X-Git-Url: https://code.delx.au/refind/blobdiff_plain/1e45a07f1a4521411ccd61dffe00e7ceebd38824..7c8edbc48e5df2c1f20968dd4949703621252297:/refind.conf-sample

diff --git a/refind.conf-sample b/refind.conf-sample
index abab655..a1c57b5 100644
--- a/refind.conf-sample
+++ b/refind.conf-sample
@@ -46,6 +46,7 @@ timeout 20
 # Default is "icons".
 #
 #icons_dir myicons
+#icons_dir icons/snowy
 
 # Use a custom title banner instead of the rEFInd icon and name. The file
 # path is relative to the directory where refind.efi is located. The color
@@ -55,6 +56,7 @@ timeout 20
 #
 #banner hostname.bmp
 #banner mybanner.png
+#banner icons/snowy/banner-snowy.png
 
 # Specify how to handle banners that aren't exactly the same as the screen
 # size:
@@ -169,6 +171,8 @@ timeout 20
 #                     (see also the windows_recovery_files option)
 #  mok_tool         - makes available the Machine Owner Key (MOK) maintenance
 #                     tool, MokManager.efi, used on Secure Boot systems
+#  csr_rotate       - adjusts Apple System Integrity Protection (SIP)
+#                     policy. Requires "csr_values" to be set.
 #  about            - an "about this program" option
 #  exit             - a tag to exit from rEFInd
 #  shutdown         - shuts down the computer (a bug causes this to reboot
@@ -179,7 +183,7 @@ timeout 20
 #  netboot          - launch the ipxe.efi tool for network (PXE) booting
 # Default is shell,memtest,gdisk,apple_recovery,windows_recovery,mok_tool,about,shutdown,reboot,firmware
 #
-#showtools shell, gdisk, memtest, mok_tool, about, reboot, exit, firmware
+#showtools shell, gdisk, memtest, mok_tool, apple_recovery, windows_recovery, about, reboot, exit, firmware
 
 # Boot loaders that can launch a Windows restore or emergency system.
 # These tend to be OEM-specific.
@@ -369,6 +373,37 @@ timeout 20
 #
 #enable_and_lock_vmx false
 
+# Tell a Mac's EFI that OS X is about to be launched, even when it's not.
+# This option causes some Macs to initialize their hardware differently than
+# when a third-party OS is launched normally. In some cases (particularly on
+# Macs with multiple video cards), using this option can cause hardware to
+# work that would not otherwise work. On the other hand, using this option
+# when it is not necessary can cause hardware (such as keyboards and mice) to
+# become inaccessible. Therefore, you should not enable this option if your
+# non-Apple OSes work correctly; enable it only if you have problems with
+# some hardware devices. When needed, a value of "10.9" usually works, but
+# you can experiment with other values. This feature has no effect on
+# non-Apple computers.
+# The default is inactive (no OS X spoofing is done).
+#
+#spoof_osx_version 10.9
+
+# Set the CSR values for Apple's System Integrity Protection (SIP) feature.
+# Values are one-byte (two-character) hexadecimal numbers. These values
+# define which specific security features are enabled. Below are the codes
+# for what the values mean. Add them up (in hexadecimal!) to set new values.
+# Apple's "csrutil enable" and "csrutil disable" commands set values of 10
+# and 77, respectively.
+#   CSR_ALLOW_UNTRUSTED_KEXTS       0x01
+#   CSR_ALLOW_UNRESTRICTED_FS       0x02
+#   CSR_ALLOW_TASK_FOR_PID          0x04
+#   CSR_ALLOW_KERNEL_DEBUGGER       0x08
+#   CSR_ALLOW_APPLE_INTERNAL        0x10
+#   CSR_ALLOW_UNRESTRICTED_DTRACE   0x20
+#   CSR_ALLOW_UNRESTRICTED_NVRAM    0x40
+#
+#csr_values 10,77
+
 # Include a secondary configuration file within this one. This secondary
 # file is loaded as if its options appeared at the point of the "include"
 # token itself, so if you want to override a setting in the main file,