apple-data 1.0.628 → 1.0.648

data/share/nvram.yaml

@@ -12,13 +12,92 @@ nvram_scopes:
     description: For Apple Silicon Macs - The Per OS or Non-SFR / System NVRAM
     uuid:
 nvram_variables:
-  _csegbufsz_experiment:
-  _libmalloc_experiment:
   AAPL,ignore:
     platforms:
     - macOS
     - Intel
     - bridgeOS
+  ApChipID:
+    scopes:
+    - 94b73556-2197-4702-82a8-3e1337dafbfb
+  AppleSecureBootWindowsPolicy:
+    description: Controls trust in Microsoft's PCA 2011 cert for Apple Secure Boot
+    type: boolean
+    platforms:
+    - macOS
+    - Intel
+    - bridgeOS
+    scopes:
+    - 94b73556-2197-4702-82a8-3e1337dafbfb
+  BOSCatalogURL:
+  BaseSystemAccessabiliityFeatures:
+  BluetoothInfo:
+  BluetoothUHEDevices:
+  DClr_override:
+  DebugBluetoothHIDShim:
+  DefaultBackgroundColor:
+    description: boot.efi background color. Stored as BGRA.
+    platforms:
+    - macOS
+    - Intel
+    scopes:
+    - 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14
+  GPUROM:
+  HW_BOOT_DATA:
+  HardwareModel:
+  IASCurrentInstallPhase:
+  IASInstallPhaseList:
+  IASUCatalogURL:
+    description: This is the update url used for install / update.  Security issues
+      can occur when set to HTTP.  Typically managed through `seedutil`
+    type: string
+    platforms:
+    - macOS
+    - Intel
+  IDInstallerDataV2:
+  IOBusyInterest:
+  IODeviceMemory:
+  IONVRAM-FORCESYNCNOW-PROPERTY:
+    description: 'Embedded still throttles NVRAM commits via kIONVRAMSyncNowPropertyKey,
+      but some clients still need a stricter NVRAM commit contract. Please use this
+      with care.
+
+      '
+  IOPlatformActiveAction:
+  IOPlatformHaltRestartAction:
+  IOPlatformPanicAction:
+  IOPlatformQuiensceAction:
+  IOPlatformSleepAction:
+  IOPlatformWakeAction:
+  IORematchPersonality:
+  LocationServicesEnabled:
+  OTA-fsck-metrics:
+  OTA-post-conversion:
+  OTA-pre-conversion:
+  OTA-sealvolume-metrics:
+  PSFU_STATUS:
+  SleepWakeFailurePanic:
+  SleepWakeFailureString:
+  StartupManagerPolicy:
+    scopes:
+    - 5eeb160f-45fb-4ce9-b4e3-610359abf6f8
+  StartupMute:
+    description: Mute startup chime
+    type: integer
+    scopes:
+    - default
+  SystemAudioVolume:
+  SystemAudioVolumeExtension:
+  SystemAudioVolumeSaved:
+  UIScale:
+    description: boot.efi interface scaling
+    platforms:
+    - macOS
+    - Intel
+    scopes:
+    - 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14
+  _csegbufsz_experiment:
+  _libmalloc_experiment:
   aapl,panic-info:
   aapl,pci:
   acc-cm-override-charger-count:
@@ -36,18 +115,6 @@ nvram_variables:
     - Intel
   allow-root-hash-mismatch:
   ane-type:
-  ApChipID:
-    scopes:
-    - 94b73556-2197-4702-82a8-3e1337dafbfb
-  AppleSecureBootWindowsPolicy:
-    description: Controls trust in Microsoft's PCA 2011 cert for Apple Secure Boot
-    type: boolean
-    platforms:
-    - macOS
-    - Intel
-    - bridgeOS
-    scopes:
-    - 94b73556-2197-4702-82a8-3e1337dafbfb
   aud-early-boot-critical:
   auto-boot:
     description: If the device should `fsboot` upon power on
@@ -62,13 +129,10 @@ nvram_variables:
     - common
   backlight-nits:
   base-system-path:
-  BaseSystemAccessabiliityFeatures:
   battery-health:
   bluetoothActiveControllerInfo:
   bluetoothHostControllerSwitchBehaviour:
-  BluetoothInfo:
   bluetoothInternalControllerInfo:
-  BluetoothUHEDevices:
   board-id:
   boop-storage-nonces:
     scopes:
@@ -112,7 +176,6 @@ nvram_variables:
     description: Seconds to pause before `auto-boot`
     type: number
     persistent: true
-  BOSCatalogURL:
   bt1addr:
   btaddr:
   build-style:
@@ -149,14 +212,12 @@ nvram_variables:
     scopes:
     - 36C28AB5-6566-4C50-9EBD-CBB920F83843
   darkboot:
-  DClr_override:
   debug-gg:
   debug-soc:
   debug-uarts:
     description: Bitfield of which UARTs to enable
     type: integer
     persistent: true
-  DebugBluetoothHIDShim:
   default-client-ip:
   default-gateway-ip:
   default-mac-address?:
@@ -164,13 +225,6 @@ nvram_variables:
   default-router-ip:
   default-server-ip:
   default-subnet-mask:
-  DefaultBackgroundColor:
-    description: boot.efi background color. Stored as BGRA.
-    platforms:
-    - macOS
-    - Intel
-    scopes:
-    - 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14
   device-material:
   diag-device:
   diag-file:
@@ -241,19 +295,6 @@ nvram_variables:
     - Intel
     scopes:
     - FA4CE28D-B62F-4C99-9CC3-6815686E30F9
-  GPUROM:
-  HardwareModel:
-  HW_BOOT_DATA:
-  IASCurrentInstallPhase:
-  IASInstallPhaseList:
-  IASUCatalogURL:
-    description: This is the update url used for install / update.  Security issues
-      can occur when set to HTTP.  Typically managed through `seedutil`
-    type: string
-    platforms:
-    - macOS
-    - Intel
-  IDInstallerDataV2:
   idle-off:
   input-device:
     platforms:
@@ -263,21 +304,6 @@ nvram_variables:
     platforms:
     - macOS
     - PPC
-  IOBusyInterest:
-  IODeviceMemory:
-  IONVRAM-FORCESYNCNOW-PROPERTY:
-    description: 'Embedded still throttles NVRAM commits via kIONVRAMSyncNowPropertyKey,
-      but some clients still need a stricter NVRAM commit contract. Please use this
-      with care.
-
-      '
-  IOPlatformActiveAction:
-  IOPlatformHaltRestartAction:
-  IOPlatformPanicAction:
-  IOPlatformQuiensceAction:
-  IOPlatformSleepAction:
-  IOPlatformWakeAction:
-  IORematchPersonality:
   ipaddr:
   is-tethered:
   kaslr-off:
@@ -290,7 +316,6 @@ nvram_variables:
     - PPC
   load-base:
   loadaddr:
-  LocationServicesEnabled:
   lts-persistance:
     type: string
   mca-info0:
@@ -319,7 +344,6 @@ nvram_variables:
   ota-conv-panic-indicator:
   ota-failure-reason:
   ota-forced-reset-uptime:
-  OTA-fsck-metrics:
   ota-initial-breadcrumbs:
   ota-initial-result:
   ota-install-tonight:
@@ -330,8 +354,6 @@ nvram_variables:
   ota-os-version:
   ota-outcome:
   ota-perform-shutdown:
-  OTA-post-conversion:
-  OTA-pre-conversion:
   ota-reboot-retry-enabled:
   ota-reboot-retry-zone:
   ota-result:
@@ -351,7 +373,6 @@ nvram_variables:
   ota-retry-uptime:
   ota-retry-user-progress:
   ota-retry-warnings:
-  OTA-sealvolume-metrics:
   ota-snapshot-update:
   ota-step-battery-level:
   ota-step-codes:
@@ -395,7 +416,6 @@ nvram_variables:
     - common
   prevent-restores:
   previous-system-uuid:
-  PSFU_STATUS:
   pwr-path:
   radio-error:
   ramdisk-size:
@@ -450,32 +470,12 @@ nvram_variables:
     type: number
   sep-debug-args:
   serverip:
-  SleepWakeFailurePanic:
-  SleepWakeFailureString:
   soc-bin-offset:
-  StartupManagerPolicy:
-    scopes:
-    - 5eeb160f-45fb-4ce9-b4e3-610359abf6f8
-  StartupMute:
-    description: Mute startup chime
-    type: integer
-    scopes:
-    - default
   stress-rack:
   summit-panel-id:
   system-passcode-lock-blob:
-  SystemAudioVolume:
-  SystemAudioVolumeExtension:
-  SystemAudioVolumeSaved:
   target-uuid:
   tbt-options:
-  UIScale:
-    description: boot.efi interface scaling
-    platforms:
-    - macOS
-    - Intel
-    scopes:
-    - 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14
   update-volume:
   upgrade-boot-volume:
   upgrade-fallback-boot-command:

data/share/ota.yaml

@@ -2,9 +2,12 @@
 metadata:
   description:
   credits:
+  collections:
+  - ota_nvram
+  - ota_stages
 ota_nvram:
-  boot-breadcrumbs:
   OTA-pre-conversion:
+  boot-breadcrumbs:
 ota_stages:
 - fdr_verify_sealed_manifest
 - update_appletcon

data/share/pallas.yaml

@@ -2,3 +2,4 @@
 metadata:
   description: Apple Pallas update service info
   credits: []
+  collections: []

data/share/pki.yaml

@@ -13,6 +13,7 @@ certificate_names:
   pcrt: product/production certificate?
   rcrt: remote/recovery certificate?
   scrt: SEP Certificate
+  sdcrt: SEP Device Certificate
   tcrt: test certificate?
   ucrt:
     name: User Identity Certificate
@@ -32,9 +33,13 @@ keys:
 constants:
   private_oid_root: 1.2.840.113635
 oids:
+  1.2.840.113635.100.1:
+    title: Apple Trust Policy
   1.2.840.113635.100.10:
     description: "`ucrt` extension root"
   1.2.840.113635.100.10.1:
+    name: appleUniqueDeviceCertificateHardwareProperties
+    type: sequence
     description: Hardware device identifiers of the machine the certificate is issued
       to contains BORD, CHIP, ECID, srnm, udid, seid
     found_in:
@@ -44,6 +49,8 @@ oids:
     ous:
     - ucrt Leaf Certificate
   1.2.840.113635.100.10.2:
+    name: appleUniqueDeviceCertificate
+    type: :scalar
     found_in:
     - ucrt
     issuers:
@@ -75,7 +82,9 @@ oids:
   1.2.840.113635.100.6.1.11:
     symbol: oidAppleSecureBootTicketCertSpec
   1.2.840.113635.100.6.1.15:
-    name: IMG4 Manifest Certificate Specification
+    title: IMG4 Manifest Certificate Specification
+    name: appleImg4Manifest
+    type: sequence
     description: "Constriction on values that can be specified or signed by this certificate.
       \ Conatins two sub-sequesnces, \nthe MANP (Manifest Properties) and the OBJP
       (Object Properties).  Manifest properties are at the issued \nIM4M, and object
@@ -132,6 +141,8 @@ oids:
     example: PUT/FSCl:sik-FXFYFXFFYFFEX-QQRRRDEETFEFYCEIESLIREILCILESCLSELRESERSER
   1.2.840.113635.100.6.17:
     description: Contains the name of the key
+  1.2.840.113635.100.6.2:
+    title: Apple Security Algorithm
   1.2.840.113635.100.6.2.1:
     apple_description: Marker for the WWDR Intermediate Certificate
     symbol: oidAppleProvisioningProfile
@@ -193,6 +204,8 @@ oids:
     symbol: oidAppleCertExtAST2DiagnosticsServerAuthProd
   1.2.840.113635.100.6.27.9:
     symbol: oidAppleCertExtHomeKitServerAuth
+  1.2.840.113635.100.6.3:
+    title: Apple Dot Mac Certificate
   1.2.840.113635.100.6.3.1:
     apple_description: Apple World Wide Developer Relations Client SSL Certificates
       for Accessing the Development Apple Push Service
@@ -209,6 +222,8 @@ oids:
     symbol: oidAppleCertExtApplePPQSigningProd
   1.2.840.113635.100.6.39:
     symbol: oidAppleCertExtCryptoServicesExtEncryption
+  1.2.840.113635.100.6.4:
+    title: Apple Extended Key Usage
   1.2.840.113635.100.6.4.1:
     apple_description: Extension Markers for device version string, expects UTF8 to
       follow in SubjectAltName
@@ -217,6 +232,12 @@ oids:
       in SubjectAltName
   1.2.840.113635.100.6.43:
     symbol: oidAppleCertExtATVVPNProfileSigning
+  1.2.840.113635.100.6.44:
+    title: Apple Pinning Allow Test Certs UCRT
+    name: applePinningAllowTestCertsUCRT
+    symbol: applePinningAllowTestCertsUCRT
+  1.2.840.113635.100.6.5:
+    title: Apple Certificate Policies
   1.2.840.113635.100.6.5.1:
     apple_description: Apple iTunes Store Certificates for Signing Receipts of Purchases
       from the iTS
@@ -233,9 +254,20 @@ oids:
       & Authorization: Policy'
   1.2.840.113635.100.8:
     description: Apple Local Device Attestation (BAA)
+  1.2.840.113635.100.8.10.2:
+  1.2.840.113635.100.8.11.1:
+  1.2.840.113635.100.8.12:
+    name: appleFactoryTrustModeSigning
+  1.2.840.113635.100.8.13.1:
+  1.2.840.113635.100.8.13.2:
+  1.2.840.113635.100.8.13.3:
   1.2.840.113635.100.8.2:
     symbol: CTOidItemAppleDeviceAttestationNonce
+    name: appleDeviceAttestationNonce
   1.2.840.113635.100.8.4:
+    symbol: CTOidItemAppleDeviceAttestationHardwareProperties
+    name: appleDeviceAttestationHardwareProperties
+    type: sequence
     description: Contains a sequence of integer values.  Some are 0, some are 1, others
       appear to be int32 bitmasks.
     is_asn_body: true
@@ -247,11 +279,11 @@ oids:
     - Basic Attestation User Sub CA2
     ous:
     - BAA Certification
-    symbol: CTOidItemAppleDeviceAttestationHardwareProperties
   1.2.840.113635.100.8.5:
     description: Similar in nature to `1.2.840.113635.100.8.4`. Non-integer values
       observed of `ssca`.
     symbol: CTOidItemAppleDeviceAttestationKeyUsageProperties
+    name: appleDeviceAttestationKeyUsageProperties
     is_asn_body: true
     is_extension: true
     found_in:
@@ -264,6 +296,8 @@ oids:
   1.2.840.113635.100.8.7:
     description: Information about the OS environment that performed that local attestation
     symbol: CTOidItemAppleDeviceAttestationDeviceOSInformation
+    name: appleDeviceAttestationDeviceOSInformation
+    type: sequence
     is_asn_body: true
     is_extension: true
     found_in:
@@ -273,6 +307,8 @@ oids:
     - Basic Attestation User Sub CA2
     ous:
     - BAA Certification
+  1.2.840.113635.100.8.9.1:
+  1.2.840.113635.100.8.9.2:
   1.3.6.1.4.1.311.2.1.12:
     symbol: oidMicrosoftSpcSpOpusInfo
   1.3.6.1.4.1.311.2.1.15:

data/share/platforms.yaml

@@ -2,7 +2,16 @@
 metadata:
   description:
   credits:
+  collections:
+  - platforms
 platforms:
+  audioOS:
+    architectures:
+    - arm64
+    - arm64e
+  bridgeOS:
+    architectures:
+    - arm64
   iOS:
     architectures:
     - armv6
@@ -16,21 +25,14 @@ platforms:
     - x86
     - x86_64
     - x86_64h
-  tvOS:
-    architectures:
-    - x86
-    - armv7
-    - arm64
-    - arm64e
   padOS:
     architectures:
     - armv7
     - arm64
     - arm64e
-  bridgeOS:
-    architectures:
-    - arm64
-  audioOS:
+  tvOS:
     architectures:
+    - x86
+    - armv7
     - arm64
     - arm64e