X f< ddlZddlmZmZddlmZmZddlmZddl m Z ddl m Z ddl mZddlmZej"eZGd d ej(j*Zy) N)IterableCallable) renderers interfaces) requirements)utility) format_hints)mac)lsmodc eZdZdZdZdZedZedfdejjde de e gefdeej j"fd Zd Zd Zy ) Kauth_scopesz#Lists kauth scopes and their statusrrctjddddgtjdtjdtj d t jd gS) NkernelzKernel module for the OSIntel32Intel64)name description architecturesmacutils)rr)r componentversionr r)rpluginr)rModuleRequirementVersionRequirementr MacUtilitiesPluginRequirementr Lsmod)clss `/home/panchajanya/Development/work/volatility3/volatility3/framework/plugins/mac/kauth_scopes.pyget_requirementszKauth_scopes.get_requirementssb  * *6()4   + +3+;+;Y   * *U[[)   cy)NF)_s r"zKauth_scopes.,sr$contextkernel_module_name filter_funcreturnc#K|j|}|jd}tjj |dD]}||r |yw)zw Enumerates the registered kauth scopes and yields each object Uses smear-safe enumeration API kauth_scopesks_linkN)modulesobject_from_symbolr r walk_tailq)r!r)r*r+rscopesscopes r"list_kauth_scopeszKauth_scopes.list_kauth_scopes'sV!34**>:%%00C Eu%  s A AAc #6K|jj|jd}tjj |j|jd}t jj|j|j||}|j|j|jdD]}|j}|dk(rt jj|j|||jd\}}tj|jd}d|t!j"|j$t'|j)D cgc]} | c} t!j"|||ffycc} ww)Nrr)r)r0configr r list_modulesr rgenerate_kernel_handler_info layer_namer5 ks_callbacklookup_module_addressrpointer_to_string ks_identifierr Hexks_idatalen get_listeners) selfrmodshandlersr4callback module_name symbol_name identifierls r" _generatorzKauth_scopes._generator:sX%%dkk(&;<{{'' dkk(6KL##@@ LL&++VT ++DLL$++h:OP E((H1}'*'7'7'M'M h$++h2G( $K!2253F3FLJ $$U^^4E$7$7$9:q:; $$X.     ;sE%F' F0)Fc tjdtfdtjfdt fdtjfdtfdtfg|j S)NNameIData ListenerszCallback AddressModuleSymbol)rTreeGridstrr r@intrL)rDs r"runzKauth_scopes.runZs_!! ,**+c"#\%5%5633   OO   r$N)__name__ __module__ __qualname____doc___version_required_framework_version classmethodr#rr)ContextInterfacerTrrUboolrobjectsObjectInterfacer5rLrVr&r$r"r r s-H"+     .= ##44 seTk*  *$$44 5 $@  r$r )loggingtypingrrvolatility3.frameworkrr#volatility3.framework.configurationrvolatility3.framework.objectsrvolatility3.framework.renderersr volatility3.framework.symbolsr volatility3.plugins.macr getLoggerrWvollogpluginsPluginInterfacer r&r$r"rnsK%7<18-)   8 $T :%%55T r$