;;; Copyright (c) 2020-2025 Apple Inc.  All Rights reserved.
;;;
;;; WARNING: The sandbox rules in this file currently constitute
;;; Apple System Private Interface and are subject to change at any time and
;;; without notice.
;;;
(version 1)
(import "system.sb")
(disable-full-symbolication)
(deny default)
(deny file-map-executable process-info* process-info-codesignature nvram* dynamic-code-generation darwin-notification-post iokit-get-properties syscall* fs-snapshot*)
(deny syscall-unix (with partial-symbolication))
(allow syscall-unix
    (syscall-number SYS_abort_with_payload)
    (syscall-number SYS_exit)
    (syscall-number SYS_kdebug_trace64)
    (syscall-number SYS_kdebug_typefilter)
    (syscall-group-kevent)
    (syscall-number SYS_socket)
    (syscall-number SYS_os_fault_with_payload)
    (syscall-number SYS_kqueue_workloop_ctl)
    (syscall-number SYS_sigsuspend_nocancel)
    (syscall-number SYS_workq_kernreturn)
    (syscall-number SYS_proc_info)
    (syscall-number SYS_fileport_makefd)
    (syscall-number SYS_fileport_makeport)
    (syscall-number SYS_gettimeofday)
    (syscall-number SYS_issetugid)
    (syscall-number SYS_open_nocancel)
    (syscall-number SYS_connect)
    (syscall-number SYS_getgid)
    (syscall-number SYS_getuid)
    (syscall-number SYS_sendmsg_x)
    (syscall-number SYS_sendto)
    (syscall-number SYS_shm_open)
    (syscall-number SYS_access)
    (syscall-number SYS_getrusage)
    (syscall-number SYS_madvise)
    (syscall-number SYS_getentropy)
    (syscall-number SYS_setsockopt)
    (syscall-number SYS___mac_syscall)
    (syscall-group-bsdthread)
    (syscall-group-pthread-cv)
    (syscall-group-pthread-locks)
    (syscall-group-ulock)
    (syscall-number SYS___disable_threadsignal)
    (syscall-number SYS___pthread_kill)
    (syscall-number SYS___pthread_sigmask)
    (syscall-number SYS___semwait_signal)
    (syscall-number SYS___semwait_signal_nocancel)
    (syscall-number SYS_sigaction)
    (syscall-number SYS_sigprocmask)
    (syscall-number SYS_thread_selfid)
    (syscall-number SYS_mmap)
    (syscall-number SYS_mprotect)
    (syscall-number SYS_munmap)
    (syscall-group-close)
    (syscall-group-fcntl)
    (syscall-group-read)
    (syscall-group-recv)
    (syscall-group-write)
    (syscall-number SYS_dup)
    (syscall-number SYS_fchmod)
    (syscall-number SYS_fchown)
    (syscall-number SYS_fgetattrlist)
    (syscall-number SYS_fgetxattr)
    (syscall-number SYS_flistxattr)
    (syscall-number SYS_flock)
    (syscall-number SYS_freadlink)
    (syscall-number SYS_fremovexattr)
    (syscall-number SYS_fsetattrlist)
    (syscall-number SYS_fsetxattr)
    (syscall-number SYS_fsgetpath)
    (syscall-number SYS_fstat64)
    (syscall-number SYS_fstatat64)
    (syscall-number SYS_fstatfs64)
    (syscall-number SYS_fsync)
    (syscall-number SYS_ftruncate)
    (syscall-number SYS_getattrlist)
    (syscall-number SYS_getattrlistbulk)
    (syscall-number SYS_getdirentries64)
    (syscall-number SYS_getfsstat64)
    (syscall-number SYS_getrlimit)
    (syscall-number SYS_getxattr)
    (syscall-number SYS_lseek)
    (syscall-number SYS_lstat64)
    (syscall-number SYS_mkdir)
    (syscall-number SYS_mkdirat)
    (syscall-number SYS_mkfifoat)
    (syscall-number SYS_mknodat)
    (syscall-number SYS_readlink)
    (syscall-number SYS_rename)
    (syscall-number SYS_renameat)
    (syscall-number SYS_renameatx_np)
    (syscall-number SYS_rmdir)
    (syscall-number SYS_setrlimit)
    (syscall-number SYS_shutdown)
    (syscall-number SYS_socketpair)
    (syscall-number SYS_stat64)
    (syscall-number SYS_statfs64)
    (syscall-number SYS_symlinkat)
    (syscall-number SYS_truncate)
    (syscall-number SYS_unlink)
    (syscall-number SYS_getsockopt)
    (syscall-number SYS_recvmsg_x)
    (syscall-number SYS___pthread_fchdir)
    (syscall-number SYS_bind)
    (syscall-number SYS_openbyid_np)
    (syscall-number SYS_csrctl)
    (syscall-number SYS_getaudit_addr)
    (syscall-number SYS_getpriority)
    (syscall-number SYS_mlock)
    (syscall-number SYS_munlock)
    (syscall-number SYS_proc_rlimit_control)
    (syscall-number SYS_work_interval_ctl)
    (syscall-number SYS_faccessat)
    (syscall-number SYS_persona)
    (syscall-number SYS_pathconf)
    (syscall-number SYS_accept)
    (syscall-number SYS_geteuid)
    (syscall-number SYS_sigaltstack)
    (syscall-number SYS_msync)
    (syscall-number SYS_setpriority)
    (syscall-number SYS_kdebug_trace_string)
    (syscall-number SYS_getegid)
    (syscall-number SYS_gettid)
    (syscall-number SYS_getpeername)
    (syscall-number SYS_getsockname)
    (syscall-number SYS_kqueue)
    (syscall-number SYS_pipe)
    (syscall-number SYS_select)
    (syscall-number SYS_select_nocancel)
    (syscall-group-send)
)
(deny syscall-mach (with partial-symbolication))
(allow syscall-mach
    (machtrap-number MSC__kernelrpc_mach_port_allocate_trap)
    (machtrap-number MSC__kernelrpc_mach_port_construct_trap)
    (machtrap-number MSC__kernelrpc_mach_port_deallocate_trap)
    (machtrap-number MSC__kernelrpc_mach_port_destruct_trap)
    (machtrap-number MSC__kernelrpc_mach_port_extract_member_trap)
    (machtrap-number MSC__kernelrpc_mach_port_get_attributes_trap)
    (machtrap-number MSC__kernelrpc_mach_port_guard_trap)
    (machtrap-number MSC__kernelrpc_mach_port_insert_member_trap)
    (machtrap-number MSC__kernelrpc_mach_port_insert_right_trap)
    (machtrap-number MSC__kernelrpc_mach_port_mod_refs_trap)
    (machtrap-number MSC__kernelrpc_mach_port_request_notification_trap)
    (machtrap-number MSC__kernelrpc_mach_port_type_trap)
    (machtrap-number MSC__kernelrpc_mach_vm_allocate_trap)
    (machtrap-number MSC__kernelrpc_mach_vm_deallocate_trap)
    (machtrap-number MSC__kernelrpc_mach_vm_map_trap)
    (machtrap-number MSC__kernelrpc_mach_vm_protect_trap)
    (machtrap-number MSC__kernelrpc_mach_vm_purgable_control_trap)
    (machtrap-number MSC_host_create_mach_voucher_trap)
    (machtrap-number MSC_host_self_trap)
    (machtrap-number MSC_iokit_user_client_trap)
    (machtrap-number MSC_mach_generate_activity_id)
    (machtrap-number MSC_mach_msg2_trap)
    (machtrap-number MSC_mach_msg_overwrite_trap)
    (machtrap-number MSC_mach_msg_trap)
    (machtrap-number MSC_mach_reply_port)
    (machtrap-number MSC_mach_vm_reclaim_update_kernel_accounting_trap)
    (machtrap-number MSC_mach_voucher_extract_attr_recipe_trap)
    (machtrap-number MSC_mk_timer_create)
    (machtrap-number MSC_mk_timer_destroy)
    (machtrap-number MSC_pid_for_task)
    (machtrap-number MSC_semaphore_signal_all_trap)
    (machtrap-number MSC_semaphore_signal_trap)
    (machtrap-number MSC_semaphore_timedwait_trap)
    (machtrap-number MSC_semaphore_wait_signal_trap)
    (machtrap-number MSC_semaphore_wait_trap)
    (machtrap-number MSC_swtch_pri)
    (machtrap-number MSC_syscall_thread_switch)
    (machtrap-number MSC_task_self_trap)
    (machtrap-number MSC_thread_get_special_reply_port)
    (machtrap-number MSC_thread_self_trap)
)
(allow process-info-codesignature)
(allow process-info-dirtycontrol (target self))
(allow process-info-setcontrol (target self))
(allow process-info-pidinfo)
(deny sysctl*)
(deny sysctl-read)
(allow sysctl-read
    (sysctl-name
        "hw.pagesize_compat"
        "kern.osversion"
        "machdep.tsc.frequency"
        "sysctl.name2oid"
        "kern.osproductversion"
        "kern.maxfilesperproc"
        "hw.nperflevels"
        "hw.perflevel0.cpusperl2"
        "hw.perflevel0.l2cachesize"
        "hw.perflevel0.logicalcpu"
        "hw.perflevel0.name"
        "hw.perflevel0.physicalcpu_max"
        "hw.perflevel1.cpusperl2"
        "hw.perflevel1.l2cachesize"
        "hw.perflevel1.logicalcpu"
        "hw.perflevel1.name"
        "hw.perflevel1.physicalcpu_max"
        "kern.osrelease"
        "hw.cpufamily"
        "hw.cpusubfamily"
        "hw.optional.avx1_0"
        "hw.optional.avx2_0"
        "hw.optional.avx512f"
        "hw.optional.sse2"
        "hw.optional.sse3"
        "hw.optional.sse4_1"
        "hw.optional.sse4_2"
        "machdep.ptrauth_enabled"
        "sysctl.proc_translated"
        "hw.busfrequency_max"
        "hw.memsize"
        "hw.ncpu"
        "kern.bootargs"
        "hw.cachelinesize"
        "hw.logicalcpu"
        "hw.machine"
        "hw.pagesize"
        "vm.page_wire_count"
        "kern.ipc.maxrecvmsgx"
        "kern.ipc.maxsendmsgx"
        "kern.ipc.maxsockbuf"
        "kern.hv_vmm_present"
        "kern.willshutdown"
        "hw.model"
        "kern.hv_support"
        "security.mac.sandbox.sentinel"
        "hw.logicalcpu_max"
        "hw.physicalcpu_max"
        "hw.physicalcpu"
    )
    (sysctl-name-prefix "sysctl.oidfmt.")
    (sysctl-name-prefix "net.routetable.")
)
(deny mach-lookup (xpc-service-name-prefix ""))
(allow mach-lookup
    (global-name "com.apple.lsd.mapdb")
    (global-name "com.apple.lsd.modifydb")
    (global-name "com.apple.CoreAuthentication.agent")
    (global-name "com.apple.ctkd.token-client")
    (global-name "com.apple.securityd.systemkeychain")
    (global-name "com.apple.securityd.xpc")
    (global-name "com.apple.NetworkSharing")
    (global-name "com.apple.vswitchd.vhost.user.xpc")
    (global-name "com.apple.dpdkswitchd.vhost.user.xpc")
    (xpc-service-name "com.apple.Virtualization.PluginLoader")
    (global-name "com.apple.Virtualization.VirtualMachine")
    (global-name "com.apple.remoted.virtualization")
)
(deny file-read* (with no-report)
    (subpath "/Users")
)
(allow file-read-metadata
    (literal "/usr")
)
(allow file-read*
    (literal "/Library/Application Support/CrashReporter/SubmitDiagInfo.domains")
)
(allow mach-bootstrap
    (apply-message-filter (with report)
        (deny mach-message-send)
        (allow mach-message-send (message-number
            207
            301
            800
            804
            802
            803
            805
            )
        )
    )
)
(deny syscall-mig (with partial-symbolication))
(allow syscall-mig
    (kernel-mig-routine clock_get_time)
    (kernel-mig-routine host_get_io_master)
    (kernel-mig-routine host_request_notification)
    (kernel-mig-routine io_connect_method)
    (kernel-mig-routine io_connect_method_var_output)
    (kernel-mig-routine io_connect_set_properties)
    (kernel-mig-routine io_iterator_is_valid)
    (kernel-mig-routine io_iterator_next)
    (kernel-mig-routine io_iterator_reset)
    (kernel-mig-routine io_object_conforms_to)
    (kernel-mig-routine io_registry_entry_create_iterator)
    (kernel-mig-routine io_registry_entry_from_path)
    (kernel-mig-routine io_registry_entry_get_child_iterator)
    (kernel-mig-routine io_registry_entry_get_parent_iterator)
    (kernel-mig-routine io_registry_entry_get_property_bin_buf)
    (kernel-mig-routine io_registry_entry_get_property_bytes)
    (kernel-mig-routine io_server_version)
    (kernel-mig-routine io_service_close)
    (kernel-mig-routine io_service_get_matching_service)
    (kernel-mig-routine io_service_get_matching_service_bin)
    (kernel-mig-routine io_service_get_state)
    (kernel-mig-routine io_service_open_extended)
    (kernel-mig-routine io_service_wait_quiet)
    (kernel-mig-routine mach_exception_raise)
    (kernel-mig-routine mach_memory_entry_ownership)
    (kernel-mig-routine mach_port_get_context_from_user)
    (kernel-mig-routine mach_port_is_connection_for_service)
    (kernel-mig-routine mach_port_request_notification)
    (kernel-mig-routine mach_port_set_attributes)
    (kernel-mig-routine mach_vm_map_external)
    (kernel-mig-routine mach_vm_remap_external)
    (kernel-mig-routine mach_vm_remap_new_external)
    (kernel-mig-routine mach_voucher_attr_command)
    (kernel-mig-routine semaphore_create)
    (kernel-mig-routine task_create_identity_token)
    (kernel-mig-routine task_info_from_user)
    (kernel-mig-routine task_restartable_ranges_synchronize)
    (kernel-mig-routine thread_info)
    (kernel-mig-routine io_registry_get_root_entry)
    (kernel-mig-routine mach_port_get_refs)
    (kernel-mig-routine thread_policy_set)
    (kernel-mig-routine _mach_make_memory_entry)
    (kernel-mig-routine host_info)
    (kernel-mig-routine io_connect_add_client)
    (kernel-mig-routine io_connect_async_method)
    (kernel-mig-routine io_connect_map_memory_into_task)
    (kernel-mig-routine io_connect_set_notification_port_64)
    (kernel-mig-routine io_registry_entry_get_properties_bin_buf)
    (kernel-mig-routine io_registry_entry_get_registry_entry_id)
    (kernel-mig-routine io_service_add_interest_notification_64)
    (kernel-mig-routine io_service_add_notification_bin_64)
    (kernel-mig-routine io_service_get_matching_services_bin)
    (kernel-mig-routine semaphore_destroy)
    (kernel-mig-routine task_get_special_port_from_user)
    (kernel-mig-routine io_registry_entry_get_name_in_plane)
    (kernel-mig-routine io_registry_entry_get_property_recursively)
    (kernel-mig-routine mach_vm_copy)
    (kernel-mig-routine io_registry_entry_get_path)
    (kernel-mig-routine mach_vm_deferred_reclamation_buffer_allocate)
    (kernel-mig-routine mach_vm_deferred_reclamation_buffer_flush)
    (kernel-mig-routine mach_vm_deferred_reclamation_buffer_resize)
)
(allow file-ioctl
    (ioctl-command DKIOCGETBLOCKCOUNT)
    (ioctl-command DKIOCGETBLOCKSIZE)
    (ioctl-command DKIOCGETFEATURES)
    (ioctl-command DKIOCSYNCHRONIZE)
    (ioctl-command DKIOCUNMAP)
)
(allow system-fsctl
    (fsctl-command (_IO "J" 128))
)
(allow iokit-get-properties
    (iokit-property "IOClassNameOverride")
)
(allow user-preference-read
    (preference-domain "kCFPreferencesAnyApplication")
)
(define (generic-metal)
    (allow iokit-get-properties
        (iokit-property "AAPL,slot-name")
        (iokit-property "Ejectable")
        (iokit-property "IOMediaIcon")
        (iokit-property "MetalPluginClassName")
        (iokit-property "MetalPluginName")
        (iokit-property "Protocol Characteristics")
        (iokit-property "Removable")
        (iokit-property "SafeEjectRequested")
    )
    (allow iokit-open
        (iokit-user-client-class "IOAccelDevice2")
        (iokit-user-client-class "IOAccelSharedUserClient2")
        (iokit-user-client-class "IOAccelSubmitter2")
        (iokit-user-client-class "IOGPUDeviceUserClient")
    )
    (allow mach-lookup
        (global-name "com.apple.CoreServices.coreservicesd")
        (global-name "com.apple.DiskArbitration.diskarbitrationd")
        (global-name "com.apple.MTLCompilerService")
    )
)
(with-filter
    (system-attribute apple-internal)
    (allow file-read* file-map-executable
        (subpath "/usr/local/lib/coredumpplugins/")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.videotoolbox")
    (allow user-preference-read
        (preference-domain "com.apple.VideoProcessing")
        (preference-domain "com.apple.coremedia")
    )
    (allow iokit-get-properties
        (iokit-property "IOAVDAV1DecodeCapabilities")
        (iokit-property "IOAVDH264DecodeCapabilities")
        (iokit-property "IOAVDHEVCDecodeCapabilities")
        (iokit-property "IOAVEHEVCEncode")
        (iokit-property "IOAfterburnerProResDecode")
        (iokit-property "IOGVAHEVCDecode")
        (iokit-property "IOGVAHEVCDecodeCapabilities")
        (iokit-property "IOGVAHEVCEncode")
        (iokit-property "IOGVAHEVCEncodeCapabilities")
        (iokit-property "IOGVAXDecode")
        (iokit-property "IOProResHWDecode")
        (iokit-property "IOProResHWEncode")
        (iokit-property "compatible")
        (iokit-property "soc-generation")
        (iokit-property-regex #"^AppleJPEG")
    )
    (with-filter
        (iokit-registry-entry-class "AppleAVD")
        (allow iokit-get-properties
            (iokit-property "ADSSupported")
            (iokit-property "AVCSupported")
        )
    )
    (allow iokit-open
        (iokit-user-client-class "AppleAVDUserClient")
        (iokit-user-client-class "AppleAVE2UserClient")
        (iokit-user-client-class "AppleJPEGDriverUserClient")
        (iokit-user-client-class "AppleProResUserClient")
    )
    (allow iokit-open-service
        (iokit-registry-entry-class "AppleAVD")
        (iokit-registry-entry-class "AppleJPEGDriver")
    )
    (allow iokit-open-user-client
        (iokit-user-client-class "IOSurfaceAcceleratorClient")
    )
    (allow file-map-executable
        (subpath "/System/Library/Video/Plug-Ins")
    )
    (allow mach-lookup
        (xpc-service-name "com.apple.coremedia.videodecoder")
    )
    (with-filter
        (system-attribute apple-internal)
        (allow file-read* file-map-executable
            (subpath "/AppleInternal/Library/Video/Plug-Ins")
        )
        (allow file-read-metadata
            (path-ancestors "/AppleInternal/Library/Video/Plug-Ins")
        )
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.io-surface")
    (allow iokit-open
        (iokit-user-client-class "IOSurfaceRootUserClient")
        (iokit-registry-entry-class "IOSurfaceSendRight")
    )
    (generic-metal)
)
(with-filter
    (extension "com.apple.virtualization.extension.aes")
    (allow iokit-open
        (iokit-user-client-class "IOAESAcceleratorUserClient")
        (iokit-registry-entry-class "IOAESAccelerator")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.avp.rtc")
    (allow iokit-open
        (iokit-user-client-class "RootDomainUserClient")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.fp")
    (allow iokit-open
        (iokit-user-client-class "com_apple_driver_FairPlayIOKitUserClient")
        (iokit-registry-entry-class "com_apple_driver_FairPlayIOKit")
    )
    (allow mach-lookup
        (global-name "com.apple.adid")
        (global-name "com.apple.lskdd")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.paravirtualized-graphics")
    (allow user-preference-read
        (preference-domain "com.apple.gpu")
        (preference-domain "com.apple.gpusw.ParavirtualizedGraphics")
    )
    (allow mach-lookup
        (global-name "com.apple.coreservices.launchservicesd")
        (global-name "com.apple.tccd.system")
        (global-name "com.apple.windowserver.active")
        (global-name "com.apple.gpusw.ParavirtualizedGraphicsGPUTask")
    )
    (allow iokit-get-properties
        (iokit-registry-entry-class "IOGPU")
        (iokit-registry-entry-class "IOGraphicsAccelerator2")
    )
    (allow file-map-executable
        (subpath "/System/Library/Extensions")
    )
    (allow file-read-metadata
        (literal "/private/var/db/.AppleSetupDone")
    )
    (allow file-read-data
        (literal "/Library/Preferences/com.apple.gpusw.ParavirtualizedGraphics.plist")
    )
    (allow iokit-open
        (iokit-connection "IOAccelerator")
        (iokit-registry-entry-class "IOGPUDevice")
        (iokit-registry-entry-class "IOAccelShared2")
        (iokit-registry-entry-class "IOAccelDevice2")
        (iokit-registry-entry-class "IOAccelCommandQueue")
    )
)
(define (generic-core-audio)
    (allow mach-lookup
        (global-name "com.apple.audio.AudioComponentRegistrar")
        (global-name "com.apple.audio.AudioSession")
        (global-name "com.apple.audio.audiohald")
        (global-name "com.apple.audio.coreaudiod")
        (global-name "com.apple.audio.toolbox.reporting.service")
        (global-name "com.apple.audioanalyticsd")
        (global-name "com.apple.cmio.registerassistantservice.system-extensions")
        (global-name "com.apple.distributed_notifications@Uv3")
        (global-name "com.apple.tccd")
        (xpc-service-name "com.apple.audio.SandboxHelper")
    )
    (allow file-map-executable
        (literal "/System/Library/Components/AudioDSP.component/Contents/MacOS/AudioDSP")
        (literal "/System/Library/Components/CoreAudio.component/Contents/MacOS/CoreAudio")
        (literal "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAHALPlugIn.bundle/Contents/MacOS/AppleHDAHALPlugIn")
    )
    (allow iokit-get-properties
        (iokit-property "acoustic-id")
        (iokit-property "board-id")
        (iokit-property "IOAudioEngineDisableClockBoundsCheck")
        (iokit-property "IOAudioSampleRate")
        (iokit-property "IOAudioStreamSampleFormatByteOrder")
        (iokit-property "IOConsoleUsers")
        (iokit-property "IORegistryEntryPropertyKeys")
        (iokit-property "SupportAudioAUUC")
        (iokit-property-regex #"^IOAudioControl(ChannelID|ID|SubType|Usage|Value)")
        (iokit-property-regex #"^IOAudioDevice(CanBeDefaults|TransportType)")
        (iokit-property-regex #"^IOAudioEngine(ChannelNames|ClientDescription|CoreAudioPlugIn|(|Device)Description|Flavor|GlobalUniqueID|IsHidden|OutputChannelLayout|SampleOffset|State)")
        (iokit-property-regex #"^IOAudioEngine(Input|Output)Sample(Latency|Offset)")
        (iokit-property-regex #"^IOAudioEngineClock(Domain|IsStable)")
        (iokit-property-regex #"^IOAudioEngineNum(ActiveUserClients|SampleFramesPerBuffer)")
    )
    (allow ipc-posix-shm-read* ipc-posix-shm-write-data
        (ipc-posix-name-prefix "AudioIO")
    )
    (allow user-preference-read
        (preference-domain "com.apple.avfoundation")
        (preference-domain "com.apple.coreaudio")
        (preference-domain "com.apple.coremedia")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.audio-output")
    (generic-core-audio)
    (allow iokit-open
       (require-all
           (iokit-connection "AppleHDAEngineOutput")
           (iokit-user-client-class "IOAudioControlUserClient" "IOAudioEngineUserClient")
        )
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.audio-input")
    (allow device-microphone)
    (generic-core-audio)
    (allow iokit-open
       (require-all
           (iokit-connection "AppleHDAEngineInput")
           (iokit-user-client-class "IOAudioControlUserClient" "IOAudioEngineUserClient")
        )
    )
)
(with-filter
    (extension "com.apple.app-sandbox.read")
    (allow file-read*)
    (allow file-issue-extension
        (extension-class "com.apple.app-sandbox.read")
    )
)
(with-filter
    (extension "com.apple.app-sandbox.read-write")
    (allow file-read* file-write*)
    (allow file-issue-extension
        (extension-class "com.apple.app-sandbox.read" "com.apple.app-sandbox.read-write")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.linux-gpu-acceleration")
    (allow file-map-executable
        (subpath "/System/Library/Extensions")
    )
    (allow file-issue-extension
        (extension-class "com.apple.app-sandbox.read")
    )
    (allow iokit-get-properties
        (iokit-property "ATY,DeviceName")
        (iokit-property "ATY,FamilyName")
        (iokit-property "built-in")
        (iokit-property "device-id")
        (iokit-property "vendor-id")
    )
    (allow iokit-open-user-client
        (iokit-user-client-class "AGPMClient")
    )
    (generic-metal)
)
(with-filter
    (extension "com.apple.virtualization.extension.ane")
    (allow iokit-get-properties
        (iokit-property "ane-type")
        (iokit-property "chip-id")
    )
    (with-filter
        (iokit-registry-entry-class "ANEDriver")
        (allow iokit-get-properties
            (iokit-property "DeviceProperties")
        )
    )
    (with-filter
        (iokit-registry-entry-class "H11ANEIn")
        (allow iokit-get-properties
            (iokit-property "DeviceProperties")
        )
    )
    (allow iokit-open
        (iokit-connection "H11ANE")
        (iokit-user-client-class "H11ANEInDirectPathClient")
        (iokit-user-client-class "H11ANEInUserClient")
        (iokit-user-client-class "H1xANELoadBalancerClient")
    )
    (allow mach-lookup
        (global-name "com.apple.ANECompilerService")
        (global-name "com.apple.aned")
        (global-name "com.apple.appleneuralengine")
    )
)
(deny iokit-open-service
    (iokit-registry-entry-class "ANEPrivilegedVMAccess")
)
(with-filter
    (extension "com.apple.virtualization.extension.ane.privileged-vm-client")
    (allow iokit-open-service
        (iokit-registry-entry-class "ANEPrivilegedVMAccess")
    )
    (allow iokit-open-user-client
        (iokit-user-client-class "ANEPrivilegedVMAccessUserClient")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.usb-hci")
    (allow iokit-open
        (require-all
            (iokit-connection "AppleUSBUserHCIResources")
            (iokit-user-client-class "AppleUSBUserHCIUserClient")
        )
    )
    (allow iokit-get-properties
        (iokit-property "locationID")
    )
    (with-filter
        (iokit-registry-entry-class "AppleUSBUserHCIUserClient")
        (allow iokit-set-properties
            (iokit-property "IOUSBHostControllerInterfaceUUID")
        )
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.fuse")
    (allow network-bind (remote unix))
)
(with-filter
    (extension "com.apple.virtualization.extension.rosetta-directory-share")
    (allow file-read*
        (subpath "/Library/Apple/usr/libexec/oah/RosettaLinux")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.biometrics")
    (allow mach-lookup
        (global-name "com.apple.biometrickitd")
    )
    (allow file-read*
        (literal "/usr/local/lib/libVirtualBiometricServices.dylib")
    )
    (allow file-map-executable
        (literal "/usr/local/lib/libVirtualBiometricServices.dylib")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.strong-identity")
    (allow mach-lookup
        (global-name "com.apple.AppleVirtualPlatform.SystemService")
        (global-name "com.apple.CoreAuthentication.daemon")
        (xpc-service-name "com.apple.AppleVirtualPlatform.IdentityService")
    )
)
(allow mach-lookup
    (extension "com.apple.virtualization.mach-extension")
)
(with-filter
    (extension "com.apple.virtualization.extension.bridged-networking")
    (allow iokit-get-properties
        (iokit-property "BSD Name")
        (iokit-property "DeviceModemOverrides")
        (iokit-property "DevicePPPOverrides")
        (iokit-property "HiddenConfiguration")
        (iokit-property "HiddenInterface")
        (iokit-property "HiddenPort")
        (iokit-property "IOActivePacketFilters")
        (iokit-property "IOBuiltin")
        (iokit-property "IOControllerEnabled")
        (iokit-property "IOFeatures")
        (iokit-property "IOGeneralInterest")
        (iokit-property "IOInterfaceExtraFlags")
        (iokit-property "IOInterfaceFlags")
        (iokit-property "IOInterfaceNamePrefix")
        (iokit-property "IOInterfaceState")
        (iokit-property "IOInterfaceType")
        (iokit-property "IOInterfaceUnit")
        (iokit-property "IOLinkActiveCount")
        (iokit-property "IOLocation")
        (iokit-property "IOMACAddress")
        (iokit-property "IOMaxTransferUnit")
        (iokit-property "IOMediaAddressLength")
        (iokit-property "IOMediaHeaderLength")
        (iokit-property "IONetworkData")
        (iokit-property "IOPrimaryInterface")
        (iokit-property "IOProviderClass")
        (iokit-property "IORequiredPacketFilters")
        (iokit-property "IOSerialBSDClientType")
        (iokit-property "IOTTYBaseName")
        (iokit-property "IOTTYDevice")
        (iokit-property "Initializing")
        (iokit-property "InterfaceRole")
        (iokit-property "IsEphemeral")
        (iokit-property "ModemCCL")
        (iokit-property "NetworkConfigurationOverrides")
        (iokit-property "New Interface Detected Action")
        (iokit-property "PCI-Thunderbolt")
        (iokit-property "Product Name")
        (iokit-property "SelfNamed")
        (iokit-property "SupportsIPhoneOS")
        (iokit-property "SupportsVMNETBridgedMode")
        (iokit-property "WWAN")
        (iokit-property "idProduct")
        (iokit-property "idVendor")
        (iokit-property "kUSBProductString")
        (iokit-property "name")
    )
    (allow file-read*
        (literal "/Library/Preferences/SystemConfiguration/preferences.plist")
    )
    (allow mach-lookup
        (global-name "com.apple.SystemConfiguration.configd")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.usb-device-passthrough")
    (allow mach-lookup
        (global-name "com.apple.iokit.IOServiceAuthorizeAgent")
    )
    (allow file-map-executable
        (subpath "/System/Library/Extensions")
    )
    (allow iokit-open
        (iokit-user-client-class "AppleUSBHostDeviceUserClient")
        (iokit-user-client-class "AppleUSBHostFrameworkDeviceClient")
        (iokit-user-client-class "AppleUSBHostFrameworkInterfaceClient")
        (iokit-user-client-class "AppleUSBHostInterfaceUserClient")
    )
    (with-filter
        (iokit-registry-entry-class "IOUSBHostDevice")
        (allow iokit-get-properties)
    )
    (with-filter
        (iokit-registry-entry-class "IOUSBHostInterface")
        (allow iokit-get-properties)
    )
)
(with-filter
    (require-all
        (system-attribute apple-internal)
        (extension "com.apple.virtualization.extension.bifrost-pci-device.local")
    )
    (allow mach-lookup
        (global-name "com.apple.internal.bifrostd")
    )
)
(with-filter
    (require-all
        (system-attribute apple-internal)
        (extension "com.apple.virtualization.extension.bifrost-pci-device.unix")
    )
    (allow network-outbound
        (subpath "/")
    )
)
(with-filter
    (extension "com.apple.virtualization.extension.disk-images-2.amber-plugin")
    (allow mach-lookup
        (global-name "com.apple.AppSSO.service-xpc")
        (global-name "com.apple.SystemConfiguration.configd")
        (global-name "com.apple.TrustEvaluationAgent")
        (global-name "com.apple.amberd")
        (global-name "com.apple.nesessionmanager")
        (global-name "com.apple.nesessionmanager.content-filter")
        (global-name "com.apple.CodeSigningHelper")
    )
    (allow file-read-data
        (literal "/Library/Preferences/com.apple.networkd.plist")
        (literal "/private/etc/hosts")
        (literal "/private/etc/ssl/cert.pem")
        (literal "/private/etc/ssl/openssl.cnf")
    )
    (allow network-outbound)
    (allow syscall-unix
        (syscall-number SYS_change_fdguard_np)
        (syscall-number SYS_necp_client_action)
        (syscall-number SYS_necp_open)
    )
)
(with-filter
    (iokit-registry-entry-class "IOPlatformExpertDevice")
    (allow iokit-get-properties
        (iokit-property "IOPlatformSerialNumber")
        (iokit-property "platform-name")
    )
)
(with-filter
    (require-all
        (system-attribute apple-internal)
        (extension "com.apple.virtualization.extension.internal.rosetta")
    )
    (allow file-read*
        (subpath "/usr/local/libexec/rosetta")
    )
)
(with-filter
    (system-attribute apple-internal)
    (allow iokit-open
        (iokit-user-client-class "PCIPassthroughControllerUserClient")
        (iokit-user-client-class "PCIPassthroughUserClient")
    )
)
(with-filter
    (require-all
        (system-attribute apple-internal)
        (extension "com.apple.virtualization.extension.disk-images-2.julio-test-plugin")
    )
    (allow file-read*
        (literal "/AppleInternal/System/Library")
        (literal "/AppleInternal/System/Library/libtest_plugin_shared_object.dylib")
    )
    (allow file-map-executable
        (literal "/AppleInternal/System/Library/libtest_plugin_shared_object.dylib")
    )
)