/*
- * Copyright (c) 2004 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2004-2005, 2011 Apple Computer, Inc. All rights reserved.
*
- * @APPLE_LICENSE_HEADER_START@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
*
* This file contains Original Code and/or Modifications of Original Code
* as defined in and that are subject to the Apple Public Source License
* Version 2.0 (the 'License'). You may not use this file except in
- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
+ * compliance with the License. The rights granted to you under the License
+ * may not be used to create, or enable the creation or redistribution of,
+ * unlawful or unlicensed copies of an Apple operating system, or to
+ * circumvent, violate, or enable the circumvention or violation of, any
+ * terms of an Apple operating system software license agreement.
+ *
+ * Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this file.
*
* The Original Code and all software distributed under the License are
* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
* Please see the License for the specific language governing rights and
* limitations under the License.
*
- * @APPLE_LICENSE_HEADER_END@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
*/
/*
* Copyright (c) 1993, David Greenman
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/
+/*
+ * NOTICE: This file was modified by SPARTA, Inc. in 2005 to introduce
+ * support for mandatory and extensible security protections. This notice
+ * is included in support of clause 2.2 (b) of the Apple Public License,
+ * Version 2.0.
+ */
#ifndef _SYS_IMGACT_H_
#define _SYS_IMGACT_H_
#define IMG_SHSIZE 512 /* largest shell interpreter, in bytes */
+struct label;
struct proc;
struct nameidata;
user_addr_t ip_user_fname; /* argument */
user_addr_t ip_user_argv; /* argument */
user_addr_t ip_user_envv; /* argument */
+ int ip_seg; /* segment for arguments */
struct vnode *ip_vp; /* file */
struct vnode_attr *ip_vattr; /* run file attributes */
struct vnode_attr *ip_origvattr; /* invocation file attributes */
+ cpu_type_t ip_origcputype; /* cputype of invocation file */
+ cpu_subtype_t ip_origcpusubtype; /* subtype of invocation file */
char *ip_vdata; /* file data (up to one page) */
int ip_flags; /* image flags */
int ip_argc; /* argument count */
- char *ip_argv; /* argument vector beginning */
int ip_envc; /* environment count */
+ int ip_applec; /* apple vector count */
+
+ char *ip_startargv; /* argument vector beginning */
+ char *ip_endargv; /* end of argv/start of envv */
+ char *ip_endenvv; /* end of envv/start of applev */
+
char *ip_strings; /* base address for strings */
char *ip_strendp; /* current end pointer */
- char *ip_strendargvp; /* end of argv/start of envp */
- int ip_strspace; /* remaining space */
+
+ int ip_argspace; /* remaining space of NCARGS limit (argv+envv) */
+ int ip_strspace; /* remaining total string space */
+
user_size_t ip_arch_offset; /* subfile offset in ip_vp */
user_size_t ip_arch_size; /* subfile length in ip_vp */
- char ip_interp_name[IMG_SHSIZE]; /* interpreter name */
+ char ip_interp_buffer[IMG_SHSIZE]; /* interpreter buffer space */
+ int ip_interp_sugid_fd; /* fd for sugid script */
- /* Next two fields are for support of Classic... */
- char *ip_p_comm; /* optional alt p->p_comm */
- char *ip_tws_cache_name; /* task working set cache */
+ /* Next two fields are for support of architecture translation... */
struct vfs_context *ip_vfs_context; /* VFS context */
struct nameidata *ip_ndp; /* current nameidata */
- thread_t ip_vfork_thread; /* thread created, if vfork */
+ thread_t ip_new_thread; /* thread for spawn/vfork */
+
+ struct label *ip_execlabelp; /* label of the executable */
+ struct label *ip_scriptlabelp; /* label of the script */
+ struct vnode *ip_scriptvp; /* script */
+ unsigned int ip_csflags; /* code signing flags */
+ int ip_mac_return; /* return code from mac policy checks */
+ void *ip_px_sa;
+ void *ip_px_sfa;
+ void *ip_px_spa;
+ void *ip_px_smpx; /* MAC-specific spawn attrs. */
+ void *ip_px_persona; /* persona args */
};
/*
* Image flags
*/
-#define IMGPF_NONE 0x00000000 /* No flags */
-#define IMGPF_INTERPRET 0x00000001 /* Interpreter invoked */
-#define IMGPF_RESERVED1 0x00000002 /* reserved */
-#define IMGPF_WAS_64BIT 0x00000004 /* exec from a 64Bit binary */
-#define IMGPF_IS_64BIT 0x00000008 /* exec to a 64Bit binary */
+#define IMGPF_NONE 0x00000000 /* No flags */
+#define IMGPF_INTERPRET 0x00000001 /* Interpreter invoked */
+#define IMGPF_RESERVED 0x00000002
+#define IMGPF_WAS_64BIT 0x00000004 /* exec from a 64Bit binary */
+#define IMGPF_IS_64BIT 0x00000008 /* exec to a 64Bit binary */
+#define IMGPF_SPAWN 0x00000010 /* spawn (without setexec) */
+#define IMGPF_DISABLE_ASLR 0x00000020 /* disable ASLR */
+#define IMGPF_ALLOW_DATA_EXEC 0x00000040 /* forcibly disallow data execution */
+#define IMGPF_VFORK_EXEC 0x00000080 /* vfork followed by exec */
#endif /* !_SYS_IMGACT */
projects / apple / xnu.git / blobdiff