Loading...
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 | /* * Copyright (c) 2010 Apple Inc. All rights reserved. * * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ * * This file contains Original Code and/or Modifications of Original Code * as defined in and that are subject to the Apple Public Source License * Version 2.0 (the 'License'). You may not use this file except in * compliance with the License. The rights granted to you under the License * may not be used to create, or enable the creation or redistribution of, * unlawful or unlicensed copies of an Apple operating system, or to * circumvent, violate, or enable the circumvention or violation of, any * terms of an Apple operating system software license agreement. * * Please obtain a copy of the License at * http://www.opensource.apple.com/apsl/ and read it before using this file. * * The Original Code and all software distributed under the License are * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. * Please see the License for the specific language governing rights and * limitations under the License. * * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ */ #include <TargetConditionals.h> #include <stdbool.h> #include <strings.h> #include <unistd.h> #include <mach/vm_page_size.h> #include <spawn_filtering_private.h> #include "_libkernel_init.h" #include "system-version-compat-support.h" extern int mach_init(void); #if SYSTEM_VERSION_COMPAT_ENABLED #include <sys/sysctl.h> extern bool _system_version_compat_check_path_suffix(const char *orig_path); extern int _system_version_compat_open_shim(int opened_fd, int openat_fd, const char *orig_path, int oflag, mode_t mode, int (*close_syscall)(int), int (*open_syscall)(const char *, int, mode_t), int (*openat_syscall)(int, const char *, int, mode_t), int (*fcntl_syscall)(int, int, long)); extern bool (*system_version_compat_check_path_suffix)(const char *orig_path); extern int (*system_version_compat_open_shim)(int opened_fd, int openat_fd, const char *orig_path, int oflag, mode_t mode, int (*close_syscall)(int), int (*open_syscall)(const char *, int, mode_t), int (*openat_syscall)(int, const char *, int, mode_t), int (*fcntl_syscall)(int, int, long)); extern system_version_compat_mode_t system_version_compat_mode; int __sysctlbyname(const char *name, size_t namelen, void *oldp, size_t *oldlenp, void *newp, size_t newlen); #endif /* SYSTEM_VERSION_COMPAT_ENABLED */ #if POSIX_SPAWN_FILTERING_ENABLED struct _posix_spawn_args_desc; extern bool (*posix_spawn_with_filter)(pid_t *pid, const char *fname, char * const *argp, char * const *envp, struct _posix_spawn_args_desc *adp, int *ret); extern bool _posix_spawn_with_filter(pid_t *pid, const char *fname, char * const *argp, char * const *envp, struct _posix_spawn_args_desc *adp, int *ret); extern int (*execve_with_filter)(char *fname, char **argp, char **envp); extern int _execve_with_filter(char *fname, char **argp, char **envp); #endif /* POSIX_SPAWN_FILTERING_ENABLED */ #if TARGET_OS_OSX __attribute__((visibility("default"))) extern bool _os_xbs_chrooted; bool _os_xbs_chrooted; #endif /* TARGET_OS_OSX */ /* dlsym() funcptr is for legacy support in exc_catcher */ void* (*LIBKERNEL_FUNCTION_PTRAUTH(_dlsym))(void*, const char*) __attribute__((visibility("hidden"))); __attribute__((visibility("hidden"))) _libkernel_functions_t _libkernel_functions; void __libkernel_init(_libkernel_functions_t fns, const char *envp[] __attribute__((unused)), const char *apple[] __attribute__((unused)), const struct ProgramVars *vars __attribute__((unused))) { _libkernel_functions = fns; if (fns->dlsym) { _dlsym = fns->dlsym; } mach_init(); #if TARGET_OS_OSX for (size_t i = 0; envp[i]; i++) { #if defined(__i386__) || defined(__x86_64__) const char *VM_KERNEL_PAGE_SHIFT_ENV = "VM_KERNEL_PAGE_SIZE_4K=1"; if (vm_kernel_page_shift != 12 && strcmp(VM_KERNEL_PAGE_SHIFT_ENV, envp[i]) == 0) { vm_kernel_page_shift = 12; vm_kernel_page_size = 1 << vm_kernel_page_shift; vm_kernel_page_mask = vm_kernel_page_size - 1; } #endif /* defined(__i386__) || defined(__x86_64__) */ } #endif /* TARGET_OS_OSX */ } void __libkernel_init_late(_libkernel_late_init_config_t config) { if (config->version >= 1) { #if SYSTEM_VERSION_COMPAT_ENABLED #if TARGET_OS_OSX && !defined(__i386__) if (config->enable_system_version_compat) { /* enable the version compatibility shim for this process (macOS only) */ /* first hook up the shims we reference from open{at}() */ system_version_compat_check_path_suffix = _system_version_compat_check_path_suffix; system_version_compat_open_shim = _system_version_compat_open_shim; system_version_compat_mode = SYSTEM_VERSION_COMPAT_MODE_MACOSX; /* * tell the kernel the shim is enabled for this process so it can shim any * necessary sysctls */ int enable = 1; __sysctlbyname("kern.system_version_compat", strlen("kern.system_version_compat"), NULL, NULL, &enable, sizeof(enable)); } else if ((config->version >= 2) && config->enable_ios_version_compat) { /* enable the iOS ProductVersion compatibility shim for this process */ /* first hook up the shims we reference from open{at}() */ system_version_compat_check_path_suffix = _system_version_compat_check_path_suffix; system_version_compat_open_shim = _system_version_compat_open_shim; system_version_compat_mode = SYSTEM_VERSION_COMPAT_MODE_IOS; /* * We don't currently shim any sysctls for iOS apps running on macOS so we * don't need to inform the kernel that this app has the SystemVersion shim enabled. */ } #endif /* TARGET_OS_OSX && !defined(__i386__) */ #endif /* SYSTEM_VERSION_COMPAT_ENABLED */ #if POSIX_SPAWN_FILTERING_ENABLED if ((config->version >= 3) && config->enable_posix_spawn_filtering) { posix_spawn_with_filter = _posix_spawn_with_filter; execve_with_filter = _execve_with_filter; } #endif /* POSIX_SPAWN_FILTERING_ENABLED */ } } void __libkernel_init_after_boot_tasks( _libkernel_init_after_boot_tasks_config_t config) { if (config->version >= 1) { #if POSIX_SPAWN_FILTERING_ENABLED if (config->enable_posix_spawn_filtering) { posix_spawn_with_filter = _posix_spawn_with_filter; execve_with_filter = _execve_with_filter; } #endif /* POSIX_SPAWN_FILTERING_ENABLED */ } } |