this repo has no description
[sandbox] Add sandbox_query_approval_policy_for_path stub. Add sandbox_check_by_audit_token declaration and SANDBOX_FILTER_DESCRIPTOR in header.
+9
-1
+4
-1
src/sandbox/sandbox.c
+4
-1
src/sandbox/sandbox.c
···
4
4
#include <stdlib.h>
5
5
#include <stdio.h>
6
6
#include <sys/types.h>
7
-
#include <mach/message.h>
8
7
9
8
// DUMMY implementation
10
9
const enum sandbox_filter_type SANDBOX_CHECK_NO_REPORT = SANDBOX_FILTER_NONE;
···
171
170
// not quite sure what a "data vault" is here, but its usage in `JSScript.mm` in JavaScriptCore seems to indicate that we should return `0`
172
171
return 0;
173
172
};
173
+
174
+
int sandbox_query_approval_policy_for_path(const char* query, const char* path, char **approval) {
175
+
return -1;
176
+
}
+5
src/sandbox/sandbox.h
+5
src/sandbox/sandbox.h
···
26
26
#include <sys/cdefs.h>
27
27
#include <stdint.h>
28
28
#include <unistd.h>
29
+
#include <mach/message.h>
29
30
30
31
__BEGIN_DECLS
31
32
/*
···
138
139
SANDBOX_FILTER_LOCAL_NAME,
139
140
SANDBOX_FILTER_APPLEEVENT_DESTINATION,
140
141
SANDBOX_FILTER_RIGHT_NAME,
142
+
SANDBOX_FILTER_DESCRIPTOR,
141
143
};
142
144
143
145
extern const enum sandbox_filter_type SANDBOX_CHECK_NO_REPORT __attribute__((weak_import));
···
152
154
};
153
155
154
156
int sandbox_check(pid_t pid, const char *operation, enum sandbox_filter_type type, ...);
157
+
int sandbox_check_by_audit_token(audit_token_t tok, const char* operation, enum sandbox_filter_type filt, ...);
155
158
156
159
int sandbox_note(const char *note);
157
160
···
172
175
int sandbox_container_path_for_pid(pid_t pid, char *buffer, size_t bufsize);
173
176
174
177
int sandbox_wakeup_daemon(char **errorbuf);
178
+
179
+
int sandbox_query_approval_policy_for_path(const char* query, const char* path, char **approval);
175
180
176
181
const char *_amkrtemp(const char *);
177
182