Directories
¶
| Path | Synopsis |
|---|---|
|
Command keychain is a runnable proof that the macOS Security framework bindings can drive the keychain item API through CRUD operations across item classes — using only the idiomatic layer (opinionated/custom/keychain), with no raw FFI, CFDictionary building, or OSStatus decoding at the call site.
|
Command keychain is a runnable proof that the macOS Security framework bindings can drive the keychain item API through CRUD operations across item classes — using only the idiomatic layer (opinionated/custom/keychain), with no raw FFI, CFDictionary building, or OSStatus decoding at the call site. |
|
warden
|
|
|
app
Package app implements Warden's controlling-app side: activating the network system extension and talking to its XPC daemon.
|
Package app implements Warden's controlling-app side: activating the network system extension and talking to its XPC daemon. |
|
cmd/warden
command
Command warden is the Warden controlling app (CLI form): it activates/deactivates the network system extension and manages firewall rules over XPC.
|
Command warden is the Warden controlling app (CLI form): it activates/deactivates the network system extension and manages firewall rules over XPC. |
|
cmd/wardend
command
Command wardend is the Warden network-extension daemon: it registers the NEFilterDataProvider subclass, vends the XPC control service, and runs the system-extension run loop.
|
Command wardend is the Warden network-extension daemon: it registers the NEFilterDataProvider subclass, vends the XPC control service, and runs the system-extension run loop. |
|
config
Package config defines a declarative firewall configuration document (JSON or YAML) and reconciles it against a rule store, kubectl-apply style: rules in the document are ensured present and managed rules absent from it are pruned.
|
Package config defines a declarative firewall configuration document (JSON or YAML) and reconciles it against a rule store, kubectl-apply style: rules in the document are ensured present and managed rules absent from it are pruned. |
|
extension
Package extension implements Warden's network-extension side: the NEFilterDataProvider subclass that judges every new flow, process attribution via libproc, and the XPC daemon the app talks to.
|
Package extension implements Warden's network-extension side: the NEFilterDataProvider subclass that judges every new flow, process attribution via libproc, and the XPC daemon the app talks to. |
|
rules
Package rules implements Warden's rule engine: an in-memory, disk-backed store of firewall rules keyed by process identity, with the lookup that the network extension consults for every new flow.
|
Package rules implements Warden's rule engine: an in-memory, disk-backed store of firewall rules keyed by process identity, with the lookup that the network extension consults for every new flow. |
|
shared
Package shared holds the models, constants, and XPC protocol descriptors used by both the Warden network-extension daemon and the controlling app — mirroring Warden's Shared/ directory (Rule, consts, XPCDaemonProto, XPCUserProto).
|
Package shared holds the models, constants, and XPC protocol descriptors used by both the Warden network-extension daemon and the controlling app — mirroring Warden's Shared/ directory (Rule, consts, XPCDaemonProto, XPCUserProto). |
Click to show internal directories.
Click to hide internal directories.