OpenCore  1.0.4
OpenCore Bootloader
Loading...
Searching...
No Matches
AppleCsrConfig.h
Go to the documentation of this file.
1
13#ifndef APPLE_CSR_CONFIG_H
14#define APPLE_CSR_CONFIG_H
15
21
25
26#define CSR_ALLOW_UNTRUSTED_KEXTS BIT0
27#define CSR_ALLOW_UNRESTRICTED_FS BIT1
28#define CSR_ALLOW_TASK_FOR_PID BIT2
29#define CSR_ALLOW_KERNEL_DEBUGGER BIT3
30#define CSR_ALLOW_APPLE_INTERNAL BIT4
31#define CSR_ALLOW_DESTRUCTIVE_DTRACE BIT5
32#define CSR_ALLOW_UNRESTRICTED_DTRACE BIT5
33#define CSR_ALLOW_UNRESTRICTED_NVRAM BIT6
34#define CSR_ALLOW_DEVICE_CONFIGURATION BIT7
35#define CSR_ALLOW_ANY_RECOVERY_OS BIT8
36#define CSR_ALLOW_UNAPPROVED_KEXTS BIT9
37#define CSR_ALLOW_EXECUTABLE_POLICY_OVERRIDE BIT10
38#define CSR_ALLOW_UNAUTHENTICATED_ROOT BIT11
39
40#define CSR_VALID_FLAGS (CSR_ALLOW_UNTRUSTED_KEXTS |\
41 CSR_ALLOW_UNRESTRICTED_FS | \
42 CSR_ALLOW_TASK_FOR_PID | \
43 CSR_ALLOW_KERNEL_DEBUGGER | \
44 CSR_ALLOW_APPLE_INTERNAL | \
45 CSR_ALLOW_UNRESTRICTED_DTRACE | \
46 CSR_ALLOW_UNRESTRICTED_NVRAM | \
47 CSR_ALLOW_DEVICE_CONFIGURATION | \
48 CSR_ALLOW_ANY_RECOVERY_OS | \
49 CSR_ALLOW_UNAPPROVED_KEXTS | \
50 CSR_ALLOW_EXECUTABLE_POLICY_OVERRIDE | \
51 CSR_ALLOW_UNAUTHENTICATED_ROOT)
52
53#define CSR_ALWAYS_ENFORCED_FLAGS (CSR_ALLOW_DEVICE_CONFIGURATION | CSR_ALLOW_ANY_RECOVERY_OS)
54
55/* Flags set by default by Apple `csrutil disable`. */
56#define CSR_DISABLE_FLAGS (CSR_ALLOW_UNTRUSTED_KEXTS |\
57 CSR_ALLOW_UNRESTRICTED_FS | \
58 CSR_ALLOW_TASK_FOR_PID | \
59 CSR_ALLOW_KERNEL_DEBUGGER | \
60 CSR_ALLOW_APPLE_INTERNAL | \
61 CSR_ALLOW_UNRESTRICTED_DTRACE | \
62 CSR_ALLOW_UNRESTRICTED_NVRAM)
63
64/* Flags set by default by OC `csrutil disable`. */
65#define OC_CSR_DISABLE_FLAGS (CSR_DISABLE_FLAGS | CSR_ALLOW_UNAPPROVED_KEXTS)
66
67#define CSR_APPLE_SIP_NVRAM_ATTR (EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS)
68#define CSR_APPLE_SIP_NVRAM_NV_ATTR (EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS | EFI_VARIABLE_NON_VOLATILE)
69
73#define CSR_CAPABILITY_UNLIMITED BIT0
74#define CSR_CAPABILITY_CONFIG BIT1
75#define CSR_CAPABILITY_APPLE_INTERNAL BIT2
76
77#define CSR_VALID_CAPABILITIES (CSR_CAPABILITY_UNLIMITED | CSR_CAPABILITY_CONFIG | CSR_CAPABILITY_APPLE_INTERNAL)
78
79#endif // APPLE_CSR_CONFIG_H