This is xnu-11215.1.10. See this file in:
#pragma clang diagnostic ignored "-Wdeprecated-declarations"
#include <sys/codesign.h>
#include <signal.h>
#include <darwintest.h>
#include <darwintest_utils.h>
T_GLOBAL_META(T_META_RUN_CONCURRENTLY(true));
T_DECL(static_binary,
"Verify that static binaries have CS_NO_UNTRUSTED_HELPERS set", T_META_TAG_VM_PREFERRED) {
int ret;
pid_t pid;
char *launch_argv[] = {"./static_binary", NULL};
ret = dt_launch_tool(&pid, launch_argv, /*start_suspended*/ true, NULL, NULL);
T_QUIET;
T_ASSERT_POSIX_SUCCESS(ret, "dt_launch_tool on static binary");
uint32_t status = 0;
ret = csops(pid, CS_OPS_STATUS, &status, sizeof(status));
T_QUIET;
T_EXPECT_POSIX_SUCCESS(ret, "request CS_OPS_STATUS on static binary");
if (!ret) {
T_EXPECT_BITS_SET(status, CS_NO_UNTRUSTED_HELPERS, "CS_NO_UNTRUSTED_HELPERS should be set on static binary");
}
ret = kill(pid, SIGCONT);
T_QUIET;
T_ASSERT_POSIX_SUCCESS(ret, "SIGCONT on static binary");
int exitstatus, signal;
dt_waitpid(pid, &exitstatus, &signal, 30);
T_QUIET;
T_ASSERT_EQ(signal, 0, "static binary exited");
T_QUIET;
T_ASSERT_EQ(exitstatus, 42, "static binary exited with code 42");
}