Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Proteas/68a5191902034586e121265b171ed536 to your computer and use it in GitHub Desktop.
Save Proteas/68a5191902034586e121265b171ed536 to your computer and use it in GitHub Desktop.
WebContent's sandbox rules of syscall-unix, syscall-mach, mig-kernel in iOS-v14.0-18A5301v

iOS-v14.0-18A5301v-WebContent-Unix-Mach-MIG

Syscall-Unix

SYS_exit
SYS_read
SYS_write
SYS_open
SYS_close
SYS_link
SYS_unlink
SYS_chdir
SYS_chmod
SYS_chown
SYS_getpid
SYS_getuid
SYS_geteuid
SYS_recvfrom
SYS_getpeername
SYS_access
SYS_chflags
SYS_fchflags
SYS_kill
SYS_dup
SYS_pipe
SYS_getegid
SYS_sigaction
SYS_getgid
SYS_sigprocmask
SYS_sigaltstack
SYS_ioctl
SYS_readlink
SYS_umask
SYS_msync
SYS_munmap
SYS_mprotect
SYS_madvise
SYS_dup2
SYS_fcntl
SYS_select
SYS_fsync
SYS_setpriority
SYS_socket
SYS_connect
SYS_getpriority
SYS_setsockopt
SYS_gettimeofday
SYS_getrusage
SYS_getsockopt
SYS_writev
SYS_fchown
SYS_fchmod
SYS_rename
SYS_flock
SYS_sendto
SYS_shutdown
SYS_socketpair
SYS_mkdir
SYS_rmdir
SYS_utimes
SYS_futimes
SYS_pread
SYS_pwrite
SYS_csops
SYS_csops_audittoken
SYS_kdebug_typefilter
SYS_kdebug_trace_string
SYS_kdebug_trace64
SYS_kdebug_trace
SYS_sigreturn
SYS_pathconf
SYS_getrlimit
SYS_setrlimit
SYS_mmap
SYS_lseek
SYS_ftruncate
SYS_sysctl
SYS_mlock
SYS_munlock
SYS_open_dprotected_np
SYS_getattrlist
SYS_fgetattrlist
SYS_fsetattrlist
SYS_getxattr
SYS_fgetxattr
SYS_setxattr
SYS_fsetxattr
SYS_removexattr
SYS_fremovexattr
SYS_listxattr
SYS_shm_open
SYS_shm_unlink
SYS_sem_open
SYS_sem_close
SYS_sem_wait
SYS_sem_post
SYS_sysctlbyname
SYS_chmod_extended
SYS_fchmod_extended
SYS_gettid
SYS_shared_region_check_np
SYS_psynch_mutexwait
SYS_psynch_mutexdrop
SYS_psynch_cvbroad
SYS_psynch_cvsignal
SYS_psynch_cvwait
SYS_psynch_rw_rdlock
SYS_psynch_rw_wrlock
SYS_psynch_rw_unlock
SYS_psynch_cvclrprepost
SYS_process_policy
SYS_issetugid
SYS___pthread_kill
SYS___pthread_sigmask
SYS___disable_threadsignal
SYS___pthread_markcancel
SYS___semwait_signal
SYS_proc_info
SYS_stat64
SYS_fstat64
SYS_lstat64
SYS_fstat64_extended
SYS_getdirentries64
SYS_statfs64
SYS_fstatfs64
SYS_getfsstat64
SYS_getaudit_addr
SYS_bsdthread_create
SYS_bsdthread_terminate
SYS_kqueue
SYS_lchown
SYS_bsdthread_register
SYS_workq_open
SYS_workq_kernreturn
SYS_thread_selfid
SYS_kevent_qos
SYS_kevent_id
SYS___mac_syscall
SYS_read_nocancel
SYS_write_nocancel
SYS_open_nocancel
SYS_close_nocancel
SYS_sendmsg_nocancel
SYS_recvfrom_nocancel
SYS_fcntl_nocancel
SYS_select_nocancel
SYS_connect_nocancel
SYS_writev_nocancel
SYS_sendto_nocancel
SYS_pread_nocancel
SYS_pwrite_nocancel
SYS___semwait_signal_nocancel
SYS_fsgetpath
SYS_fileport_makeport
SYS_fileport_makefd
SYS_memorystatus_control
SYS_guarded_open_np
SYS_guarded_close_np
SYS_change_fdguard_np
SYS_proc_rlimit_control
SYS_connectx
SYS_getattrlistbulk
SYS_clonefileat
SYS_openat
SYS_openat_nocancel
SYS_faccessat
SYS_fchmodat
SYS_fchownat
SYS_fstatat64
SYS_linkat
SYS_unlinkat
SYS_mkdirat
SYS_bsdthread_ctl
SYS_csrctl
SYS_guarded_open_dprotected_np
SYS_guarded_pwrite_np
SYS_mremap_encrypted
SYS_persona
SYS_work_interval_ctl
SYS_getentropy
SYS_necp_open
SYS_necp_client_action
SYS_ulock_wait
SYS_ulock_wake
SYS_fclonefileat
SYS_abort_with_payload
SYS_os_fault_with_payload
SYS_kqueue_workloop_ctl
SYS_shared_region_map_and_slide_2_np
SYS_ulock_wait2

Syscall-Mach

MSC__kernelrpc_mach_vm_allocate_trap
MSC__kernelrpc_mach_vm_purgable_control_trap
MSC__kernelrpc_mach_vm_deallocate_trap
MSC__kernelrpc_mach_vm_protect_trap
MSC__kernelrpc_mach_vm_map_trap
MSC__kernelrpc_mach_port_allocate_trap
MSC__kernelrpc_mach_port_deallocate_trap
MSC__kernelrpc_mach_port_mod_refs_trap
MSC__kernelrpc_mach_port_insert_right_trap
MSC__kernelrpc_mach_port_insert_member_trap
MSC__kernelrpc_mach_port_extract_member_trap
MSC__kernelrpc_mach_port_construct_trap
MSC__kernelrpc_mach_port_destruct_trap
MSC_mach_reply_port
MSC_thread_self_trap
MSC_task_self_trap
MSC_host_self_trap
MSC_mach_msg_trap
MSC_semaphore_signal_trap
MSC_semaphore_wait_trap
MSC_semaphore_timedwait_trap
MSC__kernelrpc_mach_port_get_attributes_trap
MSC__kernelrpc_mach_port_guard_trap
MSC__kernelrpc_mach_port_unguard_trap
MSC_mach_generate_activity_id
MSC_task_name_for_pid
MSC_pid_for_task
MSC_thread_get_special_reply_port
MSC_swtch_pri
MSC_syscall_thread_switch
MSC_host_create_mach_voucher_trap
MSC_mach_voucher_extract_attr_recipe_trap
MSC__kernelrpc_mach_port_type_trap
MSC__kernelrpc_mach_port_request_notification_trap
MSC_mach_timebase_info_trap
MSC_mk_timer_create
MSC_mk_timer_destroy
MSC_mk_timer_arm
MSC_mk_timer_cancel
MSC_mk_timer_arm_leeway

MIG-Kernel

host_info
host_get_io_master
host_get_clock_service
host_request_notification
host_get_special_port
clock_get_time
mach_exception_raise
io_iterator_next
io_registry_entry_from_path
io_registry_entry_get_property_bytes
io_registry_entry_get_parent_iterator
io_service_close
io_connect_set_notification_port
io_connect_add_client
io_service_open_extended
io_connect_map_memory_into_task
io_connect_method
io_connect_async_method
io_connect_set_notification_port_64
io_registry_entry_get_registry_entry_id
io_server_version
io_service_get_matching_service_bin
io_service_get_matching_services_bin
io_service_add_notification_bin_64
io_registry_entry_get_property_bin_buf
mach_port_request_notification
mach_port_set_attributes
mach_port_get_context_from_user
task_threads_from_user
task_info_from_user
task_get_special_port_from_user
task_set_special_port
semaphore_create
semaphore_destroy
task_set_exc_guard_behavior
thread_get_state_to_user
thread_suspend
thread_resume
thread_info
thread_set_exception_ports
thread_policy
thread_policy_set
vm_copy
vm_remap_external
mach_make_memory_entry
mach_make_memory_entry_64
mach_vm_copy
mach_vm_map_external
mach_vm_remap_external
mach_vm_region_recurse
mach_vm_region
_mach_make_memory_entry
task_restartable_ranges_register
task_restartable_ranges_synchronize
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment