+9

src/sandbox/include/sandbox/rootless.h

reviewed

··· 1 1 #ifndef __SANDBOX_ROOTLESS_H__ 2 2 #define __SANDBOX_ROOTLESS_H__ 3 3 4 4 + #ifdef __cplusplus 5 5 + extern "C" { 6 6 + #endif 7 7 + 4 8 int rootless_allows_task_for_pid(pid_t pid); 5 9 6 10 int rootless_restricted_environment(); 7 11 int rootless_check_trusted(const char* path); 12 12 + int rootless_check_datavault_flag(const char* path, const char* storage_class); 13 13 + 14 14 + #ifdef __cplusplus 15 15 + }; 16 16 + #endif 8 17 9 18 #endif

+6

src/sandbox/sandbox.c

reviewed

··· 165 165 // Darling doesn't have rootless anyways, so just return a value indicating an unrestricted environment 166 166 return 0; 167 167 }; 168 168 + 169 169 + int rootless_check_datavault_flag(const char* path, const char* storage_class) { 170 170 + // also unimplemented 171 171 + // not quite sure what a "data vault" is here, but its usage in `JSScript.mm` in JavaScriptCore seems to indicate that we should return `0` 172 172 + return 0; 173 173 + };