apple-data 1.0.399 → 1.0.400
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/apple_data/boot_args.rb +1 -0
- data/lib/apple_data/fdr.rb +1 -0
- data/lib/apple_data/ioreg.rb +1 -0
- data/lib/apple_data/lockdown.rb +1 -0
- data/lib/apple_data/macho.rb +1 -0
- data/lib/apple_data/version.rb +1 -1
- data/lib/apple_data.rb +1 -0
- data/share/defaults.yaml +4 -0
- data/share/environment_variables.yaml +301 -0
- data/share/sip.yaml +58 -0
- metadata +5 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: b593af7352bcf2238a043f907687787e41526ebc1da3b48f77247ad371ca36a9
|
4
|
+
data.tar.gz: 3d85cc0938de874fd890cb8f51c5157655f7f334a7d9c11c09044b218e7cef58
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 198645d06bd7319c753f91fe50199d9cb26d3437ae3f06f073c3e1f3cfe6a0d67a1e93fb3b29cfb4940b29990433c7d9fc81d35fd66397028947c35e81b8267b
|
7
|
+
data.tar.gz: effb3965060de187edf1fb71c7a3a3e0c38f290b6de26524cd6433c9242ff7d09b756713559549ac149548d26bbb77174a901e2688e6f9e44008c67ad56a9665
|
data/lib/apple_data/boot_args.rb
CHANGED
data/lib/apple_data/fdr.rb
CHANGED
data/lib/apple_data/ioreg.rb
CHANGED
data/lib/apple_data/lockdown.rb
CHANGED
data/lib/apple_data/macho.rb
CHANGED
data/lib/apple_data/version.rb
CHANGED
data/lib/apple_data.rb
CHANGED
data/share/defaults.yaml
ADDED
@@ -0,0 +1,301 @@
|
|
1
|
+
---
|
2
|
+
variables:
|
3
|
+
__CFBundleIdentifier:
|
4
|
+
type: string
|
5
|
+
__CFPREFERENCES_AVOID_DAEMON:
|
6
|
+
type: boolean
|
7
|
+
values: [ 0, 1 ]
|
8
|
+
__CF_USER_TEXT_ENCODING:
|
9
|
+
examples:
|
10
|
+
- 0x0:0:0
|
11
|
+
- 0x1F5:0x0:0x0
|
12
|
+
ASL_DISABLE:
|
13
|
+
type: boolean
|
14
|
+
values: [ 0, 1 ]
|
15
|
+
CA_ASSERT_MAIN_THREAD_TRANSACTIONS:
|
16
|
+
type: boolean
|
17
|
+
values: [ 0, 1 ]
|
18
|
+
CA_DEBUG_TRANSACTIONS:
|
19
|
+
description: debug core animation transactions
|
20
|
+
type: boolean
|
21
|
+
CFFIXED_USER_HOME:
|
22
|
+
type: string
|
23
|
+
format: path
|
24
|
+
examples:
|
25
|
+
- /tmp
|
26
|
+
CFNETWORK_STORAGED_TIMERELOFF:
|
27
|
+
type: boolean
|
28
|
+
values: [ NO, YES ]
|
29
|
+
CHECK_IN:
|
30
|
+
type: boolean
|
31
|
+
values: [ 0, 1 ]
|
32
|
+
CLEAN_FILES_OLDER_THAN_DAYS:
|
33
|
+
type: integer
|
34
|
+
"com.apple.CoreData.CloudKitDebug":
|
35
|
+
type: boolean
|
36
|
+
values: [ 0, 1 ]
|
37
|
+
"com.apple.CoreData.XPCDebug":
|
38
|
+
type: boolean
|
39
|
+
values: [ 0, 1 ]
|
40
|
+
COMMAND_MODE:
|
41
|
+
type: string
|
42
|
+
examples:
|
43
|
+
- unix2003
|
44
|
+
CUPS_DEBUG_FILTER:
|
45
|
+
type: string
|
46
|
+
format: regex
|
47
|
+
examples:
|
48
|
+
- ^(cupsDo|cupsGet|cupsMake|cupsSet|http|_http|ipp|_ipp|mime).*
|
49
|
+
CUPS_DEBUG_LEVEL:
|
50
|
+
type: integer
|
51
|
+
CUPS_DEBUG_LOG:
|
52
|
+
type: string
|
53
|
+
format: path
|
54
|
+
DEBUGSCOPE:
|
55
|
+
type: array
|
56
|
+
seperator: ","
|
57
|
+
values:
|
58
|
+
- all
|
59
|
+
- -policy-node
|
60
|
+
- policy-set
|
61
|
+
- policy
|
62
|
+
- alloc
|
63
|
+
- trust
|
64
|
+
- bind
|
65
|
+
- profile
|
66
|
+
- trace
|
67
|
+
- dbconn
|
68
|
+
- OTR
|
69
|
+
- serverxpc
|
70
|
+
- sqlite3
|
71
|
+
- error_thee_well
|
72
|
+
- ringSigning
|
73
|
+
DEFAULT_NETWORK_PRIVACY_LEVEL:
|
74
|
+
type: string
|
75
|
+
values:
|
76
|
+
- public
|
77
|
+
DYLD_BIND_AT_LAUNCH:
|
78
|
+
DYLD_DISABLE_DOFS:
|
79
|
+
DYLD_FALLBACK_FRAMEWORK_PATH:
|
80
|
+
description:
|
81
|
+
This is a colon separated list of directories that contain frameworks. If a framework is not found at its
|
82
|
+
install path, dyld uses this as a list of directories to search for the framework.
|
83
|
+
type: array
|
84
|
+
seperator: ":"
|
85
|
+
default: /Library/Frameworks:/System/Library/Frameworks
|
86
|
+
DYLD_FALLBACK_LIBRARY_PATH:
|
87
|
+
description: |
|
88
|
+
This is a colon separated list of directories that contain libraries. If a dylib is not found at its install
|
89
|
+
path, dyld uses this as a list of directories to search for the dylib. By default, it is set
|
90
|
+
to /usr/local/lib:/usr/lib.
|
91
|
+
type: array
|
92
|
+
seperator: ":"
|
93
|
+
default: /usr/local/lib:/usr/lib
|
94
|
+
DYLD_FORCE_FLAT_NAMESPACE:
|
95
|
+
description: |
|
96
|
+
Disable two level namespaces
|
97
|
+
DYLD_FRAMEWORK_PATH:
|
98
|
+
description: |
|
99
|
+
This is a colon separated list of directories that contain frameworks. The dynamic linker searches these
|
100
|
+
directories before it searches for the framework by its install name. It allows you to test new versions of
|
101
|
+
existing frameworks. (A framework is a library install name that ends in the form `XXX.framework/Versions/A/XXX`
|
102
|
+
or `XXX.framework/XXX`, where `XXX` and `A` are any name.)
|
103
|
+
|
104
|
+
For each framework that a program uses, the dynamic linker looks for the framework in each directory in
|
105
|
+
`DYLD_FRAMEWORK_PATH` in turn. If it looks in all those directories and can't find the framework, it uses
|
106
|
+
whatever it would have loaded if `DYLD_FRAMEWORK_PATH` had not been set.
|
107
|
+
|
108
|
+
Use the -L option to otool(1) to discover the frameworks and shared libraries that the executable is linked
|
109
|
+
against.
|
110
|
+
type: array
|
111
|
+
seperator: ":"
|
112
|
+
DYLD_IMAGE_SUFFIX:
|
113
|
+
description: |
|
114
|
+
This is set to a string of a suffix to try to be used for all shared libraries used by the program. For
|
115
|
+
libraries ending in ".dylib" the suffix is applied just before the ".dylib".
|
116
|
+
|
117
|
+
For all other libraries the suffix is appended to the library name. This is useful for using conventional
|
118
|
+
"_profile" and "_debug" libraries and frameworks.
|
119
|
+
type: string
|
120
|
+
DYLD_INSERT_LIBRARIES:
|
121
|
+
description: |
|
122
|
+
This is a colon separated list of additional dynamic libraries to load before the ones specified in the program.
|
123
|
+
If instead, your goal is to substitute a library that would normally be loaded, use `DYLD_LIBRARY_PATH`
|
124
|
+
or `DYLD_FRAMEWORK_PATH` instead.
|
125
|
+
type: array
|
126
|
+
seperator: ":"
|
127
|
+
DYLD_LIBRARY_PATH:
|
128
|
+
description: |
|
129
|
+
This is a colon separated list of directories that contain libraries. The dynamic linker searches these
|
130
|
+
directories before it searches the default locations for libraries. It allows you to test new versions of
|
131
|
+
existing libraries.
|
132
|
+
|
133
|
+
For each dylib that a program uses, the dynamic linker looks for its leaf name in each directory in
|
134
|
+
`DYLD_LIBRARY_PATH`.
|
135
|
+
|
136
|
+
Use the `-L` option to `otool(1)` to discover the frameworks and shared libraries that the executable is linked
|
137
|
+
against.
|
138
|
+
type: array
|
139
|
+
seperator: ":"
|
140
|
+
DYLD_NO_FIX_PREBINDING:
|
141
|
+
DYLD_PRINT_APIS:
|
142
|
+
description: |
|
143
|
+
If set, causes dyld to print a line whenever a dyld API is called (e.g. `dlopen()`).
|
144
|
+
DYLD_PRINT_BINDINGS:
|
145
|
+
description: |
|
146
|
+
If set, causes dyld to print a line each time a symbolic name is bound.
|
147
|
+
DYLD_PRINT_DOFS:
|
148
|
+
DYLD_PRINT_ENV:
|
149
|
+
description: |
|
150
|
+
If set, causes dyld to print a line of key=valule for each enviroment variable in the process.
|
151
|
+
type: presence
|
152
|
+
DYLD_PRINT_INITIALIZERS:
|
153
|
+
description: |
|
154
|
+
If set, causes dyld to print out a line when running each initializer in every image. Initializers run by dyld
|
155
|
+
include constructors for C++ statically allocated objects, functions marked with
|
156
|
+
`__attribute__((constructor))`, and `-init` functions.
|
157
|
+
DYLD_PRINT_LIBRARIES:
|
158
|
+
description: |
|
159
|
+
If set, causes dyld to print a line for each mach-o image loaded into a process. This is useful to make sure
|
160
|
+
that the use of DYLD_LIBRARY_PATH is getting what you want.
|
161
|
+
type: presence
|
162
|
+
DYLD_PRINT_LIBRARIES_POST_LAUNCH:
|
163
|
+
DYLD_PRINT_LOADERS:
|
164
|
+
description: |
|
165
|
+
If set, causes dyld to print a line whether each image is tracked by a JustInTimeLoader or a PrebuiltLoader.
|
166
|
+
Additionally, it prints if a PrebuiltLoaderSet was used to launch the process or if a PrebuiltLoader was
|
167
|
+
written to make the next launch faster.
|
168
|
+
type: presence
|
169
|
+
DYLD_PRINT_OPTS:
|
170
|
+
DYLD_PRINT_REBASINGS:
|
171
|
+
DYLD_PRINT_RPATHS:
|
172
|
+
DYLD_PRINT_SEARCHING:
|
173
|
+
description: |
|
174
|
+
If set, causes dyld to print a line about each file system path checked when searching for an image to load.
|
175
|
+
type: presence
|
176
|
+
DYLD_PRINT_SEGMENTS:
|
177
|
+
description: |
|
178
|
+
If set, causes dyld to print out a line containing the name and address range of each mach-o segment that
|
179
|
+
dyld maps. In addition it prints information about if the image was from the dyld shared cache.
|
180
|
+
DYLD_PRINT_STATISTICS:
|
181
|
+
DYLD_PRINT_TO_FILE:
|
182
|
+
description: |
|
183
|
+
This is a path to a (writable) file. Normally, the dynamic linker writes all logging output
|
184
|
+
(triggered by `DYLD_PRINT_*` settings) to file descriptor 2 (which is usually stderr). But
|
185
|
+
this setting causes the dynamic linker to write logging output to the specified file.
|
186
|
+
type: string
|
187
|
+
format: path
|
188
|
+
DYLD_ROOT_PATH:
|
189
|
+
DYLD_SHARED_CACHE_DIR:
|
190
|
+
description: |
|
191
|
+
This is a directory containing dyld shared cache files. This variable can be used in conjunction with
|
192
|
+
`DYLD_SHARED_REGION=private` to run a process with an alternate shared cache.
|
193
|
+
DYLD_SHARED_CACHE_DONT_VALIDATE:
|
194
|
+
DYLD_SHARED_REGION:
|
195
|
+
description: |
|
196
|
+
This can be "use" (the default) or "private". Setting it to "private" tells dyld to remove the shared region
|
197
|
+
from the process address space and `mmap()` back in a private copy of the dyld shared cache in the shared region
|
198
|
+
address range. This is only useful if the shared cache on disk has been updated and is different than the shared
|
199
|
+
cache in use.
|
200
|
+
DYLD_VERSIONED_FRAMEWORK_PATH:
|
201
|
+
description: |
|
202
|
+
This is a colon separated list of directories that contain potential override frameworks. The dynamic linker
|
203
|
+
searches these directories for frameworks. For each framework found dyld looks at its `LC_ID_DYLIB` and gets
|
204
|
+
the current_version and install name. Dyld then looks for the framework at the install name path.
|
205
|
+
Whichever has the larger current_version value will be used in the process whenever a framework with that
|
206
|
+
install name is required. This is similar to `DYLD_FRAMEWORK_PATH` except instead of always overriding,
|
207
|
+
it only overrides if the supplied framework is newer.
|
208
|
+
|
209
|
+
Note: dyld does not check the framework's Info.plist to find its version. Dyld only checks the `-current_version`
|
210
|
+
number supplied when the framework was created.
|
211
|
+
type: array
|
212
|
+
seperator: ":"
|
213
|
+
default: /Library/Frameworks:/System/Library/Frameworks
|
214
|
+
DYLD_VERSIONED_LIBRARY_PATH:
|
215
|
+
description: |
|
216
|
+
This is a colon separated list of directories that contain potential override libraries. The dynamic linker
|
217
|
+
searches these directories for dynamic libraries. For each library found dyld looks at its `LC_ID_DYLIB` and
|
218
|
+
gets the current_version and install name. Dyld then looks for the library at the install name path.
|
219
|
+
Whichever has the larger current_version value will be used in the process whenever a dylib with that install
|
220
|
+
name is required. This is similar to DYLD_LIBRARY_PATH except instead of always overriding, it only
|
221
|
+
overrides is the supplied library is newer.
|
222
|
+
HOME:
|
223
|
+
type: string
|
224
|
+
format: path
|
225
|
+
LAUNCHD_SOCKET:
|
226
|
+
LIBDISPATCH_STRICT:
|
227
|
+
type: boolean
|
228
|
+
values: [ NO, YES ]
|
229
|
+
LOGNAME:
|
230
|
+
type: string
|
231
|
+
format: username
|
232
|
+
LaunchInstanceID:
|
233
|
+
type: string
|
234
|
+
format: UUID
|
235
|
+
MallocCorruptionAbort:
|
236
|
+
type: boolean
|
237
|
+
values: [ 0, 1 ]
|
238
|
+
MallocMaxMagazines:
|
239
|
+
type: integer
|
240
|
+
MallocNanoZone:
|
241
|
+
type: boolean
|
242
|
+
values: [ 0, 1 ]
|
243
|
+
MallocSpaceEfficient:
|
244
|
+
type: boolean
|
245
|
+
values: [ 0, 1 ]
|
246
|
+
MallocStackLoggingDirectory:
|
247
|
+
type: string
|
248
|
+
format: path
|
249
|
+
NSRunningFromLaunchd:
|
250
|
+
type: boolean
|
251
|
+
values: [ 0, 1 ]
|
252
|
+
NSZombieEnabled:
|
253
|
+
type: boolean
|
254
|
+
values: [ NO, YES ]
|
255
|
+
PATH:
|
256
|
+
type: array
|
257
|
+
seperator: ":"
|
258
|
+
default:
|
259
|
+
- /usr/bin
|
260
|
+
- /bin
|
261
|
+
- /usr/sbin
|
262
|
+
- /sbin
|
263
|
+
PRINTTOOL_MODE:
|
264
|
+
type: string
|
265
|
+
examples:
|
266
|
+
- agent
|
267
|
+
- daemon
|
268
|
+
PRODUCT_INFO_FILTER_DISABLE:
|
269
|
+
OS_ACTIVITY_MODE:
|
270
|
+
type: boolean
|
271
|
+
values: [ disable, enable ]
|
272
|
+
PWD:
|
273
|
+
type: string
|
274
|
+
format: path
|
275
|
+
REACH_DARK_WAKE_CONTROL:
|
276
|
+
type: boolean
|
277
|
+
values: [ TRUE, FALSE ]
|
278
|
+
REACH_DARK_WAKE_NOTIFY:
|
279
|
+
type: boolean
|
280
|
+
values: [ TRUE, FALSE ]
|
281
|
+
RPC_DEBUG:
|
282
|
+
type: boolean
|
283
|
+
values: [ 0, 1 ]
|
284
|
+
RUN_WITH_LAUNCHD:
|
285
|
+
type: boolean
|
286
|
+
values: [ 0, 1 ]
|
287
|
+
SSH_AUTH_SOCK:
|
288
|
+
type: string
|
289
|
+
format: path
|
290
|
+
TMPDIR:
|
291
|
+
type: string
|
292
|
+
format: path
|
293
|
+
WAIT4DEBUGGER:
|
294
|
+
type: boolean
|
295
|
+
values: [ NO, YES ]
|
296
|
+
XPC_FLAGS:
|
297
|
+
XPC_NULL_BOOTSTRAP:
|
298
|
+
type: boolean
|
299
|
+
values: [ 0, 1 ]
|
300
|
+
XPC_SERVICE_NAME:
|
301
|
+
type: string
|
data/share/sip.yaml
ADDED
@@ -0,0 +1,58 @@
|
|
1
|
+
---
|
2
|
+
process_capabilities:
|
3
|
+
CSR_CAPABILITY_UNLIMITED:
|
4
|
+
value: 1
|
5
|
+
description: process is not restricted by SIP and may bypass
|
6
|
+
CSR_CAPABILITY_CONFIG:
|
7
|
+
value: 2
|
8
|
+
descrption:
|
9
|
+
CSR_CAPABILITY_APPLE_INTERNAL:
|
10
|
+
value: 4
|
11
|
+
description:
|
12
|
+
flags:
|
13
|
+
CSR_ALLOW_UNTRUSTED_KEXTS:
|
14
|
+
value: 1
|
15
|
+
description: allow loading kernel extensions that are not signed
|
16
|
+
disable_default: true
|
17
|
+
CSR_ALLOW_UNRESTRICTED_FS:
|
18
|
+
value: 2
|
19
|
+
description: disable SIP protections of various paths (such as write protection of /System)
|
20
|
+
disable_default: true
|
21
|
+
CSR_ALLOW_TASK_FOR_PID:
|
22
|
+
value: 4
|
23
|
+
description: allow getting the pid task, required for debugging
|
24
|
+
disable_default: true
|
25
|
+
CSR_ALLOW_KERNEL_DEBUGGER:
|
26
|
+
value: 8
|
27
|
+
description: allow using the kernel debugger (KDP) - requires configuring the kernel debugger via boot-args
|
28
|
+
disable_default: true
|
29
|
+
CSR_ALLOW_APPLE_INTERNAL:
|
30
|
+
value: 16
|
31
|
+
description:
|
32
|
+
disable_default: true
|
33
|
+
CSR_ALLOW_UNRESTRICTED_DTRACE:
|
34
|
+
aliases: [ CSR_ALLOW_DESTRUCTIVE_DTRACE ]
|
35
|
+
value: 32
|
36
|
+
description:
|
37
|
+
disable_default: true
|
38
|
+
CSR_ALLOW_UNRESTRICTED_NVRAM:
|
39
|
+
value: 64
|
40
|
+
description: disable restrictions to writing to restricted NVRAM variables
|
41
|
+
disable_default: true
|
42
|
+
CSR_ALLOW_DEVICE_CONFIGURATION:
|
43
|
+
value: 128
|
44
|
+
description:
|
45
|
+
always_enforced: true
|
46
|
+
CSR_ALLOW_ANY_RECOVERY_OS:
|
47
|
+
value: 256
|
48
|
+
description: disable validation of BaseSystem.dmg by ignoring BaseSystem.chunklist
|
49
|
+
always_enforced: true
|
50
|
+
CSR_ALLOW_UNAPPROVED_KEXTS:
|
51
|
+
value: 512
|
52
|
+
description: do not require kext approval (managed in the T2 when it exists)
|
53
|
+
CSR_ALLOW_EXECUTABLE_POLICY_OVERRIDE:
|
54
|
+
value: 1024
|
55
|
+
description: override spctl or executable policy
|
56
|
+
CSR_ALLOW_UNAUTHENTICATED_ROOT:
|
57
|
+
value: 2048
|
58
|
+
description:
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: apple-data
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.0.
|
4
|
+
version: 1.0.400
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Rick Mark
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-
|
11
|
+
date: 2022-04-10 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: pathutil
|
@@ -48,7 +48,9 @@ files:
|
|
48
48
|
- share/bundles.yaml
|
49
49
|
- share/cores.yaml
|
50
50
|
- share/credits.yaml
|
51
|
+
- share/defaults.yaml
|
51
52
|
- share/dnssd.yaml
|
53
|
+
- share/environment_variables.yaml
|
52
54
|
- share/fdr.yaml
|
53
55
|
- share/homekit.yaml
|
54
56
|
- share/iboot.yaml
|
@@ -72,6 +74,7 @@ files:
|
|
72
74
|
- share/resources.yaml
|
73
75
|
- share/sep.yaml
|
74
76
|
- share/services.yaml
|
77
|
+
- share/sip.yaml
|
75
78
|
- share/syscfg.yaml
|
76
79
|
- share/vmapple.yaml
|
77
80
|
homepage: https://docs.hackdiffe.rent
|