-#define CS_OPS_CDHASH 5 /* get code directory hash */
-#define CS_OPS_PIDOFFSET 6 /* get offset of active Mach-o slice */
-#define CS_OPS_ENTITLEMENTS_BLOB 7 /* get entitlements blob */
-#define CS_OPS_MARKRESTRICT 8 /* set RESTRICT flag (sticky) */
-#define CS_OPS_SET_STATUS 9 /* set codesign flags */
-#define CS_OPS_BLOB 10 /* get codesign blob */
-#define CS_OPS_IDENTITY 11 /* get codesign identity */
-
-/* SigPUP */
-#define CS_OPS_SIGPUP_INSTALL 20
-#define CS_OPS_SIGPUP_DROP 21
-#define CS_OPS_SIGPUP_VALIDATE 22
-
-struct sigpup_install_table {
- uint64_t data;
- uint64_t length;
- uint64_t path;
-};
-
-
-/*
- * Magic numbers used by Code Signing
- */
-enum {
- CSMAGIC_REQUIREMENT = 0xfade0c00, /* single Requirement blob */
- CSMAGIC_REQUIREMENTS = 0xfade0c01, /* Requirements vector (internal requirements) */
- CSMAGIC_CODEDIRECTORY = 0xfade0c02, /* CodeDirectory blob */
- CSMAGIC_EMBEDDED_SIGNATURE = 0xfade0cc0, /* embedded form of signature data */
- CSMAGIC_EMBEDDED_SIGNATURE_OLD = 0xfade0b02, /* XXX */
- CSMAGIC_EMBEDDED_ENTITLEMENTS = 0xfade7171, /* embedded entitlements */
- CSMAGIC_DETACHED_SIGNATURE = 0xfade0cc1, /* multi-arch collection of embedded signatures */
- CSMAGIC_BLOBWRAPPER = 0xfade0b01, /* CMS Signature, among other things */
-
- CS_SUPPORTSSCATTER = 0x20100,
- CS_SUPPORTSTEAMID = 0x20200,
-
- CSSLOT_CODEDIRECTORY = 0, /* slot index for CodeDirectory */
- CSSLOT_INFOSLOT = 1,
- CSSLOT_REQUIREMENTS = 2,
- CSSLOT_RESOURCEDIR = 3,
- CSSLOT_APPLICATION = 4,
- CSSLOT_ENTITLEMENTS = 5,
-
- CSSLOT_SIGNATURESLOT = 0x10000, /* CMS Signature */
-
- CSTYPE_INDEX_REQUIREMENTS = 0x00000002, /* compat with amfi */
- CSTYPE_INDEX_ENTITLEMENTS = 0x00000005, /* compat with amfi */
-
- CS_HASHTYPE_SHA1 = 1
-};
-
-
-#define KERNEL_HAVE_CS_CODEDIRECTORY 1
-
-/*
- * C form of a CodeDirectory.
- */
-typedef struct __CodeDirectory {
- uint32_t magic; /* magic number (CSMAGIC_CODEDIRECTORY) */
- uint32_t length; /* total length of CodeDirectory blob */
- uint32_t version; /* compatibility version */
- uint32_t flags; /* setup and mode flags */
- uint32_t hashOffset; /* offset of hash slot element at index zero */
- uint32_t identOffset; /* offset of identifier string */
- uint32_t nSpecialSlots; /* number of special hash slots */
- uint32_t nCodeSlots; /* number of ordinary (code) hash slots */
- uint32_t codeLimit; /* limit to main image signature range */
- uint8_t hashSize; /* size of each hash in bytes */
- uint8_t hashType; /* type of hash (cdHashType* constants) */
- uint8_t spare1; /* unused (must be zero) */
- uint8_t pageSize; /* log2(page size in bytes); 0 => infinite */
- uint32_t spare2; /* unused (must be zero) */
- /* Version 0x20100 */
- uint32_t scatterOffset; /* offset of optional scatter vector */
- /* Version 0x20200 */
- uint32_t teamOffset; /* offset of optional team identifier */
- /* followed by dynamic content as located by offset fields above */
-} CS_CodeDirectory;
-
-/*
- * Structure of an embedded-signature SuperBlob
- */
-
-typedef struct __BlobIndex {
- uint32_t type; /* type of entry */
- uint32_t offset; /* offset of entry */
-} CS_BlobIndex;
-
-typedef struct __SC_SuperBlob {
- uint32_t magic; /* magic number */
- uint32_t length; /* total length of SuperBlob */
- uint32_t count; /* number of index entries following */
- CS_BlobIndex index[]; /* (count) entries */
- /* followed by Blobs in no particular order as indicated by offsets in index */
-} CS_SuperBlob;
-
-typedef struct __SC_GenericBlob {
- uint32_t magic; /* magic number */
- uint32_t length; /* total length of blob */
- char data[];
-} CS_GenericBlob;
-
-typedef struct __SC_Scatter {
- uint32_t count; // number of pages; zero for sentinel (only)
- uint32_t base; // first page number
- uint64_t targetOffset; // offset in target
- uint64_t spare; // reserved
-} SC_Scatter;
-