xnu-1699.22.81.tar.gz

[apple/xnu.git] / bsd / sys / codesign.h

diff --git a/bsd/sys/codesign.h b/bsd/sys/codesign.h
index 56ae21668a0b86b15d47b444e69de80a17deca79..e72c25044f6e557d45c076c7ff73734a62f19a3f 100644 (file)
--- a/bsd/sys/codesign.h
+++ b/bsd/sys/codesign.h
@@ -38,6 +38,7 @@
 #define CS_EXEC_SET_HARD       0x1000  /* set CS_HARD on any exec'ed process */
 #define CS_EXEC_SET_KILL       0x2000  /* set CS_KILL on any exec'ed process */
 #define CS_KILLED              0x10000 /* was killed by kernel for invalidity */
 #define CS_EXEC_SET_HARD       0x1000  /* set CS_HARD on any exec'ed process */
 #define CS_EXEC_SET_KILL       0x2000  /* set CS_KILL on any exec'ed process */
 #define CS_KILLED              0x10000 /* was killed by kernel for invalidity */

+#define CS_RESTRICT            0x20000 /* tell dyld to treat restricted */

 
 /* csops  operations */
 #define        CS_OPS_STATUS           0       /* return status */
 
 /* csops  operations */
 #define        CS_OPS_STATUS           0       /* return status */


@@ -47,6 +48,8 @@
 #define        CS_OPS_PIDPATH          4       /* get executable's pathname */
 #define        CS_OPS_CDHASH           5       /* get code directory hash */
 #define CS_OPS_PIDOFFSET       6       /* get offset of active Mach-o slice */
 #define        CS_OPS_PIDPATH          4       /* get executable's pathname */
 #define        CS_OPS_CDHASH           5       /* get code directory hash */
 #define CS_OPS_PIDOFFSET       6       /* get offset of active Mach-o slice */

+#define CS_OPS_ENTITLEMENTS_BLOB 7     /* get entitlements blob */
+#define CS_OPS_MARKRESTRICT    8       /* set RESTRICT flag (sticky) */

 
 #ifndef KERNEL
 
 
 #ifndef KERNEL