| /xnu-11215/bsd/kern/ |
| H A D | sysv_ipc.c | 101 ipcperm(kauth_cred_t cred, struct ipc_perm *perm, int mode_req) in ipcperm() argument 106 mode_t mode_owner = (perm->mode & S_IRWXU); in ipcperm() 107 mode_t mode_group = (mode_t)((perm->mode & S_IRWXG) << 3); in ipcperm() 108 mode_t mode_world = (mode_t)((perm->mode & S_IRWXO) << 6); in ipcperm() 116 if (uid == perm->cuid || uid == perm->uid) { in ipcperm() 138 if ((!kauth_cred_ismember_gid(cred, perm->gid, &is_member) && is_member) && in ipcperm() 139 ((perm->gid == perm->cgid) || in ipcperm() 140 (!kauth_cred_ismember_gid(cred, perm->cgid, &is_member) && is_member))) { in ipcperm() 150 if ((!kauth_cred_ismember_gid(cred, perm->gid, &is_member) && is_member) || in ipcperm() 151 ((perm->gid != perm->cgid) && in ipcperm() [all …]
|
| /xnu-11215/osfmk/kern/ |
| H A D | exclaves_shared_memory.c | 56 const sharedmemorybase_perms_s perm, const uint64_t endpage) in exclaves_shared_memory_access_check() argument 70 if (perm != result.permissions) { in exclaves_shared_memory_access_check() 95 const sharedmemorybase_perms_s perm, const uint64_t startpage, in exclaves_shared_memory_setup() argument 101 assert(perm == SHAREDMEMORYBASE_PERMS_READWRITE || in exclaves_shared_memory_setup() 102 perm == SHAREDMEMORYBASE_PERMS_READONLY); in exclaves_shared_memory_setup() 108 perm, endpage); in exclaves_shared_memory_setup() 124 ret = sharedmemorybase_segxnuaccess_createxnumapping(sm_client, perm, in exclaves_shared_memory_setup()
|
| H A D | exclaves_shared_memory.h | 86 const sharedmemorybase_perms_s perm, uint64_t startpage, uint64_t endpage,
|
| H A D | exclaves_resource.c | 1687 exclaves_buffer_perm_t perm) in shared_memory_map() argument 1697 assert(perm == EXCLAVES_BUFFER_PERM_READ || in shared_memory_map() 1698 perm == EXCLAVES_BUFFER_PERM_WRITE); in shared_memory_map() 1722 if (sm->sm_size < rounded_size || sm->sm_perm != perm) { in shared_memory_map() 1745 const sharedmemorybase_perms_s sm_perm = perm == EXCLAVES_BUFFER_PERM_WRITE ? in shared_memory_map() 1760 sm->sm_perm = perm; in shared_memory_map() 1789 const vm_prot_t prot = (perm & EXCLAVES_BUFFER_PERM_WRITE) != 0 ? in shared_memory_map() 1812 exclaves_buffer_perm_t perm, exclaves_resource_t **out) in exclaves_resource_shared_memory_map() argument 1823 kern_return_t kr = shared_memory_map(resource, size, perm); in exclaves_resource_shared_memory_map()
|
| H A D | exclaves_resource.h | 724 size_t size, exclaves_buffer_perm_t perm, exclaves_resource_t **resource);
|
| H A D | exclaves.c | 348 exclaves_buffer_perm_t perm = (exclaves_buffer_perm_t)usize2; in _exclaves_ctl_trap() local 351 if ((perm & supported) == 0 || (perm & ~supported) != 0) { in _exclaves_ctl_trap() 358 perm, &resource); in _exclaves_ctl_trap()
|
| /xnu-11215/bsd/sys/ |
| H A D | ipc.h | 177 #define IXSEQ_TO_IPCID(ix, perm) (((perm._seq) << 16L) | ((ix) & 0xffff)) argument
|
| /xnu-11215/tools/cocci/ |
| H A D | vm-param-swap.cocci | 59 expression perm, vms_caller, perm_u, flags, extra_mask; 62 - kr = vm_sanitize_memory_entry_perm(&perm, vms_caller, perm_u, flags, extra_mask); 63 + kr = vm_sanitize_memory_entry_perm(perm_u, vms_caller, flags, extra_mask, &perm);
|
| /xnu-11215/osfmk/vm/ |
| H A D | vm_sanitize.c | 747 vm_prot_t *perm) in vm_sanitize_memory_entry_perm() argument 753 *perm = VM_SANITIZE_UNSAFE_UNWRAP(perm_u); in vm_sanitize_memory_entry_perm() 754 prot = *perm & MAP_MEM_PROT_MASK; in vm_sanitize_memory_entry_perm() 755 map_mem_flags = *perm & MAP_MEM_FLAGS_MASK; in vm_sanitize_memory_entry_perm() 756 access = GET_MAP_MEM(*perm); in vm_sanitize_memory_entry_perm() 763 *perm = VM_PROT_NONE; in vm_sanitize_memory_entry_perm() 770 *perm &= ~MAP_MEM_PROT_MASK; in vm_sanitize_memory_entry_perm() 1216 vm_prot_t perm; in vm_sanitize_memory_entry_perm_test() local 1224 VM_PROT_IS_MASK, &perm); in vm_sanitize_memory_entry_perm_test() 1244 VM_PROT_IS_MASK, &perm); in vm_sanitize_memory_entry_perm_test() [all …]
|
| H A D | vm_sanitize_internal.h | 1066 vm_prot_t *perm);
|
| /xnu-11215/bsd/security/audit/ |
| H A D | audit_bsm.c | 1749 struct ipc_perm perm; in kaudit_to_bsm() local 1751 perm.uid = ar->ar_arg_pipc_perm.pipc_uid; in kaudit_to_bsm() 1752 perm.gid = ar->ar_arg_pipc_perm.pipc_gid; in kaudit_to_bsm() 1756 perm._seq = 0; in kaudit_to_bsm() 1757 perm._key = 0; in kaudit_to_bsm() 1758 tok = au_to_ipc_perm(&perm); in kaudit_to_bsm() 1784 struct ipc_perm perm; in kaudit_to_bsm() local 1786 perm.uid = ar->ar_arg_pipc_perm.pipc_uid; in kaudit_to_bsm() 1791 perm._seq = 0; in kaudit_to_bsm() 1792 perm._key = 0; in kaudit_to_bsm() [all …]
|
| H A D | audit_bsm_token.c | 441 au_to_ipc_perm(struct ipc_perm *perm) in au_to_ipc_perm() argument 447 if (perm == NULL) { in au_to_ipc_perm() 460 ADD_U_INT32(dptr, perm->uid); in au_to_ipc_perm() 461 ADD_U_INT32(dptr, perm->gid); in au_to_ipc_perm() 462 ADD_U_INT32(dptr, perm->cuid); in au_to_ipc_perm() 463 ADD_U_INT32(dptr, perm->cgid); in au_to_ipc_perm() 466 ADD_U_INT16(dptr, perm->mode); in au_to_ipc_perm() 469 ADD_U_INT16(dptr, perm->_seq); in au_to_ipc_perm() 472 ADD_U_INT16(dptr, perm->_key); in au_to_ipc_perm()
|
| H A D | audit.h | 243 const struct ipc_perm *perm);
|
| H A D | audit_arg.c | 532 audit_arg_svipc_perm(struct kaudit_record *ar, const struct ipc_perm *perm) in audit_arg_svipc_perm() argument 534 bcopy(perm, &ar->k_ar.ar_arg_svipc_perm, in audit_arg_svipc_perm()
|
| /xnu-11215/iokit/Kernel/ |
| H A D | IONVRAM.cpp | 587 VariablePermission perm; in verifyPermission() local 596 perm = getVariablePermission(varName); in verifyPermission() 600 if (perm.Bits.KernelOnly || kernelOnlyVar(varGuid, varName)) { in verifyPermission() 606 if (perm.Bits.InternalOnly && !gInternalBuild) { in verifyPermission() 624 if (systemGuid && perm.Bits.SystemReadHidden) { in verifyPermission() 626 } else if (kernel || admin || readEntitled || perm.Bits.FullAccess || varEntitled) { in verifyPermission() 632 if (kernel || perm.Bits.UserWrite || admin || writeEntitled || varEntitled) { in verifyPermission() 652 if (perm.Bits.NeverAllowedToDelete) { in verifyPermission() 655 } else if ((op == kIONVRAMOperationObliterate) && perm.Bits.ResetNVRAMOnlyDelete) { in verifyPermission() 658 } else if ((op == kIONVRAMOperationDelete) && perm.Bits.ResetNVRAMOnlyDelete) { in verifyPermission() [all …]
|
| /xnu-11215/osfmk/tests/ |
| H A D | vm_parameter_validation.h | 3368 #define SMART_ALLOCATE_PURGEABLE_VM(map, size, perm) \ argument 3369 …__attribute__((cleanup(cleanup_allocation))) = create_allocation(map, size, 0, perm, false, VM_FLA… 3373 #define SMART_ALLOCATE_VM(map, size, perm) \ argument 3374 __attribute__((cleanup(cleanup_allocation))) = create_allocation(map, size, 0, perm, false, 0) 3378 #define SMART_ALLOCATE_ALIGNED_VM(map, size, align_mask, perm) \ argument 3379 …__attribute__((cleanup(cleanup_allocation))) = create_allocation(map, size, align_mask, perm, fals… 3384 #define SMART_TRY_ALLOCATE_VM(map, size, perm) \ argument 3385 __attribute__((cleanup(cleanup_allocation))) = create_allocation(map, size, 0, perm, true, 0) 3401 vm_prot_t perm, bool allow_failure, int additional_map_flags) in create_allocation() argument 3451 kr = mach_vm_protect(result.map, result.addr, result.size, false, perm); in create_allocation()
|
| /xnu-11215/bsd/bsm/ |
| H A D | audit_record.h | 276 token_t *au_to_ipc_perm(struct ipc_perm *perm)
|