apple-data 0.1.0

data/share/nvram.yaml

@@ -0,0 +1,442 @@
+---
+variables:
+- name: AAPL,ignore
+  platforms:
+  - macOS
+  - Intel
+  - bridgeOS
+- name: ApChipID
+  scopes:
+  - 94b73556-2197-4702-82a8-3e1337dafbfb
+- name: AppleSecureBootWindowsPolicy
+  description: Controls trust in Microsoft's PCA 2011 cert for Apple Secure Boot
+  type: boolean
+  platforms:
+  - macOS
+  - Intel
+  - bridgeOS
+  scopes:
+  - 94b73556-2197-4702-82a8-3e1337dafbfb
+- name: BOSCatalogURL
+- name: BaseSystemAccessabiliityFeatures
+- name: BluetoothInfo
+- name: BluetoothUHEDevices
+- name: DClr_override
+- name: DebugBluetoothHIDShim
+- name: DefaultBackgroundColor
+  description: boot.efi background color. Stored as BGRA.
+  platforms:
+  - macOS
+  - Intel
+  scopes:
+  - 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14
+- name: GPUROM
+- name: HW_BOOT_DATA
+- name: HardwareModel
+- name: IASCurrentInstallPhase
+- name: IASInstallPhaseList
+- name: IASUCatalogURL
+  description: This is the update url used for install / update.  Security issues
+    can occur when set to HTTP.  Typically managed through `seedutil`
+  type: string
+  platforms:
+  - macOS
+  - Intel
+- name: IDInstallerDataV2
+- name: IOBusyInterest
+- name: IODeviceMemory
+- name: IOPlatformActiveAction
+- name: IOPlatformHaltRestartAction
+- name: IOPlatformPanicAction
+- name: IOPlatformQuiensceAction
+- name: IOPlatformSleepAction
+- name: IOPlatformWakeAction
+- name: IORematchPersonality
+- name: LocationServicesEnabled
+- name: OTA-fsck-metrics
+- name: OTA-post-conversion
+- name: OTA-pre-conversion
+- name: OTA-sealvolume-metrics
+- name: PSFU_STATUS
+- name: SleepWakeFailurePanic
+- name: SleepWakeFailureString
+- name: StartupManagerPolicy
+  scopes:
+  - 5eeb160f-45fb-4ce9-b4e3-610359abf6f8
+- name: StartupMute
+  description: Mute startup chime
+  type: integer
+  scopes:
+  - default
+- name: SystemAudioVolume
+- name: SystemAudioVolumeExtension
+- name: SystemAudioVolumeSaved
+- name: UIScale
+  description: boot.efi interface scaling
+  platforms:
+  - macOS
+  - Intel
+  scopes:
+  - 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14
+- name: _csegbufsz_experiment
+- name: _libmalloc_experiment
+- name: aapl,panic-info
+- name: aapl,pci
+- name: acc-cm-override-charger-count
+- name: acc-cm-override-count
+- name: acc-mb-ld-lifetime
+- name: adbe-tunable
+- name: adbe-tunables
+- name: adfe-tunables
+- name: aht-results
+  description: Apple Hardware Test (diags) - PList
+  type: string
+  platforms:
+  - macOS
+  - PPC
+  - Intel
+- name: allow-root-hash-mismatch
+- name: ane-type
+- name: aud-early-boot-critical
+- name: auto-boot
+  description: If the device should `fsboot` upon power on
+  type: boolean
+- name: auto-boot-halt-stage
+- name: auto-boot-usb
+- name: auto-boot-x86-once
+- name: auto-boot?
+  type: :boolean
+- name: backlight-level
+  scopes:
+  - common
+- name: backlight-nits
+- name: base-system-path
+- name: battery-health
+- name: bluetoothActiveControllerInfo
+- name: bluetoothHostControllerSwitchBehaviour
+- name: bluetoothInternalControllerInfo
+- name: board-id
+- name: boot-args
+  description: String passed to the XNU kernel at boot (M1's do filter this though)
+  type: string
+  persistent: true
+  scopes:
+  - common
+- name: boot-breadcrumbs
+  type: string
+- name: boot-command
+  type: string
+- name: boot-device
+  type: string
+- name: boot-file
+- name: boot-image
+- name: boot-partition
+  type: number
+- name: boot-path
+- name: boot-ramdisk
+- name: boot-script
+- name: boot-stage
+- name: boot-volume
+- name: bootdelay
+  description: Seconds to pause before autoboot
+  type: number
+  persistent: true
+- name: bt1addr
+- name: btaddr
+- name: build-style
+- name: build-version
+- name: cam-use-ext-ldo
+- name: com.apple.System.boot-nonce
+- name: com.apple.System.fp-state
+- name: com.apple.System.sep.art
+- name: com.apple.System.tz0-size
+- name: console-screen
+- name: core-bin-offset
+- name: cpu-bin-offset
+- name: csr-active-config
+  description: SIP bitmask (see csr.h in xnu source)
+  platforms:
+  - macOS
+  - Intel
+  scopes:
+  - common
+- name: csr-data
+  description: Kexts to approve regardless of CSR_ALLOW_UNAPPROVED_KEXTS
+  type: string
+  platforms:
+  - macOS
+  - Intel
+  scopes:
+  - common
+- name: current-network
+  scopes:
+  - 36C28AB5-6566-4C50-9EBD-CBB920F83843
+- name: darkboot
+- name: debug-gg
+- name: debug-soc
+- name: debug-uarts
+  description: Bitfield of which UARTs to enable
+  type: integer
+  persistent: true
+- name: default-client-ip
+- name: default-gateway-ip
+- name: default-mac-address?
+  type: boolean
+- name: default-router-ip
+- name: default-server-ip
+- name: default-subnet-mask
+- name: device-material
+- name: diag-device
+- name: diag-file
+- name: diag-switch?
+- name: diags-path
+- name: disable_screensavers
+- name: display-carveout-inhibitcache
+- name: display-color-space
+- name: display-rotation
+- name: display-timing
+- name: e75
+- name: efi-backup-boot-device
+- name: efi-backup-boot-device-data
+- name: efi-boot-device
+- name: efi-boot-device-data
+- name: emu
+- name: enable-remap-mode
+- name: enter-tdm-mode
+  description: Enter USB Target Disk Mode
+  type: boolean
+  platforms:
+  - macOS
+  - Intel
+- name: eth1addr
+- name: ethaddr
+- name: failboot-breadcrumbs
+- name: fcode-debug?
+  description: Forth code debugging for OpenFirmware
+  type: string
+  platforms:
+  - macOS
+  - PPC
+- name: filesize
+- name: fixed-lcm-boost
+- name: fm-activation-locked
+- name: fm-spstatus
+- name: fmm-computer-name
+  description: Current saved host name
+  type: string
+  scopes:
+  - common
+- name: fmm-mobileme-token-FMM
+- name: fmm-mobileme-token-FMM-BridgeHasAccount
+  description: If this value is true FMM is handled by the T2 coprocessor.  This is
+    always false on Apple Silicon as there is no bridgeOS device
+  type: boolean
+  platforms:
+  - macOS
+  - Intel
+  - macOS ASi
+- name: fmm-mobileme-token-FMM-WipePending
+  description: If a device wipe has been requested by FindMy
+  type: boolean
+  platforms:
+  - macOS
+  - Intel
+- name: force-upgrade-fail
+- name: gpu-policy
+- name: gpu-power-prefs
+  description: Disable dGPU (I think only for older models)
+  type: boolean
+  platforms:
+  - macOS
+  - Intel
+  scopes:
+  - FA4CE28D-B62F-4C99-9CC3-6815686E30F9
+- name: idle-off
+- name: input-device
+  platforms:
+  - macOS
+  - PPC
+- name: input-device-1
+  platforms:
+  - macOS
+  - PPC
+- name: ipaddr
+- name: is-tethered
+- name: kaslr-off
+- name: kaslr-slide
+- name: little-endian?
+  description: If the CPU is a little endian architecture
+  type: boolean
+  platforms:
+  - macOS
+  - PPC
+- name: load-base
+- name: loadaddr
+- name: lts-persistance
+  type: string
+- name: mca-info0
+- name: mouse-device
+- name: multiupdater-retry-limits
+- name: multiupdater-state
+- name: net-boot
+- name: non-coherent
+- name: nonce-seeds
+- name: nvramrc
+- name: oblit-begins
+- name: oblit-inprogress
+- name: obliteration
+- name: oem-banner
+- name: oem-banner?
+- name: oem-logo
+- name: oem-logo?
+- name: one-time-boot-command
+- name: ota-anomalies
+- name: ota-brain-version
+- name: ota-breadcrumbs
+- name: ota-child-failures
+- name: ota-context
+- name: ota-controllerVersion
+- name: ota-conv-panic-indicator
+- name: ota-failure-reason
+- name: ota-forced-reset-uptime
+- name: ota-initial-breadcrumbs
+- name: ota-initial-result
+- name: ota-install-tonight
+- name: ota-internal-failure-reason
+- name: ota-internal-forced-reset-uptime
+- name: ota-original-os-version
+- name: ota-os-version
+- name: ota-outcome
+- name: ota-perform-shutdown
+- name: ota-reboot-retry-enabled
+- name: ota-reboot-retry-zone
+- name: ota-result
+- name: ota-retry-battery-level
+- name: ota-retry-breadcrumbs
+- name: ota-retry-codes
+- name: ota-retry-domains
+- name: ota-retry-enabled
+- name: ota-retry-error
+- name: ota-retry-external-power
+- name: ota-retry-failure-reason
+- name: ota-retry-ids
+- name: ota-retry-monitor
+- name: ota-retry-names
+- name: ota-retry-result
+- name: ota-retry-results
+- name: ota-retry-uptime
+- name: ota-retry-user-progress
+- name: ota-retry-warnings
+- name: ota-snapshot-update
+- name: ota-step-battery-level
+- name: ota-step-codes
+- name: ota-step-domains
+- name: ota-step-error
+- name: ota-step-external-power
+- name: ota-step-ids
+- name: ota-step-monitor
+- name: ota-step-names
+- name: ota-step-results
+- name: ota-step-uptime
+- name: ota-step-user-progress
+- name: ota-submission-url
+- name: ota-updateType
+- name: ota-uuid
+- name: ots-step-warnings
+- name: output-device
+- name: output-device-1
+- name: panicmedic
+- name: pci-probe-list
+- name: pci-probe-mask
+- name: pinot-panel-id
+- name: pintoaddr
+- name: pmgr_cpu_override
+- name: pmgr_gpu_override
+- name: policy-nonce-digests
+- name: pre-recovery-ota-failure-uuid
+- name: preferred-count
+  scopes:
+  - 36C28AB5-6566-4C50-9EBD-CBB920F83843
+- name: preferred-networks
+  scopes:
+  - 36C28AB5-6566-4C50-9EBD-CBB920F83843
+- name: prev-lang-diags:kbd
+- name: prev-lang:kbd
+  description: Default keyboard layout
+  type: string
+  scopes:
+  - common
+- name: prevent-restores
+- name: previous-system-uuid
+- name: pwr-path
+- name: radio-error
+- name: ramdisk-size
+- name: ramrod-nvram-sequence
+- name: ramrod-nvram-session
+- name: ramrod-nvram-shadow-path
+- name: rbdaddr0
+- name: real-base
+  type: number
+- name: real-base?
+  type: boolean
+- name: real-size
+  type: number
+- name: recovery-boot-mode
+- name: recovery-boot-setting
+- name: recoveryos-inited-update
+- name: recoveryos-passcode-blob
+- name: restore-child-failures
+- name: restore-outcome
+- name: restore-perform-shutdown
+- name: restore-reboot-retry-enabled
+- name: restore-reboot-retry-zone
+- name: restore-retry-codes
+- name: restore-retry-domains
+- name: restore-retry-error
+- name: restore-retry-ids
+- name: restore-retry-monitor
+- name: restore-retry-names
+- name: restore-retry-results
+- name: restore-step-codes
+- name: restore-step-domains
+- name: restore-step-error
+- name: restore-step-ids
+- name: restore-step-monitor
+- name: restore-step-names
+- name: restore-step-results
+- name: restore-step-warnings
+- name: root-live-fs
+- name: screen-#columns
+  type: number
+- name: screen-#rows
+  type: number
+- name: security-mode
+  description: "FireWire security mode \nSee IOFireWireController.cpp in IOFireWireFamily:
+    https://github.com/apple-oss-distributions/IOFireWireFamily/blob/IOFireWireFamily-483/IOFireWireFamily.kmodproj/IOFireWireController.cpp#L4212\n"
+  type: string
+  scopes:
+  - common
+- name: security-password
+- name: selftest-#megs
+  type: number
+- name: serverip
+- name: soc-bin-offset
+- name: stress-rack
+- name: summit-panel-id
+- name: system-passcode-lock-blob
+- name: target-uuid
+- name: tbt-options
+- name: update-volume
+- name: upgrade-boot-volume
+- name: upgrade-fallback-boot-command
+- name: usb-enabled
+- name: use-generic?
+- name: use-nvramrc?
+- name: utc-offset
+- name: virt-base
+- name: virt-size
+- name: wifi-fw-path
+- name: wifi-nvram-path
+- name: wifi1addr
+- name: wifiaddr
+- name: zhuge_debug

data/share/ota.yaml

@@ -0,0 +1,9 @@
+---
+stages:
+  - fdr_verify_sealed_manifest
+  - update_appletcon
+  - update_veridian
+  - update_rose
+  - update_se
+  - update_stockholm
+  - update_baseband

data/share/pki.yaml

@@ -0,0 +1,170 @@
+---
+uaages:
+  dcrt: device certificate
+  dcrt-oid: device owner certificate
+  lcrt: local certificate?
+  pcrt: product/production certificate?
+  rcrt: remote/recovery certificate?
+  scrt: server certificate?
+  tcrt: test certificate?
+  ucrt: user certificate (mapps to a single iCloud account)
+  vcrt: virtual certificate?
+private_oid_root: 1.2.840.113635
+oids:
+- oid: 1.2.840.113635.100.5.3
+  apple_description: ADC Certificate Policy
+- oid: 1.2.840.113635.100.5.4
+  apple_description: Markers for iPhone OS Device Certificate Policies, used for external sources to trust iPhone OS devices
+- oid: 1.2.840.113635.100.5.4.1
+  apple_description: BBC's Policy
+- oid: 1.2.840.113635.100.6.1.1
+  apple_description: Apple Released Code Signature
+- oid: 1.2.840.113635.100.6.1.2
+  apple_description: Apple World Wide Developer Relations Certificates for Code Signing during development
+- oid: 1.2.840.113635.100.6.1.3
+  apple_description: Apple World Wide Developer Relations Certificates for Code Signing for General Release through the iTMS
+- oid: 1.2.840.113635.100.6.1.3.1
+  apple_description: Apple World Wide Developer Relations Certificates for Code Signing for Test Release through the iTMS
+- oid: 1.2.840.113635.100.6.1.4
+  apple_description: Apple World Wide Developer Relations Certificates for Code Signing GM from developer to Apple
+- oid: 1.2.840.113635.100.6.1.15
+  description:
+    Contains the boot policy of the machine during certificate issuance
+    based on boot policy.  includes BORD, ronh, lobo, SDOM, lpnh, rpnh
+    BNCH, CSEC, CHIP, ECID, CPEO, OBJP, EPRO, DPRO, ESEC, DSEC and DGST
+  found_in:
+    - ucrt
+    - dcrt-oid
+  issuers:
+    - Basic Attestation User Sub CA2
+    - FDRDC-UCRT-SUBCA
+  ous:
+    - BAA Certification
+    - ucrt Leaf Certificate
+- oid: 1.2.840.113635.100.6.2.1
+  apple_description: Marker for the WWDR Intermediate Certificate
+- oid: 1.2.840.113635.100.6.2.2
+  apple_description: Marker for the iTunes Store Intermediate Certificate
+- oid: 1.2.840.113635.100.6.3.1
+  apple_description: Apple World Wide Developer Relations Client SSL Certificates for Accessing the Development Apple Push Service
+- oid: 1.2.840.113635.100.6.3.2
+  apple_description: Apple World Wide Developer Relations Client SSL Certificates for Accessing the Production Apple Push Service
+- oid: 1.2.840.113635.100.6.4.1
+  apple_description: Extension Markers for device version string, expects UTF8 to follow in SubjectAltName
+- oid: 1.2.840.113635.100.6 4.2
+  apple_description: Extension Markers for OS version string, expects UTF8 to follow in SubjectAltName
+- oid: 1.2.840.113635.100.6.5.1
+  apple_description: Apple iTunes Store Certificates for Signing Receipts of Purchases from the iTS
+- oid: 1.2.840.113635.100.6.5.2
+  apple_description: Apple iTunes Store Certificates for Signing Requests to Purchase for the iTS
+- oid: 1.2.840.113635.100.7.1.1
+  apple_description: 'Apple FairPlay certificate extended Application Authentication & Authorization: Policy'
+- oid: 1.2.840.113635.100.8.4
+  description: contains 3 integer values in ASN1, the second of which seems to be a 64bit mask of 0xFE000000
+  is_asn_body: true
+  is_extension: true
+  found_in:
+    - dcrt
+    - dcrt-oid
+  issuers:
+    - Basic Attestation User Sub CA2
+  ous:
+    - BAA Certification
+- oid: 1.2.840.113635.100.8.5
+  is_asn_body: true
+  is_extension: true
+  found_in:
+    - dcrt
+    - dcrt-oid
+  issuers:
+    - Basic Attestation User Sub CA2
+  ous:
+    - BAA Certification
+- oid: 1.2.840.113635.100.8.7
+  description: ASN1 data for the version of macOS for the issued under (e.g. 12.2)
+  is_asn_body: true
+  is_extension: true
+  found_in:
+    - dcrt
+    - dcrt-oid
+  issuers:
+    - Basic Attestation User Sub CA2
+  ous:
+    - BAA Certification
+- oid: 1.2.840.113635.100.10.1
+  description:
+    Hardware device identifiers of the machine the certificate is issued to
+    contains BORD, CHIP, ECID, srnm, udid, seid
+  found_in:
+    - ucrt
+  issuers:
+    - FDRDC-UCRT-SUBCA
+  ous:
+    - ucrt Leaf Certificate
+- oid: 1.2.840.113635.100.10.2
+  found_in:
+    - ucrt
+  issuers:
+    - FDRDC-UCRT-SUBCA
+  ous:
+    - ucrt Leaf Certificate
+known_symbols:
+  ekus:
+    - _oidAppleExtendedKeyUsageAppleID
+    - _oidAppleExtendedKeyUsageCodeSigning
+    - _oidAppleExtendedKeyUsageCodeSigningDev
+    - _oidAppleExtendedKeyUsagePassbook
+    - _oidAppleExtendedKeyUsageProfileSigning
+    - _oidAppleExtendedKeyUsageQAProfileSigning
+  purposes:
+    - _oidAppleApplicationSigning
+    - _oidAppleProvisioningProfile
+    - _oidAppleInstallerPackagingSigningExternal
+    - _oidApplePushServiceClient
+  extensions:
+    - _oidAppleCertExtAST2DiagnosticsServerAuthProd
+    - _oidAppleCertExtAST2DiagnosticsServerAuthProdQA
+    - _oidAppleCertExtATVAppSigningProd
+    - _oidAppleCertExtATVAppSigningProdQA
+    - _oidAppleCertExtATVVPNProfileSigning
+    - _oidAppleCertExtApplePPQSigningProd
+    - _oidAppleCertExtApplePPQSigningProdQA
+    - _oidAppleCertExtAppleSMPEncryption
+    - _oidAppleCertExtAppleServerAuthentication
+    - _oidAppleCertExtAppleServerAuthenticationAPNProd
+    - _oidAppleCertExtAppleServerAuthenticationAPNProdQA
+    - _oidAppleCertExtAppleServerAuthenticationGS
+    - _oidAppleCertExtAppleServerAuthenticationIDSProd
+    - _oidAppleCertExtAppleServerAuthenticationIDSProdQA
+    - _oidAppleCertExtAppleServerAuthenticationMMCSProd
+    - _oidAppleCertExtAppleServerAuthenticationMMCSProdQA
+    - _oidAppleCertExtAppleServerAuthenticationPPQProd
+    - _oidAppleCertExtAppleServerAuthenticationPPQProdQA
+    - _oidAppleCertExtAppleServerAuthenticationiCloudSetupProd
+    - _oidAppleCertExtAppleServerAuthenticationiCloudSetupProdQA
+    - _oidAppleCertExtCryptoServicesExtEncryption
+    - _oidAppleCertExtEscrowProxyServerAuthProd
+    - _oidAppleCertExtEscrowProxyServerAuthProdQA
+    - _oidAppleCertExtFMiPServerAuthProd
+    - _oidAppleCertExtFMiPServerAuthProdQA
+    - _oidAppleCertExtHomeKitServerAuth
+    - _oidAppleCertExtOSXProvisioningProfileSigning
+    - _oidAppleCertExtTrustCacheSigning
+    - _oidAppleCertExtTrustCacheSigningTest
+    - _oidAppleCertExtensionAppleIDRecordValidationSigning
+  unknown:
+    - _oidAppleImg4ManifestCertSpec
+    - _oidAppleIntmMarkerAppleHomeKitServerCA
+    - _oidAppleIntmMarkerAppleID
+    - _oidAppleIntmMarkerAppleID2
+    - _oidAppleIntmMarkerAppleServerAuthentication
+    - _oidAppleIntmMarkerAppleSystemIntg2
+    - _oidAppleIntmMarkerAppleSystemIntgG3
+    - _oidAppleIntmMarkerAppleWWDR
+    - _oidApplePolicyEscrowService
+    - _oidApplePolicyMobileStore
+    - _oidApplePolicyMobileStoreProdQA
+    - _oidAppleSecureBootCertSpec
+    - _oidAppleSecureBootTicketCertSpec
+    - _oidAppleTVOSApplicationSigningProd
+    - _oidAppleTVOSApplicationSigningProdQA

data/share/platforms.yaml

@@ -0,0 +1,32 @@
+---
+iOS:
+  architectures:
+    - armv6
+    - armv7
+    - arm64
+    - arm64e
+macOS:
+  archetectures:
+    - ppc
+    - ppc64
+    - x86
+    - x86_64
+    - x86_64h
+tvOS:
+  architectures:
+    - x86
+    - armv7
+    - arm64
+    - arm64e
+padOS:
+  architectures:
+    - armv7
+    - arm64
+    - arm64e
+bridgeOS:
+  architectures:
+    - arm64
+audioOS:
+  architectures:
+    - arm64
+    - arm64e

data/share/pmu.yaml

@@ -0,0 +1,30 @@
+---
+pmu_errors:
+  - name: rst
+  - name: wdog
+    description: watchdog timer
+  - name: timeout,dblclick_timeout
+  - name: sochot,reset_in_3
+  - name: sstate,wallet_crash_seq
+  - name: por
+    description: power-on reset
+  - name: otp_crc
+  - name: uv,vddmain_uvlo_hold
+  - name: sochot,reset_in_3
+  - name: ot,overtemp
+  - name: timeout,watchdog_timeout
+  - name: uv,vddmain_uvlo
+    description: under-voltage
+  - name: ov,vddmain_ovlo
+    description: over-voltage
+  - name: btn_shdn
+  - name: sstate,btn_dfu_recover
+  - name: btn_rst,two_finger_rst
+  - name: uv,vdd_boost_uvlo
+  - name: crash,crash_in
+  - name: btn_rst,btn_seq_reset
+  - name: spmi,spmi_fault
+  - name: wdog,reset_in_1
+  - name: dbg_rst,reset_in_2
+  - name: ntc_shdn
+  - name: timeout,dblclick_timeout