* These flags are kept in extern_proc.p_flag. */
 162 #define P_ADVLOCK       0x00000001      /* Process may hold POSIX adv. lock */
 163 #define P_CONTROLT      0x00000002      /* Has a controlling terminal */
 164 #define P_LP64          0x00000004      /* Process is LP64 */
 165 #define P_NOCLDSTOP     0x00000008      /* No SIGCHLD when children stop */
 166
 167 #define P_PPWAIT        0x00000010      /* Parent waiting for chld exec/exit */
 168 #define P_PROFIL        0x00000020      /* Has started profiling */
 169 #define P_SELECT        0x00000040      /* Selecting; wakeup/waiting danger */
 170 #define P_CONTINUED     0x00000080      /* Process was stopped and continued */
 171
 172 #define P_SUGID         0x00000100      /* Has set privileges since last exec */
 173 #define P_SYSTEM        0x00000200      /* Sys proc: no sigs, stats or swap */
 174 #define P_TIMEOUT       0x00000400      /* Timing out during sleep */
 175 #define P_TRACED        0x00000800      /* Debugged process being traced */
 176
 177 #define P_DISABLE_ASLR  0x00001000      /* Disable address space layout randomization */
 178 #define P_WEXIT         0x00002000      /* Working on exiting */
 179 #define P_EXEC          0x00004000      /* Process called exec. */
 180
 181 /* Should be moved to machine-dependent areas. */
 182 #define P_OWEUPC        0x00008000      /* Owe process an addupc() call at next ast. */
 183
 184 #define P_AFFINITY      0x00010000      /* xxx */
 185 #define P_TRANSLATED    0x00020000      /* xxx */
 186 #define P_CLASSIC       P_TRANSLATED    /* xxx */
 187
 188 #define P_DELAYIDLESLEEP 0x00040000     /* Process is marked to delay idle sleep on disk IO */
 189 #define P_CHECKOPENEVT  0x00080000      /* check if a vnode has the OPENEVT flag set on open */
 190
 191 #define P_DEPENDENCY_CAPABLE    0x00100000      /* process is ok to call vfs_markdependency() */
 192 #define P_REBOOT        0x00200000      /* Process called reboot() */
 193 #define P_RESV6         0x00400000      /* used to be P_TBE */
 194 #define P_RESV7         0x00800000      /* (P_SIGEXC)signal exceptions */
 195
 196 #define P_THCWD         0x01000000      /* process has thread cwd  */
 197 #define P_RESV9         0x02000000      /* (P_VFORK)process has vfork children */
 198 #define P_ADOPTPERSONA  0x04000000      /* process adopted a persona (used to be P_NOATTACH) */
 199 #define P_RESV11        0x08000000      /* (P_INVFORK) proc in vfork */
 200
 201 #define P_NOSHLIB       0x10000000      /* no shared libs are in use for proc */
 202                                         /* flag set on exec */
 203 #define P_FORCEQUOTA    0x20000000      /* Force quota for root */
 204 #define P_NOCLDWAIT     0x40000000      /* No zombies when chil procs exit */
 205 #define P_NOREMOTEHANG  0x80000000      /* Don't hang on remote FS ops */
 206
 207 #define P_INMEM         0               /* Obsolete: retained for compilation */
 208 #define P_NOSWAP        0               /* Obsolete: retained for compilation */
 209 #define P_PHYSIO        0               /* Obsolete: retained for compilation */
 210 #define P_FSTRACE       0               /* Obsolete: retained for compilation */
 211 #define P_SSTEP         0               /* Obsolete: retained for compilation */
 212
 213 #define P_DIRTY_TRACK                           0x00000001      /* track dirty state */
 214 #define P_DIRTY_ALLOW_IDLE_EXIT                 0x00000002      /* process can be idle-exited when clean */
 215 #define P_DIRTY_DEFER                           0x00000004      /* defer initial opt-in to idle-exit */
 216 #define P_DIRTY                                 0x00000008      /* process is dirty */
 217 #define P_DIRTY_SHUTDOWN                        0x00000010      /* process is dirty during shutdown */
 218 #define P_DIRTY_TERMINATED                      0x00000020      /* process has been marked for termination */
 219 #define P_DIRTY_BUSY                            0x00000040      /* serialization flag */
 220 #define P_DIRTY_MARKED                          0x00000080      /* marked dirty previously */
 221 #define P_DIRTY_AGING_IN_PROGRESS               0x00000100      /* aging in one of the 'aging bands' */
 222 #define P_DIRTY_LAUNCH_IN_PROGRESS              0x00000200      /* launch is in progress */
 223 #define P_DIRTY_DEFER_ALWAYS                    0x00000400      /* defer going to idle-exit after every dirty->clean transition.
 224                                                                  * For legacy jetsam policy only. This is the default with the other policies.*/
 225
 226 #define P_DIRTY_IS_DIRTY                        (P_DIRTY | P_DIRTY_SHUTDOWN)
 227 #define P_DIRTY_IDLE_EXIT_ENABLED               (P_DIRTY_TRACK|P_DIRTY_ALLOW_IDLE_EXIT)
 228
 229 #endif /* XNU_KERNEL_PRIVATE || !KERNEL */
 230
 231 #ifdef KERNEL
 232 __BEGIN_DECLS
 233
 234 extern proc_t kernproc;
 235
 236 extern int proc_is_classic(proc_t p);
 237 extern bool proc_is_exotic(proc_t p);
 238 extern bool proc_is_alien(proc_t p);
 239 proc_t current_proc_EXTERNAL(void);
 240
 241 extern int      msleep(void *chan, lck_mtx_t *mtx, int pri, const char *wmesg, struct timespec * ts );
 242 extern void     wakeup(void *chan);
 243 extern void wakeup_one(caddr_t chan);
 244
 245 /* proc kpis */
 246 /* this routine returns the pid of the current process */
 247 extern int proc_selfpid(void);
 248 /* this routine returns the pid of the parent of the current process */
 249 extern int proc_selfppid(void);
 250 /* this routine returns the csflags of the current process */
 251 extern uint64_t proc_selfcsflags(void);
 252 /* this routine populates the given flags param with the csflags of the given process. Returns 0 on success, -1 on error. */
 253 extern int proc_csflags(proc_t p, uint64_t* flags);
 254 /* this routine returns sends a signal signum to the process identified by the pid */
 255 extern void proc_signal(int pid, int signum);
 256 /* this routine checks whether any signal identified by the mask are pending in the  process identified by the pid. The check is  on all threads of the process. */
 257 extern int proc_issignal(int pid, sigset_t mask);
 258 /* this routine returns 1 if the pid1 is inferior of pid2 */
 259 extern int proc_isinferior(int pid1, int pid2);
 260 /* this routine copies the process's name of the executable to the passed in buffer. It
 261  * is always null terminated. The size of the buffer is to be passed in as well. This
 262  * routine is to be used typically for debugging
 263  */
 264 void proc_name(int pid, char * buf, int size);
 265 /* returns the 32-byte name if it exists, otherwise returns the 16-byte name */
 266 extern char *proc_best_name(proc_t p);
 267 /* This routine is simillar to proc_name except it returns for current process */
 268 void proc_selfname(char * buf, int size);
 269
 270 /* find a process with a given pid. This comes with a reference which needs to be dropped by proc_rele */
 271 extern proc_t proc_find(int pid);
 272 /* find a process with a given process identity */
 273 extern proc_t proc_find_ident(struct proc_ident const *i);
 274 /* returns a handle to current process which is referenced. The reference needs to be dropped with proc_rele */
 275 extern proc_t proc_self(void);
 276 /* releases the held reference on the process */
 277 extern int proc_rele(proc_t p);
 278 /* returns the pid of the given process */
 279 extern int proc_pid(proc_t);
 280 /* returns the pid of the parent of a given process */
 281 extern int proc_ppid(proc_t);
 282 /* returns the original pid of the parent of a given process */
 283 extern int proc_original_ppid(proc_t);
 284 /* returns the start time of the given process */
 285 extern int proc_starttime(proc_t, struct timeval *);
 286 /* returns the platform (macos, ios, watchos, tvos, ...) of the given process */
 287 extern uint32_t proc_platform(const proc_t);
 288 /* returns the minimum sdk version used by the current process */
 289 extern uint32_t proc_min_sdk(proc_t);
 290 /* returns the sdk version used by the current process */
 291 extern uint32_t proc_sdk(proc_t);
 292 /* returns 1 if the process is marked for no remote hangs */
 293 extern int proc_noremotehang(proc_t);
 294 /* returns 1 if the process is marked for force quota */
 295 extern int proc_forcequota(proc_t);
 296 /* returns 1 if the process is chrooted */
 297 extern int proc_chrooted(proc_t);
 298 /* returns TRUE if a sync EXC_RESOURCE should be sent for the process */
 299 extern boolean_t proc_send_synchronous_EXC_RESOURCE(proc_t p);
 300
 301 /* this routine returns 1 if the process is running with a 64bit address space, else 0 */
 302 extern int proc_is64bit(proc_t);
 303 /* this routine returns 1 if the process is running with a 64bit register state, else 0 */
 304 extern int proc_is64bit_data(proc_t);
 305 /* this routine returns 1 if the process is initproc */
 306 extern int proc_isinitproc(proc_t);
 307 /* is this process exiting? */
 308 extern int proc_exiting(proc_t);
 309 /* returns whether the process has started down proc_exit() */
 310 extern int proc_in_teardown(proc_t);
 311 /* this routine returns error if the process is not one with super user privileges */
 312 int proc_suser(proc_t p);
 313 /* returns the cred assicaited with the process; temporary api */
 314 kauth_cred_t proc_ucred(proc_t p);
 315 /* returns 1 if the process is tainted by uid or gid changes,e else 0 */
 316 extern int proc_issetugid(proc_t p);
 317
 318 extern int proc_tbe(proc_t);
 319
 320 /*!
 321  *  @function proc_gettty
 322  *  @abstract Copies the associated tty vnode for a given process if it exists. The caller needs to decrement the iocount of the vnode.
 323  *  @return 0 on success. ENOENT if the process has no associated TTY. EINVAL if arguments are NULL or vnode_getwithvid fails.
 324  */
 325 extern int proc_gettty(proc_t p, vnode_t *vp);
 326
 327 /* this routine populates the associated tty device for a given process if it exists, returns 0 on success or else returns EINVAL */
 328 extern int proc_gettty_dev(proc_t p, dev_t *dev);
 329
 330 /*!
 331  *  @function proc_selfpgrpid
 332  *  @abstract Get the process group id for the current process, as with proc_pgrpid().
 333  *  @return pgrpid of current process.
 334  */
 335 pid_t proc_selfpgrpid(void);
 336
 337 /*!
 338  *  @function proc_pgrpid
 339  *  @abstract Get the process group id for the passed-in process.
 340  *  @param p Process whose pgrpid to grab.
 341  *  @return pgrpid for "p".
 342  */
 343 pid_t proc_pgrpid(proc_t p);
 344
 345 /*!
 346  *  @function proc_sessionid
 347  *  @abstract Get the process session id for the passed-in process.
 348  *  @param p Process whose session id to grab.
 349  *  @return session id of current process.
 350  */
 351 pid_t proc_sessionid(proc_t p);
 352
 353 #ifdef KERNEL_PRIVATE
 354 // mark a process as being allowed to call vfs_markdependency()
 355 void bsd_set_dependency_capable(task_t task);
 356 #ifdef  __arm__
 357 static inline int
 358 IS_64BIT_PROCESS(__unused proc_t p)
 359 {
 360         return 0;
 361 }
 362 #else
 363 extern int IS_64BIT_PROCESS(proc_t);
 364 #endif /* __arm__ */
 365
 366 extern int      tsleep(void *chan, int pri, const char *wmesg, int timo);
 367 extern int      msleep1(void *chan, lck_mtx_t *mtx, int pri, const char *wmesg, u_int64_t timo);
 368
 369 task_t proc_task(proc_t);
 370 extern int proc_pidversion(proc_t);
 371 extern proc_t proc_parent(proc_t);
 372 extern void proc_parent_audit_token(proc_t, audit_token_t *);
 373 extern uint32_t proc_persona_id(proc_t);
 374 extern uint32_t proc_getuid(proc_t);
 375 extern uint32_t proc_getgid(proc_t);
 376 extern int proc_getcdhash(proc_t, unsigned char *);
 377
 378 /*!
 379  *  @function    proc_pidbackgrounded
 380  *  @abstract    KPI to determine if a process is currently backgrounded.
 381  *  @discussion  The process may move into or out of background state at any time,
 382  *             so be prepared for this value to be outdated immediately.
 383  *  @param pid   PID of the process to be queried.
 384  *  @param state Pointer to a value which will be set to 1 if the process
 385  *             is currently backgrounded, 0 otherwise.
 386  *  @return      ESRCH if pid cannot be found or has started exiting.
 387  *
 388  *             EINVAL if state is NULL.
 389  */
 390 extern int proc_pidbackgrounded(pid_t pid, uint32_t* state);
 391
 392 /*
 393  * This returns an unique 64bit id of a given process.
 394  * Caller needs to hold proper reference on the
 395  * passed in process strucutre.
 396  */
 397 extern uint64_t proc_uniqueid(proc_t);
 398
 399 /* unique 64bit id for process's original parent */
 400 extern uint64_t proc_puniqueid(proc_t);
 401
 402 extern void proc_set_responsible_pid(proc_t target_proc, pid_t responsible_pid);
 403
 404 /* return 1 if process is forcing case-sensitive HFS+ access, 0 for default */
 405 extern int proc_is_forcing_hfs_case_sensitivity(proc_t);
 406
 407 /* return true if the process is translated, false for default */
 408 extern boolean_t proc_is_translated(proc_t);
 409
 410 /* true if the process ignores errors from content protection APIs */
 411 extern bool proc_ignores_content_protection(proc_t proc);
 412
 413 /*!
 414  *  @function    proc_exitstatus
 415  *  @abstract    KPI to determine a process's exit status.
 416  *  @discussion  This function is not safe to call if the process could be
 417  *               concurrently stopped or started, but it can be called from a
 418  *               mpo_proc_notify_exit callback.
 419  *  @param p     The process to be queried.
 420  *  @return      Value in the same format as wait()'s output parameter.
 421  */
 422 extern int proc_exitstatus(proc_t p);
 423
 424 #endif /* KERNEL_PRIVATE */
 425
 426 #ifdef XNU_KERNEL_PRIVATE
 427
 428 extern void proc_getexecutableuuid(proc_t, unsigned char *, unsigned long);
 429 extern int proc_get_originatorbgstate(uint32_t *is_backgrounded);
 430
 431 /* Kernel interface to get the uuid of the originator of the work.*/
 432 extern int proc_pidoriginatoruuid(uuid_t uuid_buf, uint32_t buffersize);
 433
 434 extern uint64_t proc_was_throttled(proc_t);
 435 extern uint64_t proc_did_throttle(proc_t);
 436 extern bool proc_is_traced(proc_t p);
 437
 438 extern void proc_coalitionids(proc_t, uint64_t[COALITION_NUM_TYPES]);
 439
 440 #ifdef CONFIG_32BIT_TELEMETRY
 441 extern void proc_log_32bit_telemetry(proc_t p);
 442 #endif /* CONFIG_32BIT_TELEMETRY */
 443 extern uint64_t get_current_unique_pid(void);
 444 #endif /* XNU_KERNEL_PRIVATE*/
 445
 446 #ifdef KERNEL_PRIVATE
 447 /* If buf argument is NULL, the necessary length to allocate will be set in buflen */
 448 extern int proc_selfexecutableargs(uint8_t *buf, size_t *buflen);
 449 extern off_t proc_getexecutableoffset(proc_t p);
 450 extern vnode_t proc_getexecutablevnode(proc_t); /* Returned with iocount, use vnode_put() to drop */
 451 extern int networking_memstatus_callout(proc_t p, uint32_t);
 452
 453 /* System call filtering for BSD syscalls, mach traps and kobject routines. */
 454 #define SYSCALL_MASK_UNIX 0
 455 #define SYSCALL_MASK_MACH 1
 456 #define SYSCALL_MASK_KOBJ 2
 457
 458 #define SYSCALL_FILTER_CALLBACK_VERSION 1
 459 typedef int (*syscall_filter_cbfunc_t)(proc_t p, int num);
 460 typedef int (*kobject_filter_cbfunc_t)(proc_t p, int msgid, int idx);
 461 struct syscall_filter_callbacks {
 462         int version;
 463         const syscall_filter_cbfunc_t unix_filter_cbfunc;
 464         const syscall_filter_cbfunc_t mach_filter_cbfunc;
 465         const kobject_filter_cbfunc_t kobj_filter_cbfunc;
 466 };
 467 typedef struct syscall_filter_callbacks * syscall_filter_cbs_t;
 468
 469 extern int proc_set_syscall_filter_callbacks(syscall_filter_cbs_t callback);
 470 extern int proc_set_syscall_filter_index(int which, int num, int index);
 471 extern size_t proc_get_syscall_filter_mask_size(int which);
 472 extern int proc_set_syscall_filter_mask(proc_t p, int which, unsigned char *maskptr, size_t masklen);
 473
 474 extern int proc_set_filter_message_flag(proc_t p, boolean_t flag);
 475 extern int proc_get_filter_message_flag(proc_t p, boolean_t *flag);
 476
 477 #endif /* KERNEL_PRIVATE */
 478
 479 __END_DECLS
 480
 481 #endif  /* KERNEL */
 482
 483 #ifdef PRIVATE
 484
 485 /* Values for pid_shutdown_sockets */
 486 #define SHUTDOWN_SOCKET_LEVEL_DISCONNECT_SVC            0x00000001
 487 #define SHUTDOWN_SOCKET_LEVEL_DISCONNECT_ALL            0x00000002
 488
 489 #ifdef KERNEL
 490 #define SHUTDOWN_SOCKET_LEVEL_DISCONNECT_INTERNAL       0x10000000
 491 #define SHUTDOWN_SOCKET_LEVEL_NECP                      0x20000000
 492 #define SHUTDOWN_SOCKET_LEVEL_CONTENT_FILTER            0x40000000
 493 #endif
 494
 495 #ifndef KERNEL
 496
 497 __BEGIN_DECLS
 498
 499 int pid_suspend(int pid);
 500 int pid_resume(int pid);
 501 int task_inspect_for_pid(unsigned int target_tport, int pid, unsigned int *t);
 502 int task_read_for_pid(unsigned int target_tport, int pid, unsigned int *t);
 503
 504 #if defined(__arm__) || defined(__arm64__)
 505 int pid_hibernate(int pid);
 506 #endif /* defined(__arm__) || defined(__arm64__)  */
 507 int pid_shutdown_sockets(int pid, int level);
 508 int pid_shutdown_networking(int pid, int level);
 509 __END_DECLS
 510
 511 #endif /* !KERNEL */
 512
 513 /* Entitlement to allow non-root processes to suspend/resume any task */
 514 #define PROCESS_RESUME_SUSPEND_ENTITLEMENT "com.apple.private.process.suspend-resume.any"
 515
 516 #endif /* PRIVATE */
 517
 518 #endif  /* !_SYS_PROC_H_ */