mirror of
https://github.com/Karmaz95/Snake_Apple.git
synced 2026-07-04 19:17:48 +02:00
This commit is contained in:
@@ -20,10 +20,10 @@ macos_dyld_policy_at_path(proc *process, amfi_dyld_policy_state_t *policy_state)
|
||||
log("RPL: 0, HR: 0, RP: 0, LV: 0");
|
||||
}
|
||||
} else {
|
||||
// 0x40 == CS_EXECSEG_JIT used ?? (not sure aobut it)
|
||||
// Check if 0x40 == CS_EXECSEG_JIT is used ?? (not sure about it)
|
||||
if ((flags & 0x40) != 0) {
|
||||
|
||||
// (macOS Only) Page invalidation allowed by task port policy (CS_INVALID_ALLOWED == 0x20) not used
|
||||
// Check if (macOS Only) Page invalidation allowed by task port policy (CS_INVALID_ALLOWED == 0x20) is not used
|
||||
if ((flags & 0x20) == 0) {
|
||||
|
||||
// Check if process does not use Library Validation
|
||||
|
||||
@@ -23,8 +23,8 @@ macos_dyld_policy_collect_state(calling_process, param_2, amfi_dyld_policy_state
|
||||
// Check if forced library validation is enabled (required by Hardened System Policy)
|
||||
has_CS_FORCED_LV = check_forced_library_validation(calling_process);
|
||||
|
||||
// Check macOS platform (hardware)
|
||||
platform = get_platform();
|
||||
// Check if binary is inside trust cache (CS_PLATFORM_BINARY == 0x4000000 | CS_DYLD_PLATFORM == 0x2000000)
|
||||
platform = is_platform_binary();
|
||||
|
||||
// Check if Hardened Runtime is enabled
|
||||
has_HR = check_hardened_runtime(calling_process);
|
||||
@@ -75,4 +75,3 @@ macos_dyld_policy_collect_state(calling_process, param_2, amfi_dyld_policy_state
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
Executable
+1779
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user