firewallmacosopen sourcepfctl
I have looked here: https://github.com/apple/darwin-xnu
But all i can find is the 'back end' for the pfctl tool, but i am interested in the command-line pfctl tool itself, the option parser and so on.
Has Apple released source code for this or documented it in a manual page for 10.14.1?
Depending what version of SEDarwin you are looking for here is a website that might help you.
SEDarwin Downloads
If satisfied with the answer to mark it as completed do the above :):
SIP is exposed to the file handler code as a new "restricted" class flag ACL as if it were stored in the file system metadata, so the code required to prevent all writes would be fairly transparent to implement so that all other packages would just get an enoperm error if my suspicions are correct.
You are correct that we don't have a source dump yet for 10.11 so I reserve the right to be totally wrong about my suspicions.
Best Answer
A path name embedded in the
pfctlexecutable on my Mojave system:suggests that it's part of a "PacketFilter" package which Apple hasn't released.
However, this filename suggests that the tool is very similar (if not identical) to the OpenBSD utility of the same name.