How to get a list of callbacks registered by the Sandbox MAC ( here for macOS 10.13 High Sierra ).
First increase the LLDB target.max-children-count setting so big structures are printed in full.
(lldb) settings show target.max-children-count
target.max-children-count (int) = 256
(lldb) settings set target.max-children-count 512
(lldb) settings show target.max-children-count
target.max-children-count (int) = 512
Print the structure.
(lldb) p *mac_policy_list.entries[1].mpc->mpc_ops
(const mac_policy_ops) $110 = {
mpo_audit_check_postselect = 0x0000000000000000
mpo_audit_check_preselect = 0x0000000000000000
mpo_bpfdesc_label_associate = 0x0000000000000000
mpo_bpfdesc_label_destroy = 0x0000000000000000
mpo_bpfdesc_label_init = 0x0000000000000000
mpo_bpfdesc_check_receive = 0x0000000000000000
mpo_cred_check_label_update_execve = 0xffffff7f82bd9231 (Sandbox`hook_cred_check_label_update_execve)
mpo_cred_check_label_update = 0xffffff7f82bcabde (Sandbox`hook_cred_check_label_update)
mpo_cred_check_visible = 0x0000000000000000
mpo_cred_label_associate_fork = 0x0000000000000000
mpo_cred_label_associate_kernel = 0x0000000000000000
mpo_cred_label_associate = 0xffffff7f82bcac05 (Sandbox`hook_cred_label_associate)
mpo_cred_label_associate_user = 0x0000000000000000
mpo_cred_label_destroy = 0xffffff7f82bcac29 (Sandbox`hook_cred_label_destroy)
mpo_cred_label_externalize_audit = 0x0000000000000000
mpo_cred_label_externalize = 0x0000000000000000
mpo_cred_label_init = 0x0000000000000000
mpo_cred_label_internalize = 0x0000000000000000
mpo_cred_label_update_execve = 0xffffff7f82bd925a (Sandbox`hook_cred_label_update_execve)
mpo_cred_label_update = 0xffffff7f82bcac35 (Sandbox`hook_cred_label_update)
mpo_devfs_label_associate_device = 0x0000000000000000
mpo_devfs_label_associate_directory = 0x0000000000000000
mpo_devfs_label_copy = 0x0000000000000000
mpo_devfs_label_destroy = 0x0000000000000000
mpo_devfs_label_init = 0x0000000000000000
mpo_devfs_label_update = 0x0000000000000000
mpo_file_check_change_offset = 0x0000000000000000
mpo_file_check_create = 0x0000000000000000
mpo_file_check_dup = 0x0000000000000000
mpo_file_check_fcntl = 0xffffff7f82bcac64 (Sandbox`hook_file_check_fcntl)
mpo_file_check_get_offset = 0x0000000000000000
mpo_file_check_get = 0x0000000000000000
mpo_file_check_inherit = 0x0000000000000000
mpo_file_check_ioctl = 0x0000000000000000
mpo_file_check_lock = 0x0000000000000000
mpo_file_check_mmap_downgrade = 0x0000000000000000
mpo_file_check_mmap = 0xffffff7f82bcacba (Sandbox`hook_file_check_mmap)
mpo_file_check_receive = 0x0000000000000000
mpo_file_check_set = 0xffffff7f82bcad36 (Sandbox`hook_file_check_set)
mpo_file_label_init = 0x0000000000000000
mpo_file_label_destroy = 0x0000000000000000
mpo_file_label_associate = 0x0000000000000000
mpo_ifnet_check_label_update = 0x0000000000000000
mpo_ifnet_check_transmit = 0x0000000000000000
mpo_ifnet_label_associate = 0x0000000000000000
mpo_ifnet_label_copy = 0x0000000000000000
mpo_ifnet_label_destroy = 0x0000000000000000
mpo_ifnet_label_externalize = 0x0000000000000000
mpo_ifnet_label_init = 0x0000000000000000
mpo_ifnet_label_internalize = 0x0000000000000000
mpo_ifnet_label_update = 0x0000000000000000
mpo_ifnet_label_recycle = 0x0000000000000000
mpo_inpcb_check_deliver = 0x0000000000000000
mpo_inpcb_label_associate = 0x0000000000000000
mpo_inpcb_label_destroy = 0x0000000000000000
mpo_inpcb_label_init = 0x0000000000000000
mpo_inpcb_label_recycle = 0x0000000000000000
mpo_inpcb_label_update = 0x0000000000000000
mpo_iokit_check_device = 0x0000000000000000
mpo_ipq_label_associate = 0x0000000000000000
mpo_ipq_label_compare = 0x0000000000000000
mpo_ipq_label_destroy = 0x0000000000000000
mpo_ipq_label_init = 0x0000000000000000
mpo_ipq_label_update = 0x0000000000000000
mpo_file_check_library_validation = 0x0000000000000000
mpo_vnode_notify_setacl = 0x0000000000000000
mpo_vnode_notify_setattrlist = 0x0000000000000000
mpo_vnode_notify_setextattr = 0x0000000000000000
mpo_vnode_notify_setflags = 0x0000000000000000
mpo_vnode_notify_setmode = 0x0000000000000000
mpo_vnode_notify_setowner = 0x0000000000000000
mpo_vnode_notify_setutimes = 0x0000000000000000
mpo_vnode_notify_truncate = 0x0000000000000000
mpo_mbuf_label_associate_bpfdesc = 0x0000000000000000
mpo_mbuf_label_associate_ifnet = 0x0000000000000000
mpo_mbuf_label_associate_inpcb = 0x0000000000000000
mpo_mbuf_label_associate_ipq = 0x0000000000000000
mpo_mbuf_label_associate_linklayer = 0x0000000000000000
mpo_mbuf_label_associate_multicast_encap = 0x0000000000000000
mpo_mbuf_label_associate_netlayer = 0x0000000000000000
mpo_mbuf_label_associate_socket = 0x0000000000000000
mpo_mbuf_label_copy = 0x0000000000000000
mpo_mbuf_label_destroy = 0x0000000000000000
mpo_mbuf_label_init = 0x0000000000000000
mpo_mount_check_fsctl = 0xffffff7f82bcad85 (Sandbox`hook_mount_check_fsctl)
mpo_mount_check_getattr = 0x0000000000000000
mpo_mount_check_label_update = 0x0000000000000000
mpo_mount_check_mount = 0xffffff7f82bcade2 (Sandbox`hook_mount_check_mount)
mpo_mount_check_remount = 0xffffff7f82bcae8a (Sandbox`hook_mount_check_remount)
mpo_mount_check_setattr = 0x0000000000000000
mpo_mount_check_stat = 0x0000000000000000
mpo_mount_check_umount = 0xffffff7f82bcaf26 (Sandbox`hook_mount_check_umount)
mpo_mount_label_associate = 0x0000000000000000
mpo_mount_label_destroy = 0x0000000000000000
mpo_mount_label_externalize = 0x0000000000000000
mpo_mount_label_init = 0x0000000000000000
mpo_mount_label_internalize = 0x0000000000000000
mpo_netinet_fragment = 0x0000000000000000
mpo_netinet_icmp_reply = 0x0000000000000000
mpo_netinet_tcp_reply = 0x0000000000000000
mpo_pipe_check_ioctl = 0x0000000000000000
mpo_pipe_check_kqfilter = 0x0000000000000000
mpo_pipe_check_label_update = 0x0000000000000000
mpo_pipe_check_read = 0x0000000000000000
mpo_pipe_check_select = 0x0000000000000000
mpo_pipe_check_stat = 0x0000000000000000
mpo_pipe_check_write = 0x0000000000000000
mpo_pipe_label_associate = 0x0000000000000000
mpo_pipe_label_copy = 0x0000000000000000
mpo_pipe_label_destroy = 0x0000000000000000
mpo_pipe_label_externalize = 0x0000000000000000
mpo_pipe_label_init = 0x0000000000000000
mpo_pipe_label_internalize = 0x0000000000000000
mpo_pipe_label_update = 0x0000000000000000
mpo_policy_destroy = 0x0000000000000000
mpo_policy_init = 0xffffff7f82bcafe2 (Sandbox`hook_policy_init)
mpo_policy_initbsd = 0xffffff7f82bcb370 (Sandbox`hook_policy_initbsd)
mpo_policy_syscall = 0xffffff7f82bcb3ec (Sandbox`hook_policy_syscall)
mpo_system_check_sysctlbyname = 0xffffff7f82bcb554 (Sandbox`hook_system_check_sysctlbyname)
mpo_proc_check_inherit_ipc_ports = 0x0000000000000000
mpo_vnode_check_rename = 0xffffff7f82bcb70e (Sandbox`hook_vnode_check_rename)
mpo_kext_check_query = 0xffffff7f82bcbb3e (Sandbox`hook_kext_check_query)
mpo_iokit_check_nvram_get = 0xffffff7f82bcbb94 (Sandbox`hook_iokit_check_nvram_get)
mpo_iokit_check_nvram_set = 0xffffff7f82bcbc00 (Sandbox`hook_iokit_check_nvram_set)
mpo_iokit_check_nvram_delete = 0xffffff7f82bcbe70 (Sandbox`hook_iokit_check_nvram_delete)
mpo_proc_check_expose_task = 0xffffff7f82bcbedc (Sandbox`hook_proc_check_expose_task)
mpo_proc_check_set_host_special_port = 0xffffff7f82bcbf41 (Sandbox`hook_proc_check_set_host_special_port)
mpo_proc_check_set_host_exception_port = 0xffffff7f82bcbf9f (Sandbox`hook_proc_check_set_host_exception_port)
mpo_exc_action_check_exception_send = 0x0000000000000000
mpo_exc_action_label_associate = 0x0000000000000000
mpo_exc_action_label_populate = 0x0000000000000000
mpo_exc_action_label_destroy = 0x0000000000000000
mpo_exc_action_label_init = 0x0000000000000000
mpo_exc_action_label_update = 0x0000000000000000
mpo_reserved1 = 0x0000000000000000
mpo_reserved2 = 0x0000000000000000
mpo_reserved3 = 0x0000000000000000
mpo_reserved4 = 0x0000000000000000
mpo_skywalk_flow_check_connect = 0xffffff7f82bcbfee (Sandbox`hook_skywalk_flow_check_connect)
mpo_skywalk_flow_check_listen = 0xffffff7f82bcc081 (Sandbox`hook_skywalk_flow_check_listen)
mpo_posixsem_check_create = 0xffffff7f82bcc114 (Sandbox`hook_posixsem_check_create)
mpo_posixsem_check_open = 0xffffff7f82bcc1b0 (Sandbox`hook_posixsem_check_open)
mpo_posixsem_check_post = 0xffffff7f82bcc1c5 (Sandbox`hook_posixsem_check_post)
mpo_posixsem_check_unlink = 0xffffff7f82bcc238 (Sandbox`hook_posixsem_check_unlink)
mpo_posixsem_check_wait = 0xffffff7f82bcc24d (Sandbox`hook_posixsem_check_wait)
mpo_posixsem_label_associate = 0x0000000000000000
mpo_posixsem_label_destroy = 0x0000000000000000
mpo_posixsem_label_init = 0x0000000000000000
mpo_posixshm_check_create = 0xffffff7f82bcc2c0 (Sandbox`hook_posixshm_check_create)
mpo_posixshm_check_mmap = 0x0000000000000000
mpo_posixshm_check_open = 0xffffff7f82bcc328 (Sandbox`hook_posixshm_check_open)
mpo_posixshm_check_stat = 0xffffff7f82bcc3f2 (Sandbox`hook_posixshm_check_stat)
mpo_posixshm_check_truncate = 0xffffff7f82bcc45e (Sandbox`hook_posixshm_check_truncate)
mpo_posixshm_check_unlink = 0xffffff7f82bcc4ca (Sandbox`hook_posixshm_check_unlink)
mpo_posixshm_label_associate = 0x0000000000000000
mpo_posixshm_label_destroy = 0x0000000000000000
mpo_posixshm_label_init = 0x0000000000000000
mpo_proc_check_debug = 0xffffff7f82bcc536 (Sandbox`hook_proc_check_debug)
mpo_proc_check_fork = 0xffffff7f82bcc593 (Sandbox`hook_proc_check_fork)
mpo_proc_check_get_task_name = 0xffffff7f82bcc5e2 (Sandbox`hook_proc_check_get_task_name)
mpo_proc_check_get_task = 0xffffff7f82bcc63f (Sandbox`hook_proc_check_get_task)
mpo_proc_check_getaudit = 0x0000000000000000
mpo_proc_check_getauid = 0x0000000000000000
mpo_proc_check_getlcid = 0x0000000000000000
mpo_proc_check_mprotect = 0x0000000000000000
mpo_proc_check_sched = 0xffffff7f82bcc71e (Sandbox`hook_proc_check_sched)
mpo_proc_check_setaudit = 0xffffff7f82bcc77b (Sandbox`hook_proc_check_setaudit)
mpo_proc_check_setauid = 0xffffff7f82bcc7ca (Sandbox`hook_proc_check_setauid)
mpo_proc_check_setlcid = 0x0000000000000000
mpo_proc_check_signal = 0xffffff7f82bcc819 (Sandbox`hook_proc_check_signal)
mpo_proc_check_wait = 0x0000000000000000
mpo_proc_label_destroy = 0x0000000000000000
mpo_proc_label_init = 0x0000000000000000
mpo_socket_check_accept = 0x0000000000000000
mpo_socket_check_accepted = 0x0000000000000000
mpo_socket_check_bind = 0xffffff7f82bcc8a4 (Sandbox`hook_socket_check_bind)
mpo_socket_check_connect = 0xffffff7f82bcc8bc (Sandbox`hook_socket_check_connect)
mpo_socket_check_create = 0xffffff7f82bcc8ea (Sandbox`hook_socket_check_create)
mpo_socket_check_deliver = 0x0000000000000000
mpo_socket_check_kqfilter = 0x0000000000000000
mpo_socket_check_label_update = 0x0000000000000000
mpo_socket_check_listen = 0xffffff7f82bcc980 (Sandbox`hook_socket_check_listen)
mpo_socket_check_receive = 0xffffff7f82bcc99a (Sandbox`hook_socket_check_receive)
mpo_socket_check_received = 0x0000000000000000
mpo_socket_check_select = 0x0000000000000000
mpo_socket_check_send = 0xffffff7f82bcc9b4 (Sandbox`hook_socket_check_send)
mpo_socket_check_stat = 0x0000000000000000
mpo_socket_check_setsockopt = 0x0000000000000000
mpo_socket_check_getsockopt = 0x0000000000000000
mpo_socket_label_associate_accept = 0x0000000000000000
mpo_socket_label_associate = 0x0000000000000000
mpo_socket_label_copy = 0x0000000000000000
mpo_socket_label_destroy = 0x0000000000000000
mpo_socket_label_externalize = 0x0000000000000000
mpo_socket_label_init = 0x0000000000000000
mpo_socket_label_internalize = 0x0000000000000000
mpo_socket_label_update = 0x0000000000000000
mpo_socketpeer_label_associate_mbuf = 0x0000000000000000
mpo_socketpeer_label_associate_socket = 0x0000000000000000
mpo_socketpeer_label_destroy = 0x0000000000000000
mpo_socketpeer_label_externalize = 0x0000000000000000
mpo_socketpeer_label_init = 0x0000000000000000
mpo_system_check_acct = 0xffffff7f82bcc9ce (Sandbox`hook_system_check_acct)
mpo_system_check_audit = 0xffffff7f82bcca1d (Sandbox`hook_system_check_audit)
mpo_system_check_auditctl = 0xffffff7f82bcca6c (Sandbox`hook_system_check_auditctl)
mpo_system_check_auditon = 0xffffff7f82bccabb (Sandbox`hook_system_check_auditon)
mpo_system_check_host_priv = 0xffffff7f82bccb0a (Sandbox`hook_system_check_host_priv)
mpo_system_check_nfsd = 0xffffff7f82bccb5f (Sandbox`hook_system_check_nfsd)
mpo_system_check_reboot = 0xffffff7f82bccbae (Sandbox`hook_system_check_reboot)
mpo_system_check_settime = 0xffffff7f82bccc0c (Sandbox`hook_system_check_settime)
mpo_system_check_swapoff = 0xffffff7f82bccc5b (Sandbox`hook_system_check_swapoff)
mpo_system_check_swapon = 0xffffff7f82bcccaa (Sandbox`hook_system_check_swapon)
mpo_socket_check_ioctl = 0xffffff7f82bcccf9 (Sandbox`hook_socket_check_ioctl)
mpo_sysvmsg_label_associate = 0x0000000000000000
mpo_sysvmsg_label_destroy = 0x0000000000000000
mpo_sysvmsg_label_init = 0x0000000000000000
mpo_sysvmsg_label_recycle = 0x0000000000000000
mpo_sysvmsq_check_enqueue = 0xffffff7f82bcce02 (Sandbox`hook_sysvmsq_check_enqueue)
mpo_sysvmsq_check_msgrcv = 0xffffff7f82bcce51 (Sandbox`hook_sysvmsq_check_msgrcv)
mpo_sysvmsq_check_msgrmid = 0xffffff7f82bccea0 (Sandbox`hook_sysvmsq_check_msgrmid)
mpo_sysvmsq_check_msqctl = 0xffffff7f82bcceef (Sandbox`hook_sysvmsq_check_msqctl)
mpo_sysvmsq_check_msqget = 0xffffff7f82bccf3e (Sandbox`hook_sysvmsq_check_msqget)
mpo_sysvmsq_check_msqrcv = 0xffffff7f82bccf8d (Sandbox`hook_sysvmsq_check_msqrcv)
mpo_sysvmsq_check_msqsnd = 0xffffff7f82bccfdc (Sandbox`hook_sysvmsq_check_msqsnd)
mpo_sysvmsq_label_associate = 0x0000000000000000
mpo_sysvmsq_label_destroy = 0x0000000000000000
mpo_sysvmsq_label_init = 0x0000000000000000
mpo_sysvmsq_label_recycle = 0x0000000000000000
mpo_sysvsem_check_semctl = 0xffffff7f82bcd02b (Sandbox`hook_sysvsem_check_semctl)
mpo_sysvsem_check_semget = 0xffffff7f82bcd07a (Sandbox`hook_sysvsem_check_semget)
mpo_sysvsem_check_semop = 0xffffff7f82bcd0c9 (Sandbox`hook_sysvsem_check_semop)
mpo_sysvsem_label_associate = 0x0000000000000000
mpo_sysvsem_label_destroy = 0x0000000000000000
mpo_sysvsem_label_init = 0x0000000000000000
mpo_sysvsem_label_recycle = 0x0000000000000000
mpo_sysvshm_check_shmat = 0xffffff7f82bcd118 (Sandbox`hook_sysvshm_check_shmat)
mpo_sysvshm_check_shmctl = 0xffffff7f82bcd167 (Sandbox`hook_sysvshm_check_shmctl)
mpo_sysvshm_check_shmdt = 0xffffff7f82bcd1b6 (Sandbox`hook_sysvshm_check_shmdt)
mpo_sysvshm_check_shmget = 0xffffff7f82bcd205 (Sandbox`hook_sysvshm_check_shmget)
mpo_sysvshm_label_associate = 0x0000000000000000
mpo_sysvshm_label_destroy = 0x0000000000000000
mpo_sysvshm_label_init = 0x0000000000000000
mpo_sysvshm_label_recycle = 0x0000000000000000
mpo_proc_notify_exit = 0xffffff7f82bcd254 (Sandbox`hook_proc_notify_exit)
mpo_mount_check_snapshot_revert = 0xffffff7f82bcd25e (Sandbox`hook_mount_check_snapshot_revert)
mpo_vnode_check_getattr = 0xffffff7f82bcd2d9 (Sandbox`hook_vnode_check_getattr)
mpo_mount_check_snapshot_create = 0xffffff7f82bcd461 (Sandbox`hook_mount_check_snapshot_create)
mpo_mount_check_snapshot_delete = 0xffffff7f82bcd4dc (Sandbox`hook_mount_check_snapshot_delete)
mpo_vnode_check_clone = 0xffffff7f82bcd557 (Sandbox`hook_vnode_check_clone)
mpo_proc_check_get_cs_info = 0xffffff7f82bcd75d (Sandbox`hook_proc_check_get_cs_info)
mpo_proc_check_set_cs_info = 0xffffff7f82bcd809 (Sandbox`hook_proc_check_set_cs_info)
mpo_iokit_check_hid_control = 0xffffff7f82bcd866 (Sandbox`hook_iokit_check_hid_control)
mpo_vnode_check_access = 0xffffff7f82bcd8b5 (Sandbox`hook_vnode_check_access)
mpo_vnode_check_chdir = 0x0000000000000000
mpo_vnode_check_chroot = 0xffffff7f82bcd9c8 (Sandbox`hook_vnode_check_chroot)
mpo_vnode_check_create = 0xffffff7f82bcda32 (Sandbox`hook_vnode_check_create)
mpo_vnode_check_deleteextattr = 0xffffff7f82bcdbf9 (Sandbox`hook_vnode_check_deleteextattr)
mpo_vnode_check_exchangedata = 0xffffff7f82bcdc83 (Sandbox`hook_vnode_check_exchangedata)
mpo_vnode_check_exec = 0xffffff7f82bcddb9 (Sandbox`hook_vnode_check_exec)
mpo_vnode_check_getattrlist = 0xffffff7f82bcdf67 (Sandbox`hook_vnode_check_getattrlist)
mpo_vnode_check_getextattr = 0xffffff7f82bcdfd1 (Sandbox`hook_vnode_check_getextattr)
mpo_vnode_check_ioctl = 0xffffff7f82bce044 (Sandbox`hook_vnode_check_ioctl)
mpo_vnode_check_kqfilter = 0x0000000000000000
mpo_vnode_check_label_update = 0x0000000000000000
mpo_vnode_check_link = 0xffffff7f82bce18f (Sandbox`hook_vnode_check_link)
mpo_vnode_check_listextattr = 0xffffff7f82bce43d (Sandbox`hook_vnode_check_listextattr)
mpo_vnode_check_lookup = 0x0000000000000000
mpo_vnode_check_open = 0xffffff7f82bce4a7 (Sandbox`hook_vnode_check_open)
mpo_vnode_check_read = 0x0000000000000000
mpo_vnode_check_readdir = 0x0000000000000000
mpo_vnode_check_readlink = 0xffffff7f82bce56d (Sandbox`hook_vnode_check_readlink)
mpo_vnode_check_rename_from = 0x0000000000000000
mpo_vnode_check_rename_to = 0x0000000000000000
mpo_vnode_check_revoke = 0xffffff7f82bce5d7 (Sandbox`hook_vnode_check_revoke)
mpo_vnode_check_select = 0x0000000000000000
mpo_vnode_check_setattrlist = 0xffffff7f82bce641 (Sandbox`hook_vnode_check_setattrlist)
mpo_vnode_check_setextattr = 0xffffff7f82bce7c6 (Sandbox`hook_vnode_check_setextattr)
mpo_vnode_check_setflags = 0xffffff7f82bce850 (Sandbox`hook_vnode_check_setflags)
mpo_vnode_check_setmode = 0xffffff7f82bce902 (Sandbox`hook_vnode_check_setmode)
mpo_vnode_check_setowner = 0xffffff7f82bcea5e (Sandbox`hook_vnode_check_setowner)
mpo_vnode_check_setutimes = 0xffffff7f82bceac8 (Sandbox`hook_vnode_check_setutimes)
mpo_vnode_check_stat = 0xffffff7f82bceb2c (Sandbox`hook_vnode_check_stat)
mpo_vnode_check_truncate = 0xffffff7f82bceb96 (Sandbox`hook_vnode_check_truncate)
mpo_vnode_check_unlink = 0xffffff7f82bcec00 (Sandbox`hook_vnode_check_unlink)
mpo_vnode_check_write = 0x0000000000000000
mpo_vnode_label_associate_devfs = 0x0000000000000000
mpo_vnode_label_associate_extattr = 0x0000000000000000
mpo_vnode_label_associate_file = 0x0000000000000000
mpo_vnode_label_associate_pipe = 0x0000000000000000
mpo_vnode_label_associate_posixsem = 0x0000000000000000
mpo_vnode_label_associate_posixshm = 0x0000000000000000
mpo_vnode_label_associate_singlelabel = 0x0000000000000000
mpo_vnode_label_associate_socket = 0x0000000000000000
mpo_vnode_label_copy = 0x0000000000000000
mpo_vnode_label_destroy = 0x0000000000000000
mpo_vnode_label_externalize_audit = 0x0000000000000000
mpo_vnode_label_externalize = 0x0000000000000000
mpo_vnode_label_init = 0x0000000000000000
mpo_vnode_label_internalize = 0x0000000000000000
mpo_vnode_label_recycle = 0x0000000000000000
mpo_vnode_label_store = 0x0000000000000000
mpo_vnode_label_update_extattr = 0x0000000000000000
mpo_vnode_label_update = 0x0000000000000000
mpo_vnode_notify_create = 0xffffff7f82bced16 (Sandbox`hook_vnode_notify_create)
mpo_vnode_check_signature = 0x0000000000000000
mpo_vnode_check_uipc_bind = 0xffffff7f82bcf0bc (Sandbox`hook_vnode_check_uipc_bind)
mpo_vnode_check_uipc_connect = 0xffffff7f82bcf130 (Sandbox`hook_vnode_check_uipc_connect)
mpo_proc_check_run_cs_invalid = 0x0000000000000000
mpo_proc_check_suspend_resume = 0xffffff7f82bcf1aa (Sandbox`hook_proc_check_suspend_resume)
mpo_thread_userret = 0xffffff7f82bcf1f9 (Sandbox`hook_thread_userret)
mpo_iokit_check_set_properties = 0xffffff7f82bcf20f (Sandbox`hook_iokit_check_set_properties)
mpo_system_check_chud = 0xffffff7f82bcf25e (Sandbox`hook_system_check_chud)
mpo_vnode_check_searchfs = 0xffffff7f82bcf2ad (Sandbox`hook_vnode_check_searchfs)
mpo_priv_check = 0xffffff7f82bcf317 (Sandbox`hook_priv_check)
mpo_priv_grant = 0xffffff7f82bcf374 (Sandbox`hook_priv_grant)
mpo_proc_check_map_anon = 0xffffff7f82bcf3e3 (Sandbox`hook_proc_check_map_anon)
mpo_vnode_check_fsgetpath = 0xffffff7f82bcf461 (Sandbox`hook_vnode_check_fsgetpath)
mpo_iokit_check_open = 0xffffff7f82bcf4cb (Sandbox`hook_iokit_check_open)
mpo_proc_check_ledger = 0x0000000000000000
mpo_vnode_notify_rename = 0xffffff7f82bcf528 (Sandbox`hook_vnode_notify_rename)
mpo_vnode_check_setacl = 0xffffff7f82bcf588 (Sandbox`hook_vnode_check_setacl)
mpo_vnode_notify_deleteextattr = 0x0000000000000000
mpo_system_check_kas_info = 0xffffff7f82bcf5f2 (Sandbox`hook_system_check_kas_info)
mpo_vnode_check_lookup_preflight = 0xffffff7f82bcf718 (Sandbox`hook_vnode_check_lookup_preflight)
mpo_vnode_notify_open = 0x0000000000000000
mpo_system_check_info = 0xffffff7f82bcf787 (Sandbox`hook_system_check_info)
mpo_pty_notify_grant = 0xffffff7f82bcf7e4 (Sandbox`hook_pty_notify_grant)
mpo_pty_notify_close = 0xffffff7f82bcfa42 (Sandbox`hook_pty_notify_close)
mpo_vnode_find_sigs = 0x0000000000000000
mpo_kext_check_load = 0xffffff7f82bcfbd4 (Sandbox`hook_kext_check_load)
mpo_kext_check_unload = 0xffffff7f82bcfc31 (Sandbox`hook_kext_check_unload)
mpo_proc_check_proc_info = 0xffffff7f82bcfc8e (Sandbox`hook_proc_check_proc_info)
mpo_vnode_notify_link = 0x0000000000000000
mpo_iokit_check_filter_properties = 0xffffff7f82bcfd2b (Sandbox`hook_iokit_check_filter_properties)
mpo_iokit_check_get_property = 0xffffff7f82bcfd5a (Sandbox`hook_iokit_check_get_property)
}