mach/task.h Kernel.framework

extern kern_return_t task_set_info(
	task_t target_task,
	task_flavor_t flavor,
	task_info_t task_info_in,
	mach_msg_type_number_t task_info_inCnt
)

Set task information.

extern kern_return_t task_suspend(task_read_t target_task)

Increment the suspend count for the target task. No threads within a task may run when the suspend count for that task is non-zero.

kern_return_t task_suspend(task_t target_task)

extern kern_return_t task_resume(task_read_t target_task)

Decrement the suspend count for the target task, if the count is currently non-zero. If the resulting suspend count is zero, then threads within the task that also have non-zero suspend counts may execute.

kern_return_t task_resume(task_t target_task)

extern kern_return_t task_get_special_port(
	task_inspect_t task,
	int which_port,
	mach_port_t *special_port /* out */
)

Returns the current value of the selected special port associated with the target task.

kern_return_t task_get_special_port(task_t task, int which_port, mach_port_t *special_port)

extern kern_return_t task_set_special_port(
	task_t task,
	int which_port,
	mach_port_t special_port
)

Set one of the special ports associated with the target task.

kern_return_t task_set_special_port(task_t task, int which_port, mach_port_t special_port)

extern kern_return_t thread_create(
	task_t parent_task,
	thread_act_t *child_act /* out */
)

Create a new thread within the target task, returning the port representing the first thr_act in that new thread. The initial execution state of the thread is undefined.

kern_return_t thread_create(task_t parent_task, thread_t *child_thread)

extern kern_return_t thread_create_running(
	task_t parent_task,
	thread_state_flavor_t flavor,
	thread_state_t new_state,
	mach_msg_type_number_t new_stateCnt,
	thread_act_t *child_act /* out */
)

Create a new thread within the target task, returning the port representing that new thread. The new thread is not suspended; its initial execution state is given by flavor and new_state. Returns the port representing the new thread.

extern kern_return_t task_set_exception_ports(
	task_t task,
	exception_mask_t exception_mask,
	mach_port_t new_port,
	exception_behavior_t behavior,
	thread_state_flavor_t new_flavor
)

Set an exception handler for a task on one or more exception types. These handlers are invoked for all threads in the task if there are no thread-specific exception handlers or those handlers returned an error.

extern kern_return_t task_get_exception_ports(
	task_t task,
	exception_mask_t exception_mask,
	exception_mask_array_t masks, /* out */
	mach_msg_type_number_t *masksCnt,
	exception_handler_array_t old_handlers, /* out */
	exception_behavior_array_t old_behaviors, /* out */
	exception_flavor_array_t old_flavors /* out */
)

Lookup some of the old exception handlers for a task

extern kern_return_t task_swap_exception_ports(
	task_t task,
	exception_mask_t exception_mask,
	mach_port_t new_port,
	exception_behavior_t behavior,
	thread_state_flavor_t new_flavor,
	exception_mask_array_t masks, /* out */
	mach_msg_type_number_t *masksCnt,
	exception_handler_array_t old_handlers, /* out */
	exception_behavior_array_t old_behaviors, /* out */
	exception_flavor_array_t old_flavors /* out */
)

Set an exception handler for a thread on one or more exception types. At the same time, return the previously defined exception handlers for those types.

extern kern_return_t task_policy_set(
	task_policy_set_t task,
	task_policy_flavor_t flavor,
	task_policy_t policy_info,
	mach_msg_type_number_t policy_infoCnt
)

Set/get policy information for a task. (Approved Mac OS X microkernel interface)

extern kern_return_t task_get_state(
	task_read_t task,
	thread_state_flavor_t flavor,
	thread_state_t old_state, /* out */
	mach_msg_type_number_t *old_stateCnt
)

Read the selected state which is to be installed on new threads in the task as they are created.

extern kern_return_t task_set_state(
	task_t task,
	thread_state_flavor_t flavor,
	thread_state_t new_state,
	mach_msg_type_number_t new_stateCnt
)

Set the selected state information to be installed on all subsequently created threads in the task.

extern kern_return_t task_set_phys_footprint_limit(
	task_t task,
	int new_limit,
	int *old_limit /* out */
)

Change the task's physical footprint limit (in MB).

extern kern_return_t task_register_hardened_exception_handler(
	task_t task,
	uint32_t signed_pc_key,
	exception_mask_t exceptions_allowed,
	exception_behavior_t behaviors_allowed,
	thread_state_flavor_t flavors_allowed,
	mach_port_t new_exception_port
)

When used in conjunction with thread_adopt_exception_handler, we call this a hardened mach exception handler, and it adds additional security guarantees to this exception port: 1. Enforces only a subset of exceptions, behaviours, and flavors may be used with this port 2. The `new_exception_port` must be created using MPO_EXCEPTION_PORT (implicitly immovable) 3. When using *STATE* behaviors of exception handling, only the PC is allowed to be set. 4. Setting the PC in an exception handler must be signed using a diversifier of signed_pc_key (if non-zero). You can pre-sign your PC state and then throw away the key to ensure that only a limited set of PC's may be used with this exception handler 5. Calling `[task,thread,host]_set_exception_ports` if you have the IPC_ONLY_ONE_EXCEPTION_PORT entitlement is disallowed, and you must use this hardened exception flow. If used with the traditional set_exception_ports functions, these security guarantees do not apply. You can only call this once per task. See tests/ipc/hardened_exceptions.c for examples.