X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/91447636331957f3d9b5ca5b508f07c526b0074d..7e41aa883dd258f888d0470250eead40a53ef1f5:/bsd/sys/imgact.h

diff --git a/bsd/sys/imgact.h b/bsd/sys/imgact.h
index 7a6920171..57df28890 100644
--- a/bsd/sys/imgact.h
+++ b/bsd/sys/imgact.h
@@ -1,23 +1,29 @@
 /*
- * Copyright (c) 2004 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2004-2005, 2011 Apple Computer, Inc. All rights reserved.
  *
- * @APPLE_LICENSE_HEADER_START@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
  * 
- * The contents of this file constitute Original Code as defined in and
- * are subject to the Apple Public Source License Version 1.1 (the
- * "License").  You may not use this file except in compliance with the
- * License.  Please obtain a copy of the License at
- * http://www.apple.com/publicsource and read it before using this file.
+ * This file contains Original Code and/or Modifications of Original Code
+ * as defined in and that are subject to the Apple Public Source License
+ * Version 2.0 (the 'License'). You may not use this file except in
+ * compliance with the License. The rights granted to you under the License
+ * may not be used to create, or enable the creation or redistribution of,
+ * unlawful or unlicensed copies of an Apple operating system, or to
+ * circumvent, violate, or enable the circumvention or violation of, any
+ * terms of an Apple operating system software license agreement.
  * 
- * This Original Code and all software distributed under the License are
- * distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this file.
+ * 
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT.  Please see the
- * License for the specific language governing rights and limitations
- * under the License.
+ * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
+ * Please see the License for the specific language governing rights and
+ * limitations under the License.
  * 
- * @APPLE_LICENSE_HEADER_END@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  */
 /*
  * Copyright (c) 1993, David Greenman
@@ -51,11 +57,18 @@
  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  * SUCH DAMAGE.
  */
+/*
+ * NOTICE: This file was modified by SPARTA, Inc. in 2005 to introduce
+ * support for mandatory and extensible security protections.  This notice
+ * is included in support of clause 2.2 (b) of the Apple Public License,
+ * Version 2.0.
+ */
 #ifndef _SYS_IMGACT_H_
 #define	_SYS_IMGACT_H_
 
 #define	IMG_SHSIZE	512	/* largest shell interpreter, in bytes */
 
+struct label;
 struct proc;
 struct nameidata;
 
@@ -63,37 +76,61 @@ struct image_params {
 	user_addr_t	ip_user_fname;		/* argument */
 	user_addr_t	ip_user_argv;		/* argument */
 	user_addr_t	ip_user_envv;		/* argument */
+	int		ip_seg;			/* segment for arguments */
 	struct vnode	*ip_vp;			/* file */
 	struct vnode_attr	*ip_vattr;	/* run file attributes */
 	struct vnode_attr	*ip_origvattr;	/* invocation file attributes */
+	cpu_type_t	ip_origcputype;		/* cputype of invocation file */
+	cpu_subtype_t	ip_origcpusubtype;	/* subtype of invocation file */
 	char		*ip_vdata;		/* file data (up to one page) */
 	int		ip_flags;		/* image flags */
 	int		ip_argc;		/* argument count */
-	char		*ip_argv;		/* argument vector beginning */
 	int		ip_envc;		/* environment count */
+	int		ip_applec;		/* apple vector count */
+
+	char		*ip_startargv;		/* argument vector beginning */
+	char		*ip_endargv;	/* end of argv/start of envv */
+	char		*ip_endenvv;	/* end of envv/start of applev */
+
 	char		*ip_strings;		/* base address for strings */
 	char		*ip_strendp;		/* current end pointer */
-	char		*ip_strendargvp;	/* end of argv/start of envp */
-	int		ip_strspace;		/* remaining space */
+
+	int 		ip_argspace;	/* remaining space of NCARGS limit (argv+envv) */
+	int		ip_strspace;		/* remaining total string space */
+
 	user_size_t 	ip_arch_offset;		/* subfile offset in ip_vp */
 	user_size_t 	ip_arch_size;		/* subfile length in ip_vp */
-	char		ip_interp_name[IMG_SHSIZE];	/* interpreter name */
+	char		ip_interp_buffer[IMG_SHSIZE];	/* interpreter buffer space */
+	int		ip_interp_sugid_fd;		/* fd for sugid script */
 
-	/* Next two fields are for support of Classic... */
-	char		*ip_p_comm;		/* optional alt p->p_comm */
-	char		*ip_tws_cache_name;	/* task working set cache */
+	/* Next two fields are for support of architecture translation... */
 	struct vfs_context	*ip_vfs_context;	/* VFS context */
 	struct nameidata *ip_ndp;		/* current nameidata */
-	thread_t	ip_vfork_thread;	/* thread created, if vfork */
+	thread_t	ip_new_thread;		/* thread for spawn/vfork */
+
+	struct label	*ip_execlabelp;		/* label of the executable */
+	struct label	*ip_scriptlabelp;	/* label of the script */
+	struct vnode	*ip_scriptvp;		/* script */
+	unsigned int	ip_csflags;		/* code signing flags */
+	int		ip_mac_return;		/* return code from mac policy checks */
+	void		*ip_px_sa;
+	void		*ip_px_sfa;
+	void		*ip_px_spa;
+	void		*ip_px_smpx;		/* MAC-specific spawn attrs. */
+	void		*ip_px_persona;		/* persona args */
 };
 
 /*
  * Image flags
  */
-#define	IMGPF_NONE	0x00000000		/* No flags */
-#define	IMGPF_INTERPRET	0x00000001		/* Interpreter invoked */
-#define	IMGPF_RESERVED1	0x00000002		/* reserved */
-#define	IMGPF_WAS_64BIT	0x00000004		/* exec from a 64Bit binary */
-#define	IMGPF_IS_64BIT	0x00000008		/* exec to a 64Bit binary */
+#define	IMGPF_NONE		0x00000000	/* No flags */
+#define	IMGPF_INTERPRET		0x00000001	/* Interpreter invoked */
+#define	IMGPF_RESERVED		0x00000002
+#define	IMGPF_WAS_64BIT		0x00000004	/* exec from a 64Bit binary */
+#define	IMGPF_IS_64BIT		0x00000008	/* exec to a 64Bit binary */
+#define	IMGPF_SPAWN		0x00000010	/* spawn (without setexec) */
+#define	IMGPF_DISABLE_ASLR	0x00000020	/* disable ASLR */
+#define	IMGPF_ALLOW_DATA_EXEC	0x00000040	/* forcibly disallow data execution */
+#define	IMGPF_VFORK_EXEC	0x00000080	/* vfork followed by exec */
 
 #endif	/* !_SYS_IMGACT */